diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50065.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50065.json index b31f6d559b8..2de5ee2f46d 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50065.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50065.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50065", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.267", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:27:46.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: virtio_net: se corrige una fuga de memoria dentro de XPD_TX con un objeto fusionable. Al llamar a xdp_convert_buff_to_frame() para obtener xdpf, si devuelve NULL, debemos comprobar si xdp_page fue asignado por xdp_linearize_page(). Si es una asignaci\u00f3n reciente, debe liberarse aqu\u00ed \u00fanicamente. Al igual que con cualquier otro \"goto err_xdp\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.18", + "versionEndExcluding": "5.10.138", + "matchCriteriaId": "8E12105A-28C7-4D2D-8E99-5D847A035ABB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "D5744A03-DA40-4A78-9063-13179361DC6D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/18e383afbd7047af7b055df6e25436e0ce28f8a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7a542bee27c6a57e45c33cbbdc963325fd6493af", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d3723eab11196475ef83279571b2b0bd0924cf82", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/faafa2a87f697ee537c29446097e1cc3143506fa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50066.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50066.json index eb8fca45f0a..074af3a6668 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50066.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50066.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50066", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.377", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:27:21.810", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: atlantic: correcci\u00f3n del error de \u00edndice fuera de rango de aq_vec. La \u00faltima instrucci\u00f3n de actualizaci\u00f3n del bucle for excede el rango de la matriz, por lo que no se verifica la desreferencia de self->aq_vec[i], lo que genera el error de \u00edndice fuera de rango. Tambi\u00e9n se corrigi\u00f3 este tipo de estilo de codificaci\u00f3n en otro bucle for. [ 97.937604] UBSAN: \u00edndice de matriz fuera de los l\u00edmites en drivers/net/ethernet/aquantia/atlantic/aq_nic.c:1404:48 [ 97.937607] el \u00edndice 8 est\u00e1 fuera de rango para el tipo 'aq_vec_s *[8]' [ 97.937608] CPU: 38 PID: 3767 Comm: kworker/u256:18 No contaminado 5.19.0+ #2 [ 97.937610] Nombre del hardware: Dell Inc. Precision 7865 Tower/, BIOS 1.0.0 12/06/2022 [ 97.937611] Cola de trabajo: events_unbound async_run_entry_fn [ 97.937616] Seguimiento de llamadas: [ 97.937617] [ 97.937619] dump_stack_lvl+0x49/0x63 [ 97.937624] dump_stack+0x10/0x16 [ 97.937626] ubsan_epilogue+0x9/0x3f [ 97.937627] __ubsan_handle_out_of_bounds.cold+0x44/0x49 [ 97.937629] ? __scm_send+0x348/0x440 [ 97.937632] ? aq_vec_stop+0x72/0x80 [atl\u00e1ntico] [ 97.937639] aq_nic_stop+0x1b6/0x1c0 [atl\u00e1ntico] [ 97.937644] aq_suspend_common+0x88/0x90 [atl\u00e1ntico] [ 97.937648] aq_pm_suspend_poweroff+0xe/0x20 [atl\u00e1ntico] [ 97.937653] pci_pm_suspend+0x7e/0x1a0 [ 97.937655] ? pci_pm_suspend_noirq+0x2b0/0x2b0 [ 97.937657] dpm_run_callback+0x54/0x190 [ 97.937660] __device_suspend+0x14c/0x4d0 [ 97.937661] async_suspend+0x23/0x70 [ 97.937663] async_run_entry_fn+0x33/0x120 [ 97.937664] process_one_work+0x21f/0x3f0 [ 97.937666] work_thread+0x4a/0x3c0 [ 97.937668] ? process_one_work+0x3f0/0x3f0 [ 97.937669] kthread+0xf0/0x120 [ 97.937671] ? kthread_complete_and_exit+0x20/0x20 [ 97.937672] ret_from_fork+0x22/0x30 [ 97.937676] v2. Se corrigi\u00f3 la \"advertencia: variable 'aq_vec' establecida pero no utilizada\". v3. Se simplific\u00f3 un bucle for." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.11", + "versionEndExcluding": "5.10.138", + "matchCriteriaId": "71CEE936-0210-406B-8AD6-CAAA939D3645" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "D5744A03-DA40-4A78-9063-13179361DC6D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/23bf155476539354ab5c8cc9bb460fd1209b39b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2ba5e47fb75fbb8fab45f5c1bc8d5c33d8834bd3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/422a02a771599cac96f2b2900d993e0bb7ba5b88", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/df60c534d4c5a681172952dd4b475a5d818b3a86", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50067.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50067.json index 926e7390288..87ee359ded2 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50067.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50067.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50067", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.490", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:25:37.337", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,149 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: anular el control de reubicaci\u00f3n si falla el commit de la transacci\u00f3n en prepare_to_relocate(). En btrfs_relocate_block_group(), se asigna el rc. Luego, btrfs_relocate_block_group() llama a relocate_block_group() prepare_to_relocate() set_reloc_control() que asigna rc a la variable fs_info->reloc_ctl. Cuando prepare_to_relocate() retorna, llama a btrfs_commit_transaction() btrfs_start_dirty_block_groups() btrfs_alloc_path() kmem_cache_zalloc() que puede fallar, por ejemplo (o podr\u00edan ocurrir otros errores). Cuando ocurre el fallo, btrfs_relocate_block_group() detecta el error y libera rc y no establece fs_info->reloc_ctl en NULL. Posteriormente, en btrfs_init_reloc_root(), se recupera rc de fs_info->reloc_ctl y se utiliza, lo que podr\u00eda causar un error de Use-After-Free. Este posible error se puede activar llamando a btrfs_ioctl_balance() antes de llamar a btrfs_ioctl_defrag(). Para corregir este posible error, en prepare_to_relocate(), compruebe si btrfs_commit_transaction() falla. Si falla, se llama a unset_reloc_control() para establecer fs_info->reloc_ctl en NULL. El registro de errores en nuestras pruebas de inyecci\u00f3n de fallas se muestra a continuaci\u00f3n: [ 58.751070] ERROR: KASAN: use-after-free en btrfs_init_reloc_root+0x7ca/0x920 [btrfs] ... [ 58.753577] Seguimiento de llamadas: ... [ 58.755800] kasan_report+0x45/0x60 [ 58.756066] btrfs_init_reloc_root+0x7ca/0x920 [btrfs] [ 58.757304] record_root_in_trans+0x792/0xa10 [btrfs] [ 58.757748] btrfs_record_root_in_trans+0x463/0x4f0 [btrfs] [ 58.758231] start_transaction+0x896/0x2950 [btrfs] [ 58.758661] btrfs_defrag_root+0x250/0xc00 [btrfs] [ 58.759083] btrfs_ioctl_defrag+0x467/0xa00 [btrfs] [ 58.759513] btrfs_ioctl+0x3c95/0x114e0 [btrfs] ... [ 58.768510] Asignado por la tarea 23683: [ 58.768777] ____kasan_kmalloc+0xb5/0xf0 [ 58.769069] __kmalloc+0x227/0x3d0 [ 58.769325] alloc_reloc_control+0x10a/0x3d0 [btrfs] [ 58.769755] btrfs_relocate_block_group+0x7aa/0x1e20 [btrfs] [ 58.770228] btrfs_relocate_chunk+0xf1/0x760 [btrfs] [ 58.770655] __btrfs_balance+0x1326/0x1f10 [btrfs] [ 58.771071] btrfs_balance+0x3150/0x3d30 [btrfs] [ 58.771472] btrfs_ioctl_balance+0xd84/0x1410 [btrfs] [ 58.771902] btrfs_ioctl+0x4caa/0x114e0 [btrfs] ... [ 58.773337] Liberado por la tarea 23683: ... [ 58.774815] kfree+0xda/0x2b0 [ 58.775038] free_reloc_control+0x1d6/0x220 [btrfs] [ 58.775465] btrfs_relocate_block_group+0x115c/0x1e20 [btrfs] [ 58.775944] btrfs_relocate_chunk+0xf1/0x760 [btrfs] [ 58.776369] __btrfs_balance+0x1326/0x1f10 [btrfs] [ 58.776784] btrfs_balance+0x3150/0x3d30 [btrfs] [ 58.777185] btrfs_ioctl_balance+0xd84/0x1410 [btrfs] [ 58.777621] btrfs_ioctl+0x4caa/0x114e0 [btrfs] ..." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.318", + "matchCriteriaId": "042D6334-1740-4B6A-A505-BF529664A969" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.286", + "matchCriteriaId": "C6613E97-CA9E-4956-A888-2065F3C61304" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.247", + "matchCriteriaId": "F1B2E171-8F3C-474F-B25A-F9110189E950" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.184", + "matchCriteriaId": "DEDF9E01-A66D-486E-A184-7E8EF9C25EF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "D5744A03-DA40-4A78-9063-13179361DC6D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/5d741afed0bac206640cc64d77b97853283cf719", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/78f8c2370e3d33e35f23bdc648653d779aeacb6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/85f02d6c856b9f3a0acf5219de6e32f58b9778eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e546674031fc1576da501e27a8fd165222e5a37", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b60e862e133f646f19023ece1d476d630a660de1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dcb11fe0a0a9cca2b7425191b9bf30dc29f2ad0f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff0e8ed8dfb584575cffc1561f17a1d094e8565b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50068.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50068.json index 920c0e21245..ed76c56e33d 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50068.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50068.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50068", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.620", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:20:15.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,94 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/ttm: Se corrige el error de deref de resoluci\u00f3n ficticia NULL ptr. Verifique el valor de bo->resource antes de acceder al recurso mem_type. v2: Se corrige la advertencia de descripci\u00f3n de confirmaci\u00f3n sin envolver [ 40.191227][ T184] Fallo de protecci\u00f3n general, probablemente para la direcci\u00f3n no can\u00f3nica 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 40.192995][ T184] KASAN: null-ptr-deref en el rango [0x0000000000000010-0x0000000000000017] [ 40.194411][ T184] CPU: 1 PID: 184 Comm: systemd-udevd No contaminado 5.19.0-rc4-00721-gb297c22b7070 #1 [ 40.196063][ T184] Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-4 01/04/2014 [ 40.199605][ T184] RIP: 0010:ttm_bo_validate+0x1b3/0x240 [ttm] [ 40.200754][ T184] C\u00f3digo: e8 72 c5 ff ff 83 f8 b8 74 d4 85 c0 75 54 49 8b 9e 58 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 10 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 04 3c 03 7e 44 8b 53 10 31 c0 85 d2 0f 85 58 [ 40.203685][ T184] RSP: 0018:ffffc900006df0c8 EFLAGS: 00010202 [ 40.204630][ T184] RAX: dffffc0000000000 RBX: 00000000000000000 RCX: 1ffff1102f4bb71b [ 40.205864][ T184] RDX: 00000000000000002 RSI: ffffc900006df208 I+D+i: 0000000000000010 [ 40.207102][ T184] RBP: 1ffff920000dbe1a R08: ffffc900006df208 R09: 0000000000000000 [ 40.208394][ T184] R10: ffff88817a5f0000 R11: 0000000000000001 R12: ffffc900006df110 [ 40.209692][ T184] R13: ffffc900006df0f0 R14: ffff88817a5db800 R15: ffffc900006df208 [ 40.210862][ T184] FS: 00007f6b1d16e8c0(0000) GS:ffff88839d700000(0000) knlGS:0000000000000000 [ 40.212250][ T184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.213275][ T184] CR2: 000055a1001d4ff0 CR3: 00000001700f4000 CR4: 00000000000006e0 [ 40.214469][ T184] Rastreo de llamadas: [ 40.214974][ T184] [ 40.215438][ T184] ? ttm_bo_bounce_temp_buffer+0x140/0x140 [ttm] [ 40.216572][ T184] ? mutex_spin_on_owner+0x240/0x240 [ 40.217456][ T184] ? drm_vma_offset_add+0xaa/0x100 [drm] [ 40.218457][ T184] ttm_bo_init_reserved+0x3d6/0x540 [ttm] [ 40.219410][ T184] ? shmem_get_inode+0x744/0x980 [ 40.220231][ T184] ttm_bo_init_validate+0xb1/0x200 [ttm] [ 40.221172][ T184] ? bo_driver_evict_flags+0x340/0x340 [drm_vram_helper] [ 40.222530][ T184] ? ttm_bo_init_reserved+0x540/0x540 [ttm] [ 40.223643][ T184] ? __do_sys_finit_module+0x11a/0x1c0 [ 40.224654][ T184] ? __shmem_file_setup+0x102/0x280 [ 40.234764][ T184] drm_gem_vram_create+0x305/0x480 [drm_vram_helper] [ 40.235766][ T184] ? bo_driver_evict_flags+0x340/0x340 [drm_vram_helper] [ 40.236846][ T184] ? __kasan_slab_free+0x108/0x180 [ 40.237650][ T184] drm_gem_vram_fill_create_dumb+0x134/0x340 [drm_vram_helper] [ 40.238864][ T184] ? local_pci_probe+0xdf/0x180 [ 40.239674][ T184] ? drmm_vram_helper_init+0x400/0x400 [drm_vram_helper] [ 40.240826][ T184] drm_client_framebuffer_create+0x19c/0x400 [drm] [ 40.241955][ T184] ? drm_client_buffer_delete+0x200/0x200 [drm] [ 40.243001][ T184] ? drm_client_pick_crtcs+0x554/0xb80 [drm] [ 40.244030][ T184] drm_fb_helper_generic_probe+0x23f/0x940 [drm_kms_helper] [ 40.245226][ T184] ? __cond_resched+0x1c/0xc0 [ 40.245987][ T184] ? drm_fb_helper_memory_range_to_clip+0x180/0x180 [drm_kms_helper] [ 40.247316][ T184] ? mutex_unlock+0x80/0x100 [ 40.248005][ T184] ? __mutex_unlock_slowpath+0x2c0/0x2c0 [ 40.249083][ T184] drm_fb_helper_single_fb_probe+0x907/0xf00 [drm_kms_helper] [ 40.250314][ T184] ? drm_fb_helper_check_var+0x1180/0x1180 [drm_kms_helper] [ 40.251540][ T184] ? __cond_resched+0x1c/0xc0 [ 40.252321][ T184] ? mutex_lock+0x9f/0x100 [ 40.253062][ T184] __drm_fb_helper_initial_config_and_unlock+0xb9/0x2c0 [drm_kms_helper] [ 40.254394][ T184] drm_fbdev_client_hotplug+0x56f/0x840 [drm_kms_helper] [ 40.255477][ T184] drm_fbdev_generic_setup+0x165/0x3c0 [drm_kms_helper] [ 40.256607][ T184] bochs_pci_probe+0x6b7/0x900 [bochs] [ ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "185EE6AF-BD8F-4E95-80BC-9322B04CC91B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/76672cd326c146ded2c2712ff257b8908dcf23d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bd970d4097287778a4449452e70b35d0bfaa3aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cf4b7387c0a842d64bdd7c353e6d3298174a7740", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50069.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50069.json index 522da51a069..1c5b7a348bc 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50069.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50069.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50069", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.733", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:19:32.230", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: BPF: Arreglar posible desreferencia de puntero incorrecta en bpf_sys_bpf() La funci\u00f3n auxiliar bpf_sys_bpf() permite que un programa eBPF cargue otro programa eBPF desde dentro del kernel. En este caso, el puntero de uni\u00f3n de argumentos bpf_attr (as\u00ed como los punteros insns y license dentro) es una direcci\u00f3n de kernel en lugar de una direcci\u00f3n de espacio de usuario (que es el caso de una llamada al sistema bpf() habitual). Para hacer que el proceso de copia de memoria en la llamada al sistema funcione en ambos casos, se introdujo bpfptr_t para envolver el puntero y distinguir su origen. Espec\u00edficamente, al copiar contenido de memoria desde un bpfptr_t, se realiza un copy_from_user() en el caso de una direcci\u00f3n de espacio de usuario y se realiza un memcpy() para una direcci\u00f3n de kernel. Esto puede conducir a problemas porque el puntero en el kernel nunca se comprueba para su validez. El problema ocurre cuando un programa de llamada al sistema eBPF intenta llamar a bpf_sys_bpf() para cargar un programa, pero proporciona un puntero insns incorrecto (por ejemplo, 0xdeadbeef) en la uni\u00f3n bpf_attr. El asistente llama a __sys_bpf(), que a su vez llama a bpf_prog_load() para cargar el programa. bpf_prog_load() se encarga de copiar las instrucciones eBPF a la memoria reci\u00e9n asignada al programa; crea un bpfptr_t de kernel para insns e invoca copy_from_bpfptr(). Internamente, todas las operaciones bpfptr_t est\u00e1n respaldadas por las operaciones sockptr_t correspondientes, que ejecutan memcpy() directamente en los punteros de kernel para las operaciones copy_from/strncpy_from. Por lo tanto, el c\u00f3digo siempre desreferencia el puntero incorrecto para generar un fallo de p\u00e1gina imposible de controlar y, en consecuencia, un error. Sin embargo, esto no deber\u00eda suceder porque en ese momento el programa eBPF ya est\u00e1 verificado y no deber\u00eda causar un error de memoria. Ejemplo de seguimiento de KASAN: [ 25.685056][ T228] ======================================================================= [ 25.685680][ T228] ERROR: KASAN: acceso a memoria de usuario en copy_from_bpfptr+0x21/0x30 [ 25.686210][ T228] Lectura de tama\u00f1o 80 en la direcci\u00f3n 00000000deadbeef por la tarea poc/228 [ 25.686732][ T228] [ 25.686893][ T228] CPU: 3 PID: 228 Comm: poc No contaminado 5.19.0-rc7 #7 [ 25.687375][ T228] Nombre del hardware: PC est\u00e1ndar QEMU (i440FX + PIIX, 1996), BIOS d55cb5a 01/04/2014 [ 25.687991][ T228] Seguimiento de llamadas: [ 25.688223][ T228] [ 25.688429][ T228] dump_stack_lvl+0x73/0x9e [ 25.688747][ T228] print_report+0xea/0x200 [ 25.689061][ T228] ? copy_from_bpfptr+0x21/0x30 [ 25.689401][ T228] ? _printk+0x54/0x6e [ 25.689693][ T228] ? _raw_spin_lock_irqsave+0x70/0xd0 [ 25.690071][ T228] ? copy_from_bpfptr+0x21/0x30 [ 25.690412][ T228] kasan_report+0xb5/0xe0 [ 25.690716][ T228] ? copy_from_bpfptr+0x21/0x30 [ 25.691059][ T228] kasan_check_range+0x2bd/0x2e0 [ 25.691405][ T228] ? copy_from_bpfptr+0x21/0x30 [ 25.691734][ T228] memcpy+0x25/0x60 [ 25.692000][ T228] copy_from_bpfptr+0x21/0x30 [ 25.692328][ T228] bpf_prog_load+0x604/0x9e0 [ 25.692653][ T228] ? cap_capable+0xb4/0xe0 [ 25.692956][ T228] ? security_capable+0x4f/0x70 [ 25.693324][ T228] __sys_bpf+0x3af/0x580 [ 25.693635][ T228] bpf_sys_bpf+0x45/0x240 [ 25.693937][ T228] bpf_prog_f0ec79a5a3caca46_bpf_func1+0xa2/0xbd [ 25.694394][ T228] bpf_prog_run_pin_on_cpu+0x2f/0xb0 [ 25.694756][ T228] bpf_prog_test_run_syscall+0x146/0x1c0 [ 25.695144][ T228] bpf_prog_test_run+0x172/0x190 [ 25.695487][ T228] __sys_bpf+0x2c5/0x580 [ 25.695776][ T228] __x64_sys_bpf+0x3a/0x50 [ 25.696084][ T228] do_syscall_64+0x60/0x90 [ 25.696393][ T228] ? fpregs_assert_state_consistent+0x50/0x60 [ 25.696815][ T228] ? exit_to_user_mode_prepare+0x36/0xa0 [ 25.697202][ T228] ? syscall_exit_to_user_mode+0x20/0x40 [ 25.697586][ T228] ? do_syscall_64+0x6e/0x90 [ 25.697899][ T228] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 25.698312][ T228] RIP: 0033:0x7f6d543fb759 [ 25.698624][ T228] Code: 08 5b 89 e8 5d c3 66 ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.14", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "185EE6AF-BD8F-4E95-80BC-9322B04CC91B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1f6db7148ed7382b336c5827af33b5d9e992630e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/41fd6cc88aaf7058b9dfc9c7a09cc80f99c8c830", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e2dcac2f58f5a95ab092d1da237ffdc0da1832cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50070.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50070.json index 696939b58e2..5c046f0ef09 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50070.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50070.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50070", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.843", - "lastModified": "2025-08-28T15:15:37.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:18:56.640", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,89 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mptcp: no poner en cola datos en subflujos cerrados Dipanjan inform\u00f3 de un splat de syzbot en el momento del cierre: ADVERTENCIA: CPU: 1 PID: 10818 en net/ipv4/af_inet.c:153 inet_sock_destruct+0x6d0/0x8e0 net/ipv4/af_inet.c:153 M\u00f3dulos vinculados en: uio_ivshmem(OE) uio(E) CPU: 1 PID: 10818 Comm: kworker/1:16 Tainted: G OE 5.19.0-rc6-g2eae0556bb9d #2 Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 Cola de trabajo: eventos mptcp_worker RIP: 0010:inet_sock_destruct+0x6d0/0x8e0 net/ipv4/af_inet.c:153 C\u00f3digo: 21 02 00 00 41 8b 9c 24 28 02 00 00 e9 07 ff ff ff e8 34 4d 91 f9 89 ee 4c 89 e7 e8 4a 47 60 ff e9 a6 fc ff ff e8 20 4d 91 f9 <0f> 0b e9 84 fe ff ff e8 14 4d 91 f9 0f 0b e9 d4 fd ff ff e8 08 4d RSP: 0018:ffffc9001b35fa78 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000002879d0 RCX: ffff8881326f3b00 RDX: 00000000000000000 RSI: ffff8881326f3b00 RDI: 0000000000000002 RBP: ffff888179662674 R08: ffffffff87e983a0 R09: 0000000000000000 R10: 00000000000000005 R11: 00000000000004ea R12: ffff888179662400 R13: ffff888179662428 R14: 0000000000000001 R15: ffff88817e38e258 FS: 0000000000000000(0000) GS:ffff8881f5f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020007bc0 CR3: 0000000179592000 CR4: 0000000000150ee0 Rastreo de llamadas: __sk_destruct+0x4f/0x8e0 net/core/sock.c:2067 sk_destruct+0xbd/0xe0 net/core/sock.c:2112 __sk_free+0xef/0x3d0 net/core/sock.c:2123 sk_free+0x78/0xa0 net/core/sock.c:2134 sock_put include/net/sock.h:1927 [inline] __mptcp_close_ssk+0x50f/0x780 net/mptcp/protocol.c:2351 __mptcp_destroy_sock+0x332/0x760 net/mptcp/protocol.c:2828 mptcp_worker+0x5d2/0xc90 net/mptcp/protocol.c:2586 process_one_work+0x9cc/0x1650 kernel/workqueue.c:2289 worker_thread+0x623/0x1070 kernel/workqueue.c:2436 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302 La causa ra\u00edz del problema es que una (re)transmisi\u00f3n a nivel de mptcp puede competir con mptcp_close() y el programador de paquetes comprueba el estado del subflujo antes de adquirir el bloqueo del socket: podemos intentar (re)transmitir en un ssk ya cerrado. Corrija el problema comprobando de nuevo el estado del socket del subflujo bajo la protecci\u00f3n de bloqueo del socket del subflujo. Adem\u00e1s, a\u00f1ada la comprobaci\u00f3n que falta para el caso de respaldo a TCP." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10", + "versionEndExcluding": "5.15.190", + "matchCriteriaId": "F6BC9F55-AE94-468A-ADAE-E9434A5B01DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "0E669300-DA42-4ACD-86D8-68BE5F29FB88" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/8caf5c15b5288d52d9c89374d6c10fa32ee84ec5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c886d70286bf3ad411eb3d689328a67f7102c6ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb9c73ef2ac2ec816efdc8b9267bc04e1369c20b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50071.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50071.json index 95142c953bc..0cb4a2696dd 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50071.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50071.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50071", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:35.950", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:15:43.283", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mptcp: mover la limpieza del subflujo en mptcp_destroy_common() Si la creaci\u00f3n del socket mptcp falla debido a un programa eBPF CGROUP_INET_SOCK_CREATE, el protocolo MPTCP termina filtrando todos los subflujos: la limpieza relacionada ocurre en __mptcp_destroy_sock() que no se invoca en dicha ruta de c\u00f3digo. Aborda el problema moviendo la limpieza de los sockets del subflujo en el ayudante mptcp_destroy_common(), que se invoca en cada ruta de limpieza de msk. Adem\u00e1s, deshazte del paso intermedio list_splice_init, que es una reliquia innecesaria del pasado. El problema est\u00e1 presente desde antes de el commit de la causa ra\u00edz informada, pero cualquier intento de retroportar la soluci\u00f3n antes de ese hash requerir\u00e1 una reescritura completa." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "5319F66B-1A07-44F4-A11D-A32951DDF3B9" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/6139039c8fc5c9dbcdc3ad389b9a6d0cacb4d693", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c0bf3c6aa444a5ef44acc57ef6cfa53fd4fc1c9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50072.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50072.json index e58e2e46116..c6726f363a2 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50072.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50072.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50072", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:36.057", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:00:37.483", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,138 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSv4/pnfs: corrige un error de Use-After-Free en open Si alguien cancela la llamada RPC open, entonces no debemos intentar liberar ni la ranura abierta ni los argumentos de la operaci\u00f3n layoutget, ya que es probable que a\u00fan est\u00e9n en uso por la llamada RPC colgada." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.247", + "versionEndExcluding": "4.19.256", + "matchCriteriaId": "A9D0E403-93CD-4ABF-8718-D5DAC1A93751" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.198", + "versionEndExcluding": "5.4.211", + "matchCriteriaId": "4C0BEDE1-12B6-4D8B-8C46-E1E2B8DAD97D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.122", + "versionEndExcluding": "5.10.138", + "matchCriteriaId": "E1AA15B2-8A46-4621-BF63-41277E789CD7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.47", + "versionEndExcluding": "5.15.63", + "matchCriteriaId": "60A70FAB-2AB6-4E33-87C0-A0FD014B35A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17.15", + "versionEndExcluding": "5.18", + "matchCriteriaId": "5BF6ED63-C6AF-4B5E-9814-C77A3C45349D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18.4", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "7288ED8D-A02E-44A5-9C8A-A50DF9C5AE7F" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0fffb46ff3d5ed4668aca96441ec7a25b793bd6f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2135e5d56278ffdb1c2e6d325dc6b87f669b9dac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/76ffd2042438769298f34b76102b40dea89de616", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4cf3dadd1fa43609f7c6570c9116b0e0a9923d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b03d1117e9be7c7da60e466eaf9beed85c5916c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f7ee3b772d9de87387a725caa04bc041ac7fe5ec", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-500xx/CVE-2022-50073.json b/CVE-2022/CVE-2022-500xx/CVE-2022-50073.json index 9b99bd95cd5..f4715531c47 100644 --- a/CVE-2022/CVE-2022-500xx/CVE-2022-50073.json +++ b/CVE-2022/CVE-2022-500xx/CVE-2022-50073.json @@ -2,8 +2,8 @@ "id": "CVE-2022-50073", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:36.173", - "lastModified": "2025-06-18T13:47:40.833", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T17:59:44.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,145 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: tap: Desreferencia de puntero nulo en dev_parse_header_protocol cuando skb->dev es nulo. Corrige un error de desreferencia de puntero nulo provocado por el controlador tap. Cuando tap_get_user llama a virtio_net_hdr_to_skb, skb->dev es nulo (en tap.c, skb->dev se establece despu\u00e9s de la llamada a virtio_net_hdr_to_skb). virtio_net_hdr_to_skb llama a dev_parse_header_protocol, que requiere que el campo skb->dev sea v\u00e1lido. La l\u00ednea que activa el error est\u00e1 en dev_parse_header_protocol (dev est\u00e1 en el desplazamiento 0x10 desde skb y est\u00e1 almacenado en el registro RAX) if (!dev->header_ops || !dev->header_ops->parse_protocol) 22e1: mov 0x10(%rbx),%rax 22e5: mov 0x230(%rax),%rax Configurar skb->dev antes de la llamada en tap.c soluciona el problema. ERROR: desreferencia de puntero NULL del n\u00facleo, direcci\u00f3n: 0000000000000230 RIP: 0010:virtio_net_hdr_to_skb.constprop.0+0x335/0x410 [tap] C\u00f3digo: c0 0f 85 b7 fd ff ff eb d4 41 39 c6 77 cf 29 c6 48 89 df 44 01 f6 e8 7a 79 83 c1 48 85 c0 0f 85 d9 fd ff ff eb b7 48 8b 43 10 <48> 8b 80 30 02 00 00 48 85 c0 74 55 48 8b 40 28 48 85 c0 74 4c 48 RSP: 0018:ffffc90005c27c38 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888298f25300 RCX: 0000000000000010 RDX: 0000000000000005 RSI: ffffc90005c27cb6 RDI: ffff888298f25300 RBP: ffffc90005c27c80 R08: 00000000ffffffea R09: 00000000000007e8 R10: ffff88858ec77458 R11: 00000000000000000 R12: 0000000000000001 R13: 0000000000000014 R14: ffffc90005c27e08 R15: ffffc90005c27cb6 FS: 000000000000000(0000) GS:ffff88858ec40000(0000) knlGS:000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000230 CR3: 0000000281408006 CR4: 00000000003706e0 Rastreo de llamadas: tap_get_user+0x3f1/0x540 [tap] tap_sendmsg+0x56/0x362 [tap] ? get_tx_bufs+0xc2/0x1e0 [vhost_net] handle_tx_copy+0x114/0x670 [vhost_net] handle_tx+0xb0/0xe0 [vhost_net] handle_tx_kick+0x15/0x20 [vhost_net] vhost_worker+0x7b/0xc0 [vhost] ? vhost_vring_call_reset+0x40/0x40 [vhost] kthread+0xfa/0x120 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.226", + "versionEndExcluding": "4.15", + "matchCriteriaId": "C9608EF4-37A2-4904-B924-93CA34F65EBE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.181", + "versionEndExcluding": "4.20", + "matchCriteriaId": "6CD1844D-5434-4975-BB93-6CD6962BDD86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.106", + "versionEndExcluding": "5.5", + "matchCriteriaId": "65DA83B3-8CE9-4F0B-85BE-72293590844D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.24", + "versionEndExcluding": "5.11", + "matchCriteriaId": "BBCF7704-6B2C-46CC-AC9A-0CC0AB7DAA73" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11.7", + "versionEndExcluding": "5.12", + "matchCriteriaId": "FDFD4195-BBCD-4B40-801F-7EB86B6CD9C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.12.1", + "versionEndExcluding": "5.19.4", + "matchCriteriaId": "5CCE065C-FD94-4855-8B7E-61C5D8CA0736" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*", + "matchCriteriaId": "75EB504D-4A83-4C67-9C8D-FD9C6C8EB4CD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E5371152-7515-4908-BB7E-494805EA5DF2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D7788E5B-D54E-45BF-9043-2C7B77842FD0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc5:*:*:*:*:*:*", + "matchCriteriaId": "A935F9F1-DA8B-49F4-BF2B-FA01A92F113E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc6:*:*:*:*:*:*", + "matchCriteriaId": "DF0AF673-12B7-4274-9090-411D4939CB62" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc7:*:*:*:*:*:*", + "matchCriteriaId": "06AE06A6-A0C3-4556-BFFA-3D6E4BAC43C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.12:rc8:*:*:*:*:*:*", + "matchCriteriaId": "FCE63934-38CF-4311-AD72-624E86AF3889" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4f61f133f354853bc394ec7d6028adb9b02dd701", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd29648fcf69339713f2d25f7014ae905dcdfc18", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-24xx/CVE-2024-2413.json b/CVE-2024/CVE-2024-24xx/CVE-2024-2413.json index ad05f055d44..6f1416491b8 100644 --- a/CVE-2024/CVE-2024-24xx/CVE-2024-2413.json +++ b/CVE-2024/CVE-2024-24xx/CVE-2024-2413.json @@ -2,8 +2,8 @@ "id": "CVE-2024-2413", "sourceIdentifier": "twcert@cert.org.tw", "published": "2024-03-13T03:15:06.793", - "lastModified": "2024-11-21T09:09:42.080", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:54:32.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,50 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:intumit:smartrobot_firmware:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.2.0-202303TW", + "matchCriteriaId": "451AF745-5F00-43E6-9F08-5A92DD41AA67" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:intumit:smartrobot:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0260F953-BD5B-49C0-B7BA-AFBE246FA702" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-7697-ecf10-1.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-36xx/CVE-2024-3659.json b/CVE-2024/CVE-2024-36xx/CVE-2024-3659.json index 63eb87a03e6..7a8aa7d6844 100644 --- a/CVE-2024/CVE-2024-36xx/CVE-2024-3659.json +++ b/CVE-2024/CVE-2024-36xx/CVE-2024-3659.json @@ -2,13 +2,13 @@ "id": "CVE-2024-3659", "sourceIdentifier": "cvd@cert.pl", "published": "2024-08-08T13:15:13.823", - "lastModified": "2025-10-03T09:15:34.100", + "lastModified": "2025-11-17T17:15:45.410", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Firmware in KAON\u00a0AR2140 routers prior to version 4.2.16 is vulnerable to a shell command injection via sending a crafted request to one of the endpoints.\nIn order to exploit this vulnerability, one has to have access to the administrative portal of the router." + "value": "Firmware in KAON AR2140 routers, prior to versions 3.2.50 and 4.2.16, is vulnerable to a shell command injection via sending a crafted request to one of the endpoints.