Auto-Update: 2025-04-29T14:00:21.241483+00:00

CVE-2015/CVE-2015-20xx/CVE-2015-2079.json

@@ -2,13 +2,17 @@
   "id": "CVE-2015-2079",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T15:15:44.007",
-  "lastModified": "2025-04-28T15:15:44.007",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form of Perl open."
+    },
+    {
+      "lang": "es",
+      "value": "Usermin 0.980 a 1.x antes de 1.660 permite la ejecuci\u00f3n remota de c\u00f3digo uconfig_save.cgi sig_file_free porque utiliza la forma de dos argumentos (no de tres argumentos) de Perl open."
     }
   ],
   "metrics": {

CVE-2015/CVE-2015-45xx/CVE-2015-4582.json

@@ -2,13 +2,17 @@
   "id": "CVE-2015-4582",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:22.193",
-  "lastModified": "2025-04-28T16:15:22.193",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Oracle product."
+    },
+    {
+      "lang": "es",
+      "value": "TheCartPress boot-store (tambi\u00e9n conocido como Boot Store) 1.6.4 para WordPress permite el XSS header.php tcp_register_error. NOTA: CVE-2015-4582 no est\u00e1 asignado a ning\u00fan producto de Oracle."
     }
   ],
   "metrics": {

CVE-2020/CVE-2020-293xx/CVE-2020-29385.json

@@ -2,8 +2,8 @@
   "id": "CVE-2020-29385",
   "sourceIdentifier": "[email protected]",
   "published": "2020-12-26T02:15:12.807",
-  "lastModified": "2024-11-21T05:23:58.413",
-  "vulnStatus": "Modified",
+  "lastModified": "2025-04-29T13:13:41.850",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -86,8 +86,9 @@
             {
               "vulnerable": true,
               "criteria": "cpe:2.3:a:gnome:gdk-pixbuf:*:*:*:*:*:*:*:*",
+              "versionStartExcluding": "2.39.2",
               "versionEndExcluding": "2.42.2",
-              "matchCriteriaId": "DDBE665A-D3FD-4E49-B409-E289EF6434FC"
+              "matchCriteriaId": "FC4189D3-5B3B-4EB2-8D6A-A9AC03FF4456"
             }
           ]
         }
@@ -160,15 +161,27 @@
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://security.gentoo.org/glsa/202012-15",
@@ -210,15 +223,27 @@
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B5H3GNVWMZTYZR3JBYCK57PF7PFMQBNP/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGZVCTH5O7WBJLYXZ2UOKLYNIFPVR55D/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EANWYODLOJDFLMBH6WEKJJMQ5PKLEWML/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mailing List",
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://security.gentoo.org/glsa/202012-15",

CVE-2021/CVE-2021-476xx/CVE-2021-47662.json

@@ -2,8 +2,8 @@
   "id": "CVE-2021-47662",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T10:15:14.970",
-  "lastModified": "2025-04-24T10:15:14.970",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-476xx/CVE-2021-47663.json

@@ -2,8 +2,8 @@
   "id": "CVE-2021-47663",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T10:15:16.703",
-  "lastModified": "2025-04-24T10:15:16.703",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-476xx/CVE-2021-47664.json

@@ -2,8 +2,8 @@
   "id": "CVE-2021-47664",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T10:15:16.880",
-  "lastModified": "2025-04-24T10:15:16.880",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2022/CVE-2022-418xx/CVE-2022-41871.json

@@ -2,13 +2,17 @@
   "id": "CVE-2022-41871",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:24.853",
-  "lastModified": "2025-04-28T16:15:24.853",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root."
+    },
+    {
+      "lang": "es",
+      "value": "SEPPmail, hasta la versi\u00f3n 12.1.17, permite la inyecci\u00f3n de comandos en el Portal de Administraci\u00f3n. Un atacante autenticado puede ejecutar c\u00f3digo arbitrario en el contexto del usuario root."
     }
   ],
   "metrics": {

CVE-2022/CVE-2022-447xx/CVE-2022-44759.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-44759",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T21:15:20.603",
-  "lastModified": "2025-04-24T21:15:20.603",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2022/CVE-2022-447xx/CVE-2022-44760.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-44760",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T21:15:20.737",
-  "lastModified": "2025-04-24T21:15:20.737",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2023/CVE-2023-301xx/CVE-2023-30151.json

@@ -2,8 +2,8 @@
   "id": "CVE-2023-30151",
   "sourceIdentifier": "[email protected]",
   "published": "2023-07-13T17:15:09.207",
-  "lastModified": "2024-11-21T07:59:50.800",
-  "vulnStatus": "Modified",
+  "lastModified": "2025-04-29T13:13:06.167",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -56,9 +56,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
+              "criteria": "cpe:2.3:a:boxtal:envoimoinscher:*:*:*:*:*:prestashop:*:*",
               "versionEndExcluding": "3.1.10",
-              "matchCriteriaId": "C6E448B9-DADC-4052-8E5F-ED75FADFCF20"
+              "matchCriteriaId": "D8C5B2D1-E635-4ADB-9054-9BCA64D419BB"
             }
           ]
         }

CVE-2023/CVE-2023-316xx/CVE-2023-31672.json

@@ -2,8 +2,8 @@
   "id": "CVE-2023-31672",
   "sourceIdentifier": "[email protected]",
   "published": "2023-06-15T20:15:09.387",
-  "lastModified": "2024-12-12T22:15:06.950",
-  "vulnStatus": "Modified",
+  "lastModified": "2025-04-29T13:12:51.853",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -90,9 +90,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
+              "criteria": "cpe:2.3:a:ai-dev:ailinear:*:*:*:*:*:prestashop:*:*",
               "versionEndExcluding": "2.4.3",
-              "matchCriteriaId": "EB557345-23C0-4A2C-892B-71E57E2845B8"
+              "matchCriteriaId": "9EB52665-90F8-4ABE-AB52-18A4960CA252"
             }
           ]
         }

