admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 17:04:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-06T07:00:11.398170+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-06 07:04:03 +00:00
1 parent 5245229ceb
commit af4828943c
31 files changed
+2029 -16
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2021/CVE-2021-472xx/CVE-2021-47295.json
+30 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-47295",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-05-21T15:15:17.400",
"lastModified": "2025-04-02T14:47:33.430",
"vulnStatus": "Analyzed",
"lastModified": "2025-12-06T05:16:40.880",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -95,6 +95,34 @@
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/01d0d2b8b4e3cf2110baba9371c0c3d04ad5c77b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/18c3fa7a7fdbb4d21dafc8a7710ae2c1680930f6",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/372ae77cf11d11fb118cbe2d37def9dd5f826abd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/3abebc503a5148072052c229c6b04b329a420ecd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/53af9c793f644d5841d84d8e0ad83bd7ab47f3e0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7a6fb69bbcb21e9ce13bdf18c008c268874f0480",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/7c183dc0af472dec33d2c0786a5e356baa8cad19",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8d7924ce85bae64e7a67c366c7c50840f49f3a62",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
CVE-2025/CVE-2025-120xx/CVE-2025-12091.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12091",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:48.990",
"lastModified": "2025-12-06T06:15:48.990",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Search, Filters & Merchandising for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcis_save_email' endpoint in all versions up to, and including, 3.0.63. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate the plugin."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/instantsearch-for-woocommerce/tags/3.0.64/public/wcis_plugin.php#L1074",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/instantsearch-for-woocommerce/trunk/public/wcis_plugin.php#L1074",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/daa8f941-6e87-4b94-8526-f73770fe6f82?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-125xx/CVE-2025-12505.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-12505",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T05:16:43.790",
"lastModified": "2025-12-06T05:16:43.790",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14. This is due to the plugin not properly verifying that a user is authorized to perform an action in the create_item_permissions_check function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global plugin settings."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/weDevsOfficial/wedocs-plugin/blob/develop/includes/API/SettingsApi.php",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/wedocs/tags/2.1.13/includes/API/SettingsApi.php#L115",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/wedocs/tags/2.1.13/includes/API/SettingsApi.php#L179",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3403375%40wedocs%2Ftrunk&old=3382516%40wedocs%2Ftrunk&sfp_email=&sfph_mail=",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ec54ec6-0ff1-4290-85d0-d691a1832627?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-125xx/CVE-2025-12574.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12574",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:49.903",
"lastModified": "2025-12-06T06:15:49.903",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Listar \u2013 Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the '/wp-json/listar/v1/place/delete' REST API endpoint in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/listar-directory-listing/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/33b98bee-7f33-4d49-96e1-9a1eafc92bb3?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-125xx/CVE-2025-12577.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12577",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.070",
"lastModified": "2025-12-06T06:15:50.070",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Listar \u2013 Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-json/listar/v1/place/save' REST API endpoint in all versions up to, and including, 3.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update listing details."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/listar-directory-listing/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a063fab3-6d52-4f2a-b51f-b76fa2d4711c?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-126xx/CVE-2025-12673.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-12673",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.233",
"lastModified": "2025-12-06T06:15:50.233",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://github.com/d0n601/CVE-2025-12673",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/flex-qr-code-generator/trunk/qr-code-generator.php#L457",
"source": "[email protected]"
},
{
"url": "https://ryankozak.com/posts/cve-2025-12673/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3d71404e-0db8-485b-a626-5e0df2076c05?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-127xx/CVE-2025-12715.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12715",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.397",
"lastModified": "2025-12-06T06:15:50.397",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Canadian Nutrition Facts Label plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'percentage' field in the Nutrition Label custom post type in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/canadian-nutrition-facts-label/tags/3.0/canadian-nutrition-facts-label.php#L557",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/950e5d04-1436-4886-8d36-fca38bd9414a?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-127xx/CVE-2025-12717.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12717",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.563",
