From b427be855adeb4149dda0b7f42ed238e4f12a82b Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Thu, 16 Oct 2025 20:03:59 +0000 Subject: [PATCH] Auto-Update: 2025-10-16T20:00:12.397694+00:00 --- CVE-2023/CVE-2023-498xx/CVE-2023-49886.json | 26 +- CVE-2024/CVE-2024-561xx/CVE-2024-56171.json | 251 ++++++++++++++++- CVE-2024/CVE-2024-579xx/CVE-2024-57904.json | 160 ++++++++++- CVE-2024/CVE-2024-579xx/CVE-2024-57918.json | 100 ++++++- CVE-2025/CVE-2025-105xx/CVE-2025-10547.json | 12 +- CVE-2025/CVE-2025-114xx/CVE-2025-11492.json | 56 ++++ CVE-2025/CVE-2025-114xx/CVE-2025-11493.json | 56 ++++ CVE-2025/CVE-2025-116xx/CVE-2025-11656.json | 83 +++++- CVE-2025/CVE-2025-116xx/CVE-2025-11657.json | 83 +++++- CVE-2025/CVE-2025-116xx/CVE-2025-11658.json | 83 +++++- CVE-2025/CVE-2025-116xx/CVE-2025-11659.json | 83 +++++- CVE-2025/CVE-2025-118xx/CVE-2025-11852.json | 141 ++++++++++ CVE-2025/CVE-2025-118xx/CVE-2025-11853.json | 141 ++++++++++ CVE-2025/CVE-2025-13xx/CVE-2025-1341.json | 66 ++++- CVE-2025/CVE-2025-210xx/CVE-2025-21066.json | 59 +++- CVE-2025/CVE-2025-210xx/CVE-2025-21067.json | 59 +++- CVE-2025/CVE-2025-210xx/CVE-2025-21068.json | 59 +++- CVE-2025/CVE-2025-210xx/CVE-2025-21069.json | 59 +++- CVE-2025/CVE-2025-210xx/CVE-2025-21070.json | 59 +++- CVE-2025/CVE-2025-216xx/CVE-2025-21629.json | 169 ++++++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21643.json | 100 ++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21645.json | 151 +++++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21646.json | 148 +++++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21648.json | 153 +++++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21651.json | 100 ++++++- CVE-2025/CVE-2025-216xx/CVE-2025-21653.json | 160 ++++++++++- CVE-2025/CVE-2025-217xx/CVE-2025-21701.json | 143 +++++++++- CVE-2025/CVE-2025-232xx/CVE-2025-23242.json | 69 ++++- CVE-2025/CVE-2025-232xx/CVE-2025-23243.json | 69 ++++- CVE-2025/CVE-2025-249xx/CVE-2025-24928.json | 246 ++++++++++++++++- CVE-2025/CVE-2025-276xx/CVE-2025-27606.json | 57 +++- CVE-2025/CVE-2025-342xx/CVE-2025-34253.json | 86 ++++++ CVE-2025/CVE-2025-342xx/CVE-2025-34254.json | 86 ++++++ CVE-2025/CVE-2025-342xx/CVE-2025-34255.json | 86 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34512.json | 86 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34513.json | 86 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34514.json | 82 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34515.json | 82 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34516.json | 82 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34517.json | 86 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34518.json | 86 ++++++ CVE-2025/CVE-2025-345xx/CVE-2025-34519.json | 82 ++++++ CVE-2025/CVE-2025-540xx/CVE-2025-54086.json | 49 +++- CVE-2025/CVE-2025-540xx/CVE-2025-54087.json | 49 +++- CVE-2025/CVE-2025-540xx/CVE-2025-54088.json | 49 +++- CVE-2025/CVE-2025-540xx/CVE-2025-54089.json | 49 +++- CVE-2025/CVE-2025-542xx/CVE-2025-54253.json | 10 +- CVE-2025/CVE-2025-583xx/CVE-2025-58322.json | 18 +- CVE-2025/CVE-2025-583xx/CVE-2025-58323.json | 27 +- CVE-2025/CVE-2025-587xx/CVE-2025-58730.json | 138 ++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58731.json | 63 ++++- CVE-2025/CVE-2025-587xx/CVE-2025-58732.json | 138 ++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58733.json | 148 +++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58734.json | 123 ++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58735.json | 148 +++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58736.json | 148 +++++++++- CVE-2025/CVE-2025-587xx/CVE-2025-58737.json | 56 +++- CVE-2025/CVE-2025-587xx/CVE-2025-58738.json | 105 ++++++- CVE-2025/CVE-2025-594xx/CVE-2025-59425.json | 48 +++- CVE-2025/CVE-2025-599xx/CVE-2025-59944.json | 47 +++- CVE-2025/CVE-2025-606xx/CVE-2025-60639.json | 33 +++ CVE-2025/CVE-2025-606xx/CVE-2025-60641.json | 25 ++ CVE-2025/CVE-2025-608xx/CVE-2025-60855.json | 25 ++ CVE-2025/CVE-2025-613xx/CVE-2025-61330.json | 21 ++ CVE-2025/CVE-2025-615xx/CVE-2025-61514.json | 29 ++ CVE-2025/CVE-2025-615xx/CVE-2025-61541.json | 39 ++- CVE-2025/CVE-2025-615xx/CVE-2025-61543.json | 39 ++- CVE-2025/CVE-2025-615xx/CVE-2025-61553.json | 25 ++ CVE-2025/CVE-2025-616xx/CVE-2025-61687.json | 87 +++++- CVE-2025/CVE-2025-617xx/CVE-2025-61785.json | 78 +++++- CVE-2025/CVE-2025-617xx/CVE-2025-61786.json | 56 +++- CVE-2025/CVE-2025-617xx/CVE-2025-61787.json | 68 ++++- CVE-2025/CVE-2025-618xx/CVE-2025-61882.json | 34 +-- CVE-2025/CVE-2025-618xx/CVE-2025-61884.json | 44 ++- CVE-2025/CVE-2025-619xx/CVE-2025-61907.json | 90 ++++++ CVE-2025/CVE-2025-619xx/CVE-2025-61908.json | 86 ++++++ CVE-2025/CVE-2025-619xx/CVE-2025-61909.json | 90 ++++++ CVE-2025/CVE-2025-619xx/CVE-2025-61922.json | 56 ++++ CVE-2025/CVE-2025-619xx/CVE-2025-61923.json | 56 ++++ CVE-2025/CVE-2025-619xx/CVE-2025-61924.json | 56 ++++ CVE-2025/CVE-2025-619xx/CVE-2025-61926.json | 12 +- CVE-2025/CVE-2025-624xx/CVE-2025-62407.json | 56 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62409.json | 78 ++++++ CVE-2025/CVE-2025-624xx/CVE-2025-62411.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62412.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62413.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62414.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62415.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62416.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62417.json | 78 ++++++ CVE-2025/CVE-2025-624xx/CVE-2025-62418.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62423.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62425.json | 60 ++++ CVE-2025/CVE-2025-624xx/CVE-2025-62427.json | 82 ++++++ CVE-2025/CVE-2025-624xx/CVE-2025-62428.json | 82 ++++++ CVE-2025/CVE-2025-625xx/CVE-2025-62586.json | 108 ++++++++ README.md | 106 +++---- _state.csv | 292 +++++++++++--------- 98 files changed, 7545 insertions(+), 470 deletions(-) create mode 100644 CVE-2025/CVE-2025-114xx/CVE-2025-11492.json create mode 100644 CVE-2025/CVE-2025-114xx/CVE-2025-11493.json create mode 100644 CVE-2025/CVE-2025-118xx/CVE-2025-11852.json create mode 100644 CVE-2025/CVE-2025-118xx/CVE-2025-11853.json create mode 100644 CVE-2025/CVE-2025-342xx/CVE-2025-34253.json create mode 100644 CVE-2025/CVE-2025-342xx/CVE-2025-34254.json create mode 100644 CVE-2025/CVE-2025-342xx/CVE-2025-34255.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34512.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34513.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34514.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34515.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34516.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34517.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34518.json create mode 100644 CVE-2025/CVE-2025-345xx/CVE-2025-34519.json create mode 100644 CVE-2025/CVE-2025-606xx/CVE-2025-60639.json create mode 100644 CVE-2025/CVE-2025-606xx/CVE-2025-60641.json create mode 100644 CVE-2025/CVE-2025-608xx/CVE-2025-60855.json create mode 100644 CVE-2025/CVE-2025-613xx/CVE-2025-61330.json create mode 100644 CVE-2025/CVE-2025-615xx/CVE-2025-61514.json create mode 100644 CVE-2025/CVE-2025-615xx/CVE-2025-61553.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61907.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61908.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61909.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61922.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61923.json create mode 100644 CVE-2025/CVE-2025-619xx/CVE-2025-61924.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62407.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62409.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62411.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62412.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62413.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62414.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62415.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62416.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62417.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62418.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62423.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62425.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62427.json create mode 100644 CVE-2025/CVE-2025-624xx/CVE-2025-62428.json create mode 100644 CVE-2025/CVE-2025-625xx/CVE-2025-62586.json diff --git a/CVE-2023/CVE-2023-498xx/CVE-2023-49886.json b/CVE-2023/CVE-2023-498xx/CVE-2023-49886.json index 7f69b3c2853..bdfe6bd4308 100644 --- a/CVE-2023/CVE-2023-498xx/CVE-2023-49886.json +++ b/CVE-2023/CVE-2023-498xx/CVE-2023-49886.json @@ -2,8 +2,8 @@ "id": "CVE-2023-49886", "sourceIdentifier": "psirt@us.ibm.com", "published": "2025-10-06T15:16:01.123", - "lastModified": "2025-10-08T19:38:32.610", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:13:37.770", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ibm:transformation_extender_advanced:10.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "EB583067-9C60-463E-959D-ECB1FD824EE6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7247179", - "source": "psirt@us.ibm.com" + "source": "psirt@us.ibm.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-561xx/CVE-2024-56171.json b/CVE-2024/CVE-2024-561xx/CVE-2024-56171.json index 055850c765d..b380bb0b79c 100644 --- a/CVE-2024/CVE-2024-561xx/CVE-2024-56171.json +++ b/CVE-2024/CVE-2024-561xx/CVE-2024-56171.json @@ -2,8 +2,8 @@ "id": "CVE-2024-56171", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-18T22:15:12.797", - "lastModified": "2025-03-28T15:15:46.003", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:39:26.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.4, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -51,14 +71,237 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.12.10", + "matchCriteriaId": "9EB46E7E-7E29-4F40-A890-EEC2C36FB50E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.13.0", + "versionEndExcluding": "2.13.6", + "matchCriteriaId": "AA27632E-368D-4792-B20A-49B3B168F3CE" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4AFE5CAF-ACA7-4F82-BEC1-69562D75E66E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AD7447BC-F315-4298-A822-549942FC118B" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CDDF61B7-EC5C-467C-B710-B89F502CD04F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6770B6C3-732E-4E22-BF1C-2D2FD610061C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9F9C8C20-42EB-4AB5-BD97-212DEB070C43" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7FFF7106-ED78-49BA-9EC5-B889E3685D53" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "56409CEC-5A1E-4450-AA42-641E459CC2AF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B06F4839-D16A-4A61-9BB5-55B13F41E47F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D0B4AD8A-F172-4558-AEC6-FF424BA2D912" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8497A4C9-8474-4A62-8331-3FE862ED4098" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*", + "matchCriteriaId": "E8F29E19-3A64-4426-A2AA-F169440267CC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D39DCAE7-494F-40B2-867F-6C6A077939DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*", + "matchCriteriaId": "A20333EE-4C13-426E-8B54-D78679D5DDB8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D6D700C5-F67F-4FFB-BE69-D524592A3D2E" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/828", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20250328-0010/", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-579xx/CVE-2024-57904.json b/CVE-2024/CVE-2024-579xx/CVE-2024-57904.json index e26d723d9b0..db145a9dda3 100644 --- a/CVE-2024/CVE-2024-579xx/CVE-2024-57904.json +++ b/CVE-2024/CVE-2024-579xx/CVE-2024-57904.json @@ -2,8 +2,8 @@ "id": "CVE-2024-57904", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T12:15:23.970", - "lastModified": "2025-02-02T11:15:12.590", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:53:36.000", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,175 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: iio: adc: at91: llamar a input_free_device() en iio_dev asignado La implementaci\u00f3n actual de at91_ts_register() llama a input_free_deivce() en st->ts_input, sin embargo, se puede llegar a la etiqueta err antes de que el iio_dev asignado se almacene en st->ts_input. Por lo tanto, se llama a input_free_device() en la entrada en lugar de a st->ts_input." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.16", + "versionEndExcluding": "5.4.290", + "matchCriteriaId": "82978D47-8F38-478C-9218-02533F399963" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.234", + "matchCriteriaId": "F732162B-ED7E-4367-A5C2-B24FD9B0D33B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.177", + "matchCriteriaId": "71A3AFDC-A3CA-454F-8917-E998BBDE36F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.125", + "matchCriteriaId": "9AFD566B-ECC6-46F1-92F7-12A615D5685F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.72", + "matchCriteriaId": "33E12097-C88A-45B4-9677-2A961A08DD3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "02D604F6-10D1-4F7B-A022-0888406A1121" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/028a1ba8e3bae593d701aee4f690ce7c195b67d6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/09e067e3c83e0695d338e8a26916e3c2bc44be02", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/25ef52f1c15db67d890b80203a911b9a57b0bf71", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac8d932e3214c10ec641ad45a253929a596ead62", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b549c90bfe66f704878aa1e57b30ba15dab71935", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d115b7f3ddc03b38bb7e8754601556fe9b4fc034", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/de6a73bad1743e9e81ea5a24c178c67429ff510b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-579xx/CVE-2024-57918.json b/CVE-2024/CVE-2024-579xx/CVE-2024-57918.json index 9122fb0b598..bfe47dc0e2c 100644 --- a/CVE-2024/CVE-2024-579xx/CVE-2024-57918.json +++ b/CVE-2024/CVE-2024-579xx/CVE-2024-57918.json @@ -2,8 +2,8 @@ "id": "CVE-2024-57918", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T12:15:25.960", - "lastModified": "2025-01-19T12:15:25.960", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:44:50.023", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: se corrige el error de p\u00e1gina debido a la falta de coincidencia de la definici\u00f3n de superficie m\u00e1xima. El controlador DC est\u00e1 usando dos valores diferentes para definir la cantidad m\u00e1xima de superficies: MAX_SURFACES y MAX_SURFACE_NUM. Se consolida MAX_SURFACES como la definici\u00f3n \u00fanica para las actualizaciones de superficie en DC. Corrige el error de p\u00e1gina que enfrentan los usuarios de Cosmic en las versiones de pantalla AMD que admiten dos planos de superposici\u00f3n, desde la introducci\u00f3n del modo de superposici\u00f3n del cursor. [26 nov 21:33] ERROR: no se puede gestionar el error de p\u00e1gina para la direcci\u00f3n: 0000000051d0f08b [ +0.000015] #PF: acceso de lectura del supervisor en modo kernel [ +0.000006] #PF: error_code(0x0000) - p\u00e1gina no presente [ +0.000005] PGD 0 P4D 0 [ +0.000007] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI [ +0.000006] CPU: 4 PID: 71 Comm: kworker/u32:6 No contaminado 6.10.0+ #300 [ +0.000006] Nombre del hardware: Valve Jupiter/Jupiter, BIOS F7A0131 30/01/2024 [ +0.000007] Cola de trabajo: eventos_sin_enlace_confirmaci\u00f3n_trabajo [drm_kms_helper] [ +0.000040] RIP: 0010:copiar_actualizaci\u00f3n_de_flujo_a_flujo.isra.0+0x30d/0x750 [amdgpu] [ +0.000847] C\u00f3digo: 8b 10 49 89 94 24 f8 00 00 00 48 8b 50 08 49 89 94 24 00 01 00 00 8b 40 10 41 89 84 24 08 01 00 00 49 8b 45 78 48 85 c0 74 0b <0f> b6 00 41 88 84 24 90 64 00 00 49 8b 45 60 48 85 c0 74 3b 48 8b [ +0.000010] RSP: 0018:ffffc203802f79a0 EFLAGS: 00010206 [ +0.000009] RAX: 0000000051d0f08b RBX: 0000000000000004 RCX: ffff9f964f0a8070 [ +0.000004] RDX: ffff9f9710f90e40 RSI: ffff9f96600c8000 RDI: ffff9f964f000000 [ +0.000004] RBP: ffffc203802f79f8 R08: 0000000000000000 R09: 0000000000000000 [ +0.000005] R10: 0000000000000000 R11: 0000000000000000 R12: ffff9f96600c8000 [ +0.000004] R13: ffff9f9710f90e40 R14: ffff9f964f000000 R15: ffff9f96600c8000 [ +0.000004] FS: 000000000000000(0000) GS:ffff9f9970000000(0000) knlGS:0000000000000000 [ +0.000005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0.000005] CR2: 0000000051d0f08b CR3: 00000002e6a20000 CR4: 0000000000350ef0 [ +0.000005] Rastreo de llamadas: [ +0.000011] [ +0.000010] ? __die_body.cold+0x19/0x27 [ +0.000012] ? exc_page_fault_oops+0x15a/0x2d0 [ +0.000014] ? exc_page_fault+0x7e/0x180 [ +0.000009] ? asm_exc_page_fault+0x26/0x30 [ +0.000013] ? copia_actualizaci\u00f3n_de_flujo_a_flujo.isra.0+0x30d/0x750 [amdgpu] [ +0.000739] ? estado_de_confirmaci\u00f3n_dc_sin_verificaci\u00f3n+0xd6c/0xe70 [amdgpu] [ +0.000470] actualizaci\u00f3n_de_planos_y_estado_de_flujo+0x49b/0x4f0 [amdgpu] [ +0.000450] ? srso_return_thunk+0x5/0x5f [ +0.000009] ? estado_transici\u00f3n_m\u00ednimo_confirmaci\u00f3n+0x239/0x3d0 [amdgpu] [ +0.000446] planos_actualizaci\u00f3n_y_flujo_v2+0x24a/0x590 [amdgpu] [ +0.000464] ? srso_return_thunk+0x5/0x5f [ +0.000009] ? sort+0x31/0x50 [ +0.000007] ? amdgpu_dm_atomic_commit_tail+0x159f/0x3a30 [amdgpu] [ +0.000508] ? srso_return_thunk+0x5/0x5f [ +0.000009] ? amdgpu_crtc_get_scanout_position+0x28/0x40 [amdgpu] [ +0.000377] ? srso_return_thunk+0x5/0x5f [ +0.000009] ? drm_crtc_vblank_helper_get_vblank_timestamp_internal+0x160/0x390 [drm] [ +0.000058] ? srso_return_thunk+0x5/0x5f [ +0.000005] ? dma_fence_default_wait+0x8c/0x260 [ +0.000010] ? srso_return_thunk+0x5/0x5f [ +0.000005] ? tiempo_espera_finalizaci\u00f3n+0x13b/0x170 [ +0.000006] ? srso_return_thunk+0x5/0x5f [ +0.000005] ? tiempo_espera_finalizaci\u00f3n+0x108/0x140 [ +0.000010] ? cola_commit+0x94/0x130 [drm_kms_helper] [ +0.000024] ? proceso_una_obra+0x177/0x330 [ +0.000008] ? subproceso_trabajador+0x266/0x3a0 [ +0.000006] ? __pfx_worker_thread+0x10/0x10 [ +0.000004] ? kthread+0xd2/0x100 [ +0.000006] ? __pfx_kthread+0x10/0x10 [ +0.000006] ? ret_from_fork+0x34/0x50 [ +0.000004] ? __pfx_kthread+0x10/0x10 [ +0.000005] ? ret_from_fork_asm+0x1a/0x30 [ +0.000011] (seleccionado de el commit 1c86c81a86c60f9b15d3e3f43af0363cf56063e7)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "AD20F8BA-D1BC-4584-8C68-17E958381157" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/37b8de96ae48c7bb1a17cd5585195c43fcacbe94", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7de8d5c90be9ad9f6575e818a674801db2ada794", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10547.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10547.json index 4bd32c201c1..1fb857f68a5 100644 --- a/CVE-2025/CVE-2025-105xx/CVE-2025-10547.json +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10547.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10547", "sourceIdentifier": "cret@cert.org", "published": "2025-10-03T12:15:42.993", - "lastModified": "2025-10-06T14:56:47.823", + "lastModified": "2025-10-16T19:15:30.800", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -18,10 +18,10 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 8.8, - "baseSeverity": "HIGH", - "attackVector": "ADJACENT_NETWORK", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", @@ -30,7 +30,7 @@ "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 2.8, + "exploitabilityScore": 3.9, "impactScore": 5.9 } ] diff --git a/CVE-2025/CVE-2025-114xx/CVE-2025-11492.json b/CVE-2025/CVE-2025-114xx/CVE-2025-11492.json new file mode 100644 index 00000000000..ab4c3dfaed1 --- /dev/null +++ b/CVE-2025/CVE-2025-114xx/CVE-2025-11492.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-11492", + "sourceIdentifier": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "published": "2025-10-16T19:15:31.900", + "lastModified": "2025-10-16T19:15:31.900", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the encryption method used to obfuscate some communications over the HTTP channel is updated in the Automate 2025.9 patch to enforce HTTPS for all agent communications." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.6, + "baseSeverity": "CRITICAL", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-319" + } + ] + } + ], + "references": [ + { + "url": "https://www.connectwise.com/company/trust/security-bulletins/connectwise-automate-2025.9-security-fix", + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-114xx/CVE-2025-11493.json b/CVE-2025/CVE-2025-114xx/CVE-2025-11493.json new file mode 100644 index 00000000000..e7daa8cc7cf --- /dev/null +++ b/CVE-2025/CVE-2025-114xx/CVE-2025-11493.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-11493", + "sourceIdentifier": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "published": "2025-10-16T19:15:32.073", + "lastModified": "2025-10-16T19:15:32.073", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The ConnectWise Automate Agent does not fully verify the authenticity of files downloaded from the server, such as updates, dependencies, and integrations. This creates a risk where an on-path attacker could perform a man-in-the-middle attack and substitute malicious files for legitimate ones by impersonating a legitimate server. This risk is mitigated when HTTPS is enforced and is related to CVE-2025-11492." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-494" + } + ] + } + ], + "references": [ + { + "url": "https://www.connectwise.com/company/trust/security-bulletins/connectwise-automate-2025.9-security-fix", + "source": "7d616e1a-3288-43b1-a0dd-0a65d3e70a49" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11656.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11656.json index 4e2ddea39f4..4a3e83c6b8d 100644 --- a/CVE-2025/CVE-2025-116xx/CVE-2025-11656.json +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11656.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11656", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-13T03:15:45.720", - "lastModified": "2025-10-14T19:36:59.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:26:25.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,77 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "8F87971A-DCBD-45DE-AAD5-1C55D4E81268" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/qqy-123/cve/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.328073", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.328073", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.665603", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/qqy-123/cve/issues/1", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11657.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11657.json index 07a92e9c36b..8f2f8748158 100644 --- a/CVE-2025/CVE-2025-116xx/CVE-2025-11657.json +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11657.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11657", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-13T03:15:46.740", - "lastModified": "2025-10-14T19:36:59.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:25:04.620", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,77 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "8F87971A-DCBD-45DE-AAD5-1C55D4E81268" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/qqy-123/cve/issues/2", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.328074", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.328074", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.665604", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/qqy-123/cve/issues/2", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11658.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11658.json index 1f31aa14ef2..ea773bad358 100644 --- a/CVE-2025/CVE-2025-116xx/CVE-2025-11658.json +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11658.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11658", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-13T04:15:47.053", - "lastModified": "2025-10-14T19:36:59.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:23:33.087", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,77 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "8F87971A-DCBD-45DE-AAD5-1C55D4E81268" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/qqy-123/cve/issues/3", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.328075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.328075", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.665605", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/qqy-123/cve/issues/3", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11659.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11659.json index 904beb1a31f..7b5af453eac 100644 --- a/CVE-2025/CVE-2025-116xx/CVE-2025-11659.json +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11659.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11659", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-13T04:15:55.470", - "lastModified": "2025-10-14T19:36:59.730", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:22:26.047", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,77 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oranbyte:school_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "8F87971A-DCBD-45DE-AAD5-1C55D4E81268" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/qqy-123/cve/issues/4", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.328076", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.328076", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.665609", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/qqy-123/cve/issues/4", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11852.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11852.json new file mode 100644 index 00000000000..91a4313d8ba --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11852.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-11852", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-10-16T19:15:32.227", + "lastModified": "2025-10-16T19:15:32.227", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", + "baseScore": 5.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 10.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + }, + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/juliourena/APEMAN-Camera-PoCs/blob/main/RTSP/RTSP_Unauthenticated.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.328798", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.328798", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.668899", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11853.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11853.json new file mode 100644 index 00000000000..0ea5af5d170 --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11853.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-11853", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-10-16T19:15:32.420", + "lastModified": "2025-10-16T19:15:32.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing manipulation can lead to improper access controls. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-266" + }, + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://docs.google.com/document/d/1PzTPCtavuLx_GwREvshGMQ8N5zFDmpe-OAR5kZwOZfE/edit?usp=sharing", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.328799", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.328799", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.657060", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-13xx/CVE-2025-1341.json b/CVE-2025/CVE-2025-13xx/CVE-2025-1341.json index cffc2b57352..c3e5ca21fbf 100644 --- a/CVE-2025/CVE-2025-13xx/CVE-2025-1341.json +++ b/CVE-2025/CVE-2025-13xx/CVE-2025-1341.json @@ -2,8 +2,8 @@ "id": "CVE-2025-1341", "sourceIdentifier": "cna@vuldb.com", "published": "2025-02-16T14:15:21.893", - "lastModified": "2025-02-16T14:15:21.893", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:48:05.460", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.2, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,22 +140,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:pmweb:pmweb:7.2.00:*:*:*:*:*:*:*", + "matchCriteriaId": "8B71F3B6-7A46-4D94-82C5-89571CFF199B" + } + ] + } + ] + } + ], "references": [ { "url": "https://mega.nz/file/yY0BnAgK#08RcRH8c8D4zMhKLEqQwMenHV65lnHsOSuV4eQkdcxY", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit" + ] }, { "url": "https://vuldb.com/?ctiid.295959", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.295959", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.495635", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21066.