From b36e433280c53a627820b05c35c030df995f626c Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 23 May 2025 14:03:53 +0000 Subject: [PATCH] Auto-Update: 2025-05-23T14:00:19.061945+00:00 --- CVE-2021/CVE-2021-363xx/CVE-2021-36340.json | 10 +- CVE-2024/CVE-2024-449xx/CVE-2024-44913.json | 9 +- CVE-2024/CVE-2024-449xx/CVE-2024-44914.json | 9 +- CVE-2024/CVE-2024-449xx/CVE-2024-44915.json | 9 +- CVE-2024/CVE-2024-78xx/CVE-2024-7803.json | 60 +++++++ CVE-2024/CVE-2024-91xx/CVE-2024-9163.json | 60 +++++++ CVE-2025/CVE-2025-08xx/CVE-2025-0825.json | 6 +- CVE-2025/CVE-2025-11xx/CVE-2025-1123.json | 60 +++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31049.json | 56 ++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31053.json | 56 ++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31056.json | 56 ++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31060.json | 56 ++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31064.json | 56 ++++++ CVE-2025/CVE-2025-310xx/CVE-2025-31069.json | 56 ++++++ CVE-2025/CVE-2025-313xx/CVE-2025-31397.json | 56 ++++++ CVE-2025/CVE-2025-314xx/CVE-2025-31423.json | 56 ++++++ CVE-2025/CVE-2025-314xx/CVE-2025-31430.json | 56 ++++++ CVE-2025/CVE-2025-316xx/CVE-2025-31631.json | 56 ++++++ CVE-2025/CVE-2025-316xx/CVE-2025-31632.json | 56 ++++++ CVE-2025/CVE-2025-316xx/CVE-2025-31633.json | 56 ++++++ CVE-2025/CVE-2025-316xx/CVE-2025-31636.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31912.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31913.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31914.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31916.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31918.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31924.json | 56 ++++++ CVE-2025/CVE-2025-319xx/CVE-2025-31927.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32284.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32285.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32286.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32289.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32292.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32293.json | 56 ++++++ CVE-2025/CVE-2025-322xx/CVE-2025-32294.json | 56 ++++++ CVE-2025/CVE-2025-323xx/CVE-2025-32302.json | 56 ++++++ CVE-2025/CVE-2025-323xx/CVE-2025-32309.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39480.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39485.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39489.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39490.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39494.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39495.json | 56 ++++++ CVE-2025/CVE-2025-394xx/CVE-2025-39499.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39500.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39501.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39502.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39503.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39504.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39505.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39506.json | 56 ++++++ CVE-2025/CVE-2025-395xx/CVE-2025-39536.json | 56 ++++++ CVE-2025/CVE-2025-413xx/CVE-2025-41377.json | 78 +++++++++ CVE-2025/CVE-2025-413xx/CVE-2025-41378.json | 78 +++++++++ CVE-2025/CVE-2025-413xx/CVE-2025-41379.json | 78 +++++++++ CVE-2025/CVE-2025-413xx/CVE-2025-41380.json | 78 +++++++++ CVE-2025/CVE-2025-44xx/CVE-2025-4460.json | 94 ++++++++++- CVE-2025/CVE-2025-44xx/CVE-2025-4461.json | 94 ++++++++++- CVE-2025/CVE-2025-44xx/CVE-2025-4462.json | 72 +++++++- CVE-2025/CVE-2025-464xx/CVE-2025-46437.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46440.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46444.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46446.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46448.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46454.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46455.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46456.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46458.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46460.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46463.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46468.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46474.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46486.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46487.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46488.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46490.json | 56 ++++++ CVE-2025/CVE-2025-464xx/CVE-2025-46493.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46515.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46518.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46526.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46527.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46537.json | 56 ++++++ CVE-2025/CVE-2025-465xx/CVE-2025-46539.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47438.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47453.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47458.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47461.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47478.json | 56 ++++++ CVE-2025/CVE-2025-474xx/CVE-2025-47492.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47512.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47513.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47529.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47530.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47532.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47535.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47539.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47541.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47558.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47568.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47575.json | 56 ++++++ CVE-2025/CVE-2025-475xx/CVE-2025-47599.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47603.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47611.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47612.json | 47 +++++- CVE-2025/CVE-2025-476xx/CVE-2025-47613.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47618.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47619.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47631.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47637.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47640.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47641.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47642.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47646.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47658.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47660.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47663.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47670.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47671.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47672.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47673.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47678.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47680.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47687.json | 56 ++++++ CVE-2025/CVE-2025-476xx/CVE-2025-47688.json | 47 +++++- CVE-2025/CVE-2025-476xx/CVE-2025-47690.json | 56 ++++++ CVE-2025/CVE-2025-47xx/CVE-2025-4782.json | 84 ++++++++- CVE-2025/CVE-2025-47xx/CVE-2025-4788.json | 81 ++++++++- CVE-2025/CVE-2025-47xx/CVE-2025-4789.json | 81 ++++++++- CVE-2025/CVE-2025-47xx/CVE-2025-4790.json | 81 ++++++++- CVE-2025/CVE-2025-47xx/CVE-2025-4791.json | 81 ++++++++- CVE-2025/CVE-2025-482xx/CVE-2025-48241.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48245.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48271.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48273.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48275.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48283.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48286.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48287.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48289.json | 56 ++++++ CVE-2025/CVE-2025-482xx/CVE-2025-48292.json | 56 ++++++ CVE-2025/CVE-2025-51xx/CVE-2025-5105.json | 141 ++++++++++++++++ CVE-2025/CVE-2025-51xx/CVE-2025-5106.json | 141 ++++++++++++++++ CVE-2025/CVE-2025-51xx/CVE-2025-5107.json | 141 ++++++++++++++++ CVE-2025/CVE-2025-51xx/CVE-2025-5108.json | 141 ++++++++++++++++ CVE-2025/CVE-2025-51xx/CVE-2025-5109.json | 141 ++++++++++++++++ README.md | 59 +++++-- _state.csv | 178 +++++++++++++++++--- 147 files changed, 8726 insertions(+), 121 deletions(-) create mode 100644 CVE-2024/CVE-2024-78xx/CVE-2024-7803.json create mode 100644 CVE-2024/CVE-2024-91xx/CVE-2024-9163.json create mode 100644 CVE-2025/CVE-2025-11xx/CVE-2025-1123.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31049.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31053.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31056.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31060.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31064.json create mode 100644 CVE-2025/CVE-2025-310xx/CVE-2025-31069.json create mode 100644 CVE-2025/CVE-2025-313xx/CVE-2025-31397.json create mode 100644 CVE-2025/CVE-2025-314xx/CVE-2025-31423.json create mode 100644 CVE-2025/CVE-2025-314xx/CVE-2025-31430.json create mode 100644 CVE-2025/CVE-2025-316xx/CVE-2025-31631.json create mode 100644 CVE-2025/CVE-2025-316xx/CVE-2025-31632.json create mode 100644 CVE-2025/CVE-2025-316xx/CVE-2025-31633.json create mode 100644 CVE-2025/CVE-2025-316xx/CVE-2025-31636.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31912.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31913.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31914.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31916.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31918.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31924.json create mode 100644 CVE-2025/CVE-2025-319xx/CVE-2025-31927.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32284.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32285.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32286.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32289.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32292.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32293.json create mode 100644 CVE-2025/CVE-2025-322xx/CVE-2025-32294.json create mode 100644 CVE-2025/CVE-2025-323xx/CVE-2025-32302.json create mode 100644 CVE-2025/CVE-2025-323xx/CVE-2025-32309.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39480.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39485.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39489.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39490.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39494.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39495.json create mode 100644 CVE-2025/CVE-2025-394xx/CVE-2025-39499.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39500.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39501.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39502.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39503.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39504.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39505.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39506.json create mode 100644 CVE-2025/CVE-2025-395xx/CVE-2025-39536.json create mode 100644 CVE-2025/CVE-2025-413xx/CVE-2025-41377.json create mode 100644 CVE-2025/CVE-2025-413xx/CVE-2025-41378.json create mode 100644 CVE-2025/CVE-2025-413xx/CVE-2025-41379.json create mode 100644 CVE-2025/CVE-2025-413xx/CVE-2025-41380.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46437.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46440.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46444.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46446.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46448.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46454.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46455.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46456.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46458.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46460.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46463.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46468.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46474.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46486.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46487.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46488.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46490.json create mode 100644 CVE-2025/CVE-2025-464xx/CVE-2025-46493.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46515.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46518.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46526.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46527.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46537.json create mode 100644 CVE-2025/CVE-2025-465xx/CVE-2025-46539.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47438.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47453.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47458.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47461.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47478.json create mode 100644 CVE-2025/CVE-2025-474xx/CVE-2025-47492.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47512.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47513.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47529.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47530.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47532.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47535.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47539.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47541.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47558.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47568.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47575.json create mode 100644 CVE-2025/CVE-2025-475xx/CVE-2025-47599.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47603.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47611.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47613.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47618.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47619.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47631.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47637.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47640.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47641.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47642.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47646.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47658.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47660.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47663.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47670.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47671.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47672.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47673.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47678.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47680.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47687.json create mode 100644 CVE-2025/CVE-2025-476xx/CVE-2025-47690.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48241.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48245.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48271.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48273.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48275.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48283.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48286.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48287.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48289.json create mode 100644 CVE-2025/CVE-2025-482xx/CVE-2025-48292.json create mode 100644 CVE-2025/CVE-2025-51xx/CVE-2025-5105.json create mode 100644 CVE-2025/CVE-2025-51xx/CVE-2025-5106.json create mode 100644 CVE-2025/CVE-2025-51xx/CVE-2025-5107.json create mode 100644 CVE-2025/CVE-2025-51xx/CVE-2025-5108.json create mode 100644 CVE-2025/CVE-2025-51xx/CVE-2025-5109.json diff --git a/CVE-2021/CVE-2021-363xx/CVE-2021-36340.json b/CVE-2021/CVE-2021-363xx/CVE-2021-36340.json index 27c9031510c..3ae40fcaba2 100644 --- a/CVE-2021/CVE-2021-363xx/CVE-2021-36340.json +++ b/CVE-2021/CVE-2021-363xx/CVE-2021-36340.json @@ -2,7 +2,7 @@ "id": "CVE-2021-36340", "sourceIdentifier": "security_alert@emc.com", "published": "2021-11-20T02:15:07.577", - "lastModified": "2024-11-21T06:13:33.270", + "lastModified": "2025-05-23T13:56:38.400", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -105,13 +105,13 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:dell:emc_secure_connect_gateway:3.52.10.08:*:*:*:virtual:*:*:*", - "matchCriteriaId": "58CC6770-44F4-46D1-ABAA-B65D89EBC5D3" + "criteria": "cpe:2.3:a:dell:secure_connect_gateway:3.52.10.08:*:*:*:virtual:*:*:*", + "matchCriteriaId": "49D658AD-078B-4C3F-8570-E74CFE423EDE" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:dell:emc_secure_connect_gateway:5.00.00.10:*:*:*:virtual:*:*:*", - "matchCriteriaId": "7D4A2735-65BD-47A5-9801-81B1CC80E220" + "criteria": "cpe:2.3:a:dell:secure_connect_gateway:5.00.00.10:*:*:*:virtual:*:*:*", + "matchCriteriaId": "BA1E6C6F-47E6-4E69-B851-A74FD96B19EF" } ] } diff --git a/CVE-2024/CVE-2024-449xx/CVE-2024-44913.json b/CVE-2024/CVE-2024-449xx/CVE-2024-44913.json index 037e3bd329a..72a90df5e18 100644 --- a/CVE-2024/CVE-2024-449xx/CVE-2024-44913.json +++ b/CVE-2024/CVE-2024-449xx/CVE-2024-44913.json @@ -2,7 +2,7 @@ "id": "CVE-2024-44913", "sourceIdentifier": "cve@mitre.org", "published": "2024-08-28T18:15:09.707", - "lastModified": "2024-08-30T16:01:54.347", + "lastModified": "2025-05-23T13:57:52.647", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -90,8 +90,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:irfanview:irfanview:4.67.1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "60281F4F-4DF5-4AAF-95E3-1129742AD5F2" + "criteria": "cpe:2.3:a:irfanview:exr:4.67.1:*:*:*:*:irfanview:*:*", + "matchCriteriaId": "93238451-5C73-403C-9D72-83D733970A98" } ] } @@ -103,7 +103,8 @@ "url": "https://github.com/yuhano/irfanview_Poc", "source": "cve@mitre.org", "tags": [ - "Exploit" + "Exploit", + "Third Party Advisory" ] } ] diff --git a/CVE-2024/CVE-2024-449xx/CVE-2024-44914.json b/CVE-2024/CVE-2024-449xx/CVE-2024-44914.json index e930857fa77..4dc7702d645 100644 --- a/CVE-2024/CVE-2024-449xx/CVE-2024-44914.json +++ b/CVE-2024/CVE-2024-449xx/CVE-2024-44914.json @@ -2,7 +2,7 @@ "id": "CVE-2024-44914", "sourceIdentifier": "cve@mitre.org", "published": "2024-08-28T18:15:09.780", - "lastModified": "2024-08-30T16:01:45.013", + "lastModified": "2025-05-23T13:58:50.630", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -90,8 +90,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:irfanview:irfanview:4.67.1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "60281F4F-4DF5-4AAF-95E3-1129742AD5F2" + "criteria": "cpe:2.3:a:irfanview:exr:4.67.1:*:*:*:*:irfanview:*:*", + "matchCriteriaId": "93238451-5C73-403C-9D72-83D733970A98" } ] } @@ -103,7 +103,8 @@ "url": "https://github.com/yuhano/irfanview_Poc", "source": "cve@mitre.org", "tags": [ - "Exploit" + "Exploit", + "Third Party Advisory" ] } ] diff --git a/CVE-2024/CVE-2024-449xx/CVE-2024-44915.json b/CVE-2024/CVE-2024-449xx/CVE-2024-44915.json index 041f21c14dd..2e124928d90 100644 --- a/CVE-2024/CVE-2024-449xx/CVE-2024-44915.json +++ b/CVE-2024/CVE-2024-449xx/CVE-2024-44915.json @@ -2,7 +2,7 @@ "id": "CVE-2024-44915", "sourceIdentifier": "cve@mitre.org", "published": "2024-08-28T18:15:09.863", - "lastModified": "2024-08-30T16:01:10.753", + "lastModified": "2025-05-23T13:58:17.237", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -90,8 +90,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:irfanview:irfanview:4.67.1.0:*:*:*:*:*:*:*", - "matchCriteriaId": "60281F4F-4DF5-4AAF-95E3-1129742AD5F2" + "criteria": "cpe:2.3:a:irfanview:exr:4.67.1:*:*:*:*:irfanview:*:*", + "matchCriteriaId": "93238451-5C73-403C-9D72-83D733970A98" } ] } @@ -103,7 +103,8 @@ "url": "https://github.com/yuhano/irfanview_Poc", "source": "cve@mitre.org", "tags": [ - "Exploit" + "Exploit", + "Third Party Advisory" ] } ] diff --git a/CVE-2024/CVE-2024-78xx/CVE-2024-7803.json b/CVE-2024/CVE-2024-78xx/CVE-2024-7803.json new file mode 100644 index 00000000000..a604d71db00 --- /dev/null +++ b/CVE-2024/CVE-2024-78xx/CVE-2024-7803.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-7803", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-05-23T13:15:24.910", + "lastModified": "2025-05-23T13:15:24.910", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. A Discord webhook integration may cause DoS." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/479168", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/2648631", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-91xx/CVE-2024-9163.json b/CVE-2024/CVE-2024-91xx/CVE-2024-9163.json new file mode 100644 index 00000000000..44e60650e4e --- /dev/null +++ b/CVE-2024/CVE-2024-91xx/CVE-2024-9163.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-9163", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-05-23T13:15:25.530", + "lastModified": "2025-05-23T13:15:25.530", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], + "references": [ + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/493942", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/2705566", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-08xx/CVE-2025-0825.json b/CVE-2025/CVE-2025-08xx/CVE-2025-0825.json index 858791c80db..c11ed017837 100644 --- a/CVE-2025/CVE-2025-08xx/CVE-2025-0825.json +++ b/CVE-2025/CVE-2025-08xx/CVE-2025-0825.json @@ -2,7 +2,7 @@ "id": "CVE-2025-0825", "sourceIdentifier": "596c5446-0ce5-4ba2-aa66-48b3b757a647", "published": "2025-02-04T15:15:19.420", - "lastModified": "2025-02-04T15:15:19.420", + "lastModified": "2025-05-23T13:15:25.687", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -74,6 +74,10 @@ } ], "references": [ + { + "url": "https://advisory.checkmarx.net/advisory/CVE-2025-0825/", + "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" + }, { "url": "https://github.com/yhirose/cpp-httplib/commit/9c36aae4b73e2b6e493f4133e4173103c9266289", "source": "596c5446-0ce5-4ba2-aa66-48b3b757a647" diff --git a/CVE-2025/CVE-2025-11xx/CVE-2025-1123.json b/CVE-2025/CVE-2025-11xx/CVE-2025-1123.json new file mode 100644 index 00000000000..f9e3f9ea66d --- /dev/null +++ b/CVE-2025/CVE-2025-11xx/CVE-2025-1123.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-1123", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-05-23T13:15:25.820", + "lastModified": "2025-05-23T13:15:25.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Solid Mail \u2013 SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset/3283671/wp-smtp", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f99a918d-53c1-46bd-8e55-9ba77a92efe8?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31049.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31049.json new file mode 100644 index 00000000000..862a5909e10 --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31049.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31049", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:25.990", + "lastModified": "2025-05-23T13:15:25.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/dash/vulnerability/wordpress-dash-1-3-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31053.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31053.json new file mode 100644 index 00000000000..cc7f6f710e9 --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31053.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31053", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.147", + "lastModified": "2025-05-23T13:15:26.147", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate allows Path Traversal. This issue affects KBx Pro Ultimate: from n/a through 7.9.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/knowledgebase-helpdesk-pro/vulnerability/wordpress-kbx-pro-ultimate-7-9-8-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31056.