CVE-2023/CVE-2023-358xx/CVE-2023-35814.json

@@ -2,13 +2,17 @@
   "id": "CVE-2023-35814",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:25.357",
-  "lastModified": "2025-04-28T16:15:25.357",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms."
+    },
+    {
+      "lang": "es",
+      "value": "DevExpress anterior a 23.1.3 no protege adecuadamente los datos serializados de XtraReport en formularios web ASP.NET."
     }
   ],
   "metrics": {

CVE-2023/CVE-2023-358xx/CVE-2023-35815.json

@@ -2,13 +2,17 @@
   "id": "CVE-2023-35815",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:25.903",
-  "lastModified": "2025-04-28T17:15:46.393",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data."
+    },
+    {
+      "lang": "es",
+      "value": "DevExpress anterior a 23.1.3 tiene un mecanismo de protecci\u00f3n de fuente de datos que se evita durante la deserializaci\u00f3n de datos XML."
     }
   ],
   "metrics": {

CVE-2023/CVE-2023-358xx/CVE-2023-35816.json

@@ -2,13 +2,17 @@
   "id": "CVE-2023-35816",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:26.300",
-  "lastModified": "2025-04-28T17:15:46.537",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "DevExpress before 23.1.3 allows arbitrary TypeConverter conversion."
+    },
+    {
+      "lang": "es",
+      "value": "DevExpress anterior a 23.1.3 permite la conversi\u00f3n arbitraria de TypeConverter."
     }
   ],
   "metrics": {

CVE-2023/CVE-2023-358xx/CVE-2023-35817.json

@@ -2,13 +2,17 @@
   "id": "CVE-2023-35817",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T16:15:26.753",
-  "lastModified": "2025-04-28T17:15:46.657",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "DevExpress before 23.1.3 allows AsyncDownloader SSRF."
+    },
+    {
+      "lang": "es",
+      "value": "DevExpress anterior a 23.1.3 permite AsyncDownloader SSRF."
     }
   ],
   "metrics": {

CVE-2023/CVE-2023-375xx/CVE-2023-37516.json

@@ -2,8 +2,8 @@
   "id": "CVE-2023-37516",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T21:15:21.583",
-  "lastModified": "2025-04-24T21:15:21.583",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2023/CVE-2023-375xx/CVE-2023-37534.json

@@ -2,8 +2,8 @@
   "id": "CVE-2023-37534",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T17:15:33.467",
-  "lastModified": "2025-04-24T17:15:33.467",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2023/CVE-2023-424xx/CVE-2023-42404.json

@@ -2,13 +2,17 @@
   "id": "CVE-2023-42404",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T17:15:46.807",
-  "lastModified": "2025-04-28T17:15:46.807",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "OneVision Workspace before WS23.1 SR1 (build w31.040) allows arbitrary Java EL execution."
+    },
+    {
+      "lang": "es",
+      "value": "OneVision Workspace anterior a WS23.1 SR1 (compilaci\u00f3n w31.040) permite la ejecuci\u00f3n arbitraria de Java EL."
     }
   ],
   "metrics": {

CVE-2023/CVE-2023-457xx/CVE-2023-45720.json

@@ -2,8 +2,8 @@
   "id": "CVE-2023-45720",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T17:15:34.777",
-  "lastModified": "2025-04-24T17:15:34.777",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-106xx/CVE-2024-10635.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-10635",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T21:15:56.427",
-  "lastModified": "2025-04-28T21:15:56.427",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system."
+    },
+    {
+      "lang": "es",
+      "value": "Enterprise Protection contiene una vulnerabilidad de validaci\u00f3n de entrada incorrecta en la defensa contra archivos adjuntos que permite a un atacante remoto no autenticado eludir la pol\u00edtica de seguridad de escaneo de archivos adjuntos mediante el env\u00edo de un archivo adjunto S/MIME malicioso con una firma opaca. Al ser abierto por un destinatario en un cliente de correo electr\u00f3nico secundario, el archivo adjunto malicioso podr\u00eda causar una p\u00e9rdida parcial de la integridad y confidencialidad de su sistema."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-119xx/CVE-2024-11917.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-11917",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T12:15:16.013",
-  "lastModified": "2025-04-25T12:15:16.013",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-119xx/CVE-2024-11922.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-11922",
   "sourceIdentifier": "df4dee71-de3a-4139-9588-11b62fe6c0ff",
   "published": "2025-04-28T21:15:56.560",
-  "lastModified": "2025-04-28T21:15:56.560",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to\u00a0insert arbitrary HTML or JavaScript into an email."
+    },
+    {
+      "lang": "es",
+      "value": "La falta de validaci\u00f3n de entrada en ciertas funciones del cliente web de GoAnywhere de Fortra anterior a la versi\u00f3n 7.8.0 permite que un atacante con permiso para activar correos electr\u00f3nicos inserte HTML o JavaScript arbitrario en un correo electr\u00f3nico."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-122xx/CVE-2024-12244.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-12244",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T08:15:14.020",
-  "lastModified": "2025-04-24T08:15:14.020",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-122xx/CVE-2024-12273.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-12273",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T06:15:56.137",
-  "lastModified": "2025-04-29T06:15:56.137",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Calculated Fields Form para WordPress anterior a la versi\u00f3n 5.2.62 no depura ni escapa de algunas de sus configuraciones, lo que podr\u00eda permitir a usuarios con privilegios elevados como el administrador realizar ataques de  Cross-Site Scripting almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)."
     }
   ],
   "metrics": {},

