mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 01:00:49 +00:00
Auto-Update: 2025-09-25T16:00:12.126570+00:00
This commit is contained in:
1 parent
4004a9d101
commit
b98ea6cbf4
85 files changed
+5845
-352
No files matched your search
@@ -0,0 +1,94 @@
|
||||
{
|
||||
"id": "CVE-2020-36851",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:01.503",
|
||||
"lastModified": "2025-09-25T15:16:01.503",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services, retrieve instance role credentials or other sensitive metadata, and interact with internal APIs and services that are not intended to be internet-facing. The vulnerability is exploitable by sending crafted requests to the proxy with the target resource encoded in the URL; many cors-anywhere deployments forward arbitrary methods and headers (including PUT), which can permit exploitation of IMDSv2 workflows as well as access to internal management APIs. Successful exploitation can result in theft of cloud credentials, unauthorized access to internal services, remote code execution or privilege escalation (depending on reachable backends), data exfiltration, and full compromise of cloud resources. Mitigation includes: restricting the proxy to trusted origins or authentication, whitelisting allowed target hosts, preventing access to link-local and internal IP ranges, removing support for unsafe HTTP methods/headers, enabling cloud provider mitigations, and deploying network-level protections."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 9.5,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "HIGH",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-918"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-942"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Rob--W/cors-anywhere/issues/152",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Rob--W/cors-anywhere/issues/78",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.certik.com/resources/blog/cors-anywhere-dangers-of-misconfigured-third-party-software",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.vulncheck.com/advisories/rob-w-cors-anywhere-misconfigured-cors-proxy-allows-ssrf",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47376",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:23.380",
|
||||
"lastModified": "2024-11-21T06:36:01.090",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:50:04.063",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,39 +15,136 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: Agregar verificaci\u00f3n de tama\u00f1o excesivo antes de llamar a kvcalloc() Confirmaci\u00f3n 7661809d493b (\"mm: no permitir llamadas a kvmalloc() de gran tama\u00f1o\") agregar la verificaci\u00f3n de tama\u00f1o excesivo. Cuando la asignaci\u00f3n es mayor que lo que admite kmalloc(), se activa la siguiente advertencia: ADVERTENCIA: CPU: 0 PID: 8408 en mm/util.c:597 kvmalloc_node+0x108/0x110 mm/util.c:597 M\u00f3dulos vinculados en: CPU : 0 PID: 8408 Comm: syz-executor221 No contaminado 5.14.0-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvmalloc_node+0x108/0x110 mm/util .c:597 Seguimiento de llamadas: kvmalloc include/linux/mm.h:806 [en l\u00ednea] kvmalloc_array include/linux/mm.h:824 [en l\u00ednea] kvcalloc include/linux/mm.h:829 [en l\u00ednea] check_btf_line kernel/bpf /verifier.c:9925 [en l\u00ednea] check_btf_info kernel/bpf/verifier.c:10049 [en l\u00ednea] bpf_check+0xd634/0x150d0 kernel/bpf/verifier.c:13759 bpf_prog_load kernel/bpf/syscall.c:2301 [en l\u00ednea] __sys_bpf +0x11181/0x126e0 kernel/bpf/syscall.c:4587 __do_sys_bpf kernel/bpf/syscall.c:4691 [en l\u00ednea] __se_sys_bpf kernel/bpf/syscall.c:4689 [en l\u00ednea] __x64_sys_bpf+0x78/0x90 pf/syscall.c:4689 do_syscall_x64 arch/x86/entry/common.c:50 [en l\u00ednea] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 Entry_SYSCALL_64_after_hwframe+0x44/0xae"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.0",
|
||||
"versionEndExcluding": "5.4.150",
|
||||
"matchCriteriaId": "6699B466-6903-49FD-A062-EF1025F28A00"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.70",
|
||||
"matchCriteriaId": "A2A50090-4483-4F44-9147-BF0B012FBF7E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.9",
|
||||
"matchCriteriaId": "1B31D6C1-A751-438D-906B-0C56B789D498"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0e6491b559704da720f6da09dd0a52c4df44c514",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/6345a0bee80139ea00a341c4202ebfd1534b5eb0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/93937596e0652d50973f9dc944fea1694ac8cdfd",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b5fe7cdfee5901ce5513c30e554d51536e003bde",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0e6491b559704da720f6da09dd0a52c4df44c514",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/6345a0bee80139ea00a341c4202ebfd1534b5eb0",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/93937596e0652d50973f9dc944fea1694ac8cdfd",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b5fe7cdfee5901ce5513c30e554d51536e003bde",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47381",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:23.733",
|
||||
"lastModified": "2024-11-21T06:36:01.627",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:48:46.770",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,104 @@
|
||||
"value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ASoC: SOF: corrige el contenido de salida del volcado de pila de DSP. Corrija el argumento @buf dado a hex_dump_to_buffer() y la direcci\u00f3n de pila utilizada en la salida de error de volcado."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-209"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.2",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "9642EBA1-9B61-4E0D-8039-D3BD9EC335D3"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a6bb576ead074ca6fa3b53cb1c5d4037a23de81b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ac4dfccb96571ca03af7cac64b7a0b2952c97f3a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a6bb576ead074ca6fa3b53cb1c5d4037a23de81b",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ac4dfccb96571ca03af7cac64b7a0b2952c97f3a",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47387",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:24.183",
|
||||
"lastModified": "2024-11-21T06:36:02.443",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:38:17.343",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,63 +15,194 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: schedutil: utilice el m\u00e9todo kobject release() para liberar sugov_tunables. La estructura sugov_tunables est\u00e1 protegida por kobject, por lo que no podemos liberarla directamente. De lo contrario, obtendr\u00edamos un seguimiento de llamada como este: ODEBUG: activo libre (estado activo 0) tipo de objeto: timer_list sugerencia: delay_work_timer_fn+0x0/0x30 ADVERTENCIA: CPU: 3 PID: 720 en lib/debugobjects.c:505 debug_print_object+0xb8/ 0x100 M\u00f3dulos vinculados en: CPU: 3 PID: 720 Comm: a.sh Contaminado: GW 5.14.0-rc1-next-20210715-yocto-standard+ #507 Nombre del hardware: Placa Marvell OcteonTX CN96XX (DT) pstate: 40400009 (nZcv daif +PAN -UAO -TCO BTYPE=--) pc: debug_print_object+0xb8/0x100 lr: debug_print_object+0xb8/0x100 sp: ffff80001ecaf910 x29: ffff80001ecaf910 x28: ffff00011b10b8d0 x27: d80 x26: ffff00011a8f0000 x25: ffff800013cb3ff0 x24: 0000000000000000 x23: ffff80001142aa68 x22 : ffff800011043d80 x21: ffff00010de46f20 x20: ffff800013c0c520 x19: ffff800011d8f5b0 x18: 0000000000000010 x17: 6e6968207473696c x16: 656d6974203a x15: 6570797420746365 x14: 6a626f2029302065 x13: 303378302f307830 x12: 2b6e665f72656d69 x11: ffff8000124b1560 x10: 0012331520 x9: ffff8000100ca6b0 x8: 000000000017ffe8 x7: c0000000fffeffff x6: 0000000000000001 x5: ffff800011d8c000 x4: ffff800011d8c740 x3: 0000000000000000 x2: ffff0001108301c0 x1: ab3c90eedf9c0f00 x0: 0000000000000000 Rastreo de llamadas: xb8/0x100 __debug_check_no_obj_freed+0x1c0/0x230 debug_check_no_obj_freed+0x20/0x88 slab_free_freelist_hook+0x154/0x1c8 kfree+0x114/0x5d0 sugov_exit+0xbc/ 0xc0 cpufreq_exit_governor+0x44/0x90 cpufreq_set_policy+0x268/0x4a8 store_scaling_governor+0xe0/0x128 store+0xc0/0xf0 sysfs_kf_write+0x54/0x80 kernfs_fop_write_iter+0x128/0x1c0 nuevo _sync_write+0xf0/0x190 vfs_write+0x2d4/0x478 ksys_write+0x74/0x100 __arm64_sys_write+0x24/ 0x30 invoke_syscall.constprop.0+0x54/0xe0 do_el0_svc+0x64/0x158 el0_svc+0x2c/0xb0 el0t_64_sync_handler+0xb0/0xb8 el0t_64_sync+0x198/0x19c sello de evento irq: 5518 hardirqs habilitado por \u00faltima vez en ( 5517): [] consola_unlock+ 0x554/0x6c8 hardirqs deshabilitado por \u00faltima vez en (5518): [] el1_dbg+0x28/0xa0 softirqs habilitado por \u00faltima vez en (5504): [] __do_softirq+0x4d0/0x6c0 softirqs deshabilitado por \u00faltima vez en (5483): ff800010049548 >] irq_exit+0x1b0/0x1b8 Entonces divida el sugov_tunables_free() original en dos funciones, sugov_clear_global_tunables() solo se usa para borrar los global_tunables y el nuevo sugov_tunables_free() se usa como kobj_type::release para liberar los sugov_tunables de forma segura."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-763"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.7",
|
||||
"versionEndExcluding": "4.9.285",
|
||||
"matchCriteriaId": "71D61395-0228-4BB6-9B08-38F445F83B82"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.249",
|
||||
"matchCriteriaId": "9DFC8239-9F26-43B2-A340-8EFC6BC6BDA8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.209",
|
||||
"matchCriteriaId": "21C23429-F802-4256-B3C2-9EEA76AC11FF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.151",
|
||||
"matchCriteriaId": "BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.71",
|
||||
"matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/30d57cf2c4116ca6d34ecd1cac94ad84f8bc446c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/463c46705f321201090b69c4ad5da0cd2ce614c9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/67c98e023135ff81b8d52998a6fdb8ca0c518d82",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8d62aec52a8c5b1d25a2364b243fcc5098a2ede9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a7d4fc84404d45d72f4490417e8cc3efa4af93f1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cb4a53ba37532c861a5f3f22803391018a41849a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e5c6b312ce3cc97e90ea159446e6bfa06645364d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/30d57cf2c4116ca6d34ecd1cac94ad84f8bc446c",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/463c46705f321201090b69c4ad5da0cd2ce614c9",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/67c98e023135ff81b8d52998a6fdb8ca0c518d82",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8d62aec52a8c5b1d25a2364b243fcc5098a2ede9",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a7d4fc84404d45d72f4490417e8cc3efa4af93f1",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cb4a53ba37532c861a5f3f22803391018a41849a",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e5c6b312ce3cc97e90ea159446e6bfa06645364d",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47395",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:24.810",
|
||||
"lastModified": "2024-11-21T06:36:03.423",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:36:57.800",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,63 +15,209 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mac80211: l\u00edmite inyectado de vht mcs/nss en ieee80211_parse_tx_radiotap. Limite los valores m\u00e1ximos para vht mcs y nss en la rutina ieee80211_parse_tx_radiotap para corregir la siguiente advertencia reportada por syzbot: ADVERTENCIA: CPU: 0 PID : 10717 en include/net/mac80211.h:989 ieee80211_rate_set_vht include/net/mac80211.h:989 [en l\u00ednea] ADVERTENCIA: CPU: 0 PID: 10717 en include/net/mac80211.h:989 ieee80211_parse_tx_radiotap+0x101e/0x12 d0 neto/ mac80211/tx.c:2244 M\u00f3dulos vinculados en: CPU: 0 PID: 10717 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01 /2011 RIP: 0010:ieee80211_rate_set_vht include/net/mac80211.h:989 [en l\u00ednea] RIP: 0010:ieee80211_parse_tx_radiotap+0x101e/0x12d0 net/mac80211/tx.c:2244 RSP: 86f3e8 EFLAGS: 00010216 RAX: 0000000000000618 RBX: ffff88804ef76500 RCX: ffffc900143a5000 RDX: 0000000000040000 RSI: ffffffff888f478e RDI: 0000000000000003 RBP: 00000000ffffffff R08: 000 R09: 0000000000000100 R10: ffffffff888f46f9 R11: 0000000000000000 R12: 00000000ffffff8 R13: ffff88804ef7653c R14: 0000000000000001 R15: 0000000000000004 FS: 00007fbf5718f700(0000) GS:ffff8880b9c00000( 0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2de23000 CR3: 000000006a671000 CR4: 000000000015 06f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffe0ff0 DR7: 0000000000000600 ieee80211_monitor_select_queue+0xa6 /0x250 net/mac80211/iface.c:740 netdev_core_pick_tx+0x169/0x2e0 net/core/dev.c:4089 __dev_queue_xmit+0x6f9/0x3710 net/core/dev.c:4165 __bpf_tx_skb net/core/filter.c:2114 [ en l\u00ednea] __bpf_redirect_no_mac net/core/filter.c:2139 [en l\u00ednea] __bpf_redirect+0x5ba/0xd20 net/core/filter.c:2162 ____bpf_clone_redirect net/core/filter.c:2429 [en l\u00ednea] bpf_clone_redirect+0x2ae/0x420 net/core /filter.c:2401 bpf_prog_eeb6f53a69e5c6a2+0x59/0x234 bpf_dispatcher_nop_func include/linux/bpf.h:717 [en l\u00ednea] __bpf_prog_run include/linux/filter.h:624 [en l\u00ednea] bpf_prog_run include/linux/filter.h:631 [ en l\u00ednea] bpf_test_run+0x381/0xa30 net/bpf/test_run.c:119 bpf_prog_test_run_skb+0xb84/0x1ee0 net/bpf/test_run.c:663 bpf_prog_test_run kernel/bpf/syscall.c:3307 [en l\u00ednea] 5df0 n\u00facleo/bpf/ syscall.c:4605 __do_sys_bpf kernel/bpf/syscall.c:4691 [en l\u00ednea] __se_sys_bpf kernel/bpf/syscall.c:4689 [en l\u00ednea] __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:4689 4 arco/x86/ entrada/common.c:50 [en l\u00ednea] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entrada_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665f9"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.7",