\nIn order to exploit this vulnerability, one has to have access to the administrative portal of the router." }, { "lang": "es", @@ -106,7 +106,7 @@ "weaknesses": [ { "source": "cvd@cert.pl", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2024/CVE-2024-37xx/CVE-2024-3774.json b/CVE-2024/CVE-2024-37xx/CVE-2024-3774.json index f62fb6333bd..33cb5ef8f12 100644 --- a/CVE-2024/CVE-2024-37xx/CVE-2024-3774.json +++ b/CVE-2024/CVE-2024-37xx/CVE-2024-3774.json @@ -2,8 +2,8 @@ "id": "CVE-2024-3774", "sourceIdentifier": "twcert@cert.org.tw", "published": "2024-04-15T03:16:08.197", - "lastModified": "2024-11-21T09:30:22.263", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:53:09.550", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 } ] }, @@ -55,14 +75,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aenrich:a\\+hrd:6.8:*:*:*:*:*:*:*", + "matchCriteriaId": "CFF0E4AE-57D2-4778-8E19-77F585F85EE2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aenrich:a\\+hrd:7.0:*:*:*:*:*:*:*", + "matchCriteriaId": "E60AA81B-7D96-4771-902A-FACF58130D97" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aenrich:a\\+hrd:7.1:*:*:*:*:*:*:*", + "matchCriteriaId": "F2D47A8A-1486-4C86-84D0-6966CB015A79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aenrich:a\\+hrd:7.2:*:*:*:*:*:*:*", + "matchCriteriaId": "AFC4DCEB-8D0A-4836-B7F3-5DD18BBF4441" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.twcert.org.tw/tw/cp-132-7724-c28d3-1.html", - "source": "twcert@cert.org.tw" + "source": "twcert@cert.org.tw", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.twcert.org.tw/tw/cp-132-7724-c28d3-1.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44630.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44630.json index 93cb1cef5ca..2950c44be5d 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44630.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44630.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44630", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:47.453", - "lastModified": "2025-11-14T17:15:57.217", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:28.267", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44630.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44632.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44632.json index f2047a5ec75..8da5c778171 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44632.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44632.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44632", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:47.637", - "lastModified": "2025-11-14T17:15:57.433", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:37:58.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44632.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44633.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44633.json index cfa79dbb73b..322dc8d8b7b 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44633.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44633.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44633", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:47.783", - "lastModified": "2025-11-14T17:15:57.667", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:35:46.060", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44633.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44635.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44635.json index fc8006f7985..a4d7dc05005 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44635.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44635.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44635", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:47.947", - "lastModified": "2025-11-14T17:15:57.887", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:22:07.280", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44635.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44636.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44636.json index 94715cc4902..70de6a2a82d 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44636.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44636.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44636", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:48.100", - "lastModified": "2025-11-14T17:15:58.150", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:22:00.537", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44639.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44639.json index 938a8db6efd..7925040b455 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44639.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44639.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44639", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:48.233", - "lastModified": "2025-11-14T17:15:58.363", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:21:54.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44639.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44640.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44640.json index 9576c01349d..e9d9f4d7b20 100644 --- a/CVE-2024/CVE-2024-446xx/CVE-2024-44640.json +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44640.json @@ -2,8 +2,8 @@ "id": "CVE-2024-44640", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:48.397", - "lastModified": "2025-11-14T17:15:58.593", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:21:47.130", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44640.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44641.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44641.json new file mode 100644 index 00000000000..bd9db00da2a --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44641.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-44641", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:45.677", + "lastModified": "2025-11-17T17:15:45.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44641.md", + "source": "cve@mitre.org" + }, + { + "url": "https://phpgurukul.com/small-crm-php/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44644.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44644.json new file mode 100644 index 00000000000..dbe77550483 --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44644.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-44644", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:45.877", + "lastModified": "2025-11-17T17:15:45.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44644.md", + "source": "cve@mitre.org" + }, + { + "url": "https://phpgurukul.com/small-crm-php/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44647.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44647.json new file mode 100644 index 00000000000..f060b1b52ff --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44647.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-44647", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:46.053", + "lastModified": "2025-11-17T17:15:46.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44647.md", + "source": "cve@mitre.org" + }, + { + "url": "https://phpgurukul.com/small-crm-php/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44648.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44648.json new file mode 100644 index 00000000000..c5114e3c14a --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44648.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-44648", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:46.230", + "lastModified": "2025-11-17T17:15:46.230", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44648.md", + "source": "cve@mitre.org" + }, + { + "url": "https://phpgurukul.com/small-crm-php/", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44651.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44651.json new file mode 100644 index 00000000000..f7245dff946 --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44651.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-44651", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T18:15:55.107", + "lastModified": "2025-11-17T18:15:55.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44651.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44652.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44652.json new file mode 100644 index 00000000000..866a5ea9198 --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44652.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-44652", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:46.410", + "lastModified": "2025-11-17T17:15:46.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44652.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44653.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44653.json new file mode 100644 index 00000000000..8853c39712b --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44653.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-44653", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T18:15:55.577", + "lastModified": "2025-11-17T18:15:55.577", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44653.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.kashipara.com/project/php/322/ecommerce-website-in-php-with-source-code-download", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-446xx/CVE-2024-44657.json b/CVE-2024/CVE-2024-446xx/CVE-2024-44657.json new file mode 100644 index 00000000000..ee85f4d62ce --- /dev/null +++ b/CVE-2024/CVE-2024-446xx/CVE-2024-44657.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-44657", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T18:15:55.737", + "lastModified": "2025-11-17T18:15:55.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-44657.md", + "source": "cve@mitre.org" + }, + { + "url": "https://phpgurukul.com/complaint-management-sytem", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-455xx/CVE-2024-45596.json b/CVE-2024/CVE-2024-455xx/CVE-2024-45596.json index 32ac4626f0e..59b95038f4d 100644 --- a/CVE-2024/CVE-2024-455xx/CVE-2024-45596.json +++ b/CVE-2024/CVE-2024-455xx/CVE-2024-45596.json @@ -2,8 +2,8 @@ "id": "CVE-2024-45596", "sourceIdentifier": "security-advisories@github.com", "published": "2024-09-10T19:15:22.303", - "lastModified": "2024-09-11T16:26:11.920", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:42:18.550", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 4.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -51,18 +71,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionEndExcluding": "10.13.3", + "matchCriteriaId": "B761A4B2-2A24-4667-B697-60805666E109" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "11.0.0", + "versionEndExcluding": "11.1.0", + "matchCriteriaId": "0249F0A8-ED9D-4C66-8EC1-B12210B5343B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/commit/769fa22797bff5a9231599883b391e013f122e52", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/security/advisories/GHSA-cff8-x7jv-4fm8", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-463xx/CVE-2024-46334.json b/CVE-2024/CVE-2024-463xx/CVE-2024-46334.json new file mode 100644 index 00000000000..63746ccf972 --- /dev/null +++ b/CVE-2024/CVE-2024-463xx/CVE-2024-46334.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2024-46334", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:46.533", + "lastModified": "2025-11-17T17:15:46.533", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-46334.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.kashipara.com/project/php/73/school-management-system-download-project-source-code-in-php", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-463xx/CVE-2024-46336.json b/CVE-2024/CVE-2024-463xx/CVE-2024-46336.json new file mode 100644 index 00000000000..b815e53bac1 --- /dev/null +++ b/CVE-2024/CVE-2024-463xx/CVE-2024-46336.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2024-46336", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:46.720", + "lastModified": "2025-11-17T17:15:46.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-46336.md", + "source": "cve@mitre.org" + }, + { + "url": "https://www.kashipara.com/project/php/73/school-management-system-download-project-source-code-in-php", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2024/CVE-2024-469xx/CVE-2024-46990.json b/CVE-2024/CVE-2024-469xx/CVE-2024-46990.json index 98bf9ed992c..f6da9367139 100644 --- a/CVE-2024/CVE-2024-469xx/CVE-2024-46990.json +++ b/CVE-2024/CVE-2024-469xx/CVE-2024-46990.json @@ -2,8 +2,8 @@ "id": "CVE-2024-46990", "sourceIdentifier": "security-advisories@github.com", "published": "2024-09-18T17:15:19.687", - "lastModified": "2024-09-20T12:30:17.483", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:49:17.900", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 3.1, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 1.4 } ] }, @@ -49,28 +69,79 @@ "value": "CWE-284" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionEndExcluding": "10.13.3", + "matchCriteriaId": "B761A4B2-2A24-4667-B697-60805666E109" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*", + "versionStartIncluding": "11.0.0", + "versionEndExcluding": "11.1.0", + "matchCriteriaId": "0249F0A8-ED9D-4C66-8EC1-B12210B5343B" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/commit/769fa22797bff5a9231599883b391e013f122e52", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/commit/8cbf943b65fd4a763d09a5fdbba8996b1e7797ff", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/commit/c1f3ccc681595038d094ce110ddeee38cb38f431", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory", + "Mitigation" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-550xx/CVE-2024-55016.json b/CVE-2024/CVE-2024-550xx/CVE-2024-55016.json index e7b4f156a3c..51aa4152dde 100644 --- a/CVE-2024/CVE-2024-550xx/CVE-2024-55016.json +++ b/CVE-2024/CVE-2024-550xx/CVE-2024-55016.json @@ -2,8 +2,8 @@ "id": "CVE-2024-55016", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-14T16:15:48.560", - "lastModified": "2025-11-14T17:15:58.827", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:20:54.413", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phpgurukul:student_record_system:3.20:*:*:*:*:*:*:*", + "matchCriteriaId": "3BE56291-1C2E-4DFB-84CB-1C130EBA0DE2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/leexsoyoung/CVEs/blob/main/CVE-2024-55016.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://phpgurukul.com/student-record-system-php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-117xx/CVE-2025-11776.json b/CVE-2025/CVE-2025-117xx/CVE-2025-11776.json index b896410b6d0..d242cd37121 100644 --- a/CVE-2025/CVE-2025-117xx/CVE-2025-11776.json +++ b/CVE-2025/CVE-2025-117xx/CVE-2025-11776.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11776", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-11-14T08:15:43.753", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:52:51.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.0.0", + "matchCriteriaId": "0E0A9668-C657-425B-BD7E-D1A0CC5648A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-117xx/CVE-2025-11777.json b/CVE-2025/CVE-2025-117xx/CVE-2025-11777.json index 49a49224173..0cc893dfa98 100644 --- a/CVE-2025/CVE-2025-117xx/CVE-2025-11777.json +++ b/CVE-2025/CVE-2025-117xx/CVE-2025-11777.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11777", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-11-13T18:15:49.393", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T18:05:07.173", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -47,10 +67,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.5.0", + "versionEndExcluding": "10.5.12", + "matchCriteriaId": "CCE1652A-13F7-4934-9F90-28129BAEE240" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionStartIncluding": "10.11.0", + "versionEndExcluding": "10.11.4", + "matchCriteriaId": "2A1F41DC-D93D-48A7-8A3B-623C3344E979" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11918.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11918.json index c868d50c107..1893529df19 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11918.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11918.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11918", "sourceIdentifier": "PSIRT@rockwellautomation.com", "published": "2025-11-14T14:15:45.993", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T17:48:50.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.3, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:rockwellautomation:arena:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.20.11", + "matchCriteriaId": "F327DD19-3DD7-4E90-8BD2-294B846987DB" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1763.html", - "source": "PSIRT@rockwellautomation.com" + "source": "PSIRT@rockwellautomation.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13193.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13193.json new file mode 100644 index 00000000000..43c9c69e47c --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13193.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-13193", + "sourceIdentifier": "secalert@redhat.com", + "published": "2025-11-17T17:15:47.110", + "lastModified": "2025-11-17T17:15:47.110", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users to inspect the guest OS contents. This results in an information disclosure vulnerability." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secalert@redhat.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-13193", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2415409", + "source": "secalert@redhat.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13290.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13290.json new file mode 100644 index 00000000000..a239a3aef33 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13290.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13290", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T17:15:48.100", + "lastModified": "2025-11-17T17:15:48.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://code-projects.org/", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/liaoliao-hla/cve/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332631", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332631", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.691619", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13291.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13291.json new file mode 100644 index 00000000000..cab8e70a103 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13291.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13291", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T17:15:48.320", + "lastModified": "2025-11-17T17:15:48.320", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Campcodes Supplier Management System 1.0. This affects an unknown part of the file /manufacturer/confirm_order.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Fex212/CVE/issues/1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332632", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332632", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.691620", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.campcodes.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13297.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13297.json new file mode 100644 index 00000000000..03e36caa980 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13297.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13297", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T18:15:56.497", + "lastModified": "2025-11-17T18:15:56.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/f14g-orz/CVE/issues/3", + "source": "cna@vuldb.com" + }, + { + "url": "https://itsourcecode.com/", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332637", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332637", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.691786", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-133xx/CVE-2025-13319.json b/CVE-2025/CVE-2025-133xx/CVE-2025-13319.json new file mode 100644 index 00000000000..5c3b425e590 --- /dev/null +++ b/CVE-2025/CVE-2025-133xx/CVE-2025-13319.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-13319", + "sourceIdentifier": "e8a6bb0b-e373-42b1-a5de-93e314325576", + "published": "2025-11-17T17:15:48.550", + "lastModified": "2025-11-17T17:15:48.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input.\n\nThe API is not enabled by default, and a valid API token is required to perform the attack." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "e8a6bb0b-e373-42b1-a5de-93e314325576", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "e8a6bb0b-e373-42b1-a5de-93e314325576", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://dom.nettec.no/security-advisories/DOM-25-001/", + "source": "e8a6bb0b-e373-42b1-a5de-93e314325576" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json b/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json new file mode 100644 index 00000000000..f8c61910506 --- /dev/null +++ b/CVE-2025/CVE-2025-343xx/CVE-2025-34322.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34322", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-11-17T18:15:56.710", + "lastModified": "2025-11-17T18:15:56.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Nagios Log Server versions prior to 2026R1.0.1 contain an authenticated command injection vulnerability via the experimental 'Natural Language Queries' feature. Configuration values for this feature are read from the application settings and incorporated into a system command without adequate validation or restriction of special characters. An authenticated user with access to global configuration can abuse these settings to execute arbitrary operating system commands with the privileges of the web server account, leading to compromise of the Log Server host." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.nagios.com/products/security/#log-server", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/nagios-log-server-authenticated-command-injection-via-natural-language-queries", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json b/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json new file mode 100644 index 00000000000..8d7375b9870 --- /dev/null +++ b/CVE-2025/CVE-2025-343xx/CVE-2025-34323.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-34323", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-11-17T18:15:56.880", + "lastModified": "2025-11-17T18:15:56.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Nagios Log Server versions prior to 2026R1.0.1 are vulnerable to local privilege escalation due to unsafe interaction between sudo rules and file system permissions. The web server account is granted passwordless sudo access to certain maintenance scripts while also being a member of a group that has write access to the directory containing those scripts. A local attacker running as the web server user can replace one of the permitted scripts with a malicious program and then execute it via sudo, resulting in arbitrary code execution with root privileges." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://www.nagios.com/changelog/nagios-log-server/nagios-log-server-2026r1-0-1/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.nagios.com/products/security/#log-server", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/nagios-log-server-local-privilege-escalation-via-writable-scripts-and-sudo-rules", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37889.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37889.json index 19debf41f50..0c6bc43f7e4 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37889.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37889.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37889", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:10.307", - "lastModified": "2025-11-03T20:18:40.153", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:13:03.617", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,208 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI/MSI: Manejo correcto del indicador NOMASK para todos los backends PCI/MSI. La conversi\u00f3n de la variable global espec\u00edfica de XEN pci_msi_ignore_mask a un indicador de dominio MSI pas\u00f3 por alto los siguientes hechos: 1) Las arquitecturas heredadas no proporcionan un dominio de interrupci\u00f3n. 2) Los dominios MSI principales no necesariamente tienen informaci\u00f3n de dominio adjunta. Ambos casos resultan en una desreferencia de puntero NULL incondicional. Desafortunadamente, esto se pas\u00f3 por alto en la revisi\u00f3n y las pruebas lo revelaron tarde. Solucione esto utilizando el asistente pci_msi_domain_supports() existente, que maneja todos los casos posibles correctamente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.148", + "versionEndExcluding": "5.15.180", + "matchCriteriaId": "41017F4D-7EC2-4576-921E-B998DBA2738B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.74", + "versionEndExcluding": "6.1.132", + "matchCriteriaId": "975A13F6-E31A-4762-8666-FFAB4CA3555D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.7", + "versionEndExcluding": "6.6.84", + "matchCriteriaId": "530D5F1C-E4C0-47F3-A158-ABD34ACC80A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7.1", + "versionEndExcluding": "6.12.20", + "matchCriteriaId": "89025BD6-CA5A-40CD-A2D8-06EB8CDBEBEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.8", + "matchCriteriaId": "0A20D4D7-B329-4C68-B662-76062EA7DCF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*", + "matchCriteriaId": "62B55B1B-7D3E-499B-9C42-E9F1EF05A54A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc5:*:*:*:*:*:*", + "matchCriteriaId": "32F2E5CA-13C6-4601-B530-D465CBF73D1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc6:*:*:*:*:*:*", + "matchCriteriaId": "5ED5AF93-F831-48BC-9545-CCB344E814FC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc7:*:*:*:*:*:*", + "matchCriteriaId": "81A7ABCB-0807-4AA2-8F4E-75E38D2E3FD4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.7:rc8:*:*:*:*:*:*", + "matchCriteriaId": "B01471D6-2DB4-4AF2-8BE0-B5082B4B9253" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*", + "matchCriteriaId": "186716B6-2B66-4BD0-852E-D48E71C0C85F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*", + "matchCriteriaId": "0D3E781C-403A-498F-9DA9-ECEE50F41E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*", + "matchCriteriaId": "66619FB8-0AAF-4166-B2CF-67B24143261D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*", + "matchCriteriaId": "D3D6550E-6679-4560-902D-AF52DCFE905B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*", + "matchCriteriaId": "45B90F6B-BEC7-4D4E-883A-9DBADE021750" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:*", + "matchCriteriaId": "1759FFB7-531C-41B1-9AE1-FD3D80E0D920" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0eba2a7e858907a746ba69cd002eb9eb4dbd7bf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/296c8295ae34045da0214882628d49c1c060dd8a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/544055329560d4b64fe204fc6be325ebc24c72ca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/694110bc2407a61f02a770cbb5f39b51e4ec77c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a46a9371f8b9a0eeff53a21e11ed3b65f52d9cf6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c402f184a053c8e7ca325e50f04bbbc1e4fee019", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37890.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37890.json index f1ef62e2a65..3a27ad27e36 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37890.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37890.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37890", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-16T13:15:52.437", - "lastModified": "2025-11-03T20:18:40.273", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:11:57.840", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,243 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: hfsc: corrige una vulnerabilidad UAF en la clase con netem como qdisc hijo Como se describe en el informe de Gerrard [1], tenemos un caso UAF cuando una clase hfsc tiene una qdisc hijo netem. El quid de la cuesti\u00f3n es que hfsc asume que la comprobaci\u00f3n de cl->qdisc->q.qlen == 0 garantiza que no ha insertado la clase en vttree o eltree (lo que no es cierto para el caso de duplicado de netem). Este parche comprueba la variable de clase n_active para asegurarse de que el c\u00f3digo no inserte la clase en vttree o eltree dos veces, atendiendo al caso reentrante. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.1", + "versionEndExcluding": "5.4.294", + "matchCriteriaId": "DEC27C91-8035-49D5-8C57-B8F8541B23F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "0DAAEF7F-D560-47FC-8B65-20404DB82432" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:-:*:*:*:*:*:*", + "matchCriteriaId": "1D0FE595-0CFE-4491-808B-CEF691CE7B0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc3:*:*:*:*:*:*", + "matchCriteriaId": "963CFC36-FBAD-465F-9891-CDBBF962DFDD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1B084A7A-6047-4804-9395-6000E4A43828" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc5:*:*:*:*:*:*", + "matchCriteriaId": "C3430640-AC87-44BF-ABF5-09E0A97E3758" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc6:*:*:*:*:*:*", + "matchCriteriaId": "FDF49B77-4688-4908-9239-89B729456D22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc7:*:*:*:*:*:*", + "matchCriteriaId": "77F342FB-3D7B-4EAE-BF8B-57B7B860BAFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc8:*:*:*:*:*:*", + "matchCriteriaId": "47D61679-6515-4E18-83C7-A71982CCD83C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/141d34391abbb315d68556b7c67ad97885407547", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/273bbcfa53541cde38b2003ad88a59b770306421", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2e7093c7a8aba5d4f8809f271488e5babe75e202", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6082a87af4c52f58150d40dec1716011d871ac21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8df7d37d626430035b413b97cee18396b3450bef", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac39fd4a757584d78ed062d4f6fd913f83bd98b5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e0cf8ee23e1915431f262a7b2dee0c7a7d699af0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3e949a39a91d1f829a4890e7dfe9417ac72e4d0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37901.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37901.json index 47672c37e53..43b4e86722a 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37901.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37901.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37901", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:26.453", - "lastModified": "2025-11-03T20:18:40.583", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:08:31.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: irqchip/qcom-mpm: Evita un bloqueo al intentar gestionar GPIO sin activaci\u00f3n. En los chipsets Qualcomm, no todos los GPIO tienen capacidad de activaci\u00f3n. Estos GPIO no tienen un pin MPM correspondiente y no deben gestionarse dentro del controlador MPM. La jerarqu\u00eda del dominio IRQ siempre se aplica, por lo que es necesario desconectarla expl\u00edcitamente. El controlador pinctrl-msm los marca con GPIO_NO_WAKE_IRQ. qcom-pdc cuenta con una comprobaci\u00f3n para esto, pero irq-qcom-mpm actualmente no la tiene. Esto est\u00e1 causando fallos al configurar interrupciones para GPIO que no son de activaci\u00f3n: root@rb1:~# gpiomon -c gpiochip1 10 irq: IRQ159: recortar jerarqu\u00eda de :soc@0:interrupt-controller@f200000-1 No se puede manejar la solicitud de paginaci\u00f3n del n\u00facleo en la direcci\u00f3n virtual ffff8000a1dc3820 Nombre del hardware: Qualcomm Technologies, Inc. Robotics RB1 (DT) pc: mpm_set_type+0x80/0xcc lr: mpm_set_type+0x5c/0xcc Rastreo de llamadas: mpm_set_type+0x80/0xcc (P) qcom_mpm_set_type+0x64/0x158 irq_chip_set_type_parent+0x20/0x38 msm_gpio_irq_set_type+0x50/0x530 Solucione esto copiando la comprobaci\u00f3n de GPIO_NO_WAKE_IRQ desde qcom-pdc.c, de modo que MPM se elimine por completo de la jerarqu\u00eda para los GPIO que no son de activaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "945A1B5D-9E16-488D-96CC-27B5994A3A7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/38a05c0b87833f5b188ae43b428b1f792df2b384", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/45aced97f01d5ab14c8a2a60f6748f18c501c3f5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d5c10448f411a925dd59005785cb971f0626e032", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dfbaecf7e38f5e9bfa5e47a1e525ffbb58bab8cf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f102342360950b56959e5fff4a874ea88ae13758", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37903.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37903.json index 9085900bb09..860b164dc8a 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37903.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37903.