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21066.json index 40105e0824a..39d138b5f77 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21066.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21066.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21066", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:42.940", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:41:57.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.4.30.63", + "matchCriteriaId": "5029C1F8-35E0-44F9-B0CE-000486E267EB" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21067.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21067.json index 821fdd74d48..ebcb6ef5352 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21067.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21067.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21067", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:43.080", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:41:14.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.4.30.63", + "matchCriteriaId": "5029C1F8-35E0-44F9-B0CE-000486E267EB" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21068.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21068.json index 8f884320dd6..7f9349ef50c 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21068.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21068.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21068", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:43.230", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:39:28.373", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.4.30.63", + "matchCriteriaId": "5029C1F8-35E0-44F9-B0CE-000486E267EB" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21069.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21069.json index 53745deebbc..e65e5f3d9b0 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21069.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21069.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21069", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:43.367", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:35:00.990", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.4.30.63", + "matchCriteriaId": "5029C1F8-35E0-44F9-B0CE-000486E267EB" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-210xx/CVE-2025-21070.json b/CVE-2025/CVE-2025-210xx/CVE-2025-21070.json index 1443ca86771..5454c20c174 100644 --- a/CVE-2025/CVE-2025-210xx/CVE-2025-21070.json +++ b/CVE-2025/CVE-2025-210xx/CVE-2025-21070.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21070", "sourceIdentifier": "mobile.security@samsung.com", "published": "2025-10-10T07:15:43.513", - "lastModified": "2025-10-14T19:37:28.107", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:33:54.903", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,13 +32,66 @@ }, "exploitabilityScore": 2.5, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.4.30.63", + "matchCriteriaId": "5029C1F8-35E0-44F9-B0CE-000486E267EB" + } + ] + } + ] + } + ], "references": [ { "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10", - "source": "mobile.security@samsung.com" + "source": "mobile.security@samsung.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21629.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21629.json index 3805ecb906d..5060e620345 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21629.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21629.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21629", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-15T13:15:15.220", - "lastModified": "2025-01-15T13:15:15.220", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:38:51.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,178 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: volver a habilitar la descarga de NETIF_F_IPV6_CSUM para paquetes TCP GRANDES La confirmaci\u00f3n culpable deshabilit\u00f3 la descarga de hardware de paquetes IPv6 con encabezados de extensi\u00f3n en dispositivos que anuncian NETIF_F_IPV6_CSUM, seg\u00fan la definici\u00f3n de esa caracter\u00edstica en skbuff.h: * * - %NETIF_F_IPV6_CSUM * - El controlador (dispositivo) solo puede realizar la suma de comprobaci\u00f3n de paquetes TCP o UDP simples sobre IPv6. Estos son espec\u00edficamente * paquetes no encapsulados del formato IPv6|TCP o * IPv6|UDP donde el campo Encabezado siguiente en el encabezado IPv6 * es TCP o UDP. Los encabezados de extensi\u00f3n IPv6 * no son compatibles con esta caracter\u00edstica. Esta caracter\u00edstica * no se puede configurar en las caracter\u00edsticas de un dispositivo con * NETIF_F_HW_CSUM tambi\u00e9n configurado. Esta caracter\u00edstica est\u00e1 * OBSOLETA (ver a continuaci\u00f3n). El cambio hace que skb_warn_bad_offload se active para paquetes TCP GRANDES. [ 496.310233] ADVERTENCIA: CPU: 13 PID: 23472 en net/core/dev.c:3129 skb_warn_bad_offload+0xc4/0xe0 [ 496.310297] ? skb_warn_bad_offload+0xc4/0xe0 [ 496.310300] skb_checksum_help+0x129/0x1f0 [ 496.310303] skb_csum_hwoffload_help+0x150/0x1b0 [ 496.310306] validation_xmit_skb+0x159/0x270 [ 496.310309] validation_xmit_skb_list+0x41/0x70 [ 496.310312] sch_direct_xmit+0x5c/0x250 [ 496.310317] __qdisc_run+0x388/0x620 BIG TCP introdujo un encabezado de extensi\u00f3n IPv6_TLV_JUMBO IPv6 para comunicar paquetes longitud, ya que se trata de un jumbograma IPv6. Sin embargo, la funci\u00f3n solo est\u00e1 habilitada en dispositivos que admiten BIG TCP TSO. El encabezado solo est\u00e1 presente para las derivaciones PF_PACKET como tcpdump, y no se transmite por dispositivos f\u00edsicos. Para este caso espec\u00edfico de encabezados de extensi\u00f3n que no se transmiten, regrese a la situaci\u00f3n anterior a la confirmaci\u00f3n culpable y admita la descarga de hardware. ipv6_has_hopopt_jumbo() prueba no solo si este encabezado est\u00e1 presente, sino tambi\u00e9n que sea el \u00fanico encabezado de extensi\u00f3n antes de un encabezado de terminal (L4)." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.323", + "versionEndExcluding": "4.20", + "matchCriteriaId": "463063B3-3A9A-420D-A07B-46284CE30207" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.285", + "versionEndExcluding": "5.5", + "matchCriteriaId": "0F89CEF5-BEBB-4C4B-925A-D5644DDD9764" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.229", + "versionEndExcluding": "5.11", + "matchCriteriaId": "11390F38-11AA-4957-9789-9E4FB50D9C89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.171", + "versionEndExcluding": "5.16", + "matchCriteriaId": "8FA383FE-32A6-400A-B7BA-ECFA9FEEF84B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.116", + "versionEndExcluding": "6.1.124", + "matchCriteriaId": "20406551-BD52-420D-8369-B146DBAC0925" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.60", + "versionEndExcluding": "6.6.70", + "matchCriteriaId": "2A88563C-C3D7-4648-B975-263FCA964BD8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11.7", + "versionEndExcluding": "6.12", + "matchCriteriaId": "1D208D31-DEC5-4B68-A52D-F1CB80565CD7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.1", + "versionEndExcluding": "6.12.9", + "matchCriteriaId": "51AF98D0-F3AA-4960-8230-B6DE6A952104" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*", + "matchCriteriaId": "0E698080-7669-4132-8817-4C674EEBCE54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*", + "matchCriteriaId": "24B88717-53F5-42AA-9B72-14C707639E3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*", + "matchCriteriaId": "1EF8CD82-1EAE-4254-9545-F85AB94CF90F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/68e068cabd2c6c533ef934c2e5151609cf6ecc6d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95ccf006bbc8b59044313b8c309dcf29c546abd4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac9cfef69565021c9e1022a493a9c40b03e2caf9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d3b7a9c7597b779039a51d7b34116fbe424bf2b7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21643.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21643.json index dbf2fa0f3b6..634c463de5c 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21643.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21643.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21643", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:09.870", - "lastModified": "2025-01-19T11:15:09.870", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:17:07.963", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfs: Se corrige el error DIO asincr\u00f3nico del kernel Netfslib debe poder gestionar el error DIO asincr\u00f3nico iniciado por el kernel que se suministra con una matriz bio_vec[]. Actualmente, debido al indicador async, esto se pasa a netfs_extract_user_iter() que lanza una advertencia y falla porque solo gestiona iteradores IOVEC y UBUF. Esto se puede activar a trav\u00e9s de una combinaci\u00f3n de cifs y un blockdev de bucle invertido con algo como: mount //my/cifs/share /foo dd if=/dev/zero of=/foo/m0 bs=4K count=1K losetup --sector-size 4096 --direct-io=on /dev/loop2046 /foo/m0 echo hello >/dev/loop2046 Esto hace que aparezca lo siguiente en syslog: ADVERTENCIA: CPU: 2 PID: 109 en fs/netfs/iterator.c:50 netfs_extract_user_iter+0x170/0x250 [netfs] y que la escritura falle. Solucione esto eliminando la comprobaci\u00f3n en netfs_unbuffered_write_iter_locked() que hace que las escrituras DIO del kernel as\u00edncronas se gestionen como escrituras del espacio de usuario. Tenga en cuenta que este cambio depende de que el llamador del n\u00facleo mantenga la existencia de la matriz bio_vec (o kvec[] o folio_queue) hasta que se complete la operaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "9456486B-ABA1-4DFF-B398-A54A1640A72E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3f6bc9e3ab9b127171d39f9ac6eca1abb693b731", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9f3a265836844eda30bf34c2584b8011fd4f0f49", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21645.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21645.json index 6a6e8262fca..76a6f4c4aa0 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21645.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21645.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21645", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:10.090", - "lastModified": "2025-05-22T13:15:55.210", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:17:53.183", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,160 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: platform/x86/amd/pmc: Solo deshabilitar la activaci\u00f3n de IRQ1 donde i8042 realmente la habilit\u00f3 La activaci\u00f3n para IRQ1 debe deshabilitarse solo en los casos en que i8042 realmente la haya habilitado, de lo contrario, \"wake_depth\" para esta IRQ intentar\u00e1 caer por debajo de cero y se registrar\u00e1 un WARN() desagradable: kernel: atkbd serio0: Deshabilitar la fuente de activaci\u00f3n de IRQ1 para evitar un error de firmware de la plataforma kernel: ------------[ cortar aqu\u00ed ]------------ kernel: Deshabilitar activaci\u00f3n de IRQ 1 no balanceada kernel: ADVERTENCIA: CPU: 10 PID: 6431 en kernel/irq/manage.c:920 irq_set_irq_wake+0x147/0x1a0 El controlador PMC usa DEFINE_SIMPLE_DEV_PM_OPS() para definir su dev_pm_ops que establece amd_pmc_suspend_handler() en .suspend, .freeze y .poweroff. Sin embargo, i8042_pm_suspend() solo se configura como el controlador .suspend. Solucione el problema llamando al controlador de suspensi\u00f3n PMC solo desde el mismo conjunto de controladores dev_pm_ops que i8042_pm_suspend(), lo que actualmente significa solo el controlador .suspend. Para reproducir este problema, intente hibernar (S4) la m\u00e1quina despu\u00e9s de un arranque nuevo sin ponerla primero en s2idle. [ij: edit\u00e9 el mensaje de confirmaci\u00f3n]." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.95", + "versionEndExcluding": "5.16", + "matchCriteriaId": "A38CD77A-F095-4EE9-AED1-651FF45175F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.11", + "versionEndExcluding": "6.1.140", + "matchCriteriaId": "63BBEB23-61FF-4167-BD7A-7317AFEC3A1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.1", + "versionEndExcluding": "6.6.72", + "matchCriteriaId": "1E275F0F-7562-4F95-8039-A57E62BAF00E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "02D604F6-10D1-4F7B-A022-0888406A1121" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:-:*:*:*:*:*:*", + "matchCriteriaId": "3ADCCCEE-143A-4B48-9B2A-0CB97BD385DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*", + "matchCriteriaId": "4AB8D555-648E-4F2F-98BD-3E7F45BD12A8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc7:*:*:*:*:*:*", + "matchCriteriaId": "C64BDD9D-C663-4E75-AE06-356EDC392B82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc8:*:*:*:*:*:*", + "matchCriteriaId": "26544390-88E4-41CA-98BF-7BB1E9D4E243" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5cc621085e2b7a9b1905a98f8e5a86bb4aea2016", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab47d72b736e78d3c2370b26e0bfc46eb0918391", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b25778c87a6bce40c31e92364f08aa6240309e25", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd410d784402c5775f66faf8b624e85e41c38aaf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21646.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21646.json index 7d74937fb12..38628c47c3f 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21646.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21646.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21646", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:10.197", - "lastModified": "2025-02-02T11:15:15.290", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:18:32.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,161 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: afs: Arreglar la longitud m\u00e1xima del nombre de celda El sistema de archivos kafs limita la longitud m\u00e1xima de una celda a 256 bytes, pero ocurre un problema si alguien realmente hace eso: kafs intenta crear un directorio bajo /proc/net/afs/ con el nombre de la celda, pero eso falla con una advertencia: ADVERTENCIA: CPU: 0 PID: 9 en fs/proc/generic.c:405 porque procfs limita la longitud m\u00e1xima del nombre de archivo a 255. Sin embargo, el DNS limita la longitud m\u00e1xima de b\u00fasqueda y, por extensi\u00f3n, el nombre m\u00e1ximo de celda, a 255 menos dos (recuento de longitud y NUL final). Arregle esto limitando la longitud m\u00e1xima aceptable del nombre de celda a 253. Esto tambi\u00e9n nos permite estar seguros de que podemos crear el punto de montaje \"/afs/./\" tambi\u00e9n. Adem\u00e1s, divida el nombre de celda del registro YFS VL al m\u00e1ximo de 256 permitido por el protocolo e ignore el registro recuperado por YFSVL.GetCellName si excede 253." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.8", + "versionEndExcluding": "5.10.234", + "matchCriteriaId": "A551F334-B04F-4925-AD49-DCB0F831CFEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.177", + "matchCriteriaId": "71A3AFDC-A3CA-454F-8917-E998BBDE36F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.125", + "matchCriteriaId": "9AFD566B-ECC6-46F1-92F7-12A615D5685F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.72", + "matchCriteriaId": "33E12097-C88A-45B4-9677-2A961A08DD3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "02D604F6-10D1-4F7B-A022-0888406A1121" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7673030efe0f8ca1056d3849d61784c6caa052af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7922b1f058fe24a93730511dd0ae2e1630920096", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7cb3e77e9b4e6ffa325a5559393d3283c9af3d01", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8fd56ad6e7c90ac2bddb0741c6b248c8c5d56ac8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9340385468d056bb700b8f28df236b81fc86a079", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aabe47cf5ac5e1db2ae0635f189d836f67024904", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21648.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21648.json index 7a85d52d258..0807148c462 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21648.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21648.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21648", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:10.410", - "lastModified": "2025-02-02T11:15:15.433", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:20:51.323", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,166 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: netfilter: conntrack: fijar el tama\u00f1o m\u00e1ximo de la tabla hash a INT_MAX Utilice INT_MAX como tama\u00f1o m\u00e1ximo para la tabla hash de conntrack. De lo contrario, es posible alcanzar WARN_ON_ONCE en __kvmalloc_node_noprof() al cambiar el tama\u00f1o de la tabla hash porque __GFP_NOWARN no est\u00e1 configurado. Consulte: 0708a0afe291 (\"mm: Considere el indicador __GFP_NOWARN para llamadas kvmalloc() de gran tama\u00f1o\") Nota: el cambio de tama\u00f1o de la tabla hash solo es posible desde init_netns." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.7.1", + "versionEndExcluding": "5.10.234", + "matchCriteriaId": "F092EC22-52AC-4AB2-AAD5-F65E6DB49A83" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.177", + "matchCriteriaId": "71A3AFDC-A3CA-454F-8917-E998BBDE36F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.125", + "matchCriteriaId": "9AFD566B-ECC6-46F1-92F7-12A615D5685F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.72", + "matchCriteriaId": "33E12097-C88A-45B4-9677-2A961A08DD3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "02D604F6-10D1-4F7B-A022-0888406A1121" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:4.7:-:*:*:*:*:*:*", + "matchCriteriaId": "2F890998-2B89-4DE8-BA87-5B3D9A5E8E11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5552b4fd44be3393b930434a7845d8d95a2a3c33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a965f7f0ea3ae61b9165bed619d5d6da02c75f80", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1b2353d768f1b80cd7fe045a70adee576b9b338", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b541ba7d1f5a5b7b3e2e22dc9e40e18a7d6dbc13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5807dd1328bbc86e059c5de80d1bbee9d58ca3d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f559357d035877b9d0dcd273e0ff83e18e1d46aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21651.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21651.json index 4edd211df07..087c688a794 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21651.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21651.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21651", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:10.733", - "lastModified": "2025-01-19T11:15:10.733", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:22:28.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,105 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: hns3: no habilitar autom\u00e1ticamente misc vector Actualmente, hay una ventana de tiempo entre la habilitaci\u00f3n de misc irq y la iniciaci\u00f3n de la tarea de servicio. Si se informa una interrupci\u00f3n en este momento, se generar\u00e1 una advertencia como la siguiente: [ 16.324639] Rastreo de llamadas: [ 16.324641] __queue_delayed_work+0xb8/0xe0 [ 16.324643] mod_delayed_work_on+0x78/0xd0 [ 16.324655] hclge_errhand_task_schedule+0x58/0x90 [hclge] [ 16.324662] hclge_misc_irq_handle+0x168/0x240 [hclge] [ 16.324666] __handle_irq_event_percpu+0x64/0x1e0 [ 16.324667] handle_irq_event+0x80/0x170 [ 16.324670] gestionar_fasteoi_edge_irq+0x110/0x2bc [ 16.324671] __gestionar_dominio_irq+0x84/0xfc [ 16.324673] gic_gestionar_irq+0x88/0x2c0 [ 16.324674] el1_irq+0xb8/0x140 [ 16.324677] arch_cpu_idle+0x18/0x40 [ 16.324679] llamada_inactiva_por_defecto+0x5c/0x1bc [ 16.324682] llamada_inactiva_cpu_idle+0x18c/0x1c4 [ 16.324684] do_idle+0x174/0x17c [ 16.324685] cpu_startup_entry+0x30/0x6c [ 16.324687] secondary_start_kernel+0x1a4/0x280 [ 16.324688] ---[ fin de seguimiento 6aa0bff672a964aa ]--- Por lo tanto, no habilite autom\u00e1ticamente el vector miscel\u00e1neo cuando solicite irq." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "787563EA-1C47-42FE-B30A-C12464CA1364" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/98b1e3b27734139c76295754b6c317aa4df6d32e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bcf430d3bb5525fc89a92a0c451c725ba1aa4306", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-216xx/CVE-2025-21653.json b/CVE-2025/CVE-2025-216xx/CVE-2025-21653.json index 8760dd2ce5f..d3245043162 100644 --- a/CVE-2025/CVE-2025-216xx/CVE-2025-21653.json +++ b/CVE-2025/CVE-2025-216xx/CVE-2025-21653.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21653", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-01-19T11:15:10.940", - "lastModified": "2025-02-02T11:15:15.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:44:19.413", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,175 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: cls_flow: validar el atributo TCA_FLOW_RSHIFT syzbot encontr\u00f3 que el atributo TCA_FLOW_RSHIFT no estaba validado. El uso de un entero de 32 bits con valores de desplazamiento grandes no est\u00e1 definido. UBSAN: cambio fuera de los l\u00edmites en net/sched/cls_flow.c:329:23 El exponente de cambio 9445 es demasiado grande para el tipo de 32 bits 'u32' (tambi\u00e9n conocido como 'unsigned int') CPU: 1 UID: 0 PID: 54 Comm: kworker/u8:3 No contaminado 6.13.0-rc3-syzkaller-00180-g4f619d518db9 #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 13/09/2024 Cola de trabajo: ipv6_addrconf addrconf_dad_work Seguimiento de llamadas: __dump_stack lib/dump_stack.c:94 [en l\u00ednea] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:231 [en l\u00ednea] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 lib/ubsan.c:468 flow_classify+0x24d5/0x25b0 net/sched/cls_flow.c:329 tc_classify include/net/tc_wrapper.h:197 [en l\u00ednea] __tcf_classify net/sched/cls_api.c:1771 [en l\u00ednea] tcf_classify+0x420/0x1160 net/sched/cls_api.c:1867 sfb_classify net/sched/sch_sfb.c:260 [en l\u00ednea] sfb_enqueue+0x3ad/0x18b0 net/sched/sch_sfb.c:318 dev_qdisc_enqueue+0x4b/0x290 net/core/dev.c:3793 __dev_xmit_skb net/core/dev.c:3889 [en l\u00ednea] __dev_queue_xmit+0xf0e/0x3f50 net/core/dev.c:4400 dev_queue_xmit include/linux/netdevice.h:3168 [en l\u00ednea] neigh_hh_output include/net/neighbour.h:523 [en l\u00ednea] neigh_output include/net/neighbour.h:537 [en l\u00ednea] ip_finish_output2+0xd41/0x1390 net/ipv4/ip_output.c:236 iptunnel_xmit+0x55d/0x9b0 net/ipv4/ip_tunnel_core.c:82 udp_tunnel_xmit_skb+0x262/0x3b0 net/ipv4/udp_tunnel_core.c:173 geneve_xmit_skb drivers/net/geneve.c:916 [en l\u00ednea] geneve_xmit+0x21dc/0x2d00 drivers/net/geneve.c:1039 __netdev_start_xmit include/linux/netdevice.h:5002 [en l\u00ednea] netdev_start_xmit include/linux/netdevice.h:5011 [en l\u00ednea] xmit_one net/core/dev.c:3590 [en l\u00ednea] dev_hard_start_xmit+0x27a/0x7d0 net/core/dev.c:3606 __dev_queue_xmit+0x1b73/0x3f50 red/n\u00facleo/dev.c:4434" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.25", + "versionEndExcluding": "5.4.290", + "matchCriteriaId": "70081DE2-4539-494D-B69A-DFD1AB86B595" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.234", + "matchCriteriaId": "F732162B-ED7E-4367-A5C2-B24FD9B0D33B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.177", + "matchCriteriaId": "71A3AFDC-A3CA-454F-8917-E998BBDE36F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.125", + "matchCriteriaId": "9AFD566B-ECC6-46F1-92F7-12A615D5685F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.72", + "matchCriteriaId": "33E12097-C88A-45B4-9677-2A961A08DD3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.10", + "matchCriteriaId": "02D604F6-10D1-4F7B-A022-0888406A1121" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*", + "matchCriteriaId": "62567B3C-6CEE-46D0-BC2E-B3717FBF7D13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5A073481-106D-4B15-B4C7-FB0213B8E1D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*", + "matchCriteriaId": "DE491969-75AE-4A6B-9A58-8FC5AF98798F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*", + "matchCriteriaId": "93C0660D-7FB8-4FBA-892A-B064BA71E49E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*", + "matchCriteriaId": "034C36A6-C481-41F3-AE9A-D116E5BE6895" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8AF9DC49-2085-4FFB-A7E3-73DFAFECC7F2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2011749ca96460386844dfc7e0fde53ebee96f3c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/43658e4a5f2770ad94e93362885ff51c10cf3179", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6fde663f7321418996645ee602a473457640542f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9858f4afeb2e59506e714176bd3e135539a3eeec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a039e54397c6a75b713b9ce7894a62e06956aa92", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a313d6e6d5f3a631cae5a241c392c28868aa5c5e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e54beb9aed2a90dddf4c5d68fcfc9a01f3e40a61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-217xx/CVE-2025-21701.json b/CVE-2025/CVE-2025-217xx/CVE-2025-21701.json index b2d47a539c0..477d93c2b4e 100644 --- a/CVE-2025/CVE-2025-217xx/CVE-2025-21701.json +++ b/CVE-2025/CVE-2025-217xx/CVE-2025-21701.json @@ -2,8 +2,8 @@ "id": "CVE-2025-21701", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-02-13T15:15:20.867", - "lastModified": "2025-09-02T20:15:33.237", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:47:19.563", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -40,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -51,30 +81,127 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.87", + "versionEndExcluding": "5.11", + "matchCriteriaId": "5EF5E1BB-40DB-4980-BC84-3FB52D7B2E30" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.8", + "versionEndExcluding": "5.15.179", + "matchCriteriaId": "1FF4F5D8-C3D2-4925-8122-C8FA60177522" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16.1", + "versionEndExcluding": "6.1.129", + "matchCriteriaId": "72B238D2-A77B-4183-97E1-16D63C17290C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.76", + "matchCriteriaId": "A6D70701-9CB6-4222-A957-00A419878993" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.13", + "matchCriteriaId": "2897389C-A8C3-4D69-90F2-E701B3D66373" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.2", + "matchCriteriaId": "6D4116B1-1BFD-4F23-BA84-169CC05FC5A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:-:*:*:*:*:*:*", + "matchCriteriaId": "FF588A58-013F-4DBF-A3AB-70EC054B1892" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*", + "matchCriteriaId": "6EC9882F-866D-4ACB-8FBC-213D8D8436C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc6:*:*:*:*:*:*", + "matchCriteriaId": "8A0915FE-A4AA-4C94-B783-CF29D81E7E54" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc7:*:*:*:*:*:*", + "matchCriteriaId": "4EAC2750-F7C6-4A4E-9C04-1E450722B853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.16:rc8:*:*:*:*:*:*", + "matchCriteriaId": "ED611C74-E83A-4AFA-8688-9B829C02B038" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/12e070eb6964b341b41677fd260af5a305316a1f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/26bc6076798aa4dc83a07d0a386f9e57c94e8517", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2f29127e94ae9fdc7497331003d6860e9551cdf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4dc880245f9b529fa8f476b5553c799d2848b47b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1cb37a31a482df3dd35a6ac166282dac47664f4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b382ab9b885cbb665e0e70a727f101c981b4edf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23242.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23242.json index c7418071843..1de261b62d3 100644 --- a/CVE-2025/CVE-2025-232xx/CVE-2025-23242.json +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23242.