CVE-2024/CVE-2024-127xx/CVE-2024-12706.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-12706",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T18:15:46.943",
-  "lastModified": "2025-04-28T18:15:46.943",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText\u2122 Digital Asset Management. T\n\nhe vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. \n\nThis issue affects Digital Asset Management.: through 24.4."
+    },
+    {
+      "lang": "es",
+      "value": "Neutralizaci\u00f3n incorrecta de elementos especiales utilizados en una vulnerabilidad de comando SQL ('Inyecci\u00f3n SQL') en OpenText\u2122 Digital Asset Management. Esta vulnerabilidad podr\u00eda permitir que un usuario autenticado ejecute comandos SQL arbitrarios en la base de datos subyacente. Este problema afecta a Digital Asset Management: hasta la versi\u00f3n 24.4."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-133xx/CVE-2024-13307.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-13307",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T09:15:28.607",
-  "lastModified": "2025-04-24T09:15:28.607",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-136xx/CVE-2024-13688.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-13688",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T06:15:15.617",
-  "lastModified": "2025-04-28T18:15:47.247",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-138xx/CVE-2024-13808.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-13808",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T05:15:51.317",
-  "lastModified": "2025-04-26T05:15:51.317",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Xpro Elementor Addons - Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.9 via the custom PHP widget. This is due to their only being client side controls when determining who can access the widget. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Xpro Elementor Addons - Pro para WordPress es vulnerable a la ejecuci\u00f3n remota de c\u00f3digo en todas las versiones hasta la 1.4.9 incluida a trav\u00e9s del widget PHP personalizado. Esto se debe a que solo se trata de controles del lado del cliente para determinar qui\u00e9n puede acceder al widget. Esto permite que atacantes autenticados, con acceso de colaborador o superior, ejecuten c\u00f3digo en el servidor."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-138xx/CVE-2024-13812.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-13812",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T09:15:17.520",
-  "lastModified": "2025-04-26T09:15:17.520",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento The Anps Theme plugin para WordPress es vulnerable a la ejecuci\u00f3n de shortcodes arbitrarios en todas las versiones hasta la 1.1.1 incluida. Esto se debe a que el software permite a los usuarios ejecutar una acci\u00f3n que no valida correctamente un valor antes de ejecutar do_shortcode. Esto permite que atacantes no autenticados ejecuten shortcodes arbitrarios."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-223xx/CVE-2024-22351.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-22351",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T23:15:15.387",
-  "lastModified": "2025-04-23T23:15:15.387",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30113.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-30113",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T17:15:34.957",
-  "lastModified": "2025-04-24T17:15:34.957",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30114.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-30114",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T17:15:35.357",
-  "lastModified": "2025-04-24T17:15:35.357",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30127.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-30127",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T21:15:21.727",
-  "lastModified": "2025-04-24T21:15:21.727",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30147.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-30147",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T17:15:35.733",
-  "lastModified": "2025-04-24T17:15:35.733",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30148.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-30148",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T16:15:28.290",
-  "lastModified": "2025-04-24T16:15:28.290",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-301xx/CVE-2024-30152.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-30152",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T18:15:25.247",
-  "lastModified": "2025-04-25T18:15:25.247",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "HCL SX v21 is affected by usage of a weak cryptographic algorithm.  An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts."
+    },
+    {
+      "lang": "es",
+      "value": "HCL SX v21 se ve afectado por el uso de un algoritmo criptogr\u00e1fico d\u00e9bil. Un atacante podr\u00eda explotar esta vulnerabilidad para acceder a informaci\u00f3n confidencial, modificar datos u otros efectos."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-324xx/CVE-2024-32499.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-32499",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T17:15:47.073",
-  "lastModified": "2025-04-28T17:15:47.073",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Newforma Project Center Server through 2023.3.0.32259 allows remote code execution because .NET Remoting is exposed."
+    },
+    {
+      "lang": "es",
+      "value": "Newforma Project Center Server hasta 2023.3.0.32259 permite la ejecuci\u00f3n remota de c\u00f3digo porque .NET Remoting est\u00e1 expuesto."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-478xx/CVE-2024-47829.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-47829",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T16:15:29.910",
-  "lastModified": "2025-04-23T16:15:29.910",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-528xx/CVE-2024-52887.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-52887",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-27T08:15:14.077",
-  "lastModified": "2025-04-27T08:15:14.077",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list."
+    },
+    {
+      "lang": "es",
+      "value": "El usuario final autenticado puede configurar un marcador SNX especialmente manipulado que puede hacer que su navegador ejecute un script mientras accede a su propia lista de marcadores."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-528xx/CVE-2024-52888.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-52888",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-27T08:15:14.220",
-  "lastModified": "2025-04-27T08:15:14.220",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties."
+    },
+    {
+      "lang": "es",
+      "value": "Para un usuario final autenticado, el portal puede ejecutar un script mientras intenta mostrar un directorio o las propiedades de alg\u00fan archivo."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-536xx/CVE-2024-53636.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-53636",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T15:15:44.080",
-  "lastModified": "2025-04-26T15:15:44.080",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in the filePath parameter."
+    },
+    {
+      "lang": "es",
+      "value": "Una vulnerabilidad de carga de archivos arbitrarios a trav\u00e9s de writefile.php de Serosoft Academia Student Information System (SIS) EagleR-1.0.118 permite a los atacantes ejecutar c\u00f3digo arbitrario a trav\u00e9s de ../ en el par\u00e1metro filePath."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-561xx/CVE-2024-56156.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-56156",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T16:15:25.597",
-  "lastModified": "2025-04-25T16:15:25.597",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Halo is an open source website building tool. Prior to version 2.20.13, a vulnerability in Halo allows attackers to bypass file type validation controls. This bypass enables the upload of malicious files including executables and HTML files, which can lead to stored cross-site scripting attacks and potential remote code execution under certain circumstances. This issue has been patched in version 2.20.13."
+    },
+    {
+      "lang": "es",
+      "value": "Halo es una herramienta de c\u00f3digo abierto para crear sitios web. Antes de la versi\u00f3n 2.20.13, una vulnerabilidad en Halo permit\u00eda a los atacantes eludir los controles de validaci\u00f3n de tipos de archivo. Esta evasi\u00f3n permite la carga de archivos maliciosos, incluyendo ejecutables y archivos HTML, lo que puede provocar ataques de cross-site scripting almacenado y la posible ejecuci\u00f3n remota de c\u00f3digo en determinadas circunstancias. Este problema se ha corregido en la versi\u00f3n 2.20.13."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-573xx/CVE-2024-57375.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-57375",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T14:15:20.567",
-  "lastModified": "2025-04-25T14:15:20.567",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [
     {
       "sourceIdentifier": "[email protected]",
@@ -16,6 +16,10 @@
     {
       "lang": "en",
       "value": "Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions."
+    },
+    {
+      "lang": "es",
+      "value": "Andamiro Pump It Up 20th Anniversary (tambi\u00e9n conocido como Double X o XX/2019) 1.00.0-2.08.3 permite que un atacante f\u00edsicamente pr\u00f3ximo provoque una denegaci\u00f3n de servicio (bloqueo de la aplicaci\u00f3n) a trav\u00e9s de ciertas acciones de deselecci\u00f3n."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-580xx/CVE-2024-58099.json