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31056.json new file mode 100644 index 00000000000..62dbf47611b --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31056.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31056", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.300", + "lastModified": "2025-05-23T13:15:26.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Techspawn WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce allows SQL Injection. This issue affects WhatsCart - Whatsapp Abandoned Cart Recovery, Order Notifications, Chat Box, OTP for WooCommerce: from n/a through 1.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/whatscart-for-woocommerce/vulnerability/wordpress-whatscart-plugin-1-1-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31060.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31060.json new file mode 100644 index 00000000000..40e8faf0b1c --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31060.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31060", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.440", + "lastModified": "2025-05-23T13:15:26.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Capie allows PHP Local File Inclusion. This issue affects Capie: from n/a through 1.0.40." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/capie/vulnerability/wordpress-capie-1-0-40-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31064.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31064.json new file mode 100644 index 00000000000..0d5f85a3b41 --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31064.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31064", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.590", + "lastModified": "2025-05-23T13:15:26.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Vizeon - Business Consulting allows PHP Local File Inclusion. This issue affects Vizeon - Business Consulting: from n/a through 1.1.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/vizeon/vulnerability/wordpress-vizeon-business-consulting-1-1-7-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-310xx/CVE-2025-31069.json b/CVE-2025/CVE-2025-310xx/CVE-2025-31069.json new file mode 100644 index 00000000000..971bb29fc41 --- /dev/null +++ b/CVE-2025/CVE-2025-310xx/CVE-2025-31069.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31069", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.740", + "lastModified": "2025-05-23T13:15:26.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in themeton HotStar \u2013 Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar \u2013 Multi-Purpose Business Theme: from n/a through 1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/hotstar/vulnerability/wordpress-hotstar-multi-purpose-business-theme-1-4-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-313xx/CVE-2025-31397.json b/CVE-2025/CVE-2025-313xx/CVE-2025-31397.json new file mode 100644 index 00000000000..eb166868cf1 --- /dev/null +++ b/CVE-2025/CVE-2025-313xx/CVE-2025-31397.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31397", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:26.893", + "lastModified": "2025-05-23T13:15:26.893", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartcms Bus Ticket Booking with Seat Reservation for WooCommerce allows SQL Injection. This issue affects Bus Ticket Booking with Seat Reservation for WooCommerce: from n/a through 1.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/scw-bus-seat-reservation/vulnerability/wordpress-bus-ticket-booking-with-seat-reservation-for-woocommerce-plugin-1-7-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-314xx/CVE-2025-31423.json b/CVE-2025/CVE-2025-314xx/CVE-2025-31423.json new file mode 100644 index 00000000000..512097ae256 --- /dev/null +++ b/CVE-2025/CVE-2025-314xx/CVE-2025-31423.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31423", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.037", + "lastModified": "2025-05-23T13:15:27.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/umberto/vulnerability/wordpress-umberto-1-2-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-314xx/CVE-2025-31430.json b/CVE-2025/CVE-2025-314xx/CVE-2025-31430.json new file mode 100644 index 00000000000..d86aab2a731 --- /dev/null +++ b/CVE-2025/CVE-2025-314xx/CVE-2025-31430.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31430", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.183", + "lastModified": "2025-05-23T13:15:27.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/nrgbusiness/vulnerability/wordpress-the-business-1-6-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31631.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31631.json new file mode 100644 index 00000000000..fff7cf64b1a --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31631.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31631", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.387", + "lastModified": "2025-05-23T13:15:27.387", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/fish-house/vulnerability/wordpress-fish-house-1-2-7-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31632.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31632.json new file mode 100644 index 00000000000..93d4dcdead8 --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31632.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31632", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.540", + "lastModified": "2025-05-23T13:15:27.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SpyroPress La Boom allows PHP Local File Inclusion. This issue affects La Boom: from n/a through 2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/laboom/vulnerability/wordpress-la-boom-2-7-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31633.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31633.json new file mode 100644 index 00000000000..706de713a65 --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31633.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31633", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.687", + "lastModified": "2025-05-23T13:15:27.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kiamo - Responsive Business Service WordPress Theme allows PHP Local File Inclusion. This issue affects Kiamo - Responsive Business Service WordPress Theme: from n/a through 1.3.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/kiamo/vulnerability/wordpress-kiamo-responsive-business-service-wordpress-theme-1-3-3-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-316xx/CVE-2025-31636.json b/CVE-2025/CVE-2025-316xx/CVE-2025-31636.json new file mode 100644 index 00000000000..4311126871b --- /dev/null +++ b/CVE-2025/CVE-2025-316xx/CVE-2025-31636.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31636", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.840", + "lastModified": "2025-05-23T13:15:27.840", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SaurabhSharma WP Post Modules for Elementor allows Reflected XSS. This issue affects WP Post Modules for Elementor: from n/a through 2.5.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-post-modules-el/vulnerability/wordpress-wp-post-modules-for-elementor-plugin-2-5-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31912.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31912.json new file mode 100644 index 00000000000..d4f8261678a --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31912.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31912", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:27.990", + "lastModified": "2025-05-23T13:15:27.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme allows PHP Local File Inclusion. This issue affects Enzio - Responsive Business WordPress Theme: from n/a through 1.1.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/enzio/vulnerability/wordpress-enzio-responsive-business-wordpress-theme-1-1-8-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31913.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31913.json new file mode 100644 index 00000000000..96c0a940906 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31913.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31913", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.140", + "lastModified": "2025-05-23T13:15:28.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami allows PHP Local File Inclusion. This issue affects Ogami: from n/a through 1.53." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/ogami/vulnerability/wordpress-ogami-1-53-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31914.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31914.json new file mode 100644 index 00000000000..0d760f94f66 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31914.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31914", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.300", + "lastModified": "2025-05-23T13:15:28.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder allows Blind SQL Injection. This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through 1.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/pixel-formbuilder/vulnerability/wordpress-pixel-wordpress-form-builderplugin-autoresponder-1-0-2-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31916.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31916.json new file mode 100644 index 00000000000..77b081871ce --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31916.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31916", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.453", + "lastModified": "2025-05-23T13:15:28.453", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in joy2012bd JP Students Result Management System Premium allows Upload a Web Shell to a Web Server. This issue affects JP Students Result Management System Premium: from 1.1.7 through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jp-students-result-system-premium/vulnerability/wordpress-jp-students-result-management-system-premium-plugin-1-1-7-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31918.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31918.json new file mode 100644 index 00000000000..ae13f524c56 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31918.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31918", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.607", + "lastModified": "2025-05-23T13:15:28.607", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro allows Privilege Escalation. This issue affects Simple Business Directory Pro: from n/a through 15.4.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/simple-business-directory-pro/vulnerability/wordpress-simple-business-directory-pro-15-4-8-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31924.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31924.json new file mode 100644 index 00000000000..39c61f330f5 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31924.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31924", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.760", + "lastModified": "2025-05-23T13:15:28.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts allows Object Injection. This issue affects Crafts & Arts: from n/a through 2.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/crafts-and-arts/vulnerability/wordpress-crafts-arts-2-5-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-319xx/CVE-2025-31927.json b/CVE-2025/CVE-2025-319xx/CVE-2025-31927.json new file mode 100644 index 00000000000..61743fd4fd1 --- /dev/null +++ b/CVE-2025/CVE-2025-319xx/CVE-2025-31927.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-31927", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:28.900", + "lastModified": "2025-05-23T13:15:28.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/acerola/vulnerability/wordpress-acerola-1-6-5-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32284.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32284.json new file mode 100644 index 00000000000..4bfa4cc7626 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32284.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32284", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.047", + "lastModified": "2025-05-23T13:15:29.047", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Pet World allows Object Injection. This issue affects Pet World: from n/a through 2.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/petsworld/vulnerability/wordpress-pet-world-2-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32285.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32285.json new file mode 100644 index 00000000000..a3ac7cf6bcf --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32285.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32285", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.207", + "lastModified": "2025-05-23T13:15:29.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ApusTheme Butcher allows Reflected XSS. This issue affects Butcher: from n/a through 2.40." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/butcher/vulnerability/wordpress-butcher-theme-2-40-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32286.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32286.json new file mode 100644 index 00000000000..d3dccfda9d1 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32286.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32286", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.380", + "lastModified": "2025-05-23T13:15:29.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Butcher allows PHP Local File Inclusion. This issue affects Butcher: from n/a through 2.40." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/butcher/vulnerability/wordpress-butcher-2-40-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32289.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32289.json new file mode 100644 index 00000000000..fefcc332525 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32289.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32289", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.527", + "lastModified": "2025-05-23T13:15:29.527", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Yozi allows PHP Local File Inclusion. This issue affects Yozi: from n/a through 2.0.52." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/yozi/vulnerability/wordpress-yozi-2-0-52-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32292.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32292.json new file mode 100644 index 00000000000..2c0fab9a685 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32292.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32292", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.673", + "lastModified": "2025-05-23T13:15:29.673", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis \u2013 Night Club, Concert, Festival WordPress allows Object Injection. This issue affects Jarvis \u2013 Night Club, Concert, Festival WordPress: from n/a through 1.8.11." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/jarvis/vulnerability/wordpress-jarvis-night-club-concert-festival-wordpress-1-8-11-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32293.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32293.json new file mode 100644 index 00000000000..4b342bae081 --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32293.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32293", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.820", + "lastModified": "2025-05-23T13:15:29.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant allows Object Injection. This issue affects Finance Consultant: from n/a through 2.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/finance/vulnerability/wordpress-finance-consultant-2-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-322xx/CVE-2025-32294.json b/CVE-2025/CVE-2025-322xx/CVE-2025-32294.json new file mode 100644 index 00000000000..843f0f5faeb --- /dev/null +++ b/CVE-2025/CVE-2025-322xx/CVE-2025-32294.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32294", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:29.963", + "lastModified": "2025-05-23T13:15:29.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan allows PHP Local File Inclusion. This issue affects Oxpitan: from n/a through 1.3.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/oxpitan/vulnerability/wordpress-oxpitan-1-3-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-323xx/CVE-2025-32302.json b/CVE-2025/CVE-2025-323xx/CVE-2025-32302.json new file mode 100644 index 00000000000..388a07e0503 --- /dev/null +++ b/CVE-2025/CVE-2025-323xx/CVE-2025-32302.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32302", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.103", + "lastModified": "2025-05-23T13:15:30.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Winnex allows PHP Local File Inclusion. This issue affects Winnex: from n/a through 1.3.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/winnex/vulnerability/wordpress-winnex-1-3-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-323xx/CVE-2025-32309.json b/CVE-2025/CVE-2025-323xx/CVE-2025-32309.json new file mode 100644 index 00000000000..4ed8eab5372 --- /dev/null +++ b/CVE-2025/CVE-2025-323xx/CVE-2025-32309.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-32309", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.263", + "lastModified": "2025-05-23T13:15:30.263", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeMove Healsoul allows PHP Local File Inclusion. This issue affects Healsoul: from n/a through 2.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/healsoul/vulnerability/wordpress-healsoul-2-0-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39480.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39480.json new file mode 100644 index 00000000000..ddacb0d8816 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39480.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39480", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.460", + "lastModified": "2025-05-23T13:15:30.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer allows Object Injection. This issue affects Car Dealer: from n/a through 1.6.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/cardealer/vulnerability/wordpress-car-dealer-1-6-6-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39485.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39485.json new file mode 100644 index 00000000000..3e390941a4e --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39485.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39485", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.610", + "lastModified": "2025-05-23T13:15:30.610", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour | Travel Agency WordPress allows Object Injection. This issue affects Grand Tour | Travel Agency WordPress: from n/a through 5.5.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/grandtour/vulnerability/wordpress-grandtour-theme-5-5-1-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39489.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39489.json new file mode 100644 index 00000000000..6841977d8ed --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39489.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39489", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.757", + "lastModified": "2025-05-23T13:15:30.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in pebas CouponXL allows Privilege Escalation. This issue affects CouponXL: from n/a through 4.5.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/couponxl/vulnerability/wordpress-couponxl-4-5-0-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39490.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39490.json new file mode 100644 index 00000000000..41129f5efe6 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39490.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39490", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:30.903", + "lastModified": "2025-05-23T13:15:30.903", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler allows PHP Local File Inclusion. This issue affects Backpack Traveler: from n/a through 2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/backpacktraveler/vulnerability/wordpress-backpack-traveler-2-7-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39494.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39494.json new file mode 100644 index 00000000000..149e30a3f97 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39494.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39494", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.050", + "lastModified": "2025-05-23T13:15:31.050", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilm\u00ebr allows PHP Local File Inclusion. This issue affects Wilm\u00ebr: from n/a through n/a." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/wilmer/vulnerability/wordpress-wilmer-theme-3-4-2-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39495.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39495.json new file mode 100644 index 00000000000..c015ffeba99 --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39495.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39495", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.210", + "lastModified": "2025-05-23T13:15:31.210", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in BoldThemes Avantage allows Object Injection. This issue affects Avantage: from n/a through 2.4.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/avantage/vulnerability/wordpress-avantage-theme-2-4-6-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-394xx/CVE-2025-39499.json b/CVE-2025/CVE-2025-394xx/CVE-2025-39499.json new file mode 100644 index 00000000000..ba723aa348a --- /dev/null +++ b/CVE-2025/CVE-2025-394xx/CVE-2025-39499.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39499", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.360", + "lastModified": "2025-05-23T13:15:31.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in BoldThemes Medicare allows Object Injection. This issue affects Medicare: from n/a through 2.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/medicare/vulnerability/wordpress-medicare-theme-2-1-0-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39500.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39500.json new file mode 100644 index 00000000000..7301817ef4e --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39500.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39500", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.503", + "lastModified": "2025-05-23T13:15:31.503", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hostel allows Object Injection. This issue affects Goodlayers Hostel: from n/a through 3.1.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hostel/vulnerability/wordpress-goodlayers-hostel-plugin-3-1-2-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39501.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39501.json new file mode 100644 index 00000000000..0252a7d81bb --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39501.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39501", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.653", + "lastModified": "2025-05-23T13:15:31.653", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hostel allows Blind SQL Injection. This issue affects Goodlayers Hostel: from n/a through 3.1.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hostel/vulnerability/wordpress-goodlayers-hostel-plugin-3-1-2-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39502.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39502.json new file mode 100644 index 00000000000..1762a986730 --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39502.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39502", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.800", + "lastModified": "2025-05-23T13:15:31.800", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Goodlayers Hostel allows Reflected XSS. This issue affects Goodlayers Hostel: from n/a through 3.1.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hostel/vulnerability/wordpress-goodlayers-hostel-plugin-3-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39503.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39503.json new file mode 100644 index 00000000000..7ff665fb120 --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39503.