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23242", "sourceIdentifier": "psirt@nvidia.com", "published": "2025-03-11T20:15:16.280", - "lastModified": "2025-03-11T20:15:16.280", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:30:43.030", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -49,12 +69,55 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nvidia:riva:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.19.0", + "matchCriteriaId": "0923A13F-4C87-457C-92C5-96B623EC92D5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] } ], "references": [ { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5625", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23243.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23243.json index 1074e122630..6f7bb7f764b 100644 --- a/CVE-2025/CVE-2025-232xx/CVE-2025-23243.json +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23243.json @@ -2,8 +2,8 @@ "id": "CVE-2025-23243", "sourceIdentifier": "psirt@nvidia.com", "published": "2025-03-11T20:15:16.463", - "lastModified": "2025-03-11T20:15:16.463", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:27:16.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 } ] }, @@ -49,12 +69,55 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:nvidia:riva:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.19.0", + "matchCriteriaId": "0923A13F-4C87-457C-92C5-96B623EC92D5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] } ], "references": [ { "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5625", - "source": "psirt@nvidia.com" + "source": "psirt@nvidia.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-249xx/CVE-2025-24928.json b/CVE-2025/CVE-2025-249xx/CVE-2025-24928.json index 8648ae93739..eb847cc1461 100644 --- a/CVE-2025/CVE-2025-249xx/CVE-2025-24928.json +++ b/CVE-2025/CVE-2025-249xx/CVE-2025-24928.json @@ -2,8 +2,8 @@ "id": "CVE-2025-24928", "sourceIdentifier": "cve@mitre.org", "published": "2025-02-18T23:15:10.250", - "lastModified": "2025-03-21T18:15:34.860", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:34:33.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.4, "impactScore": 5.8 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.5, + "impactScore": 5.2 } ] }, @@ -51,18 +71,234 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*", + "matchCriteriaId": "E8F29E19-3A64-4426-A2AA-F169440267CC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D39DCAE7-494F-40B2-867F-6C6A077939DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*", + "matchCriteriaId": "A20333EE-4C13-426E-8B54-D78679D5DDB8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D6D700C5-F67F-4FFB-BE69-D524592A3D2E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.12.10", + "matchCriteriaId": "9EB46E7E-7E29-4F40-A890-EEC2C36FB50E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:xmlsoft:libxml2:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.13.0", + "versionEndExcluding": "2.13.6", + "matchCriteriaId": "AA27632E-368D-4792-B20A-49B3B168F3CE" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4AFE5CAF-ACA7-4F82-BEC1-69562D75E66E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AD7447BC-F315-4298-A822-549942FC118B" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CDDF61B7-EC5C-467C-B710-B89F502CD04F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6770B6C3-732E-4E22-BF1C-2D2FD610061C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9F9C8C20-42EB-4AB5-BD97-212DEB070C43" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7FFF7106-ED78-49BA-9EC5-B889E3685D53" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "56409CEC-5A1E-4450-AA42-641E459CC2AF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B06F4839-D16A-4A61-9BB5-55B13F41E47F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D0B4AD8A-F172-4558-AEC6-FF424BA2D912" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8497A4C9-8474-4A62-8331-3FE862ED4098" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/847", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://issues.oss-fuzz.com/issues/392687022", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20250321-0006/", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-276xx/CVE-2025-27606.json b/CVE-2025/CVE-2025-276xx/CVE-2025-27606.json index 6352e706a3a..552c0430ffc 100644 --- a/CVE-2025/CVE-2025-276xx/CVE-2025-27606.json +++ b/CVE-2025/CVE-2025-276xx/CVE-2025-27606.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27606", "sourceIdentifier": "security-advisories@github.com", "published": "2025-03-14T17:15:52.017", - "lastModified": "2025-03-14T17:15:52.017", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:23:44.177", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.5, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 } ] }, @@ -51,18 +71,45 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:element:element:*:*:*:*:*:android:*:*", + "versionEndExcluding": "1.6.34", + "matchCriteriaId": "A8B8EB39-452C-4241-B996-9CF8EA0AEC4C" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/element-hq/element-android/commit/53bd78b05de375c6e6b0b5aa794a56b4ba95984c", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/element-hq/element-android/commit/87d7fcdc8036a4db4da8c403f87c73a64a546304", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/element-hq/element-android/security/advisories/GHSA-632v-9pm3-m8ch", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34253.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34253.json new file mode 100644 index 00000000000..69c2a036c47 --- /dev/null +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34253.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34253", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T19:15:32.620", + "lastModified": "2025-10-16T19:15:32.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain a stored cross-site scripting (XSS) vulnerability due to improper sanitization of the 'Network' field when editing the configuration, creating a profile, and adding a network. An authenticated attacker can inject arbitrary JavaScript to be executed in the context of other users viewing the profile entry. NOTE: D-Link states that a fix is under development." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.dlink.com/en/for-business/nuclias/nuclias-connect", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/dlink-nuclias-connect-stored-xss", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34254.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34254.json new file mode 100644 index 00000000000..b976508f4c0 --- /dev/null +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34254.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34254", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T19:15:32.777", + "lastModified": "2025-10-16T19:15:32.777", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability.\u00a0The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the `error.message`string value, an unauthenticated remote attacker can enumerate valid usernames/accounts on the server.\u00a0NOTE: D-Link states that a fix is under development." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-204" + } + ] + } + ], + "references": [ + { + "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.dlink.com/en/for-business/nuclias/nuclias-connect", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/dlink-nuclias-connect-login-account-enumeration", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-342xx/CVE-2025-34255.json b/CVE-2025/CVE-2025-342xx/CVE-2025-34255.json new file mode 100644 index 00000000000..f5da0da5c75 --- /dev/null +++ b/CVE-2025/CVE-2025-342xx/CVE-2025-34255.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34255", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T19:15:32.920", + "lastModified": "2025-10-16T19:15:32.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability.\u00a0The application's 'Forgot Password' endpoint returns distinct JSON responses depending on whether the supplied email address is associated with an existing account. Because the responses differ in the `data.exist` boolean value, an unauthenticated remote attacker can enumerate valid email addresses/accounts on the server.\u00a0NOTE: D-Link states that a fix is under development." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-204" + } + ] + } + ], + "references": [ + { + "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.dlink.com/en/for-business/nuclias/nuclias-connect", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/dlink-nuclias-connect-forgot-password-account-enumeration", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34512.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34512.json new file mode 100644 index 00000000000..dee2be05c85 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34512.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34512", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:35.447", + "lastModified": "2025-10-16T18:15:35.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain a reflected cross-site scripting (XSS) vulnerability in index.php that allows an unauthenticated attacker to execute arbitrary code.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-reflected-xss", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5961.php", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34513.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34513.json new file mode 100644 index 00000000000..a6afb396e7d --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34513.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34513", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:35.617", + "lastModified": "2025-10-16T18:15:35.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php\u00a0that allows an unauthenticated attacker to execute arbitrary code.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-unauth-command-injection", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5962.php", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34514.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34514.json new file mode 100644 index 00000000000..7ba5c331933 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34514.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-34514", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:35.760", + "lastModified": "2025-10-16T18:15:35.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain authenticated OS command injection vulnerabilities in multiple web-accessible PHP scripts that call exec() and allow an authenticated attacker to execute arbitrary commands.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-auth-command-injection", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34515.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34515.json new file mode 100644 index 00000000000..7ede1c08ef7 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34515.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-34515", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:35.920", + "lastModified": "2025-10-16T18:15:35.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh\u00a0that allows an attacker to escalate privileges to root.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-250" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-root-priv-esc", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34516.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34516.json new file mode 100644 index 00000000000..4d79030a542 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34516.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-34516", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:36.067", + "lastModified": "2025-10-16T18:15:36.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain a use of default credentials vulnerability\u00a0that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1392" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-use-of-default-credentials", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34517.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34517.json new file mode 100644 index 00000000000..c44d3e8f8be --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34517.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34517", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:36.213", + "lastModified": "2025-10-16T18:15:36.213", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain an absolute path traversal vulnerability\u00a0in\u00a0get_file_content.php\u00a0that allows an attacker to read arbitrary files.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-absolute-path-traversal", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5960.php", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34518.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34518.json new file mode 100644 index 00000000000..ed5660ef785 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34518.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34518", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:36.357", + "lastModified": "2025-10-16T18:15:36.357", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain a relative path traversal vulnerability\u00a0in\u00a0get_file_content.php\u00a0that allows an attacker to read arbitrary files.\u00a0Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-relative-path-traversal", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5960.php", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-345xx/CVE-2025-34519.json b/CVE-2025/CVE-2025-345xx/CVE-2025-34519.json new file mode 100644 index 00000000000..185106e7143 --- /dev/null +++ b/CVE-2025/CVE-2025-345xx/CVE-2025-34519.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-34519", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-10-16T18:15:36.493", + "lastModified": "2025-10-16T18:15:36.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ilevia\u00a0EVE X1 Server firmware versions \u2264 4.7.18.0.eden contain an insecure hashing algorithm vulnerability.\u00a0The product stores passwords using the MD5 hash function without applying a per\u2011password salt.\u00a0Because MD5 is a fast, unsalted hash, an attacker who obtains the password database can efficiently perform offline dictionary, rainbow\u2011table, or brute\u2011force attacks to recover the original passwords. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-327" + } + ] + } + ], + "references": [ + { + "url": "https://www.ilevia.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-server-insecure-hashing-algorithm", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54086.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54086.json index e759b8bc370..72e7b0d8625 100644 --- a/CVE-2025/CVE-2025-540xx/CVE-2025-54086.json +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54086.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54086", "sourceIdentifier": "SecurityResponse@netmotionsoftware.com", "published": "2025-10-02T20:15:32.680", - "lastModified": "2025-10-06T19:15:35.093", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:23:17.397", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*", + "versionEndExcluding": "14.10", + "matchCriteriaId": "A4C71B0A-C4A4-421F-A1B4-0CCD7FECEBF1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54086", - "source": "SecurityResponse@netmotionsoftware.com" + "source": "SecurityResponse@netmotionsoftware.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54087.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54087.json index 2f564e50113..fa625343aac 100644 --- a/CVE-2025/CVE-2025-540xx/CVE-2025-54087.json +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54087.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54087", "sourceIdentifier": "SecurityResponse@netmotionsoftware.com", "published": "2025-10-02T20:15:32.830", - "lastModified": "2025-10-07T20:15:35.517", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:22:43.163", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:L/A:N", + "baseScore": 2.6, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.0, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*", + "versionEndExcluding": "14.10", + "matchCriteriaId": "A4C71B0A-C4A4-421F-A1B4-0CCD7FECEBF1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54087", - "source": "SecurityResponse@netmotionsoftware.com" + "source": "SecurityResponse@netmotionsoftware.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54088.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54088.json index 1d65b868306..a00b09c460d 100644 --- a/CVE-2025/CVE-2025-540xx/CVE-2025-54088.json +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54088.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54088", "sourceIdentifier": "SecurityResponse@netmotionsoftware.com", "published": "2025-10-02T21:16:00.740", - "lastModified": "2025-10-07T20:15:35.640", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:22:01.223", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*", + "versionEndExcluding": "14.10", + "matchCriteriaId": "A4C71B0A-C4A4-421F-A1B4-0CCD7FECEBF1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54088", - "source": "SecurityResponse@netmotionsoftware.com" + "source": "SecurityResponse@netmotionsoftware.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54089.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54089.json index 89fc70a4932..62b0dfebdbf 100644 --- a/CVE-2025/CVE-2025-540xx/CVE-2025-54089.json +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54089.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54089", "sourceIdentifier": "SecurityResponse@netmotionsoftware.com", "published": "2025-10-02T21:16:00.860", - "lastModified": "2025-10-06T14:57:05.000", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:21:03.213", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N", + "baseScore": 3.4, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*", + "versionEndExcluding": "14.10", + "matchCriteriaId": "A4C71B0A-C4A4-421F-A1B4-0CCD7FECEBF1" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54089", - "source": "SecurityResponse@netmotionsoftware.com" + "source": "SecurityResponse@netmotionsoftware.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-542xx/CVE-2025-54253.json b/CVE-2025/CVE-2025-542xx/CVE-2025-54253.json index 67ac1973c8a..e1c26d7b9d1 100644 --- a/CVE-2025/CVE-2025-542xx/CVE-2025-54253.json +++ b/CVE-2025/CVE-2025-542xx/CVE-2025-54253.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54253", "sourceIdentifier": "psirt@adobe.com", "published": "2025-08-05T17:15:29.283", - "lastModified": "2025-10-16T01:00:02.173", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-16T19:15:33.173", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -46,17 +46,17 @@ "weaknesses": [ { "source": "psirt@adobe.com", - "type": "Secondary", + "type": "Primary", "description": [ { "lang": "en", - "value": "CWE-16" + "value": "CWE-863" } ] }, { "source": "nvd@nist.gov", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json b/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json index f8ceef1e87d..8714abb6b17 100644 --- a/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json +++ b/CVE-2025/CVE-2025-583xx/CVE-2025-58322.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58322", "sourceIdentifier": "cve@navercorp.com", "published": "2025-08-28T08:15:30.720", - "lastModified": "2025-09-12T16:18:51.570", + "lastModified": "2025-10-16T19:14:18.680", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -49,7 +49,6 @@ ], "configurations": [ { - "operator": "AND", "nodes": [ { "operator": "OR", @@ -57,20 +56,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:navercorp:mybox:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:navercorp:mybox:*:*:*:*:*:windows:*:*", "versionEndExcluding": "3.0.8.133", - "matchCriteriaId": "5FA4CFF1-00D0-43E0-AE6A-784638D2D6B1" - } - ] - }, - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": false, - "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", - "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + "matchCriteriaId": "CB6C7BCA-DE6D-408B-ACCB-B5AF21F2DD22" } ] } diff --git a/CVE-2025/CVE-2025-583xx/CVE-2025-58323.json b/CVE-2025/CVE-2025-583xx/CVE-2025-58323.json index f20f4be0fa5..9e7a54852bf 100644 --- a/CVE-2025/CVE-2025-583xx/CVE-2025-58323.json +++ b/CVE-2025/CVE-2025-583xx/CVE-2025-58323.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58323", "sourceIdentifier": "cve@navercorp.com", "published": "2025-08-29T03:15:39.357", - "lastModified": "2025-08-29T17:15:36.027", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T19:09:30.000", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:navercorp:mybox:*:*:*:*:*:windows:*:*", + "versionEndExcluding": "3.0.8.133", + "matchCriteriaId": "CB6C7BCA-DE6D-408B-ACCB-B5AF21F2DD22" + } + ] + } + ] + } + ], "references": [ { "url": "https://cve.naver.com/detail/cve-2025-58323.html", - "source": "cve@navercorp.com" + "source": "cve@navercorp.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58730.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58730.json index 94a9e8e5fda..5630b5531e1 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58730.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58730.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58730", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:54.860", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:56:24.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,142 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58730", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58731.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58731.json index 1a5f3db9352..63ac9d4e5c8 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58731.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58731.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58731", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.040", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:58:17.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58731", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58732.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58732.json index b2e718a1664..15d8aab16e5 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58732.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58732.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58732", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.203", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:58:32.653", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,142 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58732", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58733.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58733.json index 6a5dbbb8ea4..5b66a55cb39 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58733.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58733.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58733", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.373", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:58:43.147", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,152 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58733", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58734.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58734.json index 74b003b0710..30643a49498 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58734.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58734.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58734", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.563", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:58:53.950", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,127 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58734", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58735.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58735.json index a3ecfd527ba..3c7921e28ce 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58735.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58735.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58735", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.753", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:59:07.647", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,152 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58735", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58736.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58736.json index c9df1e0a146..860a91561ca 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58736.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58736.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58736", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:55.940", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:59:18.437", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,152 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58736", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58737.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58737.json index 6128934c368..53ee54ef3cf 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58737.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58737.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58737", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:56.143", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:55:18.817", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,60 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.14393.8519", + "matchCriteriaId": "860ADFF9-62D0-425B-9310-99ACFC92EB12" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58737", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-587xx/CVE-2025-58738.json b/CVE-2025/CVE-2025-587xx/CVE-2025-58738.json index 94c59c703d2..9d9813b79ae 100644 --- a/CVE-2025/CVE-2025-587xx/CVE-2025-58738.json +++ b/CVE-2025/CVE-2025-587xx/CVE-2025-58738.json @@ -2,8 +2,8 @@ "id": "CVE-2025-58738", "sourceIdentifier": "secure@microsoft.com", "published": "2025-10-14T17:15:56.310", - "lastModified": "2025-10-14T19:35:56.913", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T19:55:39.060", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,109 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.22631.6060", + "matchCriteriaId": "4AF873E4-B2FE-4504-BFF0-FC71121FC9A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndIncluding": "10.0.26100.6899", + "matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58738", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59425.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59425.json index d16761bb097..10749680c37 100644 --- a/CVE-2025/CVE-2025-594xx/CVE-2025-59425.json +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59425.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59425", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-07T14:15:38.950", - "lastModified": "2025-10-08T19:38:32.610", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:02:09.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,58 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:*", + "versionEndExcluding": "0.11.0", + "matchCriteriaId": "99A24E23-769D-4DB8-BF37-EEC71EE83630" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vllm:vllm:0.11.0:rc1:*:*:*:*:*:*", + "matchCriteriaId": "46639D64-5C28-44F3-AE25-9212114AFC8E" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/vllm-project/vllm/blob/4b946d693e0af15740e9ca9c0e059d5f333b1083/vllm/entrypoints/openai/api_server.py#L1270-L1274", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/vllm-project/vllm/commit/ee10d7e6ff5875386c7f136ce8b5f525c8fcef48", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/vllm-project/vllm/releases/tag/v0.11.0", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-wr9h-g72x-mwhm", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-599xx/CVE-2025-59944.json b/CVE-2025/CVE-2025-599xx/CVE-2025-59944.json index 12bfd3ac3fd..ae52ca14783 100644 --- a/CVE-2025/CVE-2025-599xx/CVE-2025-59944.json +++ b/CVE-2025/CVE-2025-599xx/CVE-2025-59944.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59944", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-03T21:15:34.913", - "lastModified": "2025-10-06T14:56:47.823", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-10-16T18:16:19.257", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.3, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:anysphere:cursor:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.6.23", + "matchCriteriaId": "4DB397FC-8FF2-4852-B5F0-E913422C7582" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/cursor/cursor/security/advisories/GHSA-xcwh-rrwj-gxc7", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60639.