@@ -0,0 +1,29 @@
+{
+  "id": "CVE-2024-58099",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-04-29T12:15:31.053",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame\n\nAndrew and Nikolay reported connectivity issues with Cilium's service\nload-balancing in case of vmxnet3.\n\nIf a BPF program for native XDP adds an encapsulation header such as\nIPIP and transmits the packet out the same interface, then in case\nof vmxnet3 a corrupted packet is being sent and subsequently dropped\non the path.\n\nvmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()\nthrough vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:\n\n  page = virt_to_page(xdpf->data);\n  tbi->dma_addr = page_pool_get_dma_addr(page) +\n                  VMXNET3_XDP_HEADROOM;\n  dma_sync_single_for_device(&adapter->pdev->dev,\n                             tbi->dma_addr, buf_size,\n                             DMA_TO_DEVICE);\n\nThe above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP\nBPF program could have moved xdp->data. While the passed buf_size is\ncorrect (xdpf->len), the dma_addr needs to have a dynamic offset which\ncan be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -\nxdp->data_hard_start."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/4678adf94da4a9e9683817b246b58ce15fb81782",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/59ba6cdadb9c26b606a365eb9c9b25eb2052622d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/f82eb34fb59a8fb96c19f4f492c20eb774140bb5",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2024/CVE-2024-582xx/CVE-2024-58251.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-58251",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T18:16:03.057",
-  "lastModified": "2025-04-23T23:15:15.947",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2024/CVE-2024-61xx/CVE-2024-6198.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-6198",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T13:15:42.370",
-  "lastModified": "2025-04-25T13:15:42.370",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the\u00a0\u201cSNORE\u201d interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker\nwith access to the LAN network interface could use a specially crafted HTTP request to exploit a buffer overflow on the\u00a0modem."
+    },
+    {
+      "lang": "es",
+      "value": "El dispositivo expone una interfaz web en los puertos TCP/3030 y TCP/9882. Este servicio web ejecuta lighttpd, que implementa la interfaz \"SNORE\". Esta interfaz se ve afectada por una vulnerabilidad de desbordamiento de b\u00fafer de pila debido al an\u00e1lisis de rutas inseguras. Un atacante con acceso a la interfaz de red LAN podr\u00eda usar una solicitud HTTP especialmente manipulada para explotar un desbordamiento de b\u00fafer en el m\u00f3dem."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-61xx/CVE-2024-6199.json

@@ -2,13 +2,17 @@
   "id": "CVE-2024-6199",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T13:15:43.510",
-  "lastModified": "2025-04-25T13:15:43.510",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS\u00a0services and the modem, could manipulate specific responses to include code that forces a buffer overflow on the modem.\n\nCustomers that have not enabled Dynamic DNS on their modem are not vulnerable."
+    },
+    {
+      "lang": "es",
+      "value": "Un atacante no autenticado en la interfaz WAN, capaz de interceptar el tr\u00e1fico de DNS din\u00e1mico (DDNS) entre los servicios DDNS y el m\u00f3dem, podr\u00eda manipular respuestas espec\u00edficas para incluir c\u00f3digo que provoque un desbordamiento de b\u00fafer en el m\u00f3dem. Los clientes que no tienen habilitado el DNS din\u00e1mico en su m\u00f3dem no son vulnerables."
     }
   ],
   "metrics": {