|
||||
"versionEndExcluding": "4.9.285",
|
||||
"matchCriteriaId": "71D61395-0228-4BB6-9B08-38F445F83B82"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.249",
|
||||
"matchCriteriaId": "9DFC8239-9F26-43B2-A340-8EFC6BC6BDA8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.209",
|
||||
"matchCriteriaId": "21C23429-F802-4256-B3C2-9EEA76AC11FF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.151",
|
||||
"matchCriteriaId": "BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.71",
|
||||
"matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1282bb00835ff79d2d9c023055d514df5b4de260",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/13cb6d826e0ac0d144b0d48191ff1a111d32f0c6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/76538c7b4df314bb937e44c5cb1782f37d47443c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/997ee230e4f5285cd98445c102d9033c7ec4814b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ab85997465b972d39d9747fc16311fa5773374b2",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ce5f372f5f084ff51c285fc27b232f15a3d00f0b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e5bb852aa2ad963074f0ad73030dbc20a30853e3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1282bb00835ff79d2d9c023055d514df5b4de260",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/13cb6d826e0ac0d144b0d48191ff1a111d32f0c6",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/76538c7b4df314bb937e44c5cb1782f37d47443c",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/997ee230e4f5285cd98445c102d9033c7ec4814b",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ab85997465b972d39d9747fc16311fa5773374b2",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ce5f372f5f084ff51c285fc27b232f15a3d00f0b",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e5bb852aa2ad963074f0ad73030dbc20a30853e3",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47396",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:24.920",
|
||||
"lastModified": "2024-11-21T06:36:03.537",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:36:22.513",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,39 +15,146 @@
|
||||
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: mac80211-hwsim: corrige el manejo tard\u00edo del hrtimer de baliza. Thomas explic\u00f3 en https://lore.kernel.org/r/87mtoeb4hb.ffs@tglx que nuestro manejo del hrtimer aqu\u00ed es incorrecto : Si el temporizador se activa tarde (por ejemplo, debido a la programaci\u00f3n de vCPU, seg\u00fan lo informado por Dmitry/syzbot), entonces intenta rearmar el temporizador en la pr\u00f3xima fecha l\u00edmite, que podr\u00eda haber sido ya en el pasado: 1 2 3 N N+1 | | | ... | | ^ intenci\u00f3n de disparar aqu\u00ed (1) ^ pr\u00f3xima fecha l\u00edmite aqu\u00ed (2) ^ realmente disparado aqu\u00ed La pr\u00f3xima vez que se active, ser\u00e1 m\u00e1s tarde, pero a\u00fan as\u00ed intentar\u00e1 programar la pr\u00f3xima fecha l\u00edmite (ahora 3), etc. hasta que se ponga al d\u00eda N, pero eso podr\u00eda llevar mucho tiempo, causando bloqueos, etc. Ahora, todo esto es simulaci\u00f3n, as\u00ed que solo tenemos que arreglarlo, pero tenga en cuenta que el comportamiento es incorrecto incluso seg\u00fan la especificaci\u00f3n, ya que no tiene ning\u00fan valor enviar todos esos balizas no alineadas: deben estar alineadas con el TBTT (1, 2, 3, ... en la imagen), y si llegamos un poco (o mucho) tarde, simplemente reanudemos en ese punto. Por lo tanto, cambie el c\u00f3digo para usar hrtimer_forward_now(), lo que garantizar\u00e1 que el siguiente disparo del temporizador sea en N+1 (en la imagen), es decir, el siguiente punto del intervalo despu\u00e9s de la hora actual."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "3.9",
|
||||
"versionEndExcluding": "5.4.151",
|
||||
"matchCriteriaId": "F5D7395A-83A7-4825-A32C-2C9C08BC5AB9"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.71",
|
||||
"matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2c204cf594df3b9468368dc9d0b24d482d93cda7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/313bbd1990b6ddfdaa7da098d0c56b098a833572",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9bee85de2c8155388c09a2e1530a243ec1c96f05",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ed2adf69e29848d1eb9df99633dde655421c92ed",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2c204cf594df3b9468368dc9d0b24d482d93cda7",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/313bbd1990b6ddfdaa7da098d0c56b098a833572",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9bee85de2c8155388c09a2e1530a243ec1c96f05",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ed2adf69e29848d1eb9df99633dde655421c92ed",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47400",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:25.457",
|
||||
"lastModified": "2024-11-21T06:36:03.997",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:35:04.500",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -17,6 +17,26 @@
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
@@ -39,38 +59,122 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.0",
|
||||
"versionEndExcluding": "5.4.151",
|
||||
"matchCriteriaId": "B178BD06-0B91-4A7A-B7A1-D512D04B9C79"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.71",
|
||||
"matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3dac38bdce7932901b9f0b71c62331852c809e61",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5b09e88e1bf7fe86540fab4b5f3eece8abead39e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8ba689cb69523144d10606096ef686002dd7285",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3dac38bdce7932901b9f0b71c62331852c809e61",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5b09e88e1bf7fe86540fab4b5f3eece8abead39e",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8ba689cb69523144d10606096ef686002dd7285",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47408",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:26.337",
|
||||
"lastModified": "2024-11-21T06:36:05.087",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:32:02.877",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -17,6 +17,26 @@
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
@@ -39,30 +59,100 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "5.10.71",
|
||||
"matchCriteriaId": "7A97507B-D1C6-49E3-9F7E-BFCDE3EA3905"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.10",
|
||||
"matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7ea6f5848281182ce0cff6cafdcf3fbdeb8ca7e1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e2d192301a0df8160d1555b66ae8611e8050e424",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e9edc188fc76499b0b9bd60364084037f6d03773",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7ea6f5848281182ce0cff6cafdcf3fbdeb8ca7e1",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e2d192301a0df8160d1555b66ae8611e8050e424",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e9edc188fc76499b0b9bd60364084037f6d03773",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47410",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:26.527",
|
||||
"lastModified": "2024-11-21T06:36:05.360",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:30:01.593",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,99 @@
|
||||
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: drm/amdkfd: corrige la advertencia de svm_migrate_fini. El administrador de dispositivos libera recursos espec\u00edficos del dispositivo cuando un controlador se desconecta de un dispositivo, las llamadas a devm_memunmap_pages y devm_release_mem_region en svm_migrate_fini son redundantes. Provoca el siguiente seguimiento de advertencia despu\u00e9s del parche \"drm/amdgpu: dividir amdgpu_device_fini en temprano y tarde\", por lo tanto, elimine la funci\u00f3n svm_migrate_fini. ERROR: https://gitlab.freedesktop.org/drm/amd/-/issues/1718 ADVERTENCIA: CPU: 1 PID: 3646 en drivers/base/devres.c:795 devm_release_action+0x51/0x60 Seguimiento de llamadas:? memunmap_pages+0x360/0x360 svm_migrate_fini+0x2d/0x60 [amdgpu] kgd2kfd_device_exit+0x23/0xa0 [amdgpu] amdgpu_amdkfd_device_fini_sw+0x1d/0x30 [amdgpu_device_fini_sw+0x45/0 x290 [amdgpu] amdgpu_driver_release_kms+0x12/0x30 [amdgpu] drm_dev_release+0x20/0x40 [drm] release_nodes+0x196/0x1e0 device_release_driver_internal+0x104/0x1d0 driver_detach+0x47/0x90 bus_remove_driver+0x7a/0xd0 pci_unregister_driver+0x3d/0x90 amdgpu_exit+0x11/0x20 [amdgpu]"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "3.19",
|
||||
"versionEndExcluding": "5.14.11",
|
||||
"matchCriteriaId": "8E0DFC85-98DB-49FC-9DE8-EEB84F72AE4E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/197ae17722e989942b36e33e044787877f158574",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ac7d732b24f4061f8a732ada49b054ab38c63e15",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/197ae17722e989942b36e33e044787877f158574",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ac7d732b24f4061f8a732ada49b054ab38c63e15",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47412",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-21T15:15:26.700",
|
||||
"lastModified": "2025-08-28T15:15:36.777",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:27:14.790",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,27 +15,112 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: no llame a rq_qos_ops->done_bio si no se realiza un seguimiento de la biograf\u00eda. El framework rq_qos solo se aplica en el controlador basado en solicitudes, por lo que: 1) rq_qos_done_bio() no necesita hacerlo ser llamado para un controlador basado en biograf\u00eda 2) No es necesario llamar a rq_qos_done_bio() para una biograf\u00eda que no est\u00e1 rastreada, como una biograf\u00eda terminada por un c\u00f3digo de manejo de errores. Especialmente en bio_endio(): 1) la cola de solicitudes se remite a trav\u00e9s de bio->bi_bdev->bd_disk->queue, que puede desaparecer ya que el recuento de la cola de solicitudes no se puede mantener en los dos casos anteriores 2) q->rq_qos se puede liberar en blk_cleanup_queue() al llamar a __rq_qos_done_bio() Solucione el posible p\u00e1nico del kernel al no llamar a rq_qos_ops->done_bio si no se realiza un seguimiento de la biograf\u00eda. Esta forma es segura porque tanto ioc_rqos_done_bio() como blkcg_iolatency_done_bio() no funcionan si no se realiza un seguimiento de la biograf\u00eda."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "5.10.241",
|
||||
"matchCriteriaId": "AC788FBF-3063-4B89-9406-EA698F0B9B1C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.11",
|
||||
"matchCriteriaId": "9E845F47-DE3A-41CF-BB74-007A8AF3E47C"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/004b8f8a691205a93d9e80d98b786b2b97424d6e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a647a524a46736786c95cdb553a070322ca096e3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/db60edbfff332a6a5477c367af8125f034570989",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/004b8f8a691205a93d9e80d98b786b2b97424d6e",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a647a524a46736786c95cdb553a070322ca096e3",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2021-47434",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-22T07:15:08.707",
|
||||
"lastModified": "2024-11-21T06:36:08.147",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:58:00.120",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,55 +15,197 @@
|
||||
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: xhci: corrige la corrupci\u00f3n del puntero del anillo de comando al cancelar un comando. El puntero del anillo de comando est\u00e1 ubicado en los bits [6:63] del registro de control del anillo de comando (CRCR). Todos los bits de control, como el comando de parada y cancelaci\u00f3n, se encuentran en bits [0:3]. Mientras abortamos un comando, leemos el CRCR, configuramos el bit de cancelaci\u00f3n y escribimos en el CRCR. La lectura siempre dar\u00e1 un puntero de anillo de comando como todo ceros. B\u00e1sicamente, escribimos s\u00f3lo los bits de control. Dado que dividimos la escritura de 64 bits en dos escrituras de 32 bits, existe la posibilidad de que el anillo de comando xHC se detenga antes de que se escriba la palabra d superior (todo ceros). Si eso sucede, xHC actualiza la palabra clave superior de su puntero de anillo de comando interno con todo ceros. La pr\u00f3xima vez, cuando se reinicie el anillo de comando, veremos fallas de acceso a la memoria xHC. Solucione este problema escribiendo \u00fanicamente en la palabra clave inferior de CRCR donde se encuentran todos los bits de control."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "4.14.252",
|
||||
"matchCriteriaId": "0D8A0F39-FBF8-4A67-BAF0-80CC2FB1765E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.213",
|
||||
"matchCriteriaId": "674A3961-B6D4-4956-870E-AA63F9EA53CA"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.155",
|
||||
"matchCriteriaId": "80D76835-2D7B-4764-A145-011C8FF56E8F"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.75",
|
||||
"matchCriteriaId": "58849EA5-8425-4847-92D4-B1044AF6A5B8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.14.14",
|
||||
