admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-28 02:20:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-11-06T21:00:12.788416+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-11-06 21:01:38 +00:00
1 parent 9756db73cd
commit b10a28598a
392 files changed
+5859 -1296
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2019/CVE-2019-72xx/CVE-2019-7238.json
+4 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7238",
"sourceIdentifier": "[email protected]",
"published": "2019-03-21T17:29:01.180",
"lastModified": "2025-11-06T16:57:54.323",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-11-06T19:56:24.450",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -109,10 +109,10 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sonatype:nexus_repository_manager_3:*:*:*:*:*:*:*:*",
"criteria": "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.15.0",
"matchCriteriaId": "BACB2CB2-2429-44B0-AAAD-B1E71BD22DC9"
"matchCriteriaId": "EF8EDA37-CC64-4809-A188-22993589D794"
}
]
}
CVE-2020/CVE-2020-368xx/CVE-2020-36866.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2020-36866",
"sourceIdentifier": "[email protected]",
"published": "2025-10-30T22:15:39.563",
"lastModified": "2025-11-05T18:23:42.027",
"vulnStatus": "Analyzed",
"lastModified": "2025-11-06T20:15:36.333",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Nagios XI versions prior to\u00a05.7.2\u00a0are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser."
"value": "Nagios XI versions prior to\u00a05.7.3\u00a0are vulnerable to cross-site scripting (XSS) via the Manage Users page of the Admin interface. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser."
}
],
"metrics": {
CVE-2021/CVE-2021-476xx/CVE-2021-47698.json
+3 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2021-47698",
"sourceIdentifier": "[email protected]",
"published": "2025-11-03T22:15:53.100",
"lastModified": "2025-11-04T15:41:31.450",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:15:36.567",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Nagios XI versions prior to\u00a05.8.7\u00a0using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via\u00a0the Core UI\u2019s Views URL handling. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser."
"value": "Nagios XI versions prior to\u00a05.8.7\u00a0using embedded Nagios Core are vulnerable to cross-site scripting (XSS) via\u00a0the Core UI\u2019s Views URL handling (escape_string()). Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser."
}
],
"metrics": {
CVE-2022/CVE-2022-505xx/CVE-2022-50589.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2022-50589",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:36.787",
"lastModified": "2025-11-06T20:15:36.787",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the\u00a0processing of the \u2018uid\u2019 parameter within the \u2018export\u2019 functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/06/09/salesagility-suitecrm-export-request-sql-injection-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://docs.suitecrm.com/admin/releases/7.12.x/#_7_12_6",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/suitecrm-sqli-via-export-functionality",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50590.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2022-50590",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:36.990",
"lastModified": "2025-11-06T20:15:36.990",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "SuiteCRM versions prior to 7.12.6 contain a type confusion vulnerability within the\u00a0processing of the \u2018module\u2019 parameter within the \u2018deleteAttachment\u2019 functionality. Successful exploitation allows remote unauthenticated attackers to alter database objects including changing the email address of the administrator."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-843"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/06/09/salesagility-suitecrm-deleteattachment-type-confusion-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://docs.suitecrm.com/admin/releases/7.12.x/#_7_12_6",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/suitecrm-type-confusion-via-deleteattachment-functionality",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50591.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2022-50591",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.173",
"lastModified": "2025-11-06T20:15:37.173",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Advantech iView versions prior to v5.7.04 build 6425\u00a0contain a vulnerability within the SNMP management tool\u00a0that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the \u2018ztp_config_id\u2019 parameter to the \u2018NetworkServlet\u2019 endpoint. Successful exploitation allows for the exfiltration of user data, included clear text passwords."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/03/01/advantech-iview-ztp_config_id-parameter-sql-injection-information-disclosure-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://www.advantech.tw/support/details/firmware?id=1-HIPU-183",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/advantech-iview-ztpconfigid-parameter-sqli-information-disclosure",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50592.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2022-50592",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.373",
"lastModified": "2025-11-06T20:15:37.373",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Advantech iView versions prior to v5.7.04 build 6425\u00a0contain a vulnerability within the SNMP management tool\u00a0that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the \u2018getInventoryReportData\u2019 parameter to the \u2018NetworkServlet\u2019 endpoint. Successful exploitation allows for remote code execution with administrator privileges."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/03/01/advantech-iview-getinventoryreportdata-parameter-sql-injection-information-disclosure/",
"source": "[email protected]"
},
{
"url": "https://www.advantech.tw/support/details/firmware?id=1-HIPU-183",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/advantech-iview-getinventoryreportdata-parameter-sqli-rce",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50593.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2022-50593",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.557",
"lastModified": "2025-11-06T20:15:37.557",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Advantech iView versions prior to v5.7.04 build 6425\u00a0contain a vulnerability within the SNMP management tool\u00a0that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the \u2018search_term\u2019 parameter to the \u2018NetworkServlet\u2019 endpoint. Successful exploitation allows for remote code execution with administrator privileges."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/03/01/advantech-iview-search_term-parameter-sql-injection-remote-code-execution-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://www.advantech.tw/support/details/firmware?id=1-HIPU-183",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/advantech-iview-searchterm-parameter-sqli-rce",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50594.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2022-50594",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:37.773",