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60639.json new file mode 100644 index 00000000000..1ea2bf3f84a --- /dev/null +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60639.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-60639", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T18:15:37.053", + "lastModified": "2025-10-16T18:15:37.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26)." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://atlas-epic.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/gsiegel14/ATLAS-EPIC", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/gsiegel14/ATLAS-EPIC/commit/f29312cf782ec5a6537fceaeb6a9ced7d7d04e1f", + "source": "cve@mitre.org" + }, + { + "url": "https://xancatos.org/cve202560639", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60641.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60641.json new file mode 100644 index 00000000000..eb447ae70cb --- /dev/null +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60641.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-60641", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T18:15:37.183", + "lastModified": "2025-10-16T18:15:37.183", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64_decode($_POST['mexcel'])), where $_POST['mexcel'] is user-controlled input. This input is decoded from base64 and deserialized without validation or use of the allowed_classes option, allowing an attacker to inject arbitrary PHP objects. This can lead to malicious behavior, such as Remote Code Execution (RCE), SQL Injection, Path Traversal, or Denial of Service, depending on the availability of exploitable classes in the Vfront codebase or its dependencies." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://vfront.com", + "source": "cve@mitre.org" + }, + { + "url": "https://xancatos.org/cve202560641", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-608xx/CVE-2025-60855.json b/CVE-2025/CVE-2025-608xx/CVE-2025-60855.json new file mode 100644 index 00000000000..899699e2cde --- /dev/null +++ b/CVE-2025/CVE-2025-608xx/CVE-2025-60855.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-60855", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T19:15:33.367", + "lastModified": "2025-10-16T19:15:33.367", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Reolink Video Doorbell WiFi DB_566128M5MP_W performs insufficient validation of firmware update signatures. This allows attackers to load malicious firmware images, resulting in arbitrary code execution with root privileges." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://cybermaya.in/posts/Post-45/", + "source": "cve@mitre.org" + }, + { + "url": "https://reolink.com/download-center/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-613xx/CVE-2025-61330.json b/CVE-2025/CVE-2025-613xx/CVE-2025-61330.json new file mode 100644 index 00000000000..65a5484371b --- /dev/null +++ b/CVE-2025/CVE-2025-613xx/CVE-2025-61330.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-61330", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T18:15:37.313", + "lastModified": "2025-10-16T18:15:37.313", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password at all. Some of these devices have the Telnet service enabled by default, or users can choose to enable the Telnet service in other device management interfaces (e.g. /debug.asp or /debug_telnet.asp). In addition, these devices have related interfaces called Virtual Servers, which can map the devices to the public network, posing the risk of remote attacks. Therefore, attackers can obtain the highest root privileges of the devices through the Telnet service using the weak password hardcoded in the firmware (or without a password), and remote attacks are possible." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://www.notion.so/25e8cd7f7805800a9a71c1193fb3cb43", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-615xx/CVE-2025-61514.json b/CVE-2025/CVE-2025-615xx/CVE-2025-61514.json new file mode 100644 index 00000000000..1ee901a9d62 --- /dev/null +++ b/CVE-2025/CVE-2025-615xx/CVE-2025-61514.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-61514", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T19:15:33.500", + "lastModified": "2025-10-16T19:15:33.500", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-61514", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/sagemathinc/cocalc", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/sagemathinc/cocalc/commit/0d2ff5890a3ae62e941aad8a5884dd765b7e98fc", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-615xx/CVE-2025-61541.json b/CVE-2025/CVE-2025-615xx/CVE-2025-61541.json index 80a49956f99..44e53b14e76 100644 --- a/CVE-2025/CVE-2025-615xx/CVE-2025-61541.json +++ b/CVE-2025/CVE-2025-615xx/CVE-2025-61541.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61541", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-16T15:15:34.713", - "lastModified": "2025-10-16T15:28:59.610", + "lastModified": "2025-10-16T19:15:33.633", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Webmin 2.510 is vulnerable to a Host Header Injection in the password reset functionality (forgot_send.cgi). The reset link sent to users is constructed using the HTTP Host header via get_webmin_email_url(). An attacker can manipulate the Host header to inject a malicious domain into the reset email. If a victim follows the poisoned link, the attacker can intercept the reset token and gain full control of the target account." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "http://www.webmin.com/", diff --git a/CVE-2025/CVE-2025-615xx/CVE-2025-61543.json b/CVE-2025/CVE-2025-615xx/CVE-2025-61543.json index f2ea08890e5..445827a4df5 100644 --- a/CVE-2025/CVE-2025-615xx/CVE-2025-61543.json +++ b/CVE-2025/CVE-2025-615xx/CVE-2025-61543.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61543", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-16T15:15:34.847", - "lastModified": "2025-10-16T15:28:59.610", + "lastModified": "2025-10-16T19:15:33.817", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A Host Header Injection vulnerability exists in the password reset functionality of CraftMyCMS 4.0.2.2. The system uses `$_SERVER['HTTP_HOST']` directly to construct password reset links sent via email. An attacker can manipulate the Host header to send malicious reset links, enabling phishing attacks or account takeover." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://github.com/bugdotexe/Vulnerability-Research/tree/main/CVE-2025-61543", diff --git a/CVE-2025/CVE-2025-615xx/CVE-2025-61553.json b/CVE-2025/CVE-2025-615xx/CVE-2025-61553.json new file mode 100644 index 00000000000..79d5ec23397 --- /dev/null +++ b/CVE-2025/CVE-2025-615xx/CVE-2025-61553.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-61553", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-10-16T19:15:33.983", + "lastModified": "2025-10-16T19:15:33.983", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An out-of-bounds write in VirtIO network device emulation in BitVisor from commit 108df6 (2020-05-20) to commit 480907 (2025-07-06) allows local attackers to cause a denial of service (host hypervisor crash) via a crafted PCI configuration space access. Given it's a heap overflow in a privileged hypervisor context, exploitation may enable arbitrary code execution or guest-to-host privilege escalation." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/retrage/advisories/blob/main/CVE-2025-61553/README.md", + "source": "cve@mitre.org" + }, + { + "url": "https://sourceforge.net/p/bitvisor/code/ci/48090711ade5910b601d2b0034859a6a890cc82d/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-616xx/CVE-2025-61687.json b/CVE-2025/CVE-2025-616xx/CVE-2025-61687.json index 53283e8f375..88b5afe6543 100644 --- a/CVE-2025/CVE-2025-616xx/CVE-2025-61687.json +++ b/CVE-2025/CVE-2025-616xx/CVE-2025-61687.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61687", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-06T16:15:35.223", - "lastModified": "2025-10-08T19:38:32.610", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:12:37.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -47,42 +67,87 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:flowiseai:flowise:3.0.7:*:*:*:*:*:*:*", + "matchCriteriaId": "E101AC09-6DF5-4FA1-853F-6CD805A8122F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L1104-L1111", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L170-L175", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L533-L541", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/server/src/controllers/attachments/index.ts#L4-L11", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/server/src/routes/attachments/index.ts#L8", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/server/src/services/attachments/index.ts#L7-L16", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/server/src/utils/createAttachment.ts#L118-L126", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/server/src/utils/index.ts#L1950-L1954", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-35g6-rrw3-v6xc", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61785.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61785.json index 4c80c56a8fa..c3d7067c8dd 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61785.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61785.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61785", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-08T01:15:32.847", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:12:40.397", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -12,6 +12,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ], "cvssMetricV30": [ { "source": "security-advisories@github.com", @@ -47,26 +69,68 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2.2.15", + "matchCriteriaId": "E75979F4-50DD-41E8-932A-C576F86DBFCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.3.0", + "versionEndExcluding": "2.5.3", + "matchCriteriaId": "7DD66938-204A-4542-BA86-274BB232C8C9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/denoland/deno/commit/992e998dfe436cdc9325232759af8be92f11739b", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/denoland/deno/pull/30872", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Issue Tracking", + "Patch" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.2.15", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.5.3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/security/advisories/GHSA-vg2r-rmgp-cgqj", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61786.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61786.json index 57d23afbcb3..d50db696ca5 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61786.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61786.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61786", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-08T01:15:33.010", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:13:38.117", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,26 +47,68 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2.2.15", + "matchCriteriaId": "E75979F4-50DD-41E8-932A-C576F86DBFCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.3.0", + "versionEndExcluding": "2.5.3", + "matchCriteriaId": "7DD66938-204A-4542-BA86-274BB232C8C9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/denoland/deno/commit/1ab2268c0bcbf9b0468e0e36963f77f8c31c73ec", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/denoland/deno/pull/30876", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Issue Tracking", + "Patch" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.2.15", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.5.3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/security/advisories/GHSA-qq26-84mh-26j9", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-617xx/CVE-2025-61787.json b/CVE-2025/CVE-2025-617xx/CVE-2025-61787.json index 75c9c9c736c..0f855b70c82 100644 --- a/CVE-2025/CVE-2025-617xx/CVE-2025-61787.json +++ b/CVE-2025/CVE-2025-617xx/CVE-2025-61787.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61787", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-08T02:15:41.897", - "lastModified": "2025-10-08T19:38:09.863", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-10-16T18:14:53.107", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,26 +47,80 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2.2.15", + "matchCriteriaId": "E75979F4-50DD-41E8-932A-C576F86DBFCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:deno:deno:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.3.0", + "versionEndExcluding": "2.5.3", + "matchCriteriaId": "7DD66938-204A-4542-BA86-274BB232C8C9" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/denoland/deno/commit/8a0990ccd37bafd8768176ca64b906ba2da2d822", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/denoland/deno/pull/30818", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Issue Tracking", + "Patch" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.2.15", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/releases/tag/v2.5.3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/denoland/deno/security/advisories/GHSA-m2gf-x3f6-8hq3", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61882.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61882.json index d4f22d886ff..8d04c119d9b 100644 --- a/CVE-2025/CVE-2025-618xx/CVE-2025-61882.json +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61882.json @@ -2,8 +2,8 @@ "id": "CVE-2025-61882", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-05T04:15:40.340", - "lastModified": "2025-10-07T21:00:13.017", - "vulnStatus": "Analyzed", + "lastModified": "2025-10-16T18:15:37.493", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -46,27 +46,7 @@ "description": [ { "lang": "en", - "value": "CWE-22" - }, - { - "lang": "en", - "value": "CWE-91" - }, - { - "lang": "en", - "value": "CWE-93" - }, - { - "lang": "en", - "value": "CWE-444" - }, - { - "lang": "en", - "value": "CWE-611" - }, - { - "lang": "en", - "value": "CWE-918" + "value": "CWE-287" } ] } @@ -106,12 +86,8 @@ ] }, { - "url": "https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", - "tags": [ - "Exploit", - "Third Party Advisory" - ] + "url": "https://www.crowdstrike.com/en-us/blog/crowdstrike-identifies-campaign-targeting-oracle-e-business-suite-zero-day-CVE-2025-61882/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-618xx/CVE-2025-61884.json b/CVE-2025/CVE-2025-618xx/CVE-2025-61884.json index 64b807c2bdd..e851a4efbe6 100644 --- a/CVE-2025/CVE-2025-618xx/CVE-2025-61884.json +++ b/CVE-2025/CVE-2025-618xx/CVE-2025-61884.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61884", "sourceIdentifier": "secalert_us@oracle.com", "published": "2025-10-12T03:15:34.720", - "lastModified": "2025-10-14T19:36:59.730", + "lastModified": "2025-10-16T18:15:37.670", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert_us@oracle.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", @@ -35,10 +35,50 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + }, + { + "lang": "en", + "value": "CWE-93" + }, + { + "lang": "en", + "value": "CWE-287" + }, + { + "lang": "en", + "value": "CWE-444" + }, + { + "lang": "en", + "value": "CWE-501" + }, + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], "references": [ { "url": "https://www.oracle.com/security-alerts/alert-cve-2025-61884.html", "source": "secalert_us@oracle.com" + }, + { + "url": "https://blogs.oracle.com/security/post/apply-july-2025-cpu", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61907.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61907.json new file mode 100644 index 00000000000..33b31844e27 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61907.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-61907", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:37.820", + "lastModified": "2025-10-16T18:15:37.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Icinga 2 is an open source monitoring system. In Icinga 2 versions 2.4 through 2.15.0, filter expressions provided to the various /v1/objects endpoints could access variables or objects that would otherwise be inaccessible for the user. This allows authenticated API users to learn information that should be hidden from them, including global variables not permitted by the variables permission and objects not permitted by the corresponding objects/query permissions. The vulnerability is fixed in versions 2.15.1, 2.14.7, and 2.13.13." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + }, + { + "lang": "en", + "value": "CWE-204" + }, + { + "lang": "en", + "value": "CWE-749" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Icinga/icinga2/commit/56255ac7a689b9e198742d2fca6f7459a54c85a3", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Icinga/icinga2/security/advisories/GHSA-gg32-w9rm-vp2v", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61908.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61908.json new file mode 100644 index 00000000000..95aad0e5289 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61908.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-61908", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:37.990", + "lastModified": "2025-10-16T18:15:37.990", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API user with access to an API endpoint that allows specifying a filter expression to crash the Icinga 2 daemon. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Icinga/icinga2/pull/6521", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Icinga/icinga2/security/advisories/GHSA-v9jg-xqhj-f43g", + "source": "security-advisories@github.com" + }, + { + "url": "https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61909.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61909.json new file mode 100644 index 00000000000..2a6fdc6c298 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61909.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-61909", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:38.427", + "lastModified": "2025-10-16T18:15:38.427", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, the safe-reload script (also used during systemctl reload icinga2) and logrotate configuration shipped with Icinga 2 read the PID of the main Icinga 2 process from a PID file writable by the daemon user, but send the signal as the root user. This can allow the Icinga user to send signals to processes it would otherwise not permitted to. A fix is included in the following Icinga 2 versions: 2.15.1, 2.14.7, and 2.13.13." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.0, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-250" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Icinga/icinga2/commit/51ec73cbd922a76fc0f60e1d8d33acd7caa5d587", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Icinga/icinga2/issues/10527", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Icinga/icinga2/security/advisories/GHSA-pg6g-g99v-mw46", + "source": "security-advisories@github.com" + }, + { + "url": "https://icinga.com/blog/releasing-icinga-2-v2-15-1-2-14-7-and-2-13-13-and-icinga-db-web-v1-2-3-and-1-1-4", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61922.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61922.json new file mode 100644 index 00000000000..64be96fca21 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61922.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61922", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:38.597", + "lastModified": "2025-10-16T18:15:38.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via email. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-54hq-mf6h-48xh", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61923.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61923.json new file mode 100644 index 00000000000..6eb7fb91ea1 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61923.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61923", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:38.987", + "lastModified": "2025-10-16T18:15:38.987", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 4.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-fpxp-pfqm-x54w", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61924.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61924.json new file mode 100644 index 00000000000..8410b864853 --- /dev/null +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61924.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-61924", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:39.140", + "lastModified": "2025-10-16T18:15:39.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the Target PayPal merchant account hijacking from backoffice due to wrong usage of the PHP array_search(). The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 3.8, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-184" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/PrestaShopCorp/ps_checkout/security/advisories/GHSA-wvpg-4wrh-5889", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-619xx/CVE-2025-61926.json b/CVE-2025/CVE-2025-619xx/CVE-2025-61926.json index 10580144379..e9dddc07bd9 100644 --- a/CVE-2025/CVE-2025-619xx/CVE-2025-61926.json +++ b/CVE-2025/CVE-2025-619xx/CVE-2025-61926.json @@ -2,7 +2,7 @@ "id": "CVE-2025-61926", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-09T22:15:32.630", - "lastModified": "2025-10-14T19:37:28.107", + "lastModified": "2025-10-16T18:15:39.300", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -60,7 +60,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -89,6 +89,14 @@ { "url": "https://github.com/ossf/allstar/security/advisories/GHSA-33f4-mjch-7fpr", "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/ossf/allstar/blob/294ae985cc2facd0918e8d820e4196021aa0b914/pkg/reviewbot/reviewbot.go#L59", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://github.com/ossf/allstar/security/advisories/GHSA-33f4-mjch-7fpr", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62407.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62407.json new file mode 100644 index 00000000000..81fb16c3f78 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62407.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-62407", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:39.420", + "lastModified": "2025-10-16T18:15:39.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Frappe is a full-stack web application framework. Prior to 14.98.0 and 15.83.0, an open redirect was possible through the redirect argument on the login page, if a specific type of URL was passed in. This vulnerability is fixed in 14.98.0 and 15.83.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/frappe/frappe/security/advisories/GHSA-j9jr-qrpj-g855", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62409.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62409.json new file mode 100644 index 00000000000..299a70e8a30 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62409.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-62409", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:39.583", + "lastModified": "2025-10-16T18:15:39.583", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Envoy is a cloud-native, open source edge and service proxy. Prior to 1.36.1, 1.35.5, 1.34.9, and 1.33.10, large requests and responses can potentially trigger TCP connection pool crashes due to flow control management in Envoy. It will happen when the connection is closing but upstream data is still coming, resulting in a buffer watermark callback nullptr reference. The vulnerability impacts TCP proxy and HTTP 1 & 2 mixed use cases based on ALPN. This vulnerability is fixed in 1.36.1, 1.35.5, 1.34.9, and 1.33.10." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.6, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "UNREPORTED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-pq33-4jxh-hgm3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json new file mode 100644 index 00000000000..7cd7c550dee --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62411.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62411", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:39.747", + "lastModified": "2025-10-16T18:15:39.747", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "LibreNMS is a community-based GPL-licensed network monitoring system. LibreNMS <= 25.8.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the Alert Transports management functionality. When an administrator creates a new Alert Transport, the value of the Transport name field is stored and later rendered in the Transports column of the Alert Rules page without proper input validation or output encoding. This leads to arbitrary JavaScript execution in the admin\u2019s browser. This vulnerability is fixed in 25.10.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/librenms/librenms/commit/706a77085f4d5964f7de9444208ef707e1f79450", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/librenms/librenms/security/advisories/GHSA-frc6-pwgr-c28w", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json new file mode 100644 index 00000000000..e5d75e0c25f --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62412.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62412", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:39.920", + "lastModified": "2025-10-16T18:15:39.920", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 3.8, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/librenms/librenms/commit/dccdf6769976a974d70f06a7ce8d5a846b29db6f", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/librenms/librenms/security/advisories/GHSA-6g2v-66ch-6xmh", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62413.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62413.json new file mode 100644 index 00000000000..b3a01b296e7 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62413.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62413", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T18:15:40.080", + "lastModified": "2025-10-16T18:15:40.080", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "MQTTX is an MQTT 5.0 desktop client and MQTT testing tool. A Cross-Site Scripting (XSS) vulnerability was introduced in MQTTX v1.12.0 due to improper handling of MQTT message payload rendering. Malicious payloads containing HTML or JavaScript could be rendered directly in the MQTTX message viewer. If exploited, this could allow attackers to execute arbitrary scripts in the context of the application UI \u2014 for example, attempting to access MQTT connection credentials or trigger unintended actions through script injection. This vulnerability is especially relevant when MQTTX is used with brokers in untrusted or multi-tenant environments, where message content cannot be fully controlled. This vulnerability is fixed in 1.12.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/emqx/MQTTX/commit/2963f78a4b3227cdb93597f546a75b75dee1059f", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/emqx/MQTTX/security/advisories/GHSA-29gf-9r9v-j4m3", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62414.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62414.json new file mode 100644 index 00000000000..4f454a15c6b --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62414.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62414", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.170", + "lastModified": "2025-10-16T19:15:34.170", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the \u201cCreate New Customer\u201d feature (in the admin panel) is vulnerable to Cross-Site Scripting (XSS). An attacker with access to the admin create-customer form can inject malicious JavaScript payloads into certain input fields. These payloads may later execute in the context of an admin\u2019s browser or another user viewing the customer data, enabling session theft or admin-level actions. This vulnerability is fixed in 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + }, + { + "lang": "en", + "value": "CWE-87" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bagisto/bagisto/security/advisories/GHSA-r9xj-mvqf-jm7w", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62415.