"lastModified": "2025-12-06T06:15:50.563",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The List Attachments Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_list' parameter in the [list-attachments] shortcode in all versions up to, and including, 0.4.1a due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/list-attachments-shortcode/tags/0.6a/class-list-attachments-shortcode.php#L47",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/list-attachments-shortcode/tags/0.6a/class-list-attachments-shortcode.php#L85",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a67b4ec2-b337-478f-aaaa-2ce19c4deb4c?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-127xx/CVE-2025-12720.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-12720",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.730",
"lastModified": "2025-12-06T06:15:50.730",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The g-FFL Cockpit plugin for WordPress is vulnerable to unauthorized modification of data due to IP-based authorization that can be spoofed in the handle_enqueue_only() function in all versions up to, and including, 1.7.1. This makes it possible for unauthenticated attackers to delete arbitrary products."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"references": [
{
"url": "https://github.com/d0n601/CVE-2025-12720",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/g-ffl-cockpit/trunk/includes/class-update-processor.php#L634",
"source": "[email protected]"
},
{
"url": "https://ryankozak.com/posts/cve-2025-12720/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3405974d-cf0a-4fef-9693-5d81833f42d6?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-127xx/CVE-2025-12721.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-12721",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:50.900",
"lastModified": "2025-12-06T06:15:50.900",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The g-FFL Cockpit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.1 via the /server_status REST API endpoint due to a lack of capability checks. This makes it possible for unauthenticated attackers to extract information about the server."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://github.com/d0n601/CVE-2025-12721",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/g-ffl-cockpit/trunk/includes/class-sync-endpoint.php#L1385",
"source": "[email protected]"
},
{
"url": "https://ryankozak.com/posts/cve-2025-12721/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2fd8c981-081c-4671-ad1e-3caf004669dd?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-131xx/CVE-2025-13137.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-13137",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.067",
"lastModified": "2025-12-06T06:15:51.067",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Live Sales Notification for Woocommerce \u2013 Woomotiv plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woomotiv_limit' parameter in all versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/woomotiv/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/19257e49-addb-4882-af5f-8de0d90a4a86?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-132xx/CVE-2025-13292.json
+78
View File
@@ -0,0 +1,78 @@
{
"id": "CVE-2025-13292",
"sourceIdentifier": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
"published": "2025-12-06T05:16:44.110",
"lastModified": "2025-12-06T05:16:44.110",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizations.\n\nApigee-X was found to be vulnerable.\n\nThis vulnerability was patched in version\u00a01-16-0-apigee-3.\u00a0No user action is required for this."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Clear",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "CLEAR"
}
}
]
},
"weaknesses": [
{
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://docs.cloud.google.com/apigee/docs/release-notes#October_16_2025",
"source": "f45cbf4e-4146-4068-b7e1-655ffc2c548c"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13308.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13308",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.240",
"lastModified": "2025-12-06T06:15:51.240",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Application Passwords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'reject_url' parameter in all versions up to, and including, 0.1.3. This is due to insufficient input sanitization and output escaping on user supplied URLs, which allows javascript: URI schemes to be embedded in the reject_url parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute when a user clicks the \"No, I do not approve of this connection\" button, granted they can successfully trick the victim into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/application-passwords/tags/0.1.3/auth-app.js#L61",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/application-passwords/tags/0.1.3/class.application-passwords.php#L418",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/application-passwords/tags/0.1.3/class.application-passwords.php#L432",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/59fdfdf3-e9fe-44d2-82f4-7a612a51d376?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13309.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13309",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.403",