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37903", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:26.683", - "lastModified": "2025-11-03T20:18:40.680", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:08:45.870", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,159 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Se corrige el problema de slab-use-after-free en HDCP. El c\u00f3digo HDCP en amdgpu_dm_hdcp.c copia punteros a objetos amdgpu_dm_connector sin incrementar el recuento de referencias de kref. Al usar una base USB-C y desconectarla, se liberan los objetos amdgpu_dm_connector correspondientes, lo que crea punteros colgantes en el c\u00f3digo HDCP. Cuando se vuelve a conectar el dock, los punteros colgantes se desreferencian, lo que da como resultado un slab-use-after-free: [ 66.775837] ERROR: KASAN: slab-use-after-free en event_property_validate+0x42f/0x6c0 [amdgpu] [ 66.776171] Lectura de tama\u00f1o 4 en la direcci\u00f3n ffff888127804120 por la tarea kworker/0:1/10 [ 66.776179] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 No contaminado 6.14.0-rc7-00180-g54505f727a38-dirty #233 [ 66.776183] Nombre del hardware: HP HP Pavilion Aero Laptop 13-be0xxx/8916, BIOS F.17 18/12/2024 [ 66.776186] Cola de trabajo: eventos event_property_validate [amdgpu] [ 66.776494] Seguimiento de llamadas: [ 66.776496] [ 66.776497] dump_stack_lvl+0x70/0xa0 [ 66.776504] print_report+0x175/0x555 [ 66.776507] ? __virt_addr_valid+0x243/0x450 [ 66.776510] ? kasan_complete_mode_report_info+0x66/0x1c0 [ 66.776515] kasan_report+0xeb/0x1c0 [ 66.776518] ? event_property_validate+0x42f/0x6c0 [amdgpu] [ 66.776819] ? event_property_validate+0x42f/0x6c0 [amdgpu] [ 66.777121] __asan_report_load4_noabort+0x14/0x20 [ 66.777124] event_property_validate+0x42f/0x6c0 [amdgpu] [ 66.777342] ? __lock_acquire+0x6b40/0x6b40 [ 66.777347] ? enable_assr+0x250/0x250 [amdgpu] [ 66.777571] process_one_work+0x86b/0x1510 [ 66.777575] ? pwq_dec_nr_in_flight+0xcf0/0xcf0 [ 66.777578] ? assign_work+0x16b/0x280 [ 66.777580] ? lock_is_held_type+0xa3/0x130 [ 66.777583] worker_thread+0x5c0/0xfa0 [ 66.777587] ? process_one_work+0x1510/0x1510 [ 66.777588] kthread+0x3a2/0x840 [ 66.777591] ? kthread_is_per_cpu+0xd0/0xd0 [ 66.777594] ? trace_hardirqs_on+0x4f/0x60 [ 66.777597] ? _raw_spin_unlock_irq+0x27/0x60 [ 66.777599] ? calculate_sigpending+0x77/0xa0 [ 66.777602] ? kthread_is_per_cpu+0xd0/0xd0 [ 66.777605] ret_from_fork+0x40/0x90 [ 66.777607] ? kthread_is_per_cpu+0xd0/0xd0 [ 66.777609] ret_from_fork_asm+0x11/0x20 [ 66.777614] [ 66.777643] Asignado por la tarea 10: [ 66.777646] kasan_save_stack+0x39/0x60 [ 66.777649] kasan_save_track+0x14/0x40 [ 66.777652] kasan_save_alloc_info+0x37/0x50 [ 66.777655] __kasan_kmalloc+0xbb/0xc0 [ 66.777658] __kmalloc_cache_noprof+0x1c8/0x4b0 [ 66.777661] dm_dp_add_mst_connector+0xdd/0x5c0 [amdgpu] [ 66.777880] drm_dp_mst_port_add_connector+0x47e/0x770 [drm_display_helper] [ 66.777892] drm_dp_send_link_address+0x1554/0x2bf0 [drm_display_helper] [ 66.777901] drm_dp_check_and_send_link_address+0x187/0x1f0 [drm_display_helper] [ 66.777909] drm_dp_mst_link_probe_work+0x2b8/0x410 [drm_display_helper] [ 66.777917] process_one_work+0x86b/0x1510 [ 66.777919] work_thread+0x5c0/0xfa0 [ 66.777922] kthread+0x3a2/0x840 [ 66.777925] ret_from_fork+0x40/0x90 [ 66.777927] ret_from_fork_asm+0x11/0x20 [ 66.777932] Liberado por la tarea 1713: [ 66.777935] kasan_save_stack+0x39/0x60 [ 66.777938] kasan_save_track+0x14/0x40 [ 66.777940] kasan_save_free_info+0x3b/0x60 [ 66.777944] __kasan_slab_free+0x52/0x70 [ 66.777946] kfree+0x13f/0x4b0 [ 66.777949] dm_dp_mst_connector_destroy+0xfa/0x150 [amdgpu] [ 66.778179] drm_connector_free+0x7d/0xb0 [ 66.778184] drm_mode_object_put.part.0+0xee/0x160 [ 66.778188] drm_mode_object_put+0x37/0x50 [ 66.778191] drm_atomic_state_default_clear+0x220/0xd60 [ 66.778194] __drm_atomic_state_free+0x16e/0x2a0 [ 66.778197] drm_mode_atomic_ioctl+0x15ed/0x2ba0 [ 66.778200] drm_ioctl_kernel+0x17a/0x310 [ 66.778203] drm_ioctl+0x584/0xd10 [ 66.778206] amdgpu_drm_ioctl+0xd2/0x1c0 [amdgpu] [ 66.778375] __x64_sys_ioctl+0x139/0x1a0 [ 66.778378] x64_sys_call+0xee7/0xfb0 [ 66.778381] ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "1EDCBFE8-17FA-423B-9F60-11633FF7E165" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3a782a83d130ceac6c98a87639ddd89640bff486", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bbc66abcd297be67e3d835276e21e6fdc65205a6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/be593d9d91c5a3a363d456b9aceb71029aeb3f1d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd329f04dda35a66e0c9ed462ba91bd5f2c8be70", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e25139c4aa5621f2db8e86688c33546cdd885e42", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37904.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37904.json index 4937849af75..dd0665bb20b 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37904.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37904.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37904", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:26.820", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:09:15.143", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,95 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: arregla la p\u00e9rdida de inodo en btrfs_iget() [ERROR] Hay un informe de error que indica que un reproductor syzbot puede provocar el siguiente inodo ocupado en el momento del desmontaje: Informaci\u00f3n BTRFS (dispositivo loop1): \u00faltimo desmontaje del sistema de archivos 1680000e-3c1e-4c46-84b6-56bd3909af50 VFS: Inodos ocupados despu\u00e9s del desmontaje de loop1 (btrfs) ------------[ cortar aqu\u00ed ]------------ \u00a1ERROR del kernel en fs/super.c:650! Oops: c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 48168 Comm: syz-executor No contaminado 6.15.0-rc2-00471-g119009db2674 #2 PREEMPT(full) Nombre del hardware: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 01/04/2014 RIP: 0010:generic_shutdown_super+0x2e9/0x390 fs/super.c:650 Rastreo de llamadas: kill_anon_super+0x3a/0x60 fs/super.c:1237 btrfs_kill_super+0x3b/0x50 fs/btrfs/super.c:2099 deactivate_locked_super+0xbe/0x1a0 fs/super.c:473 deactivate_super fs/super.c:506 [inline] deactivate_super+0xe2/0x100 fs/super.c:502 cleanup_mnt+0x21f/0x440 fs/namespace.c:1435 task_work_run+0x14d/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x269/0x290 kernel/entry/common.c:218 do_syscall_64+0xd4/0x250 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f [CAUSA] Cuando btrfs_alloc_path() fallaba, btrfs_iget() regresaba directamente sin liberar el inodo ya asignado por btrfs_iget_locked(). Esto genera el inodo ocupado mencionado anteriormente y activa el error del kernel. [SOLUCI\u00d3N] Corr\u00edjalo llamando a iget_failed() si btrfs_alloc_path() fallaba. Si encontramos un error en btrfs_read_locked_inode(), se llamar\u00e1 correctamente a iget_failed(), as\u00ed que no hay de qu\u00e9 preocuparse. Aunque la limpieza de iget_failed() dentro de btrfs_read_locked_inode() supone una ruptura del esquema normal de gesti\u00f3n de errores, primero corregiremos el error obvio y lo adaptaremos a la versi\u00f3n anterior, y luego reescribiremos la gesti\u00f3n de errores." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/30a339bece3a44ab0a821477139e84fb86af9761", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/48c1d1bb525b1c44b8bdc8e7ec5629cb6c2b9fc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37905.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37905.json index 5f143b86b03..1795236a189 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37905.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37905.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37905", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:26.927", - "lastModified": "2025-11-03T20:18:40.777", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:10:30.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,178 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: firmware: arm_scmi: Equilibrar el recuento de referencias de dispositivos al destruir dispositivos. El uso de device_find_child() para buscar el dispositivo SCMI adecuado para destruir provoca un desequilibrio en el recuento de referencias de dispositivos, ya que device_find_child() llama a un m\u00e9todo get_device() impl\u00edcito: esto, a su vez, inhibe la llamada a los m\u00e9todos de liberaci\u00f3n proporcionados tras la destrucci\u00f3n de dispositivos. Como consecuencia, una de las estructuras que no se libera correctamente tras la destrucci\u00f3n es la estructura interna device_private dev->p, rellenada por el n\u00facleo del subsistema de controladores. KMemleak detecta esta situaci\u00f3n, ya que la carga/descarga de alg\u00fan controlador SCMI provoca que los dispositivos relacionados se creen/destruyan sin llamar a ning\u00fan m\u00e9todo device_release. objeto sin referencia 0xffff00000f583800 (tama\u00f1o 512): comm \"insmod\", pid 227, jiffies 4294912190 volcado hexadecimal (primeros 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff ff 60 36 1d 8a 00 80 ff ff ........`6...... seguimiento inverso (crc 114e2eed): kmemleak_alloc+0xbc/0xd8 __kmalloc_cache_noprof+0x2dc/0x398 device_add+0x954/0x12d0 device_register+0x28/0x40 __scmi_device_create.part.0+0x1bc/0x380 scmi_device_create+0x2d0/0x390 scmi_create_protocol_devices+0x74/0xf8 scmi_device_request_notifier+0x1f8/0x2a8 notifier_call_chain+0x110/0x3b0 blocking_notifier_call_chain+0x70/0xb0 scmi_driver_register+0x350/0x7f0 0xffff80000a3b3038 do_one_initcall+0x12c/0x730 do_init_module+0x1dc/0x640 load_module+0x4b20/0x5b70 init_module_from_file+0xec/0x158 $ ./scripts/faddr2line ./vmlinux device_add+0x954/0x12d0 device_add+0x954/0x12d0: kmalloc_noprof en include/linux/slab.h:901 (en l\u00ednea por) kzalloc_noprof en include/linux/slab.h:1037 (en l\u00ednea por) device_private_init en drivers/base/core.c:3510 (en l\u00ednea por) device_add en drivers/base/core.c:3561 Equilibre el recuento de dispositivos emitiendo un put_device() en los dispositivos encontrados a trav\u00e9s de device_find_child()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "01287EDF-2A72-4749-B769-52534D348E33" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2fbf6c9695ad9f05e7e5c166bf43fac7cb3276b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8a8a3547d5c4960da053df49c75bf623827a25da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/91ff1e9652fb9beb0174267d6bb38243dff211bb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/969d8beaa2e374387bf9aa5602ef84fc50bb48d8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9ca67840c0ddf3f39407339624cef824a4f27599", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff4273d47da81b95ed9396110bcbd1b7b7470fe8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37906.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37906.json index 8e59bfa3928..74e3e837cc9 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37906.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37906.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37906", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:27.070", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:10:54.180", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ublk: se corrige la ejecuci\u00f3n entre io_uring_cmd_complete_in_task y ublk_cancel_cmd. ublk_cancel_cmd() llama a io_uring_cmd_done() para completar uring_cmd, pero es posible que hayamos programado el trabajo de la tarea mediante io_uring_cmd_complete_in_task() para el env\u00edo de la solicitud, lo que puede provocar un fallo del kernel. Para solucionarlo, no intente cancelar el comando si se inicia la solicitud de bloqueo de ublk." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "7C6CDFC7-5547-4D8F-8407-031E5A221969" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/f40139fde5278d81af3227444fd6e76a76b9506d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fb2eb9ddf556f93fef45201e1f9d2b8674bcc975", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37912.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37912.json index 97bbc6857a3..2f08c8117a3 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37912.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37912.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37912", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:27.723", - "lastModified": "2025-11-03T20:18:41.083", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:11:22.580", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,173 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: comprobar el valor del puntero VF VSI en ice_vc_add_fdir_fltr() Como se menciona en el commit baeb705fd6a7 (\"ice: siempre comprobar los valores del puntero VF VSI\"), debemos realizar una verificaci\u00f3n de puntero nulo en el valor de retorno de ice_get_vf_vsi() antes de usarlo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.172", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "4871646F-654A-49B3-8838-DA4E44CF2FA0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.1.103", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "2A39478F-B315-40A1-A303-0D14FB5BE577" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6.44", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "287A31B4-457B-431A-AA9B-C2EBA09D2F76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.10.3", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "DB9E8E00-1C08-4011-BF88-177A7EB22F15" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0561f2e374c3732b90e50f0a244791a4308ec67e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/073791e9cfe6e4a11a6d85816ba87b1aa207493e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/425c5f266b2edeee0ce16fedd8466410cdcfcfe3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a32dcc3b8293600ddc4024731b4d027d4de061a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eae60cfe25d022d7f0321dba4cc23ad8e87ade48", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f68237982dc012230550f4ecf7ce286a9c37ddc9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37913.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37913.json index bed9829e0e9..9dce51949e5 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37913.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37913.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37913", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:27.837", - "lastModified": "2025-11-03T20:18:41.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:11:37.813", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,243 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: qfq: Se corrige la adici\u00f3n doble de lista en una clase con netem como qdisc secundaria. Como se describe en el informe de Gerrard [1], existen casos de uso en los que una qdisc secundaria netem har\u00e1 que la devoluci\u00f3n de llamada de encolado de la qdisc primaria sea reentrante. En el caso de qfq, no habr\u00e1 un UAF, pero el c\u00f3digo agregar\u00e1 el mismo clasificador a la lista dos veces, lo que causar\u00e1 corrupci\u00f3n de memoria. Este parche verifica si la clase ya se agreg\u00f3 a la lista agg->active (cl_is_active) antes de realizar la adici\u00f3n para atender el caso reentrante. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.1", + "versionEndExcluding": "5.4.294", + "matchCriteriaId": "DEC27C91-8035-49D5-8C57-B8F8541B23F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "0DAAEF7F-D560-47FC-8B65-20404DB82432" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:-:*:*:*:*:*:*", + "matchCriteriaId": "1D0FE595-0CFE-4491-808B-CEF691CE7B0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc3:*:*:*:*:*:*", + "matchCriteriaId": "963CFC36-FBAD-465F-9891-CDBBF962DFDD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1B084A7A-6047-4804-9395-6000E4A43828" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc5:*:*:*:*:*:*", + "matchCriteriaId": "C3430640-AC87-44BF-ABF5-09E0A97E3758" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc6:*:*:*:*:*:*", + "matchCriteriaId": "FDF49B77-4688-4908-9239-89B729456D22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc7:*:*:*:*:*:*", + "matchCriteriaId": "77F342FB-3D7B-4EAE-BF8B-57B7B860BAFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc8:*:*:*:*:*:*", + "matchCriteriaId": "47D61679-6515-4E18-83C7-A71982CCD83C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/005a479540478a820c52de098e5e767e63e36f0a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/041f410aec2c1751ee22b8b73ba05d38c3a6a602", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0aa23e0856b7cedb3c88d8e3d281c212c7e4fbeb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0bf32d6fb1fcbf841bb9945570e0e2a70072c00f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/370218e8ce711684acc4cdd3cc3c6dd7956bc165", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/53bc0b55178bd59bdd4bcd16349505cabf54b1a2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a43783119e01849fbf2fe8855634e8989b240cb4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f139f37dcdf34b67f5bf92bc8e0f7f6b3ac63aa4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37914.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37914.json index 8591ca1afd7..ab133cfc4b8 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37914.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37914.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37914", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:27.943", - "lastModified": "2025-11-03T20:18:41.320", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:04:10.627", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,43 +15,194 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: ets: Se corrige la adici\u00f3n doble de lista en la clase con netem como qdisc secundaria. Como se describe en el informe de Gerrard [1], existen casos de uso en los que una qdisc secundaria netem har\u00e1 que la devoluci\u00f3n de llamada de encolado de la qdisc primaria sea reentrante. En el caso de ets, no habr\u00e1 un UAF, pero el c\u00f3digo agregar\u00e1 el mismo clasificador a la lista dos veces, lo que causar\u00e1 corrupci\u00f3n de memoria. Adem\u00e1s de verificar que qlen sea cero, este parche verifica si la clase ya se agreg\u00f3 a active_list (cl_is_active) antes de realizar la adici\u00f3n para atender el caso reentrante. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "5CA6C90D-C2FB-440C-8433-F78F660A037E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a6d0c00fa07972384b0c308c72db091d49988b6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1f01e9f961605eb397c6ecd1d7b0233dfbf9077c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/24388ba0a1b1b6d4af1b205927ac7f7b119ee4ea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/554acc5a2ea9703e08023eb9a003f9e5a830a502", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/72c3da7e6ceb74e74ddbb5a305a35c9fdfcac6e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9efb6a0fa88e0910d079fdfeb4f7ce4d4ac6c990", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bc321f714de693aae06e3786f88df2975376d996", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37915.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37915.json index cd8de2a2f4a..b0ab175dc8c 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37915.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37915.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37915", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.057", - "lastModified": "2025-11-03T20:18:41.430", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:00:22.330", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,228 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net_sched: drr: Se corrige la doble adici\u00f3n de lista en la clase con netem como qdisc hija. Como se describe en el informe de Gerrard [1], existen casos de uso en los que una qdisc hija de netem har\u00e1 que la devoluci\u00f3n de llamada de encolado de la qdisc madre sea reentrante. En el caso de drr, no habr\u00e1 un UAF, pero el c\u00f3digo agregar\u00e1 el mismo clasificador a la lista dos veces, lo que causar\u00e1 corrupci\u00f3n de memoria. Adem\u00e1s de verificar que qlen sea cero, este parche verifica si la clase ya se agreg\u00f3 a active_list (cl_is_active) antes de agregarla a la lista para cubrir el caso reentrante. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.1", + "versionEndExcluding": "5.4.294", + "matchCriteriaId": "DEC27C91-8035-49D5-8C57-B8F8541B23F7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.238", + "matchCriteriaId": "0DAAEF7F-D560-47FC-8B65-20404DB82432" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.182", + "matchCriteriaId": "57E76AE8-79D9-4EC8-9845-9A86B1ED152E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "B6266F82-46B4-4D38-AC4A-54C92A1DFAB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:-:*:*:*:*:*:*", + "matchCriteriaId": "1D0FE595-0CFE-4491-808B-CEF691CE7B0A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc3:*:*:*:*:*:*", + "matchCriteriaId": "963CFC36-FBAD-465F-9891-CDBBF962DFDD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1B084A7A-6047-4804-9395-6000E4A43828" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc5:*:*:*:*:*:*", + "matchCriteriaId": "C3430640-AC87-44BF-ABF5-09E0A97E3758" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc6:*:*:*:*:*:*", + "matchCriteriaId": "FDF49B77-4688-4908-9239-89B729456D22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc7:*:*:*:*:*:*", + "matchCriteriaId": "77F342FB-3D7B-4EAE-BF8B-57B7B860BAFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.0:rc8:*:*:*:*:*:*", + "matchCriteriaId": "47D61679-6515-4E18-83C7-A71982CCD83C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/26e75716b94d6ff9be5ea07d63675c4d189f30b4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2968632880f1792007eedd12eeedf7f6e2b7e9f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4b07ac06b0a712923255aaf2691637693fc7100d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4f0ecf50cdf76da95828578a92f130b653ac2fcf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5da3aad1a13e7edb8ff0778a444ccf49930313e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab2248110738d4429668140ad22f530a9ee730e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/db205b92dfe0501e5b92fb7cf00971d0e44ba3eb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f99a3fbf023e20b626be4b0f042463d598050c9a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37916.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37916.json index fe8a1e4126e..64e38ba6ab3 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37916.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37916.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37916", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.170", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:03:26.630", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pds_core: eliminar escritura use-after-free de client_id Apareci\u00f3 un error de use-after-free en las pruebas de estr\u00e9s: [Lun 21 Abr 21:21:33 2025] ERROR: KFENCE: escritura use-after-free en pdsc_auxbus_dev_del+0xef/0x160 [pds_core] [Lun 21 Abr 21:21:33 2025] Escritura use-after-free en 0x000000007013ecd1 (en kfence-#47): [Lun 21 Abr 21:21:33 2025] pdsc_auxbus_dev_del+0xef/0x160 [pds_core] [Lun 21 Abr 21:21:33 2025] pdsc_remove+0xc0/0x1b0 [pds_core] [Lun 21 Abr 21:21:33 2025] pci_device_remove+0x24/0x70 [Lun 21 Abr 21:21:33 2025] device_release_driver_internal+0x11f/0x180 [Lun 21 Abr 21:21:33 2025] driver_detach+0x45/0x80 [Lun 21 Abr 21:21:33 2025] bus_remove_driver+0x83/0xe0 [Lun 21 Abr 21:21:33 2025] pci_unregister_driver+0x1a/0x80 La desinicializaci\u00f3n real del dispositivo suele ocurrir en un subproceso separado programado despu\u00e9s de que se ejecuta este c\u00f3digo, pero no hay garant\u00eda de que Orden de ejecuci\u00f3n del hilo, por lo que esto podr\u00eda ser un problema. No es necesario borrar el client_id en este punto; simplemente elimine el c\u00f3digo problem\u00e1tico." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "30833BF6-1E57-4D3D-8FE2-832980842031" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/26dc701021302f11c8350108321d11763bd81dfe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b467c5bcdb45a41d2a49fbb9ffca73d1380e99b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c649b9653ed09196e91d3f4b16b679041b3c42e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dfd76010f8e821b66116dec3c7d90dd2403d1396", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-414xx/CVE-2025-41436.json b/CVE-2025/CVE-2025-414xx/CVE-2025-41436.json index ba0bd85c445..39c3b9ed717 100644 --- a/CVE-2025/CVE-2025-414xx/CVE-2025-41436.json +++ b/CVE-2025/CVE-2025-414xx/CVE-2025-41436.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41436", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-11-14T08:15:45.310", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:52:01.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.6, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.0.0", + "matchCriteriaId": "0E0A9668-C657-425B-BD7E-D1A0CC5648A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json b/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json index 5c8bb41ab92..910f9d44860 100644 --- a/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json +++ b/CVE-2025/CVE-2025-471xx/CVE-2025-47179.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47179", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:35.397", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:48.507", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,43 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:configuration_manager_2403:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.00.9128.1037", + "matchCriteriaId": "DD3A7EF4-3494-4BE8-8ACA-C5DFF72CD6AC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:configuration_manager_2409:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.00.9132.1031", + "matchCriteriaId": "85ED19B5-E9EB-4203-8EF2-1C221B22CF41" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:configuration_manager_2503:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.0.9135.1013", + "matchCriteriaId": "7C22B35A-E6F2-4FD5-AEA2-F31850DDA104" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47179", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55055.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55055.json new file mode 100644 index 00000000000..ae355fbc9c5 --- /dev/null +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55055.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55055", + "sourceIdentifier": "cna@cyber.gov.il", + "published": "2025-11-17T18:15:57.033", + "lastModified": "2025-11-17T18:15:57.033", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cna@cyber.gov.il", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "cna@cyber.gov.il", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", + "source": "cna@cyber.gov.il" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55056.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55056.json new file mode 100644 index 00000000000..b7f24ee0910 --- /dev/null +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55056.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55056", + "sourceIdentifier": "cna@cyber.gov.il", + "published": "2025-11-17T18:15:57.223", + "lastModified": "2025-11-17T18:15:57.223", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cna@cyber.gov.il", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "cna@cyber.gov.il", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", + "source": "cna@cyber.gov.il" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55057.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55057.json new file mode 100644 index 00000000000..5c08166e1a2 --- /dev/null +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55057.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55057", + "sourceIdentifier": "cna@cyber.gov.il", + "published": "2025-11-17T18:15:57.390", + "lastModified": "2025-11-17T18:15:57.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Multiple CWE-352 Cross-Site Request Forgery (CSRF)" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cna@cyber.gov.il", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 4.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "cna@cyber.gov.il", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "references": [ + { + "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", + "source": "cna@cyber.gov.il" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55058.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55058.json new file mode 100644 index 00000000000..26a848ab4be --- /dev/null +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55058.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55058", + "sourceIdentifier": "cna@cyber.gov.il", + "published": "2025-11-17T18:15:57.543", + "lastModified": "2025-11-17T18:15:57.543", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "CWE-20 Improper Input Validation" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cna@cyber.gov.il", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 4.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "cna@cyber.gov.il", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", + "source": "cna@cyber.gov.il" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55059.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55059.json new file mode 100644 index 00000000000..3481b290f11 --- /dev/null +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55059.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-55059", + "sourceIdentifier": "cna@cyber.gov.il", + "published": "2025-11-17T18:15:57.717", + "lastModified": "2025-11-17T18:15:57.717", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')" + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cna@cyber.gov.il", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "cna@cyber.gov.il", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0", + "source": "cna@cyber.gov.il" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-550xx/CVE-2025-55070.json b/CVE-2025/CVE-2025-550xx/CVE-2025-55070.json index 67694406819..090b36542bf 100644 --- a/CVE-2025/CVE-2025-550xx/CVE-2025-55070.json +++ b/CVE-2025/CVE-2025-550xx/CVE-2025-55070.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55070", "sourceIdentifier": "responsibledisclosure@mattermost.com", "published": "2025-11-14T08:15:45.500", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:51:05.737", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.0.0", + "matchCriteriaId": "0E0A9668-C657-425B-BD7E-D1A0CC5648A8" + } + ] + } + ] + } + ], "references": [ { "url": "https://mattermost.com/security-updates", - "source": "responsibledisclosure@mattermost.com" + "source": "responsibledisclosure@mattermost.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58407.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58407.json new file mode 100644 index 00000000000..3d0bde80d82 --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58407.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-58407", + "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "published": "2025-11-17T18:15:57.880", + "lastModified": "2025-11-17T18:15:57.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Kernel or driver software installed on a Guest VM may post improper commands to the GPU Firmware to exploit a TOCTOU race condition and trigger a read and/or write of data outside the allotted memory escaping the virtual machine." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/", + "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-584xx/CVE-2025-58410.json b/CVE-2025/CVE-2025-584xx/CVE-2025-58410.json new file mode 100644 index 00000000000..fee8e51f70a --- /dev/null +++ b/CVE-2025/CVE-2025-584xx/CVE-2025-58410.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-58410", + "sourceIdentifier": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "published": "2025-11-17T17:15:48.880", + "lastModified": "2025-11-17T17:15:48.880", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permissions to memory buffers exported as read-only.\n\nThis is caused by improper handling of the memory protections for the buffer resource." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-280" + } + ] + } + ], + "references": [ + { + "url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities/", + "source": "367425dc-4d06-4041-9650-c2dc6aaa27ce" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json index dc88768e7f4..38ca4911e52 100644 --- a/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58627.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58627", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.557", - "lastModified": "2025-11-13T11:16:33.923", + "lastModified": "2025-11-17T17:15:49.057", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Authorization Bypass Through User-Controlled Key vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous Core Plugin: from n/a through < 2.0.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json index a108da02469..38f1ded4030 100644 --- a/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58629.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58629", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.717", - "lastModified": "2025-11-13T11:16:34.040", + "lastModified": "2025-11-17T17:15:49.310", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json index c27f5cf1e32..12c97b7f9a6 100644 --- a/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58636.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58636", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:15:59.860", - "lastModified": "2025-11-13T11:16:34.200", + "lastModified": "2025-11-17T17:15:49.500", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Object Injection.