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62415.json new file mode 100644 index 00000000000..06d797bf43d --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62415.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62415", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.340", + "lastModified": "2025-10-16T19:15:34.340", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted HTML file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user\u2019s browser. This vulnerability is fixed in 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + }, + { + "lang": "en", + "value": "CWE-87" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bagisto/bagisto/security/advisories/GHSA-67px-r26w-598x", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62416.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62416.json new file mode 100644 index 00000000000..7d18fb25c32 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62416.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62416", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.493", + "lastModified": "2025-10-16T19:15:34.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection (SSTI) due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privileges to inject arbitrary template expressions that are evaluated by the backend \u2014 potentially leading to Remote Code Execution (RCE) on the server. This vulnerability is fixed in 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + }, + { + "lang": "en", + "value": "CWE-1336" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bagisto/bagisto/security/advisories/GHSA-527q-4wqv-g9wj", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62417.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62417.json new file mode 100644 index 00000000000..42abd45c119 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62417.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-62417", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.650", + "lastModified": "2025-10-16T19:15:34.650", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bagisto is an open source laravel eCommerce platform. When product data that begins with a spreadsheet formula character (for example =, +, -, or @) is accepted and later exported or saved into a CSV and opened in spreadsheet software, the spreadsheet will interpret that cell as a formula. This allows an attacker to supply a CSV field (e.g., product name) that contains a formula which may be evaluated by a victim\u2019s spreadsheet application \u2014 potentially leading to data exfiltration and remote command execution (via older Excel exploits / OLE/cmd constructs or Excel macros). This vulnerability is fixed in 2.3.8." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1236" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bagisto/bagisto/security/advisories/GHSA-jqrp-58fv-w8cq", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62418.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62418.json new file mode 100644 index 00000000000..46097cd0709 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62418.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62418", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.803", + "lastModified": "2025-10-16T19:15:34.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bagisto is an open source laravel eCommerce platform. In Bagisto v2.3.7, the TinyMCE image upload functionality allows an attacker with sufficient privileges (e.g. admin) to upload a crafted SVG file containing embedded JavaScript. When viewed, the malicious code executes in the context of the admin/user\u2019s browser. This vulnerability is fixed in 2.3.8." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + }, + { + "lang": "en", + "value": "CWE-87" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bagisto/bagisto/security/advisories/GHSA-fg89-g389-p346", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json new file mode 100644 index 00000000000..e48a6523595 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62423.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62423", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:34.960", + "lastModified": "2025-10-16T19:15:34.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area\u2019s \u201c/admin_area/login_as_user.php\u201d file. Exploiting this vulnerability requires access privileges to the Admin Area." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/MacWarrior/clipbucket-v5/commit/b3bf27e367f318c2afe9bd11368be9d00e272148", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-3wpr-jprj-52fc", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62425.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62425.json new file mode 100644 index 00000000000..bfaca8c7d65 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62425.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62425", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:35.120", + "lastModified": "2025-10-16T19:15:35.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "MAS (Matrix Authentication Service) is a user management and authentication service for Matrix homeservers, written and maintained by Element. A logic flaw in matrix-authentication-service 0.20.0 through 1.4.0 allows an attacker with access to an authenticated MAS session to perform sensitive operations without entering the current password. These include changing the current password, adding or removing an e-mail address and deactivating the account. The vulnerability only affects instances which have the local password database feature enabled (passwords section in the config). Patched in matrix-authentication-service 1.4.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", + "baseScore": 8.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-620" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/element-hq/matrix-authentication-service/commit/bce99edb6177be11f8f38c1d01f5606ce7b4b2e5", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/element-hq/matrix-authentication-service/security/advisories/GHSA-6wfp-jq3r-j9xh", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62427.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62427.json new file mode 100644 index 00000000000..7c0f569f318 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62427.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-62427", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:35.293", + "lastModified": "2025-10-16T19:15:35.293", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Angular CLI is a command-line interface tool for Angular applications. The vulnerability is a Server-Side Request Forgery (SSRF) flaw within the URL resolution mechanism of Angular's Server-Side Rendering package (@angular/ssr) before 19.2.18, 20.3.6, and 21.0.0-next.8. The function createRequestUrl uses the native URL constructor. When an incoming request path (e.g., originalUrl or url) begins with a double forward slash (//) or backslash (\\\\), the URL constructor treats it as a schema-relative URL. This behavior overrides the security-intended base URL (protocol, host, and port) supplied as the second argument, instead resolving the URL against the scheme of the base URL but adopting the attacker-controlled hostname. This allows an attacker to specify an external domain in the URL path, tricking the Angular SSR environment into setting the page's virtual location (accessible via DOCUMENT or PlatformLocation tokens) to this attacker-controlled domain. Any subsequent relative HTTP requests made during the SSR process (e.g., using HttpClient.get('assets/data.json')) will be incorrectly resolved against the attacker's domain, forcing the server to communicate with an arbitrary external endpoint. This vulnerability is fixed in 19.2.18, 20.3.6, and 21.0.0-next.8." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/angular/angular-cli/commit/5271547c80662de10cb3bcb648779a83f6efedfb", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/angular/angular-cli/security/advisories/GHSA-q63q-pgmf-mxhr", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-624xx/CVE-2025-62428.json b/CVE-2025/CVE-2025-624xx/CVE-2025-62428.json new file mode 100644 index 00000000000..8a6e9b779b2 --- /dev/null +++ b/CVE-2025/CVE-2025-624xx/CVE-2025-62428.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-62428", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-10-16T19:15:35.450", + "lastModified": "2025-10-16T19:15:35.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to generate malicious email confirmation links. These links can redirect users to attacker-controlled domains. This vulnerability affects all users relying on email confirmation for account registration or verification. This vulnerability is fixed in 1.2.5-alpha-patch." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Drawing-Captcha/Drawing-Captcha-APP/issues/30", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/Drawing-Captcha/Drawing-Captcha-APP/security/advisories/GHSA-5pj8-fc6g-vv7m", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62586.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62586.json new file mode 100644 index 00000000000..be09d287c0a --- /dev/null +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62586.json @@ -0,0 +1,108 @@ +{ + "id": "CVE-2025-62586", + "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725", + "published": "2025-10-16T18:15:40.637", + "lastModified": "2025-10-16T18:15:40.637", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OPEXUS FOIAXpress allows a remote, unauthenticated attacker to reset the administrator password. Fixed in FOIAXpress version 11.13.2.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:D/RE:M/U:Red", + "baseScore": 8.9, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NEGLIGIBLE", + "Automatable": "YES", + "Recovery": "USER", + "valueDensity": "DIFFUSE", + "vulnerabilityResponseEffort": "MODERATE", + "providerUrgency": "RED" + } + } + ], + "cvssMetricV31": [ + { + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "9119a7d8-5eab-497f-8521-727c672e3725", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://docs.opexustech.com/docs/foiaxpress/11.13.0/FOIAXpress_Release_Notes_11.13.2.0.pdf", + "source": "9119a7d8-5eab-497f-8521-727c672e3725" + }, + { + "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-289-01.json", + "source": "9119a7d8-5eab-497f-8521-727c672e3725" + }, + { + "url": "https://www.cve.org/CVERecord?id=CVE-2025-62586", + "source": "9119a7d8-5eab-497f-8521-727c672e3725" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 55c71c15e6e..2a4b785ab80 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-10-16T18:00:12.789203+00:00 +2025-10-16T20:00:12.397694+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-10-16T17:54:44.177000+00:00 +2025-10-16T19:59:18.437000+00:00 ``` ### Last Data Feed Release @@ -33,65 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -314491 +314533 ``` ### CVEs added in the last Commit -Recently added CVEs: `21` +Recently added CVEs: `42` -- [CVE-2024-56143](CVE-2024/CVE-2024-561xx/CVE-2024-56143.json) (`2025-10-16T16:15:36.183`) -- [CVE-2025-11840](CVE-2025/CVE-2025-118xx/CVE-2025-11840.json) (`2025-10-16T16:15:37.003`) -- [CVE-2025-11842](CVE-2025/CVE-2025-118xx/CVE-2025-11842.json) (`2025-10-16T16:15:37.230`) -- [CVE-2025-11851](CVE-2025/CVE-2025-118xx/CVE-2025-11851.json) (`2025-10-16T16:15:37.453`) -- [CVE-2025-11854](CVE-2025/CVE-2025-118xx/CVE-2025-11854.json) (`2025-10-16T17:15:32.853`) -- [CVE-2025-25298](CVE-2025/CVE-2025-252xx/CVE-2025-25298.json) (`2025-10-16T17:15:33.353`) -- [CVE-2025-36128](CVE-2025/CVE-2025-361xx/CVE-2025-36128.json) (`2025-10-16T17:15:33.547`) -- [CVE-2025-53092](CVE-2025/CVE-2025-530xx/CVE-2025-53092.json) (`2025-10-16T17:15:33.727`) -- [CVE-2025-55035](CVE-2025/CVE-2025-550xx/CVE-2025-55035.json) (`2025-10-16T16:15:38.403`) -- [CVE-2025-56699](CVE-2025/CVE-2025-566xx/CVE-2025-56699.json) (`2025-10-16T17:15:34.157`) -- [CVE-2025-56700](CVE-2025/CVE-2025-567xx/CVE-2025-56700.json) (`2025-10-16T17:15:34.290`) -- [CVE-2025-58051](CVE-2025/CVE-2025-580xx/CVE-2025-58051.json) (`2025-10-16T17:15:34.417`) -- [CVE-2025-61789](CVE-2025/CVE-2025-617xx/CVE-2025-61789.json) (`2025-10-16T17:15:34.590`) -- [CVE-2025-62490](CVE-2025/CVE-2025-624xx/CVE-2025-62490.json) (`2025-10-16T16:15:39.270`) -- [CVE-2025-62491](CVE-2025/CVE-2025-624xx/CVE-2025-62491.json) (`2025-10-16T16:15:39.470`) -- [CVE-2025-62492](CVE-2025/CVE-2025-624xx/CVE-2025-62492.json) (`2025-10-16T16:15:39.620`) -- [CVE-2025-62493](CVE-2025/CVE-2025-624xx/CVE-2025-62493.json) (`2025-10-16T16:15:39.797`) -- [CVE-2025-62494](CVE-2025/CVE-2025-624xx/CVE-2025-62494.json) (`2025-10-16T16:15:39.943`) -- [CVE-2025-62495](CVE-2025/CVE-2025-624xx/CVE-2025-62495.json) (`2025-10-16T16:15:40.110`) -- [CVE-2025-62496](CVE-2025/CVE-2025-624xx/CVE-2025-62496.json) (`2025-10-16T16:15:40.260`) -- [CVE-2025-9559](CVE-2025/CVE-2025-95xx/CVE-2025-9559.json) (`2025-10-16T16:15:40.410`) +- [CVE-2025-60855](CVE-2025/CVE-2025-608xx/CVE-2025-60855.json) (`2025-10-16T19:15:33.367`) +- [CVE-2025-61330](CVE-2025/CVE-2025-613xx/CVE-2025-61330.json) (`2025-10-16T18:15:37.313`) +- [CVE-2025-61514](CVE-2025/CVE-2025-615xx/CVE-2025-61514.json) (`2025-10-16T19:15:33.500`) +- [CVE-2025-61553](CVE-2025/CVE-2025-615xx/CVE-2025-61553.json) (`2025-10-16T19:15:33.983`) +- [CVE-2025-61907](CVE-2025/CVE-2025-619xx/CVE-2025-61907.json) (`2025-10-16T18:15:37.820`) +- [CVE-2025-61908](CVE-2025/CVE-2025-619xx/CVE-2025-61908.json) (`2025-10-16T18:15:37.990`) +- [CVE-2025-61909](CVE-2025/CVE-2025-619xx/CVE-2025-61909.json) (`2025-10-16T18:15:38.427`) +- [CVE-2025-61922](CVE-2025/CVE-2025-619xx/CVE-2025-61922.json) (`2025-10-16T18:15:38.597`) +- [CVE-2025-61923](CVE-2025/CVE-2025-619xx/CVE-2025-61923.json) (`2025-10-16T18:15:38.987`) +- [CVE-2025-61924](CVE-2025/CVE-2025-619xx/CVE-2025-61924.json) (`2025-10-16T18:15:39.140`) +- [CVE-2025-62407](CVE-2025/CVE-2025-624xx/CVE-2025-62407.json) (`2025-10-16T18:15:39.420`) +- [CVE-2025-62409](CVE-2025/CVE-2025-624xx/CVE-2025-62409.json) (`2025-10-16T18:15:39.583`) +- [CVE-2025-62411](CVE-2025/CVE-2025-624xx/CVE-2025-62411.json) (`2025-10-16T18:15:39.747`) +- [CVE-2025-62412](CVE-2025/CVE-2025-624xx/CVE-2025-62412.json) (`2025-10-16T18:15:39.920`) +- [CVE-2025-62413](CVE-2025/CVE-2025-624xx/CVE-2025-62413.json) (`2025-10-16T18:15:40.080`) +- [CVE-2025-62414](CVE-2025/CVE-2025-624xx/CVE-2025-62414.json) (`2025-10-16T19:15:34.170`) +- [CVE-2025-62415](CVE-2025/CVE-2025-624xx/CVE-2025-62415.json) (`2025-10-16T19:15:34.340`) +- [CVE-2025-62416](CVE-2025/CVE-2025-624xx/CVE-2025-62416.json) (`2025-10-16T19:15:34.493`) +- [CVE-2025-62417](CVE-2025/CVE-2025-624xx/CVE-2025-62417.json) (`2025-10-16T19:15:34.650`) +- [CVE-2025-62418](CVE-2025/CVE-2025-624xx/CVE-2025-62418.json) (`2025-10-16T19:15:34.803`) +- [CVE-2025-62423](CVE-2025/CVE-2025-624xx/CVE-2025-62423.json) (`2025-10-16T19:15:34.960`) +- [CVE-2025-62425](CVE-2025/CVE-2025-624xx/CVE-2025-62425.json) (`2025-10-16T19:15:35.120`) +- [CVE-2025-62427](CVE-2025/CVE-2025-624xx/CVE-2025-62427.json) (`2025-10-16T19:15:35.293`) +- [CVE-2025-62428](CVE-2025/CVE-2025-624xx/CVE-2025-62428.json) (`2025-10-16T19:15:35.450`) +- [CVE-2025-62586](CVE-2025/CVE-2025-625xx/CVE-2025-62586.json) (`2025-10-16T18:15:40.637`) ### CVEs modified in the last Commit -Recently modified CVEs: `50` +Recently modified CVEs: `54` -- [CVE-2025-53951](CVE-2025/CVE-2025-539xx/CVE-2025-53951.json) (`2025-10-16T17:54:44.177`) -- [CVE-2025-54283](CVE-2025/CVE-2025-542xx/CVE-2025-54283.json) (`2025-10-16T17:40:03.267`) -- [CVE-2025-54284](CVE-2025/CVE-2025-542xx/CVE-2025-54284.json) (`2025-10-16T17:40:05.930`) -- [CVE-2025-54658](CVE-2025/CVE-2025-546xx/CVE-2025-54658.json) (`2025-10-16T17:54:26.570`) -- [CVE-2025-55795](CVE-2025/CVE-2025-557xx/CVE-2025-55795.json) (`2025-10-16T17:09:46.393`) -- [CVE-2025-56807](CVE-2025/CVE-2025-568xx/CVE-2025-56807.json) (`2025-10-16T16:32:12.737`) -- [CVE-2025-57326](CVE-2025/CVE-2025-573xx/CVE-2025-57326.json) (`2025-10-16T16:23:24.223`) -- [CVE-2025-58055](CVE-2025/CVE-2025-580xx/CVE-2025-58055.json) (`2025-10-16T17:31:09.430`) -- [CVE-2025-59337](CVE-2025/CVE-2025-593xx/CVE-2025-59337.json) (`2025-10-16T17:33:47.987`) -- [CVE-2025-59938](CVE-2025/CVE-2025-599xx/CVE-2025-59938.json) (`2025-10-16T17:33:38.680`) -- [CVE-2025-6088](CVE-2025/CVE-2025-60xx/CVE-2025-6088.json) (`2025-10-16T16:00:19.400`) -- [CVE-2025-61536](CVE-2025/CVE-2025-615xx/CVE-2025-61536.json) (`2025-10-16T16:15:38.920`) -- [CVE-2025-61540](CVE-2025/CVE-2025-615xx/CVE-2025-61540.json) (`2025-10-16T16:15:39.103`) -- [CVE-2025-61798](CVE-2025/CVE-2025-617xx/CVE-2025-61798.json) (`2025-10-16T17:38:44.400`) -- [CVE-2025-61799](CVE-2025/CVE-2025-617xx/CVE-2025-61799.json) (`2025-10-16T17:38:35.947`) -- [CVE-2025-61800](CVE-2025/CVE-2025-618xx/CVE-2025-61800.json) (`2025-10-16T17:38:48.240`) -- [CVE-2025-61801](CVE-2025/CVE-2025-618xx/CVE-2025-61801.json) (`2025-10-16T17:38:54.377`) -- [CVE-2025-61802](CVE-2025/CVE-2025-618xx/CVE-2025-61802.json) (`2025-10-16T17:37:13.187`) -- [CVE-2025-61803](CVE-2025/CVE-2025-618xx/CVE-2025-61803.json) (`2025-10-16T17:37:20.493`) -- [CVE-2025-61805](CVE-2025/CVE-2025-618xx/CVE-2025-61805.json) (`2025-10-16T17:37:23.793`) -- [CVE-2025-61806](CVE-2025/CVE-2025-618xx/CVE-2025-61806.json) (`2025-10-16T17:37:26.160`) -- [CVE-2025-61807](CVE-2025/CVE-2025-618xx/CVE-2025-61807.json) (`2025-10-16T17:37:33.997`) -- [CVE-2025-6724](CVE-2025/CVE-2025-67xx/CVE-2025-6724.json) (`2025-10-16T17:15:23.400`) -- [CVE-2025-7104](CVE-2025/CVE-2025-71xx/CVE-2025-7104.json) (`2025-10-16T16:45:42.937`) -- [CVE-2025-8868](CVE-2025/CVE-2025-88xx/CVE-2025-8868.json) (`2025-10-16T17:14:27.610`) +- [CVE-2025-54088](CVE-2025/CVE-2025-540xx/CVE-2025-54088.json) (`2025-10-16T18:22:01.223`) +- [CVE-2025-54089](CVE-2025/CVE-2025-540xx/CVE-2025-54089.json) (`2025-10-16T18:21:03.213`) +- [CVE-2025-54253](CVE-2025/CVE-2025-542xx/CVE-2025-54253.json) (`2025-10-16T19:15:33.173`) +- [CVE-2025-58322](CVE-2025/CVE-2025-583xx/CVE-2025-58322.json) (`2025-10-16T19:14:18.680`) +- [CVE-2025-58323](CVE-2025/CVE-2025-583xx/CVE-2025-58323.json) (`2025-10-16T19:09:30.000`) +- [CVE-2025-58730](CVE-2025/CVE-2025-587xx/CVE-2025-58730.json) (`2025-10-16T19:56:24.070`) +- [CVE-2025-58731](CVE-2025/CVE-2025-587xx/CVE-2025-58731.json) (`2025-10-16T19:58:17.940`) +- [CVE-2025-58732](CVE-2025/CVE-2025-587xx/CVE-2025-58732.json) (`2025-10-16T19:58:32.653`) +- [CVE-2025-58733](CVE-2025/CVE-2025-587xx/CVE-2025-58733.json) (`2025-10-16T19:58:43.147`) +- [CVE-2025-58734](CVE-2025/CVE-2025-587xx/CVE-2025-58734.json) (`2025-10-16T19:58:53.950`) +- [CVE-2025-58735](CVE-2025/CVE-2025-587xx/CVE-2025-58735.json) (`2025-10-16T19:59:07.647`) +- [CVE-2025-58736](CVE-2025/CVE-2025-587xx/CVE-2025-58736.json) (`2025-10-16T19:59:18.437`) +- [CVE-2025-58737](CVE-2025/CVE-2025-587xx/CVE-2025-58737.json) (`2025-10-16T19:55:18.817`) +- [CVE-2025-58738](CVE-2025/CVE-2025-587xx/CVE-2025-58738.json) (`2025-10-16T19:55:39.060`) +- [CVE-2025-59425](CVE-2025/CVE-2025-594xx/CVE-2025-59425.json) (`2025-10-16T18:02:09.260`) +- [CVE-2025-59944](CVE-2025/CVE-2025-599xx/CVE-2025-59944.json) (`2025-10-16T18:16:19.257`) +- [CVE-2025-61541](CVE-2025/CVE-2025-615xx/CVE-2025-61541.json) (`2025-10-16T19:15:33.633`) +- [CVE-2025-61543](CVE-2025/CVE-2025-615xx/CVE-2025-61543.json) (`2025-10-16T19:15:33.817`) +- [CVE-2025-61687](CVE-2025/CVE-2025-616xx/CVE-2025-61687.json) (`2025-10-16T18:12:37.330`) +- [CVE-2025-61785](CVE-2025/CVE-2025-617xx/CVE-2025-61785.json) (`2025-10-16T18:12:40.397`) +- [CVE-2025-61786](CVE-2025/CVE-2025-617xx/CVE-2025-61786.json) (`2025-10-16T18:13:38.117`) +- [CVE-2025-61787](CVE-2025/CVE-2025-617xx/CVE-2025-61787.json) (`2025-10-16T18:14:53.107`) +- [CVE-2025-61882](CVE-2025/CVE-2025-618xx/CVE-2025-61882.json) (`2025-10-16T18:15:37.493`) +- [CVE-2025-61884](CVE-2025/CVE-2025-618xx/CVE-2025-61884.json) (`2025-10-16T18:15:37.670`) +- [CVE-2025-61926](CVE-2025/CVE-2025-619xx/CVE-2025-61926.json) (`2025-10-16T18:15:39.300`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 029fa9a4844..ec76bea00f3 100644 --- a/_state.csv +++ b/_state.csv @@ -195550,7 +195550,7 @@ CVE-2022-25769,0,0,2523918ea40da26b95e9abda2d2b411cf15b3d2a805a57b743b2649769dd7 CVE-2022-2577,0,0,7dfb4d9179f1eefcc863c8a3e76107909150e1945e894d94650c4a3f70597e2c,2024-11-21T07:01:16.753000 CVE-2022-25770,0,0,f2ba647e3ee6ed7932a12ec043c3ecd2e42d5d0e8eb0127ac56c9fd58b21eba2,2025-02-27T19:42:12.837000 CVE-2022-25772,0,0,ff796297ad7865332e00bb2b318127a389900f15aa53f8502eeaf569afa498b5,2024-11-21T06:52:58.343000 -CVE-2022-25773,0,1,c84e42f614b7ee69f52aba7d46f7b50ebfed3f6503df13d7e88008a529ad0169,2025-10-16T17:08:58.823000 +CVE-2022-25773,0,0,c84e42f614b7ee69f52aba7d46f7b50ebfed3f6503df13d7e88008a529ad0169,2025-10-16T17:08:58.823000 CVE-2022-25774,0,0,bd380684d32ffa9cd4640164928b773a3662f874edc7e0d020930c6456c349a1,2024-09-23T23:21:35.443000 CVE-2022-25775,0,0,86cd764b6a567381983af3ef2ac724e63b9fbc2964b23fee64b226f75093e044,2024-09-23T23:22:15.763000 CVE-2022-25776,0,0,b92a32835cc3936cfcece435820b9a30ee61228c21cc5409787525b6dbc22604,2024-09-24T15:19:46.117000 @@ -240856,7 +240856,7 @@ CVE-2023-4988,0,0,a4efcb75a011770681c2cfd5444a7c73af0b55e1daacbbe7fa49f88c021c4f CVE-2023-49880,0,0,4f9194672fbc1a7b006cda17dd716a3c8be1af4dc0d3ac2afaf72d120f796f3c,2024-11-21T08:33:58.773000 CVE-2023-49881,0,0,5056b6d45649292443502ac7e7cd91c6f072fdaa8ad18e4ef24a761e8c95c904,2025-10-03T17:38:09.453000 CVE-2023-49883,0,0,4877a7ca0eab0505580b8cb9572524102038c93a1e6399ca4d99bd9764491e22,2025-10-03T17:38:45.517000 -CVE-2023-49886,0,0,5902f68e1e9c055b10024a83fd9f938ca3270451d807e47fc1500e996dc8b801,2025-10-08T19:38:32.610000 +CVE-2023-49886,0,1,a38ce342cf7f6d1d3ecde4e9022109d6cedf359db2905144baf650311ca4f4ff,2025-10-16T18:13:37.770000 CVE-2023-49897,0,0,2b7bd0962dcd018fd3100621aabeee13ba3631bad9ee7c1d2209e3e928ed24c2,2025-02-04T21:22:51.923000 CVE-2023-49898,0,0,6e07e5e2cda7dda9a9d728957a1086adc06517850aa158c4a50ff9cda4932774,2024-11-21T08:33:59.070000 CVE-2023-4990,0,0,079e73de9b45586d448dfe367a9a52c1ba714555cd61a76db9271c3e3bddad3c,2025-05-01T15:02:16.060000 @@ -272544,8 +272544,8 @@ CVE-2024-47048,0,0,fef6e504d9cd22590fd718435c56fbd9c56a6cdfc349f645a20c1a1344ff2 CVE-2024-47049,0,0,ea1ab97498a7575381e5a85d4ced51685b87b0454f11364c00c1ffc93b1858ca,2025-03-18T20:15:23.800000 CVE-2024-4705,0,0,70c389ca67ab3379e01e7be3997ee96e6665f685a382d4b4294d25153d98d41e,2024-11-21T09:43:24.977000 CVE-2024-47050,0,0,0ecdbbebc96569da8fe90045f207bda8eb6f3c0a2e057e37f2da498fe1d2b9d9,2024-09-27T15:29:21.450000 -CVE-2024-47051,0,1,9536548a2235bf5b582b85af82580cc18c995b606f8274ea8b12d48f678000f7,2025-10-16T17:11:30.637000 -CVE-2024-47053,0,1,da31275ec3a2663a65451667fc24a82215ba42fc044f44f7725be7616a36f270,2025-10-16T17:12:07.397000 +CVE-2024-47051,0,0,9536548a2235bf5b582b85af82580cc18c995b606f8274ea8b12d48f678000f7,2025-10-16T17:11:30.637000 +CVE-2024-47053,0,0,da31275ec3a2663a65451667fc24a82215ba42fc044f44f7725be7616a36f270,2025-10-16T17:12:07.397000 CVE-2024-47055,0,0,2eefacc5aea17939e6a2057ac4ad11dab9b9fff91a78659553bc906137f83397,2025-10-03T14:11:44.813000 CVE-2024-47056,0,0,f13840d4336a9743f4bd706b1084e0f819c2fd7fc934a4e76a5c82a5cbc19af1,2025-05-29T14:29:50.247000 CVE-2024-47057,0,0,6cadef5f4bcc84a84e9b81842013364b2165f675efaba994f96dc56239efc37d,2025-05-29T14:29:50.247000 @@ -278311,7 +278311,7 @@ CVE-2024-54451,0,0,62bfea464680a36276017f91bb5ae11f8712be2380f4e61a47de985084800 CVE-2024-54452,0,0,30db43977a4bb0060f4301184eef5e7e4316f5a66e91aba57b8474d2cdaf07d1,2024-12-28T19:15:07.570000 CVE-2024-54453,0,0,4b38818ec57830d6d15331deb8fc6306f0e91d48c89fb133c6569d5b7d3ea04e,2024-12-31T19:15:47.147000 CVE-2024-54454,0,0,d67e1bf29a3aaa483b825ac163d62022e2785b5de9b64863f3bc27235cd67fc7,2024-12-31T19:15:47.310000 -CVE-2024-54455,0,1,0db3b980dbf435db06336de7517c496c54b3a7c7d8a5896a3e63ec9aadffe636,2025-10-16T17:05:29.440000 +CVE-2024-54455,0,0,0db3b980dbf435db06336de7517c496c54b3a7c7d8a5896a3e63ec9aadffe636,2025-10-16T17:05:29.440000 CVE-2024-54456,0,0,3fd3ebd2b4a02998a1bd7b1d47d1b9851b4563efaf8111417b0111d4c2f11a6d,2025-02-27T03:15:10.667000 CVE-2024-54457,0,0,da0353a7ec7d859fd477580e7c54e31a24aeea86ab2c2ac2e00b7a1eda59c2cf,2024-12-18T07:15:08.377000 CVE-2024-54458,0,0,6b5f215377437d43103a07a37d401d4ffde3d81a5c784753ce0cb90e17b3bbb8,2025-05-02T07:15:57.417000 @@ -278797,7 +278797,7 @@ CVE-2024-55635,0,0,361f8517d9208fa1ec18b9979aafd463141bf7d72f8bb5cbdc9d106b06321 CVE-2024-55636,0,0,566b9e0f2e57ee5d465140de0fcc3b41555bed1687c96d1ace2f8ad05ece67ec,2025-06-02T16:23:09.030000 CVE-2024-55637,0,0,8d159edce95e74e05659078a5bd4b824078ccf6152973433170b6d41153be7ad,2025-06-02T16:23:28.807000 CVE-2024-55638,0,0,acb0ba7bd1733135994e170c0a03547b0d19c32c36b8a4ac2f906f616a25733e,2025-06-02T16:23:56.927000 -CVE-2024-55639,0,1,e8f6798aec3e703b1706442928e25426c0b604040ae89119add21d950934aa6d,2025-10-16T17:04:08.780000 +CVE-2024-55639,0,0,e8f6798aec3e703b1706442928e25426c0b604040ae89119add21d950934aa6d,2025-10-16T17:04:08.780000 CVE-2024-5564,0,0,e3d6ee99511e00dfad028dba3e98314cab645f8836c7086dd46dca5f6b58a5b4,2025-07-14T14:15:25.303000 CVE-2024-55641,0,0,eb88aca48dbae5f2f45af8517c1c4e4bab15937547e215ad800ad3993510bea1,2025-10-15T18:30:34.020000 CVE-2024-55642,0,0,b9c9b058ef1d487f56ec2ca8cc1d079c0051f5402bb2e1996fda356ecc63b8b8,2025-10-01T20:17:24.540000 @@ -278841,7 +278841,7 @@ CVE-2024-55877,0,0,d38f98f2a669ca52fd50ce55f0a7b6f812f77c9aaf47114ab2a9fd7b15f16 CVE-2024-55878,0,0,ddf93675a87b982771a83dcbe0c7d650fbaf40d82f129cfcd23293bff68215eb,2024-12-12T20:15:21.493000 CVE-2024-55879,0,0,1b35a1665394c7ad5bf3756cd7dae1818db48834a134e4254e91104fbd769369,2025-04-30T16:01:22.430000 CVE-2024-5588,0,0,0f782383b3f2939c3b69b0426f47e73c64d369968cc7b23065b143feac27c541,2025-02-11T15:05:30.993000 -CVE-2024-55881,0,1,0ea6e4b379d28814b40d4193cc0835e25937cb6a6e5599e21b7ee5f3c786fe6b,2025-10-16T17:03:08.050000 +CVE-2024-55881,0,0,0ea6e4b379d28814b40d4193cc0835e25937cb6a6e5599e21b7ee5f3c786fe6b,2025-10-16T17:03:08.050000 CVE-2024-55884,0,0,5d6da0d32263735a14f387d6018828f5961d5e83d83c540231cd267e671abff9,2024-12-12T17:15:11.710000 CVE-2024-55885,0,0,923a6163e06249ed7d86fc211fe81a38c781f72d8d71b3a492bdfc8d63c98493,2025-08-01T20:18:29.800000 CVE-2024-55886,0,0,b364e38b57c8224b068cc87c9ee99447948b262b8408afc9444bbbe5b3713fac,2024-12-12T20:15:21.890000 @@ -279049,7 +279049,7 @@ CVE-2024-56139,0,0,3f3505cff9953c341cbc46a854057265986fc9c1927b9f237182fb5e17450 CVE-2024-5614,0,0,dbfe1b67548311692c56bb8d68c3048c964ba6dbbed397928536eff3aafacba1,2024-11-21T09:48:01.283000 CVE-2024-56140,0,0,5e773e07d0eed57889259343301d38e685c0a1811e50189d4f1636233600aa01,2024-12-18T21:15:08.353000 CVE-2024-56142,0,0,d0863d2f76899d0c75d2dc51b8dc37ad0a79fde1963b9a5230e4e213f062dcd8,2024-12-18T16:15:15.433000 -CVE-2024-56143,1,1,4b8092fe4483c82f60bb4f04d8323544f4bbf68462c9dd0f703cd105ff8c610a,2025-10-16T16:15:36.183000 +CVE-2024-56143,0,0,4b8092fe4483c82f60bb4f04d8323544f4bbf68462c9dd0f703cd105ff8c610a,2025-10-16T16:15:36.183000 CVE-2024-56144,0,0,5a8f246b3ee58fe0b6aa1f12215528f9f3e515638bc6c966a2d94ef6b9b54d81,2025-04-28T16:44:52.353000 CVE-2024-56145,0,0,c60c4c952a6fe995b11a743e898f42b8a490681fb0f5c5b349c48ebe7ed08a5b,2025-06-03T20:48:48.940000 CVE-2024-5615,0,0,37856ff1a2df0ee42bdd2faed17aef170393a5807410ba1a41f1c8e8ad65ffc3,2024-11-21T09:48:01.413000 @@ -279061,7 +279061,7 @@ CVE-2024-5616,0,0,89da925af4f4ff2e6aae6f7854d48c51d7c93539850dcf815c87084b1a856f CVE-2024-56161,0,0,0d178b949303de8c713ee1a20dc301b7fd5ce9c07af4747a5e53f97976af5874,2025-04-02T22:15:17.963000 CVE-2024-56169,0,0,6e4197731c9c080541fb91bc978470f9e09d1f8e88cc7fc1a62fd6d6a1b9959d,2025-04-22T16:24:31.770000 CVE-2024-56170,0,0,20f53cca351db01f6629ba4ce37d6d02bca926c058919daece7e974f4421e9ea,2025-04-22T15:35:05.487000 -CVE-2024-56171,0,0,2c759f1f02c4d4211de7999a7cb20eeedf914ad2c4ba42a7544a0a61f720511d,2025-03-28T15:15:46.003000 +CVE-2024-56171,0,1,7997e905c2827c3b1dbafea4ffb9d4524639b02d2ad1b186419ce45281e775ba,2025-10-16T19:39:26.400000 CVE-2024-56173,0,0,92fbf86a02e8da1ce0b13e1ac7dee7a6adff80d02b155c38d0fb295ebeff02d9,2025-06-05T20:58:21.423000 CVE-2024-56174,0,0,0f3a8b68b98b0a266119805177d09fb748ae8f055cfc84268facc996261f94b7,2025-06-05T20:59:17.297000 CVE-2024-56175,0,0,dba90ff9c1cbd2e0bbc47d1b12b780c5635a5f3546a1812f47b063f6ce89019e,2025-06-05T20:59:27.300000 @@ -280150,14 +280150,14 @@ CVE-2024-57784,0,0,a0ffa91a6d1336afb59f42e28acde5cce54240c902b605d9b18af65e76eec