"matchCriteriaId": "BF43A331-D430-4B9D-A612-E63C62AE4A86"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/01c2dcb67e71c351006dd17cbba86c26b7f61eaf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/22bcb65ea41072ab5d03c0c6290e04e0df6d09a0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/62c182b5e763e5f4062e72678e72ce3e02dd4d1b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dec944bb7079b37968cf69c8a438f91f15c4cc61",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e54abefe703ab7c4e5983e889babd1447738ca42",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ff0e50d3564f33b7f4b35cadeabd951d66cfc570",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/01c2dcb67e71c351006dd17cbba86c26b7f61eaf",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/22bcb65ea41072ab5d03c0c6290e04e0df6d09a0",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/62c182b5e763e5f4062e72678e72ce3e02dd4d1b",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dec944bb7079b37968cf69c8a438f91f15c4cc61",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e54abefe703ab7c4e5983e889babd1447738ca42",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ff0e50d3564f33b7f4b35cadeabd951d66cfc570",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2023-24836",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2023-04-27T02:15:09.243",
|
||||
"lastModified": "2024-11-21T07:48:29.607",
|
||||
"lastModified": "2025-09-25T14:13:08.880",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -56,8 +56,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ctms:7.0_1227:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "DBEE2F92-DEE5-4BC6-A03F-AC5F3376FE85"
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:7.0_1227:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "42728C6D-7EA2-47FC-9E10-CA71EB2FD5D5"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-52659",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2024-05-17T13:15:57.677",
|
||||
"lastModified": "2024-11-21T08:40:18.277",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:54:17.010",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,39 +15,131 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/mm: garantiza que la entrada a pfn_to_kaddr() se trate como un tipo de 64 bits. En plataformas de 64 bits, la macro pfn_to_kaddr() requiere que el valor de entrada sea de 64 bits en para garantizar que los bits de direcci\u00f3n v\u00e1lidos no se pierdan al cambiar esa entrada mediante PAGE_SHIFT para calcular la direcci\u00f3n f\u00edsica para la que proporcionar una direcci\u00f3n virtual. Un ejemplo de ello es pvalidate_pages() (utilizado por invitados SEV-SNP), donde el GFN en la estructura utilizada para las solicitudes de cambio de estado de p\u00e1gina es un campo de bits de 40 bits, por lo que se intenta pasar este campo GFN directamente a pfn_to_kaddr( ) termina causando fallas en los invitados cuando se trata de direcciones por encima del rango de 1 TB debido a lo anterior. Solucione este problema con los invitados SEV-SNP, as\u00ed como cualquier caso similar que pueda causar problemas en el c\u00f3digo actual/futuro, utilizando una funci\u00f3n en l\u00ednea, en lugar de una macro, de modo que la entrada se convierta impl\u00edcitamente a la entrada esperada de 64 bits. tipo antes de realizar la operaci\u00f3n de cambio. Si bien se podr\u00eda argumentar que el problema est\u00e1 en el lado de la persona que llama, otros arcos/macros han adoptado enfoques similares para lidiar con casos como este, como ARM que env\u00eda expl\u00edcitamente la entrada a phys_addr_t: e48866647b48 (\"ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()\") La funci\u00f3n en l\u00ednea AC es a\u00fan mejor. [mingo: refin\u00f3 un poco m\u00e1s el registro de cambios y agreg\u00f3 __always_inline. ]"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.5",
|
||||
"versionEndExcluding": "6.6.23",
|
||||
"matchCriteriaId": "89C006B8-BD53-4D24-9E4A-3482F60C50EC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.7.11",
|
||||
"matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.8",
|
||||
"versionEndExcluding": "6.8.2",
|
||||
"matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2024-10438",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-10-28T03:15:02.423",
|
||||
"lastModified": "2024-10-31T00:52:18.370",
|
||||
"lastModified": "2025-09-25T14:13:08.880",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -80,9 +80,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*",
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.14",
|
||||
"matchCriteriaId": "A786BFD6-9D10-4A78-8CCB-F9BE63987831"
|
||||
"matchCriteriaId": "F4860D33-9942-415C-BC6F-07CD6F677511"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2024-10439",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-10-28T03:15:02.700",
|
||||
"lastModified": "2024-10-31T00:35:36.173",
|
||||
"lastModified": "2025-09-25T14:13:08.880",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -80,9 +80,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*",
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.8",
|
||||
"matchCriteriaId": "CDDB3F05-6AA5-419B-814B-6BBB1B9CB18C"
|
||||
"matchCriteriaId": "EFFD55D2-BDDF-4556-949D-2D503DD8C344"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2024-10440",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-10-28T03:15:02.920",
|
||||
"lastModified": "2024-10-31T00:34:23.870",
|
||||
"lastModified": "2025-09-25T14:13:08.880",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -60,9 +60,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*",
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0",
|
||||
"matchCriteriaId": "292FB491-FB8E-4F39-8615-E29EFE59E248"
|
||||
"matchCriteriaId": "D5ACFE67-A76A-448E-892A-667D0336827A"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-10467",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:41.927",
|
||||
"lastModified": "2025-09-25T14:15:41.927",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.This issue affects OBS (Student Affairs Information System): before v25.0401."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L",
|
||||
"baseScore": 8.9,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.usom.gov.tr/bildirim/tr-25-0298",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10500",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:38.507",
|
||||
"lastModified": "2025-09-24T18:11:24.520",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:57:18.723",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.185",
|
||||
"matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/435875050",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10501",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:39.100",
|
||||
"lastModified": "2025-09-24T18:11:24.520",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:57:08.893",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.185",
|
||||
"matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/440737137",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10502",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:39.287",
|
||||
"lastModified": "2025-09-24T18:11:24.520",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:56:56.943",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.185",
|
||||
"matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/438038775",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2025-10540",
|
||||
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"published": "2025-09-25T14:15:42.203",
|
||||
"lastModified": "2025-09-25T14:15:42.203",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-319"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://r.sec-consult.com/imonitor",
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2025-10541",
|
||||
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"published": "2025-09-25T15:16:09.270",
|
||||
"lastModified": "2025-09-25T15:16:09.270",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\\sysupdate\\ directory during startup. Because any local user can create and write to this directory, an attacker can place malicious DLLs or executables in it. Upon service restart, the files are moved to the application\u2019s installation path and executed with SYSTEM privileges, leading to privilege escalation."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-732"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://r.sec-consult.com/imonitor",
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2025-10542",
|
||||
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"published": "2025-09-25T15:16:09.487",
|
||||
"lastModified": "2025-09-25T15:16:09.487",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client\u2019s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1392"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://r.sec-consult.com/imonitor",
|
||||
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10890",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:39.620",
|
||||
"lastModified": "2025-09-24T18:15:33.490",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:56:42.057",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -38,7 +38,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -46,6 +46,16 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-203"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
@@ -57,14 +67,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.207",
|
||||
"matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/430336833",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10891",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:39.753",
|
||||
"lastModified": "2025-09-24T18:11:24.520",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:55:54.730",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.207",
|
||||
"matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/443765373",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-10892",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T17:15:39.940",
|
||||
"lastModified": "2025-09-24T18:11:24.520",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:55:41.970",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -13,6 +13,26 @@
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
},
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
@@ -45,16 +65,74 @@
|
||||
"value": "CWE-472"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-190"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.207",
|
||||
"matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/444048019",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-10894",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T22:15:35.423",
|
||||
"lastModified": "2025-09-24T22:15:35.423",
|
||||
"lastModified": "2025-09-25T14:15:42.370",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -15,7 +15,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
|
||||
@@ -38,7 +38,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -71,6 +71,14 @@
|
||||
{
|
||||
"url": "https://www.wiz.io/blog/s1ngularity-supply-chain-attack",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
},
|
||||
{
|
||||
"url": "https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-10947",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T13:15:31.387",
|
||||
"lastModified": "2025-09-25T13:15:31.387",
|
||||
"lastModified": "2025-09-25T14:15:43.290",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -140,6 +140,14 @@
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.652282",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main?tab=readme-ov-file#-proofs",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,149 @@
|
||||
{
|
||||
"id": "CVE-2025-10948",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:43.460",
|
||||
"lastModified": "2025-09-25T15:16:09.617",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
|
||||
"baseScore": 9.0,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "SINGLE",
|
||||
"confidentialityImpact": "COMPLETE",
|
||||
"integrityImpact": "COMPLETE",
|
||||
"availabilityImpact": "COMPLETE"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 8.0,
|
||||
"impactScore": 10.0,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-119"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-120"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc#technical-proof-of-concept",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.325818",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.325818",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.652387",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,141 @@
|
||||
{
|
||||
"id": "CVE-2025-10949",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:09.807",
|
||||
"lastModified": "2025-09-25T15:16:09.807",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of the component Markdown Handler. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 2.4,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 0.9,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N",
|
||||
"baseScore": 3.3,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "MULTIPLE",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"baseSeverity": "LOW",
|
||||
"exploitabilityScore": 6.4,
|
||||
"impactScore": 2.9,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-94"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/duckpigdog/CVE/blob/main/iView%20Editor%20XSS.docx",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.325819",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.325819",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.652402",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,141 @@
|
||||
{
|
||||
"id": "CVE-2025-10950",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:10.023",
|
||||
"lastModified": "2025-09-25T15:16:10.023",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function log_handler of the file ml_logger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 6.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
|
||||