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through <= 1.2.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json b/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json index 5169ddbacf4..11c50109b9e 100644 --- a/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json +++ b/CVE-2025/CVE-2025-586xx/CVE-2025-58638.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58638", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:00.003", - "lastModified": "2025-11-13T11:16:34.320", + "lastModified": "2025-11-17T17:15:49.690", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e-plugins Institutions Directory institutions-directory allows Reflected XSS.This issue affects Institutions Directory: from n/a through <= 1.3.3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json index f35bb80314c..d521a6f2538 100644 --- a/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58964.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58964", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:00.157", - "lastModified": "2025-11-13T11:16:36.310", + "lastModified": "2025-11-17T17:15:49.883", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.7 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json b/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json index 1ff7f2c8013..45281482d87 100644 --- a/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json +++ b/CVE-2025/CVE-2025-589xx/CVE-2025-58972.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58972", "sourceIdentifier": "audit@patchstack.com", "published": "2025-11-06T16:16:00.320", - "lastModified": "2025-11-13T11:16:37.273", + "lastModified": "2025-11-17T17:15:50.070", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of \"UKR Solution\") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.10.4." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "audit@patchstack.com", diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json index b7784ee3e38..fa4d8b6d030 100644 --- a/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59240.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59240", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:35.563", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:39:46.967", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59240", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json index 2efa3c49577..eac3f251f7d 100644 --- a/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59499.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59499", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:35.733", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:37.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,81 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "13.0.6300.2", + "versionEndExcluding": "13.0.6475.1", + "matchCriteriaId": "6F942F6A-4994-45EA-8C29-F38103686576" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2016:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "13.0.7000.253", + "versionEndExcluding": "13.0.7070.1", + "matchCriteriaId": "19B13D04-C970-48BA-BD9E-27961F78FEFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.1000.169", + "versionEndExcluding": "14.0.2095.1", + "matchCriteriaId": "596C96BD-A53C-4039-83BE-BC9CD42FB1C2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2017:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "14.0.3006.16", + "versionEndExcluding": "14.0.3515.1", + "matchCriteriaId": "E89452A1-5701-4143-BCA1-B9A8EED992AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.2000.5", + "versionEndExcluding": "15.0.2155.2", + "matchCriteriaId": "861744A1-B08B-465D-B2DE-362880A52CFB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "15.0.4003.23", + "versionEndExcluding": "15.0.4455.2", + "matchCriteriaId": "07DA2EF2-81AF-4994-922A-DB1F1BDB4E82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.1000.6", + "versionEndExcluding": "16.0.1160.1", + "matchCriteriaId": "4FF6DB8F-96A8-4C42-8030-15D365AE6320" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*", + "versionStartIncluding": "16.0.4003.1", + "versionEndExcluding": "16.0.4222.2", + "matchCriteriaId": "6B71EA83-0BD9-46C9-AD59-B7BF7FD45FB1" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59499", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json index 41ca140fd48..aa663e9c532 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59504.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59504", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:35.900", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:44.493", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:azure_monitor_agent:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.37.1", + "matchCriteriaId": "D9D4FF49-E201-4F91-8DA1-7E5F43B3B53B" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59504", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json index c5f476d7529..d4394f0134b 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59505.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59505", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.060", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:19.417", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,119 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59505", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json index 8d2b0c3f986..023120d3e02 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59506.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59506", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.230", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:15.073", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,119 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59506", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json index 9f72ea4008d..64b0d5f7c49 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59507.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59507", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.403", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:08.237", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,109 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59507", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json index c78d6538cc1..f1876f51238 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59508.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59508", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.570", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:05.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,109 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59508", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json index ff92c566cb2..164f1b7e132 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59509.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59509", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.737", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:00:53.457", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59509", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json index 2c0732ec5ba..ca645fdb121 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59510.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59510", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:36.900", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:41.787", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,114 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59510", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json index 5dcf9f427c2..5402347c047 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59511.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59511", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.067", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:38.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59511", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json index 55b0681d82d..8d52905f36f 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59512.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59512", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.230", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:35.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,119 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59512", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json index 2708ca69848..2e001aa5a4a 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59513.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59513", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.397", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:32.230", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,124 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59513", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json index ef87810fd27..41c78c56ec8 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59514.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59514", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.560", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:29.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59514", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json b/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json index de12e4aca5b..1e19350fd64 100644 --- a/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json +++ b/CVE-2025/CVE-2025-595xx/CVE-2025-59515.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59515", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.723", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:23.013", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,85 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59515", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60676.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60676.json index e06796ef891..279b2ac4107 100644 --- a/CVE-2025/CVE-2025-606xx/CVE-2025-60676.json +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60676.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60676", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T19:15:48.560", - "lastModified": "2025-11-14T17:16:05.867", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T17:58:34.990", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-878_firmware:1.01b04:*:*:*:*:*:*:*", + "matchCriteriaId": "CF6C5938-ACC7-4DD4-B3EF-AD64468AD60F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-878:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "70A35F2E-E46F-47CF-BF0F-9CF9A3242EDC" + } + ] + } + ] + } + ], "references": [ { "url": "http://d-link.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60676.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60679.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60679.json index 5701c3e3e7a..a912fb4bbbd 100644 --- a/CVE-2025/CVE-2025-606xx/CVE-2025-60679.json +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60679.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60679", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T20:15:51.420", - "lastModified": "2025-11-14T18:15:50.557", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-17T17:57:15.760", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-816_firmware:1.10cnb05_r1b011d88210:*:*:*:*:*:*:*", + "matchCriteriaId": "6494A725-3860-4428-A0F3-076605CAF7F2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*", + "matchCriteriaId": "1A3AC507-7219-401E-AC60-12D96382E4B7" + } + ] + } + ] + } + ], "references": [ { "url": "http://d-link.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-816/CVE-2025-60679.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/en", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json index e113097de14..f37316f0a18 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60703.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60703", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:37.890", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:19.307", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60703", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json index 4f3a6c0995a..0db794596bf 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60704.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60704", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.060", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:15.507", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60704", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json index 1bb3ae00032..0cca14eabdd 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60705.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60705", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.237", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:11.453", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60705", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json index 8b6806a57bb..698b8e65b7d 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60706.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60706", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.403", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:07.927", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,97 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "B0921FD1-AF05-4DDD-AC52-9D77E7BC7C39" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "0065D2D9-AE62-45D7-B807-2129B3E3A62D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60706", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json index 358b11ee348..20a4f49c52d 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60707.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60707", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.570", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:27.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60707", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json index f774856453c..de854635cb2 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60708.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60708", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.737", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:47:26.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,97 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "B0921FD1-AF05-4DDD-AC52-9D77E7BC7C39" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "0065D2D9-AE62-45D7-B807-2129B3E3A62D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60708", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json index e2a9f9b8cfa..19e2ae56b1f 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60709.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60709", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:38.903", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:21.477", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60709", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json index 40b31ec51f8..59aa39e8ce3 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60710.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60710", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.073", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:16.353", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json index 0f6ba62db2e..37f14a99b67 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60713.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60713", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.233", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:10.020", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,55 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60713", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json index 62cd5cb0fa1..f8513417616 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60714.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60714", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.390", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:05.550", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,116 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60714", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json index afb2abc504d..b35bfe0fe2c 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60715.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60715", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.560", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:43:02.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60715", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json index 73f5dd4c37c..f59360e7344 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60716.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60716", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.740", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:54.597", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60716", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json index a60856d6ba4..d0cdf38cea2 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60717.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60717", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:39.900", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:50.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,85 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60717", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json index 64d350fd671..e7713a04d33 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60718.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60718", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.073", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:47.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60718", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json index 2267498e161..b56b359bdc9 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60719.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60719", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.233", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:43.480", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60719", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json index c02009381e7..c19b1caf40d 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60720.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60720", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.400", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:39.480", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60720", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json index 130e198aa23..35bbbf4896c 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60721.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60721", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.573", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:42:34.533", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60721", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json index 10ca32954d0..7d3e0574e48 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60722.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60722", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.733", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:29.363", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:onedrive:*:*:*:*:*:android:*:*", + "versionEndExcluding": "7.42", + "matchCriteriaId": "9B6C9FC0-8BFB-4878-B006-D21E7CEC87F7" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60722", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json index 09ac2bd4e13..c0469ba794d 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60723.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60723", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:40.883", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:11.263", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60723", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json index 7b486d386cf..16be58ae36c 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60724.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60724", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:41.060", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:24.140", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,150 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*", + "versionEndExcluding": "16.0.19426.20044", + "matchCriteriaId": "BFBC41B3-9D2A-4D18-B3CB-D2B4186F9B22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60724", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json index 8fa322c0a74..ea3f48a9317 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60726.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60726", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:41.240", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:33.700", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60726", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json index 852a211672d..d82c8a3462a 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60727.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60727", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:41.397", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:03:46.800", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60727", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json index bb3ce7ca9ae..5d903459f01 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60728.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60728", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:41.550", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:03:39.387", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secure@microsoft.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -51,10 +71,50 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60728", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json b/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json index 4442e06015d..c8791c7e05d 100644 --- a/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json +++ b/CVE-2025/CVE-2025-621xx/CVE-2025-62199.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62199", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:43.013", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:02:11.457", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,81 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:*:*:*:*:*:android:*:*", + "versionEndExcluding": "16.0.19426.20044", + "matchCriteriaId": "BFBC41B3-9D2A-4D18-B3CB-D2B4186F9B22" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62199", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json index a341bdc8eec..7f01af4d7c8 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62200.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62200", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:43.237", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:59.723", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,81 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62200", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json index 93d63f439d8..74d9762384a 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62201.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62201", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:43.440", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:56.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62201", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json index b303b7c5f06..c648b8b70c3 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62202.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62202", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:43.693", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:51.953", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62202", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json index 5b2ace5518c..a4d01d9ce7e 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62203.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62203", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:43.970", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:46.200", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,91 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x64:*", + "matchCriteriaId": "CD88F667-6773-4DB7-B6C3-9C7B769C0808" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:x86:*", + "matchCriteriaId": "B342EF98-B414-44D0-BAFB-FCA24294EECE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x64:*", + "matchCriteriaId": "CF5DDD09-902E-4881-98D0-CB896333B4AA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:x86:*", + "matchCriteriaId": "26A3B226-5D7C-4556-9350-5222DC8EFC2C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*", + "matchCriteriaId": "BF0E8112-5B6F-4E55-8E40-38ADCF6FC654" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:macos:*:*", + "matchCriteriaId": "EF3E56B5-E6A6-4061-9380-D421E52B9199" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*", + "versionEndExcluding": "16.0.10417.20068", + "matchCriteriaId": "5B5A0D24-857F-4078-A9C3-D4F2EEEF283F" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62203", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json index 877b499e78e..1151b61f152 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62204.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62204", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:45.513", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:37.127", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,41 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:*:*:*:*:subscription:*:*:*", + "versionEndExcluding": "16.0.19127.20338", + "matchCriteriaId": "103BFF3E-537B-4F79-8FEB-4815DFAA85CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "F815EF1D-7B60-47BE-9AC2-2548F99F10E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*", + "matchCriteriaId": "6122D014-5BF1-4AF4-8B4D-80205ED7785E" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62204", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json index d8fa8313b07..cbd9ead8fce 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62205.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62205", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:46.117", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:01:30.640", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,55 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62205", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json index b37abc848a2..c116c545603 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62206.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62206", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:47.750", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:57.177", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:on-premises:*:*:*", + "versionStartIncluding": "9.1", + "versionEndExcluding": "9.1.41.07", + "matchCriteriaId": "15CCC42B-7994-462B-9C7D-417C85AF2F25" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62206", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json index e5c4fc66578..3d5fce8b733 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62208.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62208", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:47.923", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:13.993", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,127 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6060", + "matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62208", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json index 4e030564889..9c830c9da85 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62209.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62209", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:48.100", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:05.017", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,127 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "030F3214-D6AF-40A9-9FC9-523AC9870581" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.10240.21161", + "matchCriteriaId": "4932CB20-D134-4EDF-8F21-F9D0AF80BFEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "3EE0CDB1-CBF3-45F2-8F0B-96A9D0757B42" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "36E44227-0320-43B1-A0D9-EB28B25CDB4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6456", + "matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6456", + "matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.6060", + "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6060", + "matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.6899", + "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8519", + "matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.7919", + "matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4294", + "matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1913", + "matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6899", + "matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62209", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json index 0105be148e4..2b13cd48323 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62210.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62210", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:48.273", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:41:05.323", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:field_service:*:*:*", + "versionEndExcluding": "8.8.139.398", + "matchCriteriaId": "6EA62CF6-E011-4518-9ED6-C0072E54B2D9" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62210", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json index 687ec8c949b..1b814f6b17a 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62211.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62211", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:48.440", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:41:00.753", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:dynamics_365:*:*:*:*:field_service:*:*:*", + "versionEndExcluding": "8.8.139.398", + "matchCriteriaId": "6EA62CF6-E011-4518-9ED6-C0072E54B2D9" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62211", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json index c1c9c90bc38..a0c66522429 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62213.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62213", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:48.600", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:16:02.230", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,134 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "7BB42F69-3A99-4057-8C66-870B6ABFCED2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "19D83039-82E6-420D-95EA-3D3B1BA37ED8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "16F25469-D606-4A71-9A94-C10E1D08B231" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "1A6A1513-48D5-4D4D-97F1-BFDAE4DC9396" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6575", + "matchCriteriaId": "EB5C0945-7EA1-4874-98E7-4234D85E0C0D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6575", + "matchCriteriaId": "655C5458-E6FB-408D-BCB4-0D28F8283D55" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.6199", + "matchCriteriaId": "0752A377-F96A-4B2F-B542-A9A9665AB913" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "4345F25E-DF90-4CB2-B310-F82E08502815" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26200.7092", + "matchCriteriaId": "5A547AA3-FC6B-46D9-8D22-995C3CA33140" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*", + "matchCriteriaId": "2127D10C-B6F3-4C1D-B9AA-5D78513CC996" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*", + "matchCriteriaId": "AB425562-C0A0-452E-AABE-F70522F15E1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", + "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", + "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.14393.8594", + "matchCriteriaId": "BD73B71D-FB6A-4B0E-80F5-9F6A06FC93A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.17763.8027", + "matchCriteriaId": "970E52EF-A858-4132-9D8C-4B31E169002C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4346", + "matchCriteriaId": "5791ADD5-7D67-4659-9DA2-09337A1D82C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1965", + "matchCriteriaId": "256174B8-134D-44F5-9497-408AC51DE5DB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.7092", + "matchCriteriaId": "69424DAF-E9EA-4B50-80EC-5BAA97DEB772" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62213", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json index ca7274628d3..c49836157b8 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62214.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62214", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:48.760", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:40:51.857", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:-:*:*", + "versionStartIncluding": "17.14.0", + "versionEndExcluding": "17.14.17", + "matchCriteriaId": "F61EABD9-62E8-484E-8C6E-AA6F330FA7A4" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62214", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json index 7f192904d4a..fa4783caf19 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62216.