CVE-2024/CVE-2024-97xx/CVE-2024-9771.json

@@ -2,8 +2,8 @@
   "id": "CVE-2024-9771",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T06:15:16.973",
-  "lastModified": "2025-04-28T17:15:47.873",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-00xx/CVE-2025-0049.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-0049",
   "sourceIdentifier": "df4dee71-de3a-4139-9588-11b62fe6c0ff",
   "published": "2025-04-28T21:15:56.703",
-  "lastModified": "2025-04-28T21:15:56.703",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "When a Web User without Create permission on subfolders attempts to upload a file to a non-existent directory, the error message includes the absolute server path which may allow\u00a0Fuzzing for application mapping.\nThis issue affects GoAnywhere: before 7.8.0."
+    },
+    {
+      "lang": "es",
+      "value": "Cuando un usuario web sin permiso de creaci\u00f3n en subcarpetas intenta subir un archivo a un directorio inexistente, el mensaje de error incluye la ruta absoluta del servidor, lo que podr\u00eda permitir el an\u00e1lisis de errores para el mapeo de aplicaciones. Este problema afecta a GoAnywhere: versiones anteriores a la 7.8.0."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-06xx/CVE-2025-0627.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-0627",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T06:15:17.093",
-  "lastModified": "2025-04-28T17:15:48.050",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-06xx/CVE-2025-0639.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-0639",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T08:15:14.190",
-  "lastModified": "2025-04-24T08:15:14.190",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-06xx/CVE-2025-0671.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-0671",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T06:15:44.237",
-  "lastModified": "2025-04-25T20:15:39.013",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Icegram Express  WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Icegram Express para WordPress anterior a la versi\u00f3n 5.7.50 no depura ni escapa de algunas de las configuraciones de su plantilla, lo que podr\u00eda permitir a usuarios con privilegios elevados como el administrador realizar ataques de Cross-Site Scripting Almacenado incluso cuando la capacidad unfiltered_html no est\u00e1 permitida (por ejemplo, en una configuraci\u00f3n de varios sitios)."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-10xx/CVE-2025-1045.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1045",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:51.430",
-  "lastModified": "2025-04-23T17:16:51.430",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-10xx/CVE-2025-1046.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1046",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:51.583",
-  "lastModified": "2025-04-23T17:16:51.583",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-10xx/CVE-2025-1047.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1047",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:51.707",
-  "lastModified": "2025-04-23T17:16:51.707",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-10xx/CVE-2025-1048.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1048",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:51.843",
-  "lastModified": "2025-04-23T17:16:51.843",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-10xx/CVE-2025-1049.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1049",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:51.987",
-  "lastModified": "2025-04-23T17:16:51.987",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-10xx/CVE-2025-1050.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1050",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:52.127",
-  "lastModified": "2025-04-23T17:16:52.127",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-11xx/CVE-2025-1194.json

@@ -0,0 +1,60 @@
+{
+  "id": "CVE-2025-1194",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-04-29T12:15:31.717",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions process specially crafted inputs. The issue stems from a regex exhibiting exponential complexity under certain conditions, leading to excessive backtracking. This can result in high CPU usage and potential application downtime, effectively creating a Denial of Service (DoS) scenario. The affected version is v4.48.1 (latest)."
+    }
+  ],
+  "metrics": {
+    "cvssMetricV30": [
+      {
+        "source": "[email protected]",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.0",
+          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "LOW"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
+      }
+    ]
+  },
+  "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-1333"
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://github.com/huggingface/transformers/commit/92c5ca9dd70de3ade2af2eb835c96215cc50e815",
+      "source": "[email protected]"
+    },
+    {
+      "url": "https://huntr.com/bounties/86f58dcd-683f-4adc-a735-849f51e9abb2",
+      "source": "[email protected]"
+    }
+  ]
+}