"lastModified": "2025-11-06T20:15:37.773",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Advantech iView versions prior to v5.7.04 build 6425\u00a0contain a vulnerability within the SNMP management tool\u00a0that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the \u2018data\u2019 parameter to the \u2018NetworkServlet\u2019 endpoint. Successful exploitation allows for the exfiltration of user data, included clear text passwords."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/03/01/advantech-iview-page_action_service-parameter-sql-injection-remote-code-execution-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://www.advantech.tw/support/details/firmware?id=1-HIPU-183",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/advantech-iview-data-parameter-sqli-information-disclosure",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50595.json
+90
View File
@@ -0,0 +1,90 @@
{
"id": "CVE-2022-50595",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:38.070",
"lastModified": "2025-11-06T20:15:38.070",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Advantech iView versions prior to v5.7.04 build 6425\u00a0contain a vulnerability within the SNMP management tool\u00a0that allows for remote attackers to bypass authentication checks and reach a SQL injection vulnerability within the \u2018ztp_search_value\u2019 parameter to the \u2018NetworkServlet\u2019 endpoint. Successful exploitation allows for remote code execution with administrator privileges."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/03/01/advantech-iview-ztp_search_value-parameter-sql-injection-remote-code-execution-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://www.advantech.tw/support/details/firmware?id=1-HIPU-183",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/advantech-iview-ztpsearchvalue-parameter-sqli-rce",
"source": "[email protected]"
}
]
}
CVE-2022/CVE-2022-505xx/CVE-2022-50596.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2022-50596",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:40.450",
"lastModified": "2025-11-06T20:15:40.450",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05\u00a0contain a command injection vulnerability within the web management interface\u00a0that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within the SetDest/Dest/Target arguments to the GetDeviceSettings form. The management interface is accessible over HTTP and HTTPS on the local and Wi-Fi networks and optionally from the Internet."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"references": [
{
"url": "https://blog.exodusintel.com/2022/05/11/d-link-dir-1260-getdevicesettings-pre-auth-command-injection-vulnerability/",
"source": "[email protected]"
},
{
"url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10298",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/dlink-dir1260-getdevicesettings-unauthenticated-command-injection",
"source": "[email protected]"
}
]
}
CVE-2023/CVE-2023-430xx/CVE-2023-43000.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-43000",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T19:15:47.937",
"lastModified": "2025-11-05T19:15:47.937",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2024/CVE-2024-256xx/CVE-2024-25621.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2024-25621",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T19:15:40.090",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-279"
}
]
}
],
"references": [
{
"url": "https://github.com/containerd/containerd/blob/main/docs/rootless.md",
"source": "[email protected]"
},
{
"url": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5",
"source": "[email protected]"
},
{
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-527xx/CVE-2024-52782.json
+132 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-52782",
"sourceIdentifier": "[email protected]",
"published": "2024-11-29T16:15:11.163",
"lastModified": "2024-11-29T18:15:11.313",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:57:02.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -39,10 +39,139 @@
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dcnetworks:dcme-720_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "9.1.5.11",
"matchCriteriaId": "AFCFE59D-8B88-4D2A-B31B-5B95326A7DAF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dcnetworks:dcme-720:-:*:*:*:*:*:*:*",
"matchCriteriaId": "196AC09F-4CFC-4863-AEDC-8A8CED1C2D44"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dcnetworks:dcme-320-l_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "9.3.5.26",
"matchCriteriaId": "C0D18B1B-6CB1-4FDD-9455-1DFA51CA224F"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dcnetworks:dcme-320-l:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6806213-6BA4-4511-86EA-22C937E962AB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dcnetworks:dcme-320_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7.4.12.90",
"matchCriteriaId": "B7FAF203-AF23-4E9F-85B7-B4025171F2D8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dcnetworks:dcme-320:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C83218E1-F3F6-43B0-925D-F8965C159DEA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:dcnetworks:dcme-520_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "9.25.5.11",
"matchCriteriaId": "D8A290A0-02E9-4412-ACFD-155FDD138C50"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:dcnetworks:dcme-520:-:*:*:*:*:*:*:*",
"matchCriteriaId": "66170AD0-D82B-484B-96DA-9FFAB6C79DCB"
}
]
}
]
}
],
"references": [
{
"url": "https://ba1100n.tech/%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A/dcme-all-series-rcessix-one/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Broken Link"
]
}
]
}
CVE-2024/CVE-2024-564xx/CVE-2024-56426.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-56426",
"sourceIdentifier": "[email protected]",
"published": "2025-11-04T21:15:33.667",
"lastModified": "2025-11-04T22:16:04.757",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-102xx/CVE-2025-10259.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10259",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T08:15:36.640",
"lastModified": "2025-11-06T08:15:36.640",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-105xx/CVE-2025-10567.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10567",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:32.363",