"lastModified": "2025-12-06T06:15:51.403",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Accessiy By CodeConfig Accessibility \u2013 Easy One-Click Accessibility Toolbar That Truly Matters plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers with subscriber-level access and above to modify the plugin\u2019s global accessibility settings."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/trunk/includes/Ajax.php#L19",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/trunk/includes/Ajax/Settings.php#L23",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/trunk/includes/Enqueue.php#L135",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3344e72-1dd6-45ec-b699-d755589a1566?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13358.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-13358",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.580",
"lastModified": "2025-12-06T06:15:51.580",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing authorization checks in versions up to, and including, 1.0.0. This is due to the plugin not performing capability checks in the `Settings::createPage()` function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary published pages on the site via the `ccpcaCreatePage` AJAX action."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/tags/1.0.0/includes/Ajax.php#L24",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/tags/1.0.0/includes/Ajax/Settings.php#L96",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/trunk/includes/Ajax.php#L24",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/codeconfig-accessibility/trunk/includes/Ajax/Settings.php#L96",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fe324d4d-eb52-4eeb-ad91-072a6e84d9ba?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13626.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13626",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.760",
"lastModified": "2025-12-06T06:15:51.760",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The myLCO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/mylco/tags/0.8.1/myLCO.php#L438",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/mylco/trunk/myLCO.php#L438",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/mylco",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/132efd40-1c90-4d2a-a87c-504526b7a7d4?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13629.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13629",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:51.927",
"lastModified": "2025-12-06T06:15:51.927",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The WP Landing Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. This is due to missing nonce validation on the 'wplp_api_update_text' function. This makes it possible for unauthenticated attackers to update arbitrary post meta via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/wp-landing-page/tags/0.9.3/includes/wplp-api.php#L14",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/wp-landing-page/trunk/includes/wplp-api.php#L14",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/43d8576b-e6ad-4e0a-b99f-948ba36f53ff?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13656.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13656",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.097",
"lastModified": "2025-12-06T06:15:52.097",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Cute News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'color' shortcode attribute in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/cute-news-ticker/tags/1.0/main-function.php#L60",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/cute-news-ticker/trunk/main-function.php#L60",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/cute-news-ticker/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/92f53507-4475-401b-b57c-f6652a868be9?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13666.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13666",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.267",
"lastModified": "2025-12-06T06:15:52.267",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Helloprint plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.2. This is due to the plugin registering a public REST API endpoint without implementing authorization checks to verify request authenticity. This makes it possible for unauthenticated attackers to arbitrarily modify WooCommerce order statuses via the /wp-json/helloprint/v1/complete_order_from_helloprint_callback endpoint by providing a valid order reference ID."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/helloprint/tags/2.1.2/includes/Base/Controllers/Admin/OrderController.php#L48",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/helloprint/trunk/includes/Base/Controllers/Admin/OrderController.php#L48",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4b07ed75-6ee3-4a1a-b165-439a9135b059?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13856.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13856",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.453",
"lastModified": "2025-12-06T06:15:52.453",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Extra Post Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the extra-images shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/extra-post-images/tags/1.0/epi.php#L101",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/extra-post-images/tags/1.0/epi.php#L92",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/extra-post-images/trunk/epi.php#L92",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c5fbb963-f89d-4037-9456-8587bcf5d620?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13857.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13857",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.633",