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39503", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:31.940", + "lastModified": "2025-05-23T13:15:31.940", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hotel allows Object Injection. This issue affects Goodlayers Hotel: from n/a through 3.1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hotel/vulnerability/wordpress-goodlayers-hotel-plugin-3-1-4-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39504.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39504.json new file mode 100644 index 00000000000..51b8df7c6d4 --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39504.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39504", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:32.087", + "lastModified": "2025-05-23T13:15:32.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GoodLayers Goodlayers Hotel allows Blind SQL Injection. This issue affects Goodlayers Hotel: from n/a through 3.1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hotel/vulnerability/wordpress-goodlayers-hotel-plugin-3-1-4-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39505.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39505.json new file mode 100644 index 00000000000..c7e257bd1cf --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39505.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39505", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:32.230", + "lastModified": "2025-05-23T13:15:32.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoodLayers Goodlayers Hotel allows Reflected XSS. This issue affects Goodlayers Hotel: from n/a through 3.1.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/gdlr-hotel/vulnerability/wordpress-goodlayers-hotel-plugin-3-1-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39506.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39506.json new file mode 100644 index 00000000000..241b39feabb --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39506.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39506", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:32.393", + "lastModified": "2025-05-23T13:15:32.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core allows PHP Local File Inclusion. This issue affects Nasa Core: from n/a through 6.3.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/nasa-core/vulnerability/wordpress-nasa-core-plugin-6-3-2-local-file-inclusion-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-395xx/CVE-2025-39536.json b/CVE-2025/CVE-2025-395xx/CVE-2025-39536.json new file mode 100644 index 00000000000..e12e66b6666 --- /dev/null +++ b/CVE-2025/CVE-2025-395xx/CVE-2025-39536.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-39536", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:32.547", + "lastModified": "2025-05-23T13:15:32.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/jobhunt-notifications/vulnerability/wordpress-jobhunt-job-alerts-3-6-arbitrary-content-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41377.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41377.json new file mode 100644 index 00000000000..e167be55577 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41377.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41377", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-05-23T13:15:33.150", + "lastModified": "2025-05-23T13:15:33.150", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cryptographic vulnerability in Iridium Certus 700. This vulnerability allows a user to retrieve the encryption key, resulting in the loading of malicious firmware." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intellian-technologies-iridium-certus", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41378.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41378.json new file mode 100644 index 00000000000..2d3e39233c6 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41378.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41378", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-05-23T13:15:33.307", + "lastModified": "2025-05-23T13:15:33.307", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intellian-technologies-iridium-certus", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41379.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41379.json new file mode 100644 index 00000000000..2d5615773b4 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41379.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41379", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-05-23T13:15:33.450", + "lastModified": "2025-05-23T13:15:33.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Intellian C700 web panel allows you to add firewall rules. Each of these rules has an associated ID, but there is a problem when adding a new rule, the ID used to create the database entry may be different from the JSON ID. If the rule needs to be deleted later, the system will use the JSON ID and therefore fail. This can be exploited by an attacker to create rules that cannot be deleted unless the device is reset to factory defaults." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intellian-technologies-iridium-certus", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41380.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41380.json new file mode 100644 index 00000000000..5c2b3c304ca --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41380.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41380", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-05-23T13:15:33.610", + "lastModified": "2025-05-23T13:15:33.610", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Iridium Certus 700 version 1.0.1 has an embedded credentials vulnerability in the code. This vulnerability allows a local user to retrieve the SSH hash string." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-798" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intellian-technologies-iridium-certus", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-44xx/CVE-2025-4460.json b/CVE-2025/CVE-2025-44xx/CVE-2025-4460.json index 1f4557ca5d1..b9cc174a857 100644 --- a/CVE-2025/CVE-2025-44xx/CVE-2025-4460.json +++ b/CVE-2025/CVE-2025-44xx/CVE-2025-4460.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4460", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-09T04:16:17.700", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T12:28:39.320", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,28 +142,86 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:n150rt_firmware:3.4.0-b20190525:*:*:*:*:*:*:*", + "matchCriteriaId": "03C1ED04-FEC4-45E1-815D-5E84CFA29159" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:n150rt:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7525BE05-F394-4ED7-B7A6-F9005EDE90D7" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_Url_filering", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.308079", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.308079", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.565956", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-44xx/CVE-2025-4461.json b/CVE-2025/CVE-2025-44xx/CVE-2025-4461.json index 43fa4f60595..a86b60cd37e 100644 --- a/CVE-2025/CVE-2025-44xx/CVE-2025-4461.json +++ b/CVE-2025/CVE-2025-44xx/CVE-2025-4461.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4461", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-09T05:15:52.093", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T12:33:21.447", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 0.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 } ], "cvssMetricV2": [ @@ -122,28 +142,86 @@ "value": "CWE-94" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:n150rt_firmware:3.4.0-b20190525:*:*:*:*:*:*:*", + "matchCriteriaId": "03C1ED04-FEC4-45E1-815D-5E84CFA29159" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:n150rt:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7525BE05-F394-4ED7-B7A6-F9005EDE90D7" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/XSS_Virtual_Server", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.308080", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.308080", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.565957", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-44xx/CVE-2025-4462.json b/CVE-2025/CVE-2025-44xx/CVE-2025-4462.json index 3851b1a0ab4..58f081aa2ee 100644 --- a/CVE-2025/CVE-2025-44xx/CVE-2025-4462.json +++ b/CVE-2025/CVE-2025-44xx/CVE-2025-4462.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4462", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-09T05:15:52.307", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T12:37:15.720", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -122,28 +122,86 @@ "value": "CWE-120" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:n150rt_firmware:3.4.0-b20190525:*:*:*:*:*:*:*", + "matchCriteriaId": "03C1ED04-FEC4-45E1-815D-5E84CFA29159" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:n150rt:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7525BE05-F394-4ED7-B7A6-F9005EDE90D7" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/N150RT/BufferOverflow_formWsc_2", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.308081", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.308081", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.565958", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.totolink.net/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46437.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46437.json new file mode 100644 index 00000000000..c8d15a2698e --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46437.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46437", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:33.757", + "lastModified": "2025-05-23T13:15:33.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tayoricom Tayori Form allows Reflected XSS. This issue affects Tayori Form: from n/a through 1.2.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tayori/vulnerability/wordpress-tayori-form-plugin-1-2-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46440.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46440.json new file mode 100644 index 00000000000..c3556af0b68 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46440.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46440", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:33.907", + "lastModified": "2025-05-23T13:15:33.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark kStats Reloaded allows Reflected XSS. This issue affects kStats Reloaded: from n/a through 0.7.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/kstats-reloaded/vulnerability/wordpress-kstats-reloaded-plugin-0-7-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46444.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46444.json new file mode 100644 index 00000000000..5520f2d2c72 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46444.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46444", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.047", + "lastModified": "2025-05-23T13:15:34.047", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in scripteo Ads Pro Plugin allows PHP Local File Inclusion. This issue affects Ads Pro Plugin: from n/a through 4.88." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ap-plugin-scripteo/vulnerability/wordpress-ads-pro-plugin-4-88-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46446.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46446.json new file mode 100644 index 00000000000..5beed985402 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46446.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46446", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.190", + "lastModified": "2025-05-23T13:15:34.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ivanrojas Libro de Reclamaciones allows Stored XSS. This issue affects Libro de Reclamaciones: from n/a through 1.0.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/libro-de-reclamaciones/vulnerability/wordpress-libro-de-reclamaciones-1-0-1-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46448.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46448.json new file mode 100644 index 00000000000..a45e6d55676 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46448.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46448", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.323", + "lastModified": "2025-05-23T13:15:34.323", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reifsnyderb Document Management System allows Reflected XSS. This issue affects Document Management System: from n/a through 1.24." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/dms/vulnerability/wordpress-document-management-system-1-24-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46454.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46454.json new file mode 100644 index 00000000000..a7815eb5513 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46454.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46454", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.620", + "lastModified": "2025-05-23T13:15:34.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords & Description allows PHP Local File Inclusion. This issue affects Meta Keywords & Description: from n/a through 0.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-meta-keywords-meta-description/vulnerability/wordpress-meta-keywords-description-0-8-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46455.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46455.json new file mode 100644 index 00000000000..d611557f9f6 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46455.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46455", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.773", + "lastModified": "2025-05-23T13:15:34.773", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in IndigoThemes WP HRM LITE allows SQL Injection. This issue affects WP HRM LITE: from n/a through 1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-hrm-lite-human-resource-management-system/vulnerability/wordpress-wp-hrm-lite-1-1-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46456.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46456.json new file mode 100644 index 00000000000..56b25562dde --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46456.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46456", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:34.923", + "lastModified": "2025-05-23T13:15:34.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jason Theme Blvd Sliders allows Reflected XSS. This issue affects Theme Blvd Sliders: from n/a through 1.2.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/theme-blvd-sliders/vulnerability/wordpress-theme-blvd-sliders-plugin-1-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46458.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46458.json new file mode 100644 index 00000000000..42cbca04e02 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46458.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46458", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.070", + "lastModified": "2025-05-23T13:15:35.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan allows SQL Injection. This issue affects occupancyplan: from n/a through 1.0.3.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:L", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/occupancyplan/vulnerability/wordpress-occupancyplan-plugin-1-0-3-0-csrf-to-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46460.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46460.json new file mode 100644 index 00000000000..99d4afb6020 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46460.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46460", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.213", + "lastModified": "2025-05-23T13:15:35.213", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Detheme Easy Guide allows SQL Injection. This issue affects Easy Guide: from n/a through 1.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-easy-guide/vulnerability/wordpress-easy-guide-1-0-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46463.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46463.json new file mode 100644 index 00000000000..98d544ff04c --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46463.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46463", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.380", + "lastModified": "2025-05-23T13:15:35.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yamna Khawaja Mailing Group Listserv allows SQL Injection. This issue affects Mailing Group Listserv: from n/a through 3.0.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-mailing-group/vulnerability/wordpress-mailing-group-listserv-3-0-4-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46468.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46468.json new file mode 100644 index 00000000000..dc288751322 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46468.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46468", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.523", + "lastModified": "2025-05-23T13:15:35.523", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra allows PHP Local File Inclusion. This issue affects Fable Extra: from n/a through 1.0.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-5-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46474.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46474.json new file mode 100644 index 00000000000..47bfc9ed95a --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46474.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46474", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.673", + "lastModified": "2025-05-23T13:15:35.673", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SEUR OFICIAL SEUR Oficial allows PHP Local File Inclusion. This issue affects SEUR Oficial: from n/a through 2.2.23." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/seur/vulnerability/wordpress-seur-oficial-2-2-23-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46486.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46486.json new file mode 100644 index 00000000000..0b08406dfbc --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46486.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46486", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.827", + "lastModified": "2025-05-23T13:15:35.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in totalprocessing Nomupay Payment Processing Gateway allows Path Traversal. This issue affects Nomupay Payment Processing Gateway: from n/a through 7.1.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/totalprocessing-card-payments/vulnerability/wordpress-nomupay-payment-processing-gateway-7-1-7-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46487.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46487.json new file mode 100644 index 00000000000..cf4ddac596e --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46487.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46487", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:35.973", + "lastModified": "2025-05-23T13:15:35.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sftranna EC Authorize.net allows Reflected XSS. This issue affects EC Authorize.net: from n/a through 0.3.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ec-authorizenet/vulnerability/wordpress-ec-authorize-net-plugin-0-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46488.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46488.json new file mode 100644 index 00000000000..186d32df818 --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46488.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46488", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.120", + "lastModified": "2025-05-23T13:15:36.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in dastan800 Visual Builder allows Reflected XSS. This issue affects Visual Builder: from n/a through 1.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/visual-builder/vulnerability/wordpress-visual-builder-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46490.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46490.json new file mode 100644 index 00000000000..385bd9adc5e --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46490.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46490", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.267", + "lastModified": "2025-05-23T13:15:36.267", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in wordwebsoftware Crossword Compiler Puzzles allows Upload a Web Shell to a Web Server. This issue affects Crossword Compiler Puzzles: from n/a through 5.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compiler-puzzles-5-2-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46493.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46493.json new file mode 100644 index 00000000000..59780a27e7c --- /dev/null +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46493.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46493", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.420", + "lastModified": "2025-05-23T13:15:36.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordwebsoftware Crossword Compiler Puzzles allows Stored XSS. This issue affects Crossword Compiler Puzzles: from n/a through 5.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/crossword-compiler-puzzles/vulnerability/wordpress-crossword-compiler-puzzles-5-2-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46515.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46515.json new file mode 100644 index 00000000000..f5dfa6da754 --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46515.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46515", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.573", + "lastModified": "2025-05-23T13:15:36.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M A Vinoth Kumar Category Widget allows Reflected XSS. This issue affects Category Widget: from n/a through 2.0.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/category-widget/vulnerability/wordpress-category-widget-plugin-2-0-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46518.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46518.json new file mode 100644 index 00000000000..14bef98c2ad --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46518.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46518", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.723", + "lastModified": "2025-05-23T13:15:36.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phpaddicted IGIT Related Posts With Thumb Image After Posts allows Stored XSS. This issue affects IGIT Related Posts With Thumb Image After Posts: from n/a through 4.5.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/igit-related-posts-with-thumb-images-after-posts/vulnerability/wordpress-igit-related-posts-with-thumb-image-after-posts-4-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46526.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46526.json new file mode 100644 index 00000000000..a6372986a6d --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46526.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46526", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:36.880", + "lastModified": "2025-05-23T13:15:36.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in janekniefeldt My Custom Widgets allows Reflected XSS. This issue affects My Custom Widgets: from n/a through 2.0.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mycustomwidget/vulnerability/wordpress-my-custom-widgets-plugin-2-0-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46527.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46527.json new file mode 100644 index 00000000000..664908cf490 --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46527.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46527", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.037", + "lastModified": "2025-05-23T13:15:37.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LikeCoin Web3Press allows Path Traversal. This issue affects Web3Press: from n/a through 3.2.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/likecoin/vulnerability/wordpress-web3press-decentralize-publishing-with-writing-nft-plugin-3-2-0-arbitrary-file-read-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46537.