"lastModified": "2025-11-05T19:15:49.137",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-106xx/CVE-2025-10622.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10622",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T08:15:32.990",
"lastModified": "2025-11-06T07:15:39.063",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-106xx/CVE-2025-10683.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10683",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T03:15:34.090",
"lastModified": "2025-11-06T03:15:34.090",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-106xx/CVE-2025-10691.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10691",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T04:15:32.177",
"lastModified": "2025-11-06T04:15:32.177",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-107xx/CVE-2025-10713.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10713",
"sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
"published": "2025-11-05T18:15:32.247",
"lastModified": "2025-11-05T18:15:32.247",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-108xx/CVE-2025-10853.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10853",
"sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
"published": "2025-11-05T20:15:32.297",
"lastModified": "2025-11-05T20:15:32.297",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-108xx/CVE-2025-10873.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10873",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:32.870",
"lastModified": "2025-11-05T19:15:49.457",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-108xx/CVE-2025-10875.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10875",
"sourceIdentifier": "[email protected]",
"published": "2025-11-04T19:17:09.160",
"lastModified": "2025-11-04T22:16:05.463",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-108xx/CVE-2025-10885.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10885",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T17:15:42.313",
"lastModified": "2025-11-06T17:15:42.313",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-109xx/CVE-2025-10907.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10907",
"sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
"published": "2025-11-05T18:15:33.347",
"lastModified": "2025-11-05T18:15:33.347",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-109xx/CVE-2025-10955.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10955",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:45.717",
"lastModified": "2025-11-06T15:15:45.717",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-110xx/CVE-2025-11072.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11072",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:32.990",
"lastModified": "2025-11-05T19:15:49.737",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-110xx/CVE-2025-11093.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11093",
"sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
"published": "2025-11-05T19:15:49.900",
"lastModified": "2025-11-05T19:15:49.900",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-111xx/CVE-2025-11162.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11162",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T05:15:41.400",
"lastModified": "2025-11-05T05:15:41.400",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-112xx/CVE-2025-11268.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11268",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T09:15:33.197",
"lastModified": "2025-11-06T09:15:33.197",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-112xx/CVE-2025-11271.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11271",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T05:15:54.917",
"lastModified": "2025-11-06T05:15:54.917",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-113xx/CVE-2025-11373.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11373",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T07:15:31.653",
"lastModified": "2025-11-05T07:15:31.653",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-117xx/CVE-2025-11745.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11745",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T12:15:32.310",
"lastModified": "2025-11-05T12:15:32.310",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-117xx/CVE-2025-11749.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11749",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.097",
"lastModified": "2025-11-05T06:15:33.097",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-118xx/CVE-2025-11820.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11820",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T10:15:34.357",
"lastModified": "2025-11-05T10:15:34.357",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-118xx/CVE-2025-11835.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11835",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T04:15:32.063",
"lastModified": "2025-11-05T04:15:32.063",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-119xx/CVE-2025-11917.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11917",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T07:15:32.073",
"lastModified": "2025-11-05T07:15:32.073",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-119xx/CVE-2025-11956.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11956",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T15:15:46.093",
"lastModified": "2025-11-06T15:15:46.093",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-119xx/CVE-2025-11987.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-11987",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T10:15:34.637",
"lastModified": "2025-11-05T10:15:34.637",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-121xx/CVE-2025-12108.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12108",
"sourceIdentifier": "[email protected]",
"published": "2025-11-04T19:17:09.740",
"lastModified": "2025-11-04T19:17:09.740",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-121xx/CVE-2025-12139.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12139",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T07:15:32.340",
"lastModified": "2025-11-05T07:15:32.340",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-121xx/CVE-2025-12192.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12192",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T10:15:35.217",
"lastModified": "2025-11-05T10:15:35.217",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-121xx/CVE-2025-12197.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12197",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T05:15:51.590",
"lastModified": "2025-11-05T05:15:51.590",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-123xx/CVE-2025-12346.json
+71 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12346",
"sourceIdentifier": "[email protected]",