CVE-2024-57785,0,0,da53710abc0b38f1f9720d31a7383037ac10a091073d73f356e9f0e15e997042,2025-02-04T15:15:18.943000 CVE-2024-5779,0,0,2a86c05c31e595b12ded5db682c98a0bf6f259741199a426f00c627efee46fc9,2024-06-12T08:15:51.240000 CVE-2024-57790,0,0,d36a30d2787b9993d46c773960aae55f5855a98782ece3897a7930cc7d866dae,2025-03-17T19:15:24.897000 -CVE-2024-57791,0,1,bd0a7dc48288ed1b230689669508edc1f5d127c49a73dab815e543185e05b617,2025-10-16T17:19:33.200000 -CVE-2024-57792,0,1,ce4e2c23557b7e18758d6d87a2b4473ed5f3cd2fe4805afbb56edb259e5b2e03,2025-10-16T17:26:24.487000 +CVE-2024-57791,0,0,bd0a7dc48288ed1b230689669508edc1f5d127c49a73dab815e543185e05b617,2025-10-16T17:19:33.200000 +CVE-2024-57792,0,0,ce4e2c23557b7e18758d6d87a2b4473ed5f3cd2fe4805afbb56edb259e5b2e03,2025-10-16T17:26:24.487000 CVE-2024-57793,0,0,aaa4a52a15e62472b135d7d2e2c9f443052ec8a60484a4e8c46cca1aeabadb3e,2025-09-24T18:53:17.630000 CVE-2024-57795,0,0,bbce7220f78e19c756525c6caa5d180789147fc2afb971fa56ccc49f8127a069,2025-03-24T17:30:57.973000 CVE-2024-57798,0,0,d248e5435745e5afc5779566d734a9993a4823a6054a49202d207a824cfbf068,2025-10-01T21:16:40.017000 CVE-2024-57799,0,0,05060644e25ba6367a21d6a227777717f870ed09bf7825a54a341ba1575a202b,2025-10-01T20:17:56.830000 CVE-2024-5780,0,0,8f257920278f73ebde8da2f9da9c11fb9d019685aae47ae6d2026dc053194989,2024-06-12T08:15:51.300000 -CVE-2024-57800,0,1,f7c6e47a0381c9377df4572dcd621b1f85f7dff97758d5b3635774b5430f5e78,2025-10-16T17:29:14.647000 +CVE-2024-57800,0,0,f7c6e47a0381c9377df4572dcd621b1f85f7dff97758d5b3635774b5430f5e78,2025-10-16T17:29:14.647000 CVE-2024-57801,0,0,f70ff195cf449af520f581753eacebbfc4e53c069684a5d372753be0443d7f6f,2025-02-11T16:15:48.660000 CVE-2024-57802,0,0,c561cada4c64b00acb0b38a61b178dd7997294666fedde9056c104e0588a2a21,2025-10-01T20:17:57.050000 CVE-2024-57804,0,0,2e8c7c2f68203a9240321499295c1f61d9543b4540c5cc21c37daeb1505f962d,2025-01-11T13:15:30.233000 @@ -280221,7 +280221,7 @@ CVE-2024-57900,0,0,47c59939a517ef6e55e93927c3b37d9d833e39af74439b35b5240b02f60ae CVE-2024-57901,0,0,fc38fcfa8ad839f94737d9ae3e93380ec5d3de7e9effb85439c33bc2ccad8ba8,2025-10-01T20:18:00.807000 CVE-2024-57902,0,0,93ca3deab84f0d73b9b1cd7fddef27460e3f33c6970a39668e95d9799c556e6d,2025-10-01T20:18:01.113000 CVE-2024-57903,0,0,f2c9b98a9faa8f705013b1d04030efc76c6c49b7cd9fc07ce4bc955a21c2c167,2025-09-26T19:47:39.827000 -CVE-2024-57904,0,0,3262ecb3c3c103f98db3569e7c85310fc4e16d9aea58056b578ccd75d9f62d99,2025-02-02T11:15:12.590000 +CVE-2024-57904,0,1,21d393cd8426dce795e789cdf286527a4a72137d941f3db757058aef785a3bde,2025-10-16T19:53:36 CVE-2024-57905,0,0,c8d0456c428ddf2585dfd5c1ec995416f2483cfeee717591cf007f59cf1831e8,2025-10-01T20:18:01.800000 CVE-2024-57906,0,0,73b9ae12021331bca5e3071fce20b0afdf6b8b990c2d8b0181bc3514243da680,2025-10-01T20:18:02.150000 CVE-2024-57907,0,0,07a5872acaf7670885cd42f4984c0b5b9be73088f9dee560028034c53808e7db,2025-10-01T20:18:02.393000 @@ -280236,7 +280236,7 @@ CVE-2024-57914,0,0,1df2d001d2f14fa15382c6e3e9ae4e43b9674464270c18b9389d2328d4227 CVE-2024-57915,0,0,d04e2c0336358ae9a308504943da8fc42f1e8c30d5d5a9b94f788387892b4897,2025-02-13T16:16:43.287000 CVE-2024-57916,0,0,e50b5b5031ab5761fdaf219cc4691bc1827a4e574eb4a8d7fa670f4af3c95c06,2025-10-01T20:18:04.517000 CVE-2024-57917,0,0,b1167e5c425222d1e86557f7fbfade37e2c05b542cac17d0614dacc0faf5facb,2025-01-23T17:15:20.330000 -CVE-2024-57918,0,0,51a0ae7790d69294b939f21a09ba710f5e4fba529bc7fb169229a8b80c38f093,2025-01-19T12:15:25.960000 +CVE-2024-57918,0,1,5f314b04e23b3bd11a5e4eaa72c2dde585a95425cf5f7244e972b0c093b9a942,2025-10-16T19:44:50.023000 CVE-2024-57919,0,0,9fba0c05605367c7d056f7a171498826c6569378c9df060887f27f584ee2d756,2025-10-01T20:18:04.717000 CVE-2024-5792,0,0,50e11f463088247110774be144fbfaca02cb5ac823192aaf13a748fe05bdb47b,2024-11-21T09:48:20.570000 CVE-2024-57920,0,0,e886d01100cb89cc10688a55d9ec23c065bd36f5b0221320d880948827c50067,2025-06-19T13:15:50.980000 @@ -285492,7 +285492,7 @@ CVE-2025-10214,0,0,eaa7da4d2945f7973fb3e94088928eab4bcd24b28c14dd741269ee0e7a307 CVE-2025-10215,0,0,d3e28b8f6f4488319cd2dd4ccb08f1471aff71c017f9b70da849cefd31a2b99a,2025-09-11T17:14:10.147000 CVE-2025-10216,0,0,0f65a960a269ebdcfbb8e60371957c906c8dc29b9c2c7fe8d5122b42868afd3c,2025-09-11T17:14:10.147000 CVE-2025-10217,0,0,2eb91f9307dc258e4ae545c8fe67998c7f13cc0932abc99926498854abbf9e88,2025-10-02T19:12:17.160000 -CVE-2025-10218,0,1,1b20cdda8db3e50ce14aa0240f8801d6bce56d72d39e9bb65de46eda26da2d34,2025-10-16T16:07:42.750000 +CVE-2025-10218,0,0,1b20cdda8db3e50ce14aa0240f8801d6bce56d72d39e9bb65de46eda26da2d34,2025-10-16T16:07:42.750000 CVE-2025-10219,0,0,8f76b997bab3acc3f3ef077fd90328e9fb2cd08c3163c295b011ab75175e6cda,2025-09-10T13:15:35.233000 CVE-2025-1022,0,0,c5cad2967427b4b65fbdb73d285a277a67f200cda72090c41570ffdd0ef59806,2025-02-05T20:15:45.470000 CVE-2025-10220,0,0,4ac8b853e74a329db7223ebdd9e08860400d972e2f93d4364cb5494c95c05bb3,2025-09-11T17:14:10.147000 @@ -285749,7 +285749,7 @@ CVE-2025-10542,0,0,aa45fbb4ad8eb8792bf4fcaec63dc0444bb3852ce756aba3f4e437e8edd2f CVE-2025-10544,0,0,9d1cd753c710adb41cdb932b092bbe268ab72004fbd5228f34240601da329676,2025-09-26T14:32:19.853000 CVE-2025-10545,0,0,dc244c4478590c7efa60284b16ca3864688505ef591618060312b5a45b9215ad,2025-10-16T15:28:59.610000 CVE-2025-10546,0,0,f088632bdd001248501a630f914db4c09f6b020f0ee730cb54e4ef4cbd137365,2025-09-18T13:43:45.290000 -CVE-2025-10547,0,0,4aac00747d87f1b22cc2bf7b5aad257491190269d36240bdfb2b43df155aed29,2025-10-06T14:56:47.823000 +CVE-2025-10547,0,1,40788550c253f96d5a0ef9327320605659a76442c6066a6e1aff36cc5b5b89db,2025-10-16T19:15:30.800000 CVE-2025-10548,0,0,48fb7adcbaea594c1e27a17ba7caad16bbd8aadf9b7e7cca8ebfc69b56969f0a,2025-09-24T18:11:24.520000 CVE-2025-1055,0,0,6e774b509e3c76627691b837f2d8590aa97e26aef808a880682478160b3479de,2025-06-12T16:06:20.180000 CVE-2025-10552,0,0,24bc425248de391ab149c4fb86db1d40e9f2a70614c621d1f11c452b625edb50,2025-10-14T19:36:29.240000 @@ -286137,7 +286137,7 @@ CVE-2025-11049,0,0,97a9d5c6064bfb6a7ec820ee85dc70f21bfed559c0b9409847730eec29ca4 CVE-2025-1105,0,0,3bacdf77291dd429d5a36d299846ec2970e0b6d32e073b87ebe633608b8b63d8,2025-02-07T18:15:28.433000 CVE-2025-11050,0,0,3bbddd284994759f23dea7697219ca75dcaea5ed70672c3f9a4212d485b4fb3d,2025-10-03T18:28:30.633000 CVE-2025-11051,0,0,3c83895790fb465ba88b9bb1b2b6e7b24c5000393180d18645f9eef4cbfb9654,2025-10-03T15:37:20.437000 -CVE-2025-11052,0,1,8fc7c6528a1d2691f22c34b0be7f0637de71fe081fb5d4660c8d51238d52c5aa,2025-10-16T17:17:52.647000 +CVE-2025-11052,0,0,8fc7c6528a1d2691f22c34b0be7f0637de71fe081fb5d4660c8d51238d52c5aa,2025-10-16T17:17:52.647000 CVE-2025-11053,0,0,0ce109b26754fb290a262b235b3e1720efb419b6abb096e0019cb33f704badd9,2025-10-03T18:24:04.280000 CVE-2025-11054,0,0,0ba3dd758c8b64b46c159f9e02bf1a8d60ee13c016a886695fb9b2bcf9ec3ae0,2025-10-03T15:38:38.883000 CVE-2025-11055,0,0,b14e2c4cf1be0fb4a402ba52dc7c7f1744bf63c25ec194ac93a808ad5604da40,2025-10-03T15:39:54.310000 @@ -286453,6 +286453,8 @@ CVE-2025-11489,0,0,fc2111e7ce83e66bcd5fbf0719ee8475e7a80f30d7ab917387d45cafedd30 CVE-2025-1149,0,0,35bfbff22496bb11a6694c9d96c7c8eced02f5e02ddd56bc706518a22d5cfe5d,2025-03-04T15:50:19.490000 CVE-2025-11490,0,0,590f49d10a3265a722285256c24affa4dc0206667863a03d72f37e4f86f225a9,2025-10-08T20:15:34.560000 CVE-2025-11491,0,0,25b0b49c42d9880c60c17c6ccdc21d439209405e601335532fb64689ea5ddf62,2025-10-08T19:38:09.863000 +CVE-2025-11492,1,1,7e728b2279d80fad0bd506b017885d5a02c5858056b370254712a3ec164a91ca,2025-10-16T19:15:31.900000 +CVE-2025-11493,1,1,c0b36637894e3380bff1af584be6de68a9f92ee4035da8e18fa18c4dbd02c236,2025-10-16T19:15:32.073000 CVE-2025-11494,0,0,24e7ef94219693f15e8d618e51539201096ead95ebaf0e1bea589af76f58aea2,2025-10-14T15:27:45.803000 CVE-2025-11495,0,0,b87283200dccac436b1e9e81d5ecce08a92bfa23f0e331f3d333308a4d7a2ce4,2025-10-14T15:28:00.960000 CVE-2025-11498,0,0,ff373d4540720284ddf94685e3698e180dd2abfc4fd5d27b7c7e69d25bdfe15d,2025-10-14T19:36:29.240000 @@ -286582,10 +286584,10 @@ CVE-2025-11652,0,0,68437044dc31cf96fdb140fb52904026316d1ffe2377c97903574169ef72d CVE-2025-11653,0,0,01bac54c9d501f9e6dcb4c21fc4ec39044c34fdff2541fae1eb86cddef9205dd,2025-10-14T19:36:59.730000 CVE-2025-11654,0,0,1541fc36e0325b2d21e5cd18ff685e283fbef771aa9ba04a16e567c64ff16dc0,2025-10-14T19:36:59.730000 CVE-2025-11655,0,0,b33494a5b3fbec761d384c7b5c96b7ee504e1ff1659c13c5c7f12ab452d5eed1,2025-10-14T19:36:59.730000 -CVE-2025-11656,0,0,acb95a2d2b1c95b67296ffef44326e22e172dd0f60c6ef6c205ae68ebec35b83,2025-10-14T19:36:59.730000 -CVE-2025-11657,0,0,8c2919552b051fb078d6ba424bc093c3dc88edc08e4ef869e8dbbe8c68b347ac,2025-10-14T19:36:59.730000 -CVE-2025-11658,0,0,2a1c9b73ddc291e7898adea20dead33d8e524dbae2099386f367eec7c449bddb,2025-10-14T19:36:59.730000 -CVE-2025-11659,0,0,ec17a77191a9c6df684c5040efbab65116c1e05240c531e8886f32a89be32027,2025-10-14T19:36:59.730000 +CVE-2025-11656,0,1,fe50b1dc35056957ec30029d9ca626780948a386961c812ccac253389d4d1a00,2025-10-16T18:26:25.543000 +CVE-2025-11657,0,1,953efb3afc6804e6d680e53256ab5bac5cc7662b6c44bde2a4cdc23e7d9155cf,2025-10-16T18:25:04.620000 +CVE-2025-11658,0,1,791700c1b8901cd20b02862a4472b7c11cdbcc330b7dc6bd18ea853ca5fda4e2,2025-10-16T18:23:33.087000 +CVE-2025-11659,0,1,42103da1a418766efcb272a1797c3a741621c130da15a6b925027aed2df0700f,2025-10-16T18:22:26.047000 CVE-2025-1166,0,0,53adf1f39d80d3baf01aa5b30aec5c152df1c08e2659e682c3bf837c0117db4d,2025-08-01T01:59:10.433000 CVE-2025-11660,0,0,abd2148ecc309d2f62478d29a23c0d00b2ec0cd8e9930016d27b5720e97fd833,2025-10-14T19:36:59.730000 CVE-2025-11661,0,0,241d390497916b0a6747039cc73f2680262afdbb87df8319f73176a1b746a83e,2025-10-14T19:36:59.730000 @@ -286645,11 +286647,13 @@ CVE-2025-1183,0,0,66bd5014e478eac7d2b26f3b7b795f335404775ae82352eecb6bc58738f116 CVE-2025-11832,0,0,889b679b9738963bb63c93cf9f0431d720601309a82733bd883f0c700930277c,2025-10-16T15:28:59.610000 CVE-2025-11839,0,0,523dc78977259cdc82ef46975b12773e0147a8d46945a3ef1fe6c78be1021fca,2025-10-16T15:28:59.610000 CVE-2025-1184,0,0,e72c20825c8aaab1cecb2a18b4950558a580e18d1a48f844a0c83491ff0d6c00,2025-02-18T18:15:32.483000 -CVE-2025-11840,1,1,e4b9444bad9a5347673db84bb103f738dade14fa05405dce031ae735cae7d5dc,2025-10-16T16:15:37.003000 -CVE-2025-11842,1,1,f3923cfb6e6a5799839955d1b7fded8372a05691c71d6de063f0a6b6ae8ae2d4,2025-10-16T16:15:37.230000 +CVE-2025-11840,0,0,e4b9444bad9a5347673db84bb103f738dade14fa05405dce031ae735cae7d5dc,2025-10-16T16:15:37.003000 +CVE-2025-11842,0,0,f3923cfb6e6a5799839955d1b7fded8372a05691c71d6de063f0a6b6ae8ae2d4,2025-10-16T16:15:37.230000 CVE-2025-1185,0,0,d641715e17f920e829de9fe280a94e645012a9140b36311240c675e67f6b2d11,2025-02-18T18:15:32.680000 -CVE-2025-11851,1,1,4f036e8aa39826586e4f673e012658164a22fc2b0af4cffbb19442c8cf9099ca,2025-10-16T16:15:37.453000 -CVE-2025-11854,1,1,08bac4adf31d6f0b705f6b97256d6653db557f90f2f5e5b79947367df4b340c8,2025-10-16T17:15:32.853000 +CVE-2025-11851,0,0,4f036e8aa39826586e4f673e012658164a22fc2b0af4cffbb19442c8cf9099ca,2025-10-16T16:15:37.453000 +CVE-2025-11852,1,1,51803718413f612dacd382a1ae7b1b89cd5180b750a60ca21e000517a396c95f,2025-10-16T19:15:32.227000 +CVE-2025-11853,1,1,fbaf09062463f7b5562c8aa03f6a5e4f3077a805f85e4ab4d126fcff5b8b0fa9,2025-10-16T19:15:32.420000 +CVE-2025-11854,0,0,08bac4adf31d6f0b705f6b97256d6653db557f90f2f5e5b79947367df4b340c8,2025-10-16T17:15:32.853000 CVE-2025-1186,0,0,3273fc3f713b0d58fdf852edd1e5700c688be8134bba778542532cf7cc906d2b,2025-07-03T01:07:49.520000 CVE-2025-1187,0,0,ae67063bf2ea967e06bc9e5a3d0beea6836d41ac7f01c844e3e4aa4241a7b046,2025-02-18T21:28:37.800000 CVE-2025-1188,0,0,5efc8e2f903ec9d16b255970209255d6aed04fea4527765fffe8565e5fe86ea3,2025-02-25T21:00:10.493000 @@ -286791,7 +286795,7 @@ CVE-2025-1337,0,0,d50b5c2b5aabd36826ddbc10fd1c9ad645d3a485550527f95248dd387d8710 CVE-2025-1338,0,0,9507b7d3049bacb036f565c3abe2a79aa2eac0c5105a53ebfd7cc272d65639f0,2025-02-16T11:15:09.530000 CVE-2025-1339,0,0,6860f8f36032bcedc9f18d921cb05e31dc82859a782caff2668b67d0b58904a7,2025-03-10T17:11:37.343000 CVE-2025-1340,0,0,b9875780a16a13744dbcd5d844e8ca36a7e2aa268ada35546ad50497001d4e5b,2025-03-10T17:14:20.723000 -CVE-2025-1341,0,0,e71c9fab920cae46fd15d9a6341f86ac021c1b8f508769960da817638174ae86,2025-02-16T14:15:21.893000 +CVE-2025-1341,0,1,cbb30a47f85144155f10c7d3e33c0ec7d9fd8d1427481e29e4fffcce70c8cae7,2025-10-16T19:48:05.460000 CVE-2025-1348,0,0,ad5b07dca40b6e849a1c97372fa9df66d93e7131088daf1d9df44209e6a8bbba,2025-07-25T17:57:57.480000 CVE-2025-1349,0,0,e7daf32839b3f238c77f10cfc713f5e67c2ab59db0fe96ec93216ff70824f1f2,2025-07-25T17:58:03.213000 CVE-2025-1351,0,0,a6ea9f201c0676b9dbdab8a1dd139acec4a7e76bd59056f751f2c0d7ee3033b4,2025-08-14T00:57:24.720000 @@ -288085,12 +288089,12 @@ CVE-2025-21062,0,0,5f73dbd2e69f5775ecce749f5e1c95a324e925ee181bdcc5e37ebe3f5fcf8 CVE-2025-21063,0,0,03c1fdc2d045d0d787aad96bc68bf8f5ffcee770df7757e587d768ac8e5d441d,2025-10-14T19:37:28.107000 CVE-2025-21064,0,0,f2e1cd9ca78ba1c6c36a6a1a01a7ba8f83ab30a40dac5e0b7db74893b92a15af,2025-10-14T19:37:28.107000 CVE-2025-21065,0,0,e635f6d4908e44fbe019c47c0c6f8a114270fbe9ba468f59e50e874ceefa6a12,2025-10-14T19:37:28.107000 -CVE-2025-21066,0,0,e0b111bfcdabe46ccd81184b5813628b52173146b8963ffcca7421ffad4a0b33,2025-10-14T19:37:28.107000 -CVE-2025-21067,0,0,9dcaf070fa73471809f296298485f234255b71436c8861516418507f9240bd1e,2025-10-14T19:37:28.107000 -CVE-2025-21068,0,0,14409b31f723165092c505563ea839a657282f7ca89faaaccfaca5aabcf41845,2025-10-14T19:37:28.107000 -CVE-2025-21069,0,0,ff75dcc6dfc69b74122d62d389780270ebce7c486c81f0d331d18ac0053f2e44,2025-10-14T19:37:28.107000 +CVE-2025-21066,0,1,17085878597d5fb3abdbc0b0855c67f931ab549dbd591d5b0df963a66162adc1,2025-10-16T18:41:57.167000 +CVE-2025-21067,0,1,a4f6a0816b8806a5eab3fcd5dd587d24925c5ba13ad92b63a3a7df10174b4dbe,2025-10-16T18:41:14.660000 +CVE-2025-21068,0,1,ef5d8dbcfdf25de56d0399fe9cd8b831718269cec558c4adc05cecaa5e3ef9a9,2025-10-16T18:39:28.373000 +CVE-2025-21069,0,1,8f8cca3ae6c615e66526e393e451cfa778ad4fafacb20a28f78a6f7672429eb7,2025-10-16T18:35:00.990000 CVE-2025-2107,0,0,135bf09ff50485dd2912025078b557b35b087079462172252b9881a30af6dc30,2025-03-13T02:15:13.250000 -CVE-2025-21070,0,0,eccb5525638eb7c3cad913eef03596f863534ba8b96e2a2f2384e6ce904c48b3,2025-10-14T19:37:28.107000 +CVE-2025-21070,0,1,d21705d12e1a556fab2ca496f59f2f1783ec495bfa01d1e20e85edb201456101,2025-10-16T18:33:54.903000 CVE-2025-2108,0,0,60b4ae79e344e4658824ff2975004a181bb22f5bb0373a3558afeca319c66e13,2025-03-20T07:15:38.187000 CVE-2025-21081,0,0,2001a89bc61e9590c36304579e4e9d48d5980697f9b552f01b260ec73e2e53cb,2025-05-16T14:43:56.797000 CVE-2025-21082,0,0,46ac35d658d44baf54d1ac8a8f790de5d79d2ee8dc02f7947502a40cb1fc420e,2025-06-09T19:07:20.283000 @@ -288648,7 +288652,7 @@ CVE-2025-21624,0,0,d42dcdacff62f316b4981a561af804a5cee075786c58e780671516439c967 CVE-2025-21626,0,0,0019338d7118ae1112b8b56ec21fea9a00fbf267218ec88c9d181fd5dd176391,2025-03-04T14:22:04.730000 CVE-2025-21627,0,0,c73bc7e65f731a1200673d3208566df16309a6f11def0271011fc7b09afcfe55,2025-03-04T14:31:30.683000 CVE-2025-21628,0,0,0075ad45f4e081e6b1d4b87e45ccf38954b3b032c76d5db5fcb797ed5fc6213f,2025-01-09T18:15:30.070000 -CVE-2025-21629,0,0,5bd27bb9a82cb5a5f09a5986e4163e86befaea4298f9b54578a62350a29978a7,2025-01-15T13:15:15.220000 +CVE-2025-21629,0,1,6d52a0e5c74d59494ed0ce002e2ba80f92968aafd666cd6834f84e03edf145fc,2025-10-16T18:38:51.330000 CVE-2025-2163,0,0,00e3ace0e20df0af6c9121ea801ee4f678115b33e7ee5e18bf1bd0606b3853bb,2025-03-28T19:46:06.197000 CVE-2025-21630,0,0,b687cde38a98e756a80e569a98743dbd03093e3308ce5058c13044fa43b51e41,2025-01-17T09:15:08 CVE-2025-21631,0,0,827a424e63f48b072bb6688d1a9f41839aec5c2b224610b12dcbe56fe5cf9787,2025-02-10T18:15:34.650000 @@ -288664,18 +288668,18 @@ CVE-2025-2164,0,0,e98e81b49d1989488553d1c9d94d32b0257a3415b3230b546e6ba26d877d36 CVE-2025-21640,0,0,953f71ba357e60ac226bad23a14e2ffa823449a710acdd82904145531c90bad0,2025-04-10T13:15:46.927000 CVE-2025-21641,0,0,18710b050735a675aab7b4ca3e55973ce888529eb670af234f14cb0834b5826f,2025-10-01T20:18:16.050000 CVE-2025-21642,0,0,32664b6a24ebb0a5fc12c2ed62bd6defd1668d909fb432b1fcce30922e605060,2025-10-01T20:18:16.277000 -CVE-2025-21643,0,0,cabaf0da35f1a3435ec7869964661b97a8bf2d764f2f1be480a70dfedc80edc2,2025-01-19T11:15:09.870000 +CVE-2025-21643,0,1,fb50e8d77ce9de878450e2de647f4109f10648d5fa0cae587f2ad2fb9e46c9d8,2025-10-16T19:17:07.963000 CVE-2025-21644,0,0,67c696845ad2e5aa1b1d2b5ffb2e89ffe045076c5fed026399879cabbfd361a3,2025-10-01T20:18:16.500000 -CVE-2025-21645,0,0,58d1e341ef4421e05a9fe71baa4cda8b108f66bd0b51b1be381975edcf10884e,2025-05-22T13:15:55.210000 -CVE-2025-21646,0,0,751e9512a6f4482d5f98e27fee57d878d181b41c78a8c4c8fe41304d573c67bd,2025-02-02T11:15:15.290000 +CVE-2025-21645,0,1,b4d68e5a3c442a4e655440594a907b05fdf798444aaad28905c49c0e6e2c9666,2025-10-16T19:17:53.183000 +CVE-2025-21646,0,1,800fccdbd0b75ef39f51be587119a2146e1661046c155816753d24f465e8a1f9,2025-10-16T19:18:32.233000 CVE-2025-21647,0,0,9c3ce4759a73d8980c7a8f6f5ed09f143a214fc8bc2f140943fdf86735047754,2025-09-26T19:47:52.393000 -CVE-2025-21648,0,0,1e28b61383e7660836dbbb26d762b1871cd28f2a60ea4ccb673beb93821501a9,2025-02-02T11:15:15.433000 +CVE-2025-21648,0,1,22b5392e8b58449e00e0e2ef56350ae5d78903ef20117490dd57ddd011e76a23,2025-10-16T19:20:51.323000 CVE-2025-21649,0,0,d0ff62a764f3941c20238295ede73cdc89407b280a7a9e51b2b2113a84a816d7,2025-10-01T20:18:16.693000 CVE-2025-2165,0,0,3fa02b527a752047d7599c3f2af4cf7f081441a816c4c1132099b177afee05a9,2025-03-27T16:45:46.410000 CVE-2025-21650,0,0,f9d3ba34de14110ba4fa4500e163261b8ae9269c856a2b0e1a039dfec1ae62ac,2025-10-01T20:18:16.897000 -CVE-2025-21651,0,0,d057ff764ce31c4ac7e93c37cb4ba424635250ef668040e2530ccd52f14e89f7,2025-01-19T11:15:10.733000 +CVE-2025-21651,0,1,1b99dfa9a39bd091f58827b5c8b88e67e423519a3834732c6744e450e37b6e32,2025-10-16T19:22:28.293000 CVE-2025-21652,0,0,20d739461f3527398cd43bd52a6f89c66a16cc1ddb96e5765be31fe2e5b35e8e,2025-02-10T18:15:34.883000 -CVE-2025-21653,0,0,4054ad842aceda82766dc1a772620a2211cc9da6d0c6c3e3c2a1ffa9a7bf55f6,2025-02-02T11:15:15.557000 +CVE-2025-21653,0,1,97af15c795849c9746baa592655e83e980fa99e9f0a971af3e097ead7e026877,2025-10-16T19:44:19.413000 CVE-2025-21654,0,0,b2e6e9658811f6df4ead65b30333fa7c33df85ddae50511f79248662e1d75589,2025-09-26T19:48:53.530000 CVE-2025-21655,0,0,788145c86a689213d798e838c694d50505f6a53d5793735bfa9bbe4c8bd3f93d,2025-10-15T13:56:17.260000 CVE-2025-21656,0,0,ff4afca4be6a105ef72458d456c347809ce3a3efda97c8a4239874dcb837a1f0,2025-09-26T16:21:34.017000 @@ -288728,7 +288732,7 @@ CVE-2025-21698,0,0,4561b308f50d7938aedbb56320a438b4d9b59e891167d36ae946f3978aca1 CVE-2025-21699,0,0,9441c56e3a9daaea08b8c6c86567a95642dd29a8576b933cfa0eec8706d42a6b,2025-10-01T20:18:21.957000 CVE-2025-2170,0,0,5fe04ffa6b24e364f68d689895dba51597b9886a6580c6f097319965cd73b869,2025-05-14T17:15:47.997000 CVE-2025-21700,0,0,740af1889eaeb047f839851ae435bc77c5b8e42d1225c06c7e16092297468840,2025-03-24T17:39:56.970000 -CVE-2025-21701,0,0,917d73f0b64fc30a5c28b559f68547cc4797ffea453443d7a4bc9fc188b7fa4a,2025-09-02T20:15:33.237000 +CVE-2025-21701,0,1,020e583e3c5e2c41d3c8c62549147f8d36d03cf5bde16ba6aaa01687abac079a,2025-10-16T19:47:19.563000 CVE-2025-21702,0,0,4df5b98764de953a1edc7a7c424ea7ff653f75a1ec0249a43e97c9c67ebec2b5,2025-10-16T13:58:06.320000 CVE-2025-21703,0,0,5070c09eae6493034270bba27d16eb0e9eebdf573ab14554e4ace7c3c0b6d64a,2025-03-24T17:38:41.197000 CVE-2025-21704,0,0,f53b2a13eb245f431acdf21b6df898cb009573180a232aed690f789d9949de3d,2025-09-23T19:14:36.833000 @@ -289406,7 +289410,7 @@ CVE-2025-22375,0,0,ad41e29f59774e7ec2e9cb8e8af4d844651a9cedc9ff6f6b9f174f11c7860 CVE-2025-22376,0,0,0b599d4fbe0b053f67328db02ad6a56c3b1af5acbc775b8d4fa33614fa96b0bf,2025-01-21T18:15:15.473000 CVE-2025-22377,0,0,c7915ba49e4a1d7eee8388d0515bd8758657e0b6dca1e56a884acabaaa518c43,2025-06-25T16:03:56.140000 CVE-2025-2238,0,0,c5db3ba9bfe183c8cf7052fe3e835ab6f64265755c05e0da40916412c3863d1f,2025-04-29T13:52:28.490000 -CVE-2025-22381,0,1,3b9cb23c0cc19f2dbadc4687ebda1f131c22f9f22381c4c13a64716dfae852fb,2025-10-16T16:15:37.663000 +CVE-2025-22381,0,0,3b9cb23c0cc19f2dbadc4687ebda1f131c22f9f22381c4c13a64716dfae852fb,2025-10-16T16:15:37.663000 CVE-2025-22383,0,0,63bf61aba93c60f9e27d4490097fddca6b8b9a9b3bba370090a18f0ea8406ab2,2025-05-20T20:27:47.280000 CVE-2025-22384,0,0,c89a4d364228fcdb0030c3d001db802eda072cfac90fe549da34d9b7672320c0,2025-05-20T20:27:35.100000 CVE-2025-22385,0,0,d5d551481222c0618d7332330b37232616caec43e5d108d6d5982c900c8043ea,2025-05-20T20:12:36.173000 @@ -290211,8 +290215,8 @@ CVE-2025-23239,0,0,603fd19aac2bd3178b4788e20f805a32d9901ff68e2350e308574a8fb51b4 CVE-2025-2324,0,0,544081ed1b20281fde8dab430c787a3c5f91198e7c0ed9db5ff29f6e7e403e13,2025-07-31T15:53:41.757000 CVE-2025-23240,0,0,544a1feaf6fe3c4f1a8295794a4960f2a0fc447d643c5c30d52cfb77d4db3620,2025-03-04T17:40:18.440000 CVE-2025-23241,0,0,82d4b70871e8e814cb33194eb598449ee5bf4ead801314f8658e861f300a6274,2025-08-13T17:34:12.350000 -CVE-2025-23242,0,0,d27cfd8eb1ce5039f45aa230a356c5778500c5bd3bdeef08e7a8fc9b98273eb2,2025-03-11T20:15:16.280000 -CVE-2025-23243,0,0,a2ca7e09692df96eed814b96f5fa9adebe4baf7cbed7fcf1f852edff3ac7f931,2025-03-11T20:15:16.463000 +CVE-2025-23242,0,1,f6756822e92c580d5b04b26fe7cbffdba3e03ef026707db97ab43e2c0a8d8946,2025-10-16T19:30:43.030000 +CVE-2025-23243,0,1,a3dcfbaa566c074883f7666abc531a7c3833e265ded2b904d6584fd6588917d6,2025-10-16T19:27:16.347000 CVE-2025-23244,0,0,e0d5555fedbf82dfa0dfcfea531216d83c1de025afdf0c7df1eaf9d550a0b2d2,2025-05-02T13:53:20.943000 CVE-2025-23245,0,0,fb7d90db3d8c68573094d97cb59b55821ae4699eec31e6f6990dd4678e710d58,2025-05-02T13:53:20.943000 CVE-2025-23246,0,0,5e0a9b09b6c7f34baf7ae64599609224737704c8be9c6ebeaf32d7dc0fa547c9,2025-05-02T13:52:51.693000 @@ -291891,7 +291895,7 @@ CVE-2025-24922,0,0,1085a7cd13f679794fbecd2f28d4ec8aa71843cfd82213479396b1b27b9a2 CVE-2025-24923,0,0,fb4ff5d9b8c4450e503550c6db8355b45a15044cc796cd51632928e5a27b6456,2025-08-13T17:34:12.350000 CVE-2025-24924,0,0,3cb1f58ac0f82a4a651fd56ef4a80a8ba6f8902630bb63eebac1edae30e9552a,2025-03-05T00:15:38.423000 CVE-2025-24925,0,0,d7e9fd1d1152fa94b5336fbdb2d2cf11154aed007a4fbce8d3b09eea2d6ea492,2025-08-12T16:39:10.993000 -CVE-2025-24928,0,0,60a4c0fb3abfd3076c9a488507bb4848dd88d581d2a34fed844fa36564b93409,2025-03-21T18:15:34.860000 +CVE-2025-24928,0,1,db81eacd933197dba62f9ef399279cc6427a114230c682f368cf53c8bca0ecbd,2025-10-16T19:34:33.453000 CVE-2025-2493,0,0,676bfb3fae988b7f59f84e2d119ffc2e2dbb296d8377ca555044ab18d563390f,2025-03-18T12:15:15.950000 CVE-2025-24936,0,0,4b027cbcbeede8af69c55c69fdcbc2e8ea780614ee5fb94ff17c849af26aec00,2025-08-11T14:52:51.543000 CVE-2025-24937,0,0,983478ba6b315808a12bb8c0623cc5bb90ec4a182ddc0404f445917f9a08126c,2025-08-11T14:52:45.817000 @@ -292239,7 +292243,7 @@ CVE-2025-25294,0,0,b3811eccb32fac071a50c80de85794b1984e48f3cbed62ace8f19b8ba7359 CVE-2025-25295,0,0,ab7cbec386eec3a44bf55fb5a8d6852f900324ec8d3c216c21202391f71c954b,2025-02-14T17:15:20.230000 CVE-2025-25296,0,0,eb82cd0045b678246f76b81dc51324e42088a9117e9fcd5db6c937a0b8da8798,2025-08-25T01:15:44.783000 CVE-2025-25297,0,0,83fdd3cd31892bb333e81aa26f19cab40b635398c7624d494ca745162403a22a,2025-08-25T01:17:33.247000 -CVE-2025-25298,1,1,7fdd5e3f010a0a26984b6bbf31fa00fedd6c1b599c29b9290d94d272bb7b8d48,2025-10-16T17:15:33.353000 +CVE-2025-25298,0,0,7fdd5e3f010a0a26984b6bbf31fa00fedd6c1b599c29b9290d94d272bb7b8d48,2025-10-16T17:15:33.353000 CVE-2025-25299,0,0,b88cb269210123945d038d12d198228aa26d1b8e47ccb86107a7f3a5f3e3fad2,2025-02-20T20:15:46.853000 CVE-2025-2530,0,0,fc602abe8d7031c2d3572b7936774d04ac6de74566fc4d702928b7969d0334dd,2025-08-11T14:12:47.120000 CVE-2025-25300,0,0,a63610c8954a67da8954dfef77eac19e25e19f8d8bc841f17242c70e43478917,2025-02-18T19:15:28.957000 @@ -293433,7 +293437,7 @@ CVE-2025-27148,0,0,a02be6d0e91bf8eda3626965312087a36b8be8d291da209d00439f9926ccc CVE-2025-27149,0,0,d37dd60e9f4cbd6bf258f9e4281ccbeeea11611cacc6f6c7f578aee7a519d621,2025-09-27T00:15:56.530000 CVE-2025-2715,0,0,9b86d209899e100764be1390e15dd32c759d3c6ac90bee191f2f3abd07adc820,2025-03-27T16:45:46.410000 CVE-2025-27150,0,0,ed69fdfc840c58bb15950fe3ab99a4797846fbbb445dad305aecfb4847ed9dba,2025-08-22T15:53:42.620000 -CVE-2025-27151,0,1,1db6681252ddf5695ec9f1e264feb52cc4dc18bc464a18d2c1babaaf081c53c3,2025-10-16T16:15:21.957000 +CVE-2025-27151,0,0,1db6681252ddf5695ec9f1e264feb52cc4dc18bc464a18d2c1babaaf081c53c3,2025-10-16T16:15:21.957000 CVE-2025-27152,0,0,815cbf2cb85491ac7517f554c06a0f197a1cebc0365cf2c1f1f412469a6ed687,2025-09-22T18:52:22.807000 CVE-2025-27153,0,0,153cf8367ada5823ec25665e9d6c2fdf2d2f49b909a08cc18d9c03f87f5c3ef3,2025-07-03T15:14:12.767000 CVE-2025-27154,0,0,1e975d72bebdf47d7d7a2300b98253c7dc68fea542f552a8278b41ed85b5f742,2025-04-07T18:24:53.463000 @@ -293857,7 +293861,7 @@ CVE-2025-27601,0,0,67dc562062bd43f9cb62242fbeb31dc0da690791bd3878d0113f02848256d CVE-2025-27602,0,0,b0ff4310d5c4223441f4d84da1f6f9c23d78243c0b3d4b605432b7618597af3b,2025-09-22T13:57:50.697000 CVE-2025-27603,0,0,4cd57510aa29f56cdb31a336722d58f4cb8fedeac7d1c97f3ab7f8c252f5edc8,2025-03-07T18:15:48.293000 CVE-2025-27604,0,0,2d8b2bff5f45d42dc6505aefff04f39ef61d7c6a29e42691b534e62124e02c16,2025-03-13T14:40:27.713000 -CVE-2025-27606,0,0,c1b3a14d8ea1983da0dae810b080e0edfbc58501193478f2dfd2b8c425fe25b3,2025-03-14T17:15:52.017000 +CVE-2025-27606,0,1,bab9f4e5c06f231059f4f7319b814dcbfb267fe6661099088551446490565da9,2025-10-16T19:23:44.177000 CVE-2025-27607,0,0,25442e4b5e57cb80dde7a75c54d5079baa91e712289faeb6d97b3c12203f907e,2025-07-01T16:22:57.830000 CVE-2025-27608,0,0,2284e96ab28a2f631653047894dfe881a6801fa943e57d0a4e39857d8e1e8e28,2025-04-07T14:18:34.453000 CVE-2025-27609,0,0,0408d82d9a6b3df0e8ea8373d3f27b16c8526b80d35500d0afb03e431b7290c5,2025-08-01T15:11:44.517000 @@ -295186,7 +295190,7 @@ CVE-2025-3025,0,0,fa631b2d9ee47e5dd3b2cbb5b849dda3cee8b2f7c51836b3429b536712581c CVE-2025-30254,0,0,da1d16a46820d71900f53d810ce1fe1ebed01824c713861505ca6fc997e896d8,2025-04-16T13:25:59.640000 CVE-2025-30256,0,0,75a2197a00f6789bfcd3d872329d3143ad33b27cf673562bc0cd1e8dd7d401b4,2025-08-21T18:23:00.950000 CVE-2025-30257,0,0,9ccc3ed13a71d3b859385eaaebbd26fc6242cd3f0f494deb9f38d38761c8555f,2025-04-16T13:25:37.340000 -CVE-2025-30258,0,1,c8ddd07c679f2fc52c3184b5e2447b81db93143c2ddec54cab8aec241b16c239,2025-10-16T16:53:07.557000 +CVE-2025-30258,0,0,c8ddd07c679f2fc52c3184b5e2447b81db93143c2ddec54cab8aec241b16c239,2025-10-16T16:53:07.557000 CVE-2025-30259,0,0,e7ad748a07d97a3ed7d8fd479d0bd66cf98f38cbfee97910d52cd90aa0d3bed9,2025-03-20T00:15:13.780000 CVE-2025-3026,0,0,fd82920e9700c813116be2cafbf3ffa0c2125a4b9a6cdf1bdf693a99b2093889,2025-10-09T15:04:20.607000 CVE-2025-30260,0,0,6c2b7b636b1cb600c53a3543624b8a034541bbf1b1da779382b39a86a766297e,2025-09-19T17:14:18.793000 @@ -298118,7 +298122,7 @@ CVE-2025-34192,0,0,7a7b066d2d0826e07b60bd44511f6fbf74c27978cf3015816fc9e74dc0de1 CVE-2025-34193,0,0,91ad57d94c1f1c449dc29d4a16919374e284d9e5a851057497031d3a55c83c52,2025-09-29T20:15:31.933000 CVE-2025-34194,0,0,7c339288afb22d4dc036b7899c2fd080459c099540e525af0f25f9723c4253b8,2025-09-29T20:15:32.087000 CVE-2025-34195,0,0,87cc6f117c4b4880c09259ea57008e92a70b5fe4f466ec0998bd91b74070ee18,2025-10-02T22:15:36.440000 -CVE-2025-34196,0,1,2e71219836be34a9ea6a8e6e64aab9ec5f907eb7b60a670daa6abc6f0d46176c,2025-10-16T16:27:21.273000 +CVE-2025-34196,0,0,2e71219836be34a9ea6a8e6e64aab9ec5f907eb7b60a670daa6abc6f0d46176c,2025-10-16T16:27:21.273000 CVE-2025-34197,0,0,958ef75aa6ca321031d9da96ef600c421c90334f3d9de290a88f581e391733b6,2025-10-02T22:15:36.720000 CVE-2025-34198,0,0,5ba1f285c278ef092d20cf11244ba0263832ccaa4e528deac9921153f4b4ef34,2025-10-02T22:15:36.847000 CVE-2025-34199,0,0,ccd0f0a9c5181a161ccc54ed3bf89cbaba4ad66c7bc2e8ed911c6e0f11002ed8,2025-10-02T22:15:36.973000 @@ -298163,6 +298167,9 @@ CVE-2025-34248,0,0,6fdaf9f02a542dc38c6991c2091d0de27b764c398030c59bdba298f312dc1 CVE-2025-3425,0,0,e4c4f45e6bc4a81a24ca597b6793799084263ef11e2d6bf0b3e7fb89e1bfca21,2025-04-10T16:15:29.350000 CVE-2025-34251,0,0,285e01515bb9db7da8ab6c1875dbc9ee2bd7af63db6fc4a2bd8fb24c68950f08,2025-10-08T19:38:32.610000 CVE-2025-34252,0,0,2a07dab5afb9b31f7d9249f303664943cbd03404e50c805a2207113e9c363d27,2025-10-09T17:15:58.827000 +CVE-2025-34253,1,1,ac0e9276e353db6fcb7c34d0d249f34a9650e33f95d6146420f83d44d29a8140,2025-10-16T19:15:32.620000 +CVE-2025-34254,1,1,b1179750be25903c27ceff49673f1f96bfa91aa0583e10ac420031dc14b7a9b8,2025-10-16T19:15:32.777000 +CVE-2025-34255,1,1,be99403d2c6e109093d4b7ac0a45bcec3b3abd02ff44586360e8ef074f21bf5e,2025-10-16T19:15:32.920000 CVE-2025-3426,0,0,cedfa9c4f32fcdb1b955b9680fcf595688fe655ff45258ecaefd79f4661dc8ca,2025-04-10T16:15:29.460000 CVE-2025-34267,0,0,3a87df495dd2dfe1080a1ae454fb4c03d351f3fa8cb852915d909c8614f3623f,2025-10-16T15:29:11.563000 