CVE-2025/CVE-2025-12xx/CVE-2025-1279.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1279",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T09:15:14.063",
-  "lastModified": "2025-04-25T09:15:14.063",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-12xx/CVE-2025-1284.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1284",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T09:15:29.963",
-  "lastModified": "2025-04-24T09:15:29.963",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-12xx/CVE-2025-1294.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-1294",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T23:15:14.720",
-  "lastModified": "2025-04-24T23:15:14.720",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The eForm - WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento eForm - WordPress Form Builder de WordPress es vulnerable a Cross-Site Scripting Almacenado en todas las versiones hasta la 4.18.0 incluida, debido a una depuraci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes no autenticados inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n al acceder un usuario a una p\u00e1gina inyectada."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-14xx/CVE-2025-1453.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1453",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T06:15:43.957",
-  "lastModified": "2025-04-24T15:15:57.137",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-14xx/CVE-2025-1458.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-1458",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T06:15:14.407",
-  "lastModified": "2025-04-26T06:15:14.407",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Element Pack Addons for Elementor \u2013 Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Element Pack Addons for Elementor \u2013 Free Templates and Widgets for Your WordPress Websites para WordPress es vulnerable a Cross-Site Scripting Almacenado a trav\u00e9s de varios widgets como el Bot\u00f3n Dual, el Bot\u00f3n Creativo, la Pila de Im\u00e1genes y m\u00e1s, en todas las versiones hasta la 5.10.29 incluida, debido a una depuraci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de Colaborador o superior, inyectar scripts web arbitrarios en las p\u00e1ginas que se ejecutar\u00e1n al acceder un usuario a una p\u00e1gina inyectada."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-15xx/CVE-2025-1520.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1520",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:52.250",
-  "lastModified": "2025-04-23T17:16:52.250",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-15xx/CVE-2025-1521.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1521",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:52.387",
-  "lastModified": "2025-04-23T17:16:52.387",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-15xx/CVE-2025-1522.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1522",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T17:16:52.520",
-  "lastModified": "2025-04-23T17:16:52.520",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-15xx/CVE-2025-1565.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1565",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T10:15:15.557",
-  "lastModified": "2025-04-25T10:15:15.557",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-19xx/CVE-2025-1908.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1908",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T08:15:14.333",
-  "lastModified": "2025-04-24T08:15:14.333",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-19xx/CVE-2025-1976.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-1976",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T03:15:14.820",
-  "lastModified": "2025-04-29T01:00:02.093",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-20xx/CVE-2025-2068.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2068",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T16:15:25.857",
-  "lastModified": "2025-04-25T16:15:25.857",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An open redirect vulnerability was reported in the FileZ client that could allow information disclosure if a crafted url is visited by a local user."
+    },
+    {
+      "lang": "es",
+      "value": "Se inform\u00f3 de una vulnerabilidad de redirecci\u00f3n abierta en el cliente FileZ que podr\u00eda permitir la divulgaci\u00f3n de informaci\u00f3n si un usuario local visita una URL manipulada espec\u00edficamente para este fin."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-20xx/CVE-2025-2069.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2069",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T16:15:26.020",
-  "lastModified": "2025-04-25T16:15:26.020",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "A cross-site scripting vulnerability was reported in the FileZ client that could allow execution of code if a crafted url is visited by a local user."
+    },
+    {
+      "lang": "es",
+      "value": "Se inform\u00f3 de una vulnerabilidad de cross-site scripting en el cliente FileZ que podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo si un usuario local visita una URL manipulada espec\u00edficamente para ello."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-20xx/CVE-2025-2070.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2070",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T16:15:26.180",
-  "lastModified": "2025-04-25T16:15:26.180",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An improper XML parsing vulnerability was reported in the FileZ client that could allow arbitrary file reads on the system if a crafted url is visited by a local user."
+    },
+    {
+      "lang": "es",
+      "value": "Se inform\u00f3 de una vulnerabilidad de an\u00e1lisis XML incorrecto en el cliente FileZ que podr\u00eda permitir lecturas de archivos arbitrarias en el sistema si un usuario local visita una URL manipulada espec\u00edficamente para este fin."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-216xx/CVE-2025-21605.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-21605",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T16:15:34.770",
-  "lastModified": "2025-04-23T16:15:34.770",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-21xx/CVE-2025-2101.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2101",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T09:15:19.440",
-  "lastModified": "2025-04-26T09:15:19.440",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Edumall theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.2.4 via the 'template' parameter of the 'edumall_lazy_load_template' AJAX action. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included."
+    },
+    {
+      "lang": "es",
+      "value": "El tema Edumall para WordPress es vulnerable a la inclusi\u00f3n de archivos locales en todas las versiones hasta la 4.2.4 incluida, a trav\u00e9s del par\u00e1metro \"template\" de la acci\u00f3n AJAX \"edumall_lazy_load_template\". Esto permite a atacantes no autenticados incluir y ejecutar archivos PHP arbitrarios en el servidor, permitiendo la ejecuci\u00f3n de cualquier c\u00f3digo PHP en dichos archivos. Esto puede utilizarse para eludir los controles de acceso, obtener datos confidenciales o ejecutar c\u00f3digo cuando se pueden subir e incluir archivos PHP."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-21xx/CVE-2025-2105.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2105",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-26T06:15:15.877",
-  "lastModified": "2025-04-26T06:15:15.877",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file' parameter of the 'raven_download_file' function. This makes it possible for attackers to inject a PHP Object through a PHAR file. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present. This vulnerability may be exploited by unauthenticated attackers when a form is present on the site with the file download action, and the ability to upload files is also present. Otherwise, this would be considered exploitable by Contributor-level users and above, because they could create the form needed to successfully exploit this."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Jupiter X Core para WordPress es vulnerable a la inyecci\u00f3n de objetos PHP en todas las versiones hasta la 4.8.11 incluida, mediante la deserializaci\u00f3n de entradas no confiables del par\u00e1metro 'file' de la funci\u00f3n 'raven_download_file'. Esto permite a los atacantes inyectar un objeto PHP a trav\u00e9s de un archivo PHAR. No se conoce ninguna cadena POP presente en el software vulnerable, lo que significa que esta vulnerabilidad no tiene impacto a menos que se instale en el sitio otro complemento o tema que contenga una cadena POP. Si existe una cadena POP a trav\u00e9s de un complemento o tema adicional instalado en el sistema objetivo, el atacante podr\u00eda realizar acciones como eliminar archivos arbitrarios, recuperar datos confidenciales o ejecutar c\u00f3digo, dependiendo de la cadena POP presente. Esta vulnerabilidad puede ser explotada por atacantes no autenticados cuando hay un formulario en el sitio con la acci\u00f3n de descarga de archivos y la posibilidad de subir archivos. De lo contrario, los usuarios con nivel de colaborador o superior podr\u00edan considerarla explotable, ya que podr\u00edan crear el formulario necesario para explotarla con \u00e9xito."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-21xx/CVE-2025-2185.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2185",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T00:15:15.340",
-  "lastModified": "2025-04-25T00:15:15.340",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "ALBEDO Telecom Net.Time - PTP/NTP clock (Serial No. NBC0081P) software release 1.4.4 is vulnerable to an insufficient session expiration vulnerability, which\n could permit an attacker to transmit passwords over unencrypted \nconnections, resulting in the product becoming vulnerable to \ninterception."
+    },
+    {
+      "lang": "es",
+      "value": "El software de reloj PTP/NTP ALBEDO Telecom Net.Time - versi\u00f3n 1.4.4 (n\u00famero de serie NBC0081P) es vulnerable a una vulnerabilidad de expiraci\u00f3n de sesi\u00f3n insuficiente, que podr\u00eda permitir a un atacante transmitir contrase\u00f1as a trav\u00e9s de conexiones no cifradas, lo que hace que el producto se vuelva vulnerable a la interceptaci\u00f3n."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-222xx/CVE-2025-22235.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-22235",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T08:15:15.273",
-  "lastModified": "2025-04-28T08:15:15.273",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "EndpointRequest.to()\u00a0creates a matcher for null/**\u00a0if the actuator endpoint, for which the EndpointRequest\u00a0has been created, is disabled or not exposed.\n\nYour application may be affected by this if all the following conditions are met:\n\n  *  You use Spring Security\n  *  EndpointRequest.to()\u00a0has been used in a Spring Security chain configuration\n  *  The endpoint which EndpointRequest\u00a0references is disabled or not exposed via web\n  *  Your application handles requests to /null\u00a0and this path needs protection\n\n\nYou are not affected if any of the following is true:\n\n  *  You don't use Spring Security\n  *  You don't use EndpointRequest.to()\n  *  The endpoint which EndpointRequest.to()\u00a0refers to is enabled and is exposed\n  *  Your application does not handle requests to /null\u00a0or this path does not need protection"
+    },
+    {
+      "lang": "es",
+      "value": "EndpointRequest.to() crea un comparador para null/** si el endpoint del actuador, para el que se cre\u00f3 EndpointRequest, est\u00e1 deshabilitado o no est\u00e1 expuesto. Su aplicaci\u00f3n puede verse afectada si se cumplen todas las siguientes condiciones: * Utiliza Spring Security * EndpointRequest.to() se ha utilizado en una configuraci\u00f3n de cadena de Spring Security * El punto final al que EndpointRequest hace referencia est\u00e1 deshabilitado o no est\u00e1 expuesto a trav\u00e9s de la web * Su aplicaci\u00f3n gestiona solicitudes a /null y esta ruta necesita protecci\u00f3n no se ver\u00e1 afectado si se cumple alguna de las siguientes condiciones: * No utiliza Spring Security * No utiliza EndpointRequest.to() * El endpoint al que EndpointRequest.to() hace referencia est\u00e1 habilitado y est\u00e1 expuesto * Su aplicaci\u00f3n no gestiona solicitudes a /null o esta ruta no necesita protecci\u00f3n"
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-229xx/CVE-2025-22924.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-22924",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-02T21:15:32.230",
-  "lastModified": "2025-04-07T14:18:49.830",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-04-29T13:48:51.143",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,18 +51,46 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:os4ed:opensis:*:*:*:*:community:*:*:*",
+              "versionStartIncluding": "7.0",
+              "versionEndIncluding": "9.1",
+              "matchCriteriaId": "EFD63FAA-F1E3-4B46-9DAC-BCA10F916068"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://github.com/OS4ED/openSIS-Classic",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Product"
+      ]
     },
     {
       "url": "https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22924",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     },
     {
       "url": "https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22924",
-      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2025/CVE-2025-229xx/CVE-2025-22925.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-22925",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-02T21:15:32.340",
-  "lastModified": "2025-04-07T14:18:49.830",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-04-29T13:44:13.357",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,14 +51,39 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:os4ed:opensis:*:*:*:*:community:*:*:*",
+              "versionStartIncluding": "7.0",
+              "versionEndIncluding": "9.1",
+              "matchCriteriaId": "EFD63FAA-F1E3-4B46-9DAC-BCA10F916068"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://github.com/OS4ED/openSIS-Classic",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Product"
+      ]
     },
     {
       "url": "https://github.com/esusalla/vulnerability-research/tree/main/CVE-2025-22925",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2025/CVE-2025-22xx/CVE-2025-2238.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2238",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T07:15:47.523",
-  "lastModified": "2025-04-25T07:15:47.523",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level."
+    },
+    {
+      "lang": "es",
+      "value": "El tema Vikinger para WordPress es vulnerable a la p\u00e9rdida de privilegios en todas las versiones hasta la 1.9.30 incluida. Esto se debe a restricciones user_meta insuficientes en la funci\u00f3n 'vikinger_user_meta_update_ajax'. Esto permite que atacantes autenticados, con acceso de suscriptor o superior, escalen sus privilegios al nivel de administrador."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-233xx/CVE-2025-23375.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-23375",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T15:15:45.157",
-  "lastModified": "2025-04-28T15:15:45.157",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Dell PowerProtect Data Manager Reporting, version(s) 19.17, contain(s) an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges."
+    },
+    {
+      "lang": "es",
+      "value": "Dell PowerProtect Data Manager Reporting, versi\u00f3n 19.17, contiene una vulnerabilidad de uso incorrecto de API con privilegios. Un atacante con pocos privilegios y acceso local podr\u00eda explotar esta vulnerabilidad, lo que provocar\u00eda una elevaci\u00f3n de privilegios."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-233xx/CVE-2025-23376.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-23376",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T15:15:45.303",
-  "lastModified": "2025-04-28T15:15:45.303",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Dell PowerProtect Data Manager Reporting, version(s) 19.16, 19.17, 19.18, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure."
+    },
+    {
+      "lang": "es",
+      "value": "Dell PowerProtect Data Manager Reporting, versiones 19.16, 19.17 y 19.18, contiene una vulnerabilidad de neutralizaci\u00f3n incorrecta de elementos especiales utilizados en un motor de plantillas. Un atacante con privilegios elevados y acceso local podr\u00eda explotar esta vulnerabilidad, lo que podr\u00eda provocar la divulgaci\u00f3n de informaci\u00f3n."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-233xx/CVE-2025-23377.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-23377",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T15:15:45.437",
-  "lastModified": "2025-04-28T15:15:45.437",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Dell PowerProtect Data Manager Reporting, version(s) 19.17, 19.18 contain(s) an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs."
+    },
+    {
+      "lang": "es",
+      "value": "Dell PowerProtect Data Manager Reporting, versiones 19.17 y 19.18, presenta una vulnerabilidad de codificaci\u00f3n o escape incorrectos de la salida. Un atacante con privilegios elevados y acceso local podr\u00eda aprovechar esta vulnerabilidad para inyectar c\u00f3digo web o HTML arbitrario en la salida de los informes."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-241xx/CVE-2025-24179.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24179",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.033",
-  "lastModified": "2025-04-29T03:15:34.033",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3, tvOS 18.3. An attacker on the local network may be able to cause a denial-of-service."
+    },
+    {
+      "lang": "es",
+      "value": "Se solucion\u00f3 una desreferencia de puntero nulo mejorando la validaci\u00f3n de entrada. Este problema se solucion\u00f3 en iOS 18.3 y iPadOS 18.3, visionOS 2.3, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, macOS Sequoia 15.3 y tvOS 18.3. Un atacante en la red local podr\u00eda provocar una denegaci\u00f3n de servicio."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-242xx/CVE-2025-24206.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24206",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.413",
-  "lastModified": "2025-04-29T03:15:34.413",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to bypass authentication policy."
+    },
+    {
+      "lang": "es",
+      "value": "Se solucion\u00f3 un problema de autenticaci\u00f3n mejorando la gesti\u00f3n del estado. Este problema se solucion\u00f3 en macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4 y visionOS 2.4. Un atacante en la red local podr\u00eda eludir la pol\u00edtica de autenticaci\u00f3n."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-242xx/CVE-2025-24251.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24251",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.510",
-  "lastModified": "2025-04-29T03:15:34.510",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, watchOS 11.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination."
+    },
+    {
+      "lang": "es",
+      "value": "El problema se solucion\u00f3 mejorando las comprobaciones. Este problema est\u00e1 corregido en macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 y iPadOS 18.4, watchOS 11.4 y visionOS 2.4. Un atacante en la red local podr\u00eda provocar el cierre inesperado de la aplicaci\u00f3n."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-242xx/CVE-2025-24252.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24252",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.600",
-  "lastModified": "2025-04-29T03:15:34.600",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory."
+    },
+    {
+      "lang": "es",
+      "value": "Se solucion\u00f3 un problema de use-after-free mejorando la gesti\u00f3n de memoria. Este problema se solucion\u00f3 en macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4 y visionOS 2.4. Un atacante en la red local podr\u00eda corromper la memoria de proceso."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-242xx/CVE-2025-24270.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24270",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.690",
-  "lastModified": "2025-04-29T03:15:34.690",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to leak sensitive user information."
+    },
+    {
+      "lang": "es",
+      "value": "Este problema se solucion\u00f3 eliminando el c\u00f3digo vulnerable. Este problema est\u00e1 corregido en macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4 y visionOS 2.4. Un atacante en la red local podr\u00eda filtrar informaci\u00f3n confidencial del usuario."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-242xx/CVE-2025-24271.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-24271",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-29T03:15:34.770",
-  "lastModified": "2025-04-29T03:15:34.770",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "An access issue was addressed with improved access restrictions. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing."
+    },
+    {
+      "lang": "es",
+      "value": "Se solucion\u00f3 un problema de acceso mejorando las restricciones de acceso. Este problema se solucion\u00f3 en macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4, iPadOS 18.4 y visionOS 2.4. Un usuario no autenticado en la misma red que un Mac con sesi\u00f3n iniciada pod\u00eda enviarle comandos de AirPlay sin emparejamiento."
     }
   ],
   "metrics": {},