"published": "2025-10-28T03:15:33.917",
"lastModified": "2025-10-30T15:05:32.197",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:05:30.040",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,24 +138,68 @@
"value": "CWE-434"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:max-3000:maxsite_cms:*:*:*:*:*:*:*:*",
"versionEndIncluding": "109",
"matchCriteriaId": "B4A5D441-BF3A-4E28-813B-298E0AE44094"
}
]
}
]
}
],
"references": [
{
"url": "https://note-hxlab.wetolink.com/share/8QmDZCddHvyR",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.330136",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.330136",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.674551",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-123xx/CVE-2025-12347.json
+71 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12347",
"sourceIdentifier": "[email protected]",
"published": "2025-10-28T03:15:34.117",
"lastModified": "2025-10-30T15:05:32.197",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:04:08.223",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,24 +138,68 @@
"value": "CWE-434"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:max-3000:maxsite_cms:*:*:*:*:*:*:*:*",
"versionEndIncluding": "109",
"matchCriteriaId": "B4A5D441-BF3A-4E28-813B-298E0AE44094"
}
]
}
]
}
],
"references": [
{
"url": "https://note-hxlab.wetolink.com/share/lIWZkTHQPSVh",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.330137",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.330137",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.674552",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-123xx/CVE-2025-12360.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12360",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T08:15:38.720",
"lastModified": "2025-11-06T08:15:38.720",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-123xx/CVE-2025-12384.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12384",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T07:15:32.570",
"lastModified": "2025-11-05T07:15:32.570",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-123xx/CVE-2025-12388.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12388",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T07:15:32.813",
"lastModified": "2025-11-05T07:15:32.813",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-124xx/CVE-2025-12468.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12468",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T10:15:35.463",
"lastModified": "2025-11-05T10:15:35.463",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-124xx/CVE-2025-12469.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12469",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T10:15:35.933",
"lastModified": "2025-11-05T10:15:35.933",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-124xx/CVE-2025-12471.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12471",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T07:15:43.510",
"lastModified": "2025-11-06T07:15:43.510",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-124xx/CVE-2025-12485.json
+26 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12485",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T17:15:42.483",
"lastModified": "2025-11-06T17:15:42.483",
"vulnStatus": "Received",
"lastModified": "2025-11-06T20:15:46.483",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
@@ -11,7 +11,30 @@
"value": "Improper privilege management during pre-MFA cookie handling in Devolutions Server 2025.3.5.0 and earlier allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie.This does not bypass the target account MFA verification step."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
CVE-2025/CVE-2025-124xx/CVE-2025-12490.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12490",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T20:15:46.643",
"lastModified": "2025-11-06T20:15:46.643",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Netgate pfSense. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the Suricata package. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create files in the context of root. Was ZDI-CAN-28085."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://github.com/pfsense/FreeBSD-ports/commit/36b2303dfca35a1183d76f26bcc6ce26d4ea682d",
"source": "[email protected]"
},
{
"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-979/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-124xx/CVE-2025-12497.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12497",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T12:15:33.347",
"lastModified": "2025-11-05T12:15:33.347",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-125xx/CVE-2025-12556.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12556",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:48.910",
"lastModified": "2025-11-06T16:15:48.910",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-125xx/CVE-2025-12560.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12560",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T06:15:44.340",
"lastModified": "2025-11-06T06:15:44.340",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-125xx/CVE-2025-12563.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12563",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T05:16:05.130",
"lastModified": "2025-11-06T05:16:05.130",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-125xx/CVE-2025-12580.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12580",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T04:15:33.040",
"lastModified": "2025-11-05T04:15:33.040",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-125xx/CVE-2025-12582.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12582",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T03:15:42.703",
"lastModified": "2025-11-05T03:15:42.703",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-126xx/CVE-2025-12674.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12674",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T08:15:33.313",
"lastModified": "2025-11-05T08:15:33.313",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-126xx/CVE-2025-12675.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12675",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T08:15:33.500",
"lastModified": "2025-11-05T08:15:33.500",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-126xx/CVE-2025-12676.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12676",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T08:15:33.680",
"lastModified": "2025-11-05T08:15:33.680",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-126xx/CVE-2025-12677.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12677",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T08:15:33.843",