"baseScore": 6.5,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "SINGLE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "MEDIUM",
|
||||
"exploitabilityScore": 8.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-20"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-502"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/geyang/ml-logger/issues/72",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.325820",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.325820",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.652461",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,137 @@
|
||||
{
|
||||
"id": "CVE-2025-10951",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:10.233",
|
||||
"lastModified": "2025-09-25T15:16:10.233",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function log_handler of the file ml_logger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
||||
"baseScore": 7.5,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "NONE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 10.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/geyang/ml-logger/issues/73",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.325821",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.325821",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.652462",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-26278",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:43.873",
|
||||
"lastModified": "2025-09-25T14:15:43.873",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/tariqhawis/ad92d5e683f3a5d83e0629955ff42ad7",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-26278",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-27261",
|
||||
"sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"published": "2025-09-25T14:15:44.240",
|
||||
"lastModified": "2025-09-25T14:15:44.240",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ericsson\nIndoor Connect 8855 contains a SQL injection vulnerability\nwhich if exploited can lead to unauthorized disclosure and\nmodification of user and configuration data."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-27262",
|
||||
"sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"published": "2025-09-25T15:16:10.737",
|
||||
"lastModified": "2025-09-25T15:16:10.737",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ericsson\nIndoor Connect 8855 contains a command injection vulnerability which if\nexploited can lead to loss of integrity and confidentiality, as well as\nunauthorized disclosure and modification of user and configuration data. It\nmay also be possible to execute commands with escalated privileges, impact\nservice availability, as well as modify system files and configuration\ndata."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-78"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-34183",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-16T20:15:34.287",
|
||||
"lastModified": "2025-09-22T18:58:17.053",
|
||||
"lastModified": "2025-09-25T14:56:22.493",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -101,9 +101,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0.eden",
|
||||
"matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3"
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0",
|
||||
"matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22"
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -113,8 +113,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D"
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -149,8 +149,8 @@
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Release Notes"
|
||||
"Release Notes",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
@@ -158,8 +158,8 @@
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Release Notes"
|
||||
"Release Notes",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-34184",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-16T20:15:34.433",
|
||||
"lastModified": "2025-09-24T15:58:04.650",
|
||||
"lastModified": "2025-09-25T14:56:30.853",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -101,9 +101,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0.eden",
|
||||
"matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3"
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0",
|
||||
"matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22"
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -113,8 +113,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D"
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-34185",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-16T20:15:34.577",
|
||||
"lastModified": "2025-09-24T16:14:03.060",
|
||||
"lastModified": "2025-09-25T14:56:39.847",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -115,9 +115,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0.eden",
|
||||
"matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3"
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0",
|
||||
"matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22"
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -127,8 +127,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D"
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-34186",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-16T20:15:34.720",
|
||||
"lastModified": "2025-09-24T16:22:03.347",
|
||||
"lastModified": "2025-09-25T14:56:49.430",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -115,9 +115,9 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0.eden",
|
||||
"matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3"
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0",
|
||||
"matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22"
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -127,8 +127,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D"
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-34187",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-16T20:15:34.860",
|
||||
"lastModified": "2025-09-17T14:18:55.093",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T14:51:36.743",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -73,22 +95,67 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "4.7.18.0",
|
||||
"matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://packetstorm.news/files/id/209226/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.ilevia.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.php",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-36139",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T16:15:50.310",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:49:02.467",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,7 +15,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
|
||||
@@ -32,6 +32,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.3,
|
||||
"impactScore": 2.7
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.7,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -47,10 +67,30 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:ibm:watsonx.data.:2.2:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5CCDD16E-9E71-4DC8-A229-6F4F961B7FA3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7245387",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-36143",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T16:15:50.493",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:50:10.570",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,7 +15,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -32,6 +32,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -47,10 +67,30 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:ibm:watsonx.data:2.2:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "446704B5-8F3D-4608-A242-0FFA9E4E4297"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7245379",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-36146",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T16:15:50.663",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:52:20.303",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,30 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:ibm:watsonx.data:2.2:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "446704B5-8F3D-4608-A242-0FFA9E4E4297"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7245384",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-36601",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:10.890",
|
||||
"lastModified": "2025-09-25T15:16:10.890",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
|
||||
"baseScore": 4.0,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-200"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000353080/dsa-2025-272-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-36857",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:11.060",
|
||||
"lastModified": "2025-09-25T15:16:11.060",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can\u00a0place files in directories belonging to other users or projects. Affected versions allow standard users to add custom configuration files. These files, which are loaded in alphabetical order, can override or change the settings of the original configuration files, creating a security vulnerability. This issue stems from improper directory access management.\n\nThis vulnerability was remediated in version 7.5.021 of the product."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 3.3,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-276"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-40836",
|
||||
"sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"published": "2025-09-25T15:16:11.233",
|
||||
"lastModified": "2025-09-25T15:16:11.233",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ericsson\nIndoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well\nas unauthorized disclosure and modification of\n\n\n\nof user\nand configuration data. It may also be possible to execute commands with escalated privileges, impact\nservice availability, as well as modify system files and configuration\ndata."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-20"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-40837",
|
||||
"sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"published": "2025-09-25T15:16:11.447",
|
||||
"lastModified": "2025-09-25T15:16:11.447",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ericsson\nIndoor Connect 8855 contains a missing authorization vulnerability which if\nexploited can allow access to the system as a user with higher privileges than\nintended."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-40838",
|
||||
"sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"published": "2025-09-25T15:16:11.587",
|
||||
"lastModified": "2025-09-25T15:16:11.587",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ericsson\nIndoor Connect 8855 contains a vulnerability where server-side security can be\nbypassed in the client which if exploited can lead to unauthorized disclosure\nof user accounts."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 2.0,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "LOW",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-522"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25",
|
||||
"source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-43346",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-15T23:15:36.837",
|
||||
"lastModified": "2025-09-17T14:04:55.827",
|
||||
"vulnStatus": "Analyzed",
|
||||
"lastModified": "2025-09-25T15:16:11.717",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -18,19 +18,19 @@
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 6.2,
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.5,
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2025-46148",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.007",
|
||||
"lastModified": "2025-09-25T15:16:12.007",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/65a587a579dfdff887b9b35bb79b9093",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/151198",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/pull/152993",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"id": "CVE-2025-46149",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.153",
|
||||
"lastModified": "2025-09-25T15:16:12.153",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/147848",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/pull/147961",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"id": "CVE-2025-46150",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.303",
|
||||
"lastModified": "2025-09-25T15:16:12.303",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/141538",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/141538#issuecomment-2537424658",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/pull/144395",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"id": "CVE-2025-46152",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.470",
|
||||
"lastModified": "2025-09-25T15:16:12.470",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the \"other\" argument."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/143555",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/pull/143635",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,37 @@
|
||||
{
|
||||
"id": "CVE-2025-46153",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.603",
|
||||
"lastModified": "2025-09-25T15:16:12.603",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/e636f2e7a306105b7e96809e2b85c28a",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/compare/v2.6.0...v2.7.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/142853",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/pull/143460",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
File diff suppressed because it is too large.
