Auto-Update: 2025-03-09T05:00:19.566989+00:00

This commit is contained in:
cad-safe-bot 2025-03-09 05:03:48 +00:00
parent 6a206bf025
commit b4d4110255
3 changed files with 2684 additions and 2566 deletions

View File

@ -0,0 +1,141 @@
{
"id": "CVE-2025-2113",
"sourceIdentifier": "cna@vuldb.com",
"published": "2025-03-09T03:15:34.137",
"lastModified": "2025-03-09T03:15:34.137",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Esqueceu a senha. The manipulation of the argument txtCPF leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "cna@vuldb.com",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "cna@vuldb.com",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/yago3008/cves",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?ctiid.299006",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?id.299006",
"source": "cna@vuldb.com"
},
{
"url": "https://vuldb.com/?submit.506341",
"source": "cna@vuldb.com"
}
]
}

View File

@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-03-09T03:00:19.873769+00:00
2025-03-09T05:00:19.566989+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-03-08T23:15:14.683000+00:00
2025-03-09T03:15:34.137000+00:00
```
### Last Data Feed Release
@ -33,44 +33,20 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
284558
284559
```
### CVEs added in the last Commit
Recently added CVEs: `0`
Recently added CVEs: `1`
- [CVE-2025-2113](CVE-2025/CVE-2025-21xx/CVE-2025-2113.json) (`2025-03-09T03:15:34.137`)
### CVEs modified in the last Commit
Recently modified CVEs: `2536`
Recently modified CVEs: `0`
- [CVE-2025-27400](CVE-2025/CVE-2025-274xx/CVE-2025-27400.json) (`2025-02-28T16:15:40.237`)
- [CVE-2025-27401](CVE-2025/CVE-2025-274xx/CVE-2025-27401.json) (`2025-03-04T17:15:19.547`)
- [CVE-2025-27402](CVE-2025/CVE-2025-274xx/CVE-2025-27402.json) (`2025-03-04T17:15:19.703`)
- [CVE-2025-27411](CVE-2025/CVE-2025-274xx/CVE-2025-27411.json) (`2025-03-05T16:15:40.310`)
- [CVE-2025-27412](CVE-2025/CVE-2025-274xx/CVE-2025-27412.json) (`2025-03-05T16:15:40.457`)
- [CVE-2025-27414](CVE-2025/CVE-2025-274xx/CVE-2025-27414.json) (`2025-02-28T21:15:27.957`)
- [CVE-2025-27416](CVE-2025/CVE-2025-274xx/CVE-2025-27416.json) (`2025-03-01T01:15:28.857`)
- [CVE-2025-27421](CVE-2025/CVE-2025-274xx/CVE-2025-27421.json) (`2025-03-03T17:15:15.630`)
- [CVE-2025-27422](CVE-2025/CVE-2025-274xx/CVE-2025-27422.json) (`2025-03-03T17:15:15.787`)
- [CVE-2025-27423](CVE-2025/CVE-2025-274xx/CVE-2025-27423.json) (`2025-03-03T17:15:15.943`)
- [CVE-2025-27424](CVE-2025/CVE-2025-274xx/CVE-2025-27424.json) (`2025-03-04T16:15:40.647`)
- [CVE-2025-27425](CVE-2025/CVE-2025-274xx/CVE-2025-27425.json) (`2025-03-04T16:15:40.797`)
- [CVE-2025-27497](CVE-2025/CVE-2025-274xx/CVE-2025-27497.json) (`2025-03-05T16:15:40.587`)
- [CVE-2025-27498](CVE-2025/CVE-2025-274xx/CVE-2025-27498.json) (`2025-03-03T17:15:16.443`)
- [CVE-2025-27506](CVE-2025/CVE-2025-275xx/CVE-2025-27506.json) (`2025-03-06T19:15:27.833`)
- [CVE-2025-27507](CVE-2025/CVE-2025-275xx/CVE-2025-27507.json) (`2025-03-04T17:15:20.360`)
- [CVE-2025-27509](CVE-2025/CVE-2025-275xx/CVE-2025-27509.json) (`2025-03-06T19:15:27.973`)
- [CVE-2025-27513](CVE-2025/CVE-2025-275xx/CVE-2025-27513.json) (`2025-03-05T19:15:39.337`)
- [CVE-2025-27515](CVE-2025/CVE-2025-275xx/CVE-2025-27515.json) (`2025-03-05T19:15:39.483`)
- [CVE-2025-27516](CVE-2025/CVE-2025-275xx/CVE-2025-27516.json) (`2025-03-05T21:15:20.073`)
- [CVE-2025-27517](CVE-2025/CVE-2025-275xx/CVE-2025-27517.json) (`2025-03-05T20:16:05.960`)
- [CVE-2025-27521](CVE-2025/CVE-2025-275xx/CVE-2025-27521.json) (`2025-03-04T20:42:28.777`)
- [CVE-2025-27554](CVE-2025/CVE-2025-275xx/CVE-2025-27554.json) (`2025-03-01T06:15:34.693`)
- [CVE-2025-27590](CVE-2025/CVE-2025-275xx/CVE-2025-27590.json) (`2025-03-03T04:15:09.020`)
- [CVE-2025-27600](CVE-2025/CVE-2025-276xx/CVE-2025-27600.json) (`2025-03-06T19:15:28.117`)
## Download and Usage

5073
_state.csv

File diff suppressed because it is too large Load Diff