"lastModified": "2025-11-05T08:15:33.843",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-127xx/CVE-2025-12735.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12735",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T01:15:33.313",
"lastModified": "2025-11-05T19:15:50.213",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-127xx/CVE-2025-12745.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12745",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T19:15:50.390",
"lastModified": "2025-11-05T20:15:34.430",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-127xx/CVE-2025-12779.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12779",
"sourceIdentifier": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
"published": "2025-11-05T22:15:33.010",
"lastModified": "2025-11-05T22:15:33.010",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-128xx/CVE-2025-12808.json
+26 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12808",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T17:15:42.610",
"lastModified": "2025-11-06T17:15:42.610",
"vulnStatus": "Received",
"lastModified": "2025-11-06T20:15:46.843",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
@@ -11,7 +11,30 @@
"value": "Improper access control in Devolutions Server 2025.3.5.0 and earlier allows a View-only user\u00a0to retrieve sensitive third-level nested fields, such as password lists custom values, resulting in password disclosure."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
CVE-2025/CVE-2025-128xx/CVE-2025-12815.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12815",
"sourceIdentifier": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
"published": "2025-11-06T18:15:39.700",
"lastModified": "2025-11-06T18:15:39.700",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-202xx/CVE-2025-20289.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20289",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:35.867",
"lastModified": "2025-11-05T17:15:35.867",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20303.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20303",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:36.737",
"lastModified": "2025-11-05T17:15:36.737",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20304.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20304",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:36.957",
"lastModified": "2025-11-05T17:15:36.957",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20305.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20305",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:37.170",
"lastModified": "2025-11-05T17:15:37.170",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20343.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20343",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:37.443",
"lastModified": "2025-11-05T17:15:37.443",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20354.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20354",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:37.743",
"lastModified": "2025-11-05T17:15:37.743",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20358.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20358",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:38.120",
"lastModified": "2025-11-05T17:15:38.120",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20374.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20374",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:38.457",
"lastModified": "2025-11-05T17:15:38.457",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20375.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20375",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:38.723",
"lastModified": "2025-11-05T17:15:38.723",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20376.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20376",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:38.953",
"lastModified": "2025-11-05T17:15:38.953",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-203xx/CVE-2025-20377.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20377",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T17:15:39.200",
"lastModified": "2025-11-05T17:15:39.200",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21071.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21071",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.337",
"lastModified": "2025-11-05T06:15:33.337",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21073.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21073",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.463",
"lastModified": "2025-11-05T06:15:33.463",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21074.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21074",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.597",
"lastModified": "2025-11-05T06:15:33.597",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21075.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21075",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.720",
"lastModified": "2025-11-05T06:15:33.720",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21076.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21076",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.840",
"lastModified": "2025-11-05T06:15:33.840",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21077.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21077",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:33.963",
"lastModified": "2025-11-05T06:15:33.963",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21078.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21078",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:34.103",
"lastModified": "2025-11-05T06:15:34.103",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-210xx/CVE-2025-21079.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21079",
"sourceIdentifier": "[email protected]",
"published": "2025-11-05T06:15:34.227",
"lastModified": "2025-11-05T06:15:34.227",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-222xx/CVE-2025-22288.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22288",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T16:15:49.647",
"lastModified": "2025-11-06T16:15:49.647",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-223xx/CVE-2025-22397.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-22397",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T19:15:41.153",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-us/000384516/dsa-2025-376-security-update-for-dell-idrac9-and-idrac10-vulnerabilities",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-233xx/CVE-2025-23358.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-23358",
"sourceIdentifier": "[email protected]",
"published": "2025-11-04T20:17:14.563",
"lastModified": "2025-11-04T20:17:14.563",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-23xx/CVE-2025-2348.json