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62216", "sourceIdentifier": "secure@microsoft.com", "published": "2025-11-11T18:15:49.080", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T17:41:09.980", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,55 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*", + "matchCriteriaId": "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*", + "matchCriteriaId": "CD25F492-9272-4836-832C-8439EBE64CCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x64:*", + "matchCriteriaId": "851BAC4E-9965-4F40-9A6C-B73D9004F4C1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:-:x86:*", + "matchCriteriaId": "23B2FA23-76F4-4D83-A718-B8D04D7EA37B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x64:*", + "matchCriteriaId": "D31E509A-0B2E-4B41-88C4-0099E800AFE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:microsoft:office_long_term_servicing_channel:2024:*:*:*:*:-:x86:*", + "matchCriteriaId": "017A7041-BEF1-4E4E-AC8A-EFC6AFEB01FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62216", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-625xx/CVE-2025-62519.json b/CVE-2025/CVE-2025-625xx/CVE-2025-62519.json new file mode 100644 index 00000000000..0f6c47b2c97 --- /dev/null +++ b/CVE-2025/CVE-2025-625xx/CVE-2025-62519.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62519", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-17T17:15:50.400", + "lastModified": "2025-11-17T17:15:50.400", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "phpMyFAQ is an open source FAQ web application. Prior to version 4.0.14, an authenticated SQL injection vulnerability in the main configuration update functionality of phpMyFAQ allows a privileged user with 'Configuration Edit' permissions to execute arbitrary SQL commands. Successful exploitation can lead to a full compromise of the database, including reading, modifying, or deleting all data, as well as potential remote code execution depending on the database configuration. This issue has been patched in version 4.0.14." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/thorsten/phpMyFAQ/compare/4.0.13...4.0.14", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-fxm2-cmwj-qvx4", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-628xx/CVE-2025-62876.json b/CVE-2025/CVE-2025-628xx/CVE-2025-62876.json index 27a9dbda086..e4ad18ac56e 100644 --- a/CVE-2025/CVE-2025-628xx/CVE-2025-62876.json +++ b/CVE-2025/CVE-2025-628xx/CVE-2025-62876.json @@ -2,7 +2,7 @@ "id": "CVE-2025-62876", "sourceIdentifier": "meissner@suse.de", "published": "2025-11-12T13:15:46.213", - "lastModified": "2025-11-12T16:19:12.850", + "lastModified": "2025-11-17T17:15:50.667", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -60,7 +60,7 @@ "weaknesses": [ { "source": "meissner@suse.de", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -73,6 +73,10 @@ { "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-62876", "source": "meissner@suse.de" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/17/4", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-631xx/CVE-2025-63153.json b/CVE-2025/CVE-2025-631xx/CVE-2025-63153.json index 43089300922..b416ea957d2 100644 --- a/CVE-2025/CVE-2025-631xx/CVE-2025-63153.json +++ b/CVE-2025/CVE-2025-631xx/CVE-2025-63153.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63153", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T16:15:45.253", - "lastModified": "2025-11-12T21:15:51.540", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:23:11.127", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:*", + "matchCriteriaId": "A5BB152D-5E33-4158-BFFD-68AED6A174E2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "603DA206-05D4-48FD-A506-F3BD8B4383B2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/0-fool/VulnbyCola/blob/main/TOTOLINK/A7000/6/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-631xx/CVE-2025-63154.json b/CVE-2025/CVE-2025-631xx/CVE-2025-63154.json index 49b583dbf37..90b89b60617 100644 --- a/CVE-2025/CVE-2025-631xx/CVE-2025-63154.json +++ b/CVE-2025/CVE-2025-631xx/CVE-2025-63154.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63154", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T16:15:45.397", - "lastModified": "2025-11-12T21:15:51.703", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:22:52.723", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:*", + "matchCriteriaId": "A5BB152D-5E33-4158-BFFD-68AED6A174E2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*", + "matchCriteriaId": "603DA206-05D4-48FD-A506-F3BD8B4383B2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/0-fool/VulnbyCola/blob/main/TOTOLINK/A7000/4/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json index cce0437e8d3..a572cf43fb7 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63456.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63456", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:34.957", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:35:00.850", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "B81C53EE-14CD-426B-ADF3-6D9B4D69DC84" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*", + "matchCriteriaId": "413B93A8-6188-4D89-8141-C5B73F4AA071" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/3/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json index 5a4ade21377..f5baa42451c 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63457.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63457", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.100", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:34:11.637", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub_4F55C function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "B81C53EE-14CD-426B-ADF3-6D9B4D69DC84" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*", + "matchCriteriaId": "413B93A8-6188-4D89-8141-C5B73F4AA071" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/0-fool/VulnbyCola/blob/main/Tenda/AX-1803/1/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63638.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63638.json index f5159b150fb..8d7948caf44 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63638.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63638.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63638", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T20:15:37.987", - "lastModified": "2025-11-12T20:15:43.613", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:46:06.327", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:remyandrade:ai-powered_to-do_list_app:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "84871F2B-8B90-403E-9B87-412E21CA6F03" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ChuckBartowski7/Vulnerability-Research/tree/main/CVE-2025-63638", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/javascript/18421/ai-powered-do-list-app-using-html-css-and-javascript-source-code.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63639.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63639.json index f5a1324c3e7..c23d0c3bfb1 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63639.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63639.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63639", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T20:15:38.113", - "lastModified": "2025-11-12T20:15:43.783", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:55:26.417", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:remyandrade:faq_bot_with_ai_assistant:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "999FC52A-4EE9-4869-8E8E-2D93D3BC84F8" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63639/README.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/javascript/18413/faq-bot-ai-assistant-using-html-css-and-javascript-source-code.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63640.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63640.json index 9643740037c..f94fb5c7699 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63640.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63640.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63640", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T20:15:38.243", - "lastModified": "2025-11-12T20:15:43.947", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:13:14.433", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:rems:medicine_reminder_app:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "1A1883BA-D70B-41AF-8A9D-40AAB9A5003A" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63640/README.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/javascript/18402/medicine-reminder-app-using-html-css-and-javascript-source-code.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63666.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63666.json index 97180418c6a..03d36c66ea8 100644 --- a/CVE-2025/CVE-2025-636xx/CVE-2025-63666.json +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63666.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63666", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-12T15:15:38.583", - "lastModified": "2025-11-13T18:15:54.270", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:59:20.080", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,44 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac15_firmware:15.03.05.18:*:*:*:*:*:*:*", + "matchCriteriaId": "56881C41-A993-45CC-BAE6-E9DE17FA56E2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac15:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B73E7C1C-F121-486A-8B15-E97EA0C219A5" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Remenis/CVE-2025-63666", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63708.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63708.json index df6f659ad7e..93a7a2c664c 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63708.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63708.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63708", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-17T16:15:50.327", - "lastModified": "2025-11-17T16:15:50.327", + "lastModified": "2025-11-17T17:15:50.830", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary JavaScript in victims' browsers. The vulnerability occurs in the webfonts API handling mechanism where font family names are not properly sanitized. An attacker can intercept fetch requests to the webfonts endpoint and inject malicious JavaScript payloads through font family names, resulting in session cookie theft, account hijacking, and unauthorized actions performed on behalf of authenticated users. The vulnerability can be exploited by injecting a fetch hook that returns controlled font data containing malicious scripts." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/DylanDavis1/CVE-2025-64708", @@ -20,6 +55,10 @@ { "url": "https://www.sourcecodester.com/javascript/18425/ai-font-matcher-using-html-css-and-javascript-source-code.html", "source": "cve@mitre.org" + }, + { + "url": "https://github.com/DylanDavis1/CVE-2025-64708", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json index 08835aca2e5..de1138cf7c1 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63709.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63709", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:37.793", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:20:14.297", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,75 @@ "value": "A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the \"Add Tasks\" text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of any user who views the task, allowing execution of arbitrary script in the context of the victim's browser." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:chuck24:simple_to-do_list_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "188CC7C5-CF9B-4488-B4DE-1B3547AFFDF2" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/tree/main/CVE-2025-63709", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/17897/simple-do-list-system-using-php.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63710.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63710.json index 2c527b9702c..82583c5fe91 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63710.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63710.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63710", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:37.920", - "lastModified": "2025-11-12T20:15:44.113", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:18:39.677", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:pijey:simple_public_chat_room:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "4333F6E1-DB7B-451F-96FD-437425AFA15A" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63710/README2.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/12295/simple-public-chat-room-using-php.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63711.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63711.json index bd629fa4c8e..f6ca96997c5 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63711.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63711.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63711", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:38.057", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:16:51.357", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:lerouxyxchire:client_database_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "DFE80DE6-C79F-452F-9523-4EC1F9777DA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63711/README3.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/17514/client-database-management-system.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json index ddc2477817b..a88e018d194 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63712.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63712", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T15:15:38.240", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:15:02.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,15 +11,74 @@ "value": "Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:senior-walter:web-based_pharmacy_product_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "DB2DA030-DE10-4DA9-86D7-3E3E9A22DABC" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63712/README4.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63716.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63716.json index b35dcbf9bf2..fb92790b971 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63716.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63716.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63716", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T18:15:36.653", - "lastModified": "2025-11-12T20:15:44.670", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:37:54.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:rems:leads_manager_tool:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "94D0D566-14CD-4A7B-869C-0C34E5E01F62" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63716/README5.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/17510/leads-manager-tool-using-php-and-mysql-source-code.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63717.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63717.json index 4fcdf859427..611ad1e8c61 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63717.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63717.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63717", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T19:16:26.387", - "lastModified": "2025-11-12T20:15:44.843", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:40:18.373", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "B88D324D-B780-4D8D-BE43-829227D2808F" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63717/README6.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/18340/pet-grooming-management-software-download.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-637xx/CVE-2025-63718.json b/CVE-2025/CVE-2025-637xx/CVE-2025-63718.json index 19afb38293a..c505299d876 100644 --- a/CVE-2025/CVE-2025-637xx/CVE-2025-63718.json +++ b/CVE-2025/CVE-2025-637xx/CVE-2025-63718.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63718", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T18:15:36.780", - "lastModified": "2025-11-12T20:15:45.020", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:38:45.273", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63718/README8.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.sourcecodester.com/php/18348/patients-waiting-area-queue-management-system.html", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json index ca038b08562..a5990c069eb 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63834.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63834", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.810", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:30:40.370", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "A stored cross-site scripting (XSS) vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac18_firmware:15.03.05.05:*:*:*:*:*:*:*", + "matchCriteriaId": "4D5CB727-FC6B-4212-A61E-2888A0DADFB0" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CF9F8AF9-F921-4348-922B-EE5E6037E7AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/babraink/cve_report/blob/main/cve_report/tenda/tendaAC18/wifiset_ssid_xss/README.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json b/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json index 0029ffd5f59..6ac6e44eb38 100644 --- a/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json +++ b/CVE-2025/CVE-2025-638xx/CVE-2025-63835.json @@ -2,8 +2,8 @@ "id": "CVE-2025-63835", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T17:15:35.960", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T18:28:18.650", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -11,11 +11,79 @@ "value": "A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to denial of service (device crash) or potential remote code execution." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:tenda:ac18_firmware:15.03.05.05:*:*:*:*:*:*:*", + "matchCriteriaId": "4D5CB727-FC6B-4212-A61E-2888A0DADFB0" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CF9F8AF9-F921-4348-922B-EE5E6037E7AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/babraink/cve_report/blob/main/cve_report/tenda/tendaAC18/2_wifiguest_guestssid_overflow/README.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-639xx/CVE-2025-63916.json b/CVE-2025/CVE-2025-639xx/CVE-2025-63916.json index 6ba9d4027f5..60e6119a135 100644 --- a/CVE-2025/CVE-2025-639xx/CVE-2025-63916.json +++ b/CVE-2025/CVE-2025-639xx/CVE-2025-63916.json @@ -2,7 +2,7 @@ "id": "CVE-2025-63916", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-17T16:15:50.700", - "lastModified": "2025-11-17T16:15:50.700", + "lastModified": "2025-11-17T17:15:51.007", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool. The application fails to properly sanitize user-supplied file paths before passing them to cmd.exe, allowing attackers to execute arbitrary system commands with the privileges of the user running the application. The vulnerability exists in the CMD() function within GIFSicleTool\\Form_gif_sicle_tool.cs, which constructs shell commands by concatenating unsanitized user input (file paths) and executes them via cmd.exe." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], "references": [ { "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/myscreentools/OSCommandInjection-GifCompression.md", diff --git a/CVE-2025/CVE-2025-639xx/CVE-2025-63917.json b/CVE-2025/CVE-2025-639xx/CVE-2025-63917.json new file mode 100644 index 00000000000..19ff3ce3e95 --- /dev/null +++ b/CVE-2025/CVE-2025-639xx/CVE-2025-63917.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-63917", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:51.207", + "lastModified": "2025-11-17T17:15:51.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references. The application uses .NET's XmlDocument class without disabling external entity resolution, enabling attackers to: Read arbitrary files from the victim's filesystem, exfiltrate sensitive data via out-of-band (OOB) HTTP requests, perform SSRF attacks against internal network resources, or cause a denial of service via entity expansion attacks." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/XXE-Importers.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/wmjordan/PDFPatcher", + "source": "cve@mitre.org" + }, + { + "url": "https://www.cnblogs.com/pdfpatcher", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json b/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json new file mode 100644 index 00000000000..1e8be973d80 --- /dev/null +++ b/CVE-2025/CVE-2025-639xx/CVE-2025-63918.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-63918", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T17:15:51.333", + "lastModified": "2025-11-17T17:15:51.333", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/pdfpatcher/DirectoryTraversal-ImageExport.md", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/wmjordan/PDFPatcher", + "source": "cve@mitre.org" + }, + { + "url": "https://www.cnblogs.com/pdfpatcher", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-643xx/CVE-2025-64342.json b/CVE-2025/CVE-2025-643xx/CVE-2025-64342.json new file mode 100644 index 00000000000..8edf5f812d0 --- /dev/null +++ b/CVE-2025/CVE-2025-643xx/CVE-2025-64342.json @@ -0,0 +1,102 @@ +{ + "id": "CVE-2025-64342", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-17T18:15:58.090", + "lastModified": "2025-11-17T18:15:58.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. When the ESP32 is in advertising mode, if it receives a connection request containing an invalid Access Address (AA) of 0x00000000 or 0xFFFFFFFF, advertising may stop unexpectedly. In this case, the controller may incorrectly report a connection event to the host, which can cause the application layer to assume that the device has successfully established a connection. This issue has been fixed in versions 5.5.2, 5.4.3, 5.3.5, 5.2.6, and 5.1.7. At time of publication versions 5.5.2, 5.3.5, and 5.1.7 have not been released but are fixed respectively in commits 3b95b50, e3d7042, and 75967b5." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-754" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/espressif/esp-idf/commit/309f031dd6b04de30c926a256508c65b0df95dfa", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/commit/3b95b50703cd3301a370cffaa1cc299b1941fe2a", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/commit/75967b578563ea7876dc215251cbb6d64bc9d768", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/commit/8ec541023684d33b498fa21c5b4724bce748aa7b", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/commit/bf66761962579f73aea682d1154b9c99b9d3d7dc", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/commit/e3d70429566ece1ef593d36aa4ebd320e0c95925", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/espressif/esp-idf/security/advisories/GHSA-8mg7-9qpg-p92v", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json b/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json new file mode 100644 index 00000000000..43fd6b6496d --- /dev/null +++ b/CVE-2025/CVE-2025-647xx/CVE-2025-64756.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-64756", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-17T18:15:58.270", + "lastModified": "2025-11-17T18:15:58.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Glob matches files using patterns the shell uses. From versions 10.3.7 to 11.0.3, the glob CLI contains a command injection vulnerability in its -c/--cmd option that allows arbitrary command execution when processing files with malicious names. When glob -c are used, matched filenames are passed to a shell with shell: true, enabling shell metacharacters in filenames to trigger command injection and achieve arbitrary code execution under the user or CI account privileges. This issue has been patched in version 11.1.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-647xx/CVE-2025-64758.json b/CVE-2025/CVE-2025-647xx/CVE-2025-64758.json new file mode 100644 index 00000000000..71d1dd87cf5 --- /dev/null +++ b/CVE-2025/CVE-2025-647xx/CVE-2025-64758.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-64758", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-17T18:15:58.450", + "lastModified": "2025-11-17T18:15:58.450", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Since version 4.12.0, Dependency-Track users with the SYSTEM_CONFIGURATION permission can configure a \"welcome message\", which is HTML that is to be rendered on the login page for branding purposes. When rendering the welcome message, Dependency-Track versions before 4.13.6 did not properly sanitize the HTML, allowing arbitrary JavaScript to be executed. Users with the SYSTEM_CONFIGURATION permission (i.e., administrators), can exploit this weakness to execute arbitrary JavaScript for users browsing to the login page. The issue has been fixed in version 4.13.6." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/DependencyTrack/frontend/commit/8fd757be612eaf4f35eadbe4c334204d7bd711be", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DependencyTrack/frontend/pull/1378", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DependencyTrack/frontend/pull/986", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/DependencyTrack/frontend/security/advisories/GHSA-7xvh-c266-cfr5", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 922c0a78205..2cbaff8aefb 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-17T17:00:12.696651+00:00 +2025-11-17T19:00:11.197817+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-17T16:53:32.697000+00:00 +2025-11-17T18:59:20.080000+00:00 ``` ### Last Data Feed Release @@ -33,55 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318444 +318474 ``` ### CVEs added in the last Commit -Recently added CVEs: `11` +Recently added CVEs: `30` -- [CVE-2025-13287](CVE-2025/CVE-2025-132xx/CVE-2025-13287.json) (`2025-11-17T15:15:47.890`) -- [CVE-2025-13288](CVE-2025/CVE-2025-132xx/CVE-2025-13288.json) (`2025-11-17T16:15:46.080`) -- [CVE-2025-13289](CVE-2025/CVE-2025-132xx/CVE-2025-13289.json) (`2025-11-17T16:15:46.307`) -- [CVE-2025-13310](CVE-2025/CVE-2025-133xx/CVE-2025-13310.json) (`2025-11-17T15:15:49.020`) -- [CVE-2025-4321](CVE-2025/CVE-2025-43xx/CVE-2025-4321.json) (`2025-11-17T15:15:51.733`) -- [CVE-2025-63708](CVE-2025/CVE-2025-637xx/CVE-2025-63708.json) (`2025-11-17T16:15:50.327`) -- [CVE-2025-63747](CVE-2025/CVE-2025-637xx/CVE-2025-63747.json) (`2025-11-17T16:15:50.463`) -- [CVE-2025-63748](CVE-2025/CVE-2025-637xx/CVE-2025-63748.json) (`2025-11-17T16:15:50.583`) -- [CVE-2025-63916](CVE-2025/CVE-2025-639xx/CVE-2025-63916.json) (`2025-11-17T16:15:50.700`) -- [CVE-2025-64046](CVE-2025/CVE-2025-640xx/CVE-2025-64046.json) (`2025-11-17T16:15:50.820`) -- [CVE-2025-65083](CVE-2025/CVE-2025-650xx/CVE-2025-65083.json) (`2025-11-17T16:15:51.007`) +- [CVE-2024-44652](CVE-2024/CVE-2024-446xx/CVE-2024-44652.json) (`2025-11-17T17:15:46.410`) +- [CVE-2024-44653](CVE-2024/CVE-2024-446xx/CVE-2024-44653.json) (`2025-11-17T18:15:55.577`) +- [CVE-2024-44657](CVE-2024/CVE-2024-446xx/CVE-2024-44657.json) (`2025-11-17T18:15:55.737`) +- [CVE-2024-46334](CVE-2024/CVE-2024-463xx/CVE-2024-46334.json) (`2025-11-17T17:15:46.533`) +- [CVE-2024-46336](CVE-2024/CVE-2024-463xx/CVE-2024-46336.json) (`2025-11-17T17:15:46.720`) +- [CVE-2025-13193](CVE-2025/CVE-2025-131xx/CVE-2025-13193.json) (`2025-11-17T17:15:47.110`) +- [CVE-2025-13290](CVE-2025/CVE-2025-132xx/CVE-2025-13290.json) (`2025-11-17T17:15:48.100`) +- [CVE-2025-13291](CVE-2025/CVE-2025-132xx/CVE-2025-13291.json) (`2025-11-17T17:15:48.320`) +- [CVE-2025-13297](CVE-2025/CVE-2025-132xx/CVE-2025-13297.json) (`2025-11-17T18:15:56.497`) +- [CVE-2025-13319](CVE-2025/CVE-2025-133xx/CVE-2025-13319.json) (`2025-11-17T17:15:48.550`) +- [CVE-2025-34322](CVE-2025/CVE-2025-343xx/CVE-2025-34322.json) (`2025-11-17T18:15:56.710`) +- [CVE-2025-34323](CVE-2025/CVE-2025-343xx/CVE-2025-34323.json) (`2025-11-17T18:15:56.880`) +- [CVE-2025-55055](CVE-2025/CVE-2025-550xx/CVE-2025-55055.json) (`2025-11-17T18:15:57.033`) +- [CVE-2025-55056](CVE-2025/CVE-2025-550xx/CVE-2025-55056.json) (`2025-11-17T18:15:57.223`) +- [CVE-2025-55057](CVE-2025/CVE-2025-550xx/CVE-2025-55057.json) (`2025-11-17T18:15:57.390`) +- [CVE-2025-55058](CVE-2025/CVE-2025-550xx/CVE-2025-55058.json) (`2025-11-17T18:15:57.543`) +- [CVE-2025-55059](CVE-2025/CVE-2025-550xx/CVE-2025-55059.json) (`2025-11-17T18:15:57.717`) +- [CVE-2025-58407](CVE-2025/CVE-2025-584xx/CVE-2025-58407.json) (`2025-11-17T18:15:57.880`) +- [CVE-2025-58410](CVE-2025/CVE-2025-584xx/CVE-2025-58410.json) (`2025-11-17T17:15:48.880`) +- [CVE-2025-62519](CVE-2025/CVE-2025-625xx/CVE-2025-62519.json) (`2025-11-17T17:15:50.400`) +- [CVE-2025-63917](CVE-2025/CVE-2025-639xx/CVE-2025-63917.json) (`2025-11-17T17:15:51.207`) +- [CVE-2025-63918](CVE-2025/CVE-2025-639xx/CVE-2025-63918.json) (`2025-11-17T17:15:51.333`) +- [CVE-2025-64342](CVE-2025/CVE-2025-643xx/CVE-2025-64342.json) (`2025-11-17T18:15:58.090`) +- [CVE-2025-64756](CVE-2025/CVE-2025-647xx/CVE-2025-64756.json) (`2025-11-17T18:15:58.270`) +- [CVE-2025-64758](CVE-2025/CVE-2025-647xx/CVE-2025-64758.json) (`2025-11-17T18:15:58.450`) ### CVEs modified in the last Commit -Recently modified CVEs: `50` +Recently modified CVEs: `120` -- [CVE-2025-58986](CVE-2025/CVE-2025-589xx/CVE-2025-58986.json) (`2025-11-17T16:15:47.010`) -- [CVE-2025-58994](CVE-2025/CVE-2025-589xx/CVE-2025-58994.json) (`2025-11-17T16:15:47.227`) -- [CVE-2025-58995](CVE-2025/CVE-2025-589xx/CVE-2025-58995.json) (`2025-11-17T16:15:47.420`) -- [CVE-2025-58996](CVE-2025/CVE-2025-589xx/CVE-2025-58996.json) (`2025-11-17T16:15:47.607`) -- [CVE-2025-58998](CVE-2025/CVE-2025-589xx/CVE-2025-58998.json) (`2025-11-17T16:15:47.793`) -- [CVE-2025-59033](CVE-2025/CVE-2025-590xx/CVE-2025-59033.json) (`2025-11-17T16:15:48.010`) -- [CVE-2025-59556](CVE-2025/CVE-2025-595xx/CVE-2025-59556.json) (`2025-11-17T16:15:48.233`) -- [CVE-2025-60073](CVE-2025/CVE-2025-600xx/CVE-2025-60073.json) (`2025-11-17T16:15:48.640`) -- [CVE-2025-60188](CVE-2025/CVE-2025-601xx/CVE-2025-60188.json) (`2025-11-17T16:15:48.830`) -- [CVE-2025-60189](CVE-2025/CVE-2025-601xx/CVE-2025-60189.json) (`2025-11-17T16:15:49.013`) -- [CVE-2025-60207](CVE-2025/CVE-2025-602xx/CVE-2025-60207.json) (`2025-11-17T16:15:49.210`) -- [CVE-2025-60235](CVE-2025/CVE-2025-602xx/CVE-2025-60235.json) (`2025-11-17T16:15:49.403`) -- [CVE-2025-60242](CVE-2025/CVE-2025-602xx/CVE-2025-60242.json) (`2025-11-17T16:15:49.587`) -- [CVE-2025-60243](CVE-2025/CVE-2025-602xx/CVE-2025-60243.json) (`2025-11-17T16:15:49.773`) -- [CVE-2025-60244](CVE-2025/CVE-2025-602xx/CVE-2025-60244.json) (`2025-11-17T16:15:49.953`) -- [CVE-2025-60245](CVE-2025/CVE-2025-602xx/CVE-2025-60245.json) (`2025-11-17T16:15:50.143`) -- [CVE-2025-63147](CVE-2025/CVE-2025-631xx/CVE-2025-63147.json) (`2025-11-17T15:34:14.427`) -- [CVE-2025-63149](CVE-2025/CVE-2025-631xx/CVE-2025-63149.json) (`2025-11-17T15:29:09.117`) -- [CVE-2025-63152](CVE-2025/CVE-2025-631xx/CVE-2025-63152.json) (`2025-11-17T15:34:39.797`) -- [CVE-2025-63455](CVE-2025/CVE-2025-634xx/CVE-2025-63455.json) (`2025-11-17T15:29:55.167`) -- [CVE-2025-7382](CVE-2025/CVE-2025-73xx/CVE-2025-7382.json) (`2025-11-17T16:22:35.953`) -- [CVE-2025-7624](CVE-2025/CVE-2025-76xx/CVE-2025-7624.json) (`2025-11-17T16:13:07.190`) -- [CVE-2025-9900](CVE-2025/CVE-2025-99xx/CVE-2025-9900.json) (`2025-11-17T15:15:52.083`) -- [CVE-2025-9980](CVE-2025/CVE-2025-99xx/CVE-2025-9980.json) (`2025-11-17T16:01:39.510`) -- [CVE-2025-9981](CVE-2025/CVE-2025-99xx/CVE-2025-9981.json) (`2025-11-17T15:57:33.733`) +- [CVE-2025-62210](CVE-2025/CVE-2025-622xx/CVE-2025-62210.json) (`2025-11-17T17:41:05.323`) +- [CVE-2025-62211](CVE-2025/CVE-2025-622xx/CVE-2025-62211.json) (`2025-11-17T17:41:00.753`) +- [CVE-2025-62213](CVE-2025/CVE-2025-622xx/CVE-2025-62213.json) (`2025-11-17T17:16:02.230`) +- [CVE-2025-62214](CVE-2025/CVE-2025-622xx/CVE-2025-62214.json) (`2025-11-17T17:40:51.857`) +- [CVE-2025-62216](CVE-2025/CVE-2025-622xx/CVE-2025-62216.json) (`2025-11-17T17:41:09.980`) +- [CVE-2025-62876](CVE-2025/CVE-2025-628xx/CVE-2025-62876.json) (`2025-11-17T17:15:50.667`) +- [CVE-2025-63153](CVE-2025/CVE-2025-631xx/CVE-2025-63153.json) (`2025-11-17T18:23:11.127`) +- [CVE-2025-63154](CVE-2025/CVE-2025-631xx/CVE-2025-63154.json) (`2025-11-17T18:22:52.723`) +- [CVE-2025-63456](CVE-2025/CVE-2025-634xx/CVE-2025-63456.json) (`2025-11-17T18:35:00.850`) +- [CVE-2025-63457](CVE-2025/CVE-2025-634xx/CVE-2025-63457.json) (`2025-11-17T18:34:11.637`) +- [CVE-2025-63638](CVE-2025/CVE-2025-636xx/CVE-2025-63638.json) (`2025-11-17T18:46:06.327`) +- [CVE-2025-63639](CVE-2025/CVE-2025-636xx/CVE-2025-63639.json) (`2025-11-17T18:55:26.417`) +- [CVE-2025-63640](CVE-2025/CVE-2025-636xx/CVE-2025-63640.json) (`2025-11-17T18:13:14.433`) +- [CVE-2025-63666](CVE-2025/CVE-2025-636xx/CVE-2025-63666.json) (`2025-11-17T18:59:20.080`) +- [CVE-2025-63708](CVE-2025/CVE-2025-637xx/CVE-2025-63708.json) (`2025-11-17T17:15:50.830`) +- [CVE-2025-63709](CVE-2025/CVE-2025-637xx/CVE-2025-63709.json) (`2025-11-17T18:20:14.297`) +- [CVE-2025-63710](CVE-2025/CVE-2025-637xx/CVE-2025-63710.json) (`2025-11-17T18:18:39.677`) +- [CVE-2025-63711](CVE-2025/CVE-2025-637xx/CVE-2025-63711.json) (`2025-11-17T18:16:51.357`) +- [CVE-2025-63712](CVE-2025/CVE-2025-637xx/CVE-2025-63712.json) (`2025-11-17T18:15:02.930`) +- [CVE-2025-63716](CVE-2025/CVE-2025-637xx/CVE-2025-63716.json) (`2025-11-17T18:37:54.977`) +- [CVE-2025-63717](CVE-2025/CVE-2025-637xx/CVE-2025-63717.json) (`2025-11-17T18:40:18.373`) +- [CVE-2025-63718](CVE-2025/CVE-2025-637xx/CVE-2025-63718.json) (`2025-11-17T18:38:45.273`) +- [CVE-2025-63834](CVE-2025/CVE-2025-638xx/CVE-2025-63834.json) (`2025-11-17T18:30:40.370`) +- [CVE-2025-63835](CVE-2025/CVE-2025-638xx/CVE-2025-63835.json) (`2025-11-17T18:28:18.650`) +- [CVE-2025-63916](CVE-2025/CVE-2025-639xx/CVE-2025-63916.json) (`2025-11-17T17:15:51.007`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 