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46537.json new file mode 100644 index 00000000000..06b19f1f079 --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46537.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46537", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.190", + "lastModified": "2025-05-23T13:15:37.190", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget allows Reflected XSS. This issue affects Section Widget: from n/a through 3.3.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/section-widget/vulnerability/wordpress-section-widget-plugin-3-2-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-465xx/CVE-2025-46539.json b/CVE-2025/CVE-2025-465xx/CVE-2025-46539.json new file mode 100644 index 00000000000..c1ded294d68 --- /dev/null +++ b/CVE-2025/CVE-2025-465xx/CVE-2025-46539.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-46539", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.343", + "lastModified": "2025-05-23T13:15:37.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra allows Blind SQL Injection. This issue affects Fable Extra: from n/a through 1.0.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/fable-extra/vulnerability/wordpress-fable-extra-1-0-6-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47438.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47438.json new file mode 100644 index 00000000000..1ed0877762b --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47438.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47438", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.550", + "lastModified": "2025-05-23T13:15:37.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpjobportal WP Job Portal allows PHP Local File Inclusion. This issue affects WP Job Portal: from n/a through 2.3.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-plugin-2-3-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47453.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47453.json new file mode 100644 index 00000000000..ed3f5bfdbac --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47453.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47453", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.700", + "lastModified": "2025-05-23T13:15:37.700", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Smart Import allows PHP Local File Inclusion. This issue affects WP Smart Import: from n/a through 1.1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-smart-import/vulnerability/wordpress-wp-smart-import-1-1-3-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47458.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47458.json new file mode 100644 index 00000000000..fe6179b64dc --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47458.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47458", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:37.850", + "lastModified": "2025-05-23T13:15:37.850", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in B2itech B2i Investor Tools allows Reflected XSS. This issue affects B2i Investor Tools: from n/a through 1.0.7.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/b2i-investor-tools/vulnerability/wordpress-b2i-investor-tools-plugin-1-0-7-9-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47461.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47461.json new file mode 100644 index 00000000000..dff1310933e --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47461.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47461", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.007", + "lastModified": "2025-05-23T13:15:38.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Authentication Bypass Using an Alternate Path or Channel vulnerability in mediaticus Subaccounts for WooCommerce allows Authentication Abuse. This issue affects Subaccounts for WooCommerce: from n/a through 1.6.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-288" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/subaccounts-for-woocommerce/vulnerability/wordpress-subaccounts-for-woocommerce-plugin-1-6-6-account-takeover-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47478.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47478.json new file mode 100644 index 00000000000..88ce6fd0c77 --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47478.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47478", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.153", + "lastModified": "2025-05-23T13:15:38.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid allows SQL Injection. This issue affects ProfileGrid : from n/a through 5.9.5.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/profilegrid-user-profiles-groups-and-communities/vulnerability/wordpress-profilegrid-5-9-5-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-474xx/CVE-2025-47492.json b/CVE-2025/CVE-2025-474xx/CVE-2025-47492.json new file mode 100644 index 00000000000..2bc69c13037 --- /dev/null +++ b/CVE-2025/CVE-2025-474xx/CVE-2025-47492.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47492", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.297", + "lastModified": "2025-05-23T13:15:38.297", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms allows Path Traversal. This issue affects Drag and Drop File Upload for Elementor Forms: from n/a through 1.4.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/drag-and-drop-file-upload-for-elementor-forms/vulnerability/wordpress-drag-and-drop-file-upload-for-elementor-forms-1-4-3-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47512.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47512.json new file mode 100644 index 00000000000..92120bb4fa1 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47512.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47512", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.443", + "lastModified": "2025-05-23T13:15:38.443", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in tainacan Tainacan allows Path Traversal. This issue affects Tainacan: from n/a through 0.21.14." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tainacan/vulnerability/wordpress-tainacan-plugin-0-21-14-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47513.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47513.json new file mode 100644 index 00000000000..ac8d6ea6424 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47513.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47513", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.590", + "lastModified": "2025-05-23T13:15:38.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in James Laforge Infocob CRM Forms allows Path Traversal. This issue affects Infocob CRM Forms: from n/a through 2.4.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/infocob-crm-forms/vulnerability/wordpress-infocob-crm-forms-plugin-2-4-0-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47529.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47529.json new file mode 100644 index 00000000000..84ec3783791 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47529.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47529", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.743", + "lastModified": "2025-05-23T13:15:38.743", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in UX Design Experts Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin: from n/a through 1.1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/experto-cta-widget/vulnerability/wordpress-experto-cta-widget-call-to-action-sticky-cta-floating-button-plugin-1-1-1-settings-change-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47530.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47530.json new file mode 100644 index 00000000000..c9c080d56b0 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47530.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47530", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:38.897", + "lastModified": "2025-05-23T13:15:38.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in WPFunnels WPFunnels allows Object Injection. This issue affects WPFunnels: from n/a through 3.5.18." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wpfunnels/vulnerability/wordpress-wpfunnels-3-5-18-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47532.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47532.json new file mode 100644 index 00000000000..2a0a4455dc1 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47532.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47532", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.057", + "lastModified": "2025-05-23T13:15:39.057", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in CoinPayments CoinPayments.net Payment Gateway for WooCommerce allows Object Injection. This issue affects CoinPayments.net Payment Gateway for WooCommerce: from n/a through 1.0.17." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/coinpayments-payment-gateway-for-woocommerce/vulnerability/wordpress-coinpayments-net-payment-gateway-for-woocommerce-1-0-17-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47535.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47535.json new file mode 100644 index 00000000000..afbb70d09d4 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47535.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47535", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.343", + "lastModified": "2025-05-23T13:15:39.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpopal Opal Woo Custom Product Variation allows Path Traversal. This issue affects Opal Woo Custom Product Variation: from n/a through 1.2.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/opal-woo-custom-product-variation/vulnerability/wordpress-opal-woo-custom-product-variation-1-2-0-arbitrary-file-deletion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47539.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47539.json new file mode 100644 index 00000000000..e206e6799e3 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47539.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47539", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.513", + "lastModified": "2025-05-23T13:15:39.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in Themewinter Eventin allows Privilege Escalation. This issue affects Eventin: from n/a through 4.0.26." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-event-solution/vulnerability/wordpress-eventin-4-0-26-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47541.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47541.json new file mode 100644 index 00000000000..6a378a301e5 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47541.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47541", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.680", + "lastModified": "2025-05-23T13:15:39.680", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insertion of Sensitive Information Into Sent Data vulnerability in WPFunnels Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.17.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mail-mint/vulnerability/wordpress-mail-mint-1-17-7-sensitive-data-exposure-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47558.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47558.json new file mode 100644 index 00000000000..eda340655d6 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47558.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47558", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.827", + "lastModified": "2025-05-23T13:15:39.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in RomanCode MapSVG allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects MapSVG: from n/a through 8.5.31." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/mapsvg/vulnerability/wordpress-mapsvg-plugin-8-5-31-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47568.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47568.json new file mode 100644 index 00000000000..16c847c15bf --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47568.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47568", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:39.973", + "lastModified": "2025-05-23T13:15:39.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds allows Object Injection. This issue affects ZoomSounds: from n/a through 6.91." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/dzs-zoomsounds/vulnerability/wordpress-zoomsounds-plugin-6-91-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47575.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47575.json new file mode 100644 index 00000000000..04264ee7f85 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47575.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47575", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.127", + "lastModified": "2025-05-23T13:15:40.127", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 92.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-plugin-92-0-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-475xx/CVE-2025-47599.json b/CVE-2025/CVE-2025-475xx/CVE-2025-47599.json new file mode 100644 index 00000000000..5853469c646 --- /dev/null +++ b/CVE-2025/CVE-2025-475xx/CVE-2025-47599.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47599", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.277", + "lastModified": "2025-05-23T13:15:40.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturante Facturante allows SQL Injection. This issue affects Facturante: from n/a through 1.11." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/facturante/vulnerability/wordpress-facturante-1-11-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47603.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47603.json new file mode 100644 index 00000000000..c99d45514e1 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47603.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47603", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.447", + "lastModified": "2025-05-23T13:15:40.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Belingo belingoGeo allows Path Traversal. This issue affects belingoGeo: from n/a through 1.12.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/belingogeo/vulnerability/wordpress-belingogeo-1-12-0-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47611.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47611.json new file mode 100644 index 00000000000..32dc175f495 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47611.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47611", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.590", + "lastModified": "2025-05-23T13:15:40.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Khaled User Meta allows Reflected XSS. This issue affects User Meta: from n/a through 3.1.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/user-meta/vulnerability/wordpress-user-meta-plugin-3-1-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47612.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47612.json index 449eddf4770..552b7fc4ba5 100644 --- a/CVE-2025/CVE-2025-476xx/CVE-2025-47612.json +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47612.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47612", "sourceIdentifier": "audit@patchstack.com", "published": "2025-05-07T15:16:14.380", - "lastModified": "2025-05-08T14:39:09.683", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T12:23:15.643", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -51,10 +71,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:flowdee:clickwhale:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "2.4.7", + "matchCriteriaId": "0022AFC6-5B72-4D2A-A201-6F1C11383163" + } + ] + } + ] + } + ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/clickwhale/vulnerability/wordpress-clickwhale-2-4-6-broken-access-control-vulnerability?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47613.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47613.json new file mode 100644 index 00000000000..0e349b6554e --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47613.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47613", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.733", + "lastModified": "2025-05-23T13:15:40.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/school-management/vulnerability/wordpress-school-management-system-for-wordpress-plugin-92-0-0-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47618.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47618.json new file mode 100644 index 00000000000..f87d29db843 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47618.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47618", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:40.873", + "lastModified": "2025-05-23T13:15:40.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mortgage Calculator BMI Adult & Kid Calculator allows Reflected XSS. This issue affects BMI Adult & Kid Calculator: from n/a through 1.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/bmi-adultkid-calculator/vulnerability/wordpress-bmi-adult-kid-calculator-plugin-1-2-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47619.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47619.json new file mode 100644 index 00000000000..8fb9e2311d1 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47619.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47619", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.023", + "lastModified": "2025-05-23T13:15:41.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in 6Storage 6Storage Rentals allows Path Traversal. This issue affects 6Storage Rentals: from n/a through 2.19.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/6storage-rentals/vulnerability/wordpress-6storage-rentals-2-19-3-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47631.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47631.json new file mode 100644 index 00000000000..90a20d7c53c --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47631.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47631", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.167", + "lastModified": "2025-05-23T13:15:41.167", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incorrect Privilege Assignment vulnerability in mojoomla Hospital Management System allows Privilege Escalation. This issue affects Hospital Management System: from 47.0(20 through 11." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-2023-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47637.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47637.json new file mode 100644 index 00000000000..a6432406422 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47637.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47637", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.310", + "lastModified": "2025-05-23T13:15:41.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in STAGGS STAGGS allows Upload a Web Shell to a Web Server. This issue affects STAGGS: from n/a through 2.11.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/staggs/vulnerability/wordpress-staggs-2-10-1-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47640.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47640.json new file mode 100644 index 00000000000..9c0e79cc3a9 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47640.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47640", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.467", + "lastModified": "2025-05-23T13:15:41.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows SQL Injection. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/printcart-integration/vulnerability/wordpress-printcart-web-to-print-product-designer-for-woocommerce-2-3-6-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47641.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47641.json new file mode 100644 index 00000000000..b783904a31d --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47641.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47641", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.620", + "lastModified": "2025-05-23T13:15:41.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows Upload a Web Shell to a Web Server. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/printcart-integration/vulnerability/wordpress-printcart-web-to-print-product-designer-for-woocommerce-2-3-6-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47642.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47642.json new file mode 100644 index 00000000000..8afc8afb6d0 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47642.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47642", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.767", + "lastModified": "2025-05-23T13:15:41.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed allows Upload a Web Shell to a Web Server. This issue affects Ajar in5 Embed: from n/a through 3.1.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/ajar-productions-in5-embed/vulnerability/wordpress-ajar-in5-embed-3-1-5-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47646.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47646.json new file mode 100644 index 00000000000..0d5d210ea6e --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47646.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47646", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:41.907", + "lastModified": "2025-05-23T13:15:41.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration allows Password Recovery Exploitation. This issue affects PSW Front-end Login & Registration: from n/a through 1.13." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-640" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/psw-login-and-registration/vulnerability/wordpress-psw-front-end-login-registration-1-12-broken-authentication-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47658.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47658.json new file mode 100644 index 00000000000..68f6e22af21 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47658.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47658", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.050", + "lastModified": "2025-05-23T13:15:42.050", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System allows Upload a Web Shell to a Web Server. This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.2.7." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/elex-helpdesk-customer-support-ticket-system/vulnerability/wordpress-elex-wordpress-helpdesk-customer-ticketing-system-3-2-7-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47660.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47660.json new file mode 100644 index 00000000000..077ad1f23d1 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47660.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47660", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.200", + "lastModified": "2025-05-23T13:15:42.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate allows Object Injection. This issue affects WC Affiliate: from n/a through 2.9.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wc-affiliate/vulnerability/wordpress-wc-affiliate-2-8-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47663.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47663.json new file mode 100644 index 00000000000..876d03080ea --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47663.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47663", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.353", + "lastModified": "2025-05-23T13:15:42.353", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/hospital-management/vulnerability/wordpress-hospital-management-system-plugin-47-0-20-11-2023-arbitrary-file-upload-vulnerability-2?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47670.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47670.json new file mode 100644 index 00000000000..06dbb9bd01c --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47670.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47670", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.507", + "lastModified": "2025-05-23T13:15:42.507", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange WordPress Social Login and Register allows PHP Local File Inclusion. This issue affects WordPress Social Login and Register: from n/a through 7.6.10." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/miniorange-login-openid/vulnerability/wordpress-wordpress-social-login-and-register-7-6-9-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47671.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47671.json new file mode 100644 index 00000000000..62246bccf4e --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47671.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47671", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.660", + "lastModified": "2025-05-23T13:15:42.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LETSCMS MLM Software Binary MLM Plan allows SQL Injection. This issue affects Binary MLM Plan: from n/a through 3.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/binary-mlm-plan/vulnerability/wordpress-binary-mlm-plan-3-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47672.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47672.json new file mode 100644 index 00000000000..59264adfeb7 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47672.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47672", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.807", + "lastModified": "2025-05-23T13:15:42.807", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in miniOrange miniOrange Discord Integration allows PHP Local File Inclusion. This issue affects miniOrange Discord Integration: from n/a through 2.2.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/miniorange-discord-integration/vulnerability/wordpress-miniorange-discord-integration-2-2-1-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47673.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47673.json new file mode 100644 index 00000000000..b44349fecef --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47673.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47673", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:42.950", + "lastModified": "2025-05-23T13:15:42.950", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tychesoftwares Arconix Shortcodes allows Reflected XSS. This issue affects Arconix Shortcodes: from n/a through 2.1.16." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/arconix-shortcodes/vulnerability/wordpress-arconix-shortcodes-plugin-2-1-16-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47678.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47678.json new file mode 100644 index 00000000000..b3a9475962f --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47678.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47678", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.103", + "lastModified": "2025-05-23T13:15:43.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FunnelCockpit FunnelCockpit allows Reflected XSS. This issue affects FunnelCockpit: from n/a through 1.4.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/funnelcockpit/vulnerability/wordpress-funnelcockpit-plugin-1-4-2-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47680.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47680.json new file mode 100644 index 00000000000..f50ac6fd7d3 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47680.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47680", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.250", + "lastModified": "2025-05-23T13:15:43.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-tidy-tags allows Reflected XSS. This issue affects xili-tidy-tags: from n/a through 1.12.06." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/xili-tidy-tags/vulnerability/wordpress-xili-tidy-tags-plugin-1-12-06-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47687.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47687.json new file mode 100644 index 00000000000..86ad333653c --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47687.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47687", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.393", + "lastModified": "2025-05-23T13:15:43.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V. StoreKeeper for WooCommerce allows Upload a Web Shell to a Web Server. This issue affects StoreKeeper for WooCommerce: from n/a through 14.4.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/storekeeper-for-woocommerce/vulnerability/wordpress-storekeeper-for-woocommerce-14-4-4-arbitrary-file-upload-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47688.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47688.json index cda61c73070..d7133520aaf 100644 --- a/CVE-2025/CVE-2025-476xx/CVE-2025-47688.json +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47688.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47688", "sourceIdentifier": "audit@patchstack.com", "published": "2025-05-07T15:16:20.743", - "lastModified": "2025-05-08T14:39:09.683", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-05-23T12:46:47.047", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -51,10 +71,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:advancedfilemanager:advanced_file_manager:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "5.3.2", + "matchCriteriaId": "6F3CBA69-CFA9-440B-BFDD-A74F9B68BCB1" + } + ] + } + ] + } + ], "references": [ { "url": "https://patchstack.com/database/wordpress/plugin/file-manager-advanced/vulnerability/wordpress-advanced-file-manager-plugin-5-3-1-broken-access-control-to-notice-dismissal-vulnerability?_s_id=cve", - "source": "audit@patchstack.com" + "source": "audit@patchstack.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-476xx/CVE-2025-47690.json b/CVE-2025/CVE-2025-476xx/CVE-2025-47690.json new file mode 100644 index 00000000000..f2c5a969644 --- /dev/null +++ b/CVE-2025/CVE-2025-476xx/CVE-2025-47690.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-47690", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.543", + "lastModified": "2025-05-23T13:15:43.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in smackcoders Lead Form Data Collection to CRM allows Privilege Escalation. This issue affects Lead Form Data Collection to CRM: from n/a through 3.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-leads-builder-any-crm/vulnerability/wordpress-lead-form-data-collection-to-crm-plugin-3-1-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4782.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4782.json index 5eddc5df9b0..9685768edd2 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4782.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4782.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4782", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T15:15:49.190", - "lastModified": "2025-05-19T13:35:50.497", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T13:04:40.253", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,76 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oretnom23:stock_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "5EF78B01-8058-4E25-932B-225D20B1016A" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/Receiving/info.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309082", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309082", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572195", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/Receiving/info.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4788.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4788.json index 17cb3fb8a3a..e42f21fbefe 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4788.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4788.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4788", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T17:15:56.403", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T13:40:39.103", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-120" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:freefloat:freefloat_ftp_server:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "A9C3D4BD-07C8-4E11-8B6C-6CBBA66F0725" + } + ] + } + ] } ], "references": [ { "url": "https://fitoxs.com/exploit/exploit-cd619c9271a231511f4fa2de1cf569b7040376a5cfe23dc6060884c32638254e.txt", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309097", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309097", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572476", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://fitoxs.com/exploit/exploit-cd619c9271a231511f4fa2de1cf569b7040376a5cfe23dc6060884c32638254e.txt", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4789.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4789.json index 212bb804082..0caa25fc93d 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4789.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4789.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4789", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T17:15:56.610", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T13:39:43.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-120" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:freefloat:freefloat_ftp_server:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "A9C3D4BD-07C8-4E11-8B6C-6CBBA66F0725" + } + ] + } + ] } ], "references": [ { "url": "https://fitoxs.com/exploit/exploit-23d12ba21a827aadd1af628488c8d5308103beb3a2038981aa59a1a6ee3fc7dd.txt", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309098", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309098", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572478", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://fitoxs.com/exploit/exploit-23d12ba21a827aadd1af628488c8d5308103beb3a2038981aa59a1a6ee3fc7dd.txt", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4790.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4790.json index 00d36d2af14..9780fa7fd1e 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4790.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4790.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4790", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T17:15:56.803", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T13:31:33.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-120" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:freefloat:freefloat_ftp_server:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "A9C3D4BD-07C8-4E11-8B6C-6CBBA66F0725" + } + ] + } + ] } ], "references": [ { "url": "https://fitoxs.com/exploit/exploit-3b4e822c5e445f2fe48f704745994fc63a9300dacddaaeb5290b1149dd2d7704.txt", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309099", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309099", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572479", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://fitoxs.com/exploit/exploit-3b4e822c5e445f2fe48f704745994fc63a9300dacddaaeb5290b1149dd2d7704.txt", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-47xx/CVE-2025-4791.json b/CVE-2025/CVE-2025-47xx/CVE-2025-4791.json index 29c52ed7243..fe6ddf64d84 100644 --- a/CVE-2025/CVE-2025-47xx/CVE-2025-4791.json +++ b/CVE-2025/CVE-2025-47xx/CVE-2025-4791.json @@ -2,8 +2,8 @@ "id": "CVE-2025-4791", "sourceIdentifier": "cna@vuldb.com", "published": "2025-05-16T17:15:57.007", - "lastModified": "2025-05-19T13:35:20.460", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-05-23T13:19:04.810", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,28 +142,75 @@ "value": "CWE-120" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:freefloat:freefloat_ftp_server:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "A9C3D4BD-07C8-4E11-8B6C-6CBBA66F0725" + } + ] + } + ] } ], "references": [ { "url": "https://fitoxs.com/exploit/exploit-bc230ff2f41a996bdab8ab4072a38e2e99aa486f2d7f50f8f9e983adb7dc4536.txt", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.309100", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.309100", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.572480", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://fitoxs.com/exploit/exploit-bc230ff2f41a996bdab8ab4072a38e2e99aa486f2d7f50f8f9e983adb7dc4536.txt", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48241.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48241.json new file mode 100644 index 00000000000..290eec16913 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48241.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48241", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.690", + "lastModified": "2025-05-23T13:15:43.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D allows Reflected XSS. This issue affects Verge3D: from n/a through 4.9.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/verge3d/vulnerability/wordpress-verge3d-plugin-4-9-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48245.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48245.json new file mode 100644 index 00000000000..9a4a0b8f482 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48245.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48245", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.843", + "lastModified": "2025-05-23T13:15:43.843", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fullworks Quick Contact Form allows Reflected XSS. This issue affects Quick Contact Form : from n/a through 8.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/quick-contact-form/vulnerability/wordpress-quick-contact-form-plugin-8-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48271.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48271.json new file mode 100644 index 00000000000..04b70661972 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48271.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48271", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:43.990", + "lastModified": "2025-05-23T13:15:43.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in Leadinfo Leadinfo allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Leadinfo: from n/a through 1.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/leadinfo/vulnerability/wordpress-leadinfo-1-1-settings-change-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48273.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48273.json new file mode 100644 index 00000000000..43d4afc30cf --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48273.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48273", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.140", + "lastModified": "2025-05-23T13:15:44.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal allows Path Traversal. This issue affects WP Job Portal: from n/a through 2.3.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wp-job-portal/vulnerability/wordpress-wp-job-portal-2-3-2-arbitrary-file-download-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48275.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48275.json new file mode 100644 index 00000000000..dcdd2a65aa1 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48275.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48275", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.287", + "lastModified": "2025-05-23T13:15:44.287", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Missing Authorization vulnerability in dastan800 Visual Header allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Visual Header: from n/a through 1.3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/visual-header/vulnerability/wordpress-visual-header-1-3-broken-access-control-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48283.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48283.json new file mode 100644 index 00000000000..24e7f31a823 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48283.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48283", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.433", + "lastModified": "2025-05-23T13:15:44.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support allows SQL Injection. This issue affects Majestic Support: from n/a through 1.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/majestic-support/vulnerability/wordpress-majestic-support-1-1-0-sql-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48286.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48286.json new file mode 100644 index 00000000000..21250838000 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48286.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48286", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.587", + "lastModified": "2025-05-23T13:15:44.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catkin ReDi Restaurant Reservation allows Reflected XSS. This issue affects ReDi Restaurant Reservation: from n/a through 24.1209." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/redi-restaurant-reservation/vulnerability/wordpress-redi-restaurant-reservation-plugin-24-1209-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48287.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48287.json new file mode 100644 index 00000000000..5fe9fe898b7 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48287.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48287", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.740", + "lastModified": "2025-05-23T13:15:44.740", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros – Pagaleve allows Object Injection. This issue affects Pix 4x sem juros – Pagaleve: from n/a through 1.6.9." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/wc-pagaleve/vulnerability/wordpress-pix-4x-sem-juros-pagaleve-1-6-9-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48289.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48289.json new file mode 100644 index 00000000000..cd4647a9538 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48289.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48289", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:44.897", + "lastModified": "2025-05-23T13:15:44.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet allows Object Injection. This issue affects Kids Planet: from n/a through 2.2.14." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/theme/kidsplanet/vulnerability/wordpress-kids-planet-2-2-14-php-object-injection-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-482xx/CVE-2025-48292.json b/CVE-2025/CVE-2025-482xx/CVE-2025-48292.json new file mode 100644 index 00000000000..a58d93ca6c4 --- /dev/null +++ b/CVE-2025/CVE-2025-482xx/CVE-2025-48292.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48292", + "sourceIdentifier": "audit@patchstack.com", + "published": "2025-05-23T13:15:45.040", + "lastModified": "2025-05-23T13:15:45.040", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster allows PHP Local File Inclusion. This issue affects Tourmaster: from n/a through 5.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "audit@patchstack.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "audit@patchstack.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://patchstack.com/database/wordpress/plugin/tourmaster/vulnerability/wordpress-tourmaster-plugin-5-3-8-local-file-inclusion-vulnerability?_s_id=cve", + "source": "audit@patchstack.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-51xx/CVE-2025-5105.json b/CVE-2025/CVE-2025-51xx/CVE-2025-5105.json new file mode 100644 index 00000000000..43b6d1e6152 --- /dev/null +++ b/CVE-2025/CVE-2025-51xx/CVE-2025-5105.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-5105", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-23T12:15:19.423", + "lastModified": "2025-05-23T12:15:19.423", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical. Affected by this issue is some unknown functionality of the component Service Port 7777. The manipulation leads to improper clearing of heap memory before release. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-244" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Zephkek/LeakyTozed", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Zephkek/LeakyTozed#41-proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.310082", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.310082", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.568495", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-51xx/CVE-2025-5106.json b/CVE-2025/CVE-2025-51xx/CVE-2025-5106.json new file mode 100644 index 00000000000..c6ceab5f350 --- /dev/null +++ b/CVE-2025/CVE-2025-51xx/CVE-2025-5106.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-5106", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-23T12:15:19.670", + "lastModified": "2025-05-23T12:15:19.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Fujian Kelixun 1.0. It has been classified as critical. This affects an unknown part of the file /app/fax/fax_view.php of the component Filename Handler. The manipulation of the argument fax_file leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + }, + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/byxs0x0/SQL/issues/2", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.310083", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.310083", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.569404", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-51xx/CVE-2025-5107.json b/CVE-2025/CVE-2025-51xx/CVE-2025-5107.json new file mode 100644 index 00000000000..6ae5d583413 --- /dev/null +++ b/CVE-2025/CVE-2025-51xx/CVE-2025-5107.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-5107", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-23T13:15:45.340", + "lastModified": "2025-05-23T13:15:45.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Fujian Kelixun 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /app/xml_cdr/xml_cdr_details.php. The manipulation of the argument uuid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Qi-gy/cve/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.310084", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.310084", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.569448", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-51xx/CVE-2025-5108.json b/CVE-2025/CVE-2025-51xx/CVE-2025-5108.json new file mode 100644 index 00000000000..94119215aa8 --- /dev/null +++ b/CVE-2025/CVE-2025-51xx/CVE-2025-5108.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-5108", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-23T13:15:45.560", + "lastModified": "2025-05-23T13:15:45.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in zongzhige ShopXO 6.5.0. It has been rated as critical. This issue affects the function Upload of the file app/admin/controller/Payment.php of the component ZIP File Handler. The manipulation of the argument params leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + }, + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/147536951/Qiany1/blob/main/shopxo6.5.pdf", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.310085", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.310085", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.569827", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-51xx/CVE-2025-5109.json b/CVE-2025/CVE-2025-51xx/CVE-2025-5109.json new file mode 100644 index 00000000000..d847d143e3e --- /dev/null +++ b/CVE-2025/CVE-2025-51xx/CVE-2025-5109.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-5109", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-05-23T13:15:45.737", + "lastModified": "2025-05-23T13:15:45.