CVE-2025/CVE-2025-24xx/CVE-2025-2470.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-2470",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T12:15:16.903",
-  "lastModified": "2025-04-25T12:15:16.903",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-250xx/CVE-2025-25045.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-25045",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T23:15:16.213",
-  "lastModified": "2025-04-23T23:15:16.213",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-250xx/CVE-2025-25046.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-25046",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-23T23:15:16.357",
-  "lastModified": "2025-04-23T23:15:16.357",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-257xx/CVE-2025-25775.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-25775",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T17:15:18.020",
-  "lastModified": "2025-04-25T18:15:25.937",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder."
+    },
+    {
+      "lang": "es",
+      "value": "Codeastro Bus Ticket Booking System v1.0 es vulnerable a la inyecci\u00f3n de SQL a trav\u00e9s del par\u00e1metro kodetiket en /BusTicket-CI/tiket/cekorder."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-257xx/CVE-2025-25776.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-25776",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-28T15:15:45.587",
-  "lastModified": "2025-04-28T18:15:47.910",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:10.697",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing."
+    },
+    {
+      "lang": "es",
+      "value": "Existe una vulnerabilidad de Cross-Site Scripting (XSS) en las funciones de registro de usuario y perfil de usuario de Codeastro Bus Ticket Booking System v1.0 que permite a un atacante ejecutar c\u00f3digo arbitrario en los campos de nombre completo y direcci\u00f3n durante el registro del usuario o la edici\u00f3n del perfil."
     }
   ],
   "metrics": {