Load diff
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54942",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-30T04:15:49.407",
|
||||
"lastModified": "2025-09-02T15:55:35.520",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T14:21:33.457",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,10 +91,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.11",
|
||||
"matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://zuso.ai/advisory/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54943",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-30T04:15:52.697",
|
||||
"lastModified": "2025-09-02T15:55:35.520",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T14:14:52.863",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,10 +91,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.11",
|
||||
"matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://zuso.ai/advisory/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54944",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-30T04:15:56.073",
|
||||
"lastModified": "2025-09-02T15:55:35.520",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T14:15:22.430",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,10 +91,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.11",
|
||||
"matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://zuso.ai/advisory/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54945",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-30T04:15:57.540",
|
||||
"lastModified": "2025-09-02T15:55:35.520",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T14:15:06.757",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,10 +91,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.11",
|
||||
"matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://zuso.ai/advisory/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54946",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-30T04:15:57.823",
|
||||
"lastModified": "2025-09-02T15:55:35.520",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T14:16:05.113",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,10 +91,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.11",
|
||||
"matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://zuso.ai/advisory/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-5494",
|
||||
"sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02",
|
||||
"published": "2025-09-25T14:15:46.783",
|
||||
"lastModified": "2025-09-25T14:15:46.783",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.\n\nThis issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L",
|
||||
"baseScore": 3.9,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 1.3,
|
||||
"impactScore": 2.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "0fc0942c-577d-436f-ae8e-945763c79b02",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-269"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html",
|
||||
"source": "0fc0942c-577d-436f-ae8e-945763c79b02"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-55551",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:12.887",
|
||||
"lastModified": "2025-09-25T15:16:12.887",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pytorch/pytorch/issues/151401",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-55780",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-23T18:15:34.743",
|
||||
"lastModified": "2025-09-24T19:15:38.550",
|
||||
"lastModified": "2025-09-25T15:16:13.037",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -51,6 +51,14 @@
|
||||
{
|
||||
"url": "https://bugs.ghostscript.com/show_bug.cgi?id=708720",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=bdd5d241748807378a78a622388e0312332513c5",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/ISH2YU/CVE-2025-55780/tree/main",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-55912",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T16:15:51.000",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:51:51.443",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,54 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:oxygenz:clipbucket_v5:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "5.5.0",
|
||||
"matchCriteriaId": "F6E74143-F46A-42D3-93F3-9BE607C96CB9"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/MacWarrior/clipbucket-v5/blob/5.5.0/upload/actions/photo_uploader.php",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/MacWarrior/clipbucket-v5/releases?page=2",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/MacWarrior/clipbucket-v5/tree/5.5.0",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Patch",
|
||||
"Mitigation"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://medium.com/@mukund.s1337/cve-2025-55912-clipbucket-5-5-0-unauthenticated-arbitrary-file-upload-rce-720c0c0fbc58",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-57317",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:44.603",
|
||||
"lastModified": "2025-09-25T14:15:44.603",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57317",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/apidoc-core%400.15.0/index.js",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-57324",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-24T21:15:32.493",
|
||||
"lastModified": "2025-09-24T21:15:32.493",
|
||||
"lastModified": "2025-09-25T15:16:13.250",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -11,7 +11,42 @@
|
||||
"value": "parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1321"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/parse%405.3.0/index.js",
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-59215",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T22:15:49.697",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:52:47.320",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,37 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59215",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-59216",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T22:15:49.867",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:53:03.740",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,37 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59216",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-59220",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T22:15:50.037",
|
||||
"lastModified": "2025-09-19T16:00:27.847",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-09-25T15:53:26.307",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,73 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.19044.6332",
|
||||
"matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.19045.6332",
|
||||
"matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.22621.5909",
|
||||
"matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.22631.5909",
|
||||
"matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.20348.4106",
|
||||
"matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.25398.1849",
|
||||
"matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.0.26100.6508",
|
||||
"matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59220",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-59417",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-18T15:15:38.557",
|
||||
"lastModified": "2025-09-19T17:15:52.510",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-09-25T15:32:15.280",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,6 +55,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
|
||||
"baseScore": 6.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -69,18 +91,47 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "1.129.4",
|
||||
"matchCriteriaId": "9B9636E7-8964-4516-9416-DB35F799A85C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-59422",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:45.677",
|
||||
"lastModified": "2025-09-25T14:15:45.677",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.0,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-284"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/langgenius/dify/commit/b2d8a7eaf1693841411934e2056042845ab4f354",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,68 @@
|
||||
{
|
||||
"id": "CVE-2025-59426",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:45.930",
|
||||
"lastModified": "2025-09-25T15:16:13.433",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-* headers to the origin as-is, or where the origin trusts them without validation, an attacker can inject an arbitrary host and trigger an open redirect that sends users to a malicious domain. This issue has been patched in version 1.130.1."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-601"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/blob/aa841a3879c30142720485182ad62aa0dbd74edc/src/app/(backend)/oidc/consent/route.ts#L113-L127",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/commit/70f52a3c1fadbd41a9db0e699d1e44d9965de445",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-xph5-278p-26qx",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-xph5-278p-26qx",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,72 @@