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability classified as critical has been found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component STATUS Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + }, + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://fitoxs.com/exploit/exploit-0420d1a7d4e6b45cf1f0b87c2d580c4df77281242d0e9d1b77d7e2fd08f3a41d.txt", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.310086", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.310086", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.581298", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index ac743de6c3e..bb975bed64c 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-05-23T12:00:22.393600+00:00 +2025-05-23T14:00:19.061945+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-05-23T11:15:33.107000+00:00 +2025-05-23T13:58:50.630000+00:00 ``` ### Last Data Feed Release @@ -33,28 +33,59 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -295264 +295394 ``` ### CVEs added in the last Commit -Recently added CVEs: `7` +Recently added CVEs: `130` -- [CVE-2024-13945](CVE-2024/CVE-2024-139xx/CVE-2024-13945.json) (`2025-05-23T10:15:19.287`) -- [CVE-2025-36527](CVE-2025/CVE-2025-365xx/CVE-2025-36527.json) (`2025-05-23T11:15:31.970`) -- [CVE-2025-3893](CVE-2025/CVE-2025-38xx/CVE-2025-3893.json) (`2025-05-23T11:15:32.660`) -- [CVE-2025-3894](CVE-2025/CVE-2025-38xx/CVE-2025-3894.json) (`2025-05-23T11:15:32.820`) -- [CVE-2025-3895](CVE-2025/CVE-2025-38xx/CVE-2025-3895.json) (`2025-05-23T11:15:32.957`) -- [CVE-2025-41407](CVE-2025/CVE-2025-414xx/CVE-2025-41407.json) (`2025-05-23T11:15:33.107`) -- [CVE-2025-4379](CVE-2025/CVE-2025-43xx/CVE-2025-4379.json) (`2025-05-23T10:15:20.963`) +- [CVE-2025-47660](CVE-2025/CVE-2025-476xx/CVE-2025-47660.json) (`2025-05-23T13:15:42.200`) +- [CVE-2025-47663](CVE-2025/CVE-2025-476xx/CVE-2025-47663.json) (`2025-05-23T13:15:42.353`) +- [CVE-2025-47670](CVE-2025/CVE-2025-476xx/CVE-2025-47670.json) (`2025-05-23T13:15:42.507`) +- [CVE-2025-47671](CVE-2025/CVE-2025-476xx/CVE-2025-47671.json) (`2025-05-23T13:15:42.660`) +- [CVE-2025-47672](CVE-2025/CVE-2025-476xx/CVE-2025-47672.json) (`2025-05-23T13:15:42.807`) +- [CVE-2025-47673](CVE-2025/CVE-2025-476xx/CVE-2025-47673.json) (`2025-05-23T13:15:42.950`) +- [CVE-2025-47678](CVE-2025/CVE-2025-476xx/CVE-2025-47678.json) (`2025-05-23T13:15:43.103`) +- [CVE-2025-47680](CVE-2025/CVE-2025-476xx/CVE-2025-47680.json) (`2025-05-23T13:15:43.250`) +- [CVE-2025-47687](CVE-2025/CVE-2025-476xx/CVE-2025-47687.json) (`2025-05-23T13:15:43.393`) +- [CVE-2025-47690](CVE-2025/CVE-2025-476xx/CVE-2025-47690.json) (`2025-05-23T13:15:43.543`) +- [CVE-2025-48241](CVE-2025/CVE-2025-482xx/CVE-2025-48241.json) (`2025-05-23T13:15:43.690`) +- [CVE-2025-48245](CVE-2025/CVE-2025-482xx/CVE-2025-48245.json) (`2025-05-23T13:15:43.843`) +- [CVE-2025-48271](CVE-2025/CVE-2025-482xx/CVE-2025-48271.json) (`2025-05-23T13:15:43.990`) +- [CVE-2025-48273](CVE-2025/CVE-2025-482xx/CVE-2025-48273.json) (`2025-05-23T13:15:44.140`) +- [CVE-2025-48275](CVE-2025/CVE-2025-482xx/CVE-2025-48275.json) (`2025-05-23T13:15:44.287`) +- [CVE-2025-48283](CVE-2025/CVE-2025-482xx/CVE-2025-48283.json) (`2025-05-23T13:15:44.433`) +- [CVE-2025-48286](CVE-2025/CVE-2025-482xx/CVE-2025-48286.json) (`2025-05-23T13:15:44.587`) +- [CVE-2025-48287](CVE-2025/CVE-2025-482xx/CVE-2025-48287.json) (`2025-05-23T13:15:44.740`) +- [CVE-2025-48289](CVE-2025/CVE-2025-482xx/CVE-2025-48289.json) (`2025-05-23T13:15:44.897`) +- [CVE-2025-48292](CVE-2025/CVE-2025-482xx/CVE-2025-48292.json) (`2025-05-23T13:15:45.040`) +- [CVE-2025-5105](CVE-2025/CVE-2025-51xx/CVE-2025-5105.json) (`2025-05-23T12:15:19.423`) +- [CVE-2025-5106](CVE-2025/CVE-2025-51xx/CVE-2025-5106.json) (`2025-05-23T12:15:19.670`) +- [CVE-2025-5107](CVE-2025/CVE-2025-51xx/CVE-2025-5107.json) (`2025-05-23T13:15:45.340`) +- [CVE-2025-5108](CVE-2025/CVE-2025-51xx/CVE-2025-5108.json) (`2025-05-23T13:15:45.560`) +- [CVE-2025-5109](CVE-2025/CVE-2025-51xx/CVE-2025-5109.json) (`2025-05-23T13:15:45.737`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `15` -- [CVE-2024-51547](CVE-2024/CVE-2024-515xx/CVE-2024-51547.json) (`2025-05-23T10:15:20.647`) -- [CVE-2025-5096](CVE-2025/CVE-2025-50xx/CVE-2025-5096.json) (`2025-05-23T09:15:21.710`) +- [CVE-2021-36340](CVE-2021/CVE-2021-363xx/CVE-2021-36340.json) (`2025-05-23T13:56:38.400`) +- [CVE-2024-44913](CVE-2024/CVE-2024-449xx/CVE-2024-44913.json) (`2025-05-23T13:57:52.647`) +- [CVE-2024-44914](CVE-2024/CVE-2024-449xx/CVE-2024-44914.json) (`2025-05-23T13:58:50.630`) +- [CVE-2024-44915](CVE-2024/CVE-2024-449xx/CVE-2024-44915.json) (`2025-05-23T13:58:17.237`) +- [CVE-2025-0825](CVE-2025/CVE-2025-08xx/CVE-2025-0825.json) (`2025-05-23T13:15:25.687`) +- [CVE-2025-4460](CVE-2025/CVE-2025-44xx/CVE-2025-4460.json) (`2025-05-23T12:28:39.320`) +- [CVE-2025-4461](CVE-2025/CVE-2025-44xx/CVE-2025-4461.json) (`2025-05-23T12:33:21.447`) +- [CVE-2025-4462](CVE-2025/CVE-2025-44xx/CVE-2025-4462.json) (`2025-05-23T12:37:15.720`) +- [CVE-2025-47612](CVE-2025/CVE-2025-476xx/CVE-2025-47612.json) (`2025-05-23T12:23:15.643`) +- [CVE-2025-47688](CVE-2025/CVE-2025-476xx/CVE-2025-47688.json) (`2025-05-23T12:46:47.047`) +- [CVE-2025-4782](CVE-2025/CVE-2025-47xx/CVE-2025-4782.json) (`2025-05-23T13:04:40.253`) +- [CVE-2025-4788](CVE-2025/CVE-2025-47xx/CVE-2025-4788.json) (`2025-05-23T13:40:39.103`) +- [CVE-2025-4789](CVE-2025/CVE-2025-47xx/CVE-2025-4789.json) (`2025-05-23T13:39:43.877`) +- [CVE-2025-4790](CVE-2025/CVE-2025-47xx/CVE-2025-4790.json) (`2025-05-23T13:31:33.667`) +- [CVE-2025-4791](CVE-2025/CVE-2025-47xx/CVE-2025-4791.json) (`2025-05-23T13:19:04.810`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 9399ba45628..9c98a95237f 100644 --- a/_state.csv +++ b/_state.csv @@ -179432,7 +179432,7 @@ CVE-2021-36337,0,0,86b1da4c52971ea4903e08f5bc98de967cad2b0584001bae44935de2612ae CVE-2021-36338,0,0,2c272c5b10dc6742ec784554b0ba22f5413870de238169e9fc5f5473846629f9,2024-11-21T06:13:32.963000 CVE-2021-36339,0,0,f394c9d978dccc2ad33dde7fde9c76882c84729228126703ffc745c751ff27f4,2024-11-21T06:13:33.093000 CVE-2021-3634,0,0,cd08e8aab661156fa09d920b83127f77b7ebbbcf042bd0b0390080fc8d861226,2024-11-21T06:22:02.090000 -CVE-2021-36340,0,0,2e063adc9fb2102b2d85bb9ffe9f2472182beeaf692db210a71207a0690e8767,2024-11-21T06:13:33.270000 +CVE-2021-36340,0,1,89a44268592ed73063353b4476d52f05a0153fdcd73b663c3282af8cfffce6d0,2025-05-23T13:56:38.400000 CVE-2021-36341,0,0,2e562fd584f569eccfb210c314ee46cbcbaa05eda4ecbfc6367eac8c62315ab8,2024-11-21T06:13:33.400000 CVE-2021-36342,0,0,98a4d1f83490fe64c3c03cfe2cfa46848c3dc0a798916dd7d6e378cdd4a8e88e,2024-11-21T06:13:33.533000 CVE-2021-36343,0,0,05aa18276dfbf9d37a9952e4971fb053ebc9feefcb63a6a2b95d9c0e0537492c,2024-11-21T06:13:34.147000 @@ -248925,7 +248925,7 @@ CVE-2024-13940,0,0,7c0bd40986ec526be4b777967257f5a8e5316f112c6ca4442082e5ceb1f98 CVE-2024-13941,0,0,0e25bcf0e89aef7755747b9909dd645785f611fc278474cc9d9d76a6dfcf2986,2025-04-02T14:58:07.527000 CVE-2024-13943,0,0,f328056289c0bf1287f881d5c6a126f0dfcceccf5da083e960d17628c2276a78,2025-05-02T13:53:40.163000 CVE-2024-13944,0,0,a82207e7ba971ab7aef7f91ba8e1008f6a20bf2022bd0935a1077ce9440f2ebd,2025-05-12T17:32:32.760000 -CVE-2024-13945,1,1,87ee37d91d72d140bb1ca2198039254497a179560344fc293c2f000edd061217,2025-05-23T10:15:19.287000 +CVE-2024-13945,0,0,87ee37d91d72d140bb1ca2198039254497a179560344fc293c2f000edd061217,2025-05-23T10:15:19.287000 CVE-2024-13946,0,0,bf6efdda69919ab60acb430b3303bbfc755dec3bc6f8596862384ff13a4cfc0c,2025-05-22T19:15:38.100000 CVE-2024-13947,0,0,c78b2a3c4219cca39b94466eb8fbcf7cad88b22107e37c28ee6b3385b25c3526,2025-05-22T19:15:38.280000 CVE-2024-13948,0,0,16be5b3f7e1d3577438813f6095239d531091c25e689061b54177fc46751869d,2025-05-22T19:15:38.457000 @@ -268860,9 +268860,9 @@ CVE-2024-4491,0,0,44f6ea2b3bdb2c2b126d1862dbc937b1bfc717788d8a3e14a2b3625f881bdc CVE-2024-44910,0,0,38fbad809f698f01a9df6d19a6055b3a9fb72a271102958d71ec64768cb72bc7,2025-03-19T15:15:50.533000 CVE-2024-44911,0,0,a47f0b0150a6be1a0101ad824f46e66874b22e4c7b06327f4fda077e35518543,2025-03-18T21:15:29.927000 CVE-2024-44912,0,0,371f2660c94226f4e27a0ff12a9531758f3ceef8d8fddc67381d914d1232cc4f,2025-03-17T22:15:13.513000 -CVE-2024-44913,0,0,e43a463a31f4996107c79a76b8c394587da89790c855fcccc29bab35cc4e8b2b,2024-08-30T16:01:54.347000 -CVE-2024-44914,0,0,209cb6eef6f7b8b9f97a00080bb28fa39d7ad3220d7c435041ea845722d5b211,2024-08-30T16:01:45.013000 -CVE-2024-44915,0,0,6d0a9fb2b67194e54473214f93703f0466ac6ee309ff391c09bff985eb1f4e82,2024-08-30T16:01:10.753000 +CVE-2024-44913,0,1,40c379f936e480c4e031b990d25386df6b7defd4aec4a0f6b125896825a87be9,2025-05-23T13:57:52.647000 +CVE-2024-44914,0,1,899ac7d9e3e6d8ef559353698dde0c1c9ff0e69a60ab80b0f398f55404e7b982,2025-05-23T13:58:50.630000 +CVE-2024-44915,0,1,d827b464000be8f8152d45d5d5bcb178da6e3ff9c1a6e463c2c4a3923771d6ff,2025-05-23T13:58:17.237000 CVE-2024-44916,0,0,5213a4cc27bf2af0167bfae48d3a0a3af753203fc0b07e8629170d8c2f6eaeae,2025-03-28T17:12:43.010000 CVE-2024-44918,0,0,e3503f0a2713a46a90d600d846fdae1feb64f17d4eaacbab44848c9eae0ec339,2025-03-28T17:12:36.490000 CVE-2024-44919,0,0,fce23bad8dbb22330b1ce6e8e832ac0957c2817649ad28e9b917bb8b7eca034d,2024-09-06T22:54:56.927000 @@ -273783,7 +273783,7 @@ CVE-2024-51543,0,0,ca949f71f335cb6d3f92f415c773eeddd1f6eb8220a72e48b33a5ffe51031 CVE-2024-51544,0,0,594d30083a81b182c620d6d03ccbe84b28da11fe57473c60ac21121e95f05ede,2025-04-10T19:42:25.157000 CVE-2024-51545,0,0,a4b8aa7069523e40139fb3a24bfa9bbaba9beabc9c56431171cdd1eb7aaf0530,2025-02-27T17:22:17.580000 CVE-2024-51546,0,0,2b7d2ed1b3c1d35cd65cf3d2239a5b0dfa667195eca1e04d6c8565ee65a612dd,2025-04-10T19:28:07.210000 -CVE-2024-51547,0,1,18d16c84e6b2591d6430e9b2ae1fb20f3a2a8a898f27919e7f6a3ea8e0cefa4a,2025-05-23T10:15:20.647000 +CVE-2024-51547,0,0,18d16c84e6b2591d6430e9b2ae1fb20f3a2a8a898f27919e7f6a3ea8e0cefa4a,2025-05-23T10:15:20.647000 CVE-2024-51548,0,0,7d9709d0855401dfb9c745c0d11b58433dc7c72e7b3dac228ea835c7008ec03e,2025-02-27T17:23:44.833000 CVE-2024-51549,0,0,7a913dd216baa7e7597ae6670d152495655b15a26cf3e96b08ca7c1c40542aab,2025-02-27T17:26:15.490000 CVE-2024-5155,0,0,2801a7861c6f621ab1aeda3d9644689e4c7101f0c6cd1c35db7e5ad1a20fc106,2024-11-21T09:47:05.140000 @@ -280058,6 +280058,7 @@ CVE-2024-7798,0,0,5f16fe0024870cfadb877eaf4284c0805bad62b0694b31bc0ad8c0be4ee438 CVE-2024-7799,0,0,8a384749e51110613249482b2406a8028d7369fe3cdbe1e500d2894f45921518,2024-08-19T16:47:37.860000 CVE-2024-7800,0,0,314b20b4b05c83532bf162a23ffc99eb50e7574ab46f7ded33fe4926c17ff367,2024-08-19T16:50:39.993000 CVE-2024-7801,0,0,e5c6deb5a4496184d51e3590a07a7085301637c1bbacbb4c87c9dcfa4ff154b2,2024-10-17T15:19:27.053000 +CVE-2024-7803,1,1,87c8496b923d0e5c2dbd52516fa709228460d2df95a7980075173c058e2782ea,2025-05-23T13:15:24.910000 CVE-2024-7804,0,0,4a2b3904f165782c6983ee3fdb1f2f292c0189f966a1e2564d43de653d6eeaa6,2025-04-01T17:15:44.567000 CVE-2024-7805,0,0,135d6da17dfa4c84aefd569e9d92e16548bde418c54a07f703c8b45a0b8c6cd9,2024-09-11T14:15:13.560000 CVE-2024-7806,0,0,f56571b86552de17719818730dcf9c15312dfb699880670dd6dcddfa39358cea,2025-03-26T16:46:35.783000 @@ -281346,6 +281347,7 @@ CVE-2024-9159,0,0,0c09b32b4ca2f4aa59dfa5ab274a1c5a0a3b3335d47d020e96d2de90b25c55 CVE-2024-9160,0,0,31ee71c8694d32148d135e3bd44456b5f7d24b3275d5c1de1c0a53c0e831c3e8,2024-09-30T12:45:57.823000 CVE-2024-9161,0,0,5b42d22c820a004a18d0659ab11e5cf7b6b17ebdad8f937ff212dcc2ad59ab5f,2025-01-29T18:56:32.393000 CVE-2024-9162,0,0,3ed9f79200cd6e516a6056e3c31f6f6060064775b21e23fe7b8a98c8d0db40ef,2024-10-28T13:58:09.230000 +CVE-2024-9163,1,1,977d8dc2739298e0f05ddd307bf0acb659da6a3cf1c4a99a4c13c69af43e4424,2025-05-23T13:15:25.530000 CVE-2024-9164,0,0,d5548ae3a00867f99964259f08e97b03cae6c8fb72f3546b0fe2b1327f21c3ab,2024-12-13T16:33:53.080000 CVE-2024-9165,0,0,dc899508d72791e5c761f96fa2a1f7b8193367cfac67250d9f9f4a221602c30d,2024-11-01T12:57:03.417000 CVE-2024-9166,0,0,08c32389088d64b5a79629e9f333dcbd555727e84c36a98189c88480a6573842,2024-09-30T12:46:20.237000 @@ -282722,7 +282724,7 @@ CVE-2025-0820,0,0,6d45f28eb00b0039ad804e065c885bf40234d2bcc3aa26a58867a7f5eaafc2 CVE-2025-0821,0,0,276d38f36e1718392d91943f87a21d4117bd30970ca15dadffff44ef97d51e0f,2025-02-25T03:42:52.263000 CVE-2025-0822,0,0,4c844a6713ce2631895193eac241699c6c3839eb1c8dbea359488af5de55887f,2025-02-24T12:36:46.670000 CVE-2025-0823,0,0,b17020edbeb4f15871634c93dd95e17203bfc02555cfe3346399d6264293faeb,2025-02-28T03:15:10.510000 -CVE-2025-0825,0,0,a0334191040ddd84cf58e374702797f73c6f21c21dcc064c3fd05efc8149278f,2025-02-04T15:15:19.420000 +CVE-2025-0825,0,1,dd565248f21437a718065d350729b960b50f55e8ce917f0187323013e0878c37,2025-05-23T13:15:25.687000 CVE-2025-0826,0,0,293d6d31be8db1664e190f87aa6a6cb457f9c59fe75136680df1e774d15d3385,2025-03-17T14:15:20.780000 CVE-2025-0827,0,0,d9140e70dc8f2cd345354c35b0c3ebebe2a9916e94f6f4bedf426893e0cda0e9,2025-03-17T14:15:20.913000 CVE-2025-0828,0,0,d1425b999abeae496094f0b10117e373986f374f1dd909e1e2e290328c412bd6,2025-03-17T14:15:21.037000 @@ -282954,6 +282956,7 @@ CVE-2025-1118,0,0,bfef88f2fe8e8975e898d2201e022ee653dbf0bf3c6cab7dd0efee4a3503a0 CVE-2025-1119,0,0,ed2f2afd1626a47beb4c308f115314a6b5ebef6317483cf0ebb458fbd885cde2,2025-03-13T07:15:36.517000 CVE-2025-1121,0,0,1d5e082757754b39ee885fcc9c9fedaa0af532ca619f7a902e79437ba54b79fa,2025-05-06T01:15:48.787000 CVE-2025-1122,0,0,487698333e66815ca37b05ce2334c012549f0fe365be5f3b63ab573f3351b5c0,2025-05-06T01:15:49.777000 +CVE-2025-1123,1,1,2f9c232ac8dc2055e20c06a176fbdea81088ab8dbbe594a2a88ac470f3efbaf3,2025-05-23T13:15:25.820000 CVE-2025-1125,0,0,2f04992a8811506ffd86df04ce8fd4c4eaf818b2350c9b37d99c1e9008bb7d98,2025-03-05T21:15:19.707000 CVE-2025-1126,0,0,75a0af68b2de42873e4ee33ccd68bb162ec9dabf122dea8ebb0bf11a24b953a1,2025-02-11T17:15:23.537000 CVE-2025-1127,0,0,5cab03037829677b3ff4c77d268b6ebc0b526a062cfabc702392a7f88c64ffc1,2025-02-13T19:15:14.153000 @@ -290764,13 +290767,19 @@ CVE-2025-31040,0,0,0231cc866d51dc61c7f61781fad3ea23cc4ca7aeca5478924158d392d59bb CVE-2025-31041,0,0,0041321ae6c993907944cd87119ee6b5b37dfd775d87cba0f12518a7a41dc2cd,2025-04-11T15:39:52.920000 CVE-2025-31042,0,0,dd7508689f88e2fe1dddad52457abe85ec8bdf2cefb5a744ba057ee4d8c1ed58,2025-04-09T20:02:41.860000 CVE-2025-31043,0,0,2b40a96fc4b8eaf20a7a30e77b072b27918475850ebb17c34a51d56b785169bd,2025-04-01T20:26:30.593000 +CVE-2025-31049,1,1,6e30a7e2dac736059f4e62a72079304daee85a9c0356cb524fb068ef57bab922,2025-05-23T13:15:25.990000 CVE-2025-3105,0,0,7655f789901fca3e90cb57cc3d3b5f5846f175abac5b5dbf4ae81b8a278e336a,2025-04-07T14:18:15.560000 +CVE-2025-31053,1,1,26673f7a5e6fc3d1a954e844587cbf3564ab9ce9fa19f1e0b3809ff0bd95e188,2025-05-23T13:15:26.147000 +CVE-2025-31056,1,1,69fcf5814dcb99ff20fcd18c7dcf9a96c4c7f803c6324879859ffaf3bff3bdc9,2025-05-23T13:15:26.300000 CVE-2025-3106,0,0,5ae270a07427b09926da38ac45ef4b636cf5c9da799ce95372026884de2a9ae9,2025-04-21T14:23:45.950000 +CVE-2025-31060,1,1,3cbe234dca68242e0590faf59a9cfa5b43dbbbc0a0dac98c5a849a610d42d602,2025-05-23T13:15:26.440000 CVE-2025-31062,0,0,5d7c059650657a6c3c5fa04f2ce0a9521d6a9f9acbed5ef01456bb424c15a563,2025-05-19T13:35:50.497000 CVE-2025-31063,0,0,be9751fa8856dcb655215b1c0c605485498375e33bf37c7975c1f55c8d0ac002,2025-05-19T13:35:50.497000 +CVE-2025-31064,1,1,b290c1bfd1f2d1f09b9a582e20c838e85db09b27aebb995e162b37e2db3c3808,2025-05-23T13:15:26.590000 CVE-2025-31065,0,0,37e21d8e20b2423c5c7cf0224a0d29f05db64ddce7d087324682188c3a9667a9,2025-05-19T13:35:50.497000 CVE-2025-31066,0,0,036b2d27adeb2459465bf225feee79cec2f870b4c18bfde4d9eade318408c7b2,2025-05-19T13:35:50.497000 CVE-2025-31068,0,0,df5884ecb139c520ec13ec8c91f3e8fe42bb76ad6f188fb4e63605090734b004,2025-05-19T13:35:50.497000 +CVE-2025-31069,1,1,db9aac7376bf1d63a6d351c4b1f6ab7ea8b21dcc838680fc757f4dd3a34d6587,2025-05-23T13:15:26.740000 CVE-2025-3107,0,0,6976ad91f9d9e97a90ece385a7c26fd8ad8b769641113c923f75abc846f967d7,2025-05-13T19:35:18.080000 CVE-2025-31071,0,0,159d6ebabd22b6a5d5844165290d4215e92f961f82e3e3f76a26f364833491e5,2025-05-19T13:35:50.497000 CVE-2025-31073,0,0,115918a5cd22bae5fc4fd10c6a43cbb47a9370110d3db58b7019ed219e512f16,2025-03-28T18:11:40.180000 @@ -290999,6 +291008,7 @@ CVE-2025-31392,0,0,af5926a297ee06fad00816bdca5acd86e15a3bb4a408d814556ec95dc5559 CVE-2025-31393,0,0,d9d0a7d5bc95ef6373f570176c8394d94346217559e211e7f82d92c36ed19000,2025-04-09T20:02:41.860000 CVE-2025-31394,0,0,dcb2d58983e82a4803d87aef9833fc22dc7940b5638d0e63e8a54510592ceb81,2025-04-09T20:02:41.860000 CVE-2025-31395,0,0,d63b8f50a08b3f03912992e56dcb94ad0fb69cd8ebe1ea98498b9e95366ac63a,2025-04-09T20:02:41.860000 +CVE-2025-31397,1,1,81f2e85af2eda93abd2c960f5fadfeeeba5051bdd192c4a73316d5758e53ee37,2025-05-23T13:15:26.893000 CVE-2025-31399,0,0,7c8d11ba4d0f5bc6369fc9e14d3cc41eb0008d7506d25878a6aaceb8d676a8e8,2025-04-09T20:02:41.860000 CVE-2025-3140,0,0,5e4447ac4f353309a204c953780c9aab222b7aa274e4ff45d2062480543744c2,2025-04-09T20:15:21.987000 CVE-2025-31400,0,0,396ab2cf0dea963b562cfbc33737fee1c7e3fa84c2f11a35bc4583ab0b70558e,2025-04-09T20:02:41.860000 @@ -291024,7 +291034,9 @@ CVE-2025-31419,0,0,4a712b78a5c17ab03dbc79fdd0418b0456ec3efc6ea6b7aacc939449a0c98 CVE-2025-3142,0,0,f964d205b35a839e272a1c6594128dd748ac53738cd2547105caa37d22d1473f,2025-05-14T21:06:15.967000 CVE-2025-31420,0,0,695f432344892337ae2ac59a6e952dde4581ca04d99a48205c358fb4efa25174,2025-04-07T14:18:15.560000 CVE-2025-31421,0,0,7e33fda4666889d6391294873e088571cbaa504e495b35bac6915192a2dd8df4,2025-04-07T14:18:15.560000 +CVE-2025-31423,1,1,49c690f5f4a6254b8ee0a81b8d40e9b22376e5bf86dd6b9f1f6f3abe530eec8a,2025-05-23T13:15:27.037000 CVE-2025-3143,0,0,0d12bd465535fc01b21d2fafc9f08653aefeba4bc2621612339ffe2e350cc35c,2025-05-14T21:06:29.300000 +CVE-2025-31430,1,1,4c71be8d9ed84e9ecbc5d045c2b573c3b041534db5b65dfb53a96506d22e3383,2025-05-23T13:15:27.183000 CVE-2025-31431,0,0,9b65447f095eb6450cd16ceaae607c3f49ad8abcc8b0a8029061fac7fc7f6b63,2025-04-02T14:58:07.527000 CVE-2025-31432,0,0,1e744df6d78360ba76514d4c712d70299d06243466e1aa99c1a3712db77e8fc9,2025-03-28T18:11:40.180000 CVE-2025-31433,0,0,fac9d330e1a61decf3f5950e2c96f512d6c77792307fff15d5bc19458ddf8ece,2025-03-28T18:11:40.180000 @@ -291227,6 +291239,10 @@ CVE-2025-31628,0,0,7d378824ca72e66ca4aa7cf2de136edcbc463f3e30bf37a427b83820ef554 CVE-2025-31629,0,0,7feff55cf06b17a9b14d5e928a7330b9e036aea992741e33d5558d6e786b4183,2025-04-01T20:26:30.593000 CVE-2025-3163,0,0,f532e36269cd7ed1c8c6fbcf53721ff1ab097db026b29755f65d36452625849a,2025-04-23T15:31:12.210000 CVE-2025-31630,0,0,88a0a623ea5a0b2042bb8e3f6acee38a0d07b7a906c52f601cee31c2a2928c3e,2025-05-19T13:35:50.497000 +CVE-2025-31631,1,1,bf1bdd26731220d8f3578fc65dc7ce1f3d4e1e013c73a385e78c0a8e1cd1f734,2025-05-23T13:15:27.387000 +CVE-2025-31632,1,1,81ea8cd9a953e037ab668410dc91184bd7e9486e3095e8c7c801ee9f8cdbbdc7,2025-05-23T13:15:27.540000 +CVE-2025-31633,1,1,6d3d15f98b20518398d424b457f633ea882ba7fb69011f6b1092f75f08469578,2025-05-23T13:15:27.687000 +CVE-2025-31636,1,1,505db8158c4f8dadc1ce1da7f644bd8b60354bd197a10fc7a6b8eb764e851e12,2025-05-23T13:15:27.840000 CVE-2025-31637,0,0,53e73c8f6cb038aecf663b53032f054870910773ffd0f86a605179ee5e450bd6,2025-05-19T13:35:50.497000 CVE-2025-31639,0,0,ae7dab4858d9a967f5556c2ba2c5a6799452f59e30a3f545f8c99dced5a8da84,2025-05-19T13:35:50.497000 CVE-2025-3164,0,0,f430347d00566ecabc1456225b754db04a6b786f314d5bbdf398f229ee8b6709,2025-04-23T15:18:08.857000 @@ -291481,12 +291497,19 @@ CVE-2025-31909,0,0,ef5a77ff7c56cdb7af1e7c60541f13ea1b65af313a23517a86ab080f1625b CVE-2025-3191,0,0,564fd863d7dc4a59badb3cc3f317c5960c015b84bd605de924f05a0141415dd2,2025-04-07T14:18:15.560000 CVE-2025-31910,0,0,f90306bb3a5ca866ba4ad6c3e2e3265ac1aee43de585a8755ddbdfd5d848a42d,2025-04-01T20:26:01.990000 CVE-2025-31911,0,0,a3e8c05d42eb38721b859fcb5e3e84e7f358ba837d299b49c2c70eab8912fd09,2025-04-07T14:18:34.453000 +CVE-2025-31912,1,1,b34fa7f19409b9ddad73aa090bb203cc4fa2f661431e801474aeb14c49040727,2025-05-23T13:15:27.990000 +CVE-2025-31913,1,1,4a21a045c9b163afc8fab5e85ec968c653cf919030329fa9d5c4b32788bb9580,2025-05-23T13:15:28.140000 +CVE-2025-31914,1,1,03382ae69f4a15d79833dd2d4c0c19789e4c2e58016b6693efb532c477f86154,2025-05-23T13:15:28.300000 CVE-2025-31915,0,0,b01a878c422d271ef24a4733824978564b49331599f05f69f543cfd09dc29e1e,2025-05-19T13:35:50.497000 +CVE-2025-31916,1,1,12a9b86393275f73646a7510ac6f6c1467f61e650c7633e5099e9e766595b43d,2025-05-23T13:15:28.453000 +CVE-2025-31918,1,1,edbfd758ddab2d8fbdb72617e27a7914b6ecab2b3a6f229f51549272343585f5,2025-05-23T13:15:28.607000 CVE-2025-3192,0,0,14f88a64f4f058599196fb894b7652f55d55387666faa45a3d02f24f7d0ecfe8,2025-04-07T14:18:15.560000 CVE-2025-31921,0,0,388d68bd80dd43a130bcfd421c1e4aea94db2871694b753a893d06aa5a1833e5,2025-05-19T13:35:50.497000 CVE-2025-31922,0,0,431f97068914f0c37dd3e85eb06b27af3ede9f242695fbeaf8cd56de445561c8,2025-05-19T13:35:50.497000 CVE-2025-31923,0,0,325aefaf10fcea456b97880db489a87d0bd18982174908d76e61a063496794c4,2025-05-19T13:35:50.497000 +CVE-2025-31924,1,1,f40be1e26e2733fad43993660a498557dc4131697a05b2160589b77c5fef6455,2025-05-23T13:15:28.760000 CVE-2025-31926,0,0,e1b8b7cdfdd1023f0123caded1f28a468c818441ed717c97e63f3fcd3a6e74b7,2025-05-19T13:35:50.497000 +CVE-2025-31927,1,1,5cdcdb27d7b22e6b7926c1b1781a959ac45808369d409d0c5fd8e14adcd88daa,2025-05-23T13:15:28.900000 CVE-2025-31928,0,0,08f979cbba3b265f9dddb8e656b44f77824c3181854c61f17f3d259333afd778,2025-05-19T13:35:50.497000 CVE-2025-31929,0,0,502b54bda776348d0cb5323658228b220fd4e8c63c9e27bd016d76cab99d553a,2025-05-13T19:35:18.080000 CVE-2025-31930,0,0,4616ccf773a293d3c7b3ef57e4668dbecf0b719fdfaf6605933aaba839c37bef,2025-05-13T19:35:18.080000 @@ -291745,15 +291768,24 @@ CVE-2025-32278,0,0,211d6ed6ada58eb335634d812d6f25038c2a3c7f1bf1fde12b2879747a714 CVE-2025-32279,0,0,c8621d6c038bd552e5f86ac94833c9e696ca47f07d059658ea9fd536b7f0199a,2025-04-08T18:13:53.347000 CVE-2025-32280,0,0,51a846a5a42c043aab0e6fac915214336a31c77ee73a0ba45d8879819031b4bd,2025-04-09T16:24:47.373000 CVE-2025-32282,0,0,4c53220555eedeae13ce6f318e3c3f0db70bd45e8d4e3f3e7970ecccd4879e13,2025-04-11T15:39:52.920000 +CVE-2025-32284,1,1,7e9d428f06199d619825c668d26d9e8138b4012ec47caf3f50aebe143167ce74,2025-05-23T13:15:29.047000 +CVE-2025-32285,1,1,8309e80c606feaa69d6d4b84eca127b7870edb2ebd83a25b150b4cf8b7834fde,2025-05-23T13:15:29.207000 +CVE-2025-32286,1,1,d803adaea496e08752d2ac260ad9a894982359bfbe7c7bddb1393a40398eabf4,2025-05-23T13:15:29.380000 CVE-2025-32287,0,0,a3bf48908d8f79d41a4469b9dc9cab42831951011a2355345d78eed4e69cfd16,2025-05-19T13:35:50.497000 +CVE-2025-32289,1,1,ea5c0303ea1e94761ea978cdfd7afe9030ecc627716f5b0259eced7c6090eb6f,2025-05-23T13:15:29.527000 CVE-2025-3229,0,0,33d71b87561c140832cf2ac52f5fcc19b1d515ef8ef701bba55e95501d83823d,2025-05-16T15:50:10.260000 CVE-2025-32290,0,0,36568496f7cfb91391c583bf0016b17241df302ed6da0886bc4813f155c3f5b9,2025-05-19T13:35:50.497000 +CVE-2025-32292,1,1,f76fd099a50d643ecc986cc40bfa150aaf5d09a4ede577c850ebd364683d7e98,2025-05-23T13:15:29.673000 +CVE-2025-32293,1,1,43cc19b487ef7140688086dfdbe56acb920f0d9248975d59e6dedac9805186ff,2025-05-23T13:15:29.820000 +CVE-2025-32294,1,1,c4f6f06139b0653a8fedc4797fe6d2db03b22a9cc26dca996eb11c0e2874e6ac,2025-05-23T13:15:29.963000 CVE-2025-32295,0,0,53c433306ea7dc97c36184a382b23df1b7d58def930436bb6fff2c7acee5a45e,2025-05-19T13:35:50.497000 CVE-2025-32296,0,0,55e4b32b240a3fefbe017324691d07e50cbce68d67ba40dfedaf61401ab7943b,2025-05-19T13:35:50.497000 CVE-2025-32299,0,0,49c4147c6d2449192d55c98739bc9eec8c1be87420b29ae76c69f17ee126a9c1,2025-05-19T13:35:50.497000 CVE-2025-32301,0,0,52135e6aca642aca8fa3971eadef3fc4c2f67fc19715effb0157897b8f5f6d1c,2025-05-19T13:35:50.497000 +CVE-2025-32302,1,1,d7405d2076ea6630c7900d9c235881a89e1d8a8050570312da27aa43eb5d703d,2025-05-23T13:15:30.103000 CVE-2025-32306,0,0,0076f54feb6c98bae8c2148e126a770f8952e35f714caf29e3a0e5e2cbff7390,2025-05-19T13:35:50.497000 CVE-2025-32307,0,0,a0ca4b40d93bc485abc5353416cc449272433546ebe27b7ec60abfb5a278a669,2025-05-19T13:35:50.497000 +CVE-2025-32309,1,1,0fb398bc300814e1119bfe1ac2b14844d2e362837d97ff1efdf0d8fef1c933a2,2025-05-23T13:15:30.263000 CVE-2025-3231,0,0,2d437990422a06b8f70aa7d325bf7050a637a02c649129fa3aa2f3a1ef855250,2025-05-16T15:46:00.303000 CVE-2025-32310,0,0,c3b2568a49d7a011e3cbc9748557e58f0519995b3a6735845f843c0d6b6482d9,2025-05-19T13:35:50.497000 CVE-2025-3235,0,0,bf02e56a9b2acdd9197c016e355d3cdfc496d77110cbd9f5fcadcef4a0003d66,2025-05-16T15:43:09.640000 @@ -292606,7 +292638,7 @@ CVE-2025-36504,0,0,30afeffa7b8ef5e478f29856811f9be90f1ece9e22dbe373c856a36c84249 CVE-2025-3651,0,0,30e087cb1671b81c1bf0c1d2a4d51e77f706a32948b7aa67dbe7688506dce698,2025-04-17T20:21:48.243000 CVE-2025-36521,0,0,76dbe5c9e005eebc45d03f4e270884a68d88e62c1e707e433be80dfc20224dd6,2025-05-02T13:52:51.693000 CVE-2025-36525,0,0,304058dc6057ec0d8f22d43f92f7c943e71e5e18bc158b199ea34013a3ed45ac,2025-05-08T14:39:09.683000 -CVE-2025-36527,1,1,cc7d190a7ae14f786420ff0d21d5873b1de824f648988e2cdca874f8c0855437,2025-05-23T11:15:31.970000 +CVE-2025-36527,0,0,cc7d190a7ae14f786420ff0d21d5873b1de824f648988e2cdca874f8c0855437,2025-05-23T11:15:31.970000 CVE-2025-36535,0,0,42d99657130998745cb2172caf412951829a683c50be3fa2b624c61c315cde8a,2025-05-21T20:24:58.133000 CVE-2025-36546,0,0,a3d190116ff33d28a9568351832ce70c70aecf8ab001cfb216ed0ea5695cb9ef,2025-05-08T14:39:09.683000 CVE-2025-36557,0,0,f16923c560f3b05fe5e6882416a188e00895b3d5a4708419fbcfeba9f4145562,2025-05-08T14:39:09.683000 @@ -293058,9 +293090,9 @@ CVE-2025-3888,0,0,49e1b00723b387f853a81c82f5f016b5f1d15af81d74668da125765b119b54 CVE-2025-3889,0,0,addcdab3a978b132a54b1f1982e1745a3e16133d88989aba0f11c2d9da982971,2025-05-06T15:39:43.323000 CVE-2025-3890,0,0,d96df3538703b6e7aa875d8f583dc14e28a363f629bce9d326c752b01881ed1a,2025-05-06T14:55:31.320000 CVE-2025-3891,0,0,aa767fe87ad50e2e9d2b3cf4279f74bc542a77eb7d68e25dff37ffa5307882d7,2025-05-12T19:36:31.457000 -CVE-2025-3893,1,1,a1bd282b5f6685481bb25de746e5568241dfe00c17f190e06c864b071299e4fd,2025-05-23T11:15:32.660000 -CVE-2025-3894,1,1,87a051e68a55a3d141eeb4dbb0f67b9a8f3254d675148507ab00ec03bc090202,2025-05-23T11:15:32.820000 -CVE-2025-3895,1,1,043b5d4cd261bfc3ae9ae16967fa503b4d4b757ecd50ea80d336e0fa9caad665,2025-05-23T11:15:32.957000 +CVE-2025-3893,0,0,a1bd282b5f6685481bb25de746e5568241dfe00c17f190e06c864b071299e4fd,2025-05-23T11:15:32.660000 +CVE-2025-3894,0,0,87a051e68a55a3d141eeb4dbb0f67b9a8f3254d675148507ab00ec03bc090202,2025-05-23T11:15:32.820000 +CVE-2025-3895,0,0,043b5d4cd261bfc3ae9ae16967fa503b4d4b757ecd50ea80d336e0fa9caad665,2025-05-23T11:15:32.957000 CVE-2025-3897,0,0,a76833041004e7ae266165bf906a6eb79929fb700817c1b5afa0458a2a32ab3c,2025-05-12T17:32:32.760000 CVE-2025-3900,0,0,0d562be7b180640d1fa0f8676fba7fa2392337449d93ebe74c33a5f4dae11360,2025-04-29T13:52:47.470000 CVE-2025-3901,0,0,2ba85ef5f554a9662d34880d6756dc984d3f9d34a1b66af96036fb769e6d7e2b,2025-04-29T13:52:47.470000 @@ -293217,12 +293249,26 @@ CVE-2025-39469,0,0,e18849e95e863d0389b13542e78fc7e5370e06514982d8ca59d2eba138210 CVE-2025-39470,0,0,e010fc0801cd6bb4936cb1b65898bdce69bac41af3bf33793e9451cff50a9a80,2025-04-21T14:23:45.950000 CVE-2025-39471,0,0,21ed7a6e1899b30a1a56f084c0c39ef4da03cd3bced83cdf5407e02bb87fb289,2025-04-21T14:23:45.950000 CVE-2025-39472,0,0,a7cbfd1fcbc3c3b205d7e0f46a012bccf0b5c525fa1ae0195e8c3aeff79f686a,2025-04-17T20:21:48.243000 +CVE-2025-39480,1,1,e975883b1b4dfb042d14102e1a7ccb4e349c00b1cf23dd3f5143175cf57561b0,2025-05-23T13:15:30.460000 CVE-2025-39481,0,0,ffc38075b9c9e137d0a9f220b07f654268d9b6b192ff077aaa96738d747f33c5,2025-05-21T14:23:08.503000 CVE-2025-39482,0,0,9c1ba107f4176b4e49317c98c181438ca48e79f3fd12343796019c3a6b9bf988,2025-05-19T13:35:50.497000 +CVE-2025-39485,1,1,1b3b0778418b1ef992b455c274185a50bca298a4145e3b60157f6707a5b80e56,2025-05-23T13:15:30.610000 +CVE-2025-39489,1,1,aa7b58ad8efcacb99d817c6d100d17a14d3d4d2a2ff0def6749ea35b4cd2b72d,2025-05-23T13:15:30.757000 CVE-2025-3949,0,0,168e2abe66849b76f108d2275699dc7aa3f34d482497d50c4cedde8b889e7a83,2025-05-12T17:32:32.760000 +CVE-2025-39490,1,1,129f7ba9b207ba5320138d82d11f849095dbdaeb93c061ac86bb30b8024e4f61,2025-05-23T13:15:30.903000 CVE-2025-39491,0,0,ea7e1194bdf2a642209992ec9183b2b23fa84b67beeb68c0df3db0f81a91fcee,2025-05-19T13:35:50.497000 CVE-2025-39492,0,0,635507b54ae7eb59f8f5f8b70d7992655601c78f086a4f1ff73bb9e2c41b0304,2025-05-19T13:35:50.497000 CVE-2025-39493,0,0,55dd5583958a7840fb3c573aca43ccaa6f193f58abfe8824110d1decc11197a8,2025-05-19T13:35:50.497000 +CVE-2025-39494,1,1,b221985f36f87d5303f5d8cdec86d450fbd8f537ebeb3cbfda4b55d80dde8994,2025-05-23T13:15:31.050000 +CVE-2025-39495,1,1,877b8c33ad199de63fe3ccb59322c199adbec3b8e315aa53c27b9066e7c847b3,2025-05-23T13:15:31.210000 +CVE-2025-39499,1,1,bfd98f4dc0ad9c06e6d77a5d15f602522f5803dd9bdc215c6bc4b8be50d5e1a4,2025-05-23T13:15:31.360000 +CVE-2025-39500,1,1,3c0b6157ad893ec2be00274afb8dac82072d0ec24db91b8e948c73f41402033b,2025-05-23T13:15:31.503000 +CVE-2025-39501,1,1,f2f18ff2e8f9d309ab537e98d48e378c1ef4838111f51820ddfb1a2eb543dfbf,2025-05-23T13:15:31.653000 +CVE-2025-39502,1,1,da598724da3dd168905b2e17a4c9c909ee3b15b7a49e0115aef5ce32c3e781d5,2025-05-23T13:15:31.800000 +CVE-2025-39503,1,1,2c5866cd393849fd2e1a9096867e5851ad1328242727ce8e4a18d16f710942d8,2025-05-23T13:15:31.940000 +CVE-2025-39504,1,1,d9c077dbf7459735fff53bf82862244fa014214c5349578e03eb6b872b5944d8,2025-05-23T13:15:32.087000 +CVE-2025-39505,1,1,b6f864eac5e61be22a09585b275a797b9ffc57274d9c3b5c8596e1ecdc3c77c6,2025-05-23T13:15:32.230000 +CVE-2025-39506,1,1,dad81da7ce79058f8e8ed6c50ac259b6bf75a3ee34ffabd8104e6bd518fb30b1,2025-05-23T13:15:32.393000 CVE-2025-39507,0,0,f50b2b600155ad7c0b102d3ef9dc5e527113c24b81dc0041f16c8e80e7f497bd,2025-05-19T13:35:50.497000 CVE-2025-39509,0,0,5c0082d1253f9a176b09203dab2d8e105bd7ff91bca0314836abd26426f888a3,2025-05-19T13:35:50.497000 CVE-2025-39511,0,0,d1cd3b593a6bc9ec2ee93f4d941fbe7cd265026aabb51b68a4d91ed88ef77e9f,2025-05-19T13:35:50.497000 @@ -293250,6 +293296,7 @@ CVE-2025-39531,0,0,ff1b3efe015a3987f44dddec7757fb08524f162b253adf68dd482dc34a954 CVE-2025-39532,0,0,c6a1aa250e41f609065af7ae7d78ed7ce37833beb178fb16dc9d01c8b07d0228,2025-04-17T20:21:05.203000 CVE-2025-39533,0,0,00e9840fa3e721ed8659351609375801316fb69ce2b1599aede6965245df00e3,2025-04-17T20:21:05.203000 CVE-2025-39535,0,0,51a8ea640c30c3212f3acbc8c60211505a3d6be753d78e2a8fe398418000d425,2025-04-17T20:21:05.203000 +CVE-2025-39536,1,1,f24aa2e12fab245823fdc512c7108f921d7dcb2958d0c5386a576afd79e99df6,2025-05-23T13:15:32.547000 CVE-2025-39537,0,0,21fa63134497786ca5c96e2ddc67b969296395e775f499d38201ad3191fbd2ca,2025-05-19T13:35:50.497000 CVE-2025-39538,0,0,0321e90c8ae30051c1566250939763852d597c73645ce940aa3b0b48f0398335,2025-04-16T13:25:37.340000 CVE-2025-3954,0,0,02aedf98fa87c1202a9f626b25b18527eb03da7535e6821c62d949a7b5177a96,2025-04-29T13:52:10.697000 @@ -293534,13 +293581,17 @@ CVE-2025-4132,0,0,e4809de586f057a9e14a37c05676b7015f221bfc82c94512bf23f0611070b2 CVE-2025-4133,0,0,c2ffadf2795fdbf02454efd08a931028f582c96bd6df7b6f13e99e455fc96b30,2025-05-22T14:16:05.367000 CVE-2025-4135,0,0,25b982427178b3f3d706f6fac1b89f5ba7366d6669c0dfabe5ec60bc810ed4e8,2025-05-02T13:53:40.163000 CVE-2025-4136,0,0,b8475b2b882f1f1345ee88b0d17b9c4d6134110c252d26b338548acd634728a6,2025-05-02T13:53:40.163000 +CVE-2025-41377,1,1,f110c4c533f739bff2e01fda02ab5b60d06b6c8ce94611c0fd19c9ca00ab5f07,2025-05-23T13:15:33.150000 +CVE-2025-41378,1,1,f7f7c93831d65ac090844d656ff93e169a26440273a1c419cdcb047a8ce7c1f0,2025-05-23T13:15:33.307000 +CVE-2025-41379,1,1,ecd372097ea2b4612737b35f5426959b7c413df1516d1f2429b3816691ac0baf,2025-05-23T13:15:33.450000 +CVE-2025-41380,1,1,2ed82cd2a3806a972fadfb95703c9ca562e5e1c41ccb0895d965a7bbd8a82e3f,2025-05-23T13:15:33.610000 CVE-2025-4139,0,0,5054f893b63e445c1832a76be273932e408388835ee5cae9b0b72cff821e3844,2025-05-02T13:53:40.163000 CVE-2025-41393,0,0,530f65a313720270b05a5e04ea761ed2dfbc169adb957fa6f54beb0e36c6dbe7,2025-05-12T17:32:32.760000 CVE-2025-41395,0,0,65b9e3526569f587eb1cd97410ac7325e217f46717fe2bbf0abfe0a9511ead3c,2025-04-29T13:52:47.470000 CVE-2025-41399,0,0,7a1373417457a02ea13a0bd88541383fb57eb0536c4c4f5c68760eae861e0e0e,2025-05-08T14:39:09.683000 CVE-2025-4140,0,0,43b9abcaea3d23db237dc7c72d0e6c00daf795b98a418a742be6b246e74f9a83,2025-05-12T19:40:10.773000 CVE-2025-41403,0,0,698d61c7150c12eecc729761f0401dcd1b096fb830867a3dce36a89fa7427aa3,2025-05-22T11:15:52.540000 -CVE-2025-41407,1,1,479dd5a852fd8d3284813d8c38202f92fd34dbe6644e22985bc9a9879ab19aaa,2025-05-23T11:15:33.107000 +CVE-2025-41407,0,0,479dd5a852fd8d3284813d8c38202f92fd34dbe6644e22985bc9a9879ab19aaa,2025-05-23T11:15:33.107000 CVE-2025-4141,0,0,7b2e3326ccaf27d38d41c324ef2e3f6ee1e91c0da08a23e7b4e578c8215ac150,2025-05-12T19:40:05.830000 CVE-2025-41414,0,0,e15bca7d4059421d15d5cb35dc483cbefc52e8d9cd9f55b31b9d84f79a125499,2025-05-08T14:39:09.683000 CVE-2025-4142,0,0,78a1ea715ae46e4bda0a693a8542472224c3dca467cf3911b9ec4f409b46b000,2025-05-12T19:39:50.053000 @@ -293799,7 +293850,7 @@ CVE-2025-4374,0,0,79d535d07a4046432cac6ccf29df351795ada13e20e135acd82417079a6bc7 CVE-2025-4375,0,0,b20f7ab0bc904a77bb54799caa478fe059549e18a1801d8a45b6880a04f0dc89,2025-05-12T17:32:52.810000 CVE-2025-4376,0,0,9420fe6cf88700687e51473e9a5bdfa5c55844808ec53c6470445953d8f65fa4,2025-05-12T17:32:52.810000 CVE-2025-4377,0,0,8e0530103ee880cb7f294e1c4c7e6cf387e9a1d9a6703ed3634515ee426ce352,2025-05-12T17:32:52.810000 -CVE-2025-4379,1,1,835448f95f709e60a66fb7125bc9876b3f473ee3e8325d859f7f3165775145d8,2025-05-23T10:15:20.963000 +CVE-2025-4379,0,0,835448f95f709e60a66fb7125bc9876b3f473ee3e8325d859f7f3165775145d8,2025-05-23T10:15:20.963000 CVE-2025-4382,0,0,1755bcacda59f52f7cc3209782de8528e7881829449f1b3e83bfc30c07b5260f,2025-05-12T17:32:32.760000 CVE-2025-43832,0,0,513f95b74ed67840e16dbc4acf643166581497dbe2d1eae72a6cbab4e9aeeea0,2025-05-21T20:25:16.407000 CVE-2025-43833,0,0,3ebcf51424419785991ef323eb752f20e13fd4c6eee812e1cca2ed11789ffa45,2025-05-21T20:25:16.407000 @@ -293937,9 +293988,9 @@ CVE-2025-4456,0,0,e7ef7ea8d16290e794f525db2ea37bc8abc1615ee5fb21b539df1843139a93 CVE-2025-4457,0,0,40524cd0b9a08c087d854535b5b570a75f2ee7cb9f2feb4718f44d4c27122935,2025-05-12T17:32:52.810000 CVE-2025-4458,0,0,eea9d140dad4a90fff730d46462b27320b6a68017f06012fa50cfa447315cc65,2025-05-16T15:36:22.513000 CVE-2025-4459,0,0,c8957b64114b694459dbe7d595aee4320857078f3f1b1acc147cab4ba3412554,2025-05-16T15:36:12.370000 -CVE-2025-4460,0,0,d02ddcae5e02361bf6329aa1bc05e204d0c9a4c8fab9c1e0a9172b61a99bbebe,2025-05-12T17:32:52.810000 -CVE-2025-4461,0,0,bebc4e91cc17bb607d85c472bada3948e061ffef66bf3ebc3932d617b1d7f7be,2025-05-12T17:32:52.810000 -CVE-2025-4462,0,0,f2fa6ce702b582242e66e9b7266e4beecf8448c706fa5d48750d14b591ac06d8,2025-05-12T17:32:52.810000 +CVE-2025-4460,0,1,1523c53b4c3872072d748d30b69d698f488cc9e2a4c6bd053b5055199ec1d6eb,2025-05-23T12:28:39.320000 +CVE-2025-4461,0,1,3bcbf8140bfe36150100ec64813a63556401d9c6c9569195ed4770cdd149bae8,2025-05-23T12:33:21.447000 +CVE-2025-4462,0,1,a45c74043d407d51bd153a59310148483accce910ccf874e95fb20ccf665af48,2025-05-23T12:37:15.720000 CVE-2025-4463,0,0,a0353adc9c27e7e002205a0d3a1ffaa0fe59dbde1ea180ab960c1ae14d407aa7,2025-05-16T15:36:03.983000 CVE-2025-4464,0,0,b9993211cc8a131ea72e41c0ae906245c7af3ea0675a97e121c856bd6ae4f0a4,2025-05-16T15:35:56.983000 CVE-2025-4465,0,0,c4a8d1845b9dc65ebd3e369a853e0ef9384e4090e39314ae7c7493d052a5fac3,2025-05-16T15:35:50.777000 @@ -294291,33 +294342,46 @@ CVE-2025-46432,0,0,a236013c45619f821bf7946151136e3004fb9398b61130c70d8dc542bb4b2 CVE-2025-46433,0,0,a39e3050f84f55af6d381c3fb80df94b1397dee950ceb69b450900d1890fd7c7,2025-05-16T14:51:00.590000 CVE-2025-46435,0,0,ef508182cecb27e8aefd439da8a37e20444f5c0c2d5cd2649963f4b3640e8bb3,2025-04-29T13:52:28.490000 CVE-2025-46436,0,0,42dc2fdaaf0df939702b1622817a8bde945b11e61df5009736de2aad738623b6,2025-04-29T13:52:28.490000 +CVE-2025-46437,1,1,0734ea23ef9321f4214c8f58357c3a403bbfdda049b14322d9550cef0ce89ed3,2025-05-23T13:15:33.757000 CVE-2025-46438,0,0,1f2b4bcaecf695cf528b843f33bfffaa29198cb82dc780e2db13837ca8aa030e,2025-04-29T13:52:28.490000 CVE-2025-46439,0,0,b8fd2de3e06133b63d2724a339eb4614bd2597b66b8592eb007ec10d8151f805,2025-04-29T13:52:28.490000 +CVE-2025-46440,1,1,777fdafefb37bc60095618751c71f1226a88f844057d27e2108c6f59a4e71bda,2025-05-23T13:15:33.907000 CVE-2025-46441,0,0,116986b73757b923bd58d7cd6a1ed6d853508b214ebd8745f547dba056fc406d,2025-05-21T20:25:16.407000 CVE-2025-46442,0,0,6f1bdde399db9e429ee8467663c1ad02b4f1296e0aa5c2107baf7220eda6b187,2025-04-29T13:52:28.490000 CVE-2025-46443,0,0,afd9609f77743b9fc34b3284e9cc688e58f557bdc6ac8c7bc25478aaf00ab363,2025-04-29T13:52:28.490000 +CVE-2025-46444,1,1,efa450350d1c29419705df02471be160ff5660f7e009164014dfc2f32425245d,2025-05-23T13:15:34.047000 CVE-2025-46445,0,0,db56142fae802989a82bbb246d2b0b354d27bcf1232c818839ab3cfaeaec2cb1,2025-04-29T13:52:28.490000 +CVE-2025-46446,1,1,51164f2dd2c56973f00a3c768e4d8b0ec6bd1d22c64026cf9c412b41789602ea,2025-05-23T13:15:34.190000 CVE-2025-46447,0,0,b33e5b195663209047675c1116583e3896141cf55379d7d9282bb9ab8097cd94,2025-04-29T13:52:28.490000 +CVE-2025-46448,1,1,9ef0311f8b80d379af2515696a5e90effd172f6851094e205477c3af05002306,2025-05-23T13:15:34.323000 CVE-2025-46449,0,0,ac50eba4f2291aeda3de46702198532e7c0b5de37774c08608fb80f71012aaea,2025-04-29T13:52:28.490000 CVE-2025-46450,0,0,08dc897d432a4ef00a2a02d06493fb306f54c7d5240e4c61d20113d1e01d2627,2025-04-29T13:52:28.490000 CVE-2025-46451,0,0,38520c123916062dfe97cbffc41b8e36dc68e4124fd5189fac52157b2e7f8b65,2025-04-29T13:52:28.490000 CVE-2025-46452,0,0,a19d868b2249ecd4987d033933db6fc563b4520fa434da0239a66afb76c11964,2025-04-29T13:52:28.490000 CVE-2025-46453,0,0,e4a019d63d137cadcd854a5a6d811a522601f71ad9b502eb4983b308231fa810,2025-04-29T13:52:28.490000 +CVE-2025-46454,1,1,2fa5b58fbd04cc7ae538f35e64db4af10ca5d3b9f0014ee414ffabf70d8257c4,2025-05-23T13:15:34.620000 +CVE-2025-46455,1,1,782108807c1ae1cb62b4771198e2c5d251f88dff95552ea278362e9280c3b19a,2025-05-23T13:15:34.773000 +CVE-2025-46456,1,1,7d2ffbd0ed2aa8a9fb0c1ca9b7a06c85844440fe774776a592fafe0803fef3c8,2025-05-23T13:15:34.923000 CVE-2025-46457,0,0,be2221e00bf98238046f9f16a2f3ce46bacc036d2b7a1dfa17ec2383a0f9a838,2025-04-29T13:52:28.490000 +CVE-2025-46458,1,1,d78f965df9bdf49cba914e5f44418e5f22636f3edf49bd4a02133a02b2b54a74,2025-05-23T13:15:35.070000 CVE-2025-46459,0,0,51d9a9edf666b2694e08c658deb0effce8bd638d0a62f74a0c6e36fe00bcd54e,2025-04-29T13:52:28.490000 CVE-2025-4646,0,0,e2991c838c904edab0c7faad7d62f8718829a314e45ddc305fd17e0bf2120257,2025-05-13T19:35:18.080000 +CVE-2025-46460,1,1,790e018af593cd1efb0aa0c9163e64fc40b03d19f83c0a49f4c05cf6cbe0b14f,2025-05-23T13:15:35.213000 CVE-2025-46461,0,0,c8786d7e2ebb5f6dce69ba2cb075d83eb648dedfaeb514ea03c1f471890197b7,2025-04-29T13:52:28.490000 CVE-2025-46462,0,0,fe5581f64e8efae0b96d6adda1b97fe0f4d0468de91c94f77dcc9221d1cfb465,2025-04-29T13:52:28.490000 +CVE-2025-46463,1,1,2de47069010a43030d26a5dc7831695bf5f813344692afde99426bf91fbf179a,2025-05-23T13:15:35.380000 CVE-2025-46464,0,0,fa1b25a38b67a92ecaadb6ac2ec65e98a1261923658181addd527e419f8c5b53,2025-05-19T13:35:50.497000 CVE-2025-46465,0,0,989374eafb94c8a6cd6685c6a3ba7eed64377b02f00a75c090bc2bf66cea9b14,2025-04-29T13:52:28.490000 CVE-2025-46466,0,0,4098a2abcd3c1786fbce4efdb0eb03192fc0893524e4362c9258df737fba2c58,2025-04-29T13:52:28.490000 CVE-2025-46467,0,0,c3a20dac240db4c202e3602614549da33fb34d2c2d2dc9a435c812422bb327a5,2025-04-29T13:52:28.490000 +CVE-2025-46468,1,1,5674135dc7b8cbea932f6920abc8fc0b3f04c05ba178578460b8b230e7cb9594,2025-05-23T13:15:35.523000 CVE-2025-46469,0,0,83bcacfef7179d072ad274e21ed910d60e0427ce9e9ca33002ac69dd224cdc57,2025-04-29T13:52:28.490000 CVE-2025-4647,0,0,9183e8e38fdde3287394ba6e432e8cf607fe5065b34a1104c6cd66843111482e,2025-05-13T19:35:18.080000 CVE-2025-46470,0,0,c9e086904314dfa013a68f25197ee8f2dbf6940122191cc5cb04f56e49d243d8,2025-04-29T13:52:28.490000 CVE-2025-46471,0,0,3fbf37c7740b83855edc59c044dcfc3b74e9cab9feeae55522baf1b78681f8b1,2025-04-29T13:52:28.490000 CVE-2025-46472,0,0,7e2f47ebe85666eb29a58908e8a75d677e7bbb1a954a46322e86b37bc24b16eb,2025-04-29T13:52:28.490000 CVE-2025-46473,0,0,608da8ff2abf9c600d282c25af0678c7c1f139ad5cea17a317151da0aab44f3e,2025-04-29T13:52:28.490000 +CVE-2025-46474,1,1,7339d5749cfcc6d6cb6397e5569bbf8af32bc07eb0e0539e546ea408007e5d37,2025-05-23T13:15:35.673000 CVE-2025-46475,0,0,51aa2b5e309a37e5863c4f3b9a4697f41ec4ff32f91e54af4aa5f2a0d59e0e54,2025-04-29T13:52:28.490000 CVE-2025-46476,0,0,a59f599c15e80bffdd5bb4ba81a7cf2374badb82ff1f0bc91c4b3e81801d002c,2025-04-29T13:52:28.490000 CVE-2025-46477,0,0,be9329fd65be58972d97b8edef12997ac92fc216b8ce5c2be9cf2024a0d940d9,2025-04-29T13:52:28.490000 @@ -294330,10 +294394,15 @@ CVE-2025-46482,0,0,3915bc88238b436c9e5a6695e61e0371ef118917b20907f327137a5b7934f CVE-2025-46483,0,0,33a628b07fae94442c2a24846f32c8492b63c6a2f3c8b09f80d400a447b8829f,2025-04-29T13:52:28.490000 CVE-2025-46484,0,0,4579d71aa8ecb3b1221bb29378bbbcabfc0d9059d013b09dfb541213d91828d5,2025-04-29T13:52:28.490000 CVE-2025-46485,0,0,2012e6cf06c8e025fd2916f0c78a4cf1b9bbfbe6bf574b93e7afe4fc181ab752,2025-04-29T13:52:28.490000 +CVE-2025-46486,1,1,b60e4078d5b5c3956a9d1507ed4a5b6f1a20726eaaa849a80b4552f1c79f8cd6,2025-05-23T13:15:35.827000 +CVE-2025-46487,1,1,11613e0968bb3037453a7be7e073b2dfe3009bfc31effb474cd753e121c49023,2025-05-23T13:15:35.973000 +CVE-2025-46488,1,1,054c84e8137c53c24e9fcd67835547b5cd7533c88e3858564df2688cb991ef9f,2025-05-23T13:15:36.120000 CVE-2025-46489,0,0,4047d90eba66bbf4f8ac70bf703f1492aa05cbcde55ff73ae631c913b0fb63c9,2025-04-29T13:52:28.490000 CVE-2025-4649,0,0,edcde48af632e4ab5696f343ea27815836dcac840a5a97999db6dc7dbc11e9a7,2025-05-13T19:35:18.080000 +CVE-2025-46490,1,1,c4fbfd187d768eb232c8166207663523996670d2f866099865d1b185ae25e187,2025-05-23T13:15:36.267000 CVE-2025-46491,0,0,f38c5dea18b20fbcef6c016900413ce3ba4d4b3132901d55664c2e927d148b83,2025-04-29T13:52:28.490000 CVE-2025-46492,0,0,0b388afa779af2bc975923238ed0779b39ceb96cb7c627b90c0bf45b7312448e,2025-04-29T13:52:28.490000 +CVE-2025-46493,1,1,0c114d4cf0cef3dfec2a3ca3cf6985c5509115305b27ab5455bdcfad1db2df02,2025-05-23T13:15:36.420000 CVE-2025-46495,0,0,994d39d84626b2b2237380a6e70cd48154346b5bd0fa16fd97dec49d593dd97d,2025-04-29T13:52:28.490000 CVE-2025-46496,0,0,c1ca2c12ad79e7956cafdb330fd7d396df431c9c708e1326a685ba7f4548461f,2025-04-29T13:52:28.490000 CVE-2025-46497,0,0,01f72c5fb3baa29d52f0778f0278db8eb6e9b30fa7fdf9e4a1ae3a5ba4794958,2025-04-29T13:52:28.490000 @@ -294353,8 +294422,10 @@ CVE-2025-46511,0,0,a2407404367964f0371c550f83beaf42d3d687ffe8fc3820484120c3cae7a CVE-2025-46512,0,0,64a69b64e5dafc14ab78d30aad6abbc54ec18f5b583cbb2bc1af9a44900a29a9,2025-04-29T13:52:28.490000 CVE-2025-46513,0,0,e5259660d6ec1d541680edb66fe4757b5afa4b7cb951ee192aefa8671cf26aab,2025-04-29T13:52:28.490000 CVE-2025-46514,0,0,5c29e3f2c19cbba68f6f4f28b6275c5d2a1aab537f2f8a5cee5e6a24ad99e51a,2025-04-29T13:52:28.490000 +CVE-2025-46515,1,1,3d5b5080842ef7bdd546105b7a166b3232e8c936615fc49446a01cf942cb3229,2025-05-23T13:15:36.573000 CVE-2025-46516,0,0,4c88ad304f0a3200cb6dc067922e69e11f23bef3885f8612be34edd9304b4560,2025-04-29T13:52:28.490000 CVE-2025-46517,0,0,e00d3386df3e4b7181f0c929b08e457a807826ffd3ac273de6467947811d8ead,2025-04-29T13:52:28.490000 +CVE-2025-46518,1,1,93e4a5caa1b1585aef418346181006dbd534c6b642504a222ae8018603f209fe,2025-05-23T13:15:36.723000 CVE-2025-46519,0,0,a33ce7fa0944b2cff6a953c93d911a59cad0e41e0288c75a1ef712b260164b09,2025-04-29T13:52:28.490000 CVE-2025-46520,0,0,1c31d6dbbd3e5241ef4e2c12464d7caf8aa9991d18bc3f254623825eb9b8b54c,2025-04-29T13:52:28.490000 CVE-2025-46521,0,0,c218263f26834f6156811624211affe72a1577541fc4caa1b57a6d05a3e214a1,2025-04-29T13:52:28.490000 @@ -294362,6 +294433,8 @@ CVE-2025-46522,0,0,d3d2527c85c582d99da6bcb828f5f2b083bd408e3a5301718b05fe0811364 CVE-2025-46523,0,0,4432631872c1343a091294a952199de74b38433b24e4cf30c25d3f2c6cf968ae,2025-04-29T13:52:28.490000 CVE-2025-46524,0,0,c49c01a8206904b28ba8b54ac9f87705ccc53006ad0b253ec412205d17406c31,2025-04-29T13:52:28.490000 CVE-2025-46525,0,0,47ce5afb4280e5768d3bd52ea94917f13a616e4667d1282e68b046bdf84e091f,2025-04-29T13:52:28.490000 +CVE-2025-46526,1,1,dcea4f8b48bf7b2322e6c3aa73ff18dc5800a4dcb387bcc2d9a2c8d81969b6a8,2025-05-23T13:15:36.880000 +CVE-2025-46527,1,1,042adc7e5bdf7f81233fbf104451f190a476627816bc3cbb10de9ccfb58d748d,2025-05-23T13:15:37.037000 CVE-2025-46528,0,0,5448d12f670a5d279d2e3773cc261f8a08e5e91c241d007b505395f3cbc6a95f,2025-04-29T13:52:28.490000 CVE-2025-46529,0,0,4858e8d23a5f17e2c90006932f23b5a7f2db8949d70e351bddc8b77c2660959f,2025-04-29T13:52:28.490000 CVE-2025-46530,0,0,5400b2396ae524694540d86d6415fed225acf4442b05412b7417f68cb52d431d,2025-04-29T13:52:28.490000 @@ -294371,7 +294444,9 @@ CVE-2025-46533,0,0,5fb3b655f5d0433b7bdc90ec2271f86e306ea15dc39a78f4b45c3bbf6f4ce CVE-2025-46534,0,0,c679135bc26d6297a2a4289aa3b05a3aa88cf9009c64dbdce41468011e7e05cf,2025-04-29T13:52:28.490000 CVE-2025-46535,0,0,d1e08030157cdb0c2a8c734d4ded8d4939fcdb2c661cd7e83ceee32c6155816b,2025-04-29T13:52:28.490000 CVE-2025-46536,0,0,336227d7ac9b73778d6fef6f88d42f600ef217e7d4290a986cc92e2ae2fc8e95,2025-04-29T13:52:28.490000 +CVE-2025-46537,1,1,fb85fbb4483d66050d91de92afdec9f402b0cb18a31d1f82ee177d0b4119d92e,2025-05-23T13:15:37.190000 CVE-2025-46538,0,0,3fd48afba3350c0f8d61958c32b8ee8475429ee073c2d9c89eb24352018e05ee,2025-04-29T13:52:28.490000 +CVE-2025-46539,1,1,4b106dc58dce7dcfce3fbc87016961304609620b109b7b6d21ead8f8915237db,2025-05-23T13:15:37.343000 CVE-2025-46540,0,0,58c9914f2695c4befc97e16ad516121657af400c498f1d4f56cdc7cd490bc733,2025-04-29T13:52:28.490000 CVE-2025-46541,0,0,6e066bc87f3f8a941a3e63c3dcb09a2d009cde36eccb4200c615192384343b91,2025-04-29T13:52:28.490000 CVE-2025-46542,0,0,757d5171a138583e5845e076dbad10205e474246bb587b4f2c0171cebfcf9312,2025-04-29T13:52:28.490000 @@ -294626,6 +294701,7 @@ CVE-2025-47423,0,0,6836a6f986120cb2e164a5663178ae0fd396b9a71521a1bcfcb70d3454021 CVE-2025-47424,0,0,71d29b752922eab2f18ed784453e2b935bfb9c4385e21b85c68c2b1d9613d539,2025-05-12T17:32:32.760000 CVE-2025-4743,0,0,7e915f9dfcd6f936a67ae4e977886bf7546f978e8855ad42c7784df9dd220a52,2025-05-16T14:42:18.700000 CVE-2025-47436,0,0,237fab5236a29a936ddec4296e97c247520a483bdac2818cb262b4ed8ed3b03e,2025-05-16T14:43:56.797000 +CVE-2025-47438,1,1,c90406b4d2314317120116f454081caa84b4774bc30e15340d8818bfbb435c8e,2025-05-23T13:15:37.550000 CVE-2025-47439,0,0,9e2590af3e39eaaf4df056815f620875eb955b8d41acc282710b61d3864cc002,2025-05-08T14:39:18.800000 CVE-2025-4744,0,0,59eab9984338f8b38ffdceb70a4f1f97f370032ad5035ec76c7c49b35235d839,2025-05-16T14:42:18.700000 CVE-2025-47440,0,0,e06a89f27d23fce3bb6f10f753f41f0ee18bbdfc4aa35328ce00fda4fa13fd7d,2025-05-08T14:39:18.800000 @@ -294640,13 +294716,16 @@ CVE-2025-47449,0,0,cda5a820088ca281751b990bfe65cbd773742c453054bb772d34764ad0c98 CVE-2025-4745,0,0,3a82008115256c0a81a1fc87d38d21bca7a4a8dd714b69808cbda5d982e2cc2f,2025-05-16T14:42:18.700000 CVE-2025-47450,0,0,fb5ee50089aefceb73ff9a1ef8fdc244747ca1a94db05fe50fc7cb6e59aa2443,2025-05-08T14:39:18.800000 CVE-2025-47451,0,0,4c2f8ca02012503686d908884244bfb40ddbe4423330d55b60f766d84fe4c1ea,2025-05-08T14:39:18.800000 +CVE-2025-47453,1,1,95fc3747d638de80c77ca1e59d8c68bb027385e27b2a4b08a273a7c137d15983,2025-05-23T13:15:37.700000 CVE-2025-47454,0,0,1f465b81532e5955de59cf7baf48fd395f3823d52d1723fd370d5d74b95caf81,2025-05-08T14:39:18.800000 CVE-2025-47455,0,0,f42ff0545d5706d0d1836ec21ce7726977f83b2cb8bc2a7fc2d984cd7e223f8e,2025-05-08T14:39:18.800000 CVE-2025-47456,0,0,9655633786000f2348a6229ff73cecc6744b6845eff3de91192d8993b02135ca,2025-05-08T14:39:18.800000 CVE-2025-47457,0,0,37c3eadc5530d1f853e7d9cbf2f977594859777d8a9dcb482717a9250c2989bf,2025-05-08T14:39:18.800000 +CVE-2025-47458,1,1,e41c489dde17fa1fcbf6c0071f63177a2d8b2155443d5a67de4666d765f4dabe,2025-05-23T13:15:37.850000 CVE-2025-47459,0,0,42f1a6e384afeaaebf50b1e28c828d44792e6d9e0605b7d697062f10110052a5,2025-05-08T14:39:18.800000 CVE-2025-4746,0,0,4e7b97fc8b2519cff72992eb25d60b46ddd8cd0af0c0b8bc65028fa9b6c49516,2025-05-16T14:42:18.700000 CVE-2025-47460,0,0,b7519dac17710856824fe060b1c9bdeb3f7906d05f1b9bddac0fbc9972454a5b,2025-05-08T14:39:18.800000 +CVE-2025-47461,1,1,b86b08da5e6ef9c9dc3dc4e53d8b01cc7a3eb04bd2916839f777fb51ab64a23e,2025-05-23T13:15:38.007000 CVE-2025-47462,0,0,f885e8e128ef3f4b0f8a086643e3c654a8015bc64dba9334b08e5a6ad86732f1,2025-05-08T14:39:18.800000 CVE-2025-47464,0,0,bc99e18b2dcfa300b36d5735d07ad600476146381be931c156803ac5a2f3900b,2025-05-08T14:39:18.800000 CVE-2025-47465,0,0,40216eee132c747fda5eb13ebb9ebfb469ddf4a1b2574c77a2faaa8d2df4139c,2025-05-08T14:39:18.800000 @@ -294661,6 +294740,7 @@ CVE-2025-47472,0,0,01c9cb68583b39f50b058741a8e506238b34dce5d3e78d3577344f133a793 CVE-2025-47473,0,0,594c00da29fd44f9ee91e99aec4f7cce5a3dcdee9e640532a74f6e63aff20ae2,2025-05-08T14:39:18.800000 CVE-2025-47475,0,0,419116b80f7fe9386a9aac3c0836858ef647ac252eac4b1ff08d67e0a3375006,2025-05-08T14:39:18.800000 CVE-2025-47476,0,0,f06946c9db65910277eefdd02a4e277fdae7c5884111c0fe22a4a0e5abb63365,2025-05-08T14:39:18.800000 +CVE-2025-47478,1,1,45fbcbdf48a2435487419b6f491852e4c2e9fdcefdb875e1a6278093fd5c3a09,2025-05-23T13:15:38.153000 CVE-2025-47480,0,0,ef5cc5737d0e088e76573f050c6e079a8e6e4769a34e7600bd175867d6608ec8,2025-05-08T14:39:18.800000 CVE-2025-47481,0,0,9dd0d7411f22176e27723210f288403628c90f1234e60ae0d0856344023dd406,2025-05-08T14:39:18.800000 CVE-2025-47482,0,0,961d8ef4753c50b36e4d7feaf8debc74b4e022889d69dcdb4a7b418fc8bebc1e,2025-05-08T14:39:18.800000 @@ -294673,6 +294753,7 @@ CVE-2025-47489,0,0,12b13751b7f1741a87725c19ad09a24bfe30a7cd9497783102cd5f2ca2840 CVE-2025-4749,0,0,545072c573d800f3415fc3e9e36ad22f8a906446dc78ffc1000fb1f1fde5ec45,2025-05-16T14:42:18.700000 CVE-2025-47490,0,0,c65cb7bb420a74f0e511fe29fc325d1c729132949363b535d2eeb9a69e51f93d,2025-05-08T14:39:18.800000 CVE-2025-47491,0,0,8539788897f813b4235d8f65d76d2326778922ae49a55f7baf045a6f62d97368,2025-05-08T14:39:18.800000 +CVE-2025-47492,1,1,9f9b8178ff1611648d52eb5a3616fc93d63257e96c28a8fe35622d12bebacc58,2025-05-23T13:15:38.297000 CVE-2025-47493,0,0,76f0201d33428ed13ba59687dd93009828114189accf979309ebf3e7cee7710b,2025-05-08T14:39:18.800000 CVE-2025-47494,0,0,e0302526898a5ae70ee8eef6e4b83c959eaac0e5251f92271da4bdf3d6315abf,2025-05-08T14:39:18.800000 CVE-2025-47495,0,0,777808ec78a970d2ad85b19c1a4b26603d8f27c940d73bd14b2cb23b34a5c977,2025-05-08T14:39:18.800000 @@ -294692,6 +294773,8 @@ CVE-2025-47508,0,0,44bc5934567e61a9d226a8a00b95a3dbd7348d5f88f1a9426cbcefa0e9a14 CVE-2025-47509,0,0,a28b54f2726ac100d3a0b6d4c962a5fc82a66ed122eca0072f6ed6e33eba4277,2025-05-08T14:39:18.800000 CVE-2025-4751,0,0,cc7bf0ee612ef0f2756f4d303d72d0da8b49e3518c7841116e598a9320101506,2025-05-16T14:42:18.700000 