CVE-2025/CVE-2025-257xx/CVE-2025-25777.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-25777",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T21:15:23.933",
-  "lastModified": "2025-04-25T17:15:18.143",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-25xx/CVE-2025-2543.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-2543",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T09:15:30.143",
-  "lastModified": "2025-04-24T09:15:30.143",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-25xx/CVE-2025-2558.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-2558",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T06:15:45.800",
-  "lastModified": "2025-04-24T15:15:58.263",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-25xx/CVE-2025-2579.json

@@ -2,8 +2,8 @@
   "id": "CVE-2025-2579",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-24T09:15:30.317",
-  "lastModified": "2025-04-24T09:15:30.317",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:47.470",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2025/CVE-2025-25xx/CVE-2025-2580.json

@@ -2,13 +2,17 @@
   "id": "CVE-2025-2580",
   "sourceIdentifier": "[email protected]",
   "published": "2025-04-25T06:15:45.457",
-  "lastModified": "2025-04-25T06:15:45.457",
-  "vulnStatus": "Received",
+  "lastModified": "2025-04-29T13:52:28.490",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
       "value": "The Contact Form by Bit Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.18.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file."
+    },
+    {
+      "lang": "es",
+      "value": "El complemento Contact Form de Bit Form para WordPress es vulnerable a Cross-Site Scripting Almacenado al subir archivos SVG en todas las versiones hasta la 2.18.3 incluida, debido a una depuraci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de autor o superior, inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n al acceder un usuario al archivo SVG."
     }
   ],
   "metrics": {