"lastModified": "2025-12-06T06:15:52.633",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Yet Another WebClap for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' parameter of the webclap_button shortcode in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/yet-another-webclap-for-wordpress/tags/0.2/yawebclap.php#L28",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/yet-another-webclap-for-wordpress/trunk/yawebclap.php#L28",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ca50e5e7-be46-40f1-9782-a72ca8ab7e9a?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13863.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13863",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.807",
"lastModified": "2025-12-06T06:15:52.807",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The RevInsite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `token` parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/revinsite/tags/1.1.0/revinsite.php#L25",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/revinsite/trunk/revinsite.php#L25",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c52de26a-d52c-4b2e-8e51-731115d29bd0?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13894.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-13894",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:52.987",
"lastModified": "2025-12-06T06:15:52.987",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The CSV Sumotto plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` variable in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/csv-sumotto/trunk/csv_sumotto_settings.php#L53",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e6aa8089-1c29-41ef-b2c0-06841751f7a5?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13896.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-13896",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:53.160",
"lastModified": "2025-12-06T06:15:53.160",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Social Feed Gallery Portfolio plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [igp-wp] shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/social-feed-gallery-portfolio/tags/1.3/includes/public/class-portfolio-shortcode.php#L208",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/social-feed-gallery-portfolio/tags/1.3/includes/public/class-portfolio-shortcode.php#L58",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/social-feed-gallery-portfolio/trunk/includes/public/class-portfolio-shortcode.php#L208",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/social-feed-gallery-portfolio/trunk/includes/public/class-portfolio-shortcode.php#L58",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2a275deb-a0e3-491a-bed6-9f6112918061?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13898.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-13898",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:53.347",
"lastModified": "2025-12-06T06:15:53.347",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Ultra Skype Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_id' parameter of the [ultra_skype] shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/ultra-skype-button/tags/1.0/index.php#L39",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/ultra-skype-button/tags/1.0/index.php#L44",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/ultra-skype-button/trunk/index.php#L39",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/ultra-skype-button/trunk/index.php#L44",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/20b3c88f-a0df-4814-83b6-27440c5ad38e?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13899.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13899",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:53.537",
"lastModified": "2025-12-06T06:15:53.537",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The TR Timthumb plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/tr-timthumb/tags/1.0.4/inc/front.php#L39",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/tr-timthumb/trunk/inc/front.php#L39",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/675bf571-eb8b-4c72-9852-b3a2b37b9a04?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-139xx/CVE-2025-13907.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13907",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:53.727",
"lastModified": "2025-12-06T06:15:53.727",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The CSS3 Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/css3-buttons/tags/0.1/css3-buttons.php#L59",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/css3-buttons/trunk/css3-buttons.php#L59",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c1f71ffb-f09c-40f6-b65e-af30ce155466?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-139xx/CVE-2025-13922.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13922",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T05:16:44.397",
"lastModified": "2025-12-06T05:16:44.397",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Tag, Category, and Taxonomy Manager \u2013 AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'existing_terms_orderby' parameter in the AI preview AJAX endpoint in all versions up to, and including, 3.40.1. This is due to insufficient escaping on user-supplied parameters and lack of SQL query parameterization. This makes it possible for authenticated attackers, with Contributor-level access and above who have AI metabox permissions, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database, cause performance degradation, or enable data inference through time-based techniques."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/simple-tags/tags/3.40.1/inc/class.admin.php#L1406",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/simple-tags/tags/3.40.1/modules/taxopress-ai/classes/TaxoPressAiAjax.php#L180",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3408243%40simple-tags%2Ftrunk&old=3388829%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=#file17",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f40cc632-c6af-4c8b-a455-76319f7fe151?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-141xx/CVE-2025-14117.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-14117",