+77 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2348",
"sourceIdentifier": "[email protected]",
"published": "2025-03-16T21:15:37.783",
"lastModified": "2025-03-16T21:15:37.783",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:43:45.457",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -63,7 +63,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
@@ -80,6 +80,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -122,20 +142,71 @@
"value": "CWE-284"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:iroadau:fx2_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-03-08",
"matchCriteriaId": "AF5D242C-FD93-4AC4-A73C-339CD59BF22E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:iroadau:fx2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E62E438-2D69-401D-B5A8-B54565CE049E"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-8-dumping-files-over-http-and-rtsp-without-authentication",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.299814",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.299814",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-23xx/CVE-2025-2349.json
+77 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2349",
"sourceIdentifier": "[email protected]",
"published": "2025-03-16T22:15:11.747",
"lastModified": "2025-03-16T22:15:11.747",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:38:09.620",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -63,7 +63,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
@@ -80,6 +80,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
],
"cvssMetricV2": [
@@ -122,20 +142,71 @@
"value": "CWE-916"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-916"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:iroadau:fx2_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-03-08",
"matchCriteriaId": "AF5D242C-FD93-4AC4-A73C-339CD59BF22E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:iroadau:fx2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E62E438-2D69-401D-B5A8-B54565CE049E"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-9-exposed-root-password",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.299815",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.299815",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-23xx/CVE-2025-2350.json
+81 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2350",
"sourceIdentifier": "[email protected]",
"published": "2025-03-16T22:15:13.023",
"lastModified": "2025-03-16T22:15:13.023",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T20:25:28.490",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -63,7 +63,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -80,6 +80,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -122,24 +142,78 @@
"value": "CWE-434"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:iroadau:fx2_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2025-03-08",
"matchCriteriaId": "AF5D242C-FD93-4AC4-A73C-339CD59BF22E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:iroadau:fx2:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8E62E438-2D69-401D-B5A8-B54565CE049E"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-10-unauthenticated-uploads",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-11-unrestricted-webshell",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.299816",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.299816",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-24xx/CVE-2025-2490.json
+77 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2490",
"sourceIdentifier": "[email protected]",
"published": "2025-03-18T14:15:46.250",
"lastModified": "2025-03-18T14:15:46.250",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T19:39:49.757",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -63,7 +63,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
@@ -80,6 +80,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -122,28 +142,77 @@
"value": "CWE-94"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ujcms:ujcms:9.7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6334DE21-F6EC-4843-B71B-CF52B38031C9"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/dromara/ujcms/issues/12",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
]
},
{
"url": "https://github.com/dromara/ujcms/issues/13",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Vendor Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.299996",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.299996",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.517267",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-264xx/CVE-2025-26497.json
+55 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-26497",
"sourceIdentifier": "[email protected]",
"published": "2025-08-22T21:15:31.330",
"lastModified": "2025-08-25T21:15:36.773",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-11-06T19:46:09.343",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,62 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2023.3.19",
"matchCriteriaId": "19541292-4BD4-4BD5-AA68-3836ECC1EBE0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2024.2",
"versionEndExcluding": "2024.2.12",
"matchCriteriaId": "4AC0483E-569A-497C-BB94-D129FACC17D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
"versionStartIncluding": "2025.1",
"versionEndExcluding": "2025.1.3",
"matchCriteriaId": "1E78711C-389B-4E20-9623-8B0CF6BBCAC8"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
}
]
}
]
}
],
"references": [
{
"url": "https://help.salesforce.com/s/articleView?id=005132575&type=1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-273xx/CVE-2025-27374.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-27374",
"sourceIdentifier": "[email protected]",
"published": "2025-11-04T21:15:36.523",
"lastModified": "2025-11-04T22:16:08.243",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:30.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-279xx/CVE-2025-27916.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-27916",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T18:15:40.473",
"lastModified": "2025-11-06T18:15:40.473",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-279xx/CVE-2025-27917.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-27917",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T18:15:40.637",
"lastModified": "2025-11-06T18:15:40.637",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
CVE-2025/CVE-2025-279xx/CVE-2025-27918.json
+2 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-27918",
"sourceIdentifier": "[email protected]",
"published": "2025-11-06T18:15:40.793",
"lastModified": "2025-11-06T18:15:40.793",
"vulnStatus": "Received",
"lastModified": "2025-11-06T19:45:09.883",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
Loaded 100 of 392 files, more files were not shown because too many files have changed in this diff. Show more