|
||||
{
|
||||
"id": "CVE-2025-59823",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:13.560",
|
||||
"lastModified": "2025-09-25T15:16:13.560",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP providers prior to version 1.46.0. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This affects all Gardener installations where Terraformer is used/can be enabled for infrastructure provisioning with any of the affected components. This issue has been patched in Gardener Extensions for AWS providers version 1.64.0, Azure providers version 1.55.0, OpenStack providers version 1.49.0, and GCP providers version 1.46.0."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV30": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.0",
|
||||
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 9.9,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-94"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/gardener/gardener-extension-provider-aws/releases/tag/v1.64.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gardener/gardener-extension-provider-aws/security/advisories/GHSA-227x-7mh8-3cf6",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gardener/gardener-extension-provider-azure/releases/tag/v1.55.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gardener/gardener-extension-provider-gcp/releases/tag/v1.46.0",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/gardener/gardener-extension-provider-openstack/releases/tag/v1.49.0",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-59830",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:13.780",
|
||||
"lastModified": "2025-09-25T15:16:13.780",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its params_limit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters than intended. Applications or middleware that directly invoke Rack::QueryParser with its default configuration (no explicit delimiter) could be exposed to increased CPU and memory consumption. This can be abused as a limited denial-of-service vector. This issue has been patched in version 2.2.18."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 7.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-400"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-770"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/rack/rack/commit/54e4ffdd5affebcb0c015cc6ae74635c0831ed71",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/rack/rack/security/advisories/GHSA-625h-95r8-8xpm",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,90 @@
|
||||
{
|
||||
"id": "CVE-2025-59831",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:46.147",
|
||||
"lastModified": "2025-09-25T15:16:13.973",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommiters(options, callback) which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not sanitize for user input or practice secure process execution API to separate commands from their arguments and as such, uncontrolled user input is concatenated into command execution. This issue has been patched in version 0.1.2."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 8.7,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-77"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-78"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/snowyu/git-commiters.js/commit/7f0abfedbf506e3a61ac875d91324a8dbe756e84",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-59832",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:14.100",
|
||||
"lastModified": "2025-09-25T15:16:14.100",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin\u2019s browser, exfiltrate the admin\u2019s cookies/CSRF token, and hijack their session. This issue has been patched in version 1.4.0."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
|
||||
"baseScore": 9.9,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Mmo-kali/CVE/blob/main/CVE-2025-59832/2025-08-Horilla_Vulnerability_1.pdf",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-8x78-6q9g-hv2h",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,72 @@
|
||||
{
|
||||
"id": "CVE-2025-59834",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:46.357",
|
||||
"lastModified": "2025-09-25T15:16:14.277",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. This issue has been patched via commit 041729c."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-77"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-78"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,82 @@
|
||||
{
|
||||
"id": "CVE-2025-59838",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T15:16:14.390",
|
||||
"lastModified": "2025-09-25T15:16:14.390",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been patched via commit f025b12."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 2.4,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "LOW",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/monkeytypegame/monkeytype/commit/f025b121cbe437e29de432b4aa72e0de22c755b7",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/monkeytypegame/monkeytype/security/advisories/GHSA-j4xx-fww5-774w",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,72 @@
|
||||
{
|
||||
"id": "CVE-2025-59839",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-25T14:15:46.570",
|
||||
"lastModified": "2025-09-25T15:16:14.560",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for stored XSS through wikitext. This issue has been patched via commit 4e075d3."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
|
||||
"baseScore": 8.6,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 4.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/ext.embedVideo.videolink.js#L5-L20",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/modules/iframe.js#L139-L155",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/commit/4e075d3dc9a15a3ee53f449a684d5ab847e52f01",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-4j5h-mvj3-m48v",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-4j5h-mvj3-m48v",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-9567",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-01T03:15:32.337",
|
||||
"lastModified": "2025-09-24T18:29:32.680",
|
||||
"lastModified": "2025-09-25T14:18:08.317",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -100,8 +100,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960"
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-9568",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-01T03:15:32.570",
|
||||
"lastModified": "2025-09-24T18:29:42.523",
|
||||
"lastModified": "2025-09-25T14:18:31.453",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -100,8 +100,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960"
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-9569",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-01T03:15:32.767",
|
||||
"lastModified": "2025-09-24T18:29:47.877",
|
||||
"lastModified": "2025-09-25T14:18:03.243",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -100,8 +100,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960"
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-9570",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-09-01T04:15:51.600",
|
||||
"lastModified": "2025-09-23T20:49:17.047",
|
||||
"lastModified": "2025-09-25T14:18:25.953",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -100,8 +100,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960"
|
||||
"criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-09-25T14:00:11.535404+00:00
|
||||
2025-09-25T16:00:12.126570+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-09-25T13:50:04.687000+00:00
|
||||
2025-09-25T15:58:55.557000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,34 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
311505
|
||||
311539
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `8`
|
||||
Recently added CVEs: `34`
|
||||
|
||||
- [CVE-2025-10449](CVE-2025/CVE-2025-104xx/CVE-2025-10449.json) (`2025-09-25T13:15:30.590`)
|
||||
- [CVE-2025-10943](CVE-2025/CVE-2025-109xx/CVE-2025-10943.json) (`2025-09-25T12:15:30.340`)
|
||||
- [CVE-2025-10944](CVE-2025/CVE-2025-109xx/CVE-2025-10944.json) (`2025-09-25T13:15:30.800`)
|
||||
- [CVE-2025-10945](CVE-2025/CVE-2025-109xx/CVE-2025-10945.json) (`2025-09-25T13:15:31.017`)
|
||||
- [CVE-2025-10946](CVE-2025/CVE-2025-109xx/CVE-2025-10946.json) (`2025-09-25T13:15:31.200`)
|
||||
- [CVE-2025-10947](CVE-2025/CVE-2025-109xx/CVE-2025-10947.json) (`2025-09-25T13:15:31.387`)
|
||||
- [CVE-2025-10957](CVE-2025/CVE-2025-109xx/CVE-2025-10957.json) (`2025-09-25T12:15:30.577`)