"sourceIdentifier": "[email protected]",
"published": "2025-12-06T06:15:53.913",
"lastModified": "2025-12-06T06:15:53.913",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
},
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://blksword.flowus.cn/",
"source": "[email protected]"
},
{
"url": "https://github.com/BlkSword/POC",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.334494",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.334494",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.697391",
"source": "[email protected]"
}
]
}
README.md
+31 -9
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-06T05:00:11.464935+00:00
2025-12-06T07:00:11.398170+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-06T04:15:47.380000+00:00
2025-12-06T06:15:53.913000+00:00
```
### Last Data Feed Release
@@ -33,23 +33,45 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
320379
320407
```
### CVEs added in the last Commit
Recently added CVEs: `2`
Recently added CVEs: `28`
- [CVE-2025-11263](CVE-2025/CVE-2025-112xx/CVE-2025-11263.json) (`2025-12-06T04:15:46.113`)
- [CVE-2025-12510](CVE-2025/CVE-2025-125xx/CVE-2025-12510.json) (`2025-12-06T04:15:47.183`)
- [CVE-2025-12577](CVE-2025/CVE-2025-125xx/CVE-2025-12577.json) (`2025-12-06T06:15:50.070`)
- [CVE-2025-12673](CVE-2025/CVE-2025-126xx/CVE-2025-12673.json) (`2025-12-06T06:15:50.233`)
- [CVE-2025-12715](CVE-2025/CVE-2025-127xx/CVE-2025-12715.json) (`2025-12-06T06:15:50.397`)
- [CVE-2025-12717](CVE-2025/CVE-2025-127xx/CVE-2025-12717.json) (`2025-12-06T06:15:50.563`)
- [CVE-2025-12720](CVE-2025/CVE-2025-127xx/CVE-2025-12720.json) (`2025-12-06T06:15:50.730`)
- [CVE-2025-12721](CVE-2025/CVE-2025-127xx/CVE-2025-12721.json) (`2025-12-06T06:15:50.900`)
- [CVE-2025-13137](CVE-2025/CVE-2025-131xx/CVE-2025-13137.json) (`2025-12-06T06:15:51.067`)
- [CVE-2025-13292](CVE-2025/CVE-2025-132xx/CVE-2025-13292.json) (`2025-12-06T05:16:44.110`)
- [CVE-2025-13308](CVE-2025/CVE-2025-133xx/CVE-2025-13308.json) (`2025-12-06T06:15:51.240`)
- [CVE-2025-13309](CVE-2025/CVE-2025-133xx/CVE-2025-13309.json) (`2025-12-06T06:15:51.403`)
- [CVE-2025-13358](CVE-2025/CVE-2025-133xx/CVE-2025-13358.json) (`2025-12-06T06:15:51.580`)
- [CVE-2025-13626](CVE-2025/CVE-2025-136xx/CVE-2025-13626.json) (`2025-12-06T06:15:51.760`)
- [CVE-2025-13629](CVE-2025/CVE-2025-136xx/CVE-2025-13629.json) (`2025-12-06T06:15:51.927`)
- [CVE-2025-13656](CVE-2025/CVE-2025-136xx/CVE-2025-13656.json) (`2025-12-06T06:15:52.097`)
- [CVE-2025-13666](CVE-2025/CVE-2025-136xx/CVE-2025-13666.json) (`2025-12-06T06:15:52.267`)
- [CVE-2025-13856](CVE-2025/CVE-2025-138xx/CVE-2025-13856.json) (`2025-12-06T06:15:52.453`)
- [CVE-2025-13857](CVE-2025/CVE-2025-138xx/CVE-2025-13857.json) (`2025-12-06T06:15:52.633`)
- [CVE-2025-13863](CVE-2025/CVE-2025-138xx/CVE-2025-13863.json) (`2025-12-06T06:15:52.807`)
- [CVE-2025-13894](CVE-2025/CVE-2025-138xx/CVE-2025-13894.json) (`2025-12-06T06:15:52.987`)
- [CVE-2025-13896](CVE-2025/CVE-2025-138xx/CVE-2025-13896.json) (`2025-12-06T06:15:53.160`)
- [CVE-2025-13898](CVE-2025/CVE-2025-138xx/CVE-2025-13898.json) (`2025-12-06T06:15:53.347`)
- [CVE-2025-13899](CVE-2025/CVE-2025-138xx/CVE-2025-13899.json) (`2025-12-06T06:15:53.537`)
- [CVE-2025-13907](CVE-2025/CVE-2025-139xx/CVE-2025-13907.json) (`2025-12-06T06:15:53.727`)
- [CVE-2025-13922](CVE-2025/CVE-2025-139xx/CVE-2025-13922.json) (`2025-12-06T05:16:44.397`)
- [CVE-2025-14117](CVE-2025/CVE-2025-141xx/CVE-2025-14117.json) (`2025-12-06T06:15:53.913`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
Recently modified CVEs: `1`
- [CVE-2025-59820](CVE-2025/CVE-2025-598xx/CVE-2025-59820.json) (`2025-12-06T03:15:59.583`)
- [CVE-2025-65844](CVE-2025/CVE-2025-658xx/CVE-2025-65844.json) (`2025-12-06T04:15:47.380`)
- [CVE-2021-47295](CVE-2021/CVE-2021-472xx/CVE-2021-47295.json) (`2025-12-06T05:16:40.880`)
## Download and Usage
_state.csv
+33 -5
View File
@@ -188013,7 +188013,7 @@ CVE-2021-47291,0,0,3ee6b1a1fad370dded2d6eb5285eb6a73b96982cb06c18803b8e7843844cf
CVE-2021-47292,0,0,63c98ff4a7da021ae7ccc327b4ad90dd6b9f9f6a2210655afcc8467dda120255,2024-12-23T16:58:26.957000
CVE-2021-47293,0,0,5624500e5044ffd7a360c68a816465433ecae8fbab48613db55b2a44a09ac7da,2025-05-07T17:51:27.357000
CVE-2021-47294,0,0,b347789049077880cdc209e7576354ebd240df0f1ba69c547e570009e1fb599a,2025-06-23T20:19:04.490000
CVE-2021-47295,0,0,789e761b8d27f465f0bb9d0536cd67080748f166c5fbed45f4d9052c7b1ab42c,2025-04-02T14:47:33.430000
CVE-2021-47295,0,1,975f45a1aa4c7c89f267c8f308ae9602257a9a0cd7074dd62d97899cc8ddb911,2025-12-06T05:16:40.880000
CVE-2021-47296,0,0,b72d0897def28470468eacdb5cb690253b401bf8983aaa04d483030bbdfb00ea,2025-06-23T20:19:54.287000
CVE-2021-47297,0,0,8d3767f49dc369155ede7a747b035298067c5e4e1c3f659433e207b0ee8bbb13,2025-04-02T14:42:58.820000
CVE-2021-47298,0,0,3272555661916384da5707a33dc94b4ff91a4406d7ac2d83ddfd785978dc68b9,2024-12-23T16:39:18.313000
@@ -286781,7 +286781,7 @@ CVE-2025-11256,0,0,77b7648fd0dded75aead154cd2028fdc8495d0af337e223a1563e3b3de167
CVE-2025-11257,0,0,b8283588f5c48bfdf5b0b51ab3c80858ef004a1b057a834f1391913fef11ce0d,2025-10-27T13:20:15.637000
CVE-2025-1126,0,0,75a0af68b2de42873e4ee33ccd68bb162ec9dabf122dea8ebb0bf11a24b953a1,2025-02-11T17:15:23.537000
CVE-2025-11260,0,0,fc3aadad389155443bdedba367b73d38be6eb53b0f56a5a6ac6f938109986ba7,2025-11-14T16:42:03.187000
CVE-2025-11263,1,1,92735208a725b60bfe30b466cc984d2270332c79729676cac0c375cd2f6cda4c,2025-12-06T04:15:46.113000
CVE-2025-11263,0,0,92735208a725b60bfe30b466cc984d2270332c79729676cac0c375cd2f6cda4c,2025-12-06T04:15:46.113000