CVE-2025-3427,0,0,7780ff6346d05468812b81b7b77241039def4901fdfd66c0b0dae004cfc9d4d9,2025-07-10T14:18:07.637000 @@ -298195,6 +298202,14 @@ CVE-2025-34508,0,0,03c2fc862b04d3044ed955f614cf63a96a9a2ed1663afda2ecda7152a56fb CVE-2025-34509,0,0,ee308ed0848fff9be4ef23e88eb2c1bded559a0a718eacae02674d1848a945fd,2025-09-08T19:17:06.773000 CVE-2025-34510,0,0,f6fd7e0f4f7d7c8125c83c00aee28f552ff9f0e3711b9fdadfd50d81a8150b72,2025-09-08T19:22:24.210000 CVE-2025-34511,0,0,326b867992d31df3edc77911f460e5df753c036956944ff6263465882ebcccbb,2025-09-08T19:10:33.220000 +CVE-2025-34512,1,1,91f2d7dd7b0598f9b20825cf83ac6efbfbad5752f7d4e92e564f19c2ae6d2c34,2025-10-16T18:15:35.447000 +CVE-2025-34513,1,1,ec0b74c937e58daeb9ea70d2c632e675cb398c5293fff56ce532ee48e99ada4b,2025-10-16T18:15:35.617000 +CVE-2025-34514,1,1,9478bf88fa884209f9f1eddd5459848cfdede37c359642344fbca3d569532024,2025-10-16T18:15:35.760000 +CVE-2025-34515,1,1,32a7b6e515f029bccf8e74412fa87e9ccc07db9180394026e68bb46fb61402e7,2025-10-16T18:15:35.920000 +CVE-2025-34516,1,1,aaf6fdb85cecfe188f363aee31c888c35ef86afd8ae86edf98b68d8797a1b9d2,2025-10-16T18:15:36.067000 +CVE-2025-34517,1,1,f0899912c59786e4b0b4ea7f80bb9d7e8c61b8e4fddab8490f6bb61175526a74,2025-10-16T18:15:36.213000 +CVE-2025-34518,1,1,6be1438b2b8e6209bdbb921b580d0765c50e6e0e322ef10ecb9a1dd6282d96b0,2025-10-16T18:15:36.357000 +CVE-2025-34519,1,1,827af906638bef0d6abdef112af5a28ebf2a0ded0fe091a06f263fa7f8c68b6a,2025-10-16T18:15:36.493000 CVE-2025-3452,0,0,a0af240b89728ab4c39e75e741754c068d979812f93583676566bf2c295ab7ec,2025-05-06T15:35:58.647000 CVE-2025-34520,0,0,7bc80222827cc05608eb3c3017c6876ff77525e75bd900a346844b715dd17035,2025-09-09T15:01:02.443000 CVE-2025-34521,0,0,e62cd236ff621c8fabb5561d3e22758a13bafa05bfd0591b8df6b1c7c684914c,2025-09-09T14:54:27.547000 @@ -298395,7 +298410,7 @@ CVE-2025-35995,0,0,92cb6a969bd02841900f5badc43d429ce7c258a3bde1945dda911bebd606d CVE-2025-35996,0,0,a68f8bf3039aca0fabffa5365ae47dde1016d171f7f66e0132baceb8c4b864b9,2025-05-02T13:52:51.693000 CVE-2025-3600,0,0,b20fca7c62b9bb7b3b5999d20b66ad7fec6d38bd5e8180e32ccadd334d7300cd,2025-09-30T18:10:37.837000 CVE-2025-36000,0,0,73a1e3a3c73c6af3c4d0a3cc8b6a250aec821087e0d44e31580f53b3bf070c5e,2025-08-14T01:29:01.043000 -CVE-2025-36002,0,1,c0396267610c641b84f0f45cb61e15f1fcfba9cffa18628a30e9cbadb38c0463,2025-10-16T16:15:37.853000 +CVE-2025-36002,0,0,c0396267610c641b84f0f45cb61e15f1fcfba9cffa18628a30e9cbadb38c0463,2025-10-16T16:15:37.853000 CVE-2025-36003,0,0,6701be9f2b88c81075eca367b8460a4aff43dfcee5f48187355fb00762165a01,2025-09-16T16:41:58.040000 CVE-2025-36004,0,0,6dd52380b81919f43daa38cf9d61e5eb1fcac9375fff6d3d40df8387cefe8f91,2025-07-03T20:53:35.667000 CVE-2025-36005,0,0,8657b1f1a896f3c1f780315b49bd7a39b3f704b5ea67852ebecc416a2a85d3de,2025-08-22T18:08:49.657000 @@ -298453,7 +298468,7 @@ CVE-2025-3612,0,0,b3e7e1fd46c9147c27f3feb15d1a5ba8eabce3f8bab41f1f78e6d74dff7b1b CVE-2025-36120,0,0,7ac53b5e3c3285cb87452ed084cddcc70885ee350c52359c04c0361f6203c26e,2025-08-21T19:25:01.660000 CVE-2025-36124,0,0,495ab5b80c18934d694b85f1fd5c515432023769133dc6b0f110ddc5106cc50b,2025-08-14T01:23:45.570000 CVE-2025-36125,0,0,065ad8bfb76e5aab8cc5e8bdc82623ade84c6be49c8c9463be9f1d533787a61f,2025-09-11T17:14:25.240000 -CVE-2025-36128,1,1,123b6a00f7baf7b3134fa4cc4f6efa78d437a31d4eeb61d30dc42c4a836dd2fd,2025-10-16T17:15:33.547000 +CVE-2025-36128,0,0,123b6a00f7baf7b3134fa4cc4f6efa78d437a31d4eeb61d30dc42c4a836dd2fd,2025-10-16T17:15:33.547000 CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000 CVE-2025-36132,0,0,fda7a69a0a56f7e0435c73286c05dadd166bbf3383758a64745bf8a608a4b98b,2025-10-03T17:52:05.920000 CVE-2025-36133,0,0,bee880bb5fb76cfb4423e3458e3e19970e6f04fadc77dc2522065e6f772e6389,2025-09-02T15:55:25.420000 @@ -298463,7 +298478,7 @@ CVE-2025-36143,0,0,1e82b2da60297014ec7d27a8e98d8cb4e86c5412a88d55b136ab5a2614b07 CVE-2025-36144,0,0,1da30bdd4ccd49cd4ec890b26153bf3d55025f1a95e35c154a245ebe04821347,2025-10-03T19:15:18.317000 CVE-2025-36146,0,0,e3618150e691b0b74ea90f60d841a93c82818d79e7aee8ea2f7ecaf82383ed59,2025-09-25T15:52:20.303000 CVE-2025-3615,0,0,8fdf4606cb6a0284ee0e09827c413ea146851550983dc6357a6b31a17ed36258,2025-04-17T20:21:48.243000 -CVE-2025-36156,0,1,049b7eec39fbd18fdc6c7466dc6ba2fcdb79953a576acabf146af477dd8c771d,2025-10-16T17:44:10.913000 +CVE-2025-36156,0,0,049b7eec39fbd18fdc6c7466dc6ba2fcdb79953a576acabf146af477dd8c771d,2025-10-16T17:44:10.913000 CVE-2025-36157,0,0,d4042d7b050d6d535f4db44d44cd43950e23acfe375ebe2b6e16a9b8b0723ed0,2025-08-25T20:24:45.327000 CVE-2025-3616,0,0,85ddfd303733fa62ed9efef24f9f8a85faf23ed34487370e2b7cef38515b10a2,2025-05-28T17:38:29.717000 CVE-2025-36162,0,0,80d9dc94dac4a9f81e8dbf51072c45586362c2cdc481366e689f2684f1dfbbc2,2025-09-04T15:36:56.447000 @@ -301529,9 +301544,9 @@ CVE-2025-43276,0,0,12ed4d1b706da6a46cf93a7e520079846dd7f2992b6c77e959c897e542630 CVE-2025-43277,0,0,3b62b11cdd24069373558c856e8ae398456166d07374d6a149021d962f17efd5,2025-09-29T22:16:09.210000 CVE-2025-43279,0,0,f6506e90e2fa979b656eb1965ab92ad32b2b840ac7446a5dde65cd0f044564b5,2025-09-17T13:36:08.773000 CVE-2025-4328,0,0,e8bdcc0bd3fa88242159a44c5ca54793c131dd6edc873e6391897450ed26b86c,2025-05-07T14:13:35.980000 -CVE-2025-43280,0,1,41e7a09cfbf637ed5a4fe5d78f12dc04d8aa73a2cb93101ffa15f7de8825cfc9,2025-10-16T17:35:54.027000 -CVE-2025-43281,0,1,8e11e18ca825932eb13a5edf7b364ebf7bd713e05d000db2d159e67bc7af7fb1,2025-10-16T17:35:41.213000 -CVE-2025-43282,0,1,5058a640b2c1ccfba8500bb0c83adf466847db5d6e8e38a3090f89da740f7b43,2025-10-16T17:35:30.947000 +CVE-2025-43280,0,0,41e7a09cfbf637ed5a4fe5d78f12dc04d8aa73a2cb93101ffa15f7de8825cfc9,2025-10-16T17:35:54.027000 +CVE-2025-43281,0,0,8e11e18ca825932eb13a5edf7b364ebf7bd713e05d000db2d159e67bc7af7fb1,2025-10-16T17:35:41.213000 +CVE-2025-43282,0,0,5058a640b2c1ccfba8500bb0c83adf466847db5d6e8e38a3090f89da740f7b43,2025-10-16T17:35:30.947000 CVE-2025-43283,0,0,c0b73a0dd76ce45ca0959e4d3bc6cc03ec2d4e201353e45c66367741ffc68f23,2025-09-17T13:42:09.100000 CVE-2025-43284,0,0,3123b7e019b8ce92bfaca8851eb84c6c1e2e97ad3c55d7d43aa138dbcd69c127,2025-09-02T12:46:43.177000 CVE-2025-43285,0,0,406b8637eb080780ff0c1132126e763dee21dbca8aed68cb9a29201681df2206,2025-09-17T13:42:00.990000 @@ -301560,7 +301575,7 @@ CVE-2025-4331,0,0,f876536c95139ed5b097074601b31cff37b6f70b45b5a4d41de69f66f399c6 CVE-2025-43310,0,0,2b16e0917d1c86642ca1ff4655d17b09f0283a1d28a6bdfcb98e776b542727f2,2025-09-17T13:45:41.713000 CVE-2025-43311,0,0,fea5e5eed1bc9aadd6960a608ce8de49db590ef51f3cd2767089f8ce0df00e8a,2025-09-17T13:45:26.600000 CVE-2025-43312,0,0,68002d5ec87ca02343b8774df6e38fd8df9b459547a70b860c9522851089dafb,2025-09-17T13:45:10.473000 -CVE-2025-43313,0,1,b14c8c59c7e24f9d888d8f171e08a372ba8b65ca5acd99e4f8dd0a0681e0da67,2025-10-16T17:34:59.010000 +CVE-2025-43313,0,0,b14c8c59c7e24f9d888d8f171e08a372ba8b65ca5acd99e4f8dd0a0681e0da67,2025-10-16T17:34:59.010000 CVE-2025-43314,0,0,2707915b9346fe9d7dd5bfcd5cdbaebb113abbaf42c1f04325d9b900b63d54c0,2025-09-17T13:44:50.467000 CVE-2025-43315,0,0,5abb165ff1f725c82088bb3bcd6121f28981af9092d5c82b12b40115958bad4e,2025-09-17T13:50:37.803000 CVE-2025-43316,0,0,eeea58e161c80e8f171c54dbad3bf17435bed97ccee2f19730e4a0452d843504,2025-09-17T13:50:26.197000 @@ -302979,7 +302994,7 @@ CVE-2025-46747,0,0,8e6d897dfe6422b33c84d7300e2aad0f69583e8f67a6859e1823c91f5a27a CVE-2025-46748,0,0,4208307b393720633bd5b9df58bf5678ca2188701952ed83ce363d7ee072368d,2025-05-12T17:32:32.760000 CVE-2025-46749,0,0,f81e44f9b3fcac5cf188e7ea2942c49132ed4ad64ab36bb20a6a6f76938e5738,2025-05-12T17:32:32.760000 CVE-2025-46750,0,0,70ab72e9db561fa0f9d4b465460cd876228e09edef8a4dffb452045a3c9ec744,2025-05-12T17:32:32.760000 -CVE-2025-46752,0,1,2b3ed91a4784c69bb953ee95372166617d80f1589a6639e9ad973f34f375dc84,2025-10-16T17:50:03.337000 +CVE-2025-46752,0,0,2b3ed91a4784c69bb953ee95372166617d80f1589a6639e9ad973f34f375dc84,2025-10-16T17:50:03.337000 CVE-2025-46753,0,0,56a83bece5ff13ee064a1fb0dfd7ee9ef1f9937de0590ea37c40336df8920ab8,2025-04-29T03:15:35.230000 CVE-2025-46754,0,0,d1f475db69a06e653e6bbea1629fc02eda427a48f7fb97bf4cbb6d831122b33e,2025-04-29T03:15:35.283000 CVE-2025-46755,0,0,8bd538daabe1bc6181ec74e1810e825b8ffb5571ec278f3ec0eda5518c419442,2025-04-29T03:15:35.343000 @@ -305352,7 +305367,7 @@ CVE-2025-49840,0,0,1096f2dc1479ddec6e714ca5c30cc167da7d3961beccd593f13c413c869e0 CVE-2025-49841,0,0,321d2abbd37d3d9a67040ebbfd9f4df6bc54e8f4bbaee72c1dae9b632213b78a,2025-07-30T20:15:43.780000 CVE-2025-49842,0,0,52ae012b9d7e2a5cca4715d571aca2380b87e4d5e03f349c68bf066a953b2fc3,2025-06-17T20:50:23.507000 CVE-2025-49843,0,0,b9222270a3de3cff84fe371318c5014957a251100d87e6dbb6e77c19dbcfe291,2025-06-18T13:46:52.973000 -CVE-2025-49844,0,1,db895b7232eb8e1f321a426859711240cee4f0002b214c45f661aa4ebc185955,2025-10-16T16:28:05.690000 +CVE-2025-49844,0,0,db895b7232eb8e1f321a426859711240cee4f0002b214c45f661aa4ebc185955,2025-10-16T16:28:05.690000 CVE-2025-49845,0,0,b862623b85f0c139d528863a097b18c3f6c0049594c1e20dbdef3fe3954ca87a,2025-08-25T15:13:54.867000 CVE-2025-49846,0,0,cb591bd4fda54cfb8ee32a72e858c2b8a52f92f94a3406c5c85a6026eb68cd9a,2025-07-08T16:19:11.700000 CVE-2025-49847,0,0,eb007a0a8cc1694595e41dd2e89f0dea29e72bf1c99b6f22e6125114d5442a24,2025-08-27T13:48:14.223000 @@ -305943,7 +305958,7 @@ CVE-2025-51487,0,0,8fae8915080d5d6ae362c5cff61dc720d9c94e0f9578bc3a962fd673551cf CVE-2025-51488,0,0,100d84daac1334e933b30c1010b44784f9b6348b666d684d5b0ee2e3620d5264,2025-08-21T14:30:16.077000 CVE-2025-51489,0,0,dc5f87ce99c10a29655ba5cb0ccf2a9ea3ae901208a93cbf7f3ad0e8b4a2abd8,2025-08-21T14:29:25.490000 CVE-2025-5149,0,0,232f8025201c94e932b0de4b6beaec630d660e75c65564c2e0e05e78bac44fbc,2025-06-03T12:59:06.597000 -CVE-2025-51495,0,1,7adc26971465112ab95d3c9eb4aa19f4ce24441cbd868dc8c423d405fafe06ad,2025-10-16T17:00:47.237000 +CVE-2025-51495,0,0,7adc26971465112ab95d3c9eb4aa19f4ce24441cbd868dc8c423d405fafe06ad,2025-10-16T17:00:47.237000 CVE-2025-51497,0,0,b6099479b97d89e30ac436cdbde2d54e0efd9647cf483e46bf9080a6a3683230,2025-10-09T19:13:49.823000 CVE-2025-5150,0,0,731d534d853663d7736c9488a0539f48e53bdc24ab46a192850406c9ec4e44b1,2025-06-03T12:58:43.070000 CVE-2025-51501,0,0,eaf603d3047f5cb3018423397bb203ef08c81ca3cb82a648b4620c1cd77abb80,2025-08-19T15:36:02.763000 @@ -306632,7 +306647,7 @@ CVE-2025-53084,0,0,67744a9ce79d7f7d3bcdf1bb3e7db1f3c1c4b7e3e0909db067f84a4af97ee CVE-2025-53085,0,0,5fe625ec7704d4cb37795b207eb2b167e2be0efc3e32034550e32f84a5861b69,2025-09-02T17:13:32.627000 CVE-2025-5309,0,0,89a194a1cf6d659352286322a84f4ba222c3925ca67b7ca9b1aed05021dff664,2025-08-21T20:36:00.047000 CVE-2025-53091,0,0,01f26f0e7340b37fe1b8d341679db61fcaf8487f7c9a90afcfb883f9a5365394,2025-07-08T14:48:01.653000 -CVE-2025-53092,1,1,71880fcb5e514b0b38c1f7d3c611b9ae1edff5a674afd381ff868caca62af22b,2025-10-16T17:15:33.727000 +CVE-2025-53092,0,0,71880fcb5e514b0b38c1f7d3c611b9ae1edff5a674afd381ff868caca62af22b,2025-10-16T17:15:33.727000 CVE-2025-53093,0,0,74633fa37f55d3e4578f17a8a8e9cf5802a23514d8c74f36bbe49970c76e862b,2025-06-30T18:38:23.493000 CVE-2025-53094,0,0,418576393828aa4e87c8e5ad6e152067b9fe196eb6fcd7a235ffa2a208b13760,2025-06-30T18:38:23.493000 CVE-2025-53095,0,0,c479ffe1068b27b348c291bec098de3ddb294727b46371d056a5895eff3862f6,2025-08-22T13:44:40.643000 @@ -307360,8 +307375,8 @@ CVE-2025-53946,0,0,e15007f7b207d766f91e83e2ee1c5a53ab3cc01c5f25cc744cd81e090f771 CVE-2025-53947,0,0,f6c5bf70e81c75b4a533eb6177d8ed3457016c6eac91837ceec2738475cd3813,2025-09-19T16:00:27.847000 CVE-2025-53948,0,0,423152f54a98d90592767e760dd3d6f04a8cc3b0a6e18074b951b35185ee03dc,2025-08-19T13:42:47.510000 CVE-2025-5395,0,0,4adbdf3099b8b5dab4e4f6463ed756f4d425b2051f900904089759b88a3b79e9,2025-06-12T16:06:20.180000 -CVE-2025-53950,0,1,83ebd4f9769b0243b83f005476cc77a6dcf805a5aba46bbecf72b8678e0303a1,2025-10-16T17:54:14 -CVE-2025-53951,0,1,64df4b3317cc2dc19e414d3cd9f9b99cde9ce5acb165ec09871c3b1edc8d265c,2025-10-16T17:54:44.177000 +CVE-2025-53950,0,0,83ebd4f9769b0243b83f005476cc77a6dcf805a5aba46bbecf72b8678e0303a1,2025-10-16T17:54:14 +CVE-2025-53951,0,0,64df4b3317cc2dc19e414d3cd9f9b99cde9ce5acb165ec09871c3b1edc8d265c,2025-10-16T17:54:44.177000 CVE-2025-53952,0,0,391fb7f4bdd1c9ccaad232425dfeb621db8c967a2d7c84f5bd4ca3542846f97c,2025-07-16T03:15:21.837000 CVE-2025-53953,0,0,d030a5392e39e01d7f614222654af9c307d482d43b281675e26520d822393d1c,2025-07-16T03:15:22.410000 CVE-2025-53954,0,0,8c7e194b26c8eb4071df82776b2b9bbc620ef152f2292168a51be2d3d8e56de6,2025-07-16T03:15:22.480000 @@ -307479,10 +307494,10 @@ CVE-2025-54082,0,0,4d57da847eb6a618d7506751f0c852c7140646dad30ad839845d278a46640 CVE-2025-54083,0,0,fad8053c5f51ffbabed5b78b62b4054d7b97c0233427d5c3a9078643c753530c,2025-09-12T14:15:41.250000 CVE-2025-54084,0,0,f846a29180565de78f9701764ec340050aa79138253cbaad9467b3db312b827f,2025-09-12T14:15:41.363000 CVE-2025-54085,0,0,fe41c3f2924941e3bfcd165492e1c31b46445ff7f15ca2be7e8b39599a6bd3a3,2025-08-05T20:03:18.380000 -CVE-2025-54086,0,0,043c3aa20eb04917e4bbf94331e44b97071667cf440d6e056c2848eae65a4fa3,2025-10-06T19:15:35.093000 -CVE-2025-54087,0,0,8dd8012399965e32e25709f21a9d186ff02c4ff47998c5ff932c3d187e1e4c9e,2025-10-07T20:15:35.517000 -CVE-2025-54088,0,0,c33c9fcc129b623506b293427b68ae0a569881c9f9c6db74a02decd7d6ce585d,2025-10-07T20:15:35.640000 -CVE-2025-54089,0,0,176c111782926515372c73786fdd6d7f5ae0aae19f6e98d97d5c962307c78cd7,2025-10-06T14:57:05 +CVE-2025-54086,0,1,bd9e1a0276c4dac0ae41f2cf197b6f1a4944ceef07ddf0b8c67e0ddd75d8c8d1,2025-10-16T18:23:17.397000 +CVE-2025-54087,0,1,80918e2294c47e2014dd119209362682f1e5bc343f9cd88195c5c9aa5780741c,2025-10-16T18:22:43.163000 +CVE-2025-54088,0,1,94c98eb5ba6a818dc90636c50204e8577d7a4a2b2c7daf105bb37caaecf0b335,2025-10-16T18:22:01.223000 +CVE-2025-54089,0,1,bffcc2ef6a010327614f1cf337d2ddde42d240c98944d1c165145524c73975f5,2025-10-16T18:21:03.213000 CVE-2025-5409,0,0,e19327c856251bb6630e10234de5c371173630bbc620fa2c6779542a53a31980,2025-06-02T17:32:17.397000 CVE-2025-54090,0,0,99bd1972f74804c0dba8c73d072ac52011e9faf8e2ac614a8916d899e010191c,2025-08-14T00:47:43.510000 CVE-2025-54091,0,0,90dc766edf1ad65b19bcab7729b7e303e6ba36078d72e47d5a1284fb112d227b,2025-10-02T17:11:46.033000 @@ -307624,7 +307639,7 @@ CVE-2025-5425,0,0,f606444a1d6aa9ebb0d9abea2da121b7bac702d032e173b190d1683a8bbeac CVE-2025-54250,0,0,5d7d14eea431d6f9af5df0ba39de37c708df52a1d175a38b836e6dd3b7055c11,2025-09-12T14:22:03.050000 CVE-2025-54251,0,0,4ce752a05ab511d528b881d205938727a7eb725d731aa10624c126f94bac254e,2025-10-02T14:43:16.193000 CVE-2025-54252,0,0,a42912188b8956f153047cd429f289ac7b403e0ba87b1df2e1eb088d38746304,2025-09-12T14:14:17.757000 -CVE-2025-54253,0,0,7c3560a4b9c538cb37358cdb88e3d44282ca116b7a45294a3aec5faa3808f930,2025-10-16T01:00:02.173000 +CVE-2025-54253,0,1,077748f1f274b8000575b9b3d35cabb9ebb244e64f0bb56697a96ace72ea49bc,2025-10-16T19:15:33.173000 CVE-2025-54254,0,0,fddd4a096ebc3d8110f5cf8dcce49f0cee54062522e30cfe460fccbbd8fb3157,2025-10-02T19:17:17.147000 CVE-2025-54255,0,0,3701eeb31860a6d701dc3724f6939cd1aa957fe1ea66fdda43284c8b2de5e33d,2025-10-02T14:43:43.207000 CVE-2025-54256,0,0,23ec5a8cffbc2658c9f03e924e214c30831b8a701f5d87adbb570730c8fa9be0,2025-09-15T14:20:49.737000 @@ -307657,8 +307672,8 @@ CVE-2025-5428,0,0,2e7c423ec5ae3bf4368570058331740a674fc62a4682da3d065e5fa91ab978 CVE-2025-54280,0,0,0286069725a345e85fd5093b524c18cc595b6c2e6aa6357b3be622d8b34119a8,2025-10-14T20:20:39.933000 CVE-2025-54281,0,0,042d4c27272db546b7c19f366daefb8322f045f37045fb3a1c7d6c1fdbd34a03,2025-10-16T15:29:11.563000 CVE-2025-54282,0,0,9dd76ed13d1e392951c28d7ace983722b62dc80b487b8935d9e0f556e64d7263,2025-10-16T15:29:11.563000 -CVE-2025-54283,0,1,3c0fb3526f605ccc8b79c6318e6dfda9ebce9e0a2e7b22cbdea80a50feceed9f,2025-10-16T17:40:03.267000 -CVE-2025-54284,0,1,87556d97a5c0841b389c20edaeaaecbed446cf3125cde84ab4767e783986710c,2025-10-16T17:40:05.930000 +CVE-2025-54283,0,0,3c0fb3526f605ccc8b79c6318e6dfda9ebce9e0a2e7b22cbdea80a50feceed9f,2025-10-16T17:40:03.267000 +CVE-2025-54284,0,0,87556d97a5c0841b389c20edaeaaecbed446cf3125cde84ab4767e783986710c,2025-10-16T17:40:05.930000 CVE-2025-54286,0,0,6e4874188e343bacfbd24a38ab96025a82dffd1afe935e5d4c579cb5860ea7b3,2025-10-02T19:11:46.753000 CVE-2025-54287,0,0,a1ccbce2cd0efaf066940bebb6e1bc51b62de507d03221ffa4405b33b6f2a241,2025-10-02T19:11:46.753000 CVE-2025-54288,0,0,193659f7c7151180dbfb6df290bd6690433c423c71ba76d509449604c3c82da0,2025-10-02T19:11:46.753000 @@ -307945,7 +307960,7 @@ CVE-2025-54654,0,0,8ec850b5efd04b4d19ecfe476eeb59cbf1a9124dfcf91f59d5b72a65a838b CVE-2025-54655,0,0,00c22dc6d6a4c275776fa6f4652844086196178527bf3235081c4ff46bf5ea08,2025-08-20T19:02:57.447000 CVE-2025-54656,0,0,c0d991d561ead9b690513e87f76b2d8430d391e64cc44918ecc6fce5d254eb3c,2025-08-06T13:52:03.277000 CVE-2025-54657,0,0,ce5e9302df1f80ca8890a55b600508732690dc5fec9f25e06292f5311ad76efc,2025-08-01T04:16:18.450000 -CVE-2025-54658,0,1,9c1cbe3bf71ae93cb315b61f51ea2e21f5d4656db794b8d18f25640af19538e8,2025-10-16T17:54:26.570000 +CVE-2025-54658,0,0,9c1cbe3bf71ae93cb315b61f51ea2e21f5d4656db794b8d18f25640af19538e8,2025-10-16T17:54:26.570000 CVE-2025-5466,0,0,56648f8f300986eac47708e2ca00e536926e43370f1e29f35b96be8e58ab4958,2025-09-23T18:18:59.357000 CVE-2025-54661,0,0,e812545bbd81261a21ad4f7bfb9bded32cc8e6329c77144c1e4482ecad428c57,2025-07-29T03:15:22.170000 CVE-2025-54662,0,0,b9072bdd9eef15273d8e7c40f521eadfc1b5e456686f0bfb696278bfa78511fa,2025-07-29T03:15:22.340000 @@ -308256,7 +308271,7 @@ CVE-2025-55030,0,0,ca985941ce7eb9c67183e7173b41715f4e6ae1d19e946350a894f4f8639dc CVE-2025-55031,0,0,ebaa082cf23b2c4163e4de66622ae080c7a775631c685de9d8ba0539e84150d9,2025-08-21T18:38:56.970000 CVE-2025-55032,0,0,23cb2ea9e5644cb334c008dc0e0920106c71afdf3c8374f44927c2ee534e613e,2025-08-21T18:38:45.300000 CVE-2025-55033,0,0,83bcabc94bf7d9e28c78fbee18d193a20b71b0a22a04b830e8a3972f512cb9eb,2025-08-21T18:38:38.157000 -CVE-2025-55035,1,1,53f9f2e2192b3733a4341f2b98a9f077ec7fa226eec148bf419cf22afe8f83ad,2025-10-16T16:15:38.403000 +CVE-2025-55035,0,0,53f9f2e2192b3733a4341f2b98a9f077ec7fa226eec148bf419cf22afe8f83ad,2025-10-16T16:15:38.403000 CVE-2025-55036,0,0,c48a7fdb53a4d53a4fce9d45b68cc271a4afc718955e40166c39ec49af28b76e,2025-10-16T15:28:59.610000 CVE-2025-55037,0,0,59cf8ccf676d90c5b9e9833dc60f634e34dad2c0e655047880527eaf86082fd2,2025-09-05T17:47:10.303000 CVE-2025-55038,0,0,7dcae0105c3074685fbac7c86f0a201e0ee14b91432ac38b6aae13cec20cd03a,2025-09-24T18:11:24.520000 @@ -308662,7 +308677,7 @@ CVE-2025-55777,0,0,acf30158407374a02b79b7145c629b7eee037d0c79cad4778f851c178e035 CVE-2025-5578,0,0,32e2b67e097a268e61a1363cf2f541533741f65d29219018b3efd0a9d82e02d7,2025-06-04T18:27:38.557000 CVE-2025-55780,0,0,563004ec91093865198815ea7522323bf223938474199b81eaac8efcc9bf6c76,2025-10-08T18:04:01.977000 CVE-2025-5579,0,0,f50149d8544a2d773348b89ae7f885564e1c15d6fd801a8287e0be610055b816,2025-06-04T18:27:53.140000 -CVE-2025-55795,0,1,5bf7bc5b9d7698f80e0390080a5832f3fcf27bcf1486e60d3ed0b6a0572f5ac4,2025-10-16T17:09:46.393000 +CVE-2025-55795,0,0,5bf7bc5b9d7698f80e0390080a5832f3fcf27bcf1486e60d3ed0b6a0572f5ac4,2025-10-16T17:09:46.393000 CVE-2025-55797,0,0,69f16a3a574d79be17b0bd4ead630aecb65a27985e40eb09ee7faabbadd5d994,2025-10-07T13:37:54.860000 CVE-2025-5580,0,0,5420af4803342beed15a14e9e13364c54154082896c2011e3016de8bff3b1595,2025-06-04T17:43:09.830000 CVE-2025-5581,0,0,c54747d4f47de2d53a0450ac3d2803f6b1ce7f3a8f3dd0d32c7ea29ca0ea8be0,2025-06-04T17:44:44.413000 @@ -308854,9 +308869,9 @@ CVE-2025-56689,0,0,a330480617c992e739fb8775f7adce03b22eb5bf05caf97e34fb8794db2b1 CVE-2025-5669,0,0,e41cf90831d0a6cf4929e129e10c87880a3b230cc5343d610b4f26d94c5ca251,2025-06-06T19:39:31.743000 CVE-2025-56694,0,0,66c4c1933977daccaee8bbfc5e4ab825b13d9c3028ac16b644f5a2a39a4e095c,2025-09-09T18:54:28.603000 CVE-2025-56697,0,0,599237228dbaee3493f59730b4d620c4ada9ad0e2a88e48c36cb6a0cb8728eda,2025-09-18T16:49:00.817000 -CVE-2025-56699,1,1,90cef4c29597ff79a210521a36e6356754ba111030da6ba92e2688c98183d7b6,2025-10-16T17:15:34.157000 +CVE-2025-56699,0,0,90cef4c29597ff79a210521a36e6356754ba111030da6ba92e2688c98183d7b6,2025-10-16T17:15:34.157000 CVE-2025-5670,0,0,aa088ba5a44773ff1366ed76955e38f916db102440b97c97a352678ba98d3d07,2025-06-06T19:40:14.910000 -CVE-2025-56700,1,1,a11235ce7198a5aa8dff6f8a8496afd57296d32d310ebcddbf690f86ad6e8d4e,2025-10-16T17:15:34.290000 +CVE-2025-56700,0,0,a11235ce7198a5aa8dff6f8a8496afd57296d32d310ebcddbf690f86ad6e8d4e,2025-10-16T17:15:34.290000 CVE-2025-56706,0,0,99f79a27038351969ec9e09f7d9092897e579e8af3a32df77b9e2abe5959bdca,2025-09-19T20:57:13.170000 CVE-2025-5671,0,0,4d3cd97f4e471e0634ad0468d82d964946fce10f021954a28836644f31117f5f,2025-06-17T20:38:46.383000 CVE-2025-56710,0,0,061bcab608d32eb37f8ba6c8b415b9d8b7974d0fa6c5a6622444c82d97637dea,2025-09-20T02:51:37.760000 @@ -308881,7 +308896,7 @@ CVE-2025-5679,0,0,39a76065dd3011f556df8ecc5c1607529488c249cbea269aa42dbb97296654 CVE-2025-56795,0,0,4f235428c4f13cab56fead7206e527ce2bd2f1b7f61ea3c6ee9181d03cc1b667,2025-10-16T15:42:33.617000 CVE-2025-5680,0,0,951e9727eb6f85cb1826e5addda531b5a3ed92e200dcd69a9572852fb51b7dd6,2025-06-06T14:07:28.330000 CVE-2025-56803,0,0,e204236e38e23de0500b842169e0fc177fb410f193e1aaf81d3d07a4b150df22,2025-09-26T14:02:46.583000 -CVE-2025-56807,0,1,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000 +CVE-2025-56807,0,0,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000 CVE-2025-5681,0,0,70eb3560f9b0a9adf9942c00bab52f4c30008d3472df352a3b27a6a516747773,2025-07-22T13:06:07.260000 CVE-2025-56815,0,0,9df458b35aa8366ce4d8b254c50e85e7a8022939e16bb0a01554bd56fc2fabad,2025-10-10T21:07:03.727000 CVE-2025-56816,0,0,2f06f87a2695a031d783a1d871e1af0fecc1209a11d2b87b66c28218a4a9683d,2025-10-10T21:06:27.993000 @@ -309000,7 +309015,7 @@ CVE-2025-57321,0,0,5d6d8e6b1de98b7045fba389e360cc0b2544e82dbcf20bd3ccb0fd5910125 CVE-2025-57323,0,0,d52c227fd0882b4894b8510dfbd0469d1739bf4a4601b04555ae34d3c7d42174,2025-09-26T14:32:53.583000 CVE-2025-57324,0,0,70d50248f1c6b7cd03a90c6af70d7bb45a1454ef129aadde57eeed82176337f2,2025-10-16T15:48:57.257000 CVE-2025-57325,0,0,bf69f7cc2f60fbbb2d46361267e7a7c17d849ee880c3f62a9d19b2d78293bf70,2025-09-26T18:15:36.800000 -CVE-2025-57326,0,1,4d645f75ec59c88ee861869bf36c0a85a702c228e31a38d22d8591b7e1ec8e72,2025-10-16T16:23:24.223000 +CVE-2025-57326,0,0,4d645f75ec59c88ee861869bf36c0a85a702c228e31a38d22d8591b7e1ec8e72,2025-10-16T16:23:24.223000 CVE-2025-57327,0,0,334b6c5c09bf0e01e3012455254822dd9adb5f63cc2cc213ced767c095b3490f,2025-09-26T18:15:37.130000 CVE-2025-57328,0,0,30ccba7bd5a377e625f3b40f609962c146b2eec0c3d0c6597f173c0c3090a660,2025-09-29T18:15:33.090000 CVE-2025-57329,0,0,7e7ee02d6a8f5c5d094ad20e71a1d9ff2cee29b1e48668fe63a79c0f2848e087,2025-09-26T18:15:37.297000 @@ -309419,9 +309434,9 @@ CVE-2025-58047,0,0,07f0ad64f2d29d9cc02b9d53c1df0558cff13be2434f5944482a417788563 CVE-2025-58048,0,0,f7eb8c28c89a8e6253483a0298f2dcb1d1e86bdbfa77d09fe6360b806c2b49d3,2025-08-29T16:24:29.730000 CVE-2025-58049,0,0,fba18b17a86eea73f9dcca28d3494eff9a4c6bb198bd161f3ce7196aad121edb,2025-09-02T17:34:25.467000 CVE-2025-58050,0,0,34e327399f8157a8abc317053cf1f3ff949442bc6c6a2681baf8b1158b9824ef,2025-09-09T15:27:39.573000 -CVE-2025-58051,1,1,6a436d2e4274539c636f68be0925c366db2e12df51c0fdf7442eb5a82d91cdb5,2025-10-16T17:15:34.417000 +CVE-2025-58051,0,0,6a436d2e4274539c636f68be0925c366db2e12df51c0fdf7442eb5a82d91cdb5,2025-10-16T17:15:34.417000 CVE-2025-58054,0,0,e3c741f62592ccb560959cb058f1a4bdf784e6dbee565f4c62666ce8b679f666,2025-10-02T19:11:46.753000 -CVE-2025-58055,0,1,ea796bd9e13aed1511ff6f61cc4edaf3ec5aac379135f368b7ef46394c3fbcd4,2025-10-16T17:31:09.430000 +CVE-2025-58055,0,0,ea796bd9e13aed1511ff6f61cc4edaf3ec5aac379135f368b7ef46394c3fbcd4,2025-10-16T17:31:09.430000 CVE-2025-58056,0,0,b064e372234c8ec646b7b4071539930babc807ee77033f080ea806cbec265988,2025-09-08T16:46:36.847000 CVE-2025-58057,0,0,2111838e2aab7b62e3ed4da19dd20861a5012827b00f9ea00eb11186fb54ff0a,2025-09-08T16:45:55.143000 CVE-2025-58058,0,0,3fbabf6b455719009dac1ec0611bbbbd1c2294130d14d9e89bee9d3e2ecbe96e,2025-08-29T16:24:29.730000 @@ -309619,8 +309634,8 @@ CVE-2025-58319,0,0,f064bb592408ccaedce79e97d082325cda482a7e111e7af8be7c97962f8ba CVE-2025-5832,0,0,6bd5950d86f819d12454e9671800b2f6b811c3a961044ec988616ce44c7d917a,2025-07-08T14:52:30.267000 CVE-2025-58320,0,0,d0c3c6ad02e3fb8808603fd60ae480c0a9f6c7a2f978c8b17a8374806b1851f7,2025-09-26T14:43:41.973000 CVE-2025-58321,0,0,c09b76f45bd8a3b0369cf584ec9d269268a00412ee770b5b3237547eabf3444f,2025-09-26T14:43:15.530000 -CVE-2025-58322,0,0,b142598f07dd24d32291b32905ce106eb0bc6ce7c9dd058e7851b9f98dcb0262,2025-09-12T16:18:51.570000 -CVE-2025-58323,0,0,c64b051ef3691918a03b53f48240f097fca1bd460f67b1b35945042b21370298,2025-08-29T17:15:36.027000 +CVE-2025-58322,0,1,17a2fb543b14e8aa8fdb1b4b9ae1ba4d73c188e8e7822aa74cd9969075c3e237,2025-10-16T19:14:18.680000 +CVE-2025-58323,0,1,08f0b75b719b23a0e325a549c9e7dc832fac7e4f8fe467ba3e0c0138fa7ff77b,2025-10-16T19:09:30 CVE-2025-58324,0,0,b8d50289a0f80a0fb89b134321567822a33c0b028c10e7d4330eaefb670c629a,2025-10-14T20:25:09.460000 CVE-2025-58325,0,0,5d6dd65964f5ee893ddddeabbd4f293267e9d6722ca98bd8641aee3cb8221045,2025-10-14T20:22:50.327000 CVE-2025-58326,0,0,d607cbfdc4e4e233f311261f50d3e81e939b66a3f6f418f11794dfc52cefa251,2025-08-29T03:15:39.497000 @@ -309870,15 +309885,15 @@ CVE-2025-58727,0,0,5acb145aacba2b6ca36e23d3cc8a10c95ea2863654b0234d24c589a68d5a1 CVE-2025-58728,0,0,816ddb258f653665d04333b53d50d4944d686cf4071ca2982db40ef723d9159a,2025-10-14T19:35:56.913000 CVE-2025-58729,0,0,cc718dcec0f2aae0b8ac15c3b1487d4cb09da6523c651bac00ec05de9a2bf9af,2025-10-14T19:35:56.913000 CVE-2025-5873,0,0,94e40892e1834c35ffd2c63a40f58e3bdf2ff473f557d19637cf12f248462e7f,2025-06-09T12:15:47.880000 -CVE-2025-58730,0,0,ef204e1022a2f1796b39791940626cd42f9b4f7725b5e5226b2f6f03b261c097,2025-10-14T19:35:56.913000 -CVE-2025-58731,0,0,1266cc923ecf5784a7da06d029b5796fe73eb1cb9d0598c0fd81281e7c4f9e42,2025-10-14T19:35:56.913000 -CVE-2025-58732,0,0,ad74193b23ac3414e7032f8ca47ee0fd85ef282f45640ec61fa009a9e7918960,2025-10-14T19:35:56.913000 -CVE-2025-58733,0,0,4e2cc4a49ac4d26deb81538469f573f5fba305eb2336cb38b899b071458a15b3,2025-10-14T19:35:56.913000 -CVE-2025-58734,0,0,8a22f562bfd5261f176eb12c32153ed10fb94562907dc3e8b748cb40ca39d2d7,2025-10-14T19:35:56.913000 -CVE-2025-58735,0,0,f28bf94bc11edb1a018acdd8af642a89ad64fceb332a6c40175dae6ba0c15b04,2025-10-14T19:35:56.913000 -CVE-2025-58736,0,0,aa204ba25907e5c22b74432e5105599da90b7d32b56e128b64560ffc675492c8,2025-10-14T19:35:56.913000 -CVE-2025-58737,0,0,e3782b46faaf188e0b9186c0573c067feee1105d2516d9bb2df9e97dfc8ff679,2025-10-14T19:35:56.913000 -CVE-2025-58738,0,0,558f3761835be9d8c3d90434dbcbf2601f0f7fb02badf193f8e7bed8668b78d7,2025-10-14T19:35:56.913000 +CVE-2025-58730,0,1,353a7f6416af8403dd79f6b14c359f3090cc462e2d6d9ba27c94956e709a032a,2025-10-16T19:56:24.070000 +CVE-2025-58731,0,1,1eeeea6df072cad548b39e226aeea8c6f6d3e37634c05ce0bec3eb502a9eafe9,2025-10-16T19:58:17.940000 +CVE-2025-58732,0,1,2736354b7c4967e20f78c99dfa69ca169ee5c428be590b2f00211473429bddea,2025-10-16T19:58:32.653000 +CVE-2025-58733,0,1,d7993be4123e4b46ad92fd95dcbaabfcfe8d1952898cf7719813584176d6a56e,2025-10-16T19:58:43.147000 +CVE-2025-58734,0,1,2913c9b159a888b130582d6066f497e4b0c787b4ba819e7888b6a5d4554f2990,2025-10-16T19:58:53.950000 +CVE-2025-58735,0,1,566a0d2542cedd1962f716c989b8ea673330b112e77baa6ba7a5bf9dad187619,2025-10-16T19:59:07.647000 +CVE-2025-58736,0,1,d1dfed22de2005f04393110ce65a54a6cf37d6d6403cd72a33bd44b49165356a,2025-10-16T19:59:18.437000 +CVE-2025-58737,0,1,2dde2cbdb1cef2065b89357acf3cf6c4eefcbefc81ee4be35f9736ce8c65bf1b,2025-10-16T19:55:18.817000 +CVE-2025-58738,0,1,711a96a55768c2dfb12dd1c33bf8eab504ebf8fe9d3ad69d47f3000c0713c95d,2025-10-16T19:55:39.060000 CVE-2025-58739,0,0,2a7ef670dae7ceefb47df1407d800c9d1ec0d4c30b734f8844aef32ad22c1417,2025-10-14T19:35:56.913000 CVE-2025-5874,0,0,1e20b639cf19f92a2e3f3b2367512cff62f15ef9c1ae1e85ff69181f44059d9f,2025-07-16T15:15:33.237000 CVE-2025-58745,0,0,4236cb2e6ae99175db7783ca260c12c58485219d01ef1fdd79187ed53f87e2aa,2025-09-17T16:24:10.920000 @@ -310276,7 +310291,7 @@ CVE-2025-59333,0,0,f2412783d0f1cc9efefac0a8752469d30a79758ab37ea7165fa76760d9633 CVE-2025-59334,0,0,434012cad70bebf7a36237955dd54bf4d6e0e8a17e1458f8cb2913e28327439a,2025-10-08T19:16:13.530000 CVE-2025-59335,0,0,87f9fc8128a2f797a6b1a347181187d2e5d3d8472a04802d64b563ddce076a70,2025-09-23T16:51:42.487000 CVE-2025-59336,0,0,cf372aa2529344266b2c23088c3be1101076100796b736c4fdc862f1918941ed,2025-09-17T14:18:55.093000 -CVE-2025-59337,0,1,bc341984145ac5260860dbe16414f0cca84e081353a9517b0356f483bc8f5e78,2025-10-16T17:33:47.987000 +CVE-2025-59337,0,0,bc341984145ac5260860dbe16414f0cca84e081353a9517b0356f483bc8f5e78,2025-10-16T17:33:47.987000 