|
||||
- [CVE-2025-40698](CVE-2025/CVE-2025-406xx/CVE-2025-40698.json) (`2025-09-25T12:15:30.760`)
|
||||
- [CVE-2025-26278](CVE-2025/CVE-2025-262xx/CVE-2025-26278.json) (`2025-09-25T14:15:43.873`)
|
||||
- [CVE-2025-27261](CVE-2025/CVE-2025-272xx/CVE-2025-27261.json) (`2025-09-25T14:15:44.240`)
|
||||
- [CVE-2025-27262](CVE-2025/CVE-2025-272xx/CVE-2025-27262.json) (`2025-09-25T15:16:10.737`)
|
||||
- [CVE-2025-36601](CVE-2025/CVE-2025-366xx/CVE-2025-36601.json) (`2025-09-25T15:16:10.890`)
|
||||
- [CVE-2025-36857](CVE-2025/CVE-2025-368xx/CVE-2025-36857.json) (`2025-09-25T15:16:11.060`)
|
||||
- [CVE-2025-40836](CVE-2025/CVE-2025-408xx/CVE-2025-40836.json) (`2025-09-25T15:16:11.233`)
|
||||
- [CVE-2025-40837](CVE-2025/CVE-2025-408xx/CVE-2025-40837.json) (`2025-09-25T15:16:11.447`)
|
||||
- [CVE-2025-40838](CVE-2025/CVE-2025-408xx/CVE-2025-40838.json) (`2025-09-25T15:16:11.587`)
|
||||
- [CVE-2025-46148](CVE-2025/CVE-2025-461xx/CVE-2025-46148.json) (`2025-09-25T15:16:12.007`)
|
||||
- [CVE-2025-46149](CVE-2025/CVE-2025-461xx/CVE-2025-46149.json) (`2025-09-25T15:16:12.153`)
|
||||
- [CVE-2025-46150](CVE-2025/CVE-2025-461xx/CVE-2025-46150.json) (`2025-09-25T15:16:12.303`)
|
||||
- [CVE-2025-46152](CVE-2025/CVE-2025-461xx/CVE-2025-46152.json) (`2025-09-25T15:16:12.470`)
|
||||
- [CVE-2025-46153](CVE-2025/CVE-2025-461xx/CVE-2025-46153.json) (`2025-09-25T15:16:12.603`)
|
||||
- [CVE-2025-5494](CVE-2025/CVE-2025-54xx/CVE-2025-5494.json) (`2025-09-25T14:15:46.783`)
|
||||
- [CVE-2025-55551](CVE-2025/CVE-2025-555xx/CVE-2025-55551.json) (`2025-09-25T15:16:12.887`)
|
||||
- [CVE-2025-57317](CVE-2025/CVE-2025-573xx/CVE-2025-57317.json) (`2025-09-25T14:15:44.603`)
|
||||
- [CVE-2025-59422](CVE-2025/CVE-2025-594xx/CVE-2025-59422.json) (`2025-09-25T14:15:45.677`)
|
||||
- [CVE-2025-59426](CVE-2025/CVE-2025-594xx/CVE-2025-59426.json) (`2025-09-25T14:15:45.930`)
|
||||
- [CVE-2025-59823](CVE-2025/CVE-2025-598xx/CVE-2025-59823.json) (`2025-09-25T15:16:13.560`)
|
||||
- [CVE-2025-59830](CVE-2025/CVE-2025-598xx/CVE-2025-59830.json) (`2025-09-25T15:16:13.780`)
|
||||
- [CVE-2025-59831](CVE-2025/CVE-2025-598xx/CVE-2025-59831.json) (`2025-09-25T14:15:46.147`)
|
||||
- [CVE-2025-59832](CVE-2025/CVE-2025-598xx/CVE-2025-59832.json) (`2025-09-25T15:16:14.100`)
|
||||
- [CVE-2025-59834](CVE-2025/CVE-2025-598xx/CVE-2025-59834.json) (`2025-09-25T14:15:46.357`)
|
||||
- [CVE-2025-59838](CVE-2025/CVE-2025-598xx/CVE-2025-59838.json) (`2025-09-25T15:16:14.390`)
|
||||
- [CVE-2025-59839](CVE-2025/CVE-2025-598xx/CVE-2025-59839.json) (`2025-09-25T14:15:46.570`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `7`
|
||||
Recently modified CVEs: `49`
|
||||
|
||||
- [CVE-2022-45690](CVE-2022/CVE-2022-456xx/CVE-2022-45690.json) (`2025-09-25T12:42:19.910`)
|
||||
- [CVE-2024-53977](CVE-2024/CVE-2024-539xx/CVE-2024-53977.json) (`2025-09-25T13:39:30.720`)
|
||||
- [CVE-2024-56883](CVE-2024/CVE-2024-568xx/CVE-2024-56883.json) (`2025-09-25T13:27:35.977`)
|
||||
- [CVE-2025-10438](CVE-2025/CVE-2025-104xx/CVE-2025-10438.json) (`2025-09-25T12:15:29.053`)
|
||||
- [CVE-2025-23359](CVE-2025/CVE-2025-233xx/CVE-2025-23359.json) (`2025-09-25T13:50:04.687`)
|
||||
- [CVE-2025-25723](CVE-2025/CVE-2025-257xx/CVE-2025-25723.json) (`2025-09-25T13:27:40.590`)
|
||||
- [CVE-2025-26794](CVE-2025/CVE-2025-267xx/CVE-2025-26794.json) (`2025-09-25T13:12:00.833`)
|
||||
- [CVE-2025-34184](CVE-2025/CVE-2025-341xx/CVE-2025-34184.json) (`2025-09-25T14:56:30.853`)
|
||||
- [CVE-2025-34185](CVE-2025/CVE-2025-341xx/CVE-2025-34185.json) (`2025-09-25T14:56:39.847`)
|
||||
- [CVE-2025-34186](CVE-2025/CVE-2025-341xx/CVE-2025-34186.json) (`2025-09-25T14:56:49.430`)
|
||||
- [CVE-2025-34187](CVE-2025/CVE-2025-341xx/CVE-2025-34187.json) (`2025-09-25T14:51:36.743`)
|
||||
- [CVE-2025-36139](CVE-2025/CVE-2025-361xx/CVE-2025-36139.json) (`2025-09-25T15:49:02.467`)
|
||||
- [CVE-2025-36143](CVE-2025/CVE-2025-361xx/CVE-2025-36143.json) (`2025-09-25T15:50:10.570`)
|
||||
- [CVE-2025-36146](CVE-2025/CVE-2025-361xx/CVE-2025-36146.json) (`2025-09-25T15:52:20.303`)
|
||||
- [CVE-2025-43346](CVE-2025/CVE-2025-433xx/CVE-2025-43346.json) (`2025-09-25T15:16:11.717`)
|
||||
- [CVE-2025-47329](CVE-2025/CVE-2025-473xx/CVE-2025-47329.json) (`2025-09-25T15:58:55.557`)
|
||||
- [CVE-2025-54942](CVE-2025/CVE-2025-549xx/CVE-2025-54942.json) (`2025-09-25T14:21:33.457`)
|
||||
- [CVE-2025-54943](CVE-2025/CVE-2025-549xx/CVE-2025-54943.json) (`2025-09-25T14:14:52.863`)
|
||||
- [CVE-2025-54944](CVE-2025/CVE-2025-549xx/CVE-2025-54944.json) (`2025-09-25T14:15:22.430`)
|
||||
- [CVE-2025-54945](CVE-2025/CVE-2025-549xx/CVE-2025-54945.json) (`2025-09-25T14:15:06.757`)
|
||||
- [CVE-2025-54946](CVE-2025/CVE-2025-549xx/CVE-2025-54946.json) (`2025-09-25T14:16:05.113`)
|
||||
- [CVE-2025-55780](CVE-2025/CVE-2025-557xx/CVE-2025-55780.json) (`2025-09-25T15:16:13.037`)
|
||||
- [CVE-2025-55912](CVE-2025/CVE-2025-559xx/CVE-2025-55912.json) (`2025-09-25T15:51:51.443`)
|
||||
- [CVE-2025-57324](CVE-2025/CVE-2025-573xx/CVE-2025-57324.json) (`2025-09-25T15:16:13.250`)
|
||||
- [CVE-2025-59215](CVE-2025/CVE-2025-592xx/CVE-2025-59215.json) (`2025-09-25T15:52:47.320`)
|
||||
- [CVE-2025-59216](CVE-2025/CVE-2025-592xx/CVE-2025-59216.json) (`2025-09-25T15:53:03.740`)
|
||||
- [CVE-2025-59220](CVE-2025/CVE-2025-592xx/CVE-2025-59220.json) (`2025-09-25T15:53:26.307`)
|
||||
- [CVE-2025-59417](CVE-2025/CVE-2025-594xx/CVE-2025-59417.json) (`2025-09-25T15:32:15.280`)
|
||||
- [CVE-2025-9567](CVE-2025/CVE-2025-95xx/CVE-2025-9567.json) (`2025-09-25T14:18:08.317`)
|
||||
- [CVE-2025-9568](CVE-2025/CVE-2025-95xx/CVE-2025-9568.json) (`2025-09-25T14:18:31.453`)
|
||||
- [CVE-2025-9569](CVE-2025/CVE-2025-95xx/CVE-2025-9569.json) (`2025-09-25T14:18:03.243`)
|
||||
- [CVE-2025-9570](CVE-2025/CVE-2025-95xx/CVE-2025-9570.json) (`2025-09-25T14:18:25.953`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+97
-63
@@ -159912,6 +159912,7 @@ CVE-2020-36848,0,0,e7777caea4a957d8c6addc4c693d548e0ef8e8d53a06ed462f0abe85c0007
|
||||
CVE-2020-36849,0,0,d13b48e093ec6b2c441ef55df92f15ab856380f6cf8e4d10d7bfdd12664fed9b,2025-07-15T13:14:49.980000
|
||||
CVE-2020-3685,0,0,ebc768dfe955ad0c52041c7e2608a91c2b5719c6059fc65a66fc055e90d4e6b0,2024-11-21T05:31:34.290000
|
||||
CVE-2020-36850,0,0,989f346c403572d39693cf47a1a81eeb6efd9e67dc20ec40854ad97aabaf142a,2025-07-29T14:14:55.157000
|
||||
CVE-2020-36851,1,1,a5a7d2850a0b22d3f28c889c2dff20b6e97f1c1a7345adab6ba4dab3146b6e49,2025-09-25T15:16:01.503000
|
||||
CVE-2020-3686,0,0,fed42ed77b3514bcd56d213454eba10c6543e81893514c48ebacb4355f05304f,2024-11-21T05:31:34.463000
|
||||
CVE-2020-3687,0,0,4f5fc687e6ec97625652ba8cc878e5dcedb758a9b86899e8a0bd5d38bccb2613,2024-11-21T05:31:34.637000
|
||||
CVE-2020-3688,0,0,7155463c2e1adade3e99c9eb3a8b2f9018619b146f279496aabde13c3c9bf8bd,2024-11-21T05:31:34.760000
|
||||
@@ -187996,18 +187997,18 @@ CVE-2021-47372,0,0,0ce4f68d2ef5ee1532898222948501be7d3a88241a391a98a79a0bfd35d56
|
||||
CVE-2021-47373,0,0,e8950542d9e9b736cb4f33eeb6e6f914784149ee2bc33f0cf40eac5de5491073,2024-12-26T17:57:35.547000
|
||||
CVE-2021-47374,0,0,bdd28303c766e453ae27d387b954e03bc1f022c92553c76e9d93f191de6cbf0b,2025-05-12T19:52:58.193000
|
||||
CVE-2021-47375,0,0,d5ff14c47ab87537b3b47f0550b2d236f13eefecf7b074b5b7cd598aa2e4229b,2025-04-02T14:53:06.550000
|
||||
CVE-2021-47376,0,0,e4e2e91a48ccc0e7be03f9d0eb65fe1705fa52f5bac1244bd9675e31930ce773,2024-11-21T06:36:01.090000
|
||||
CVE-2021-47376,0,1,21b4fe021000e33e0a38bf36a60c9b6b7def66f391bdd0b7b440e812065372da,2025-09-25T15:50:04.063000
|
||||
CVE-2021-47377,0,0,cbaeb70b9806767a5a3a5aa11b89a836e7a242ea2c157a7c29d647c590b451c9,2024-05-28T19:15:08.857000
|
||||
CVE-2021-47378,0,0,dc05947c255a80e62863251ff802457c95ce0fd546c22a5007bd657768fbf9a3,2025-04-02T14:52:37.450000
|
||||
CVE-2021-47379,0,0,3af783699b681bcffb74a2660da0530399c3e52991b6855e838ae2f4f2a4a6f7,2024-12-23T20:47:30.867000
|
||||
CVE-2021-47380,0,0,334d3b8b44718c38a1a24aa2305d3adcb569796b98de33e4074b5736ae175e69,2024-12-23T20:48:01.910000
|
||||
CVE-2021-47381,0,0,ea9581172c2cef8c9f5c61fde5035f577a718b0e4516fc363d9583f7adc1168e,2024-11-21T06:36:01.627000
|
||||
CVE-2021-47381,0,1,6d246b85ca46b02c0b7398294ddf957cb8715ba98820fa77416daf1b15733681,2025-09-25T15:48:46.770000
|
||||
CVE-2021-47382,0,0,8bab4ab03bcce99a1b3027a4efeeeb53a848c9a61cc4386f322e0997042df3bf,2024-12-23T21:00:53.340000
|
||||
CVE-2021-47383,0,0,141a9abfaf9f7ad900cc51da15af8d23f122a9f9a0018526a57216a7b18cef85,2025-09-23T20:14:35.603000
|
||||
CVE-2021-47384,0,0,3a485c6e18d0b68b48ba35f28c64be82ac297bde8af43ac28a1d6c55bfe29808,2025-04-02T14:52:28.823000
|
||||
CVE-2021-47385,0,0,c6a82e7a12e897338326b0272d766105a2467dab6588deae93331929ba6df3aa,2024-12-23T21:01:31.227000
|
||||
CVE-2021-47386,0,0,3c5598c9639b0d6a6ac897c45b0dcec60da56498f6af27ffb38ee92c18e49d80,2025-04-02T14:52:22.973000
|