CVE-2025-11265,0,0,a896500672336f3b5c7c3c4264e6e05837f85dc1f4681b8a4ef046d11905716a,2025-11-18T14:06:29.817000
CVE-2025-11267,0,0,2cd7cfc0a3fa8b4cc0cf9fcaee20001279d9dc267b626b1242a0a3c04a0ac93a,2025-11-18T14:06:29.817000
CVE-2025-11268,0,0,c553e800bdc49c1c23b9f84090d3b913eec5f45072bc223e555b5287fb5871c2,2025-11-06T19:45:09.883000
@@ -287541,6 +287541,7 @@ CVE-2025-12088,0,0,864f770d464915105b2e150c367648a33ce65f28a7c3abd6b3794ddb115a9
CVE-2025-12089,0,0,938f46d72cb2f0488bd8cfcadc8487543a44354e194637c10de8ecdd72d18b4a,2025-11-14T16:42:03.187000
CVE-2025-1209,0,0,73163c928794f026d7174c939dfacce9c8a62bab67c5de9237fcf3ce185d0ff4,2025-02-19T19:04:43.770000
CVE-2025-12090,0,0,6802923a493917528d70c28f4d3dac08d3853e2027cd8f5197f9f6f1b98d09fe,2025-11-04T15:41:31.450000
CVE-2025-12091,1,1,8bef8c9220569b9e5d2023570d8be8c80e7037221026f51aef1d99f7d6f3c11c,2025-12-06T06:15:48.990000
CVE-2025-12092,0,0,aa5eefb4a202281e8ebe34cd6eabde47403482fb01c5273c1aaab90f90f6e032,2025-11-12T16:19:59.103000
CVE-2025-12093,0,0,81c6b2006930c94d0fb4b00cf20d0eaa51a78d87a0be16cc17c26598ca88abb2,2025-12-05T07:16:08.347000
CVE-2025-12094,0,0,f6ae5efab396afba71aaae60e68b83f6cadb0ab8d7334df653b1ef443e4b7c38,2025-11-04T15:41:31.450000
@@ -287921,10 +287922,11 @@ CVE-2025-1250,0,0,948f8f8504fb4e6039d5daa9421aaf6329f46c4cdc22875f0ce19678fe699b
CVE-2025-12501,0,0,4045381515e6057e94a39334f3f87bc03a4fd6f54306916fa2dc0af2df20d075,2025-11-04T15:41:31.450000
CVE-2025-12502,0,0,64add2cf2842b613fc6f34cbfc0bad22d5983355dcdf47ec5a92f98917e9e976,2025-11-21T15:13:59.083000
CVE-2025-12503,0,0,85603a997af78bf4281099ba8202363620cebbb02ffe8183fb56c0311b7c3823,2025-11-04T15:41:31.450000
CVE-2025-12505,1,1,a8f4981895ad08de1c55ac8da9d94fd317895e5ae827a1460698240236d474bb,2025-12-06T05:16:43.790000
CVE-2025-12507,0,0,b7275a816f751af82d2a9bdedf7ffebe34ad5315f135e4b30532eafb79d20a35,2025-11-04T15:41:31.450000
CVE-2025-12508,0,0,adb51b60b1d01443b5d66745b66d036ad768d600e706ddb0a44a204e621e2c08,2025-11-04T15:41:31.450000
CVE-2025-12509,0,0,d9f2f9b04d4b2ccbcf65abb417ba1bde7356b1444d3c91315fd503033c6d7067,2025-11-04T15:41:31.450000
CVE-2025-12510,1,1,df154f41e1c5d03fa5193f32709f7d7ff7c1bc21b6654811272a1f3e2fe16daf,2025-12-06T04:15:47.183000
CVE-2025-12510,0,0,df154f41e1c5d03fa5193f32709f7d7ff7c1bc21b6654811272a1f3e2fe16daf,2025-12-06T04:15:47.183000
CVE-2025-12515,0,0,78840dffcc821c52aa7029422ba5b79ddc7946bfc852622a66b37c6fb56297c4,2025-11-10T14:53:32.310000
CVE-2025-12516,0,0,c5d395b54eb718d94bbe6ea47a7a1c75669d9476e1d4e51ab300c3b56bca7bfc,2025-11-10T14:53:01.227000
CVE-2025-12517,0,0,c579b3bc012ddf70abe36e582791dcb593e56dc46d14e08294761b921ad7460f,2025-11-10T14:51:37.207000
@@ -287962,6 +287964,8 @@ CVE-2025-12563,0,0,cc71ccbcb3e6a76f73f6605880245371ee051df1ec25b959e33d0b4f0d097
CVE-2025-12569,0,0,dcb8e8879a9b427d93415e95a5286f9baabae40370b9510d460cd2bf217e233b,2025-11-25T22:16:16.690000
CVE-2025-1257,0,0,05d8edb7ee3cea569d0f878192fce84d7acf522bc66c1f37e161f00a8a0bb7a8,2025-08-08T01:07:44.687000
CVE-2025-12571,0,0,b67502d85a4c869a4eab985e18e892441c8623df66c57c4a96dab86e34d6f8fa,2025-12-02T20:33:34.590000
CVE-2025-12574,1,1,91443df7543d06af1f42538b5df42cc4f441a339024bee4ae30db2096e0bb1f2,2025-12-06T06:15:49.903000
CVE-2025-12577,1,1,b6a4c9c401f2d217b95d58343fbc393e18cc3ccfe070df9f6839157969e1c910,2025-12-06T06:15:50.070000
CVE-2025-12578,0,0,ef6ca4ee40e7091035b665c1de38aacee3126caba7fa1b961c0bd514cfadf66e,2025-12-01T15:39:33.110000
CVE-2025-12579,0,0,7b66181052f68179e12f887831d39ed4f37d277e9e11fa6f291c84fae9023d5c,2025-12-01T15:39:33.110000
CVE-2025-1258,0,0,e60d49e74992453b0cd2d8b93f0bc7a60901e2447adb1d6d0cde7627e3bb44f5,2025-02-20T18:15:26.217000
@@ -288049,6 +288053,7 @@ CVE-2025-1267,0,0,8185c9604ff0d1aa86b9cea920d82bd8037570ce9b9b7776f5513234b5775e
CVE-2025-12670,0,0,3309797a9885f351fe3cd9139a47d7a75dead2e725ea02be8243f6f6de9b379e,2025-12-01T15:39:33.110000
CVE-2025-12671,0,0,0a4abb63caa52549b8ece485552ca49ad70fd4af1f3664ebf15505fa02d678a7,2025-11-12T16:19:34.210000
CVE-2025-12672,0,0,b306145e849e6a22808dbfe57367d38ed4fd2371d8fa8c54136a0b737bc836c2,2025-11-12T16:19:34.210000
CVE-2025-12673,1,1,498286303ad360055f4d818b3ef484001b0ec768a1e9c204a6f7ae80b1e449f9,2025-12-06T06:15:50.233000
CVE-2025-12674,0,0,91a0ebc5ec071a9ec6f19cabb4188f4d6b716b191e0c3235b24991b11e7f252a,2025-11-06T19:45:30.990000
CVE-2025-12675,0,0,7672d5fadd8f12ddd8680c855c48c0ca14eb0f52dd8f6eaafce399959cf56aeb,2025-11-06T19:45:30.990000
CVE-2025-12676,0,0,db6d80491d7a412004113bce46de62725b1a59b9d67e97fadb62a23f31526a7f,2025-11-06T19:45:30.990000
@@ -288068,6 +288073,10 @@ CVE-2025-12710,0,0,1d98c818e94ce4c052a727debb50d23e177c8fa491f163113374be1d452ba
CVE-2025-12711,0,0,5c8c33dd13b0e86a8e1f8a718a7ca696e2ea5435c9b24584cbb0366862d51200,2025-11-12T16:19:34.210000
CVE-2025-12712,0,0,0e1e3b577382ae7a2c3955e4cfe72ed2554359212f37e9e6e615e11332662d16,2025-12-01T15:39:33.110000
CVE-2025-12713,0,0,4ef986ab925a2c6ff75fd8a9179c8c6114aad736c3115b10029bc6c7b25f4990,2025-12-01T15:39:33.110000
CVE-2025-12715,1,1,3809a301764d3208196d66343b998f070d25d4d2e394b705dfbfb9025bfb1e7f,2025-12-06T06:15:50.397000
CVE-2025-12717,1,1,28c55ebae2c1b92b48a5eeb1a8d86f01eb484dae2c7c2db6085a2cac0c1bc61b,2025-12-06T06:15:50.563000
CVE-2025-12720,1,1,6544d35e4e1a0b334f67a9238297e1fb800f2aa3d3505ad46b13da0a49a347b4,2025-12-06T06:15:50.730000
CVE-2025-12721,1,1,2e434b1034ff79ed1c6ee8f834e7f2691a1f71ef2c3f739cec50b134ecefd740,2025-12-06T06:15:50.900000
CVE-2025-12725,0,0,42dcc91a19021eb1352795460e73048b13df4e08c074cad313b26637637fd34b,2025-11-25T15:05:54.730000
CVE-2025-12726,0,0,0df946d55892d026b0b285d9a2a7c6e986eb47cf0ffa070880a345bd0447aa2c,2025-11-25T15:02:18.580000
CVE-2025-12727,0,0,18093c5d14dceafd92aff949484f876d056263db078ceef86545c7303c7b33f2,2025-11-25T14:53:03.100000