CVE-2025-47510,0,0,c9d1222173a4dc9440ec30daa9fbe0a2e3c41d5575ab2c944e78e87741a6699d,2025-05-08T14:39:18.800000 +CVE-2025-47512,1,1,f525cb7a56530fef7ea3b9b7735b5a85d4391b695178f6a3bd4502f74b9b07d3,2025-05-23T13:15:38.443000 +CVE-2025-47513,1,1,846f81d9ed2749d12fc4f1b621c8905df070ecfc05bc3a8d876e4c5bd273af6f,2025-05-23T13:15:38.590000 CVE-2025-47514,0,0,9ebbd68f60dde682d5f6fb89d64f79535644e445245fd8730b094308ec83cfb0,2025-05-08T14:39:18.800000 CVE-2025-47515,0,0,0a2615eadd81407d5331b37798d780966199eb53e4569ae43310b88f5a753f77,2025-05-08T14:39:18.800000 CVE-2025-47516,0,0,b2eb33a5eb2f9375da399b2fedde3b15db5a6455a1e221c062c5c05d43902a6e,2025-05-08T14:39:18.800000 @@ -294707,13 +294790,19 @@ CVE-2025-47524,0,0,3ae95a6c5e8b77d371df026b87c96355ca04d04da5177f09e825a7d062c21 CVE-2025-47525,0,0,c9982bfde9e29cc589962b2ab6b0cc05071ee8c75d4a9adc1c76947e243b469e,2025-05-08T14:39:18.800000 CVE-2025-47526,0,0,2617da7eb4e53828410b6046c72bd451966e899374e3c43d789b40911de09b0a,2025-05-08T14:39:18.800000 CVE-2025-47528,0,0,d66dcd6b8cb0f20189f7b42b9cc8eaecf41c7f7aaf00bef51aa11af3d26b7264,2025-05-08T14:39:18.800000 +CVE-2025-47529,1,1,a4d9091dfbc4ac1c923403609bb692cc27a302b30592c86d2baed07a03947681,2025-05-23T13:15:38.743000 CVE-2025-4753,0,0,563ea1afb6cc91dda230ec8f12a0c742a94bfeba08fc0fb4305000966910ec0f,2025-05-16T14:42:18.700000 +CVE-2025-47530,1,1,1f727ff5f4a129d55e124b1ca1b08aecc56de8c3eebd39c9630ffb5533aa6412,2025-05-23T13:15:38.897000 CVE-2025-47531,0,0,98c0ab5ded9eb5f3abf9e04c6567486b41ce47cf3d183679428934787ad2a5fc,2025-05-08T14:39:18.800000 +CVE-2025-47532,1,1,24fb9b8dd4ac821239ca9b479bdda57654599c1ba7abb1db392f360ccf907ece,2025-05-23T13:15:39.057000 CVE-2025-47533,0,0,229ed0fea3f9aca7a41227e65300f99fda740027fd67ff2b27884956a1ea96d3,2025-05-08T14:39:18.800000 CVE-2025-47534,0,0,55d0ae51714aff1a3d428b372ecff110c2766107d1b97964e627b9b9870f9928,2025-05-19T13:35:50.497000 +CVE-2025-47535,1,1,6d9b9579a3d1f8dca2883ee162faa913b066843c28f41857c43a45982b1a65a2,2025-05-23T13:15:39.343000 CVE-2025-47537,0,0,ec99457b56cbb00305479743e07a55f5a22c2d4fb689ff948519b19e18d85b8b,2025-05-08T14:39:18.800000 CVE-2025-47538,0,0,a2e3210803a461bf014af863cd3fc2d9021b6b96f41290e0eca127f08dec08a0,2025-05-08T14:39:18.800000 +CVE-2025-47539,1,1,9f331f4d8a358ca7bba9921add42e1e26de5985b181b42dacd1be98be7880d89,2025-05-23T13:15:39.513000 CVE-2025-47540,0,0,9e769a4a10b12c4958f649b93614177c883cfd3309a630b96b238071766ec5d3,2025-05-08T14:39:18.800000 +CVE-2025-47541,1,1,ba13497cf10df487cfaf278e9a3280de89fdd494b31456e3413d93835a6beccf,2025-05-23T13:15:39.680000 CVE-2025-47542,0,0,66684d12b1f5b9cd6353b064d50cf8847ec59a781682bcf204bfa2861638e07c,2025-05-08T14:39:18.800000 CVE-2025-47543,0,0,1d9fbe4f5a694df53ea5462a8bc5d72f573c2d747052be3860b8afae7f982ef6,2025-05-08T14:39:18.800000 CVE-2025-47544,0,0,a4f9d70e482bc8989c09fc939758f9436bc8d159b2f9f2dc0cc177a6198e85ff,2025-05-08T14:39:18.800000 @@ -294727,13 +294816,16 @@ CVE-2025-47550,0,0,629dfc1b5d3dae27c215f668b417f5d7d77b81c396c5312e859726ef80f60 CVE-2025-47551,0,0,1ff47bb4d657c7e33aa1dcc67f35e113ebaf811e1c3c764c0a360a72784cc1b2,2025-05-08T14:39:09.683000 CVE-2025-47556,0,0,06063b9894785c3f6de11ab2418874bc9eef693faf7cbeeae3efc54dd06a8e64,2025-05-19T13:35:50.497000 CVE-2025-47557,0,0,30fe5baef7cb4352c2f9471d036fd77d02b114de359294a33b494a876933071c,2025-05-19T13:35:50.497000 +CVE-2025-47558,1,1,f8c4f4227c7de0ed5c77428b424e436f08a39f4ab576cd8c89ae534d2455c857,2025-05-23T13:15:39.827000 CVE-2025-4756,0,0,b935e91bacb1926bc8cf1fe1b0f1de476b8b7bfbf44789827c7a23f8c6f1b349,2025-05-21T13:40:10.450000 CVE-2025-47560,0,0,c42216d7ef93cb02bf2cefc33ab7720ff1060436a899db11fa007bd5ae21264e,2025-05-19T13:35:50.497000 CVE-2025-47562,0,0,879496304ffa94481070c08ba70f4beeb80850bcaa0cd491262f65c2fe9f8f35,2025-05-19T13:35:50.497000 CVE-2025-47563,0,0,72acd05048e66bf43174d423048963fa4336cfd5d05a950e28ccf6a586953f28,2025-05-19T13:35:50.497000 CVE-2025-47564,0,0,758c7c233976a079425cfa725a742dd6e7231873de27eacf12a1e47dc13257f8,2025-05-19T13:35:50.497000 CVE-2025-47567,0,0,8bd59bb6ff8c472a7ea16c76eaaa9fb8be8e5bf93dec95aa6197eaff663abf08,2025-05-19T13:35:50.497000 +CVE-2025-47568,1,1,413fd0394e4ede62745ec0ee6d7bf22ab04ff505cdb6f9962663e69f970e0bbd,2025-05-23T13:15:39.973000 CVE-2025-4757,0,0,12239f58836aa43991bba7add9d7c705389f15e6c1d5263c4e323d2392b185f8,2025-05-16T14:42:18.700000 +CVE-2025-47575,1,1,a75e395a3afeec5ce939d55b4e7588c85bd4fe4f3cbdf9d06fa9dd35fe4be694,2025-05-23T13:15:40.127000 CVE-2025-47576,0,0,edb28b0afb2590818e704b2b702bc94672987057adfe446ab20f50ce396f0510,2025-05-21T20:25:16.407000 CVE-2025-47577,0,0,d5f96d5da891bda232a4989d4d3c26cbc8a09fd95a9f0c018bace4df8dbba252,2025-05-21T20:25:16.407000 CVE-2025-47578,0,0,b616bbe684d2eb7dd92eb1261c0ad506edfdcec7b43968e410f446f8f1826964,2025-05-12T17:32:32.760000 @@ -294753,18 +294845,24 @@ CVE-2025-47594,0,0,670736b2ade11ae53e2abb72d50676680bd1eb697f70e54de78fdccfe9061 CVE-2025-47595,0,0,9adf7d209ac9b8d3400c8588f008170c41edc2d63f5ac07b2215d46ce5b295b5,2025-05-08T14:39:09.683000 CVE-2025-47596,0,0,690e3b47de078ba08084cd61db672689fbe99a61629098464a3f13b510134cf9,2025-05-08T14:39:09.683000 CVE-2025-47597,0,0,fb76cae12f5b526063c4e4a4be253bc9c7c48e40696db77b034e646e42c05626,2025-05-08T14:39:09.683000 +CVE-2025-47599,1,1,8ae084cb152ad1fac68401ecf8962ca6bc3a48edefd34d507d1384b5a9bded7d,2025-05-23T13:15:40.277000 CVE-2025-47602,0,0,d3dbfb428c0954dce9fcab4e9e45f9d0df6844ceeac2e295f71482a5f5bda0bd,2025-05-08T14:39:09.683000 +CVE-2025-47603,1,1,a7d7bf25763a09a64d3700f7baf67410ebaa3d37df25698e93ce8ccc2481ae91,2025-05-23T13:15:40.447000 CVE-2025-47604,0,0,5fe8052a1ec8d805c9163a0e7fe2f0a39439d3c6190a6aeb618f3b6906c1c820,2025-05-08T14:39:09.683000 CVE-2025-47605,0,0,b6491092455eede5a1d7d1de6f7221c35c77aca3b2beb6aadc95e5dae53348cb,2025-05-08T14:39:09.683000 CVE-2025-47606,0,0,261198fb968f6507d6ed481eb6f4840bbec961ce05d46e084e160fda30d5d00a,2025-05-08T14:39:09.683000 CVE-2025-47607,0,0,d0b7c3b7ae1517408314d2ad3e3069997c75c6213321888cd8d1c66d4e31c11f,2025-05-08T14:39:09.683000 CVE-2025-47609,0,0,0f312cdc9540101a60207d01d82d63b5a476cecfd45f63337bd539fe4bf56a27,2025-05-08T14:39:09.683000 CVE-2025-4761,0,0,fd493b00de7414db23a7fca9c73e69fbc9c3cdd3d5c080a6e317fbf52563325c,2025-05-16T14:42:18.700000 -CVE-2025-47612,0,0,b15021c93a5116957cf41987ae704960bccbd67c92bfd50437af71ec7ae8ad90,2025-05-08T14:39:09.683000 +CVE-2025-47611,1,1,756326c2a30be858e2090180980cbba87857155e23e0efc7b118fd1ca7968c72,2025-05-23T13:15:40.590000 +CVE-2025-47612,0,1,c47b42ba681a0fc372d8b3ed0a64dde5908cf096a52bafb21bff62087f1517f1,2025-05-23T12:23:15.643000 +CVE-2025-47613,1,1,451a8cdbe32d6658895d8757af3b7f67130175e4608d1190ab5b99a470cbe3af,2025-05-23T13:15:40.733000 CVE-2025-47614,0,0,9cf4846e333b058377603c0a3e55e737741e66282da97fc5632536599de77a65,2025-05-08T14:39:09.683000 CVE-2025-47615,0,0,1a3ce5c26750d3af0dfb7e2c23f693671e6af62e6086d59fddd30b2bc63caafa,2025-05-08T14:39:09.683000 CVE-2025-47616,0,0,a49f87bbe8e0df1c3349748a649cb8561f394823cb7774467b821f7808813f81,2025-05-08T14:39:09.683000 CVE-2025-47617,0,0,e87ad196f223568b94cdbfec08a1cc23cfe30c033180f35f4ddcc4a92dc8432d,2025-05-08T14:39:09.683000 +CVE-2025-47618,1,1,b9a6a8ab925287829de32eaba3691da9d52731d9721372866a64232013939354,2025-05-23T13:15:40.873000 +CVE-2025-47619,1,1,f7fa10c797cd87386ce26dd35b07223a1033dda282b0dbdf608b7e6034d2be70,2025-05-23T13:15:41.023000 CVE-2025-4762,0,0,917fd37f1a95e9028b03d71aa31a674f91a939899e9080fd12019fc90dbfabd2,2025-05-16T14:43:26.160000 CVE-2025-47620,0,0,703813d10298d0f0f31f219598ee1a066e4ba1da2a005aa83c698f6a23520638,2025-05-08T14:39:09.683000 CVE-2025-47621,0,0,ea093219a2d9141360e290cafc4b4819ce8f408ff18880e0183cb3629098a573,2025-05-08T14:39:09.683000 @@ -294776,14 +294874,20 @@ CVE-2025-47626,0,0,bf88148a7c502f96131b60b77588d57b9b40344b978f3b708b521e2614a36 CVE-2025-47628,0,0,3a352204d5e4cc12d5ce2e2e1ea3da85e25e0eb47c6bbea20c8b5b637fab879d,2025-05-12T20:11:13.080000 CVE-2025-47629,0,0,68608bf59b09b45aca1dd6b501b7a877b54d1b0c440b69b9904797f74442993a,2025-05-12T20:31:08.413000 CVE-2025-47630,0,0,f790609ceecba739ddd28929a03ce3e7133470ecda92675205e840ef8b22ebf4,2025-05-12T20:00:07.693000 +CVE-2025-47631,1,1,f65d4bfa4d11613e486f83d9c67eabce2623b0112eb83f7b127e46e6c9a4cd6e,2025-05-23T13:15:41.167000 CVE-2025-47632,0,0,ee2719cb952cde93b033c00cf78ab6f3291285f0dd8209ef8af4b77a88946ad6,2025-05-12T19:59:39.963000 CVE-2025-47633,0,0,fe0fc967b6a437fc51271e1790c541fcb665c108db49d6bb16969242bddb37dd,2025-05-12T19:58:40.697000 CVE-2025-47635,0,0,2d332eb90b47618ac710d319d79594887a0d45990abd9224e46e68d15f534de4,2025-05-12T19:56:54.593000 CVE-2025-47636,0,0,ec0e283d6103bb393c29402697250981cce8cea83f07c93c3c7a0090b2e210ae,2025-05-08T14:39:09.683000 +CVE-2025-47637,1,1,c0a6324d5ef4f6c8a815801ba465871898a423a220e398cfdf31ca8d03b542ea,2025-05-23T13:15:41.310000 CVE-2025-47638,0,0,d2f11eb4befe0b92d4d8e40fbfd843f22232f8d52faa325e67413670c8251895,2025-05-08T14:39:09.683000 CVE-2025-47639,0,0,bc0ba5f4b1d9d37bde6882761b1f130302bc56d7fede678ac4bc7797e0c4e770,2025-05-08T14:39:09.683000 +CVE-2025-47640,1,1,3a92cc0da3e62b270fafa88d84f6a0aa163ed60342675e0a9f657292d728a386,2025-05-23T13:15:41.467000 +CVE-2025-47641,1,1,02d830313f1ebf51d980934a26c8a1212e8c9a57b424a9176b5175a49c5c73d9,2025-05-23T13:15:41.620000 +CVE-2025-47642,1,1,6a1b96422347c9fd73e3b50324d74c10f6460dbe804f1d7df9e4d9938e3e3cff,2025-05-23T13:15:41.767000 CVE-2025-47643,0,0,611e40ae14bd624af669c11a04f87d21040f2674b86fddc23ab1a804333eba10,2025-05-08T14:39:09.683000 CVE-2025-47644,0,0,1b3d83877a612cd5b42c6dc3bb3633c200e5d084a115d1477da05383007fd04c,2025-05-08T14:39:09.683000 +CVE-2025-47646,1,1,8d0120756d11735486189eda0ea2829a43d8b9fbb478dd5d8f2d5be18a732390,2025-05-23T13:15:41.907000 CVE-2025-47647,0,0,bcc64494c4f45cbc11de66eb718f0e423105a061ef54de6b136715ca86a6b678,2025-05-08T14:39:09.683000 CVE-2025-47648,0,0,3c1dfc943823daf3366f4eed455a4c3f82064cebde832df50c0d3191570bcbef,2025-05-08T14:39:09.683000 CVE-2025-47649,0,0,a6998300a5795198f0b6b91104fdb10fcb7520b0214faea4aa3bc9ecd0a8e984,2025-05-08T14:39:09.683000 @@ -294792,30 +294896,41 @@ CVE-2025-47653,0,0,aea902577b09981d2973dd34a3653642f8f6a296f13c8d372934fa816515c CVE-2025-47655,0,0,99fda0bc4baa99ff4898982663410a7b72875bb40b9b47ae6767967697d041a7,2025-05-08T14:39:09.683000 CVE-2025-47656,0,0,64ca96af8ea55f69cb93b539d6deb78f0569be7b208cfa2a28c459de3d2e34ca,2025-05-08T14:39:09.683000 CVE-2025-47657,0,0,06a2b44f0a707dc400085c3e8217ffb9d92c15cc5ff3349c79d56a0255aed3fa,2025-05-08T14:39:09.683000 +CVE-2025-47658,1,1,aec10eb997e399fc78259740d6e80e371db30a3ab4922d58a62bffec830bfc0c,2025-05-23T13:15:42.050000 CVE-2025-47659,0,0,210f689b9d0b72d9b5fa43b1c3dc30724a92ec7094def6ba4150319f424ee0c4,2025-05-08T14:39:09.683000 CVE-2025-4766,0,0,2513d7a9d2344cf7a48e8fdd02fe1b008e2aee6dec7419a1f029a0f1ce84d5e7,2025-05-16T14:42:18.700000 +CVE-2025-47660,1,1,ddb96ed99a07cc52d3775a48aee2679739e09570aa975e00f71f26d762512f0c,2025-05-23T13:15:42.200000 CVE-2025-47661,0,0,33982acf73a99d3b91026b377c82ac477f9f5c198a93eda06929d97bbca8c766,2025-05-08T14:39:09.683000 CVE-2025-47662,0,0,793e5235971d996fc7c43ee7f7251a1182407d43237ea611f609262736c1b5d6,2025-05-08T14:39:09.683000 +CVE-2025-47663,1,1,80a4eb55b10619cc9c9992168a9c8a6816cf191a43ad499e5ca63f28644c7671,2025-05-23T13:15:42.353000 CVE-2025-47664,0,0,c30b79b377fff0ea8893d36360ccd71bc3ebcbfbed810dd35004e24c96d12011,2025-05-08T14:39:09.683000 CVE-2025-47665,0,0,4ff4ec6956df62c5f9541c67c369bb77a77c3fe17d7dcd7de9a7df8e7ae775bf,2025-05-08T14:39:09.683000 CVE-2025-47667,0,0,c5c3699d75e4a7f8a3730cb4e9e44d2fd930684bd7a2f777cb6803886c34568a,2025-05-08T14:39:09.683000 CVE-2025-47668,0,0,e605817feadf00c6ba7cd0be09ec5b9992798e3b94375f1ead9299c82ff14b3f,2025-05-08T14:39:09.683000 CVE-2025-47669,0,0,9ea20a1487343d3ff5c0d26244bfa41d107a9925de9c3b22b0548b5fdf673903,2025-05-08T14:39:09.683000 CVE-2025-4767,0,0,0cb9108101e8d2213dc0abca906f056c98ad7c9e4023426b8a4630b4869c139a,2025-05-16T14:42:18.700000 +CVE-2025-47670,1,1,93169dc13ac731c376440157d27afd6394fe473285e5703e8087c02139485af0,2025-05-23T13:15:42.507000 +CVE-2025-47671,1,1,b8f8a898f68d53a4ea2fe3ba55607384902b7a319bae3ab9fafbcac62b969a46,2025-05-23T13:15:42.660000 +CVE-2025-47672,1,1,44e6d34bbf0ff40c41ab2f0b1b9014cc09c4438fc22615acd267954e81cc5ba8,2025-05-23T13:15:42.807000 +CVE-2025-47673,1,1,b9d8bafe07027ce774b1ea266ef34bd256ccfc83bcf6d933b0b5298bfed22367,2025-05-23T13:15:42.950000 CVE-2025-47674,0,0,4f6ba0df0b82c70a182d940af486ec65eed0597dda76e2cb51d2323ec73ac91b,2025-05-08T14:39:09.683000 CVE-2025-47675,0,0,7ac7ca50bee96bae8c48626d07d74322e266adb00c7c46ddbb55345581e253b3,2025-05-08T14:39:09.683000 CVE-2025-47676,0,0,21edba44420f6cfc85bd61daf1bf1ee88babefadf9da1fe88628caf1a82f46d0,2025-05-08T14:39:09.683000 CVE-2025-47677,0,0,2bbd194d7601ff119dc6abd6837e1e78212a91858a18b74c31c7a5175d39dc79,2025-05-08T14:39:09.683000 +CVE-2025-47678,1,1,eec58f6d5ef243ffa5577d534d8412d27ac36be40b1654c36c57264ebdd3c427,2025-05-23T13:15:43.103000 CVE-2025-47679,0,0,6602ef84847c58e4762740250b5e5076c474ae9ce6e643ba0660928bd0463765,2025-05-08T14:39:09.683000 CVE-2025-4768,0,0,da23ae7a682d483d670bbafc80d7e766b08a1df2b0d2253901d5205a2051314f,2025-05-16T14:42:18.700000 +CVE-2025-47680,1,1,8d231316a4f4fea4d7bc3614a00ffcb3c63662a4ca07f95d4f77ca718df6a442,2025-05-23T13:15:43.250000 CVE-2025-47681,0,0,d1fa028feb99ae7813e0c8bfeccbcc5cc88653cd17aebda9690b3fbb83c836b5,2025-05-08T14:39:09.683000 CVE-2025-47682,0,0,27ae67478a0163e27a539e154a873a6d5c71aa93c1435da60fe01b67dde74e01,2025-05-13T19:35:25.503000 CVE-2025-47683,0,0,847489e7dabfc8450b212d5b30cd1d2f7c870a79f76804e28fa2ec6047c54b38,2025-05-08T14:39:09.683000 CVE-2025-47684,0,0,fd1a9894ee842533cac5c0d72a0af5c2fb5d7d6bbe1c3fb5518ff73450463972,2025-05-08T14:39:09.683000 CVE-2025-47685,0,0,79efcb6e063784c2d53a7630700b637df856470177283205e17aa20edc940324,2025-05-08T14:39:09.683000 CVE-2025-47686,0,0,4696392ac491b874813422e1bd1bf4008e9e7ede626b3e055ad199b50f246006,2025-05-08T14:39:09.683000 -CVE-2025-47688,0,0,91cfee84c1dd2c5b29a03643479d9f1f8828cd2873deb4f640351c3a16ec2bc6,2025-05-08T14:39:09.683000 +CVE-2025-47687,1,1,d1c125fda7343dd9e86755e6eeff2eff6757b63f831e2a7f8313c97eb1929c76,2025-05-23T13:15:43.393000 +CVE-2025-47688,0,1,62e3c20d4e881e2be96b54caf842d999e7cac968377c96dd30227c7a81958d9e,2025-05-23T12:46:47.047000 CVE-2025-4769,0,0,b17ae4a9d25fdabaf2f57aa3dcc231bb28655d64b9fa6a8e1ae0f7ee83be917a,2025-05-16T14:42:18.700000 +CVE-2025-47690,1,1,63c0153808cc7d061b45f98a3e2cbb486d2cbc88dad63036d27f9feb5b120af1,2025-05-23T13:15:43.543000 CVE-2025-47691,0,0,2fbcaec9e7aa91338754c59feea941303c490f94047df759c01680eb3cbc37a6,2025-05-08T14:39:09.683000 CVE-2025-47692,0,0,c444a1a1a14d26e3caa340ba7e06ef944bc094c41e95aad797793f9895bd3464,2025-05-08T14:39:09.683000 CVE-2025-47693,0,0,e89b1a6670330d4d22f8cc221b89668c8cd5df047d9ad3b00d816d91b773e5b1,2025-05-19T13:35:50.497000 @@ -294890,7 +295005,7 @@ CVE-2025-47814,0,0,91d01c94bb9a2d6cbf1f2ce3b51913f5401bb5d496a9da26d55db4bea09f6 CVE-2025-47815,0,0,9592c3e4f771ae3f4778fd1417b837c60cd946494bcc69b16ff5a835676654f7,2025-05-12T19:15:51.627000 CVE-2025-47816,0,0,f2039bef5f35896f6323dde541ac2699fd60fa6f47c1d018e4464af2af438bb3,2025-05-12T19:15:51.733000 CVE-2025-47817,0,0,a9608fe19de2055ccc53db5d916ab7446a11a0159ceb8cb3f751e656accab718,2025-05-12T17:32:32.760000 -CVE-2025-4782,0,0,5d18c6826cdcc134636a76c629af0cdaf652c326cbfeba70d58c64e9838125b3,2025-05-19T13:35:50.497000 +CVE-2025-4782,0,1,7ad1545eb9e016317ccf1371b442ca29cb62e72aa504ad708f7f276790913468,2025-05-23T13:04:40.253000 CVE-2025-47828,0,0,164436fe84b8d833a71f3fa8e7f3f39b64e2df889f4579512ca4cd1f99b4e769,2025-05-12T17:32:32.760000 CVE-2025-4785,0,0,11af03bace6c1c04331c5dddb8e99f128f61109ba1a035e35492e3dbcae57560,2025-05-21T21:00:19.110000 CVE-2025-47850,0,0,259b699584a388d5ea4cc7a744670f736555610cbd0808b10318c9fb9751b077,2025-05-21T20:24:58.133000 @@ -294907,14 +295022,14 @@ CVE-2025-47862,0,0,10e588a747b987e4be2e09155f4160fe17df1ee74eee593b30634360724aa CVE-2025-47863,0,0,36620174019b6cc7c4127108cfc627947af1c045488d10587a581071ed50838e,2025-05-13T04:16:27.657000 CVE-2025-47864,0,0,a7630e6b56face876bab50ada284160d7000173d4dd10948b2856168893da548,2025-05-13T04:16:27.717000 CVE-2025-4787,0,0,8340edf877fc579ccdab6595eaee602c7b395eb1f9ec624b2b870de20098a1f0,2025-05-19T13:35:20.460000 -CVE-2025-4788,0,0,8ce69244022c17c7fca483a4007efa18e324b9182b180199877508ad98569115,2025-05-19T13:35:20.460000 +CVE-2025-4788,0,1,6549de8473f891daf65760389e77371268c3135604d761cfc045c33ff9e38a07,2025-05-23T13:40:39.103000 CVE-2025-47884,0,0,ca2f6e7613c5519e138e638bc9b8e99bf43369248784670ec7b21fd7bb670c64,2025-05-16T14:43:26.160000 CVE-2025-47885,0,0,7cd61005afdd68a91ce8116a91eb90e2153d1a441c638e8f7381f11bb6339541,2025-05-16T14:43:26.160000 CVE-2025-47886,0,0,f554ebe5ca84c52b9bd3c1ddf0ac4c360319b3b29443c88149d4e02e1d917981,2025-05-16T14:43:26.160000 CVE-2025-47887,0,0,271a5471a23e5e643f00af0804aeb39e5d64c389e6c820350aa8864bd7ab1693,2025-05-16T14:43:26.160000 CVE-2025-47888,0,0,0d6b99c1aac30e904c6953f10b976f64ec2cc228a5c323608d0d557b1f0a16f5,2025-05-16T14:43:26.160000 CVE-2025-47889,0,0,5c5fcf2cf820cf291c28879ce8a51a36bf9d089071d0fadf1dc54a37949494f2,2025-05-19T16:15:30.710000 -CVE-2025-4789,0,0,114fae7f2287769fbf7ca3a52cb97344c0653087dca8296381167e675718b261,2025-05-19T13:35:20.460000 +CVE-2025-4789,0,1,4af166476e1d6fe2a2e8a138cab9499fec3ad27e5b15b67d7da8165c8c1a21a2,2025-05-23T13:39:43.877000 CVE-2025-47891,0,0,3509ae60d3e276b3d31ded275d09ec19d9718fb2cd7eb439e8607c5c8c475672,2025-05-14T04:16:20.820000 CVE-2025-47892,0,0,1166d3015183bf5aed324d1bf12c7d30ba32b77cb0f256924df31e43bb338b77,2025-05-14T04:16:21.220000 CVE-2025-47893,0,0,baf0299c0742d5e0d8d03b3d7bdf705697b0fe18614079e688d97d35e0aeaa9d,2025-05-14T04:16:21.430000 @@ -294924,9 +295039,9 @@ CVE-2025-47896,0,0,ab0c011a661969f6ffc78e59414920e5a75191c2889de16f9fda859aa078e CVE-2025-47897,0,0,109dc1f592e5a8b777940322079ea4797fc247ab4c306750db6fdb1c729b901f,2025-05-14T04:16:23.073000 CVE-2025-47898,0,0,4bdc2e47dd7f87b8a496fc88222111102b911b01e8808007a66256e68aba7671,2025-05-14T04:16:23.200000 CVE-2025-47899,0,0,6495f5d2d1b3f957c9f444c54342056b9d91bd61d547188fa54a7057febf5cf7,2025-05-14T04:16:23.340000 -CVE-2025-4790,0,0,6d5f2cdcbd6612895b958f4beb6525ea3694a482e02dccf451ff8bf3877eb027,2025-05-19T13:35:20.460000 +CVE-2025-4790,0,1,1cde53f18939fd245b2e017ab5d61b1aabe2517bc390d40b0830feb8eba632b8,2025-05-23T13:31:33.667000 CVE-2025-47905,0,0,1fd9c671938ca2990c9964b0145ae3c14a9f58437e16eb84e9d5a8422372d7aa,2025-05-16T14:43:56.797000 -CVE-2025-4791,0,0,578ccf218877af6e00dfa4a943c76d90a79e50a127155afc32097aeb882f0ed3,2025-05-19T13:35:20.460000 +CVE-2025-4791,0,1,28f506e7fa1c70a3ee261c046fff0149e1890f11d112b4d14f3ee7199740eeee,2025-05-23T13:19:04.810000 CVE-2025-47916,0,0,349bc485071922c845787a800e87e32007ef0119526fd50ebe494ddec94bdd0c,2025-05-19T13:35:50.497000 CVE-2025-4792,0,0,21db6c6a0980ebdddf04629d64861455665b1f76d0f3a3745052ad338fdfef83,2025-05-19T13:35:20.460000 CVE-2025-47928,0,0,c98d79f9403b054eccd93f148fcf481d13089a9bec154b271a0eadcf13b86566,2025-05-16T14:42:18.700000 @@ -295037,9 +295152,11 @@ CVE-2025-48238,0,0,99daf8026163732b210d202e6b6edadcd0709299a2adc75f812b4f932adea CVE-2025-48239,0,0,61e15fc1687ff03ff55acecffc70a2fc024dc88f441860ade31328c7bfb26201,2025-05-21T20:25:33.823000 CVE-2025-4824,0,0,4f692e6ef5d33a5f39947912da7c049dac9a422c8b1e9e3f8cb9839fd2f90266,2025-05-19T13:35:20.460000 CVE-2025-48240,0,0,e824bd0f0f14aaf77bbce2ba215f37e49c6ab6859324a678e23117bdb164eb5f,2025-05-21T20:25:33.823000 +CVE-2025-48241,1,1,dbf8db4c916c914d8fcf6d2472709f753be58eda81dd3fe273026f68d2110c97,2025-05-23T13:15:43.690000 CVE-2025-48242,0,0,f98d7ba9576a73698b6b7f7897f7ac9a77bd5368d7b019f8cbc0aeca7af1e769,2025-05-21T20:25:33.823000 CVE-2025-48243,0,0,2a313c1047df606ab3ced192c2a986785dbed52bd5f95d764233fa762ea155d1,2025-05-21T20:25:33.823000 CVE-2025-48244,0,0,9c16f31503382e02d23bb4a85f10bad37f5611094ff5985c19a264ef38f0c46c,2025-05-21T20:25:33.823000 +CVE-2025-48245,1,1,81487eda1709899eda6a084dc6a0e41dc4b206da8410c4222518821811dde981,2025-05-23T13:15:43.843000 CVE-2025-48246,0,0,904600fd3823842f134b777cca5219e2cefddc91b4dcab58b6ba381b31d10db1,2025-05-21T20:25:33.823000 CVE-2025-48247,0,0,14ac560aa2f43e887dc112f518928281d74e71101b1b238bd818b1916c1075db,2025-05-21T20:25:33.823000 CVE-2025-48248,0,0,39933ba313ef4853b02e5701c771334e64e6f3f6ccdb97d8f42d6fab446755bf,2025-05-21T20:25:33.823000 @@ -295066,16 +295183,24 @@ CVE-2025-48268,0,0,6fb94d6452c139be6761ee0334544120703ae1e01f5e54b75846cfcd10196 CVE-2025-48269,0,0,f92f6497a4c0d6ec5dda04beeadf5b9056b09a0f6fcbf3c45be0dfbd4fb991a1,2025-05-21T20:25:33.823000 CVE-2025-4827,0,0,97a72e75fe73d69af208473e94e1fcf8931b7f95fad66d5af5f0ab42cb43bb02,2025-05-19T13:35:20.460000 CVE-2025-48270,0,0,133fff98e194972f33f1094510d8ec4d32c15dd7e4436e5da8670dbbe1e924ad,2025-05-21T20:25:33.823000 +CVE-2025-48271,1,1,685a2ee6359b6729938202745c299095b99e4999a0cdec327d181c58a2f0ceff,2025-05-23T13:15:43.990000 CVE-2025-48272,0,0,66468f7c0af99ebd57d8c7b4441e40e48a9778fecf112c5ed2e2f3baa220721c,2025-05-21T20:25:33.823000 +CVE-2025-48273,1,1,7b12e4e7a8339be7f7c1e932f870029b88ce530a1e720b9bfcec2fb757f56712,2025-05-23T13:15:44.140000 +CVE-2025-48275,1,1,ee15fce26e995f849c5a15e9049bc6194c9173cde0ef4a088ef584664bdbf0b8,2025-05-23T13:15:44.287000 CVE-2025-48276,0,0,0e141f1bba6aa60f05739d7c11f150d7139abee4704e3e4b24e80ad758f6c866,2025-05-21T20:25:33.823000 CVE-2025-48277,0,0,22dca5b7c56418f77c0bce203490c523fc4aff3e411af80d1d258902607a715a,2025-05-21T20:25:33.823000 CVE-2025-48278,0,0,fc186ead0a408b0818eff61791f9966eb55ac4b781cef1f9c2ff2b13637be2a0,2025-05-21T20:25:33.823000 CVE-2025-48280,0,0,50547438efb25a41870b12bbd2b12530e271613abc780fbeacb3aedf39b9e831,2025-05-21T20:25:33.823000 CVE-2025-48282,0,0,a63c42bd2eb9f1f01c9f596804aff79306d7447dc39b229a0ba899a19f281349,2025-05-21T20:25:33.823000 +CVE-2025-48283,1,1,f64f7adf46f5cddf79d4017adfcf9f77c88b2b50b4da3ca03af0e1c1206a4f21,2025-05-23T13:15:44.433000 CVE-2025-48284,0,0,d8725648db484c5756e0f6152326f03e07506a859f37510b86b2c8a5eef241dc,2025-05-21T20:25:33.823000 CVE-2025-48285,0,0,0a35e9ed847fcfdf650ac01cd14315e93bb548fbb29bab309959b9e26d0840f2,2025-05-21T20:25:33.823000 +CVE-2025-48286,1,1,75100be2daf2e838fca6cb147dcbcb2d897fbb235a36c7aca90613bc13aceabd,2025-05-23T13:15:44.587000 +CVE-2025-48287,1,1,64017cd9a0bbad007e7ffb6b84d5ed3cda8016b1842e1eeb177b15872d3e7b79,2025-05-23T13:15:44.740000 CVE-2025-48288,0,0,93f3c65d308bcc630b2ef72da05f626c3e49fdc0d230bb58746b42609b0eff66,2025-05-21T20:25:33.823000 +CVE-2025-48289,1,1,67e3e357582e9a0930ed579ec32a6858b8bb56724ef5f48e002b5a3feec9d57f,2025-05-23T13:15:44.897000 CVE-2025-4829,0,0,8a9a1c2d65252b0db6b3d140397819e4c03a0382628055f16e240f60bcd385af,2025-05-19T13:35:20.460000 +CVE-2025-48292,1,1,953ad86a971dacec0cbdf82e5a93e69b73a367a0c2481acffe8bed9d8dc9c50c,2025-05-23T13:15:45.040000 CVE-2025-4830,0,0,4248d7b801adbe27056e0411bf64f478d54271da9c14288000f8f5ac2de521d2,2025-05-19T13:35:20.460000 CVE-2025-4831,0,0,29cf4151e02579e3772a8f73d341d6b1b37a6c6391cdc8e5aadbb6b6e474a4ae,2025-05-19T13:35:20.460000 CVE-2025-4832,0,0,cd35cc919d34cfe564acc74a2c7ebd5d3e890a25d344db231456180ef8a61a26,2025-05-19T13:35:20.460000 @@ -295259,7 +295384,12 @@ CVE-2025-5078,0,0,0f6710c9fb08db1a061eb678b2f7418a5f1e78b3de2b93e2898a5acf390a4c CVE-2025-5079,0,0,3d24d60cd90e80deb9f20869fbcdc1811cc141ddc907acfdf7b4bd7ff9dc03fa,2025-05-22T15:16:06.477000 CVE-2025-5080,0,0,33bf6bc6c886b82b36e5c98608e118e47df7dd6229281f5216ea0fb2c4332f63,2025-05-22T18:15:44.100000 CVE-2025-5081,0,0,123771856d989883c3bc929db7e1d3b3f749264aff528d23eccf0acd9adc1166,2025-05-22T16:15:56.697000 -CVE-2025-5096,0,1,286f5da55a5171f82c139d0415b4b0831e2b822d18d58caf9ffa07264916ce12,2025-05-23T09:15:21.710000 +CVE-2025-5096,0,0,286f5da55a5171f82c139d0415b4b0831e2b822d18d58caf9ffa07264916ce12,2025-05-23T09:15:21.710000 CVE-2025-5098,0,0,087b55ed7b2f01d1af0ef91a25aef0ce633a8b2c3be8560de4b44eb62d9da854,2025-05-23T02:15:21.087000 CVE-2025-5099,0,0,9b2ed7a2309d9469651e599b509a94769183366e598d5b93ab6928ea074d6093,2025-05-23T02:15:22.383000 CVE-2025-5100,0,0,7ec584b97adebff22e30076a198c893411508c0cdae4dc20e25d41501e8d9ce9,2025-05-23T02:15:22.493000 +CVE-2025-5105,1,1,29029fcd2d591adccf77bfaedc79b9e1ef8871c183a9cf59db0bee71a62423cd,2025-05-23T12:15:19.423000 +CVE-2025-5106,1,1,63d104c2f8ba66f4fde7f9e020ad99611c88ab8f2b962f24c703d9c5dd9df7ec,2025-05-23T12:15:19.670000 +CVE-2025-5107,1,1,1ce179c201be471e3b9d0bdd4bf7005645ff2503e6e916676beaac5cca02208b,2025-05-23T13:15:45.340000 +CVE-2025-5108,1,1,1da86a33c5bba8507d56480a5fbab644a6b24f9b6a7dec06b334612f5085bc38,2025-05-23T13:15:45.560000 +CVE-2025-5109,1,1,9e5f67c8de559ba05a53ff06555378204ceec6b23e47d34866f8325454f2cea0,2025-05-23T13:15:45.737000