CVE-2025-59339,0,0,615f5af4da5dad3f9d87788762cf6dd4badbee4ea78ee30d4b0cc2eb807a4916,2025-09-18T13:43:34.310000 CVE-2025-5934,0,0,2b04aea49be1b2e817d664c8d52ff126b146b95757a60bd9875f5715a4755cac,2025-06-20T13:11:11.560000 CVE-2025-59340,0,0,f23468004e6a51ebb87257205c2b5912145fd53a5711047e15fe558cddee465f,2025-09-26T13:11:40.227000 @@ -310338,7 +310353,7 @@ CVE-2025-59420,0,0,a8eb203aa7bd4b6ff6874d35dd6f3f16b9708151a4d6066eba73a3e904e65 CVE-2025-59421,0,0,06f8033ed00364ab2174cb9f00d79ee39eb91b94be08c069ed5c67de2c8c2fbe,2025-09-19T16:00:27.847000 CVE-2025-59422,0,0,9f853df8244cdacab35ff9703cf4a15f884700afff8e9235bc7640a69221508d,2025-10-14T14:10:41.773000 CVE-2025-59424,0,0,87b017a41f49e0e288fd06b2d4e2fe7123b886497fa99003b1341f95c8b16ee6,2025-10-06T15:03:32.200000 -CVE-2025-59425,0,0,5cc505b5f034f130e02c2336bacc0ba613eb60bd5eb22ee9d93edd3be3913091,2025-10-08T19:38:32.610000 +CVE-2025-59425,0,1,c7c675daac51e5149aac801f59c1340915b06d1cf9c034e8edd572e572604b52,2025-10-16T18:02:09.260000 CVE-2025-59426,0,0,9ac4afcc6d8ee6a2baf50d3f83baf5938a4a695583262832aa496824611d2f0a,2025-10-08T16:11:34.600000 CVE-2025-59427,0,0,3f98c566064c7cc542185b0f3d2d0c5d985a90de18d235f0f38b27e06fb961ef,2025-09-22T21:23:01.543000 CVE-2025-59428,0,0,d9b19cccd7c4813b1fe1cccd4fd3f2feb6ba60afccc310aeed4a47ef87a33826,2025-10-14T19:36:29.240000 @@ -310605,14 +310620,14 @@ CVE-2025-59933,0,0,d2b803bc5ab383fde15806f308cc5faf0331e41ec2f015a333bb79d8fe2fb CVE-2025-59934,0,0,26bf7f4b92d6b9df5758d287141c93fb70a86bcf148ca049117ba42ce6902a60,2025-09-29T19:34:10.030000 CVE-2025-59936,0,0,b7ad9b54e7205fe51a83c138a372c35d508012d5b15c1cb34c683d08fc78d79f,2025-09-29T19:34:10.030000 CVE-2025-59937,0,0,37e0d74b5f290c4471c01fdb7d740bc69dd3ec7a88c9aeeebe603b325f4b4f06,2025-10-16T15:55:27.077000 -CVE-2025-59938,0,1,f736d25e42ed3a7db983630b43192d9d0b9405109f80580f11e2a227d217abf2,2025-10-16T17:33:38.680000 +CVE-2025-59938,0,0,f736d25e42ed3a7db983630b43192d9d0b9405109f80580f11e2a227d217abf2,2025-10-16T17:33:38.680000 CVE-2025-59939,0,0,b9a0748ec5c4a8c9757c6f43685e62942e44ed0765396a35a566ee31825ae7f9,2025-10-06T15:05:36.037000 CVE-2025-5994,0,0,a4f5e64804f10a921e7e8d759a2aff97026d6f6450665bbb84fe345d2840e713,2025-07-17T21:15:50.197000 CVE-2025-59940,0,0,b48d9835a3b96b0de28289fe3e53a68ed7b192889f1d8c30d027fdadfca2c49d,2025-10-02T19:12:42.843000 CVE-2025-59941,0,0,a35e7a297823bf9d19475953ce94b7e618da6bcd88223cf7fa7d0708f6be0af3,2025-10-02T19:12:42.843000 CVE-2025-59942,0,0,e35ab594396b3ea8f7b74bef0f07594b7bc8e9cdd835ef37c893d746541a90e1,2025-10-02T19:12:42.843000 CVE-2025-59943,0,0,b05e2ec36630d138990f2f76363f403857679e3172bc4909fe911bd419ff3182,2025-10-10T16:35:13.803000 -CVE-2025-59944,0,0,bf0bba31686f27c3699a792f7e795875dfb929b8d08b48154ae1e5a1b2042d91,2025-10-06T14:56:47.823000 +CVE-2025-59944,0,1,35057af67ac9cda9c45b5d7032cd3d066b19b9312b95ed90d934f7358f4df23b,2025-10-16T18:16:19.257000 CVE-2025-59945,0,0,3885e093720b3090887933fb01911413dfe90c7d8f7e1e5e5af2ed13c84e8fbd,2025-09-29T19:34:10.030000 CVE-2025-59948,0,0,3adddcefc0650f154d3e6727d5cbb99f561fe927cedad42cb37ac17aae594dd2,2025-10-03T15:55:15.470000 CVE-2025-5995,0,0,e0a95e1875ad143ee49273c882884536a042b40281445da0f88771ec39f3e3b5,2025-06-30T18:39:09.973000 @@ -310853,7 +310868,9 @@ CVE-2025-6060,0,0,8fb2d49bf3d6b5b4debbbc6f2bc049d8663af7830ab48c9abfd07d9ab17e55 CVE-2025-6061,0,0,1e4ad2c51e11b85a0411cc0ba0a247fef015fe294ab3ff30c502f60f1836c736,2025-06-16T12:32:18.840000 CVE-2025-6062,0,0,5bf9e4ece70cbb53a8f33b39f23213ffcbb9e338a70925ebae7177b4c0441131,2025-06-16T12:32:18.840000 CVE-2025-6063,0,0,4b692343ef267dff5c6a1fea04bb04a19ebd1cc0cba19e4fc7878765a9d82379,2025-06-16T12:32:18.840000 +CVE-2025-60639,1,1,b462a66031a856d115e6b2fc9e91a0848db7895e3d8609d12dc5204a677ab867,2025-10-16T18:15:37.053000 CVE-2025-6064,0,0,979f98e59c93c3db1b1e3d8ca32b91237e3a41952bd15c0b929b60ca805f9fcb,2025-06-16T12:32:18.840000 +CVE-2025-60641,1,1,86b051566d275773b5c1505164042db9d34e34cb11006980e883c93d8946b2ef,2025-10-16T18:15:37.183000 CVE-2025-6065,0,0,b54a72f9a0b99c16c66aef6c3f604cf5fb2ce5dc53cfc18dad9d67742adfbf62,2025-06-16T12:32:18.840000 CVE-2025-60660,0,0,0dce86c03bbd71803c0923a2439f5a8dd3d3ea4ecdc093e2a16dea62bb7a294d,2025-10-07T17:44:17.803000 CVE-2025-60661,0,0,09f1ce487624bc71084f9762dc5ed981dbaf3c9b8a657c48c26285fec20ad99b,2025-10-07T17:30:13.020000 @@ -310883,11 +310900,12 @@ CVE-2025-60833,0,0,0703b46a8cc62fd54a76a58f3ddfe3eea91f50329fcfa28fc60ac6cbaf1f0 CVE-2025-60834,0,0,80afdf7145390154b73c4b80feefc171583fdb3720f2f9c4f10cad7d96f423b9,2025-10-10T16:16:03.993000 CVE-2025-60838,0,0,04d9fdabb1c04c359f95ad5acdf1b0436bf8019c4b64fd10e1d34948e7329e10,2025-10-14T19:36:59.730000 CVE-2025-6085,0,0,eb2995c74572caedd9ef44b1d5b5318f084f938f661bb32c713b72127690df11,2025-09-04T15:35:29.497000 +CVE-2025-60855,1,1,17342236eb8797ef9a5ce98a014ca519e5ccfde2e4d1292302913a2a61be66fd,2025-10-16T19:15:33.367000 CVE-2025-6086,0,0,5fe71f700a5db4748b73456874508af7453c8bbdad176612b1ae063647fd5c71,2025-06-18T13:46:52.973000 CVE-2025-60868,0,0,95c982ab8e0ca0ccdd9d37ac2822154aa0502eb90eeb5b85347e23681b37639d,2025-10-14T19:36:59.730000 CVE-2025-60869,0,0,6bb062dac2b21d6c5e284aac0762e9c8194360c08da47b11b998d9dfdd14651e,2025-10-14T19:36:59.730000 CVE-2025-6087,0,0,262762a2ff1171ba22253082b0473c34c801e87448d83e2fa6cced2838216eff,2025-08-06T17:21:28.460000 -CVE-2025-6088,0,1,bb74840d06f1a9455cb83ff770796b02c67af5ccbacb4a09b6d7acf1a9109e18,2025-10-16T16:00:19.400000 +CVE-2025-6088,0,0,bb74840d06f1a9455cb83ff770796b02c67af5ccbacb4a09b6d7acf1a9109e18,2025-10-16T16:00:19.400000 CVE-2025-60880,0,0,6a8ac08133fcc552efb04372f4ab2a3fd536f28a1567c0bdc48abc435094cd7d,2025-10-14T19:36:59.730000 CVE-2025-6089,0,0,aa83c2709521312e3401dbda2e76aa38d9a30d639029a9e31a096547472bfbf3,2025-06-16T12:32:18.840000 CVE-2025-6090,0,0,b3117a09e99636e6b75c3bc4d007c4d35a7e4b86fe6bea5755369be96bc4e108,2025-06-16T12:32:18.840000 @@ -310959,6 +310977,7 @@ CVE-2025-6131,0,0,6f1cea030a31f2519875047d61f0e5d882cc8047163f80b30c42340b2c29d1 CVE-2025-61319,0,0,57eb5397c16b386bba6dfe958f4660a4e7134467d8425cb1b3afa2f13967850a,2025-10-14T19:36:59.730000 CVE-2025-6132,0,0,4820b926dce549d59ace28c44f962f1b682b6ad27fe3050ad7fcb6e14d23357a,2025-06-17T20:50:23.507000 CVE-2025-6133,0,0,e8ce544a9effd7cb8b54da22c642c5245af611c0276c41dc8559e4d5a610718a,2025-06-24T19:44:40.803000 +CVE-2025-61330,1,1,89678b57d0f29457b8ddd135992b2e67a5f55494987499a07d3d9c829e0526be,2025-10-16T18:15:37.313000 CVE-2025-6134,0,0,8a23584764f618ffd2d4995a9b4d16e5d5cdabc35d0090302e1cb1d8481cb193,2025-06-26T16:46:43.547000 CVE-2025-6135,0,0,506099148e534a57e74eec0360b5146bb6d16f5700b5c048c16b15d25659f5e9,2025-06-26T16:44:08.650000 CVE-2025-6136,0,0,5f7e8be2da42633353469049b7512fa5d07106f6da9174f3722e62acbd430a92,2025-06-26T16:37:17.293000 @@ -310978,17 +310997,19 @@ CVE-2025-6149,0,0,bfa9b70c74b833d4b13edc2b8c0deb75557d095959799446cbc897b529f453 CVE-2025-6150,0,0,1c1c8c9840248db413992659480d6a0621f81bf1fb34376aa4877ba8e62a64a5,2025-06-23T19:28:18.330000 CVE-2025-61505,0,0,0c66776f2806e1b01d848cbd66a36a8f662069c49af360e637446fa40f3b4d6a,2025-10-14T19:36:59.730000 CVE-2025-6151,0,0,81c8c986426ef5add5078a31bf9b72a21a8fc9c9b9d64f4a3fd512709c61fce3,2025-07-15T19:15:23.380000 +CVE-2025-61514,1,1,68e464f3deeefae638ae68e44786d1f2333bec6f5b5fd1d33060b72b3ace3a88,2025-10-16T19:15:33.500000 CVE-2025-6152,0,0,32d4186f036cfff413fb083fa82eb785e9512523c1a40900c862dc16e87a29b7,2025-07-02T19:47:02.363000 CVE-2025-61524,0,0,134db7ba97f72b191c7e45537cf81e320f87f962041d4d4fbb557486929b99e8,2025-10-14T15:16:12.137000 CVE-2025-6153,0,0,9cb391bc0c728a51d1642ebf8a165fb9af8fa2212048ca86e4445e0b055258b3,2025-06-24T15:53:37.673000 CVE-2025-61532,0,0,e7a290358756e9127a32ed9c8f50bba0d0ac288690c97b804555c1374cb0b0da,2025-10-14T19:37:28.107000 -CVE-2025-61536,0,1,d0b5dd5782c85245f52aa62d79eb800aa67abdcfcb9c3092abe52ebe7ce6418b,2025-10-16T16:15:38.920000 +CVE-2025-61536,0,0,d0b5dd5782c85245f52aa62d79eb800aa67abdcfcb9c3092abe52ebe7ce6418b,2025-10-16T16:15:38.920000 CVE-2025-61539,0,0,558d84a8e57eec958fc461de2677f3d9063613d5228aefd0b01e32f448251f70,2025-10-16T15:28:59.610000 CVE-2025-6154,0,0,95060072831785f3ed57ae597e6cc6e6409b897d7a65ff870ebacbcf6fb1f450,2025-06-24T15:53:35.847000 -CVE-2025-61540,0,1,117e6b407e6a87c50f788a4af50352cd56041e407347339cede119286b529359,2025-10-16T16:15:39.103000 -CVE-2025-61541,0,0,394cfbb359633137db504ab7e8733b11db672a16fe50743452d3de540aaeb38c,2025-10-16T15:28:59.610000 -CVE-2025-61543,0,0,07fede3877109a1f9eff96cb10aa4e751528112a3430d514aa785131260b9cb5,2025-10-16T15:28:59.610000 +CVE-2025-61540,0,0,117e6b407e6a87c50f788a4af50352cd56041e407347339cede119286b529359,2025-10-16T16:15:39.103000 +CVE-2025-61541,0,1,36e8c0a8736d476405205231c1ffeff51dc90ff0a095de8e705ef6152dd52477,2025-10-16T19:15:33.633000 +CVE-2025-61543,0,1,5d73bbe752ab0ad1268e95f5eddec843dfa72aceb75d827dcbd6cf11804bfb8d,2025-10-16T19:15:33.817000 CVE-2025-6155,0,0,3e8fc69cbf51a07d93c7df9f9e6e4b66e36cc96b90ecd10cbf6a0ab1b9592e90,2025-06-24T15:53:33.717000 +CVE-2025-61553,1,1,301fa75203376b5b3af312b523fc6881c648425ff609daf38b01d803f2fd64ec,2025-10-16T19:15:33.983000 CVE-2025-6156,0,0,50bad226a589479fea329c4b9ea16aa953872a48df791a98c47ba27f5989fe25,2025-06-24T15:52:28.587000 CVE-2025-6157,0,0,180c03ace223f2bdc4a4810f873bfe6ccf5f7edb279d8977a5782cbd3224fa72,2025-06-24T15:52:26.320000 CVE-2025-61577,0,0,869efeae9c80325dd3197d4ffd8fb620f9e79b8ea84a113c3e73e3a246aee240,2025-10-14T19:37:28.107000 @@ -311051,7 +311072,7 @@ CVE-2025-6168,0,0,c225bc50377b065248a75a7509e6959d546e8d379252da8e627b56c288f669 CVE-2025-61680,0,0,8433d6ed7564d782b5f3fed11f44b9f55668596a9b2f01000e0312773caba654,2025-10-06T14:56:47.823000 CVE-2025-61681,0,0,81c9665e56f28e5710d0e79d7d5ae82ca3a82c00c7a38de4f4d60fcde6cd8336,2025-10-06T14:56:47.823000 CVE-2025-61685,0,0,d765c31affbe733c63016b43fee46ac87a0a78c14769fc743cf5e7a98398acbf,2025-10-06T14:56:47.823000 -CVE-2025-61687,0,0,cd8e1ab721d2f9f842e4b18c247e2268af3138ef698212d59316ad88d29d5cee,2025-10-08T19:38:32.610000 +CVE-2025-61687,0,1,d52dfebb06557d364c4bc5b9c02a8fb17dde7f0fed5711be40e9db7ece59e552,2025-10-16T18:12:37.330000 CVE-2025-61688,0,0,b5dbfc42427da55400d11d5aea8ee377f5e804667a5655bd7072768817ebbecd,2025-10-14T19:36:29.240000 CVE-2025-61689,0,0,525d7834860488edd0fafb27c9044d29d61bd2f93ce0f571e587b89032d865dc,2025-10-14T19:36:59.730000 CVE-2025-6169,0,0,24b56c63dd5c2b9799043dae6dc3b75a3e06e9ee630be707f681a9bb09cd5b58,2025-06-16T12:32:18.840000 @@ -311093,26 +311114,26 @@ CVE-2025-61779,0,0,1f288e8d2cc5d1009af6d1fefa8c1c7806f30fdca97352272e804611b92ac CVE-2025-61780,0,0,59cf0104f72a8f24444f537688c0814ada099da15ab842de9ceba2f4fa226ace,2025-10-14T19:36:59.730000 CVE-2025-61783,0,0,0da91f48f8ebc87f62b3cd8ba63d89af32297ba6076179e947656f4adda4a0f8,2025-10-15T20:15:36.510000 CVE-2025-61784,0,0,e1e8c536c9a7e38cc6460bddbcb69f4726e9f8b56df04cecd776dc301cf99971,2025-10-08T19:38:09.863000 -CVE-2025-61785,0,0,d9a0b868256b2f4204211686bd0eaf898d4af0e07389373f544c54500f292549,2025-10-08T19:38:09.863000 -CVE-2025-61786,0,0,6ebe917fc500f8affd4a28324b66c0c34f9e0ad0cd7d5fdc2276ecb7355afad4,2025-10-08T19:38:09.863000 -CVE-2025-61787,0,0,6c640592f0d5646dbfac096187cdfbcee71daea18ba6b2642072a8c67707a52c,2025-10-08T19:38:09.863000 +CVE-2025-61785,0,1,e96f50e12496baf461d52d3f602c2d1602f6af7671f7d0af9c15391baa724ecd,2025-10-16T18:12:40.397000 +CVE-2025-61786,0,1,331f55eeb6b394990244414d6c6854ef1da75d8e41f547d90478f87554782c24,2025-10-16T18:13:38.117000 +CVE-2025-61787,0,1,04c08e0aaaa70e29a27221f18e35de1d03b53aedcc4eb6fdf71c13fb54f68d99,2025-10-16T18:14:53.107000 CVE-2025-61788,0,0,fed9c6b461b0d1e068bdb04cc814a383d8045494c1e66ed07a12bcad9a297fff,2025-10-09T16:00:05.127000 -CVE-2025-61789,1,1,71a89a361610bd2b066500aedaeb9ac082528e8580e883131f1b0f721e0216ae,2025-10-16T17:15:34.590000 +CVE-2025-61789,0,0,71a89a361610bd2b066500aedaeb9ac082528e8580e883131f1b0f721e0216ae,2025-10-16T17:15:34.590000 CVE-2025-6179,0,0,42334162f4ea7781bf58c27d11fa5142617025c2a62fd9b39e81ec90028c3d21,2025-07-02T18:23:31.617000 CVE-2025-61792,0,0,2d81837b8db91957cbf8cb7e5af56a909ca7552e48a8d4d16334be98a8c77756,2025-10-02T19:12:17.160000 CVE-2025-61796,0,0,28ee0d6885bed94cc682d9d7e27a213ecd7a016c6a2da548434199f2366f5500,2025-10-16T15:29:11.563000 CVE-2025-61797,0,0,f44ac769018c6abe2d03a419fc2a8e78774fd64947bf592ab3e53b8a2cd4edb4,2025-10-16T15:29:11.563000 -CVE-2025-61798,0,1,1e20603884e265f8198252db339a5622e9f64b88c08953be92369d0c53141eb3,2025-10-16T17:38:44.400000 -CVE-2025-61799,0,1,e25a23233b378bef7a5c660310de34b501a2ed0aefbb8eaf2182fb978e80ee8a,2025-10-16T17:38:35.947000 +CVE-2025-61798,0,0,1e20603884e265f8198252db339a5622e9f64b88c08953be92369d0c53141eb3,2025-10-16T17:38:44.400000 +CVE-2025-61799,0,0,e25a23233b378bef7a5c660310de34b501a2ed0aefbb8eaf2182fb978e80ee8a,2025-10-16T17:38:35.947000 CVE-2025-6180,0,0,a9b98af4b353c3c1968752af1e5f23dee17044b07ae494185cc351c018920041,2025-08-22T18:09:17.710000 -CVE-2025-61800,0,1,5cfe556fae444e6aeeaed12e756c2a6b4f6ec056b38daa400309b28be289be91,2025-10-16T17:38:48.240000 -CVE-2025-61801,0,1,477048915600f76ed4f82482c0841d265d05e6e96871cb11e20f3cb2e5828820,2025-10-16T17:38:54.377000 -CVE-2025-61802,0,1,20189bfd24a5942e6851bbae6cce40256d8db4e982ade88c4c62bee70bd8deec,2025-10-16T17:37:13.187000 -CVE-2025-61803,0,1,dcad5c903dda0d0f98521722da43c23a91e13a677c00ba49f7d2dad06f87fef9,2025-10-16T17:37:20.493000 +CVE-2025-61800,0,0,5cfe556fae444e6aeeaed12e756c2a6b4f6ec056b38daa400309b28be289be91,2025-10-16T17:38:48.240000 +CVE-2025-61801,0,0,477048915600f76ed4f82482c0841d265d05e6e96871cb11e20f3cb2e5828820,2025-10-16T17:38:54.377000 +CVE-2025-61802,0,0,20189bfd24a5942e6851bbae6cce40256d8db4e982ade88c4c62bee70bd8deec,2025-10-16T17:37:13.187000 +CVE-2025-61803,0,0,dcad5c903dda0d0f98521722da43c23a91e13a677c00ba49f7d2dad06f87fef9,2025-10-16T17:37:20.493000 CVE-2025-61804,0,0,8557bcc652c4f61ef534821e64aa6f333b5f9679cd972837e411bda6453626d9,2025-10-16T15:29:11.563000 -CVE-2025-61805,0,1,fce4c313bc75335df6a256e45eff32fe487326b5039ec2b536df24cfc04cceca,2025-10-16T17:37:23.793000 -CVE-2025-61806,0,1,51148c85d355c75ba9ed47a7310be1c8f0647cd3d24e27c46e437a22ab80039b,2025-10-16T17:37:26.160000 -CVE-2025-61807,0,1,bef2750bed1c12a21c789be5d1ac1a383d41c818ed4588b47e17adfc33c5e46d,2025-10-16T17:37:33.997000 +CVE-2025-61805,0,0,fce4c313bc75335df6a256e45eff32fe487326b5039ec2b536df24cfc04cceca,2025-10-16T17:37:23.793000 +CVE-2025-61806,0,0,51148c85d355c75ba9ed47a7310be1c8f0647cd3d24e27c46e437a22ab80039b,2025-10-16T17:37:26.160000 +CVE-2025-61807,0,0,bef2750bed1c12a21c789be5d1ac1a383d41c818ed4588b47e17adfc33c5e46d,2025-10-16T17:37:33.997000 CVE-2025-6181,0,0,685dc315ab97b05c425dcd18d4ddc1865cf807dd39d66392023ac740b52bdb57,2025-08-22T18:09:17.710000 CVE-2025-6182,0,0,0e331b010ee04c9f4ed6e76a22166e5dafdbdd0c19efc727920d7f6467e279f4,2025-08-22T18:09:17.710000 CVE-2025-6183,0,0,e0af9b65795437de1a12bf44f10c6d1303c71db15aff07a8e3f3e1dbf7c43bd7,2025-08-22T18:09:17.710000 @@ -311139,8 +311160,8 @@ CVE-2025-61864,0,0,c2c66b65c20fa0ba9e5ec938a208eef765ce1d81ccde762f3ad3407927282 CVE-2025-6187,0,0,cf085428843a2619f450ab289da427a297bc5faa0426a63aff864e32d5997d4d,2025-07-22T13:05:40.573000 CVE-2025-61871,0,0,9020835a7a208c086f2667e545a0cffedfe97a22157931a9050a6bbe4de407fe,2025-10-14T19:37:28.107000 CVE-2025-6188,0,0,e010acd503c07cc6828cd17cefe8ffc663ab49b7f0b66d4625b10e280ca4eaac,2025-08-27T15:15:40.633000 -CVE-2025-61882,0,0,3d24f1b23ea7c1800c7d0e95f70670b58f7ad121f1b556cadd9bd5d09eb9c2cc,2025-10-07T21:00:13.017000 -CVE-2025-61884,0,0,74945bec4246474ded4498d7978cfb6f9a5f79ac243d44b75a9f9cb53e529c7a,2025-10-14T19:36:59.730000 +CVE-2025-61882,0,1,8a1bdcf227d2d7552f4129bbc655c4b1b9c2dd8c9ee06830cab0a48ce56899bf,2025-10-16T18:15:37.493000 +CVE-2025-61884,0,1,1a001725b438db75251f52140389354936d1ad62b8cf753246124801f26280bb,2025-10-16T18:15:37.670000 CVE-2025-61887,0,0,3dcddf1a3cbe3e4f5f57592fb576a62bd131a5d9bbe77f17c6722f882fa5b34c,2025-10-04T03:15:37.220000 CVE-2025-61888,0,0,069f3fe88b0c8123419013398d969a1f719d13e42ea67d624a1e517a32ebfd4a,2025-10-04T03:15:37.310000 CVE-2025-61889,0,0,92659284b31836e3b173c4606451b8f102fcd658647f387704e2cf012a40591c,2025-10-04T03:15:37.380000 @@ -311153,6 +311174,9 @@ CVE-2025-61894,0,0,b8c59a019dbf1c6ef60688746c309fad1a9bd45d226855c10b0e8876d7398 CVE-2025-61895,0,0,45e4a09465b22317f35aad8de6e8b625e08243f083dbc5dd9174e6fa8bde037f,2025-10-04T03:15:37.800000 CVE-2025-6190,0,0,37a46c120889a3c3faad6a5c052cf25795682ac951da11fd591c07aa333adf1b,2025-07-25T15:29:44.523000 CVE-2025-61906,0,0,0efdf5bc2eb8e2b0cdcdf3f448106792e41815d55a9c106814e1bbd557ab042b,2025-10-09T15:59:51.540000 +CVE-2025-61907,1,1,1fcc832f3adac3ce89f77b99f3e5ca58b7411ff75a0e49ea680f96e711887a15,2025-10-16T18:15:37.820000 +CVE-2025-61908,1,1,0a6847e498538ec1d0d29c271a98fdcde2928fed356a44d0d8c88e95f7447279,2025-10-16T18:15:37.990000 +CVE-2025-61909,1,1,dffbe8cd8b27e122ea48a483346612f51af3147c872fc1ede596c4b26ea0500f,2025-10-16T18:15:38.427000 CVE-2025-6191,0,0,368a5e7caefef170cd1e885bd04b0ef17db0f26a36bfda9320354e12292b21c7,2025-07-03T16:12:00.510000 CVE-2025-61910,0,0,de00125037bd3c1b39bdf76866df2a9b25632876480706779b11a0fa552474de,2025-10-08T19:38:09.863000 CVE-2025-61911,0,0,542f23d37281b42c4ca93e1745f3f6f69b24fa476397d461fcfa2ee8b743f558,2025-10-14T19:36:59.730000 @@ -311162,8 +311186,11 @@ CVE-2025-61919,0,0,8eb97000544b6958e8f10de059cc80378d1dad5c8bb45385459b58c034c1a CVE-2025-6192,0,0,483547ea6319c95642872363e4e6436ee4f0ce08e6f3ace0cccb8a4053638f02,2025-07-03T16:12:12.790000 CVE-2025-61920,0,0,32845854a19e9ab188caa6170f0e467c017bd9467a63c96634abc66ffdeaedbe,2025-10-14T19:36:59.730000 CVE-2025-61921,0,0,880db4ae0d45d4cfe7f15ad761954ff7024f92686d1b0121c4fe700a1776a4a1,2025-10-14T19:36:59.730000 +CVE-2025-61922,1,1,301b9dacb35e7adc2b5a53cd92132b77e5f8ffdbbe486e6ff521879c4a59e00b,2025-10-16T18:15:38.597000 +CVE-2025-61923,1,1,0978f53e24586bf9702f7c5240f19df375ac58e2c3afb627f3d361a83f0c6171,2025-10-16T18:15:38.987000 +CVE-2025-61924,1,1,e2e0344946d95827c72ddd07a84639076a072784b2b85f30f18cf16eb11471f2,2025-10-16T18:15:39.140000 CVE-2025-61925,0,0,5e80d4a0de1c57da43293c272abb1ce7bb36fb35921e0221c714a94be83d0c02,2025-10-14T19:36:59.730000 -CVE-2025-61926,0,0,4aed1d7d67497913cc329419cd9f24e7bb0de39fc3de2e102fef4dddcdfb02c2,2025-10-14T19:37:28.107000 +CVE-2025-61926,0,1,228e8c20689160d0866d68448c2969fc48d035eca196c090634d8cbd6e57dfaa,2025-10-16T18:15:39.300000 CVE-2025-61927,0,0,efde200287d875b157101d668c415d80e3fda6c0da7f84fccad1acaac747ea86,2025-10-14T19:36:59.730000 CVE-2025-61928,0,0,89b8c834000cf307af3ff28ce346dec7f4856540131f3d5b510c8d730719ed18,2025-10-14T19:37:28.107000 CVE-2025-61929,0,0,02baa0d28ecf85c8803b673d17585466be4896854516bd678208e3f71d478956,2025-10-14T19:36:59.730000 @@ -311284,9 +311311,23 @@ CVE-2025-62390,0,0,d8a1cd97224cab44567f05a60e3ca88afc98fe64ff4a21d6f1efa0acbfd26 CVE-2025-62391,0,0,74add41f3be4632916fd19f5ea721fe44272a929d5564c60c5aeb3ed1c311701,2025-10-15T19:00:20.420000 CVE-2025-62392,0,0,b36e268985190637101b21f4278a252dc9f0932f31930beb282eafe591cc4b4c,2025-10-15T19:00:15.217000 CVE-2025-6240,0,0,ba4da5fd605eca3c919532cf0a8a1661ebda5a87c35d4010c4dddeaa23d93e9a,2025-06-23T20:16:59.783000 +CVE-2025-62407,1,1,ea62cab078aef3162e3af4d8676e085df0be44ebc42dd565236649f84713e773,2025-10-16T18:15:39.420000 +CVE-2025-62409,1,1,866525bbc212497b20955b1092bb316b4401a2374de258de59fce9450e6f5bbc,2025-10-16T18:15:39.583000 CVE-2025-6241,0,0,8bee062251a7638b26ad8a87fe3736339d34bcf2a8f241dc34bb570fbf33d695,2025-07-30T19:15:49.213000 CVE-2025-62410,0,0,7cdbb0972d77996ac13ed738768ba8160f82ea4aa56b374bdf2c1f526e475607,2025-10-16T15:28:59.610000 +CVE-2025-62411,1,1,284ecffc03041f2dde2fff0a507c7880dc392c35270b902452df7523baa644e3,2025-10-16T18:15:39.747000 +CVE-2025-62412,1,1,4911d8527e1f2000a4b91e257567ece489dc0284377c5d1e90215ff8ce17cf6c,2025-10-16T18:15:39.920000 +CVE-2025-62413,1,1,b947452c615499d84ead81e15408a757b05fba4c9091c86bdafc78b95f534a51,2025-10-16T18:15:40.080000 +CVE-2025-62414,1,1,fb344a7f9eed112dc771a180695851485f397083b430f76a0b7445ac846aeea7,2025-10-16T19:15:34.170000 +CVE-2025-62415,1,1,9b9a5d1b6e8b816cb1d70bb754c92e725f918bfe02dd035b2e94a99ac3700c2f,2025-10-16T19:15:34.340000 +CVE-2025-62416,1,1,39a6549615cf1f9461a90c76e463be66a6d18b36d88ff8d80b820595c52c4077,2025-10-16T19:15:34.493000 +CVE-2025-62417,1,1,24b7edb8e7de2deff1a9d37c2d7f352508b7cd38c6d195cbdb4254ffc42b87a3,2025-10-16T19:15:34.650000 +CVE-2025-62418,1,1,92854b4717602653caa7a4c08ada2ba0773e134b228521df7f85d65a6935e0dd,2025-10-16T19:15:34.803000 CVE-2025-6242,0,0,23cc3372da6ad0e16da005088a5ec5b8d1124ccbf6891a21f5eb2b496a179169,2025-10-08T19:38:09.863000 +CVE-2025-62423,1,1,01f9569f7a07baff6afc9bf5fba45841ec5fbb465a97bae8dde5deaa1011fe26,2025-10-16T19:15:34.960000 +CVE-2025-62425,1,1,d95e28044efb38a3976d1920ebca435191a96e3522f965aa90fc08f04aec280c,2025-10-16T19:15:35.120000 +CVE-2025-62427,1,1,0a812dc478a2ad33a94aa7d364070a610ba1a34ba70a10e8597f94a8720081e4,2025-10-16T19:15:35.293000 +CVE-2025-62428,1,1,daa6742ca1c8f6d97050f6a6edc20604fefe6bfe21777b5f93d8257744f3fa1a,2025-10-16T19:15:35.450000 CVE-2025-6244,0,0,964622be99b8929ae714b5f1186a8bb5aa1dacdc93d9c545b15c83bc6ba93e76,2025-07-09T13:52:15.010000 CVE-2025-62440,0,0,4405d1c7b0b35d30fee189ef455777fef0dc3145ab6a662798835ab1d8b2978a,2025-10-15T03:15:33.580000 CVE-2025-62441,0,0,d93a3e30058a3f57946b1280892a394d1ca1e2b35501fc7a3bc4d4f486722cf2,2025-10-15T03:15:33.667000 @@ -311300,13 +311341,13 @@ CVE-2025-62448,0,0,530aa50b4f17789705379482f34d371d6149325b6fb604e9d151db9d56027 CVE-2025-6247,0,0,9dd0eef5de01eff9564340bdecce27db6a94dc6a05571052e160d9bb54e5468e,2025-08-26T13:41:58.950000 CVE-2025-6248,0,0,d696583fc9b81a33041337bebc4d888957417f46a56d99f0e71c27e8ecbc0b42,2025-07-17T21:15:50.197000 CVE-2025-6249,0,0,af21716c26badee2b0e9be0289dc06c494e3e2455f5a8621fca28f898c500f2e,2025-07-17T21:15:50.197000 -CVE-2025-62490,1,1,e12c43a94fb04a5118996579fb5cf549ca8a45de1942685fb38d91293afe3101,2025-10-16T16:15:39.270000 -CVE-2025-62491,1,1,7eb8585249a677b5ad2346af606e79b462de1f440010b73e7e7c9a241b148ac9,2025-10-16T16:15:39.470000 -CVE-2025-62492,1,1,4e5b757c77135ca792fd8f4fa5b87960993e5d986bbee190001c37a18d8219cf,2025-10-16T16:15:39.620000 -CVE-2025-62493,1,1,8afa1c93ab8413de6dc055dea40838f4e27077f8a6f48bf4bdb92c5448d8ad99,2025-10-16T16:15:39.797000 -CVE-2025-62494,1,1,358f902adef536e0584f398cd59cfe508ee64d202af0a1f6fbd6cfcb3135167e,2025-10-16T16:15:39.943000 -CVE-2025-62495,1,1,9044824e0b93749e9fa7e0ccb2e6fb936740cd360e5d9971c46cbe8bbacea597,2025-10-16T16:15:40.110000 -CVE-2025-62496,1,1,96c06449f20a74fb31908ebb14bc01211fc0401dff072edb55b0f9104f3b85d3,2025-10-16T16:15:40.260000 +CVE-2025-62490,0,0,e12c43a94fb04a5118996579fb5cf549ca8a45de1942685fb38d91293afe3101,2025-10-16T16:15:39.270000 +CVE-2025-62491,0,0,7eb8585249a677b5ad2346af606e79b462de1f440010b73e7e7c9a241b148ac9,2025-10-16T16:15:39.470000 +CVE-2025-62492,0,0,4e5b757c77135ca792fd8f4fa5b87960993e5d986bbee190001c37a18d8219cf,2025-10-16T16:15:39.620000 +CVE-2025-62493,0,0,8afa1c93ab8413de6dc055dea40838f4e27077f8a6f48bf4bdb92c5448d8ad99,2025-10-16T16:15:39.797000 +CVE-2025-62494,0,0,358f902adef536e0584f398cd59cfe508ee64d202af0a1f6fbd6cfcb3135167e,2025-10-16T16:15:39.943000 +CVE-2025-62495,0,0,9044824e0b93749e9fa7e0ccb2e6fb936740cd360e5d9971c46cbe8bbacea597,2025-10-16T16:15:40.110000 +CVE-2025-62496,0,0,96c06449f20a74fb31908ebb14bc01211fc0401dff072edb55b0f9104f3b85d3,2025-10-16T16:15:40.260000 CVE-2025-6250,0,0,f86aa971edca455b3672c1372430ee34cca87a7b2c5e296e7489741fc444c7ec,2025-08-04T13:45:22.730000 CVE-2025-6252,0,0,04266fde32de91a19cd75afe711753a0e9f9154bece1418589e4e14bad3b2599,2025-07-07T14:51:20.410000 CVE-2025-6253,0,0,cb5d9b8da47d572dbcd6d6c40c90b13d168a9738cebc8580b12d2462ed6f96c9,2025-08-12T14:25:33.177000 @@ -311319,6 +311360,7 @@ CVE-2025-62580,0,0,4fef80bc59ba33c4bc2ee28dc8170907e560b31e8de7e574808b74b1863c2 CVE-2025-62583,0,0,4e43f28a08f15f09f733cc834448b4d26cc2fd1647878a1a89f35123059760c1,2025-10-16T15:28:59.610000 CVE-2025-62584,0,0,6585a6ed47a7c97d6212add24c370f78502845af0c2cb83e784d9480487ae94c,2025-10-16T15:28:59.610000 CVE-2025-62585,0,0,b8638aca9b73ddbf88f474c92e224a4e433ab12970bd02ee8d33b9f02293019f,2025-10-16T15:28:59.610000 +CVE-2025-62586,1,1,2e224e502c6438b6afc63e564b50a1c9ffcc44fdf693a19f08bac3dbbc01f241,2025-10-16T18:15:40.637000 CVE-2025-6259,0,0,d744e9e7d9739548d1aa01b93be40d8149be7b6157d90d79a79ca07cfece5609,2025-08-06T20:23:37.600000 CVE-2025-6260,0,0,31d8a8fe623c3eb38350582f7b8664017a796cede476db64c602981f5d92a0b2,2025-07-25T15:29:19.837000 CVE-2025-6261,0,0,17e47e129725a71ccd00ed7c77e040816136371560cd91f6d3e65f5539177870,2025-07-25T15:29:44.523000 @@ -311729,7 +311771,7 @@ CVE-2025-6719,0,0,17dccbabfc5d247db107c7b496a656a84b540f22135c394a9e93a4a7828132 CVE-2025-6720,0,0,6ad23df61588aa7b01a53ac8bf607e1e5a159510ea4ca94756f583ab9b81869d,2025-07-22T13:06:07.260000 CVE-2025-6721,0,0,142e7dcb2190c105841741431975453b87aabc464a383bcf0ef6354163b93bc4,2025-07-22T13:06:07.260000 CVE-2025-6722,0,0,8db060d6999f81bd727424ddafd2e5384c848ead7376626d4441420fe2de7486,2025-08-25T14:15:36.483000 -CVE-2025-6724,0,1,dbc60d481843bda78860b38d8115d5b97c3a45488ea052103c803a870695f60c,2025-10-16T17:15:23.400000 +CVE-2025-6724,0,0,dbc60d481843bda78860b38d8115d5b97c3a45488ea052103c803a870695f60c,2025-10-16T17:15:23.400000 CVE-2025-6725,0,0,a2520bcd148ac768abbb97089f3d98d6281e55b56fe1591d0610425b8362a99d,2025-07-03T15:13:53.147000 CVE-2025-6726,0,0,50d70b15940d49bb5218d15af57b31e4a5473023a645603ee5456e59ac897191,2025-07-22T13:06:27.983000 CVE-2025-6729,0,0,ea97f26b892c26a37c6e1d230c66bd2969bafdd2d0278eeb7aa484caf0068db0,2025-07-09T17:49:44.530000 @@ -312039,7 +312081,7 @@ CVE-2025-7100,0,0,4c227169f57bd60e30a25bdb384a12621f80db60cce5149def50a4fe6836a4 CVE-2025-7101,0,0,778655e616e2165204eef71004a5b6b57a00d6cec73595e903729d333970b395,2025-09-15T17:37:26.577000 CVE-2025-7102,0,0,0d96f4ab844391b0f3276ea772ccf3cba7897cb036b499a616863836f9984fba,2025-09-15T17:37:02.953000 CVE-2025-7103,0,0,29c50aab56fb346435c32b9780480a6f89ec80121265fd3bfb2d276a6c0afe5f,2025-09-15T17:36:32.783000 -CVE-2025-7104,0,1,a87947e72f50388c6251db5a1bf53b06bbeb5eee1e8a7c2b79bf4cca62220666,2025-10-16T16:45:42.937000 +CVE-2025-7104,0,0,a87947e72f50388c6251db5a1bf53b06bbeb5eee1e8a7c2b79bf4cca62220666,2025-10-16T16:45:42.937000 CVE-2025-7106,0,0,b10344324f2fcefaf141f3062e2f50267fa7c33d504d6211a6fb976720ef9d17,2025-09-24T18:11:24.520000 CVE-2025-7107,0,0,80a5fb67d541b561267072de17e4fb93aa79cfced304ada8aa680e07ea17f527,2025-10-01T18:49:12.523000 CVE-2025-7108,0,0,c4cb38b8e4f73285a4bcd915b80f55f9c8526c8b1549da9e5878136d1f30a1b0,2025-07-08T16:18:34.923000 @@ -313568,7 +313610,7 @@ CVE-2025-8864,0,0,278be12a1200ce0ce04bbee0f67c222c918aabaf6f92248b0a8fe34246b55f CVE-2025-8865,0,0,174490d0cc0677d314de0900f59f5348392bc251bf67d57be0ef45d15f88c029,2025-08-11T18:32:48.867000 CVE-2025-8866,0,0,e88d414321c9397c2fb846d610aa023c1c6e0db6a53f7a89885ad11cbf74af31,2025-08-11T18:32:48.867000 CVE-2025-8867,0,0,16fb42e8efb8f60c234b436c4f442ad806b17f30d2bf6718820f39cec20f2bdf,2025-08-15T13:12:51.217000 -CVE-2025-8868,0,1,d15541b0e31786b84017ee22200238733e01e28ca6efa62aa0c94f8f78139c0d,2025-10-16T17:14:27.610000 +CVE-2025-8868,0,0,d15541b0e31786b84017ee22200238733e01e28ca6efa62aa0c94f8f78139c0d,2025-10-16T17:14:27.610000 CVE-2025-8869,0,0,5f87dbed8607067af4be21a666ee078bf6ae0ed2091a3ff655a0eaf8c33d95ac,2025-09-24T18:11:24.520000 CVE-2025-8874,0,0,fb8d80c918d29130b7f9f2e3859a20ca25193dcac612d0711dbe9de622679c6d,2025-08-12T14:25:33.177000 CVE-2025-8875,0,0,03429b8d4f39e340fc994825ccc250c7b10c19fbd291bf030b491517e84f2fa5,2025-08-15T15:15:02.193000 @@ -314108,7 +314150,7 @@ CVE-2025-9552,0,0,16b099389485772dbd483d186eb2f9c90800411da03e3f19c13a1003e8676a CVE-2025-9553,0,0,1781c8267ad5dadda4d923c48757aae82a3379d34c0c6179e1c415fe88d6be3b,2025-10-15T20:15:37.457000 CVE-2025-9554,0,0,62b1ace19e702a58515dc2b25160d34cf30c105b7feba81d09d66d3adeaa522b,2025-10-15T20:15:37.603000 CVE-2025-9556,0,0,d811849af7e6509162d508c174ddf69eac50a031a0e7ac87859c744e2fba2fa4,2025-09-15T15:21:42.937000 -CVE-2025-9559,1,1,0a9f3ad6b62550ab3c1a4d63249855a2294494f1a5dfd9d4810a505abc595abe,2025-10-16T16:15:40.410000 +CVE-2025-9559,0,0,0a9f3ad6b62550ab3c1a4d63249855a2294494f1a5dfd9d4810a505abc595abe,2025-10-16T16:15:40.410000 CVE-2025-9560,0,0,8175fb8568b672528e555b0aa0a0d39d36f59edca3c14047df5ce7494bd0a1fb,2025-10-14T19:36:59.730000 CVE-2025-9561,0,0,994aba680cbf26e298c9fe3eac3e4fb64c3b62303a78ae6682298ede37d972a0,2025-10-06T14:56:47.823000 CVE-2025-9565,0,0,e10691a66350f68294477bfad80a513e72bddae645c967f5140be3f2006c6a15,2025-09-17T14:18:55.093000