@@ -288351,6 +288360,7 @@ CVE-2025-13133,0,0,ef748d7f0a3398984b83b50a3cdded3e65cd2818a552516a63fd13a102d54
CVE-2025-13134,0,0,87da400279d04f30a459a38a1c0c229cc662631cf5fe7ef9a4ba6145e83960d2,2025-11-21T15:13:13.800000
CVE-2025-13135,0,0,63266f2704dd37d72f68f87e5c8d99324fee162820baca805db1306e3c7cbc6c,2025-11-21T15:13:13.800000
CVE-2025-13136,0,0,18fc3f31493472d11dd2712b55f64cb5937bf483de78c1fc0658f3ecf4aa92f3,2025-11-25T22:16:42.557000
CVE-2025-13137,1,1,54d803fb386e5aca5d3c1b6af2dd05c5b470373ce0b276d2038393d812a1cd7c,2025-12-06T06:15:51.067000
CVE-2025-13138,0,0,15fbc8e490561fcba8585556e767a1d76b7a8b0bc74d4e9a2b2f331fdf401c78,2025-11-21T15:13:13.800000
CVE-2025-1314,0,0,bafad489ff1eadbb41395d6cf3743ce464b25bb7da82ca4e71ee61d8353e849a,2025-03-20T06:15:22.437000
CVE-2025-13140,0,0,625818e09fffb094601a2195f0ea8311ddf99c1275f53a6f615c1932a4ecec8c,2025-12-02T17:16:29.163000
@@ -288486,6 +288496,7 @@ CVE-2025-13289,0,0,74042b175be01ed1f0ac20df1cb3de4fa0a7ed1a245678394ddfe1af9ee60
CVE-2025-1329,0,0,f0ae0ca3a9c8dfd08bbf3af3eafcbf638e06757e3a12c46d6b79af7a8a193835,2025-06-05T14:30:37.943000
CVE-2025-13290,0,0,b99611410f7a91574d4656a12a639b6445656f3b5ea87d765df77c33d5d4291f,2025-11-19T13:10:03.257000
CVE-2025-13291,0,0,f252ee41195cc28d902b6bcf908cf937c84b4ad764ac0543e65e8454d612473d,2025-11-19T13:09:52.813000
CVE-2025-13292,1,1,d51695102e424339f32728a630e4d986064ece55157b17a9436da6311c513a0c,2025-12-06T05:16:44.110000
CVE-2025-13295,0,0,eeefb8696786d3e990028b9591e9fa5f717d481dd8ebbfeda6e96750f1f1c9dd,2025-12-02T17:16:29.163000
CVE-2025-13296,0,0,010b71b60535d496edb43301a881feb29fb21001c073885d12112cc3497a34f3,2025-12-01T15:39:33.110000
CVE-2025-13297,0,0,3ab55af12053dab4579199bf77b928c5f8abb5fefb9a9d4a074e2f8fc61be14a,2025-11-20T20:23:24.450000
@@ -288499,6 +288510,8 @@ CVE-2025-13303,0,0,7a77e1efcfab310b1cb0c134acf0b1f7c772de83cb4796a9f4fb57073519d
CVE-2025-13304,0,0,d9e4c1e05c6b48c701b862f346a4360af1adbe23ff0cd5d83db0982a8088782b,2025-11-18T17:15:59.707000
CVE-2025-13305,0,0,812746f38deae9d139b8f6716b88d64e79f1fd06b06b36cecfefdac13696344b,2025-11-18T15:16:26.957000
CVE-2025-13306,0,0,cadc4f1066d4003e55c2127f7ce0caf22a3e0614d7fbc8a5a03a66eb20c4b493,2025-11-18T17:15:59.897000
CVE-2025-13308,1,1,c4ee5df8a33a5e6c112ae16b2e63e5472de3604c490dab6200704ce597c22c87,2025-12-06T06:15:51.240000
CVE-2025-13309,1,1,380bd110406964d6129f1047df0219da692a33ab213382fc8bd1c74c4d7d7d4a,2025-12-06T06:15:51.403000
CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000
CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000
CVE-2025-13311,0,0,9a5976f398da3cabb69223c3f2701caa9facaa03b617561ec543872ab1a0c282,2025-11-25T22:16:16.690000
@@ -288527,6 +288540,7 @@ CVE-2025-1335,0,0,564364b2f61e7747ac590848e7f26fbef6a8ec644fa7858b0ae594d6c732e9
CVE-2025-13353,0,0,1d61aa8b400d68d4c9f2d21016222c4c2322878fc8cc16ba1ebf330ff7baa361,2025-12-02T17:16:29.163000
CVE-2025-13354,0,0,4c514fc7e5d2b3f789001ec3b2c378661789172072e8887593699bdfb72b534a,2025-12-05T18:41:56.647000
CVE-2025-13357,0,0,ac9e3505b482c6441452693fcf9ee1cb16984baf418348bfe0eac270f229e3f2,2025-11-25T22:16:42.557000
CVE-2025-13358,1,1,e8effe21ecd835aab9f1d8d37b108d20021585f13e48ce648f17111664ab6f80,2025-12-06T06:15:51.580000
CVE-2025-13359,0,0,761209decc6d6eff118ceeb4ef2e6bef333d9e75de346b50c1c9a0e9a6ac220b,2025-12-05T18:37:12.593000
CVE-2025-1336,0,0,5bb81efefa47b6b10a748758c689250ae0a85244c2bc3fa4b57d2310008c62b3,2025-02-28T19:55:19.603000
CVE-2025-13360,0,0,eb7e3badbd8fab5a24c75d1116fa2d43d9e47e2697fc3b25d9e640aa73d8ccf2,2025-12-05T06:16:07.563000
@@ -288695,6 +288709,8 @@ CVE-2025-13621,0,0,6a0ec989d6dd730c063bb865b0c47e894a1d9763993fdf785de09daf77f8e
CVE-2025-13622,0,0,6492d25895bdf74b84c6dffd0cef8cae6e5ec35cc0ce8d2723e10caefbe0032c,2025-12-05T06:16:08.233000
CVE-2025-13623,0,0,e98009407bd63358bc80e0b90c50f30374572acade5d61eccc6ae013d2ad23eb,2025-12-05T06:16:08.400000
CVE-2025-13625,0,0,be949dc9eca33b1e6e9f55db67d38436757570faeec36ebd29ce5160a95060eb,2025-12-05T06:16:08.563000
CVE-2025-13626,1,1,89a4479020d3224e8cdd9d9b30b76ec35a0e2edb3160bbdc8271852fab722d9c,2025-12-06T06:15:51.760000
CVE-2025-13629,1,1,aac3b625cb9b2ce60aca64f08dfb936ddbf20d229b90fc65fa8f65fad549aac9,2025-12-06T06:15:51.927000
CVE-2025-1363,0,0,5ef0e630eb65fc9fde4bf7834b0bc1238fb20723c9b2f8f7080acc6a649d8f4e,2025-05-21T17:02:28.650000
CVE-2025-13630,0,0,f87480141f58ed850609fec318c98802a12b9112ef0e8e5a4406dc22c2dae369,2025-12-04T19:59:59.043000
CVE-2025-13631,0,0,ce30c7bb20112771d1a5ea0091f18ab8659ba892c94b85ac552880dc810cfcf5,2025-12-04T19:59:37.260000
@@ -288715,8 +288731,10 @@ CVE-2025-13646,0,0,e32de925998474f70cc3fd968a5816f7301a7b233453b35b8d63a2963fab5
CVE-2025-1365,0,0,55f7dfa0bade2739abc462d0dd1be32537a6360e2a69511b23a5767e8c117cb7,2025-11-04T20:07:34.117000
CVE-2025-13653,0,0,4e8f71f2cd84ad78822c7d769fa80cd31bc62206803593063337fbcf2aea329e,2025-12-02T17:16:29.163000
CVE-2025-13654,0,0,aeef57bdbeed84da933c611f355f746ed089067442dea59e67bc3b498cc61f7a,2025-12-05T20:15:54.213000
CVE-2025-13656,1,1,9f0e0da6ffdf2223589dc4e900b6ddb463ec276e46633ac9db08e1aa05a62110,2025-12-06T06:15:52.097000
CVE-2025-13658,0,0,222be5002281bb12f5205077bef85d2d64c0613b66bc7dbfe1525d709c384e50,2025-12-04T17:15:08.283000
CVE-2025-1366,0,0,b5ea7ed8688cf47f431666cd6eb95262f341f451246295286dee98e7ec6f798a,2025-10-09T20:44:47.797000
CVE-2025-13666,1,1,98a2b3ca12ebccc073fbc27f4d654a64bbb40f5f62351de3bb75af0090a312b5,2025-12-06T06:15:52.267000
CVE-2025-1367,0,0,be2af0ac582e5ab97208ad342acc7ce8a63bb0539c316ea33d8d4cc331759352,2025-06-27T17:46:00.413000
CVE-2025-13674,0,0,409c7a3b0209e21cda5ee97ee6cb701a92605503aa016cbdd56f0d7122573c56,2025-12-03T19:37:17.280000
CVE-2025-13675,0,0,ec339a49132a39f20cd72f977d1dc3cf543111e33d8538276e43e15b4631ec18,2025-12-01T15:39:33.110000
@@ -288803,8 +288821,11 @@ CVE-2025-13836,0,0,b1ae702ccacf7d1d18051fa7571d4450f014e7a36a0fcb32036d7a5fc7e3c