6114641462c..4b165e34cce 100644 --- a/_state.csv +++ b/_state.csv @@ -214954,15 +214954,15 @@ CVE-2022-50061,0,0,826d251cfbb34779b6c316b8286cebd14b33f24d83ea5ced469840b8832b6 CVE-2022-50062,0,0,aadf33a5230f97d1bc714cc5c6862b5ff552a77e50a8b688a53cb62eb2a6e806,2025-11-13T17:50:33.213000 CVE-2022-50063,0,0,79982f8457291664ca4d2411f5543542f27a65d5b6439be5cda73ae5fdd2243c,2025-11-13T17:24:26.530000 CVE-2022-50064,0,0,ea18b346bbf9b613693a9943a494dc9f2958ca77a1a47d5e8431db017c0caba4,2025-11-13T18:26:46.397000 -CVE-2022-50065,0,0,6e720ff722495dfd86090d6dcc7c03d007dc3150977eaa1fd30e3a669b7f481f,2025-06-18T13:47:40.833000 -CVE-2022-50066,0,0,acc5dd3a43f7d38b26311b865cf463b57576c59870f25cd03830563b1edb2baa,2025-06-18T13:47:40.833000 -CVE-2022-50067,0,0,4858ab677238e4a9605e3b6d611a2d0a66469c9fd656c1feb8a256bcf7fdca1a,2025-06-18T13:47:40.833000 -CVE-2022-50068,0,0,6b8c5ffbd1d7014f35741a4fb1cd8aefaf6f540766d9407ebbde1d93dcca34cd,2025-06-18T13:47:40.833000 -CVE-2022-50069,0,0,9003f16ad1d93f494d35ca847aea28f5b5058b43aed742416d5c0bd36de445c6,2025-06-18T13:47:40.833000 -CVE-2022-50070,0,0,a2aba7a358520eae764ac3751ae4e7342128f39300a6a3acd15778b78f4a0a1a,2025-08-28T15:15:37.713000 -CVE-2022-50071,0,0,08cda8120618ac9b04f5285576cfd3a9df7ef92075c16a717ba5d3bb464c29aa,2025-06-18T13:47:40.833000 -CVE-2022-50072,0,0,a4d36f2728d632cb252feeebae68b9f36e8ee7ee5ff979d424fc5358c744b4c2,2025-06-18T13:47:40.833000 -CVE-2022-50073,0,0,23c8c67ee8740d253f62375133ccdf053f71e63e065ea1054f04ed8afcdaa175,2025-06-18T13:47:40.833000 +CVE-2022-50065,0,1,37ad9eb8551a5abdfd2bd7a5a371ad87739bed88e957c2e8e8d6ce8cc43c45d1,2025-11-17T18:27:46.260000 +CVE-2022-50066,0,1,20ceafbabf39652ad6fd4aedb0f6c7ba4d3234bdb3b40ecbab41c06b3cc43884,2025-11-17T18:27:21.810000 +CVE-2022-50067,0,1,0af74792e2464d9fac0fc0f6d5ee777422313d80c80276c7d7273d979aa144a9,2025-11-17T18:25:37.337000 +CVE-2022-50068,0,1,f30d1a8ba140dd3f96ae1efce877c807137c40a463da71372a4eb1f441b2b444,2025-11-17T18:20:15.167000 +CVE-2022-50069,0,1,a06d75a58692c061163d56f8d925e7c314db934351c0bdb096ef9682255c4d2a,2025-11-17T18:19:32.230000 +CVE-2022-50070,0,1,4f337f8ead14e8b001ae4036bf87c38eecccd06528be8f57d54482a8d6fd29df,2025-11-17T18:18:56.640000 +CVE-2022-50071,0,1,79a8e0a128fd027a538323bee53d3f94eba643044d890982992636b8c307b73e,2025-11-17T18:15:43.283000 +CVE-2022-50072,0,1,84ecb3a5447464ae1bc260ca665d1a810b8c97bac58564b69804bacb0010b989,2025-11-17T18:00:37.483000 +CVE-2022-50073,0,1,481816c94f9ffbbe1666deb4d80e125e502b0b1312da460c3f15adecb495be6b,2025-11-17T17:59:44.237000 CVE-2022-50074,0,0,6c13952a61e7be5cf9cb921f7c9525499189d9c3c51924de4d16b352d6614fac,2025-06-18T13:47:40.833000 CVE-2022-50075,0,0,68d3ea12e31f0ea1e3900e4d6b36d842887d4ab3901acc6ff30b775930efafd5,2025-06-18T13:47:40.833000 CVE-2022-50076,0,0,aec11e67aa0b11aa6801415301b1773aca694d80642ab46ce4cecb3090960add,2025-06-18T13:47:40.833000 @@ -215127,7 +215127,7 @@ CVE-2022-50234,0,0,b7bd1a2a6e610c8fde0186ee4fba7f0ac29fa44262129d0a493fd0adf1ed2 CVE-2022-50235,0,0,5b8bdee53e0a6922cf64cff88406ae7162b67f797500349b4c2acdfd3a890aa3,2025-09-15T15:21:42.937000 CVE-2022-50236,0,0,da0d5a479d084eda7d1f0dafefe1084b5e6abd56212de54c6a0aa750bd7f1c17,2025-09-15T15:21:42.937000 CVE-2022-50237,0,0,67b91e9e2034883ff88368d5fec677efe98b4a6eff152dee248f97f8b9d4e144,2025-07-29T14:14:29.590000 -CVE-2022-50238,0,1,b26422484ec69a05bc6109ff91f4671ca8ec887aa9121f03e794d07640b714c1,2025-11-17T16:15:43.917000 +CVE-2022-50238,0,0,b26422484ec69a05bc6109ff91f4671ca8ec887aa9121f03e794d07640b714c1,2025-11-17T16:15:43.917000 CVE-2022-50239,0,0,faa68d16a5d1d84ed0245e42b5beecc887fd4547cfe1e2ca63ab90a67860ce8b,2025-09-15T15:21:42.937000 CVE-2022-50240,0,0,55c81ba8c5d44ada2a4e7555e95ab17a4515aece1015b8bc89ed2cdc5d6489fc,2025-10-10T16:15:49.373000 CVE-2022-50241,0,0,f31e591d703f6dca502c6f6da1167fbf66c80a3cc1a027a0bfebfd8c39ce4fe2,2025-09-15T15:21:42.937000 @@ -242304,7 +242304,7 @@ CVE-2023-51763,0,0,c10c499362cf03a08a3f609dba3fd908e128903e62356fa988042861b4438 CVE-2023-51764,0,0,5f46407b44065e4e3c06419a6c67318d8925ab3ecfe857d21c49dd69bcc56921,2025-11-04T22:15:56.210000 CVE-2023-51765,0,0,7e2f6975525437c04272d273eaf98fe256b560ab01ad36b2b6e2672e6d8bf839,2024-11-21T08:38:44.980000 CVE-2023-51766,0,0,89b9899d0e0225510cafd5963a272d4fc0a9b2381bb76709863acf74a920a4c5,2025-11-04T19:16:21.973000 -CVE-2023-51767,0,1,0721049f4b3be590b47cbc09558f50c0f26bcf346d82ba0325fcf00846cf0921,2025-11-17T16:15:44.990000 +CVE-2023-51767,0,0,0721049f4b3be590b47cbc09558f50c0f26bcf346d82ba0325fcf00846cf0921,2025-11-17T16:15:44.990000 CVE-2023-5177,0,0,c210ebedd5715efe8d42401e4339b84c5f8add4bde7f8a621ed3e05411682af2,2025-04-23T17:16:50.233000 CVE-2023-51770,0,0,64254f5dc600a268a44f2c6d46100eeb62ea65d967c28e88a4a3dbe3cd81e229,2025-03-27T17:15:41.773000 CVE-2023-51771,0,0,4dec76c2565bfed89c2edfd02448c4f3524b4f27e8a1df7860a88ffce5103bdc,2025-04-23T17:16:49.060000 @@ -251058,8 +251058,8 @@ CVE-2024-13966,0,0,5cca5d814f341679eba150302e779c409d70f355cc3e8c8e1c8ef15d43675 CVE-2024-13967,0,0,e4c12a5e2447511b13039db14dcd45cd36008a5d221c50815608308da9cc3d12,2025-06-04T14:54:33.783000 CVE-2024-1397,0,0,b23e8b9ccb5706ad3f8d257df0efb1d8013c2af60938dfd6b0df8c51fda39522,2025-01-22T17:41:19.017000 CVE-2024-13972,0,0,866882ffcb839ae5fb0c70b32915427151c8c731acb165f0e3bbb251fda2426a,2025-08-03T09:15:25.920000 -CVE-2024-13973,0,1,c9789d1ff1770762e3e4ed407d688e6d2f4ef979baa6f2e61cdd335ddc946d47,2025-11-17T16:27:18.863000 -CVE-2024-13974,0,1,cad92f43c8af7b862a1c1dec25389edc777022b6590a1f2afcdd7c4cdaedc50b,2025-11-17T16:25:08.830000 +CVE-2024-13973,0,0,c9789d1ff1770762e3e4ed407d688e6d2f4ef979baa6f2e61cdd335ddc946d47,2025-11-17T16:27:18.863000 +CVE-2024-13974,0,0,cad92f43c8af7b862a1c1dec25389edc777022b6590a1f2afcdd7c4cdaedc50b,2025-11-17T16:25:08.830000 CVE-2024-13975,0,0,de1cc6cb694759fdfeb59b62a98cef25047cc52282bffde2d642efe0b07f5cfd,2025-07-29T14:14:55.157000 CVE-2024-13976,0,0,fc599ac1c8f039d06b0c465c48fe227360335485e0942d6d96410eb9e22731c4,2025-07-29T14:14:55.157000 CVE-2024-13978,0,0,cd9aa21e4367ecdd5376afd64bd838971c231e1f12d9593780edae94b33d0a29,2025-11-03T19:15:42.683000 @@ -255084,7 +255084,7 @@ CVE-2024-24116,0,0,10d5e48253fa01e5e6580157279d20286cc191736eeb04e8847397bc9fbd1 CVE-2024-24117,0,0,49f348c4b4e49f23705ce94bcad1b078a411ec7087fad0beeb2feccdf2954d4d,2025-03-13T14:15:22.943000 CVE-2024-2412,0,0,68eb681b0fa4a4498fa14048430f94f9fe1b3cee4b03260c689eaea8c72d78dd,2024-11-21T09:09:41.943000 CVE-2024-24122,0,0,247eb2b1a1ec57d0c51c2a9372cb7b02e321f9443f3d4b6a685cf05d4f14555c,2024-11-21T08:58:56.470000 -CVE-2024-2413,0,0,645b7a33c9326e0c92182d881891a3fc4b7a671a1db2eaab478b8389245d3179,2024-11-21T09:09:42.080000 +CVE-2024-2413,0,1,7c5446a1df593bd085a1bdc47fbc22e71788496c1e70ed127f753f0923a84416,2025-11-17T18:54:32.567000 CVE-2024-24130,0,0,61b89b1091ed34c2a6247446e6fc623150e02324d85165f1acb02667eb36ecb3,2024-11-21T08:58:56.903000 CVE-2024-24131,0,0,effeaf004ecee6eccd7a3540d45a94db2d623bba59d46d6056adfa77a0f7f0d7,2025-06-05T19:15:26.497000 CVE-2024-24133,0,0,4253d0827f054649c3c100773249f49b3affc1dd1708c7be5814d1c022638e57,2024-11-21T08:58:57.280000 @@ -264702,7 +264702,7 @@ CVE-2024-36586,0,0,2835d9c68f8205e22620ab1803ecfdced5330a29893004125c9d2c6d31181 CVE-2024-36587,0,0,6049e445ffff24847d252c912cc506d886da13d1f7cb44b4710e74d8ea73829a,2024-11-21T09:22:27.250000 CVE-2024-36588,0,0,63343b7a69bf8fa229f4c29b1f6b52bb553a729224e763d76708e0162064375f,2024-11-21T20:15:41.997000 CVE-2024-36589,0,0,cffc9bfc7d10ca8c03d04649b78d09f341f5c366aea475911e398a1e19cd88b4,2024-11-25T22:15:11.433000 -CVE-2024-3659,0,0,7e026f680e1e7a746e95b516acb8b16041f09c235046b9579bd1f72ba9fe5bee,2025-10-03T09:15:34.100000 +CVE-2024-3659,0,1,044b67fa7fb63aba352e58b45f0f81285b7c06c0d2ef083c2b5df72998798a7b,2025-11-17T17:15:45.410000 CVE-2024-36597,0,0,a62ab39128d244b8476f4239f420095c01c3a21cda3b5582add839b49ad0d872,2025-03-13T20:15:20.717000 CVE-2024-36598,0,0,90ff67765dcfe41f34b16b5217dc9d52b498906dc9c375db53ee9e74fe53a69b,2024-11-21T09:22:27.880000 CVE-2024-36599,0,0,7900178dc34bcb00145c981d4707922c79db42b10e94bffba7db7ebc7122844a,2025-03-13T15:15:45.157000 @@ -265612,7 +265612,7 @@ CVE-2024-37726,0,0,d896df11823efbf9a4d73a2cbb465f2cdd2815bdf2c264ca9fbdce6d5c110 CVE-2024-37728,0,0,641fb24219d355f90fe60a18a51d79dd7660e42ab60fba2f2dbfa7ea2d39b361,2024-09-11T15:15:12.140000 CVE-2024-37732,0,0,b9b0fe1b01dee8766f35de513c3af28f9ca9a7bca6f59ea9eb577760e5a5f9ea,2024-11-21T09:24:15.687000 CVE-2024-37734,0,0,942d71720aad180ed2fca0dd3a14d392234ecbc7fd118327494f9ee9c137bc7d,2025-05-01T19:38:20.270000 -CVE-2024-3774,0,0,c4123288e66fb462ad938c96d985a87b32953df52d91b9167d0f97d2f6debf91,2024-11-21T09:30:22.263000 +CVE-2024-3774,0,1,940ea3c1494325e8b3d6f731e10cda81b8a728db48a272ef35a635c25042291a,2025-11-17T18:53:09.550000 CVE-2024-37741,0,0,cdea71c096b6020452f86c61c722c71d411c4901d61352f541581e27bedfb10b,2024-11-21T09:24:16.130000 CVE-2024-37742,0,0,7c57418640c4a372993ae3363ea2c4e93948b308f1c699d6cb68e3e245b5578a,2024-11-21T09:24:16.373000 CVE-2024-37743,0,0,7da5e2f831cabe658067c8c7a80d924ab3464dd7b295374055c69d2e81405767,2025-07-09T19:07:29.370000 @@ -271056,15 +271056,23 @@ CVE-2024-4462,0,0,13746876d5cd96f81e7ca3dc2c4749aa102a934bb0fb08c21b3ec7f8951924 CVE-2024-44623,0,0,1790a597862807710cdb86cafebb63b1205f3c35dbfeabaa4d79f039c92e38c4,2024-09-25T14:53:20.253000 CVE-2024-44625,0,0,c8aaf67742b1eb6801e5c2642e26d39661d11180311012257fa543f96df02dd1,2024-11-21T09:36:48.733000 CVE-2024-4463,0,0,cfe2d56d7d76147a83ef95e39ed4f78c1b9d4aa379603a550e402b1ffcdba94a,2024-11-21T09:42:52.643000 -CVE-2024-44630,0,0,c8bb1d52595a47c23f134a2a20a4f499a84ca821276aa883e13f4c4c9abd8808,2025-11-14T17:15:57.217000 -CVE-2024-44632,0,0,dab77bee6c0eacaf3b05b58d6bc5768cf920daf208e0288397afe02b7014241e,2025-11-14T17:15:57.433000 -CVE-2024-44633,0,0,4bbadf15c71914994c24adeddf05035aa8795bd7b39e03e7bb5da708535f98b2,2025-11-14T17:15:57.667000 -CVE-2024-44635,0,0,d6227b4b6ca170f5bdf70d714613abc1e19c986796cb2af25f1c19142c929e7e,2025-11-14T17:15:57.887000 -CVE-2024-44636,0,0,4447185f900d85010101e7273efba3aaa7267b7c8afce61b271e551131a49f71,2025-11-14T17:15:58.150000 -CVE-2024-44639,0,0,09ae6914ddffffa55a900a5577a4a51b4545492bba0acff3dff717521ff7cbd0,2025-11-14T17:15:58.363000 +CVE-2024-44630,0,1,81672f7b9f2974e792c83fdc5e1902df4e3bf04d4fd4b42e0060f4090aeef715,2025-11-17T17:40:28.267000 +CVE-2024-44632,0,1,e2277051e43cd45009cc88ccc107c4ddffdc1dd899cca4a579e16811af18e6fb,2025-11-17T17:37:58.347000 +CVE-2024-44633,0,1,209f218110ab2bfac1472021ffd19eb8bb73527d94886ee4921cace58d765526,2025-11-17T17:35:46.060000 +CVE-2024-44635,0,1,240063e09ed502ffb49d8379f814fb4573c43cd5f83c7f2d057e5d0c50b8cd78,2025-11-17T18:22:07.280000 +CVE-2024-44636,0,1,8a67754d017a2a0bb8240413739d403ab9908d23770f4e2df66379629bf9b236,2025-11-17T18:22:00.537000 +CVE-2024-44639,0,1,5859abf68eee0962084ea4ec82f693a95210d74b52bc90fe9c165ae3f67f6cd3,2025-11-17T18:21:54.743000 CVE-2024-4464,0,0,fdeab4605a7edffde08cd0791acb6c147293b4d11715998ba31a8f3349365bf4,2024-12-18T06:15:23.587000 -CVE-2024-44640,0,0,629565d1648c5df716c3dc394d867a4805b8855d1a81c8487476fd3482902b63,2025-11-14T17:15:58.593000 +CVE-2024-44640,0,1,726508eab8003251cd9a51d08f71e894374dc0a61dc6d2a7ac8c8c32721c7ed7,2025-11-17T18:21:47.130000 +CVE-2024-44641,1,1,7ae2c3a02b107d0dba9b3460c75dd21ea0a50502275c156d9bc0467b1f9fdff8,2025-11-17T17:15:45.677000 +CVE-2024-44644,1,1,497593a6dd33cf5721f53e6f39f9a42faf8e30c3f3456fe8235d78ede987ca4b,2025-11-17T17:15:45.877000 +CVE-2024-44647,1,1,d807acb31b8dc8d7ff7fe6ec186db22b0844a05a5f02a67f8aafac44b0ce4db7,2025-11-17T17:15:46.053000 +CVE-2024-44648,1,1,9cb3b20ccbf1f492d0265706f4d45ea28f847d79cf4f9f8951c6bf1ccc06d559,2025-11-17T17:15:46.230000 CVE-2024-4465,0,0,1f05c15cd46a20341c0574f7f282b6792943d148b5e92669d3dfc00e099ccfb7,2024-09-20T13:15:19.850000 +CVE-2024-44651,1,1,b56e021a2e214fe6d778bd492253382ec8d4676cfd487171f6f080248b3621f0,2025-11-17T18:15:55.107000 +CVE-2024-44652,1,1,58867b1187386cd69e26e67db1e360718dc7d7d32bacbfa72edd08ba4361cb07,2025-11-17T17:15:46.410000 +CVE-2024-44653,1,1,05ed556cbcbdbf1a96a71f3c67de5e704742e8aaa75694b45711bf3679a1e65c,2025-11-17T18:15:55.577000 +CVE-2024-44657,1,1,9b3ef901b397c408afb9e61cdf88261bf02cc55a1c8b074d278a2959387a4b21,2025-11-17T18:15:55.737000 CVE-2024-4466,0,0,e3cd45fefb4caa578c3a777906a4e9abf96ac1bf88640e5b948697edef383b07,2024-11-21T09:42:52.820000 CVE-2024-44667,0,0,c45d991e3e5755dd4bd6b2799c96326bd2bc462b166e82b876732032251f93de,2024-10-29T16:35:13.953000 CVE-2024-4467,0,0,7435e1edc5d4ab53fd884338611646eb141c365df221a6cdc5952ed1cc1b40c2,2024-11-21T09:42:52.947000 @@ -271828,7 +271836,7 @@ CVE-2024-45592,0,0,5783557505e17061000762f5b8ddca9529f03d90096f2a933bba8853c107d CVE-2024-45593,0,0,c0a1f50bf86c5f8aca4cc79b465060e1ce64223e49adedfd583e4aaad6d5a1a4,2025-01-15T14:29:23.370000 CVE-2024-45594,0,0,51092e08161e91bc15ffe603d6aecc69561b58acd8c59f5b71eecfe43474304e,2025-02-28T15:52:30.483000 CVE-2024-45595,0,0,ed73f265e4cc26a14ea0ef98c1ed160999b148dbe2046a7b8a319cd1ad837073,2024-09-20T19:59:02.963000 -CVE-2024-45596,0,0,a620d8302107635d7f8871dcd65118f72878398568927fef8140037a0b256d98,2024-09-11T16:26:11.920000 +CVE-2024-45596,0,1,716dfb75ed1047a095a5a225e7ec5ad27061975c4d5587f566abd7c62563c635,2025-11-17T18:42:18.550000 CVE-2024-45597,0,0,7a78ed6433ce6b888e36f35042a0949494556c355df7f568338afc6b05c9114f,2025-03-05T15:14:22.307000 CVE-2024-45598,0,0,77660454d4ba20073be684a64f3b5c79f09a1658fc3b00ebffca93c2da74c11e,2025-11-03T21:16:21.080000 CVE-2024-45599,0,0,336dcc223b338e03a3d5e62e7e0b320a6d04f231025b64ee6820c74e273fb906,2024-09-26T13:32:02.803000 @@ -272216,6 +272224,8 @@ CVE-2024-4633,0,0,4be9efb7395c528b05dc39db0f29be9d9debe80ebcf8638d7ee15d2174982f CVE-2024-46330,0,0,555bab352e249a54a4c8bb8f2d43f318d12ee9d517c03fa568e5148167458ed4,2025-06-04T16:16:02.940000 CVE-2024-46331,0,0,7d5615ac7135529e5c1dd9e249f0545185fffca62839baf9a9980d9338c9549a,2025-04-28T18:10:14.750000 CVE-2024-46333,0,0,0d40a91d3ae384633b8c2a0a76cbac1d28ef110054546c86f64e9a52c09bba71,2025-05-27T19:12:19.640000 +CVE-2024-46334,1,1,24e87aabd000af468fae75872d847ed12fdeb6357ed3ec5fa2380b511922e410,2025-11-17T17:15:46.533000 +CVE-2024-46336,1,1,491e66974ffea9a7928f9dc3c5d7aafb5ed7bf00bb8eca72b56fd74db9fe3311,2025-11-17T17:15:46.720000 CVE-2024-4634,0,0,eb60703eaec3c1cb33741c607a7e9d8ef61e689c7df21581c70bdd061bd8fc33,2025-01-30T16:01:17.150000 CVE-2024-46340,0,0,7b29939899f51dc994234e8a49c0451bced89e73dbed1a8dcebf2f6614a19cd6,2025-06-20T18:51:42.467000 CVE-2024-46341,0,0,30f643f16e7d8ea98337d8936eadb51be4d0ce2bc9176d3dc734c1a14510e7d5,2025-06-20T18:50:21.623000 @@ -272722,7 +272732,7 @@ CVE-2024-46987,0,0,d2acd8bcd290dd9ccffb2f4369c37c92af6bb7375945f1a7440d54ae224af CVE-2024-46988,0,0,acd89b292d81a9c010991540bdc019514c5c2b6f105f296502ddc3d473aab92d,2024-10-16T14:07:32.890000 CVE-2024-46989,0,0,39d8eb6a8c19482752070302c63b37f117b74656c0d5053bdfbab1d42e2de966,2025-09-04T16:41:18.927000 CVE-2024-4699,0,0,fe600354e798835fb2c1d384e1f68300b4804105dabb45cabe5b61c9f2ceddb1,2025-07-16T14:52:32.680000 -CVE-2024-46990,0,0,dd7309bdaa6de92d4c638eb588c5ba5946904af2e94432491a46d771714c57b5,2024-09-20T12:30:17.483000 +CVE-2024-46990,0,1,d4f537874f600472eebef7698c3145aad7b095d554ab9ba611ba6a4a4a26b78d,2025-11-17T18:49:17.900000 CVE-2024-46992,0,0,73d2653498553d7c2a9d319f5bd3e37e00ae8ed7eca7b4709ef6fd1be299b998,2025-07-03T15:14:12.767000 CVE-2024-46993,0,0,e544ef7d71ea882add47c7a2f5a13d25f101275d6afbff9772cdc43acb8ce751,2025-07-03T15:14:12.767000 CVE-2024-46994,0,0,69ae49c22ca9b2cb7980b984d8bf731e286ec44b1259e1b123990c8a9f90f105,2024-10-28T15:30:10.080000 @@ -278808,7 +278818,7 @@ CVE-2024-55000,0,0,e280c3cc064d727179462b9cd205f0c92515872f32e7a1750a9b7cca5e8a5 CVE-2024-55008,0,0,d4c98368bc64c087d2e1fcb093966fd10a9f20063391432efcebf491a2bd9f26,2025-06-24T00:19:17.740000 CVE-2024-55009,0,0,4d88f6b549f01d05c58601be5c8229fe460db1c49b9016496ca0b7d11afb4b4a,2025-03-24T17:45:45.890000 CVE-2024-5501,0,0,c16d3f86bb6f5e02795073b49cb84dc8c7e7a5718a6fed025ea914c4721b4cad,2024-11-21T09:47:49.573000 -CVE-2024-55016,0,0,c393a20d8a88ca913bdd05baac305c49e50e0ff91898ff6bec47020a51782031,2025-11-14T17:15:58.827000 +CVE-2024-55016,0,1,13d0a499b1eb0ddcd5a12f8fb58e38b42a2e18bcb751d03cc1d759e7bca8c77e,2025-11-17T18:20:54.413000 CVE-2024-55017,0,0,274474679aeb81a3d9302bd440516b6531cc252d1086e05d9fe1c3d9902b0b40,2025-10-02T19:12:17.160000 CVE-2024-5502,0,0,5a18d45bd85121e2ecc06d05133613fd7aff163eb02902343f6ea41930ef607b,2024-09-12T21:05:37.880000 CVE-2024-55028,0,0,34367b440e7c1f321edb417b216c46e520a28e63e37c7c85443c0336eb587b19,2025-04-03T17:34:42.603000 @@ -287126,8 +287136,8 @@ CVE-2025-11760,0,0,2278e8563c8fa400497f05caa6c939e904911908a39cb90570a030722b36a CVE-2025-11761,0,0,f6e39bd9482657942879edd0b2a1b17b4e754913cb6b1c42f5608d25f9fcf9db,2025-11-04T15:41:31.450000 CVE-2025-11769,0,0,a679a256d9f80cbb1389cd7c7600b2160d12933c942b2e5b5a41181c02ae99b7,2025-11-14T16:42:03.187000 CVE-2025-1177,0,0,a9031c02ad15cd3b79dae0a4c247f1d863fa16483cc0621210d54f890eaefbe0,2025-02-20T15:58:50.097000 -CVE-2025-11776,0,0,076b7145de40a672aba7059e10d5b528291d6a12309b58acf0ebdeb1a50a41a6,2025-11-14T16:42:03.187000 -CVE-2025-11777,0,0,250c094a1a40240d71015af656b49b88e62c0d6c61409c075c5bd9a290b2a42d,2025-11-14T16:42:03.187000 +CVE-2025-11776,0,1,c77e09493779ca2a8622c03c44c090476ff7fedf67760c77c46b8df3053a8e48,2025-11-17T17:52:51.513000 +CVE-2025-11777,0,1,17e530f57587bcf36b60effe46a9fe7c96547db6e1c99688ca684cfa0bc37ff8,2025-11-17T18:05:07.173000 CVE-2025-1178,0,0,122fa4ac2d97f823bf053cb4ab9c5b6937801a5843564a88e525e562b1520dc6,2025-05-21T20:35:24.220000 CVE-2025-1179,0,0,f2ff96c58119e925d198b82593792dc08fe8ed09f5d4f18fa9f8f51c347720ab,2025-03-03T17:14:15.727000 CVE-2025-11794,0,0,994bf0697ed2ffd0bb62fb921b2bc9e10d437e353f97d81707c0b411a382ffa7,2025-11-14T16:42:03.187000 @@ -287236,7 +287246,7 @@ CVE-2025-11913,0,0,3e79127e198b90aa01815009f33e46b69baa79e15e7000dc26a2d1be16125 CVE-2025-11914,0,0,2018955abc18eedb9763d0b3050f6ac584f6fa87d6907e86a3615d6d16ad1bc3,2025-10-31T16:58:46.713000 CVE-2025-11915,0,0,22911d56ac3bdc3242cdd2f85c780373fc1db98541acc6d42a82ae82f0dcde96,2025-10-22T21:12:48.953000 CVE-2025-11917,0,0,ca9a20f76b38fd174c9a4e4e6c1537416fc942b72b303326b55dbde56d1ee691,2025-11-06T19:45:30.990000 -CVE-2025-11918,0,0,751460e4066fc490c9e1ec9b466db99cb81e74e5e9edc546872a03c18c999efe,2025-11-14T16:42:03.187000 +CVE-2025-11918,0,1,11c52d9162fa61055fe4c033004d0880781de2fd3a998291026d5ce9801200fb,2025-11-17T17:48:50.567000 CVE-2025-1192,0,0,bddfdd8bf7ec90d72695992bca2c3b133244650a31e9e38c0b8b8d53178351ce,2025-02-18T17:52:35.107000 CVE-2025-11920,0,0,63850dcbefa9a711885c4e87c228b2e9c5a9def7e908b17770b39acc886e0fa4,2025-11-04T15:41:31.450000 CVE-2025-11922,0,0,9cf1179cdcb382d5415c4cbb85461ef60856346634fb397c51a720c5b14730e4,2025-11-04T15:41:31.450000 @@ -287986,10 +287996,11 @@ CVE-2025-13185,0,0,5908e481b1b60fcabf66dd771539643ba88c6e323fbe1ba985f24aac4967b CVE-2025-13186,0,0,37d27cee7145da2f9c548cefa2ca42b0f450568268ce9da0e15e481e3a713874,2025-11-14T22:15:45.063000 CVE-2025-13187,0,0,a94cf48ee4eb8f8c52118f5fee2b6289aa8f4018ae9a5e7680b27284e68b2366,2025-11-14T22:15:45.287000 CVE-2025-13188,0,0,74a2c82372ef44d5b3f5a9d20a24c46441650cc031441ddbd3fbefa75cab2189,2025-11-14T23:15:43.843000 -CVE-2025-13189,0,1,3b95eadddc6e722b89e84eed9c70b5cd12ed4568e04b6684ed580047c4e3825d,2025-11-17T15:15:44.677000 +CVE-2025-13189,0,0,3b95eadddc6e722b89e84eed9c70b5cd12ed4568e04b6684ed580047c4e3825d,2025-11-17T15:15:44.677000 CVE-2025-1319,0,0,d637e8c27cef5c6953f5ca61f84240e7056619d466e4788e83e08596d90aba8a,2025-03-06T15:09:58.827000 -CVE-2025-13190,0,1,afe8756de34bd97b3d4bb61bc7e8441b359b410d5dc02196a6f7258095ec2963,2025-11-17T15:15:45.283000 +CVE-2025-13190,0,0,afe8756de34bd97b3d4bb61bc7e8441b359b410d5dc02196a6f7258095ec2963,2025-11-17T15:15:45.283000 CVE-2025-13191,0,0,18e40585184c6af337c85d2b0326a9523bb6788ef467c116da9057e8b6f91a07,2025-11-15T07:15:46.627000 +CVE-2025-13193,1,1,d728c2c892d7db7805d242a8aa09b2fae2b1ed46f1bbf4bf68803af01eb4adc9,2025-11-17T17:15:47.110000 CVE-2025-13198,0,0,2663eccfe110632010bdb19df3c24eed544de754209e9c9f32e9f2b84e3a90ea,2025-11-15T09:15:42.177000 CVE-2025-13199,0,0,feaa483149212936b61f3fcd193daaa3ba05c5f6de4f05e0a14642543ca5040a,2025-11-15T11:15:55.110000 CVE-2025-1320,0,0,13286132de07d5b3e75d1dc00002068d71264e2873deeb1c22836d23ecec950d,2025-08-11T14:14:38.580000 @@ -288064,13 +288075,17 @@ CVE-2025-13283,0,0,eced155aee36eefda98569c645a5444ec430e09731b47761af0a487bd33e2 CVE-2025-13284,0,0,17010f869a4798c23679f240639cd582a4f399691bb909d7c27584e78556b203,2025-11-17T04:15:55.020000 CVE-2025-13285,0,0,5bc868d60caa842ab1310e8bc22f6dbef29bf07cf5c2d10d9e96269b7fd7b0e3,2025-11-17T14:15:43.740000 CVE-2025-13286,0,0,c9eb938e38e49cfc85b7f9780e36e0a0d85ca683dff0aa92cb0cd9dc3b658634,2025-11-17T14:15:43.967000 -CVE-2025-13287,1,1,a0c8ddf133ca3b09185e1ca5957e56a1f4156fe2bde6ecd63f49c1bfc81ef2c0,2025-11-17T15:15:47.890000 -CVE-2025-13288,1,1,7de99b72674f8e2c120660e231c0c59ac924712dac878be7e04d50e4a3a4ea8b,2025-11-17T16:15:46.080000 -CVE-2025-13289,1,1,48ba9a34dbedfaac1574f2d876a27534d873c42ba9f71cc7463c2a5da3ffb29a,2025-11-17T16:15:46.307000 +CVE-2025-13287,0,0,a0c8ddf133ca3b09185e1ca5957e56a1f4156fe2bde6ecd63f49c1bfc81ef2c0,2025-11-17T15:15:47.890000 +CVE-2025-13288,0,0,7de99b72674f8e2c120660e231c0c59ac924712dac878be7e04d50e4a3a4ea8b,2025-11-17T16:15:46.080000 +CVE-2025-13289,0,0,48ba9a34dbedfaac1574f2d876a27534d873c42ba9f71cc7463c2a5da3ffb29a,2025-11-17T16:15:46.307000 CVE-2025-1329,0,0,f0ae0ca3a9c8dfd08bbf3af3eafcbf638e06757e3a12c46d6b79af7a8a193835,2025-06-05T14:30:37.943000 +CVE-2025-13290,1,1,0fa2aae6e38522918cb75be130fc94c840a037d624cfa918c1597d5d4741b1d7,2025-11-17T17:15:48.100000 +CVE-2025-13291,1,1,a3e14908ea7ebebec1280ab861c973b4738cd92900d302f8df39fcb4476268af,2025-11-17T17:15:48.320000 +CVE-2025-13297,1,1,c720ba756ce7e2ef35012b9f8b1cfb270530c68389824b6fc80cabf9c7caf967,2025-11-17T18:15:56.497000 CVE-2025-1330,0,0,e5548d630b4a5d00be349a3ec4aba946ab4046a68f7f0746f75dcc659a1ef9bb,2025-06-05T14:29:17.697000 CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000 -CVE-2025-13310,1,1,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000 +CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000 +CVE-2025-13319,1,1,3320030300d2370c09743a52cb16c8301421cf37eb6af85440701b1a4313d072,2025-11-17T17:15:48.550000 CVE-2025-1332,0,0,651a32ff0ce1e4c178256e4e7fa7755a14b2351228c1c710a764ce12601a0c92,2025-03-04T17:17:39.640000 CVE-2025-1333,0,0,4ee465b51a4a069cb257fed9914f5e7ef1c93ab3d9ee351936b316e7a69cce78,2025-08-25T17:27:30.640000 CVE-2025-1334,0,0,68abe056ab92b6fe06d69183ba7a4c9642dbc3d5cbc6dfff5a401743920f909c,2025-08-12T20:06:55.380000 @@ -294139,10 +294154,10 @@ CVE-2025-26394,0,0,6c137b9bdf922ea319b3a2d0f2975b6c8dbf8863bc28da003a937d3511679 CVE-2025-26395,0,0,12b27f76b3ab794344de120ed0883cc52cdfb1026999330d9a4d63572c61ee0f,2025-11-12T19:17:39.653000 CVE-2025-26396,0,0,3a6e4823811f7c53f918af9e5601b8b92ea760d35b58b90fdbdace05eb9a40f8,2025-06-02T17:32:17.397000 CVE-2025-26397,0,0,df8ef1d8c81747157b29f272e21bcb7d5c233e2acb9b6fe2f9ab6a7292b2efce,2025-11-12T19:17:37.173000 -CVE-2025-26398,0,1,bf1e03ff263a8d3da7001133b7680bb649bbc0437f43e5593cf345fd4d51df32,2025-11-17T16:10:05.080000 +CVE-2025-26398,0,0,bf1e03ff263a8d3da7001133b7680bb649bbc0437f43e5593cf345fd4d51df32,2025-11-17T16:10:05.080000 CVE-2025-26399,0,0,60a8cd3dc8f2bc3593e0924c3dcf8ec89572b05297574a44190b7be84b851137,2025-11-14T23:41:16.280000 CVE-2025-2640,0,0,cb1c6d71f05715e40a599d54b3e503bcebd1109fe2ad2ac7ebfd5568ea675609,2025-04-02T14:26:23.040000 -CVE-2025-26400,0,1,b8a1d119f44624417794b0465fe8acba110f874290d924e5e58b60bb9c31ed74,2025-11-17T16:11:59 +CVE-2025-26400,0,0,b8a1d119f44624417794b0465fe8acba110f874290d924e5e58b60bb9c31ed74,2025-11-17T16:11:59 CVE-2025-26401,0,0,8a8a5edf8458e0cd9c5461b93aa3dd8d7a38c5486b82730ab0a36983d22db1ca,2025-04-07T14:18:15.560000 CVE-2025-26402,0,0,575535948221ade28973a3c5fe8997a192737ce0bbd8760700779acbded807a2,2025-11-12T16:19:34.210000 CVE-2025-26403,0,0,11eb7e9772e1fae1cf88da9a8bbc392aa78434abd8ca94e011f2d92e15121b16,2025-11-03T18:15:51.970000 @@ -299724,6 +299739,8 @@ CVE-2025-34316,0,0,e698663a884b526edc84e9d9deae67cadaeee4c29bebba758eb4f4042d77d CVE-2025-34317,0,0,c3bb7a21cec0e0d9c83fda19b5627323db05687be6d1b6cd996e35b05267fd3d,2025-11-03T17:03:01.643000 CVE-2025-34318,0,0,8a136f3d4321b5f2ec628b05406dc714e5fa1de322fbd7b251aeaf3d6550a0a6,2025-10-30T15:05:32.197000 CVE-2025-3432,0,0,32b4909a605e3dc15d41b2069e1ead14c30bcbe2dfa78debc747a89be022e4ba,2025-04-08T18:13:53.347000 +CVE-2025-34322,1,1,708d149d54de9202b61951ef4867750808d0912acb700c4361e217bf15821f13,2025-11-17T18:15:56.710000 +CVE-2025-34323,1,1,77a74b0320e60a570caaf981532d933064d5ac51e21274f9fb7513bed2f37899,2025-11-17T18:15:56.880000 CVE-2025-3433,0,0,46dd66c57af291abbb1b77326145823e13d716692eb68902a18c25a048a17397,2025-04-08T18:13:53.347000 CVE-2025-3434,0,0,b8eaddf3b141c5d0cb4bc5eabf7fd897b349acdd6b9551b14d0e525f524ac410,2025-04-11T15:39:52.920000 CVE-2025-3435,0,0,3d90c60a4cfc3a7bb18551e3234425af7b1b7c42690c282d44da1e223c12fd33,2025-04-29T13:52:47.470000 @@ -300541,9 +300558,9 @@ CVE-2025-37885,0,0,2a99132e1a1f532215b561cfe3e5908ffed5d3385f289c513947fbd9d56ef CVE-2025-37886,0,0,c1bc8067198fe6e390300ea2da72a2f55cc11295bde1b74f25fe1bada8831216,2025-11-12T19:36:38.217000 CVE-2025-37887,0,0,739303775bcffeb555d1db016038bcbfc3a798386c482cb3481442d948457571,2025-11-12T19:36:44.667000 CVE-2025-37888,0,0,202e69ebb254efc098c95172f80331438484d3b5a8bd5089b7137b912f39363a,2025-11-12T19:36:49.950000 -CVE-2025-37889,0,0,aabdef842757f7241106ae11e7ed2f7f6eac9cc134f69d5e412cb92479796e3f,2025-11-03T20:18:40.153000 +CVE-2025-37889,0,1,c6973bc66342cf34183cfc4aa64649f71bea07c946d32cf73f4654ef4e7f7e68,2025-11-17T17:13:03.617000 CVE-2025-3789,0,0,598706d834d4defcf62a7e119b98c60fc1fecf7834302a4f73f1dc524a8416bc,2025-10-15T14:03:33.360000 -CVE-2025-37890,0,0,9aacefeff664c13a2de760dcda2a137e348bac39db2e66171835948e6e3d7385,2025-11-03T20:18:40.273000 +CVE-2025-37890,0,1,baa922b6b524acbcb12f607b3dd281659f794dddc02df95f2082ef87e896adde,2025-11-17T17:11:57.840000 CVE-2025-37891,0,0,7f8d8ab81cc4bb430815927440bae25db14b69b20db064509032efcf8f6ebdcf,2025-05-19T13:35:20.460000 CVE-2025-37892,0,0,cb9dacfe1b48fbc75291eaf4ed88ff3ccef0efd608510e48a26d161be7729c16,2025-11-12T20:35:43.743000 CVE-2025-37893,0,0,6bc6bf132aaa05f1a94fe321509b04de11f81cd4a1fbfe30c721bd34804681a7,2025-10-01T17:15:45.737000 @@ -300555,25 +300572,25 @@ CVE-2025-37898,0,0,3a092adf497c3ceedbaa8466d20c890eaba317539641cf2b73b1a1732fe65 CVE-2025-37899,0,0,6a34d80a5888f2c5d1449f1fdf56087e5e708ed3b26b01536fcf4d1def7bd320,2025-05-24T19:15:23.640000 CVE-2025-3790,0,0,2f38e395d94b609848b72c893c183775efd0551eb1f6aed51006594fa69ea18a,2025-10-15T14:02:33.607000 CVE-2025-37900,0,0,62012319393e1d960f4948e03288391a9acb2de587c874887c1b253b20ba4065,2025-05-21T20:25:16.407000 -CVE-2025-37901,0,0,a1166ab285146961578878661b8c9795b30869ae42af1a1b0166fb83e661456b,2025-11-03T20:18:40.583000 +CVE-2025-37901,0,1,39bf9f06e49bf2a28a339fb67728689b334152b491272a897c114827db695d56,2025-11-17T18:08:31.883000 CVE-2025-37902,0,0,d061444ee63051b7130452f9efbb066a274c66cf2799b17e8e300037c2a776da,2025-05-26T11:15:24.460000 -CVE-2025-37903,0,0,c3a042e896839d0a5e4f4ecb477687f1a47ab787d05af169bc2f93ce59650423,2025-11-03T20:18:40.680000 -CVE-2025-37904,0,0,1bbced06ad9d4840713354c9945e221e83e9ea6f3c5d815f1a391cd5db5cde1c,2025-05-21T20:25:16.407000 -CVE-2025-37905,0,0,c028e1c8c9926b634cc5034fc6bfc8403d75208de4cad12755de049a6d8cbb3b,2025-11-03T20:18:40.777000 -CVE-2025-37906,0,0,eb1ca489f94d551bbdbc23607407e2238dbe34224a71ab26b429e1c11db06cd8,2025-05-21T20:25:16.407000 -CVE-2025-37907,0,1,351c185c362dadd1c1afa3c47b5d915a395217b7d34f9005fd2a6da5c909da64,2025-11-17T15:02:38.810000 +CVE-2025-37903,0,1,210fd4a8c9fe0eb6a34fda301d45de6ffd40ed8a7a60b82412fb7a6f99918489,2025-11-17T18:08:45.870000 +CVE-2025-37904,0,1,b89c919d4f8eea29c3a34be90d642e2c4669a4278dcac0b502236dbd42805eb9,2025-11-17T18:09:15.143000 +CVE-2025-37905,0,1,b16cfb7980a8c116b27138ca04d87be87f3100697fe1725c8aa1779ee3b142e9,2025-11-17T18:10:30.880000 +CVE-2025-37906,0,1,a23ad84f87d27c4a0e8093a135ee7aa1fc0ad3a4806143ca6ceb1beffc2a2ad6,2025-11-17T18:10:54.180000 +CVE-2025-37907,0,0,351c185c362dadd1c1afa3c47b5d915a395217b7d34f9005fd2a6da5c909da64,2025-11-17T15:02:38.810000 CVE-2025-37908,0,0,6a767727602f27efe5c3d1146a81b410bbca920ad1e3845fec4e6ffdd926c782,2025-11-17T14:58:04.480000 CVE-2025-37909,0,0,6d0def4955a48c1aaa0530ca0192396133156d772f96818d7acd4174250213f4,2025-11-17T14:51:33.527000 CVE-2025-3791,0,0,d20c33083bfd93e39f5a750d845cd16bd304a896ad925ca36e8b55aad2095ef6,2025-04-21T14:23:45.950000 CVE-2025-37910,0,0,748de7de73d0d063056f17a0a156ff54c95c8d19e662d8f871ebc6e32d782c44,2025-11-17T14:45:58.487000 CVE-2025-37911,0,0,b616bd958c078956076ce862a9cc7e85ccf3b4f6dc74fa527094e47fd1b36875,2025-11-17T14:50:40.823000 -CVE-2025-37912,0,0,f4645fe525a4e036480349fdcc5694ef9eab6f46443e9e41b8967907368f0fe3,2025-11-03T20:18:41.083000 -CVE-2025-37913,0,0,d0f4b3f68a03e342d9ac81d9ad388bc2a34923414e100991bbbc7870b6026bad,2025-11-03T20:18:41.210000 -CVE-2025-37914,0,0,b6c163753f7ce2f865029908d029d92b013f9a4969366d063c00e5670bf14608,2025-11-03T20:18:41.320000 -CVE-2025-37915,0,0,961c7a7f26ffcca0d9ab470b4d7e733d3176b20c1dfcf717019866421440a74e,2025-11-03T20:18:41.430000 -CVE-2025-37916,0,0,53e61e8451ab0e0823ba13cbac2ea447ccde2ea591f0857b1c6363db0424e458,2025-05-21T20:25:16.407000 -CVE-2025-37917,0,1,13ecbb61d7b7f0617c59d664e1c97b4b73977515d88ce20deda15082aa71ebad,2025-11-17T16:53:32.697000 -CVE-2025-37918,0,1,8f04316142366e6a9fa96af4304d87a1f0bd0bf1233d4bac6da5616592cc1a41,2025-11-17T16:52:41.193000 +CVE-2025-37912,0,1,2e3167561581fe4662cba95f7ff02f2951f6a6c59ba10e171788962afe81a250,2025-11-17T18:11:22.580000 +CVE-2025-37913,0,1,f9c8cef9ada8aacc6d8bb5df8ce0f143c7dc56407b49972deb68b2c6689f93f7,2025-11-17T17:11:37.813000 +CVE-2025-37914,0,1,57601c228e144e0a33e3ba5900fbb98785b3baa947d62867834862c7f4aa6908,2025-11-17T17:04:10.627000 +CVE-2025-37915,0,1,801c9b5ff1b1654850b6044bd02d56370ec33c44e45e9a4966a32e61a29e6488,2025-11-17T17:00:22.330000 +CVE-2025-37916,0,1,a1b3195a55d3d5bcd9b57a513f7452422e6bf30a671f0c9f9ad8e0f7b0bc472d,2025-11-17T17:03:26.630000 +CVE-2025-37917,0,0,13ecbb61d7b7f0617c59d664e1c97b4b73977515d88ce20deda15082aa71ebad,2025-11-17T16:53:32.697000 +CVE-2025-37918,0,0,8f04316142366e6a9fa96af4304d87a1f0bd0bf1233d4bac6da5616592cc1a41,2025-11-17T16:52:41.193000 CVE-2025-37919,0,0,f9a1b47700cbae768fbcba322d9d8bdbadb8e4a2f945955a7bd862e5bec289c1,2025-11-12T16:36:02.370000 CVE-2025-3792,0,0,b63fb0df7f8a732a92eefb61e717bd5287b245f6f6fdefecee0b8a1f1aaa853b,2025-07-15T20:06:10.953000 CVE-2025-37920,0,0,461b14141ae08dad8cadc091d5bbeccf7cc1e240bb52e5bafb19cd76ddb1fd80,2025-11-10T21:11:09.640000 @@ -300590,9 +300607,9 @@ CVE-2025-3793,0,0,3fbdfdae3ba2312385d1e55e1013c3bba14ef84080933b19af3e5f161d0c53 CVE-2025-37930,0,0,2f3fe0e65f900cd0f6197c33b18b372e4350437d97ba06c4a6801037a16d807e,2025-11-10T20:16:11.453000 CVE-2025-37931,0,0,e5b361a8a776dd4cceba25694dd9c1c7b084c6ef2f8209bd6471e3719d193174,2025-11-03T18:15:56 CVE-2025-37932,0,0,01ef76e1526d1f16c65290d5bd5a57beff080fad20d034d27c3c12c48ff0996d,2025-11-03T20:18:42.323000 -CVE-2025-37933,0,1,53c213736e5410b4674c54edd8c545636b0f264b2dd55b153881b461cb2dfe36,2025-11-17T15:11:44.847000 -CVE-2025-37934,0,1,d21c62a8d06b8297a4c952b1fd87d178913780e3ed62e80eccd74c5aecc2f871,2025-11-17T15:09:05.933000 -CVE-2025-37935,0,1,d86eae5e1922bb30e71a314ae234c0357c9476e8c0d0fc26dfcf2bf6ba3ef4fa,2025-11-17T15:00:54.220000 +CVE-2025-37933,0,0,53c213736e5410b4674c54edd8c545636b0f264b2dd55b153881b461cb2dfe36,2025-11-17T15:11:44.847000 +CVE-2025-37934,0,0,d21c62a8d06b8297a4c952b1fd87d178913780e3ed62e80eccd74c5aecc2f871,2025-11-17T15:09:05.933000 +CVE-2025-37935,0,0,d86eae5e1922bb30e71a314ae234c0357c9476e8c0d0fc26dfcf2bf6ba3ef4fa,2025-11-17T15:00:54.220000 CVE-2025-37936,0,0,b81f04210d3f7d476b4a9ec139bb501ba49ba9789527126db642b7c45410ebe2,2025-11-03T20:18:42.423000 CVE-2025-37937,0,0,d112303f7d1f6fc8206fbd9ee7eef360942cafc2958acfaa84d63a5145702230,2025-11-03T20:18:42.523000 CVE-2025-37938,0,0,4da7182bf9b17ef6a6a94b4d2af5210f9a334c59fb713e41e9051ca42da143d3,2025-11-03T20:18:42.623000 @@ -302431,7 +302448,7 @@ CVE-2025-4027,0,0,86331e57ccecf1fae9d0cc0baebb4281a8160f843c30036be646a9e7df5b2d CVE-2025-4028,0,0,1400843b2e8ec36049e376020ba888b237dcb1c526c84a46253570f428e7a927,2025-05-10T01:03:18.940000 CVE-2025-4029,0,0,1f7941aa3edebf77d89ea801c2e3ad8b75e287fa61c79b8111a89e7b882b5d46,2025-05-10T01:03:07.433000 