CVE-2025-13837,0,0,ae528259d83bec41c9b820e3726c22184a8c764ac6d876b01f4b46086e72524f,2025-12-02T18:15:47.697000
CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000
CVE-2025-1385,0,0,cd0488ff01f383d9bed7e9dfcd438a68752b6f1d05d46ab0fe46ec06da7cead8,2025-03-20T08:15:11.723000
CVE-2025-13856,1,1,5876097eee18e012ce0fe4a3f610c654ae9d13178c658c9bf3643052587099f8,2025-12-06T06:15:52.453000
CVE-2025-13857,1,1,d363e3e20532a2852a3bd3e17d80a50bae83ca1b7c4d5e88e878b726ffe8fe8b,2025-12-06T06:15:52.633000
CVE-2025-1386,0,0,1e2bc83eeb339828b23f6854fed3e26712eaf84d02859537da20d28063a18e14,2025-04-11T16:15:19.490000
CVE-2025-13860,0,0,a6463fe22ff99ef532f2f10eeb208e0202c50b97245ab5978a991fb34acf1f77,2025-12-05T06:16:08.730000
CVE-2025-13863,1,1,7e4faacb15e20ff8dbefdd6987ec67b080f811f5ef63463c7ec59539403820fa,2025-12-06T06:15:52.807000
CVE-2025-1387,0,0,5564d87fa88af058bd0202692e11ba9d91b174326d18038dd52c07bb732ab611,2025-11-17T13:50:14.113000
CVE-2025-13870,0,0,46551502bb08551f4391d26f290a615459428696325bf2852169a0eb7bc10fdc,2025-12-03T20:57:20.907000
CVE-2025-13871,0,0,3a7482f27ff7455c63d3f3681133d194bb135c55ff36f2446d9013c9aee15481,2025-12-04T17:54:28.767000
@@ -288816,9 +288837,15 @@ CVE-2025-13877,0,0,831d566dec37d123174554484ac0dc3ad360d2cf85ac8ea38a67952b4cfcd
CVE-2025-13879,0,0,d755ed632c6cd3d39c2f1a5093f587a75e33012a8730feef9829bcf8deb2895c,2025-12-02T17:16:29.163000
CVE-2025-1388,0,0,9b3eab56e4521a0da4a341376f47de6df8405c0e2be2647b896d716ed39f79fd,2025-11-17T13:49:26.427000
CVE-2025-1389,0,0,7f69e2bd46879c18f98316de97f97a5bd759b5698d41e5560a94e2453403b499,2025-11-17T13:48:16.930000
CVE-2025-13894,1,1,fc1bfb7b397a6e6d237ec0bd9a96cb4855838ff12873b71dbadaa877506b156e,2025-12-06T06:15:52.987000
CVE-2025-13896,1,1,c76bc1654f36467c00dedebca5f4e50c61eada27521b5c9ac644673b154d98e3,2025-12-06T06:15:53.160000
CVE-2025-13898,1,1,b941f33c9532111d621d7827d0e854329de7098738c33b36910cb314384742ec,2025-12-06T06:15:53.347000
CVE-2025-13899,1,1,07e8b3caa204e3f9369ac5710b34fc7ec70c964608f3e34875680e64c907a8a9,2025-12-06T06:15:53.537000
CVE-2025-1390,0,0,d6f078e733c9fc0d4a095dec24cc32eec849eba6d34f7dd2ac292f7ddda5fa94,2025-02-18T03:15:10.447000
CVE-2025-13907,1,1,530c1f1682319bc95450e17058e84c89f02c3a21cd3c06d539dcf20936492060,2025-12-06T06:15:53.727000
CVE-2025-1391,0,0,92923563d5f6ebe7489c1cf297a79c50e1a9d080a96d841d79358c408c639ed2,2025-03-10T19:15:39.860000
CVE-2025-1392,0,0,0edccaa049f5e6881402c6772eeeb1c415751b419e55975e8780c9e97d8f3003,2025-07-16T14:26:19.947000
CVE-2025-13922,1,1,c4916ca22808b2f73adc20434fab750bc275f98681c899b3c62ec1438ce7402b,2025-12-06T05:16:44.397000
CVE-2025-1393,0,0,1a18b9780d45efd3906fabb9eb91bce6e4d37c3f3f1f9128e55d743057ba1663,2025-03-05T08:15:35.107000
CVE-2025-13932,0,0,e5518a9128dec9c69c3aa65ea7543a70cf742308c7754154a2ba2ac9cab12637,2025-12-04T22:15:47.353000
CVE-2025-13936,0,0,e90f6a40788ddf17b59d58ed60e1d288bfecda17d81ac92b82ff4f4f91770f15,2025-12-04T22:15:47.520000
@@ -288877,6 +288904,7 @@ CVE-2025-14108,0,0,bf350774f59455defde31a8b7c6d15f99be53cc8114f2b66cf5b27e61e856
CVE-2025-1411,0,0,35b395371ebad83be15ebbb60037abd1427c5969e68788fd6765895a3cc9fa4f,2025-08-11T18:46:59.513000
CVE-2025-14111,0,0,6a61b6449729c2b0f58a4c19440952f05e6e7ad4b93c6f786374a51218b11389,2025-12-05T23:15:46.643000
CVE-2025-14116,0,0,d3a1ed3c61449be458d0e5e2e857ea8df4f11870e8f9a3f6b69798b62f94739d,2025-12-05T23:15:47.207000
CVE-2025-14117,1,1,003b0f3133049c20c15d82a87bd91df104c6745b21416b0957cc151143da5062,2025-12-06T06:15:53.913000
CVE-2025-1412,0,0,ab83c5af6f01924af0a328d6d40b4975026f7ce3e92a35512774e43a6d2de68d,2025-10-01T18:02:32.873000
CVE-2025-1413,0,0,59f92ca72941298d69f3caedbcfa54483a8592393ee86ea3b8b54852e9b7a0e1,2025-10-03T09:15:36.733000
CVE-2025-1414,0,0,3a97550374709a951d5410aaca1ecbf1ee05e0ec13bcab848c3fdf8c74845735,2025-03-28T19:05:18.850000
@@ -314396,7 +314424,7 @@ CVE-2025-59815,0,0,4b5027bd3032cfbcc2db3998a9b8e05c04f046958e2cf97f95182b18eddbd
CVE-2025-59816,0,0,0f65807e79b5de8791ed5cbb2674e6a3b46c34deae78a7e1a6089fdd1707e54b,2025-09-26T14:32:19.853000
CVE-2025-59817,0,0,e10c3cd114e416d3c552c0dc23ed6f97c97c2922a0f0ab9dee395b02ee3cce2d,2025-09-26T14:32:19.853000
CVE-2025-5982,0,0,d8aaac7624ef6b343b1d273eb44a02d83df24595fbd6261248dc2f7645001779,2025-08-12T13:07:39.247000
CVE-2025-59820,0,1,3a672cb0ddd28a546e3e9c6a52ebfd29615dfe4b354614bcd24e4e4b4a98b201,2025-12-06T03:15:59.583000
CVE-2025-59820,0,0,3a672cb0ddd28a546e3e9c6a52ebfd29615dfe4b354614bcd24e4e4b4a98b201,2025-12-06T03:15:59.583000
CVE-2025-59821,0,0,5ac429b5d1566cd6f59ce8f15c7ccf776bf5b0455ebd160640fe7cba5323e958,2025-09-29T12:58:27.157000
CVE-2025-59822,0,0,f86eaa10d679ce336059d318f22c81524e24ea80e7bd6ea9922a8484876ab22d,2025-10-08T17:35:04.200000
CVE-2025-59823,0,0,43622d1b5744c59976e35ce4eddb26ca332c84ed04e78a2a6a34a9dabdbbcc71,2025-09-26T14:32:53.583000
@@ -317089,7 +317117,7 @@ CVE-2025-65840,0,0,da81bdb14e871149a7970149d114b6b288623e792909d981213597e0cfc0a
CVE-2025-65841,0,0,32b46ff75fad8c8170c4b6ed0d539d7cb6f654942e98213e48cc488a3097499e,2025-12-05T19:15:48.827000
CVE-2025-65842,0,0,e0785db71477c1d1f841179d935d847706d779224997e51d3f40c25a617d550c,2025-12-05T20:15:58.413000
CVE-2025-65843,0,0,974104da66fa71cf754af304bd80e95f7b5a3593e9c62382de237347097dc0d5,2025-12-04T17:15:08.283000
CVE-2025-65844,0,1,a26aea44f1db4aa437f21a99c336da7d63af3e9c95b2a2e4ed1c3709139551e1,2025-12-06T04:15:47.380000
CVE-2025-65844,0,0,a26aea44f1db4aa437f21a99c336da7d63af3e9c95b2a2e4ed1c3709139551e1,2025-12-06T04:15:47.380000
CVE-2025-6585,0,0,adaeb58e3fc188fc0fb17f0bed47098a1fe39a13212ef121d20fafda41da95ad,2025-07-22T13:05:40.573000
CVE-2025-65858,0,0,2ea3927b759950c411c20f704e65d5cde072b25d474df3c11b33fb34b9c320fa,2025-12-02T17:16:29.163000
CVE-2025-6586,0,0,a2a31cfde8036131bb5246db3ae2c6f244bcc91b479b47ff60159df89464e964,2025-07-09T17:50:13.847000
Can't render this file because it is too large.