CVE-2025-4030,0,0,cb892cdb5040b1939cfcd9a9989df34f836d89746e1ab52cd3e01d57fe2c420e,2025-05-10T01:00:56.277000 -CVE-2025-40300,0,1,6ab22f0e937f71748fe5b008949d1afc85fed1e9487f348f48aa5f4c31c47277,2025-11-17T16:15:46.780000 +CVE-2025-40300,0,0,6ab22f0e937f71748fe5b008949d1afc85fed1e9487f348f48aa5f4c31c47277,2025-11-17T16:15:46.780000 CVE-2025-4031,0,0,1c35e74f5eb11d55efede26ae007116aeccdaa398ff2cf157a5a85d241cb9868,2025-05-10T01:00:46.943000 CVE-2025-4032,0,0,7705b4ca51b39f112253b44f71d38dc893a9afc23c5ab50745f02884553745ab,2025-05-10T00:58:51.033000 CVE-2025-40325,0,0,1e82a97e62644ac245112cb37afcac996a7a30be1f727db1e45dabda8ec8f2ed,2025-11-06T21:33:01.867000 @@ -302809,12 +302826,12 @@ CVE-2025-41098,0,0,63ac03e59a04f085841d2367423411e18763979ea88a7a8890daf826b7936 CVE-2025-41099,0,0,1451204dc2b6947c054aefa02c1189af006d835a011f3f40d5c42fc322743e05,2025-10-08T18:19:30.180000 CVE-2025-4110,0,0,fd5a30cb18c679e287075f1b25f0289870ef8e9bc37a37e044518a1363d067bf,2025-05-13T20:26:02.303000 CVE-2025-41100,0,0,ff8637fcca0418613844862418daca43790832f69699cc94ee82bd9abc57fbf6,2025-07-22T13:06:07.260000 -CVE-2025-41101,0,1,262b575e56461bca801bbcc21c777df83bd1f5437d9f3785e548b160523aca76,2025-11-17T15:24:58.850000 -CVE-2025-41102,0,1,7a24b419d9021cc6ac64588161ecb17f4042bed6cd9fc12c0b8e670e1a598813,2025-11-17T15:23:58.813000 -CVE-2025-41103,0,1,126660171afa1594b1fd359d464bd6ec5fbc16136bfd97736732bfb0d99f611f,2025-11-17T15:23:41.307000 -CVE-2025-41104,0,1,f4a0eab5f653e19153bbfe88a781a1eb37664af4fdc5ccf61c2d5c7a836b4845,2025-11-17T15:21:33.507000 -CVE-2025-41105,0,1,1e0d47a4438f743c5504763fc3b4d35fd8ac36de73a1302126b756cf6a68081a,2025-11-17T15:19:01.363000 -CVE-2025-41106,0,1,e02251adb3a89a399f82e12c54ddd7f6cf19855e01f8b60aa44ed183bf3916c2,2025-11-17T15:17:21.450000 +CVE-2025-41101,0,0,262b575e56461bca801bbcc21c777df83bd1f5437d9f3785e548b160523aca76,2025-11-17T15:24:58.850000 +CVE-2025-41102,0,0,7a24b419d9021cc6ac64588161ecb17f4042bed6cd9fc12c0b8e670e1a598813,2025-11-17T15:23:58.813000 +CVE-2025-41103,0,0,126660171afa1594b1fd359d464bd6ec5fbc16136bfd97736732bfb0d99f611f,2025-11-17T15:23:41.307000 +CVE-2025-41104,0,0,f4a0eab5f653e19153bbfe88a781a1eb37664af4fdc5ccf61c2d5c7a836b4845,2025-11-17T15:21:33.507000 +CVE-2025-41105,0,0,1e0d47a4438f743c5504763fc3b4d35fd8ac36de73a1302126b756cf6a68081a,2025-11-17T15:19:01.363000 +CVE-2025-41106,0,0,e02251adb3a89a399f82e12c54ddd7f6cf19855e01f8b60aa44ed183bf3916c2,2025-11-17T15:17:21.450000 CVE-2025-41107,0,0,f9307e618fe3bcd33433572d35cd6a0c498cb678d27b328f4352fb857af1ba7f,2025-11-14T17:59:11.233000 CVE-2025-41108,0,0,52accd4a39ec2333c88ddb5add245f04fd308af1e48439ef7f0e9e3e22c490e6,2025-10-31T19:45:12.163000 CVE-2025-41109,0,0,3af0b58a01f80322e8c136f6abeb21cc55fb6007bbad8622a5356225e268d0a7,2025-10-31T19:39:30.097000 @@ -302952,7 +302969,7 @@ CVE-2025-4143,0,0,3a393d8ebe58f1f33890c3bd1fbf19f7d13ee6d06509ac73d2c28267c5f302 CVE-2025-41430,0,0,3ddd9e72df42b1c38d3668fe6007f1dc948e47884980843a8ef96e257f4a06c1,2025-10-21T19:49:43.517000 CVE-2025-41431,0,0,f2beda299ec1c2df0ec934dc8385d8ac304e8875f00de9e8f45177349ca4a073,2025-08-06T16:25:30.623000 CVE-2025-41433,0,0,5a48c614fc2e8d281503f9af1fe44f4bd0d1df1b1f5f7526d8301d6e5bcbfd4e,2025-10-21T18:43:41.913000 -CVE-2025-41436,0,0,5077f519c3bceb20bcb4ac739fc240f70a24d3d138eaee71a4965955901da434,2025-11-14T16:42:03.187000 +CVE-2025-41436,0,1,3a10e6a5e06572d43ce4160194e566a0a34d85d92886593dd2a904731c957043,2025-11-17T17:52:01.540000 CVE-2025-41437,0,0,9888bb674e11d3c528c2fde7ef3b576337d8513b8df77a825518b6d70064eace,2025-06-09T12:15:47.880000 CVE-2025-41438,0,0,11ba6504cbbbf79eb2cd396e9c090ab75fa4dee3d0b15e980e071c03e0563d88,2025-05-30T16:31:03.107000 CVE-2025-41439,0,0,ec4f5bce645ac5c77efeb7d3dcb9e00136db17220a76430708d9edf21696dea4,2025-06-30T18:38:23.493000 @@ -303368,7 +303385,7 @@ CVE-2025-43206,0,0,b305f0869fcfe6642c12fe057490822914f90e9208f96f799296f662e7251 CVE-2025-43207,0,0,d5738548eeb290932666439d89efb771f9422f22a69f0b75a1b25971ffd3dadf,2025-11-03T19:15:53.620000 CVE-2025-43208,0,0,490f9170672a5dddac41700f02bda1cd01dbacb08fb48aeed178e7f1bc899ff3,2025-11-03T19:15:53.760000 CVE-2025-43209,0,0,046c719bd0cb39d263b506ff6d3044ee7eac633f7f8c05309dc66041d1675c74,2025-11-03T20:18:51.860000 -CVE-2025-4321,1,1,4f0f9aaf72617ef97363f8a234667686d6639d559eadec474cb9c0a595418919,2025-11-17T15:15:51.733000 +CVE-2025-4321,0,0,4f0f9aaf72617ef97363f8a234667686d6639d559eadec474cb9c0a595418919,2025-11-17T15:15:51.733000 CVE-2025-43211,0,0,6e87c7b1471143a7f38f4481e58234faca2af6ecf8d88ad44ce196de176addb5,2025-11-04T22:16:13.227000 CVE-2025-43212,0,0,acd370fb59b01124d0e2d973c37c8c663549013ef1e5b9b26fe88d07d46f845c,2025-11-04T22:16:13.400000 CVE-2025-43213,0,0,e70b42d40abc592c7b7eb781671fb0ddfd5469de034679570f467bcefa1e8359,2025-11-03T20:18:52.327000 @@ -305430,7 +305447,7 @@ CVE-2025-47174,0,0,f8f7f94ce71e2d5f495c1c63f0038fe4f27aadd724d01809756abf22c5ef3 CVE-2025-47175,0,0,7de552066b70205e6375bede7fdd709c7bde372994a82fbb276fc1ed9fc038a7,2025-07-09T13:27:42.433000 CVE-2025-47176,0,0,d5024465ca52874cf0a4883f1ede98b76c7f64792ce8de66ef4e198a8bb58837,2025-07-01T16:50:53.030000 CVE-2025-47178,0,0,1d066dc6f384c6c9541ff7c1bd9fd9098b33c6306ce85c7a464e52a6930bf2ca,2025-07-23T18:30:05.453000 -CVE-2025-47179,0,0,dac12a22f37032d90948e0de70b36789d3b9a0265513a05d8d5b10991d2aa694,2025-11-12T16:19:34.210000 +CVE-2025-47179,0,1,902ba21c6455eda221455e552bf87d03746524229b30415eadd842f76c16cab0,2025-11-17T17:40:48.507000 CVE-2025-4718,0,0,e197120a33051d36a3bdf1b0305cf7de5c5f5941a30eaf0eb2f8e25b8c33d5d8,2025-05-28T14:26:27.280000 CVE-2025-47181,0,0,0dcaa7da62eb599bc0c4884b7faedf2756f0f5de47436d94bd3a1a0bf83ba2ad,2025-07-08T16:18:17.580000 CVE-2025-47182,0,0,53f87a273acaefbf1eae69d26a4ad76a0c6e6a7e45d884bb8dfa99b5c8575b00,2025-07-17T14:39:42.343000 @@ -309009,7 +309026,7 @@ CVE-2025-53176,0,0,d0007733595b5945fa414a854e602440e82442e74645c7488b9632b608831 CVE-2025-53177,0,0,b0be5d3bb33d219362f1f2fbeaa231f93668aaa0777efb34716d487d74e895a2,2025-08-12T14:39:19.227000 CVE-2025-53178,0,0,a0d7e67b0d2b525aa757acae538d17c5621a24c604f3024638a6a69c53ff5cf9,2025-08-12T14:39:35.227000 CVE-2025-53179,0,0,687550ad8868a1d17476346a82b7d07d767503d8b07be2e2e798efa81dc28f70,2025-07-09T19:14:21.773000 -CVE-2025-5318,0,1,6fa2c5002adb16a95034a41774e06b82e3a13f7d270f87b32324aa811f5c67d3,2025-11-17T16:15:48.423000 +CVE-2025-5318,0,0,6fa2c5002adb16a95034a41774e06b82e3a13f7d270f87b32324aa811f5c67d3,2025-11-17T16:15:48.423000 CVE-2025-53180,0,0,c9f05a94231e52dc6d3774f4bdc50538c22337601fe5b488c5b0a8c351c6fd84,2025-07-09T19:14:10.030000 CVE-2025-53181,0,0,2419fc3291eb2772102bc14c08da3d83c4e96505d343985f7f9ecf527f541e8f,2025-07-09T19:14:42.683000 CVE-2025-53182,0,0,da92e9428b462ef529e392e5f35d7f75e9329521d5a7c414dac29903a8aa72a7,2025-07-09T19:15:01.380000 @@ -310686,12 +310703,17 @@ CVE-2025-55051,0,0,1c1c8cf723f75e9e5edc4bcb6826d8d7109a489fd1c12b171d58b7d7b422d CVE-2025-55052,0,0,d6ecde9de5594cd32c9e6bbaf272c2d9a8b20993c5b2b21a74675bf9d6eba17a,2025-09-11T17:14:25.240000 CVE-2025-55053,0,0,ddd479e40a24d9f19f60f564e064f99e87ef99409544ef9e26fa49419c45e27a,2025-09-11T17:14:25.240000 CVE-2025-55054,0,0,c93c1d529a13f227a68084c14cee70addd39cb13661b8a05e624b7ceebbe5d91,2025-09-11T17:14:25.240000 +CVE-2025-55055,1,1,78743a334c33b730a75844632956d52e940336e21d0c502d4361e13746e4fe10,2025-11-17T18:15:57.033000 +CVE-2025-55056,1,1,e41a886b4b2ac38be525c58e68e48dc6d8fdf7930f32f47903f0c6e13ddebc00,2025-11-17T18:15:57.223000 +CVE-2025-55057,1,1,aeb60166f15a45d0b5b5f3c0fb17180e8c324cac6b75b732987da0a264d01ac6,2025-11-17T18:15:57.390000 +CVE-2025-55058,1,1,45b8020865cdd019e2a9dc21bc14224c4e4f2e0b8617f647aa4a1313a277e58b,2025-11-17T18:15:57.543000 +CVE-2025-55059,1,1,9555e4047df8f474857e04d5112ff979ad663841ba62f5aabc378141beb8f5d4,2025-11-17T18:15:57.717000 CVE-2025-5506,0,0,ac6e3f2d11b6c06a659b922ff46c348a4ce393ad13cab27d34d564645b4ed242,2025-06-17T20:40:41.663000 CVE-2025-55067,0,0,077cb0aff969e3a8d289ef6dee6106917fafdfc94e62009f4d3534dfaeddc7d1,2025-10-27T13:20:15.637000 CVE-2025-55068,0,0,1d8cb244263c98851172e6d7816ec442915a94891d83faa84acb45aa0bbf9014,2025-09-19T16:00:27.847000 CVE-2025-55069,0,0,2a878e7e3064eab874f8c60298a701250ea57ea85e4234997e8b10c2dd8bd80c,2025-09-24T18:11:24.520000 CVE-2025-5507,0,0,0de2d6d693f1cdca3338a8f454497e00fd071a5de3cbcba86cf6c01ce62cef88,2025-06-17T20:40:46.887000 -CVE-2025-55070,0,0,4a7daed3498a071f45a206b2e4f38e91a9c5828cb3afe1f61c1a3a7c842bcd88,2025-11-14T16:42:03.187000 +CVE-2025-55070,0,1,f2a78eb36bf9efc20e8a5c0faa1c67b678d8fe36c78fe6ad277729b9d0d97cb1,2025-11-17T17:51:05.737000 CVE-2025-55072,0,0,f6ba9fb896cd7e2c60b3aa4941e369baedb704784ead15f066b823a72d7bf7a2,2025-10-16T15:28:59.610000 CVE-2025-55073,0,0,bcd1fb1043532255ec7f4d659e489d633fb8270e44c75ae73b6b8c1ca3475518,2025-11-14T16:42:03.187000 CVE-2025-55075,0,0,481fa2b83c118d8c47e2167cbdeff4313a5d82562c11911e24961e4f6db3f988,2025-09-17T14:18:55.093000 @@ -311347,7 +311369,7 @@ CVE-2025-56799,0,0,1c552af2ee51dbfed2c30c69db697661bc0521a8e6da16dcfaa16cff94af3 CVE-2025-5680,0,0,60e74dce384e9df9ef7e4fed15b7fa36db31d532422ad8630b3c1f972e046f64,2025-11-12T17:07:47.567000 CVE-2025-56800,0,0,7b8a991b7bd7f3b9f1764069f377f7f3526f03072cb6c1c8dc0e9ed536844382,2025-11-17T12:46:26.313000 CVE-2025-56801,0,0,7b4099e231efdf92129ccdacf5ea710d40464d34b77b6f92fabb73f8ce5cde2c,2025-11-17T12:46:15.277000 -CVE-2025-56802,0,1,8190e2b7781410767c85b6e158dcdc31d52cdff4fbf9341d2198186a2980836a,2025-11-17T16:04:32.880000 +CVE-2025-56802,0,0,8190e2b7781410767c85b6e158dcdc31d52cdff4fbf9341d2198186a2980836a,2025-11-17T16:04:32.880000 CVE-2025-56803,0,0,e204236e38e23de0500b842169e0fc177fb410f193e1aaf81d3d07a4b150df22,2025-09-26T14:02:46.583000 CVE-2025-56807,0,0,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000 CVE-2025-5681,0,0,70eb3560f9b0a9adf9942c00bab52f4c30008d3472df352a3b27a6a516747773,2025-07-22T13:06:07.260000 @@ -312178,7 +312200,9 @@ CVE-2025-5839,0,0,af2c1c6da3fb5a22931f1ffebd67420dd5150792d38533d6eb8686e18f5912 CVE-2025-5840,0,0,a1906b279632ca933a71469d14d9b22734a373c8dc4ebaee1a55c4351d13760a,2025-06-10T15:45:31.043000 CVE-2025-58400,0,0,f7fdbf409c6d5f71bc0283fc589839a92c182eb1953d3b5b2b0d56fb1aa0bd0b,2025-09-05T17:47:10.303000 CVE-2025-58401,0,0,dfe49675ac850566c13466bff29641bc3ad410b493d2f5416ef68a61d9db82a7,2025-09-05T17:47:10.303000 +CVE-2025-58407,1,1,447059dbd4f13552da139db727e07e121e0a3b4a379b2bc54c94492522f8d85d,2025-11-17T18:15:57.880000 CVE-2025-5841,0,0,f400ea2f8b46ebb92066563e7d4eaccd25056b8981da67e57e016f89e1a31dc6,2025-06-16T12:32:18.840000 +CVE-2025-58410,1,1,ae369381c26f4c8c17d07f2c90447746873d8bbc405e1558a9991517120dc6a0,2025-11-17T17:15:48.880000 CVE-2025-58414,0,0,3188c8a972929c6948c919c7baf1afe0e88051b884f6bf261ce4dde88ba5b151,2025-09-02T03:15:41.850000 CVE-2025-58415,0,0,db1260fb06820906cae7ff9ccf72bd557b188d34b327d4b6e99f57ba17b8df3f,2025-09-02T03:15:41.967000 CVE-2025-58416,0,0,fdeef2b836eeeae4fc521b9beafb7336486f5c39a29160fece0ab47de0267d7a,2025-09-02T03:15:42.047000 @@ -312226,9 +312250,9 @@ CVE-2025-58459,0,0,04d58661879863aad31ef53eb4ac168f9adfb2fbdf761fff6df2ba0392b07 CVE-2025-5846,0,0,e694470fdbb678079e2c87823fac2cd4e7bf177b0dca1ba6c720bd0ecbabb186,2025-08-12T14:44:01.437000 CVE-2025-58460,0,0,29a71523a5fd14b79b24bd36d2f7ab0c6d2daa0e5bad9c03cdb91a9c1de88402,2025-11-04T22:16:34.507000 CVE-2025-58462,0,0,3d58ff2b6d70bdd736764893e9a84c80d3a12f775f89c85481b6d37d8be2c228,2025-09-26T13:39:18.220000 -CVE-2025-58463,0,1,d9cc8ceb874636681d537416c36f1c6b76b8efa21d96227a5d56a4d47c5dee5f,2025-11-17T15:40:14.600000 +CVE-2025-58463,0,0,d9cc8ceb874636681d537416c36f1c6b76b8efa21d96227a5d56a4d47c5dee5f,2025-11-17T15:40:14.600000 CVE-2025-58464,0,0,8653408a9350404d1f8d7ad294631b3f9906af0bd3502ad71dfc3891aa3da746,2025-11-14T20:12:22.250000 -CVE-2025-58465,0,1,14623d4445809369059ffa00756ba584f7819d04ae36dd3cd21101beeae14199,2025-11-17T15:39:47.067000 +CVE-2025-58465,0,0,14623d4445809369059ffa00756ba584f7819d04ae36dd3cd21101beeae14199,2025-11-17T15:39:47.067000 CVE-2025-58469,0,0,a096e0c0152ed42992115e4e23faf9fc6a9c9100fa2d2e678744af11282a5d2b,2025-11-14T18:22:24.327000 CVE-2025-5847,0,0,72a670a977f930c072e82981d9be0647255328c3124df63dafd15061a72168a9,2025-06-09T19:04:55.580000 CVE-2025-58473,0,0,8874ccfeeb968a0c647d6089fd24a4be2d9416a34aef25f37e21077b5e3e1e57,2025-09-24T18:11:24.520000 @@ -312296,9 +312320,9 @@ CVE-2025-58623,0,0,47cd29c18719e2f09d7786eeb0576a76570c8151ae1857b62154f62789d43 CVE-2025-58624,0,0,41e8fba14896c54dd7501b98f6beec392a272b382930f11c62b44aec56797ea6,2025-09-04T15:35:29.497000 CVE-2025-58625,0,0,13e763a925d572ab6bad663e52bef29935a5f759e2b7d9bda3be75f204430a1d,2025-09-04T15:35:29.497000 CVE-2025-58626,0,0,d30984b1679030641c19dbe980ca1f1e37e07c125492d834ed0bf2ce1bc40c7d,2025-09-04T15:35:29.497000 -CVE-2025-58627,0,0,d4a8a7f723e38df9c9d64d0c3d85fa2d536157a9888dfe02fedd049469e1ce89,2025-11-13T11:16:33.923000 +CVE-2025-58627,0,1,3f32aa07e66a137225af7d6080013d06189372607cac22e1cb00e920089dade0,2025-11-17T17:15:49.057000 CVE-2025-58628,0,0,1dfff2258e5f28124d97fe3f5f7fcced7bc79053bb05e963fef570adc708da6b,2025-09-05T17:47:10.303000 -CVE-2025-58629,0,0,7789f82e71b152be575fbcc7008e4b72742e2fb9c4e7716579918b9415541504,2025-11-13T11:16:34.040000 +CVE-2025-58629,0,1,4f127fece22f92ca3a11c19b3485f06aa12cdf88babf1ec403236fb8b379c638,2025-11-17T17:15:49.310000 CVE-2025-5863,0,0,7e284443dd6aea7eff6c2633e520d2ed0531b47c6882facd71213b96cfaa5c7b,2025-06-09T19:02:45.383000 CVE-2025-58630,0,0,828fc32663a21113eafa89e3ef966b9500b7023344f93dc0ef596aad6d13b1bb,2025-09-04T15:35:29.497000 CVE-2025-58631,0,0,185d3b91b6cced721b459612c67af928ed5626eae18906f297b3121be3e45a22,2025-09-04T15:35:29.497000 @@ -312306,9 +312330,9 @@ CVE-2025-58632,0,0,2f0dfe0e7937f4b4fe080caa656a7a3c6cc4a6076ad0322755ccabc8ea3fa CVE-2025-58633,0,0,d0d5bbee77df6a432345670b51cb32b6bb64d342744d197e00bc9289202b1a86,2025-09-04T15:35:29.497000 CVE-2025-58634,0,0,319937534909c38ee06394d9eafc962a6392b647d35626bd9c9001ea9f47a114,2025-09-04T15:35:29.497000 CVE-2025-58635,0,0,d9bba99a79f9c7ace381e4ec0dd4ad670f0d6447a7bfb53ed8124f4db1b712ed,2025-09-04T15:35:29.497000 -CVE-2025-58636,0,0,994a6885cfcd02857def6b210de1375a1931cc4a77890179b8509d1809ba87dd,2025-11-13T11:16:34.200000 +CVE-2025-58636,0,1,f41f288868053060293beebf76a8dc012ee0069a91d329000d6faa52c68d8918,2025-11-17T17:15:49.500000 CVE-2025-58637,0,0,0fa04865eb2beb798d19f6a351b53a1e5e8e9320548c21b602348c4829ca1fd7,2025-09-04T15:35:29.497000 -CVE-2025-58638,0,0,e01416101e5495a8e45293093e1a272f97f0bb919d09c9305166e1e6be71889b,2025-11-13T11:16:34.320000 +CVE-2025-58638,0,1,8beee84758b74f0d00c0856dd3227e14f8d23f2646eed44ace425ca1191767e7,2025-11-17T17:15:49.690000 CVE-2025-58639,0,0,89f9a8a588aefbbb8e8f551cc3b53a53a9ea8d830fe87772c9d12e0905f1bf5b,2025-09-04T15:35:29.497000 CVE-2025-5864,0,0,86236ec4d4af4d631276e9fd9e1776f6b6238979de8978724ea2babf534ebf3b,2025-06-09T12:15:47.880000 CVE-2025-58640,0,0,9db7a20a5b8b42b57b156e5bf8e32ba4ffe892d241eb792b6c2b4e9c86e2ad2c,2025-09-04T15:35:29.497000 @@ -312590,7 +312614,7 @@ CVE-2025-58960,0,0,b041e479cd1a50a19b091d04f1a8e36eba3c434423514fbb7a761dc794402 CVE-2025-58961,0,0,5b3fc8287f147992cc8c74515ecc4b3b6e77f10955a5595428be8cf5b38b5e57,2025-11-13T11:16:35.923000 CVE-2025-58962,0,0,7f724531435257bff959d0cd7b24a4ba362c041194531eb5c057307849560b22,2025-09-22T21:22:16.313000 CVE-2025-58963,0,0,760346eafee977b011ef7e6f37330a9ba79eeef16f50efbc41887e8845161ffa,2025-11-13T11:16:36.100000 -CVE-2025-58964,0,0,61d93f55495d7ae7b95af381a7e84c2c8507e3a588bfdf39c216d2f5120017cb,2025-11-13T11:16:36.310000 +CVE-2025-58964,0,1,011669921df46a41cf0fa914555d46d8cca67612497234fff946ff5993e74ffe,2025-11-17T17:15:49.883000 CVE-2025-58965,0,0,0f9427414562acec50466ed82721c0daf362676bcfee8090b26e9fb5a7bef9ec,2025-09-22T21:22:16.313000 CVE-2025-58966,0,0,e694e9589e21e6629cee0642a732c382f11a4b6fe59e54e679befffd2b120e41,2025-11-13T11:16:36.570000 CVE-2025-58967,0,0,5eb99279363fdf4f8a7cd6e0d30f860dd35d99e0c8b2e96f82c5405252e4abb2,2025-11-13T11:16:36.737000 @@ -312599,7 +312623,7 @@ CVE-2025-58969,0,0,498296afb6593b8f41f5e0c2f9c0dc887001207e63af4f8c772f1ec1034e1 CVE-2025-5897,0,0,86d1a279064ae9f90a5b0e83e2f5b7aee69bdaa99c0801425f743a7ad7af16f1,2025-07-10T16:28:50.510000 CVE-2025-58970,0,0,aba4c8acaf109fd357cbf7817c889cd78b9c49a9d1372c1c09fb33b4f1d67d0f,2025-11-13T11:16:36.913000 CVE-2025-58971,0,0,b13574f00714b1bd3df69917cc3bcad7cc04b520238c7a98b64ae001bb21ff03,2025-11-13T11:16:37.083000 -CVE-2025-58972,0,0,fa3c0d1bfe291f19ea8d01e9db29ea1709915c2d7b1f54ca9f3da9a81da95ef3,2025-11-13T11:16:37.273000 +CVE-2025-58972,0,1,d8d5cc56d79f8c0476b84d7a77468c01a89dc32e270d4b964d3ca48b4aa57609,2025-11-17T17:15:50.070000 CVE-2025-58973,0,0,90f8176bfac4481ed4e64ff18348ca4bf4abc8c78e38606326b2f09adedb788f,2025-09-22T21:22:16.313000 CVE-2025-58974,0,0,a9fa7f54a744427968fdad68ec90491e26ff6682572a691d5a28cd0138ddcc4e,2025-09-22T21:22:16.313000 CVE-2025-58975,0,0,8ac9b2769e510e2440c55392bbed0c4fb581c5b79e9d327ba38a7a4502955c53,2025-09-11T17:14:25.240000 @@ -312614,7 +312638,7 @@ CVE-2025-58982,0,0,afe6ea7ec80566fb362a2f8666061a48eeb31af66fe1f705b8bc0c9815715 CVE-2025-58983,0,0,225fd0289ae924302ddd70e02948a8fd1de18df39066a91ea26a35a0caac32a5,2025-09-11T17:14:25.240000 CVE-2025-58984,0,0,83d10836d539f7d4e448b5d742eb747913674df8a3f050d097310deca06e4b16,2025-09-11T17:14:25.240000 CVE-2025-58985,0,0,3895e0f43caf0ffebf2922ef5fd3442fe1cdfc966f8073658881c5588f9d1bcf,2025-09-11T17:14:25.240000 -CVE-2025-58986,0,1,3b1316eb23f3baa7583840b55d784dc2cf2b49b1c6e37cec0a95e3b4d7e53da8,2025-11-17T16:15:47.010000 +CVE-2025-58986,0,0,3b1316eb23f3baa7583840b55d784dc2cf2b49b1c6e37cec0a95e3b4d7e53da8,2025-11-17T16:15:47.010000 CVE-2025-58987,0,0,84e53dbb4e629ee0dc2ffe1a46efc990ced485368d211d518c52111dcb628840,2025-09-11T17:14:25.240000 CVE-2025-58988,0,0,4eefc5332f5ca8ddc1581f8932ff0206d300ab5d4d8f90e2bcf87020107d9451,2025-09-11T17:14:25.240000 CVE-2025-58989,0,0,f4b304d10cb8b95ce2dec28a65baf7efe712b67434c90c1af7d1a6dd4701dc7d,2025-09-11T17:14:25.240000 @@ -312623,11 +312647,11 @@ CVE-2025-58990,0,0,9f9e14fe1ae9a12761c213e690934fb30ece7fd6e63fc49242320c13266bc CVE-2025-58991,0,0,01b45c7ba47bc21371c0ef70c09ca73779543792723e389398c6039f4b803912,2025-09-11T17:14:25.240000 CVE-2025-58992,0,0,f45b28289d78cbbee38ae71f18e8a82847cc0c345feef4d236687b956e26eb4a,2025-09-22T21:22:16.313000 CVE-2025-58993,0,0,c08ae175bcbb10c788cec6e0f44d368bbd756c51d6a825175aa15763bb110aae,2025-09-11T17:14:25.240000 -CVE-2025-58994,0,1,dd733a317b00daacc00e5bb9abe7d33dfde043ad82fa7443b3ca4197baaa92b8,2025-11-17T16:15:47.227000 -CVE-2025-58995,0,1,828692fb2f40a9b1a53460302aeac153924786b11a47e13a8fa3e3478ff1f042,2025-11-17T16:15:47.420000 -CVE-2025-58996,0,1,da0f5cdfe2451e184a09e7fb21fa6cbb41d5116084cc5264198c4f55bb369f1e,2025-11-17T16:15:47.607000 +CVE-2025-58994,0,0,dd733a317b00daacc00e5bb9abe7d33dfde043ad82fa7443b3ca4197baaa92b8,2025-11-17T16:15:47.227000 +CVE-2025-58995,0,0,828692fb2f40a9b1a53460302aeac153924786b11a47e13a8fa3e3478ff1f042,2025-11-17T16:15:47.420000 +CVE-2025-58996,0,0,da0f5cdfe2451e184a09e7fb21fa6cbb41d5116084cc5264198c4f55bb369f1e,2025-11-17T16:15:47.607000 CVE-2025-58997,0,0,8a82b91e4adb37465c3d5f15a3a4c0cbf49e097c48e3875db43e4ca980d69faf,2025-09-11T17:14:25.240000 -CVE-2025-58998,0,1,516723dab6bed4d0158c1755af05a4ec24700a01a0875debc72881640fa87250,2025-11-17T16:15:47.793000 +CVE-2025-58998,0,0,516723dab6bed4d0158c1755af05a4ec24700a01a0875debc72881640fa87250,2025-11-17T16:15:47.793000 CVE-2025-5900,0,0,c656554bd03843370fd58ffda57d8c16de9c87b7cbbbbe829e6d8cfc3ba87d5a,2025-06-16T14:42:41.297000 CVE-2025-59002,0,0,1a9ce397e77b2e3042586b534c81a5f2351933cbaa5115ffeeac0239a3b448c3,2025-09-26T14:32:19.853000 CVE-2025-59004,0,0,121bfa26537b370543e813b80fbe9a48182db98457d61750055174ad2cc7ebc8,2025-11-13T11:16:37.963000 @@ -312648,7 +312672,7 @@ CVE-2025-59018,0,0,7d7c73e21773c8a111bc5c74f2c5f88fee11f8e8589049386fd5d2a38c06c CVE-2025-59019,0,0,9cb14e5fa2ab238555365299d46ae2969991b2b63e0486e72ac6c9d160aa47fd,2025-09-26T14:09:51.020000 CVE-2025-5902,0,0,c4b7cc90a98e032b0903023a7853dcef727602a58b2f48078d749360a6712fa6,2025-06-16T14:32:27.833000 CVE-2025-5903,0,0,467655dd12d7f5bb680ab3cc66dd0bbe7071c5b5a566ed257b90f0132f429eb0,2025-06-16T14:29:15.977000 -CVE-2025-59033,0,1,389af7d497787cc0eb745585ea22983cee8bc6960d61293b452d0f53ba958d01,2025-11-17T16:15:48.010000 +CVE-2025-59033,0,0,389af7d497787cc0eb745585ea22983cee8bc6960d61293b452d0f53ba958d01,2025-11-17T16:15:48.010000 CVE-2025-59034,0,0,0bbc3619d82fbb0a2bf6ddb79f4d58bc3482c2221c168da846399320a3313b61,2025-09-17T21:31:06.693000 CVE-2025-59035,0,0,b82ac66e5a33928fa947d7b304e05733788ec393cf40f637eecfcd66495e7330,2025-09-17T21:23:56.843000 CVE-2025-59036,0,0,c7297815e07988e569a67a2108be5fbb3edbdd5902eb363e2f0c53eacc3f6ec5,2025-09-11T17:14:10.147000 @@ -312770,7 +312794,7 @@ CVE-2025-59236,0,0,1eaba476af4910b9e0b521c59ae4c689e620e55dd777caff31bb6e67dd42b CVE-2025-59237,0,0,ab98f9c6f0d9dad2f4e78b2f05707c2dde5e66c8b0fecd82866bbf94bb4bc31e,2025-10-28T20:18:56.880000 CVE-2025-59238,0,0,7b96c3e35e928d56e5df8e498a2da997415058c8d7678a9fab1395b655f96aa9,2025-10-16T20:52:08.697000 CVE-2025-5924,0,0,e5569afefc2dc17b32a552fbc140ea78dd0087634a8b357eb3997017a1b3e8ef,2025-07-10T15:13:40.917000 -CVE-2025-59240,0,0,c12f046e2bd85a6f456a372af45e9b6308f61d9d30b03750c4efd7f9f1a620aa,2025-11-12T16:19:34.210000 +CVE-2025-59240,0,1,2fee1b8a1cd1d1b415d5143ca8cdab13d76dd059caaa8a77d43a327945e7323d,2025-11-17T17:39:46.967000 CVE-2025-59241,0,0,48ab999ddf5780f7dfdbbb861345f74463623eabe10a769272e1501918e1c387,2025-10-17T15:18:56.903000 CVE-2025-59242,0,0,3a0958c36ac0f3fef872af1ed90457e494d8a33b0b6b2e82c914107e026a3c90,2025-10-17T15:18:10.260000 CVE-2025-59243,0,0,2364087450396e28435fc8983173da931d359643bf7e3b2ce1eb828ae46039c9,2025-10-16T20:52:01.777000 @@ -312951,25 +312975,25 @@ CVE-2025-5949,0,0,baf872ca495f6546dac2e07e389f80fc0bcede7010ff971d3bfb7bf8d919e6 CVE-2025-59491,0,0,2c4d4dc1ffa8e632044772f25a6ed1ccdca4d7db8185a1312b04ff5eaafa95ac,2025-11-14T16:42:30.503000 CVE-2025-59494,0,0,854b9e5a8eb062e09bb4fb61d9cc9baf692cf2eaa6c3a6054a385059d94c5597,2025-10-22T16:39:26.210000 CVE-2025-59497,0,0,b66dcf967091f941ee9a7ec1f55249411f00b032a4978aa90a73caa66777f445,2025-10-22T16:38:34.453000 -CVE-2025-59499,0,0,b9628906efb330e4a9020a1e639619937202456d84c735242c57fb89505c9bb4,2025-11-12T16:19:34.210000 +CVE-2025-59499,0,1,c93e6f95530e8ecd089a55c329b5a19d7956ddb73b8e6fab22e5a2d12d25c762,2025-11-17T17:40:37.567000 CVE-2025-5950,0,0,dcbce31e91dedd5660700797b5a28fbb16ed679ced9402999e274d527a5148ab,2025-07-10T00:37:09.760000 CVE-2025-59500,0,0,e4b4af16519db2b07b06d297f6f31a3536d3b03961117ae0376116346bd07174,2025-10-27T13:20:15.637000 CVE-2025-59501,0,0,02321876ed7f1173c20a53f4ed52c28de94e10f26e460809f4fd3c6055732ae1,2025-11-05T18:17:55.247000 CVE-2025-59502,0,0,8a8ae300f0c1f20ebfdbcb1e43aef7f3ee710bb8d1cfabe1ecf4109cc6e3266b,2025-10-22T16:37:25.170000 CVE-2025-59503,0,0,8bda4936c89ee9318ef92486469e3f03e9b56f3353bae14e55eef5f42e583e0d,2025-10-31T17:15:47.317000 -CVE-2025-59504,0,0,06bf545ae0103e154c37763f132d508860ee2a52a5c540ae1d6604ea060b06df,2025-11-12T16:19:34.210000 -CVE-2025-59505,0,0,c4f0b058b4dd2e75409b2e0a68654820b194a63f7129f9d30fa7680c9a38f23c,2025-11-12T16:19:34.210000 -CVE-2025-59506,0,0,9ec431db5c9ad8d86da2c3cf84bcaa0a4e5cbbe9367bd1ecd3af0fc5490502d0,2025-11-12T16:19:34.210000 -CVE-2025-59507,0,0,f23860dd00f44bb882df5d791aaf6a299598304d806ef60c80ad9c57dfb4e05c,2025-11-12T16:19:34.210000 -CVE-2025-59508,0,0,d935782b53a84b4a60ac8ea771540d553fab842c856d17cec99f9b8431005ca4,2025-11-12T16:19:34.210000 -CVE-2025-59509,0,0,bcc671b3adb8c618642345f9711d8ed126931b959502513b1c58969be192b103,2025-11-12T16:19:34.210000 +CVE-2025-59504,0,1,f1d8361f62e229c6a3eb50e7e5e6b0d981e45f66a9c4e215e18ac2711a9e9d39,2025-11-17T17:40:44.493000 +CVE-2025-59505,0,1,9972bac021d27cb63d513d665c7d1b8a0b2ae5fbbb1ef78b75543d4026269531,2025-11-17T18:01:19.417000 +CVE-2025-59506,0,1,1ed0c73720e8516c4a32fa326135efea94bc5f32a1402037145dd0bd74433c50,2025-11-17T18:01:15.073000 +CVE-2025-59507,0,1,4b97427088201c01fe4e30fa1de168001804bea3a405d7490a5c29754ba84c0f,2025-11-17T18:01:08.237000 +CVE-2025-59508,0,1,bb03c15cebd3993555b6dbe2194dfb5eb5549f84abffe8211173b439d0d461e3,2025-11-17T18:01:05.543000 +CVE-2025-59509,0,1,099946bd4372c8b9ca4243e757922844eb765c311d71aa492c2e28262603df13,2025-11-17T18:00:53.457000 CVE-2025-5951,0,0,8284d36183b5c5a20ce1ccc5cb7415a68b49193aca2a0e8df993129c1d1d98e3,2025-06-28T23:15:21.963000 -CVE-2025-59510,0,0,c60e2b35297ac5d378ee129fbd267ea8cf550606ac12d81fc9137a7163230625,2025-11-12T16:19:34.210000 -CVE-2025-59511,0,0,55cffd4f3b1832f29dfa987de2026aa0e30a300eeaf46a9411a96cc01f286d57,2025-11-12T16:19:34.210000 -CVE-2025-59512,0,0,a44bd248cbde7b8aad9eaeec2709a8f12ad99222cf74cdb441cde822930ab5c4,2025-11-12T16:19:34.210000 -CVE-2025-59513,0,0,47f7ca264a56672fe59a829959032db074db5f8f5677b670e87b99b2db8f90ee,2025-11-12T16:19:34.210000 -CVE-2025-59514,0,0,6b575bb3cb69cfe61b995f1e39bfc4ff5607686a3a16f235e1d4b64a71545250,2025-11-12T16:19:12.850000 -CVE-2025-59515,0,0,d0ffa603c157304d1878b46bb30a09a678eb59e448068c0949350946837963e3,2025-11-12T16:19:12.850000 +CVE-2025-59510,0,1,66e7b8b4f59fa00bd73c43c7a10461c3e0c56b6b4ce618d45fe2df808dbddddc,2025-11-17T17:47:41.787000 +CVE-2025-59511,0,1,d933ea1e33884fbb19c29c46e2b00f38ec2e4239e4772a8875cc21793a342c4e,2025-11-17T17:47:38.977000 +CVE-2025-59512,0,1,a25e9a48b904cb9a110203db01f23bf5e8ff18baaa2dffa1b44659fdb81ef121,2025-11-17T17:47:35.510000 +CVE-2025-59513,0,1,983692786d2995ce1ea32653effaddb14462d9f7504fae52a2bcd53544868fdf,2025-11-17T17:47:32.230000 +CVE-2025-59514,0,1,b46d86670c691dd2789096f8bb4c9ac6112ea1258e247690d9ddf3a0427ac271,2025-11-17T17:47:29.150000 +CVE-2025-59515,0,1,91f3f6ec2a21104a290fa91964837b7cd2578a42b0841bf30a258ab46b2782ac,2025-11-17T17:47:23.013000 CVE-2025-59518,0,0,10fb7c02dad8a4bad46ff1eaedf556836ec84b4cb9ec05f194da7eb0dbba6ee8,2025-09-17T14:18:55.093000 CVE-2025-5952,0,0,80f5810e94a735443b1add4b87f50d30096f6ed0c46ddf37bebc56b27e945b75,2025-06-12T16:06:39.330000 CVE-2025-59524,0,0,200c5363880864a9a25e791d0fba028fa9c50051f3c25d83e9dcabd5808d49f2,2025-09-29T14:04:48.430000 @@ -312999,7 +313023,7 @@ CVE-2025-59551,0,0,8a37a02b366e33068ec1731b42215f831e697ae7a14b828672b0a22134c36 CVE-2025-59552,0,0,a2d96e2af196ef67527aa8cfb054f259cc0fb5601e916fd69924058c573338e4,2025-09-22T21:22:16.313000 CVE-2025-59553,0,0,c5b215ebe15c94aaa4ac7ccfce8ae1cc18e35c0d1ca0f49bd5d922375c7f9364,2025-09-22T21:22:16.313000 CVE-2025-59555,0,0,fc676717589813d7a74721a39ea8686a534b820f45e7e5134df0a8f90e4e3c69,2025-11-13T11:16:38.843000 -CVE-2025-59556,0,1,4b760f31cbae5843a0baa92d60d3b7a6558d23d6e111277c5b1f9b49ef488967,2025-11-17T16:15:48.233000 +CVE-2025-59556,0,0,4b760f31cbae5843a0baa92d60d3b7a6558d23d6e111277c5b1f9b49ef488967,2025-11-17T16:15:48.233000 CVE-2025-59557,0,0,50a7199a951e3e92c66d12380a6a54c4671249c92ca0d89e5b04c1d5f0cc9d97,2025-11-13T11:16:39.340000 CVE-2025-59558,0,0,9afa2c4c87164b9b19046c7614538aafc42f227707b60a69f136ce70665b3944,2025-11-13T11:16:39.547000 CVE-2025-59559,0,0,20f482ddb757be7c77362627e0bb011cd5882e6836c493b9139a255027a4c6fb,2025-09-22T21:22:16.313000 @@ -313302,7 +313326,7 @@ CVE-2025-60041,0,0,51e6e73ed69978361e4c1f64708c48bc4757f9a46c85d868eaf8acfd56610 CVE-2025-6005,0,0,9a2ac8246f422ef5614eb749e32675eaa624d97ea333814ae3828209772ff515,2025-06-20T12:48:20.400000 CVE-2025-6006,0,0,7a386c846906f2e1152f82f788f56ad0aa39222b613fc15254d86bd6e33a6943,2025-06-20T12:46:43.687000 CVE-2025-6007,0,0,ad7217a46edf88f3122f03c09e2fdcfd31382468cbe1002c4a5de402899399f2,2025-06-19T01:26:45.850000 -CVE-2025-60073,0,1,35755e1235eb6fee9b164558b1756364c1c100d700d9a16b12f8c5b70cd9659e,2025-11-17T16:15:48.640000 +CVE-2025-60073,0,0,35755e1235eb6fee9b164558b1756364c1c100d700d9a16b12f8c5b70cd9659e,2025-11-17T16:15:48.640000 CVE-2025-60074,0,0,1b67cc61748b3071c4dc6cb53063f844bf96a816cea268db61277d883d91d3e5,2025-11-13T11:16:42.190000 CVE-2025-60075,0,0,c546121345a468cfcac6d768be794d04f71f0c9f3e562a63a6a67f8a65a586fd,2025-11-13T11:16:42.367000 CVE-2025-6008,0,0,cf45d1b8877307f98a5e962959db4dd8b70df84c99522375a10c3d04cde0826f,2025-06-19T01:26:01.867000 @@ -313404,8 +313428,8 @@ CVE-2025-60184,0,0,224b927ec1deba277d5dd4f5609489edfbe246f51a58b5d10bff108a34383 CVE-2025-60185,0,0,1c1cac70fe98c909d24f3a0bf7daa9b7dd180d5fe97fc9e3bdfa64f43a4a12e1,2025-09-26T14:32:19.853000 CVE-2025-60186,0,0,9f8776eae93bfd11b8655949de197599754e31e514014ac45da64561891d45f4,2025-09-26T14:32:19.853000 CVE-2025-60187,0,0,6d9b0e1b1db516280e71e8675c175f439c140aa9157fc776d54860bddc98add2,2025-11-13T11:16:43.850000 -CVE-2025-60188,0,1,eb83c9a18b57e8bc5ce9fa992445523e3c2df7f2a603dad758d62b8dba16daff,2025-11-17T16:15:48.830000 -CVE-2025-60189,0,1,f7c135583cef0dad9c1f416b740feb97a08e419cf596233c697e2cf77a359caa,2025-11-17T16:15:49.013000 +CVE-2025-60188,0,0,eb83c9a18b57e8bc5ce9fa992445523e3c2df7f2a603dad758d62b8dba16daff,2025-11-17T16:15:48.830000 +CVE-2025-60189,0,0,f7c135583cef0dad9c1f416b740feb97a08e419cf596233c697e2cf77a359caa,2025-11-17T16:15:49.013000 CVE-2025-6019,0,0,bf632c485beb37dbe798f798f4eff0baa7c87b8abc0217b675bda9385ddb8133,2025-07-10T14:15:26.630000 CVE-2025-60190,0,0,4edec68416e2a504283e2eb8cd4be644666cd89828e155e91f1366e589f47a6a,2025-11-13T11:16:44.240000 CVE-2025-60191,0,0,81d876268a10b8d0d83fedd9e29c5ff3b87fb282952b315ae9ae90c38a6ccfdd,2025-11-13T11:16:44.563000 @@ -313424,7 +313448,7 @@ CVE-2025-60202,0,0,80b84b6da06517985a56b59e302efd3257490c46d9b382e7de1cc5741249d CVE-2025-60203,0,0,684eba1fc6a1ce2cef7a566b5bf79fcaeb36a6aaacf4e5d0d8223d30a639a775,2025-11-13T11:16:47.150000 CVE-2025-60204,0,0,f982be11201f0427b3f28d3f00995de362b8f8dbbb8022a03ae44c0b825da6f0,2025-11-13T11:16:47.373000 CVE-2025-60206,0,0,2b5ad1f6754f3ff4efa83c530e2ff5a6b8d596f2367dd3470c2d83d3d7b769af,2025-11-13T11:16:47.543000 -CVE-2025-60207,0,1,ffea6e353c0ef6bc909f3e7ea8b89ef7c99e21739a59e683c8ffa55761435b29,2025-11-17T16:15:49.210000 +CVE-2025-60207,0,0,ffea6e353c0ef6bc909f3e7ea8b89ef7c99e21739a59e683c8ffa55761435b29,2025-11-17T16:15:49.210000 CVE-2025-60208,0,0,f853519cfc88cf0c658111e98e7734a3bae13ae6ef22b6e64dc13a9b69e3689d,2025-11-13T11:16:47.810000 CVE-2025-60209,0,0,57bf5ec91fd277607887cd899589f7695f128f46511f951cad2a051d540b3553,2025-11-13T11:16:48.003000 CVE-2025-6021,0,0,69f6756381abbbdae35f2a8cd749d3af3f78806538d929e49f3ff98102b99e68,2025-11-03T20:19:17.717000 @@ -313449,15 +313473,15 @@ CVE-2025-60228,0,0,183338212112d73959098bd2f7271ee23d736d496854aaedf6f28ee9ff145 CVE-2025-6023,0,0,4627bd157e5e14ea24002cfdef72568ba0df65f26fcef5bd8f869ccd299993d6,2025-07-22T13:06:27.983000 CVE-2025-60232,0,0,57a47a02b3e24ed786617b4633e7481899c98a89d0b4a8dda3d0308cdff18491,2025-11-13T11:16:51.747000 CVE-2025-60234,0,0,1604bec41e9a94b859221aa6fa6ef152ca645f85f58da067e6118259fbe9a5b8,2025-11-13T11:16:52.027000 -CVE-2025-60235,0,1,bbabe6e7ed5a39e4682a632e3ec0ff6a190cbb32ac14d3f8538bddc391d78a1d,2025-11-17T16:15:49.403000 +CVE-2025-60235,0,0,bbabe6e7ed5a39e4682a632e3ec0ff6a190cbb32ac14d3f8538bddc391d78a1d,2025-11-17T16:15:49.403000 CVE-2025-60238,0,0,0f364bc395b243ce7daabeeb28abf23db01f90e03f56293c041d295cb6be304d,2025-11-13T11:16:52.330000 CVE-2025-60239,0,0,5d2ae0685762dd86050bfb8d269d80c626a1952a163c8cc99477ed5cd4f9e312,2025-11-13T11:16:52.520000 CVE-2025-60240,0,0,ff719ef1d9aac3cd0809b8cf78c7d709e60516c7e9d53310f7d01f16654a4b4e,2025-11-13T11:16:52.693000 CVE-2025-60241,0,0,6804b3149579e2e742946a72a825d3dd234264423a97b59396f416daadef70fb,2025-11-13T11:16:52.877000 -CVE-2025-60242,0,1,ce42b4fd6911160d4d3c2b1cb8afc23e56ef52332ea6ba1eb63aaad51f0662b9,2025-11-17T16:15:49.587000 -CVE-2025-60243,0,1,cbdb0d35b8c5a397be0bff2413494d04a5b1a1fb42456812857664b28cfe7b3d,2025-11-17T16:15:49.773000 -CVE-2025-60244,0,1,225aa0791641529b73a19ea7d08124eb55aa18413512e6259bad6e5fd6fe8be8,2025-11-17T16:15:49.953000 -CVE-2025-60245,0,1,cbde7f9aef3a23f3350d20523baf9d53c891ebd987e0daacb11b0b6601d7d26c,2025-11-17T16:15:50.143000 +CVE-2025-60242,0,0,ce42b4fd6911160d4d3c2b1cb8afc23e56ef52332ea6ba1eb63aaad51f0662b9,2025-11-17T16:15:49.587000 +CVE-2025-60243,0,0,cbdb0d35b8c5a397be0bff2413494d04a5b1a1fb42456812857664b28cfe7b3d,2025-11-17T16:15:49.773000 +CVE-2025-60244,0,0,225aa0791641529b73a19ea7d08124eb55aa18413512e6259bad6e5fd6fe8be8,2025-11-17T16:15:49.953000 +CVE-2025-60245,0,0,cbde7f9aef3a23f3350d20523baf9d53c891ebd987e0daacb11b0b6601d7d26c,2025-11-17T16:15:50.143000 CVE-2025-60246,0,0,cdafa1b8290737c5b527a23a96ebb542f97cd2c3678d1bc3d0b382f599a37edf,2025-11-13T11:16:53.477000 CVE-2025-60247,0,0,e933144527a7776bb78cfbdf601c2f0753c5095baf91bcb8d508b2d299e52e0b,2025-11-13T11:16:53.793000 CVE-2025-60248,0,0,324ad9db73073504f8f9729b2d2e60e57420ca68f84e4d2ba39b7d9d6bb2dd32,2025-11-13T11:16:53.963000 @@ -313612,8 +313636,8 @@ CVE-2025-60672,0,0,1d593d35d7c002c417a4fa9e40cef1ecc33c6c555850795817d90642dd135 CVE-2025-60673,0,0,5cb47353453310d2c38a604829fc65f1db60c7815431ef3c6b1d88603e335f68,2025-11-14T17:16:05.140000 CVE-2025-60674,0,0,4495d1414968480dc1e71d62c025b3ff4a4d314faa1efe56b8c3f715346e09f9,2025-11-14T18:15:50.327000 CVE-2025-60675,0,0,f231865804aa5857ab8a3ca584cb5b865680d169851d87c0e536863d50fae083,2025-11-14T19:16:00.843000 -CVE-2025-60676,0,0,0f76c0d62836691e83de13afd8212809ef6cd86c72c7c49ee1726af330b30df3,2025-11-14T17:16:05.867000 -CVE-2025-60679,0,0,1d1430e8da3882931aa0c9c4c46705db15a75456e3bb452f9e44ea2d698ea3b4,2025-11-14T18:15:50.557000 +CVE-2025-60676,0,1,e7f1bc6d8f673029a8a4951546a6cef0d22025d29012ab6cce5b62e6cdd75a67,2025-11-17T17:58:34.990000 +CVE-2025-60679,0,1,b78b6b4351a61aad12a38363984229d592ef8f76e45d96053c11b4c43620ef02,2025-11-17T17:57:15.760000 CVE-2025-6068,0,0,6c3b9931ec707952af1e4745e7277c7b6e4ec480500de06ea4debac1456c0d14,2025-07-17T13:11:47.847000 CVE-2025-60682,0,0,1b619714f28623de0c50b6aec3179d075d30daae67e9c739bd839147cffb167a,2025-11-14T16:42:03.187000 CVE-2025-60683,0,0,a65e1bee7ed333da69408c462d90847b9387c3aee0c3bf74a79c304cc9023ff5,2025-11-14T16:42:03.187000 @@ -313638,32 +313662,32 @@ CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160c CVE-2025-60700,0,0,d030ffffb84a5d859aef1574a896724df71a4a0cb6765c00237b65a300240c62,2025-11-17T12:28:40.547000 CVE-2025-60701,0,0,5e54480458675cc55df08f3c70c945cdf735ba24beb97dce3a8b070faf528b1d,2025-11-17T12:28:31.610000 CVE-2025-60702,0,0,46cb06676e2a34501d98e8d8ec78412dda517902c49ade10fecc71146371e7a8,2025-11-14T17:16:14.210000 -CVE-2025-60703,0,0,65f45e572898e6e7778e5b292062dd77e826265ebe0014a063873fa5c8005758,2025-11-12T16:19:12.850000 -CVE-2025-60704,0,0,dbfdf5d7749175f9c22114c58dd932a17a193f3461c343b403577e596468e0b1,2025-11-12T16:19:12.850000 -CVE-2025-60705,0,0,288dd0cd3023071799bf1c229eba98ebf64a3142f302695629ab1640c38c4a60,2025-11-12T16:19:12.850000 -CVE-2025-60706,0,0,e0e93764789428917474c7c131a8e0ed290fbdbba5e373fd060540f52ba3d17d,2025-11-12T16:19:12.850000 -CVE-2025-60707,0,0,079a0875c84b2f3d257bb93c76d88dcfbfdbe92a4f5a1e45bb1b0b978d9725ce,2025-11-12T16:19:12.850000 -CVE-2025-60708,0,0,cc260a928d9b5d55d0fc1c5acd57dd69b4fb793f8db19f745d6eb01f3f99000a,2025-11-12T16:19:12.850000 -CVE-2025-60709,0,0,7aa6a82c53aad869db5d153ca3b8ade9a7d4ded6a59402198856d788b40d04d8,2025-11-12T16:19:12.850000 +CVE-2025-60703,0,1,098da10d1b1557c048aa4cf3651dab9620538711c29d986131df0ad5cab9d21d,2025-11-17T17:47:19.307000 +CVE-2025-60704,0,1,653c1c4e9be2111f48c182b393ad3774e6cf4c844e2e032b2284471360ebf9a8,2025-11-17T17:47:15.507000 +CVE-2025-60705,0,1,7b1656a748e2aa6963c50b3bd8f74b7b06e1f3b0fe2c996557a5e9ad11e89307,2025-11-17T17:47:11.453000 +CVE-2025-60706,0,1,d968eeee282ed94cfd16e26436b607c6f7f5afddec76dca6614c6db4685ef413,2025-11-17T17:47:07.927000 +CVE-2025-60707,0,1,6139439b4446990432ab972f8506ae89ab0d66fa64fd44ef86651ef9ffdf7cc0,2025-11-17T17:43:27.510000 +CVE-2025-60708,0,1,bad2903922ed1735e9efeec8c936cbfed1b58dfcc62e737feefa9c2c81acc440,2025-11-17T17:47:26.310000 +CVE-2025-60709,0,1,a291628566479bbfffe349702dc519e82bf59550407119d554c0c8cf96f30aeb,2025-11-17T17:43:21.477000 CVE-2025-6071,0,0,5a2f1c37d2d27a51af48fa91ca5d3cdc66d7e8a21cc0b9d4147668b931579f4d,2025-07-08T16:19:11.700000 -CVE-2025-60710,0,0,79880afdc7cd2e9d48720ca399c23cc84af0f258e1349ce3b8330312a6760d9c,2025-11-12T16:19:12.850000 +CVE-2025-60710,0,1,ccd59a7387200b5179224fbe5bd58a4e6658f1d0b14a7f57d00ee086b36461bc,2025-11-17T17:43:16.353000 CVE-2025-60711,0,0,ae7e916fb63a5267753916f39a410675756bbe402a9d7053daab7b2ebb9ac07c,2025-11-05T19:34:07.253000 -CVE-2025-60713,0,0,d93a9a16ea81162b82eb1866c70913b230d6ec0d4d8ac3285bc3d63f46fb3815,2025-11-12T16:19:12.850000 -CVE-2025-60714,0,0,5cf03fc5330ff1c7613cce3e3190349dc6d1af7b3c0f5f25884cd5b91fe4c29c,2025-11-12T16:19:12.850000 -CVE-2025-60715,0,0,9aa826a80ac07a4173feee945a393bc1a44f26e700b2862b77181c2f4cb7ac95,2025-11-12T16:19:12.850000 -CVE-2025-60716,0,0,e183ad45c0522e962b67abdae664c167bd6c8221bd4bf0d7da3551e2de0864ed,2025-11-12T16:19:12.850000 -CVE-2025-60717,0,0,7b8f04406d7659377db0902db9d9ad7e7cd4abe766f1aacb53df279594f68760,2025-11-12T16:19:12.850000 -CVE-2025-60718,0,0,8becbab6b634e77d545997552d6ccbe43af6734232dd97973b21d43f4e51004f,2025-11-12T16:19:12.850000 -CVE-2025-60719,0,0,b991b3bf870ee943681119e4e2c0e61f65bcb68ebdde91dc61e141e6e7b2a123,2025-11-12T16:19:12.850000 +CVE-2025-60713,0,1,b1fbdc4ab86f576a7f65652e001e94d0b8de11ed5214c67a2c49ec35e6384b17,2025-11-17T17:43:10.020000 +CVE-2025-60714,0,1,665fa7a27f251a92fd92ba2145ffebaf8bac18e0dbbaae4f0edf2de809216696,2025-11-17T17:43:05.550000 +CVE-2025-60715,0,1,1951fba7b55ea284df73f43012b4554c6737401bce09cd6f9cdafd98ae494988,2025-11-17T17:43:02.657000 +CVE-2025-60716,0,1,11bac57985acedb1bbcf5fdc850e8675dc4b25bf54a95e9f449da525088c12de,2025-11-17T17:42:54.597000 +CVE-2025-60717,0,1,00bd0be112e37dccd85aa4e8c2cb20b218799dd0bdd7518665761d2f52ddf957,2025-11-17T17:42:50.070000 +CVE-2025-60718,0,1,426e5b4fc0909d4d3d0214302c5e6237338dc5f4520fb3bd9d2ce3b39fb9e734,2025-11-17T17:42:47.210000 +CVE-2025-60719,0,1,ed33f3c268115f49b3575926b472ba558f0b5e9aa0d8e26c3ce24d87a851c183,2025-11-17T17:42:43.480000 CVE-2025-6072,0,0,c404ef56b8d7c95a44a5ea20a1ffadee7a90f2312922176828cc4347c44b4b31,2025-07-08T16:19:11.700000 -CVE-2025-60720,0,0,36937d7c5f5805ddf2ec6d7e134a9bcc7393f83431b2113ab31522f5713f3eb8,2025-11-12T16:19:12.850000 -CVE-2025-60721,0,0,c5cd44b5ba2c73f4194a047ae15b932757147121ddf4de60fb0f6f626fb9d8fd,2025-11-12T16:19:12.850000 -CVE-2025-60722,0,0,d5bb69e57db4fee9b7b6d640901c54ba4fd5c6c6ffa1e65ec6a64270b3fec30e,2025-11-12T16:19:12.850000 -CVE-2025-60723,0,0,6b99472e1d59021853c85c8be682623607878072164ac2bb519c793bb85a9106,2025-11-12T16:19:12.850000 -CVE-2025-60724,0,0,88393bfc41ba311c144706a9f8387b83cc7e36bda5a9ee0a14da8697b4cab269,2025-11-12T16:19:12.850000 -CVE-2025-60726,0,0,c37a4795dc8aa806ef49218b16a52dd7c6bb2a0aff7cdc4f755620b4465096b7,2025-11-12T16:19:12.850000 -CVE-2025-60727,0,0,31601ba4bd55ce46e1ee980965787cc9c5475db7897dbef0193712f4d7d1492f,2025-11-12T16:19:12.850000 -CVE-2025-60728,0,0,51f16815905a02d8669b95238134107d73efe39c07ed97aa25365698e20794d6,2025-11-12T16:19:12.850000 +CVE-2025-60720,0,1,fddb7eafe4d83cd41e525d1fa0dfa6ffa1610731a40fc21bdd10e319d64ec9b2,2025-11-17T17:42:39.480000 +CVE-2025-60721,0,1,97114d85ef4668c94c738303a170edf4da4efb3b944d9b2a2c6d8f2e49c9cb60,2025-11-17T17:42:34.533000 +CVE-2025-60722,0,1,1c088abe63ca88f5b6146323b58c8cff552b3f86f8bc9415e258a346210f6c80,2025-11-17T17:40:29.363000 +CVE-2025-60723,0,1,866a10244dd8370b15a180f6547b5b55ef43551355ce32d5bb787ec7596cb13f,2025-11-17T17:40:11.263000 +CVE-2025-60724,0,1,1ca359ed1c47bc5a6dea5df26283d6f874adda85ca1d79599d69d3fca9db5c6f,2025-11-17T17:40:24.140000 +CVE-2025-60726,0,1,ca38464846f85c9ef17605b1957f1842971f4187729a1cca2b6121c91a84379d,2025-11-17T17:40:33.700000 +CVE-2025-60727,0,1,4f888aa85c19ad04b448117380bfb8e2bc8bb883c05cd1efcdf3c884da8d46e8,2025-11-17T18:03:46.800000 +CVE-2025-60728,0,1,26cd3dfdb60785735700106123ba385f37fb90316f177c151184f4dfa6652a58,2025-11-17T18:03:39.387000 CVE-2025-60729,0,0,91b247ba9509e076fd8bca1a123a26ad9609935145df8f7c3ee6221607316054,2025-10-27T17:53:39.710000 CVE-2025-6073,0,0,59aa2c7268ef1b1e834caf9432d42406e93210052d682b4dfbc8879d14a36fcf,2025-07-08T16:19:11.700000 CVE-2025-60730,0,0,a02613861a6fe7fc18e5072823c1cb1f96ad36203a4ab0eaad7e65dedce4cdbc,2025-10-27T17:49:47.320000 @@ -314267,24 +314291,24 @@ CVE-2025-6218,0,0,0e265a89cc2a3bd08feb5d5cbdea0ea20f815a5e3a21352ce4021a3ae0596b CVE-2025-62185,0,0,23065d25d19006ec9ce0e7971490917791cb76b8db15150199dfb8e6295a3113,2025-10-10T16:21:24.813000 CVE-2025-62186,0,0,03751ea1dcd8c89ba993ad0cb3022dc40184343b0b2c27930bbff8334d398f17,2025-10-10T16:20:53.197000 CVE-2025-62187,0,0,0dc556ed1ccbcd83f3d743688420ee466016c258b1cba268f451585ff9b039e0,2025-10-10T16:20:13.313000 -CVE-2025-62199,0,0,54ae376314dafe839e9ce3dcd18c6319dd0e5b26dce4f348b248de1815c53e6c,2025-11-12T16:19:12.850000 +CVE-2025-62199,0,1,7f47677df878aa65df25d08617c16e05188019ba3998d3f2ee06ed59c41ba900,2025-11-17T18:02:11.457000 CVE-2025-6220,0,0,e66f072c85720461fb3cacbee4402aeee35c76d5a4e75aa47105eb50b7753f18,2025-07-09T18:49:50.567000 -CVE-2025-62200,0,0,6a04dfff3af7f4d1fede944ff2ea3cad1c29fb6d8c573141f6963b825b47c56c,2025-11-12T16:19:12.850000 -CVE-2025-62201,0,0,b06041109b30c935027b4ea00a4dc026d7326e2b340ac99a163740e572738ff2,2025-11-12T16:19:12.850000 -CVE-2025-62202,0,0,59046a400d32912bdaa4793e46e30cb4db95f92346cff25e52b80fe297716b73,2025-11-12T16:19:12.850000 -CVE-2025-62203,0,0,06037246cfe8e319e8bd69838f7b8372535af1eca0ac5c7a52c31dcc966d31a1,2025-11-12T16:19:12.850000 -CVE-2025-62204,0,0,5ff82b51812423ffd4a8365766a362d8b9a7249b44036c46c8838b329cc69ae1,2025-11-12T16:19:12.850000 -CVE-2025-62205,0,0,5a87b2db0909388db9627430ef299386b0409b0e07b3704212bfeb60d2df723d,2025-11-12T16:19:12.850000 -CVE-2025-62206,0,0,0fce2a6c03660b32bd9b8a0fc0b795c0e8c6546a33dbd184d0f48cbb7e880f1b,2025-11-12T16:19:12.850000 -CVE-2025-62208,0,0,97da92a776f215ed8d416da55eb39eb1ddebd68daa2faabdefb193042e6af1c4,2025-11-12T16:19:12.850000 -CVE-2025-62209,0,0,877f9ecdde7f811a8f78455f3721a3e7be8b61fb2990beb338f8d28c13bc442d,2025-11-12T16:19:12.850000 +CVE-2025-62200,0,1,f99b41200d2e4b8acf18699ce0bf474bb35433fe345606bbf67cd4453a2e10db,2025-11-17T18:01:59.723000 +CVE-2025-62201,0,1,fe531de2fff2d329ead74503c8f5a3614f984d5e0d4a570866cefbb7dcda0fe2,2025-11-17T18:01:56.120000 +CVE-2025-62202,0,1,faa682310b72dc8bce8740523cf9f7171e5df931f542caf98eccc0ff8e0f4dc4,2025-11-17T18:01:51.953000 +CVE-2025-62203,0,1,58062c217e2f934d789eccd858dedb83acbfe90bd8d3035e8c8077dcbeffbf04,2025-11-17T18:01:46.200000 +CVE-2025-62204,0,1,5f08b2771e72b195b7e0e20c93d8d4613bf06f5ce11811957721c6ff07a578b1,2025-11-17T18:01:37.127000 +CVE-2025-62205,0,1,51e0ade4449b2d9dd7e15ef39df538c016bb941d75b8983e3931ff404bd09cc5,2025-11-17T18:01:30.640000 +CVE-2025-62206,0,1,7f5576bea53545a6426cd56d56925fdfd5ad4235a461030c79ae69c789b1b6b3,2025-11-17T17:40:57.177000 +CVE-2025-62208,0,1,c112736be94b8a66fce0f08698c80d3c1d9b9545829aac276755f3e01cf799d6,2025-11-17T17:40:13.993000 +CVE-2025-62209,0,1,019bb84f5fee7a7c76aed160664b3da8639ebc2a4562b4f136d23092e43d62b6,2025-11-17T17:40:05.017000 CVE-2025-6221,0,0,4e31fc9467a437d05f8d8f175d334cd281f82bda6b2d534c215e37146adfdd27,2025-08-18T20:16:28.750000 -CVE-2025-62210,0,0,e348437971aaab7efd2e5b706e42fc9252727f3da81416906e9e154b21cc2f6c,2025-11-12T16:19:12.850000 -CVE-2025-62211,0,0,0f5f7e31849379720192d5c7722892adc1a5bec4b69ba2318d45f63acf509d85,2025-11-12T16:19:12.850000 -CVE-2025-62213,0,0,ab7d50d9d26afd55e8c9945bab0cb6b04972c04b10abd0dfa4bbc2075f01c16a,2025-11-12T16:19:12.850000 -CVE-2025-62214,0,0,382bbfa1842aec61744a21ea36d7d9ad73506144da5ae4e78810e1ab4fbb8162,2025-11-12T16:19:12.850000 +CVE-2025-62210,0,1,b137a6481b869363740395dd3e68d38f6c0b2b37cdfeec15ea80ce1ab9d7754d,2025-11-17T17:41:05.323000 +CVE-2025-62211,0,1,9cad2b7d458b4e4684f3719ab667ef31154216f6350baaca06ac204dfc238439,2025-11-17T17:41:00.753000 +CVE-2025-62213,0,1,b0fb6349ccc7a4335db66e0f4116f084c20af66bf6e37d7947da45d1b4bd27d9,2025-11-17T17:16:02.230000 +CVE-2025-62214,0,1,81152cc7143cbce1b81049300853fc0d8e449a1c6e6428d751f967c67729f453,2025-11-17T17:40:51.857000 CVE-2025-62215,0,0,612df7d2abb68176277e27a0347b904392ef321f511a283e5913e4a29fac214b,2025-11-14T02:00:02.350000 -CVE-2025-62216,0,0,5437ac218878651b05f43d89c0ffbd2c351fdb4e152e52df40867d2f604747f8,2025-11-12T16:19:12.850000 +CVE-2025-62216,0,1,7bc5918bc1369dfa0c5e63f1ce9e227751394880de1e3684f484349a899b11c4,2025-11-17T17:41:09.980000 CVE-2025-62217,0,0,3f50c7bcc4fd220bec4af0ca6d95d48992b0909f24f4387239e5978a0f99b925,2025-11-14T15:56:13.963000 CVE-2025-62218,0,0,a5ad1d6734b4b218d88c0346f4c413c5171d41270b4504a2f2df9d379a533975,2025-11-14T15:55:01.250000 CVE-2025-62219,0,0,b0dabdcbaf98d29822900f73ac48ef576ac91afc82634b22fe6a155397134b8a,2025-11-14T15:54:21.113000 @@ -314469,6 +314493,7 @@ CVE-2025-62515,0,0,176b720d4cb0f4ed7a8f8af31d8740f47498d912d913d6ee8f74c886d3000 CVE-2025-62516,0,0,8f8964cf075462c74a47e3d005c989c7d5b195961be257aae50ef9cf45692ff4,2025-10-29T18:15:42.183000 CVE-2025-62517,0,0,8aad3e8fe9ba962559b072f15291db5654baa0a4c3a18583849793895112d350,2025-10-27T13:20:15.637000 CVE-2025-62518,0,0,e3f305fc2a4cb905da6ee78928396ae0201532fdfc6b8b3cc163daec2839d05e,2025-10-21T19:31:25.450000 +CVE-2025-62519,1,1,5ed7bf5cef5e4b304dc717db510dcd695e34221e4c6f5bf9640e8f47c63ad40e,2025-11-17T17:15:50.400000 CVE-2025-6252,0,0,04266fde32de91a19cd75afe711753a0e9f9154bece1418589e4e14bad3b2599,2025-07-07T14:51:20.410000 CVE-2025-62520,0,0,a3991f87238019d4e13734cf9d71ec90db75c7e219226497378f1a1b805575a8,2025-11-10T17:55:42.480000 CVE-2025-62522,0,0,98beebf8c12272d6e9509df6ddeddaaeebca90f3ceeee0593874463deb396f18,2025-10-21T19:31:25.450000 @@ -314675,7 +314700,7 @@ CVE-2025-6285,0,0,0f5e702030ae71dd658a22b122b4aed0ed12d1aae61fb46ec51e0841a0ec90 CVE-2025-6286,0,0,b7219a51a324575d8724ff4298827d1d2120856c9a6df23d680f1ea8dbfc94c7,2025-06-26T21:33:36.923000 CVE-2025-62868,0,0,2bfebc7cfb500f2b08ed455c1f06837eedda7772eff717ce8f0b5e73c9bdd0f6,2025-10-27T13:20:15.637000 CVE-2025-6287,0,0,c97270e78c42232e6181a1fc6418c4993fc08485bae7bc11e103b2bd3b0836b8,2025-06-26T21:30:45.290000 -CVE-2025-62876,0,0,0bff2f17cf4a22c79104232b536bea74195a4e4ef415856775b167a1559d2217,2025-11-12T16:19:12.850000 +CVE-2025-62876,0,1,9f3fb52fc617985ae176022b3ff0fab965bb8cc3c66b1fcf9788b643d29ad263,2025-11-17T17:15:50.667000 CVE-2025-6288,0,0,fa5bb2cf674608fadad9e3141e14760d75f6db2208fe52ae1ce80a76abaa33b6,2025-06-26T21:19:24.540000 CVE-2025-62881,0,0,8bdbb0cff4460220f5257ef7abffe027882d52ca488ab2fef1dd0e5bc41c776f,2025-11-13T11:17:09.370000 CVE-2025-62882,0,0,78f065240942bb62993e8994ae5efcd107a4b64acf84f04a86b1d68799e88994,2025-11-13T11:17:09.550000 @@ -314804,12 +314829,12 @@ CVE-2025-6311,0,0,d703684ef43822db1202b94cc4f4496d3a28c9f2331c88e141c20883b93173 CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b2b,2025-07-11T15:50:52.350000 CVE-2025-6313,0,0,1562d4a1d7af34d5663a11ccca3c18498c794bf589f4002eb9f8648b22c4c20d,2025-07-11T15:51:05.223000 CVE-2025-6314,0,0,85263aadad702e79e29fb879ab737e30de52ac79d67682e5f45540c096d4466e,2025-07-11T15:51:18.450000 -CVE-2025-63147,0,1,9164c8683419a52ebe07d4198cd3b1a6b281cd12ac624a4d6e87d57b5e1cb129,2025-11-17T15:34:14.427000 -CVE-2025-63149,0,1,d8a9e40cf7a44c48fb3c5a67b8a7d795421636906021da88cb5a0350b9348a2b,2025-11-17T15:29:09.117000 +CVE-2025-63147,0,0,9164c8683419a52ebe07d4198cd3b1a6b281cd12ac624a4d6e87d57b5e1cb129,2025-11-17T15:34:14.427000 +CVE-2025-63149,0,0,d8a9e40cf7a44c48fb3c5a67b8a7d795421636906021da88cb5a0350b9348a2b,2025-11-17T15:29:09.117000 CVE-2025-6315,0,0,af65062d3a83820b00b6d86c3f2fcfd8c6f95503b5307720deb757d1fce33557,2025-06-26T21:10:39.227000 -CVE-2025-63152,0,1,e3723fa573ee549c3176c2b583155d6166194a2942e249c30bd3ebe5c9347d73,2025-11-17T15:34:39.797000 -CVE-2025-63153,0,0,0c351055721d5fa3cc28221bf353d7b7e3af801c45934fb39c4561f406da5378,2025-11-12T21:15:51.540000 -CVE-2025-63154,0,0,f4b52899b17513beb8eeeb5ac5e4d7cc5326feeec6df6fe60dc6f9b46db5db59,2025-11-12T21:15:51.703000 +CVE-2025-63152,0,0,e3723fa573ee549c3176c2b583155d6166194a2942e249c30bd3ebe5c9347d73,2025-11-17T15:34:39.797000 +CVE-2025-63153,0,1,5d693f264f876514e7c6d856961aa22597e9fe2021fcb0d8cf1adea42d2c1000,2025-11-17T18:23:11.127000 +CVE-2025-63154,0,1,fc60daffbba883183c2c1cef5fe8667a5ee9e7b66a243fe9eee56225f427f61c,2025-11-17T18:22:52.723000 CVE-2025-6316,0,0,e85ee8cd188de5c7956a0389582ddb5a08b1fff85aae5efbd6e8b11135def087,2025-06-26T21:10:24.857000 CVE-2025-6317,0,0,45662ffcbd49218fd80ce80e808bdc71255d6a513a860a039e33871678b8e5c8,2025-06-26T21:09:41.093000 CVE-2025-6318,0,0,ed07c2a0e6ff9abcbdef5755c624a671e6647ab3796c93759524419d003abdef,2025-06-26T21:09:26.947000 @@ -314872,9 +314897,9 @@ CVE-2025-63451,0,0,fc2a89c12d73e97c4b8244bd211574e2deb0bcdebaacf6b096d5ed76fc385 CVE-2025-63452,0,0,80ded5c011c7a189fcedf63a17752b52f65cab539bc6401b41c6b9639db17f63,2025-11-07T20:46:42.993000 CVE-2025-63453,0,0,65ec3e84ec1dc3b14d1173db053c7edab368bd7f128d99b325e5406feccba198,2025-11-07T20:46:33.640000 CVE-2025-63454,0,0,fc308e95fe2714524e00bb0c486e8ee71dc646551e54a5bac6342bef541ec9b7,2025-11-05T17:29:08.600000 -CVE-2025-63455,0,1,948f7929a1e0901ccc25245d3fdd85456408d467bde536b3b5d8491567ec706d,2025-11-17T15:29:55.167000 -CVE-2025-63456,0,0,5a583bec66f20656a984e08b39e05cd1b22f4daa60aff125b14640b8b814be1f,2025-11-12T16:19:59.103000 -CVE-2025-63457,0,0,8eab1825fab7aeee31cbf2e186bedd7f836a7494a883a14a0c58244442bc6269,2025-11-12T16:19:59.103000 +CVE-2025-63455,0,0,948f7929a1e0901ccc25245d3fdd85456408d467bde536b3b5d8491567ec706d,2025-11-17T15:29:55.167000 +CVE-2025-63456,0,1,37a45632c55422a6b9c4e2271538c08ef2fd84a30cb40cf810a7abc54c3d7ecf,2025-11-17T18:35:00.850000 +CVE-2025-63457,0,1,29c6ae41ba98f90f3b2431b4b524afbad35060adfb50297346855005de6a7204,2025-11-17T18:34:11.637000 CVE-2025-63458,0,0,c47f4a636e88405048a40f1d3b801588601d316481054e42e8373f492503f4e4,2025-11-05T17:28:58.980000 CVE-2025-63459,0,0,c0cd9ccfb71b7691adcd08d383fe8b3dfc20bf2068c4227fe9cb6570cb016a7c,2025-11-05T17:29:18.877000 CVE-2025-6346,0,0,60adff065c15ee37ac94dab3cf86c7439ef9e78c708c480099857f05e535c99f,2025-06-26T14:44:35.813000 @@ -314920,14 +314945,14 @@ CVE-2025-63617,0,0,afc01184ac7bba35d707f2625844900a71d7d16b3c53574ab9a49d57bf839 CVE-2025-6362,0,0,ed837364dd32376dc1cfdf8d173bec48f29c4e974fad65f0c43a106ea3f3894b,2025-06-26T15:30:56.573000 CVE-2025-63622,0,0,e7330fde3c1785920f20a1bef5d00328fe6a554fc277c370dea6273484d710dc,2025-11-03T18:35:04.287000 CVE-2025-6363,0,0,a2092da75c1239a931ef4653704a6e5fd116fd3da1a6a5dbab6e327924c9b517,2025-07-02T18:56:45.850000 -CVE-2025-63638,0,0,9a98644e3fff0d104078b0054e2991c71e37dfdf659368f69cd92db1f2ef8703,2025-11-12T20:15:43.613000 -CVE-2025-63639,0,0,e826ac340eced8248bad57faf100416ba54573b0042afb481674dacfd820d5fe,2025-11-12T20:15:43.783000 +CVE-2025-63638,0,1,14a34705eea6d26a585b8de738eed172497e9027897fb69ba7f4eadedf052655,2025-11-17T18:46:06.327000 +CVE-2025-63639,0,1,abdbeafb104d78358ed0538ee00f5e46a855894c8d322912b1f9359b34a44114,2025-11-17T18:55:26.417000 CVE-2025-6364,0,0,be4a9d9271654f5f2f84bfeb78f337d623dc5f4d4aa408522a8f5cef88e4cf46,2025-06-26T15:28:57.953000 -CVE-2025-63640,0,0,aa23e04338f3fc4d41fdaaccab77886b4019007204ad5296681c607781238de3,2025-11-12T20:15:43.947000 +CVE-2025-63640,0,1,bca3de20fe688f7df29c3774741a1cafd1576f4fb9b0952c6278f7377387c14a,2025-11-17T18:13:14.433000 CVE-2025-63645,0,0,d566bf6eaba7965fb2d8656abb0a24dd344ea10fa8f1d3dfbeeb313614d150a8,2025-11-14T16:42:30.503000 CVE-2025-6365,0,0,3760b6f943b871ebd6c53dc5dc7ef14ebe5600927bd7322727b44adaf34f4580,2025-09-30T18:27:44.820000 CVE-2025-6366,0,0,4d6033e723dab05a7817d3814dd513edbd933fdc5efbcab1032dc4258894cec4,2025-08-29T16:22:31.970000 -CVE-2025-63666,0,0,c2639cd4d235a54d8266a96e5c04029686c8e74a24a4350ee6febd56a31a1f7c,2025-11-13T18:15:54.270000 +CVE-2025-63666,0,1,5492a1942658b459eb16c66173b31c30bbd1366e7f3b1c77acac92a549d5d06a,2025-11-17T18:59:20.080000 CVE-2025-63667,0,0,b9a600360d57d25bd6e1af5bdcdb6041496106ea63ef0c0e972e1565089b2c7d,2025-11-12T21:15:53.003000 CVE-2025-6367,0,0,bb431b3b23d08c0eaf6da1f3ebee6c3fd3be15fbba72c9deb2782b2a49fd2678,2025-06-25T20:07:04.093000 CVE-2025-63675,0,0,5fc4e6601be7f71fb20e8f41c9c3dbb888fb6a16b342fd88cc7a3158743452e5,2025-11-04T15:41:56.843000 @@ -314943,17 +314968,17 @@ CVE-2025-63690,0,0,496ac9d7e888dd7271d7c82f910393c3ade06187e222d0a80b077f281db91 CVE-2025-63691,0,0,0e8ec491f0b05c60cbd9fb85c0b28bffccfbd130bd00ad0f06b9650f0e2bc85a,2025-11-12T16:20:22.257000 CVE-2025-6370,0,0,d33774f702419cdd1457ea9fbd6caad660fbed644af794e26dd23c78ba75cc83,2025-06-25T20:09:39.790000 CVE-2025-63701,0,0,d6e95eec02342d166b4bacfcde4420a4129025ff72b364a3e57758eb7e0eefaa,2025-11-14T22:15:45.930000 -CVE-2025-63708,1,1,4fc26b7c4c5eb1e540aea6a34639bfe7c8c10f292d819281ff5403a2dcf23898,2025-11-17T16:15:50.327000 -CVE-2025-63709,0,0,65b31a85829429a32ca717204cd3ca9917df6ce13ece6722e5c9007e84c552c2,2025-11-12T16:19:59.103000 +CVE-2025-63708,0,1,3c480766653b28307cb9a73d87dcf990de00162814a1a1754e4f809f6e1f0fee,2025-11-17T17:15:50.830000 +CVE-2025-63709,0,1,b0547aefb089aa0e088ef7c14863f039e1930ffc78d15c029056449150facb67,2025-11-17T18:20:14.297000 CVE-2025-6371,0,0,0a94c5b6f2c8de87b0afb6b9540898e3a2c0f16abf713b5d77d3a930178a3ee2,2025-06-25T20:09:48.163000 -CVE-2025-63710,0,0,7190998ba7bdc34b6f144f09431761e6f29ea6adc8e7934523c1e8a3d18bac64,2025-11-12T20:15:44.113000 -CVE-2025-63711,0,0,72a406a515d2e6b227d7ecb1d6d564b5dac3194c906e054c589102170156f06f,2025-11-12T16:19:59.103000 -CVE-2025-63712,0,0,43bff005871d0d0f98c11c07766b097e32ffdc7a499a7ce272b712e6cb69eead,2025-11-12T16:19:59.103000 +CVE-2025-63710,0,1,840583f3b4f0b85b92ea3d82cdb8fbd2d27339511c0160e41078f43563d92e92,2025-11-17T18:18:39.677000 +CVE-2025-63711,0,1,829f43429852e091c8d00bc9c7399b99a933ccfc99024798255b2acaafa319a3,2025-11-17T18:16:51.357000 +CVE-2025-63712,0,1,518441d6af2566ae93a76f08b50cb236c6f2de50c72178b99964ed650c827f43,2025-11-17T18:15:02.930000 CVE-2025-63713,0,0,450b82543ca806f77fc52f91a530564dceb6e95ca328aa6dc60b6284d42ea76e,2025-11-12T20:15:44.273000 CVE-2025-63714,0,0,24476f7225bc6f5cbee993a266c8c9532ce410f1eea5d7ac814c8b3aa78e2cd8,2025-11-12T20:15:44.437000 -CVE-2025-63716,0,0,158568fc67e211c3449ac94beb0f84c29f049624a71316ef23a163bebbd6cfb8,2025-11-12T20:15:44.670000 -CVE-2025-63717,0,0,46a2efa6b1ed06d0510cac6c4a53b3cbbdde22ad40df2512a86ba9e09a4a9821,2025-11-12T20:15:44.843000 -CVE-2025-63718,0,0,1fae8fa5ec344b09418ed6212a3a5d8ebe99a21ca57bfa457ec83a5d45bba3c2,2025-11-12T20:15:45.020000 +CVE-2025-63716,0,1,fceb486ffc74351815db6d17a7f7bcd74dea8a5a99ebeaf09a82d5319d800ef2,2025-11-17T18:37:54.977000 +CVE-2025-63717,0,1,87f2488ff3a5258880cce12ce9705bfef4334cb5d84a9ddad30173742d30cd76,2025-11-17T18:40:18.373000 +CVE-2025-63718,0,1,c9fcfa43a49be62811adf89f01d80b5732dd876917749d1d8672e0e4005459aa,2025-11-17T18:38:45.273000 CVE-2025-6372,0,0,57bd725e58155b22002b2fe27e5ef880df740adaf81477b1018fce26c7c2183a,2025-06-25T20:09:56.243000 CVE-2025-63724,0,0,9a46440780344592b2cc28dc17dc9b1b30dc6da3f2139043676064cd0abc5db0,2025-11-14T20:15:47.857000 CVE-2025-63725,0,0,8e4ec81843589c38b489a411e42089633c07ec3bf295872ddd97f94b0417e133,2025-11-14T22:15:46.110000 @@ -314961,8 +314986,8 @@ CVE-2025-6373,0,0,fc3916a56b7bebb7f4afd8db9623b0c0b7ca6d04a407f196c28a44bfa23b95 CVE-2025-6374,0,0,52c2a3762c3febff3f7133c40521ec4205f6d9bad96026808a9cc8ac3a049376,2025-06-25T20:10:23.920000 CVE-2025-63744,0,0,da3355c2693a6718fda834b77518c269648c3abc25ba1ca844554a9dad57a1a3,2025-11-16T21:15:44.407000 CVE-2025-63745,0,0,23fbcebae6b8adfafc5359eb99b54d09fcc1621d21dc5f45128fd826f0a727b1,2025-11-14T22:15:46.480000 -CVE-2025-63747,1,1,7f0adb95450e197c346f762993a7b4c13b468542597b4f12f395687568a64e0a,2025-11-17T16:15:50.463000 -CVE-2025-63748,1,1,0b32fecdb02533e32e0975ec72f0c628ce89be1d32a1aa4061fd83efe29fd9d1,2025-11-17T16:15:50.583000 +CVE-2025-63747,0,0,7f0adb95450e197c346f762993a7b4c13b468542597b4f12f395687568a64e0a,2025-11-17T16:15:50.463000 +CVE-2025-63748,0,0,0b32fecdb02533e32e0975ec72f0c628ce89be1d32a1aa4061fd83efe29fd9d1,2025-11-17T16:15:50.583000 CVE-2025-6375,0,0,3c0218e75488f414527cefdd17b11896c81776544f6b2535e85e853188940de3,2025-09-18T13:38:16.413000 CVE-2025-6376,0,0,87f4055808a16f1bc8fc7dd569fbcc32ea4817836bdf8cc1b15fdc995f254398,2025-07-11T18:35:53.330000 CVE-2025-6377,0,0,ba3054fbb65a50a5d08a5d5b714d5d1e90e671230206993f7c04c49b605588c4,2025-07-11T18:34:12.230000 @@ -314977,8 +315002,8 @@ CVE-2025-63811,0,0,4f7263eb3d2fb17697e7a3a05437a2c81636562357efcad7db279b056f97a CVE-2025-6382,0,0,efd8750cb574f4b8ddeed5e07b9915e567566e97e99b145524009524920bff34,2025-07-25T15:29:19.837000 CVE-2025-6383,0,0,d4983baed15d1793d27d210c93a94db5a7e163abe77193a900e62847d2cde376,2025-07-08T11:31:13.823000 CVE-2025-63830,0,0,ce9ca422353dc78289eb802feeab6637f6b0d1d11763c4c744220932de630f34,2025-11-14T22:15:46.667000 -CVE-2025-63834,0,0,80bcf479d739f578e3e947b6182dab991cad745c51ec8c531acd037774032f84,2025-11-12T16:19:59.103000 -CVE-2025-63835,0,0,82eb3e716873d3f6a9fa9f59ff94f7ed25631b8670d4d2a00b9d688f01dc7b6d,2025-11-12T16:19:59.103000 +CVE-2025-63834,0,1,5c72e5fddf7ea954a5dee447968e7f965de2eea4b39e1f7696414db954223ba6,2025-11-17T18:30:40.370000 +CVE-2025-63835,0,1,7ffb39c8c9c6dc28463f55dadcbeb16ad2b98f5dd2fae3d3fc368bb9b8365dbc,2025-11-17T18:28:18.650000 CVE-2025-6384,0,0,97aa0c1b3518730f2ff1ac0c6e40e6df53f12abb019ae8c41f191d17b86f6691,2025-06-23T20:16:40.143000 CVE-2025-6385,0,0,464badea5b662001b494c98ff4f924b7b5edadd5780086f421fd9e2a4d9d1971,2025-07-25T15:29:19.837000 CVE-2025-6386,0,0,36273686c966a96e6687737cbcaf18f7573e7dd2a4ed9617fdf7c38b7cac9900,2025-07-08T16:18:34.923000 @@ -314988,7 +315013,9 @@ CVE-2025-63885,0,0,12c6f95cbe8095c93fc90e41bd7e68c1f40301c95e3edc50862766fa954ae CVE-2025-63891,0,0,a1a9ae9cfed932d5f093e847e20d1fa29a13ac9441252f438ca3cff7d3817757,2025-11-14T22:15:46.853000 CVE-2025-6390,0,0,9c2995b97c77e7da4f43909b7b6f4b7215a1357d7553475969bba1d7250f8bdd,2025-08-27T17:56:40.230000 CVE-2025-6391,0,0,76a67f2aac9fc01ec5ea0b9c5be515086faf87f6a920d69dbd894ac3dce21de0,2025-07-22T13:06:27.983000 -CVE-2025-63916,1,1,19313b1b82577450ef495200bd1a320c7034d5d441120f688bd1e62856b895d4,2025-11-17T16:15:50.700000 +CVE-2025-63916,0,1,edbe723e4778a8bb943d0be91af471c2ba89e8dfed4a983ece41d925d645b15d,2025-11-17T17:15:51.007000 +CVE-2025-63917,1,1,af66c43579ba4f69f59a1f462302f527d75ad2f569aa677024fbc824a26504be,2025-11-17T17:15:51.207000 +CVE-2025-63918,1,1,1f30920297052c08af58ea9f6da53acce28a8b582a0397fc12f3e8bbd2de4574,2025-11-17T17:15:51.333000 CVE-2025-6392,0,0,e50d913b817f705c17e4c5986d5d237892454b2d6369a72711353bff4d200116,2025-08-27T17:55:17.067000 CVE-2025-63927,0,0,927a3dee6242a721c6301e1d29aea3ba370923e5b1369f7f351d1ef6ba9860c7,2025-11-14T16:42:30.503000 CVE-2025-63929,0,0,0423c0ef8a4c2b971a0c6713d98efbc18c25910d9a89341572ac19fe3c70b7d7,2025-11-14T16:42:30.503000 @@ -315003,7 +315030,7 @@ CVE-2025-6401,0,0,5cf4034351d983ee04de416dd673b8a67d86755e6334b356b4bd42e3cd39ff CVE-2025-6402,0,0,9fcf059d93a615de79cdd3b74519970d6c73c80b6f86a7557b01dae4c88ad665,2025-06-25T20:14:57.620000 CVE-2025-6403,0,0,007861183f6687f9c9a79ed265c27e5792ce1d4050de9b4571cc349ce6d48442,2025-07-02T18:56:36.940000 CVE-2025-6404,0,0,f0c24c4f38cddef26208faf5fffbe2ab0f5998ff0d6d820bde73ac92320b2d1d,2025-06-24T19:33:00.033000 -CVE-2025-64046,1,1,6485f0e48255f0b9c9c349348584271b775311d371b66af62ae1c2f8b9383208,2025-11-17T16:15:50.820000 +CVE-2025-64046,0,0,6485f0e48255f0b9c9c349348584271b775311d371b66af62ae1c2f8b9383208,2025-11-17T16:15:50.820000 CVE-2025-6405,0,0,892fa39ea25d0fceb083bcffe5177ecfbe7cb9096e1732c10483f9dee58de891,2025-06-24T19:16:58.253000 CVE-2025-6406,0,0,2db684a16f4e28aaee6c2ddbef92630dbb3eb77bc0c3d22bde49da8224e470bc,2025-06-24T19:09:54.780000 CVE-2025-6407,0,0,00f10b229214c0a1e897663a31513da61f75e551ec09dba31fa5834ec889a929,2025-06-24T19:04:59 @@ -315168,6 +315195,7 @@ CVE-2025-64336,0,0,7e1d8adf0dc0e7536df8d32ac34070915a1011c01afa2b197faef6988bbb9 CVE-2025-64338,0,0,e900b0f8f11e03fe33043a4749713e50413d55b166fd598f50881a945a4be6d9,2025-11-07T05:16:10.167000 CVE-2025-64339,0,0,f15cc55cc32e3b3f372a3b7e006d8ad53aff6b72aae4caac95d6fbfce3fa6925,2025-11-12T16:20:22.257000 CVE-2025-6434,0,0,ecb9a2f5804c034adf10fc22239ceb9a45f0bfd777ba3180d39544c61d492b9a,2025-07-14T19:15:35.130000 +CVE-2025-64342,1,1,971b0bdecd6ad822ea80ba7bf44c350ea62d0bdc28f6f1a307e6d30f046fa963,2025-11-17T18:15:58.090000 CVE-2025-64343,0,0,8ab383c6a795e3b426d3b8bdf7cec39a5559bff7527400e7f0fab2282bc5d4df,2025-11-12T16:20:22.257000 CVE-2025-64345,0,0,214b5171cb4b0270b018e4227b8329e007d95edd4bb41c650ff5d32f8a2e2e13,2025-11-14T16:42:30.503000 CVE-2025-64346,0,0,ce651c903e2d1ff26fd9c2cf68ce0cf817ab6e6637e02e01a9b93c7f76773e15,2025-11-12T16:20:22.257000 @@ -315354,6 +315382,8 @@ CVE-2025-6475,0,0,3f426cf1651995de981716ed0ce59ff04720b4c8d7d4d43d75adecd6f0735d CVE-2025-64752,0,0,202d8bf2e54c262ffa83eeaccdf60c143ce59974efd36f9d28e654bdeb8542f3,2025-11-14T16:42:03.187000 CVE-2025-64753,0,0,6bea306e9380d597e799aeea6d11d2d8308ae029159b3e05a9983ce22e1d0377,2025-11-14T16:42:03.187000 CVE-2025-64754,0,0,480ab0fff69b440688104502609a41fc0c48b3ada8c6719a1b4db445a7f10930,2025-11-14T16:42:03.187000 +CVE-2025-64756,1,1,a4d3ad586d5084029fa0aaedb295d54f898ef3cb2da64d082c74125f3c6571eb,2025-11-17T18:15:58.270000 +CVE-2025-64758,1,1,90c500ea5f6ab7aef593c47e3784b708352674c8fd1e3552531d0487ae184887,2025-11-17T18:15:58.450000 CVE-2025-6476,0,0,88c9d4c09f8a99588e03924e5dd1181761a91a2ea6d53c95f7cf80fed6da32d7,2025-06-27T17:14:29.533000 CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c33723313882d,2025-06-25T19:25:44.190000 CVE-2025-64773,0,0,97c229f7a23723e169ff363d489d50f6fbea8da69826e66c8d5748515e17f4ee,2025-11-12T16:19:34.210000 @@ -315398,7 +315428,7 @@ CVE-2025-65070,0,0,f448085f4de7ea0b353d6128a191ee6528137163bfc2caad243c69ba708c6 CVE-2025-65071,0,0,e56be4598f471d5cff2f43c3a018bbc199e9eeb1e2f0937667d83392f2f3ed36,2025-11-15T04:15:57.573000 CVE-2025-65072,0,0,ebf75e8acb0584e0175e0768ce68e5d3ee6116c357be488a4d6b449c8c0b140b,2025-11-15T04:15:57.667000 CVE-2025-65073,0,0,7fab092bc7305fb0ea089e543368410c80ee4ebb9ff15b563b6b6cdff79305ed,2025-11-17T08:16:25.600000 -CVE-2025-65083,1,1,563a6efcc1e65157a4c4d10ac1d71e01b6e8ba8053d5223539f834ae51ab1666,2025-11-17T16:15:51.007000 +CVE-2025-65083,0,0,563a6efcc1e65157a4c4d10ac1d71e01b6e8ba8053d5223539f834ae51ab1666,2025-11-17T16:15:51.007000 CVE-2025-6509,0,0,0a77d8561ce4da22774ea5cb68ff62f299428ec7e8554fc3b65b6353cd49cdad,2025-06-23T20:16:21.633000 CVE-2025-6510,0,0,6ac07d683db7d6e624d6f059776301bd59aa18a2ba615c569f28edfcbd6187b8,2025-07-16T17:00:44.380000 CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000 @@ -316163,7 +316193,7 @@ CVE-2025-7378,0,0,72a9695f2f11ee0bfe3b1b6422cccadde0ec21ca0dda5ef474b0f3b0a370f5 CVE-2025-7379,0,0,23158582c91eca7c835e384d8d9a8b79ad51ec51b2b3734a5a88bbbeb800a897,2025-07-10T13:17:30.017000 CVE-2025-7380,0,0,ace1d01e8d3ade90570cb43cc84be997604ef5cb800ffff36baa540e83419e7f,2025-07-15T13:14:24.053000 CVE-2025-7381,0,0,17155cfb118916bb44ca4e9c45da60b87335952332c8d49255db110e388bb177,2025-07-10T13:17:30.017000 -CVE-2025-7382,0,1,b1291aea01d52f2f9d67bfc7ed7d829fffcdbae86f07fd09607cef9ae993f098,2025-11-17T16:22:35.953000 +CVE-2025-7382,0,0,b1291aea01d52f2f9d67bfc7ed7d829fffcdbae86f07fd09607cef9ae993f098,2025-11-17T16:22:35.953000 CVE-2025-7383,0,0,dc6e55f1be2be1723d4734966401c5bdf332611f7fb6c74f06c722bcb91f38cd,2025-08-29T16:24:29.730000 CVE-2025-7384,0,0,299874ecd56a4afeb2241de20281602ec166b8f206b58ca710c8adf8fd466c52,2025-08-13T17:33:46.673000 CVE-2025-7385,0,0,e6637219a3a76a60f208a4e850c2772d30001d42a0ecab438914e8c5b707f58d,2025-09-04T15:35:29.497000 @@ -316391,7 +316421,7 @@ CVE-2025-7618,0,0,4b009734b0bc4ad51bcc9d13a92575a599fc413d2f895a9f32ac3f9ea23b61 CVE-2025-7619,0,0,9c81c5dca799aedbbb57f5e97f3ad62df9eb92a046ce4f3fa261a4cbcbd7429d,2025-07-15T13:14:24.053000 CVE-2025-7620,0,0,58397410fd2dd6000c950f17a2b27b94a54f026b8d76381e458f286ea70d5436,2025-07-15T13:14:24.053000 CVE-2025-7622,0,0,8076b5ad1b1fa87db5cf73f28d0f80ad8e4c1d1f1800d0dcab738a94f353796c,2025-08-12T14:25:33.177000 -CVE-2025-7624,0,1,17c3fe078beefb3048e3880a04e4d7ee7bf2ccb1a4ae85a7797e46f5bda2472b,2025-11-17T16:13:07.190000 +CVE-2025-7624,0,0,17c3fe078beefb3048e3880a04e4d7ee7bf2ccb1a4ae85a7797e46f5bda2472b,2025-11-17T16:13:07.190000 CVE-2025-7625,0,0,2238a77cb612c8ed02a3ae5a47afc4bff821b7c00759e94c995fc4a6b56f066b,2025-11-06T17:12:20.880000 CVE-2025-7626,0,0,a07480e7eca325c53ccbf6abb9ec10b50b7a6b77fb3c0686ee564fcfa1074328,2025-11-07T19:36:24.987000 CVE-2025-7627,0,0,b6d370dbee663a3d106c00338353fb2db839bd592f5e68acc620b08c43a814f0,2025-11-07T19:29:39.850000 @@ -318362,7 +318392,7 @@ CVE-2025-9896,0,0,0249250949165450fb7f11be27cda9243e0aca717f3d55e45d2ee881c07bbd CVE-2025-9897,0,0,e455bc225902369cbb26aa72df0ce50b0947ec3851cd77698c9116942fcd8ab1,2025-10-06T14:56:47.823000 CVE-2025-9898,0,0,bd175dfe9d788d4b08fd90edd3e8663eb3028b58fa0d2cb989fd25ec9e5e64e6,2025-09-29T19:34:10.030000 CVE-2025-9899,0,0,65441220c1f57e23340c3c1286b3d86a2ce6bf24ff61081e081033961d8b22b0,2025-09-29T19:34:10.030000 -CVE-2025-9900,0,1,a270a06aaeb80603a22150d60acd5298affa280313aa3ca776c2f5d1f66b411f,2025-11-17T15:15:52.083000 +CVE-2025-9900,0,0,a270a06aaeb80603a22150d60acd5298affa280313aa3ca776c2f5d1f66b411f,2025-11-17T15:15:52.083000 CVE-2025-9901,0,0,22e7f0a83d0baac40bcc0ae0231d2fb71e24c48be0f144a9e0dec0e142626d5c,2025-09-04T15:36:56.447000 CVE-2025-9902,0,0,caa893937265182b24e5352cc55f43a0d9dd30dd5065770295a2bdd706329bd0,2025-10-14T19:36:29.240000 CVE-2025-9903,0,0,7d81669435749aab98a97e380f771ebb4aa662d68d3143ed0fefb1cb52772635,2025-09-29T19:34:10.030000 @@ -318428,8 +318458,8 @@ CVE-2025-9975,0,0,b1f23dc970eb535920ca99e49e12f4473521da278d051437f077b4e79f3f04 CVE-2025-9976,0,0,14fdfb7ba123561cad60c181e0158605f0221d76e4a1abbbb2a316e8cc259230,2025-10-14T19:36:29.240000 CVE-2025-9978,0,0,6f99726a551b50b0320b889e30e83c08c7ef412bc2298f412d122c03f2390d0c,2025-10-27T13:20:15.637000 CVE-2025-9979,0,0,1c484ce9f3590c3fac34599a605eebea346d1c16468e0dda6a414f42f9beac64,2025-09-11T17:14:10.147000 -CVE-2025-9980,0,1,36354f6303e79217ddc24f28f6a3aa1b7f2aed5b3bf824b0df692c25a8a5ab38,2025-11-17T16:01:39.510000 -CVE-2025-9981,0,1,d7256d89e779c066a86e4bcbeefc72b891a5c94088ebbf4a570144b3747448a6,2025-11-17T15:57:33.733000 +CVE-2025-9980,0,0,36354f6303e79217ddc24f28f6a3aa1b7f2aed5b3bf824b0df692c25a8a5ab38,2025-11-17T16:01:39.510000 +CVE-2025-9981,0,0,d7256d89e779c066a86e4bcbeefc72b891a5c94088ebbf4a570144b3747448a6,2025-11-17T15:57:33.733000 CVE-2025-9982,0,0,5b9d97c5b002f30df5d55abc9e46e120d5e393ee9d55d37196f4f213fec69f67,2025-11-14T16:42:03.187000 CVE-2025-9983,0,0,e354461133a3ca9d7ec208c1895c055b5c2d5a76932c3a5cd177d0d8bfd16cb7,2025-09-22T21:22:33.590000 CVE-2025-9984,0,0,e3436752ed37f3ce103075e5ebc2f1c16590a3209f3001aa8e2077acfea5fc6a,2025-09-26T14:32:19.853000