||||
CVE-2021-47387,0,0,f9abbc75a71e5f75679f53162608a51731e5b30a945f073035121479b6bfac5c,2024-11-21T06:36:02.443000
|
||||
CVE-2021-47387,0,1,005eeeb914c3030594d49ecc4bd1d9ac227f0f917f9b22ed26b3f47dd1c6225c,2025-09-25T15:38:17.343000
|
||||
CVE-2021-47388,0,0,5a99c0375f375933a2ee3ed84e78b90361dbfbf675205e3e3fce5b62f99bd86e,2024-12-30T20:05:07.740000
|
||||
CVE-2021-47389,0,0,676ee6fd9c8d0712dd14f8647af66f3d27425468ebf72afbe9de4bb119d5e6bf,2025-04-02T14:52:16.460000
|
||||
CVE-2021-47390,0,0,76b23b24c5c2d0ae53e9c1096f39d0e46b517e03d31e39981405101939ea2a5e,2024-12-30T20:01:12.947000
|
||||
@@ -188015,12 +188016,12 @@ CVE-2021-47391,0,0,dceb5027fe85dc40838f585206e7a99f16f0370243c62cf0d6112073994e8
|
||||
CVE-2021-47392,0,0,d77e14c15146fdb51699956bd3b4d96c4d7458be2c75766e8a8430b167823013,2025-09-23T20:16:25.177000
|
||||
CVE-2021-47393,0,0,cbff3809795eee26e4372313fd4343a242eeb9abc3aa9cc6f22100098305acfc,2025-09-23T20:17:04.563000
|
||||
CVE-2021-47394,0,0,a08dc2185e6f8d265da9bc55ce98d4b694bcc929e8ed70483d7ed8ea583c1bb1,2025-02-03T16:11:30.727000
|
||||
CVE-2021-47395,0,0,bed9ae2678523feb920dc0ab8c1ea494e9fe309d996c61c0c7583d6b417dd2b9,2024-11-21T06:36:03.423000
|
||||
CVE-2021-47396,0,0,1218531809f9b22f861167391c7c6c53877c57c033a282e8dd14c3683c604cfb,2024-11-21T06:36:03.537000
|
||||
CVE-2021-47395,0,1,6248a304787d6dab0feb3d7716b9350ed767d8d7011799d90cf6dd4671b78cb8,2025-09-25T15:36:57.800000
|
||||
CVE-2021-47396,0,1,05743cbcf8131f84e0ea225e5fd070b2b9bc6f9fcfe9b99cc236751e8ee9dc09,2025-09-25T15:36:22.513000
|
||||
CVE-2021-47397,0,0,15e7f502ba571f755e0489a5425995f66f3a94aa55ff9302b96f3500e4220711,2024-12-24T16:06:56.063000
|
||||
CVE-2021-47398,0,0,a5e2933d4721fdc9cb7b2fa369b9429444a2f9870deeb64a583ecbd002093c00,2025-09-19T14:28:59.223000
|
||||
CVE-2021-47399,0,0,c94f1ef0340f44c1b19ac5f27a7318803b709fd2ae8159cca95350b02a34346d,2024-12-24T16:06:15.200000
|
||||
CVE-2021-47400,0,0,dac63ab253e754c2b35510166f57e6916cfba5dfd95e7f078149171e94273e9f,2024-11-21T06:36:03.997000
|
||||
CVE-2021-47400,0,1,ff801754110a68ead7099872a221230baccbc9458ca2874f45ad57962126971c,2025-09-25T15:35:04.500000
|
||||
CVE-2021-47401,0,0,d12dbc8d376d3440078cac2b1efbe8a3925e554b79c64e70e90f324a27e64c5f,2025-09-19T14:32:36.823000
|
||||
CVE-2021-47402,0,0,df6182da0586e70f043313304e97f2a74ab78a0abb8ffc0780d924ab695e6504,2025-01-14T17:29:04.687000
|
||||
CVE-2021-47403,0,0,44dc7099881136c9adbdcf2f396256320a98706f22d1228e149180cb19b872df,2025-04-02T14:52:09.830000
|
||||
@@ -188028,11 +188029,11 @@ CVE-2021-47404,0,0,b4a6c4984c318e0b5f084184228def57d269d3a8a4195164e12844a9b471a
|
||||
CVE-2021-47405,0,0,1cdbd44c13d2f8232fde2c8c485c2b6990b3a78ee79f2bb0f3bce11552afaaa0,2025-02-03T16:11:50.860000
|
||||
CVE-2021-47406,0,0,7be0a97ea86c4cc76a2f429cc1e35b4ed64b17516994c738b226292e891ca623,2025-04-02T14:51:38.020000
|
||||
CVE-2021-47407,0,0,c3e42b88722d38355ac9676d8e92d5b8c69e4083755f86cee921fb0904e5d57f,2025-03-04T16:47:54.193000
|
||||
CVE-2021-47408,0,0,1bb9de9f9fb0c138f101bdd077c488720764253896933e9ddd90af986223f012,2024-11-21T06:36:05.087000
|
||||
CVE-2021-47408,0,1,cc9fd698d2869974981eca139500b4183d1faf877ba2cdd21b3e0fc1f8fb68f0,2025-09-25T15:32:02.877000
|
||||
CVE-2021-47409,0,0,4409848935610c806a916f78420b16db2a2ab2efcb7ac8dd99c83d5249f8b960,2024-12-30T20:00:41.677000
|
||||
CVE-2021-47410,0,0,4075c00f9d5ffd89b59e95e73a9e5fa86e05d5bb14ffa8d2023787fcb8cce122,2024-11-21T06:36:05.360000
|
||||
CVE-2021-47410,0,1,4e38541580393ff01ea3fc6dea37fdfaa8bf9dc934e0ca5620ff77960dd5e969,2025-09-25T15:30:01.593000
|
||||
CVE-2021-47411,0,0,d0414849cfb396e83266669cd4701dbb6a1022ea5a51c35023bb94eb4cfc8a37,2024-05-25T14:15:50.770000
|
||||
CVE-2021-47412,0,0,491f067141d50bdbacb51160ce4563d646318e50fe05755c4e555b2afab4e6fb,2025-08-28T15:15:36.777000
|
||||
CVE-2021-47412,0,1,31018b0e827701879091256562a82f10fb82d65d086bc179b71025312f17d2f2,2025-09-25T15:27:14.790000
|
||||
CVE-2021-47413,0,0,269d04830df035e17e52fb59428cdae6c99bbe3c5236fc44bbeb5952e9d53939,2024-12-30T20:00:33.497000
|
||||
CVE-2021-47414,0,0,a83b6ed138679e0a43562ce58d15e7d1f7e5382db9d90a7386573fd9d8fa4042,2024-11-21T06:36:05.703000
|
||||
CVE-2021-47415,0,0,8de0f983558918b457e68f423e69956d3f931f2fec09c7ffbcdf46078d9be9bb,2024-12-31T18:51:37.767000
|
||||
@@ -188054,7 +188055,7 @@ CVE-2021-47430,0,0,db1b39de9ef90e4e0a805197f54270c3cd47ec0b970b774ab1c6a2bede3a1
|
||||
CVE-2021-47431,0,0,6b0b589b520a3fb5ec393e476fb3e98fdf6c14c18de7ff8ba74fda90e7b6a6aa,2025-09-23T20:25:23.837000
|
||||
CVE-2021-47432,0,0,7b0f86bae526144577bb7cded9fbc968abecfc546c0a213f07dd10bc578a932b,2025-04-02T14:51:30.763000
|
||||
CVE-2021-47433,0,0,4665d69408034a8f61f2f7a3ef27a521461a82b8fc95da599554878d40570716,2024-11-21T06:36:08.040000
|
||||
CVE-2021-47434,0,0,5d889b13cb9c4b665236a8505baf9fc1a75a9299c3e831d6b6d287c793912fec,2024-11-21T06:36:08.147000
|
||||
CVE-2021-47434,0,1,a9ed18014dd2d7dd8a96de5c3b4be36e02d23294c72862ac17577e040efc8de9,2025-09-25T15:58:00.120000
|
||||
CVE-2021-47435,0,0,15cd1ff840c477f998041450b016486f8abce38dab583041ac04502b3bdd0a58,2025-01-31T15:16:51.193000
|
||||
CVE-2021-47436,0,0,ded6bc2cc7652a6e41c8d7e1729468d2b1cf50eb1a9a046140b177f45fb3b9b8,2025-03-01T02:38:25.597000
|
||||
CVE-2021-47437,0,0,4b84844b5d0afa1aee4eb9cd8d91132cc86915fa767cebe46028421178083be8,2025-01-10T18:15:20.720000
|
||||
@@ -211294,7 +211295,7 @@ CVE-2022-45685,0,0,df0f53d28103ac6a23f08aa6415a74ad54ee3f1117f84c062447701fdadad
|
||||
CVE-2022-45688,0,0,8f721417b1a5edb5051d55b53c132f0ba61c4b685d741b4af4debc3e44e958b4,2025-09-19T18:54:20.100000
|
||||
CVE-2022-45689,0,0,870ab60a5c6ea98825b9fbdd39954a2b15960e07d0b89207657712821345ec89,2025-04-22T15:16:04.870000
|
||||
CVE-2022-4569,0,0,4a2599063fefb513ab23f360a9f2529d620d0c97fa1dc35085c7a5a3cf63116b,2024-11-21T07:35:30.753000
|
||||
CVE-2022-45690,0,1,b7a61d03ad45745a37ea7157467b9aee57b35331b5054629752dc5e0e46bb8db,2025-09-25T12:42:19.910000
|
||||
CVE-2022-45690,0,0,b7a61d03ad45745a37ea7157467b9aee57b35331b5054629752dc5e0e46bb8db,2025-09-25T12:42:19.910000
|
||||
CVE-2022-45693,0,0,16e0fdae126746a476c4d8896dad9274b38ecbc704e8591fb4b8e1894c95050a,2025-04-22T15:16:05.277000
|
||||
CVE-2022-45697,0,0,34e5f81a9d7d780bc32c7f8e99772f6393c876c7e4c870d659e3da43d3fa8093,2024-11-21T07:29:36.173000
|
||||
CVE-2022-45699,0,0,0f78ff7cfdaa963a27bca80c4b3c4925736061e38fec3ac933fe895e5a7a166c,2025-06-17T06:15:21.230000
|
||||
@@ -221214,7 +221215,7 @@ CVE-2023-24832,0,0,caf4a483f2cb7c8fcdf75ef85a3c61dff115a7f19facb4a1cb945c56705d4
|
||||
CVE-2023-24833,0,0,975e396f7c3efc181ab7fb3ab3c5840503ac5a70f5ce18fa48be1249aadb3e19,2025-01-21T21:15:09.350000
|
||||
CVE-2023-24834,0,0,acbead2f009392faf8de71d73210bd1b6b8b31da2ef57c8f3ffa546101669f8e,2024-11-21T07:48:29.377000
|
||||
CVE-2023-24835,0,0,0bd87445a7918bbeefc7f2a991a49df5dc01ada7da4139308cc26b2528dd7754,2024-11-21T07:48:29.497000
|
||||
CVE-2023-24836,0,0,a73f0275689a6c5fb37cf7dcbb35381a8a35c3aa8c025ec0c06deb9c98fa4c9f,2024-11-21T07:48:29.607000
|
||||
CVE-2023-24836,0,1,ada7cff06903f3176d8d6838433fc3311791d7fcf3367ce26564983ae560fcd0,2025-09-25T14:13:08.880000
|
||||
CVE-2023-24837,0,0,d2bc3f8819c88ba265667c54f4b97169707e71d98212a502c31be40499f8defa,2024-11-21T07:48:29.740000
|
||||
CVE-2023-24838,0,0,41bb1c6e424f81a2c096d13acdb4d9939876f918a0b662f162f49639f52c5acc,2024-11-21T07:48:29.850000
|
||||
CVE-2023-24839,0,0,2eaeac87ee2dfcbc566ca045445ce1fe7bb3dbcd122759ca9103903acde9bdbb,2024-11-21T07:48:29.970000
|
||||
@@ -242714,7 +242715,7 @@ CVE-2023-52655,0,0,bdc324ff18b790be0ce1f3fd2f246fa9c4f96c44e5e41479727c0e2d09219
|
||||
CVE-2023-52656,0,0,dd75b6d83cb83e011583365da02de12104ac19791ae350e100dbd43c541ac610,2025-08-21T13:15:35.400000
|
||||
CVE-2023-52657,0,0,0742fcfb934ef5c7634de623b7c401792494241ab438a9573cda4fa4dca0204f,2025-09-18T17:07:34.477000
|
||||
CVE-2023-52658,0,0,47f80212036fa3cc5e42c8df8acafe256f428ae8cd496cd93bab5c3d5e7099c8,2025-09-18T17:24:50.720000
|
||||
CVE-2023-52659,0,0,12014b1e0c02fea24ca1ce52074272db691cfe6ae39ed530e006a5540be4dd92,2024-11-21T08:40:18.277000
|
||||
CVE-2023-52659,0,1,81db5a50a104795dba344a4a3c78ca2ebc3e981526120407bc40fa4fe70a660e,2025-09-25T15:54:17.010000
|
||||
CVE-2023-5266,0,0,36a025257ca1a5a01d1722477c5cdddc95c4c243398db33d451514cf043d9aad,2024-11-21T08:41:24.657000
|
||||
CVE-2023-52660,0,0,358e8dc47410610b9f9672166cf82c0f3b48f9a136624210ebe4beaef46e7ab7,2024-11-21T08:40:18.393000
|
||||
CVE-2023-52661,0,0,29f08503b11905d870693a85b6cd929ba1b38e060dbe561f424d2e51bd9f1345,2025-09-19T14:19:01.363000
|
||||
@@ -246745,10 +246746,10 @@ CVE-2024-10434,0,0,9d6d4758a3d5a35f5a2be811154b346f3d0e874e8cde4af9c6f52ff74a167
|
||||
CVE-2024-10435,0,0,63b1aaed049f4b31533c2867026e9d788fe8f8141494e5b70348a4fc8c6189f2,2024-10-28T13:58:09.230000
|
||||
CVE-2024-10436,0,0,44f06f3a87e685276f3a35fbd1af09c953e5e2381cae8d5060bcc2bfe9da5bb5,2024-10-29T14:34:04.427000
|
||||
CVE-2024-10437,0,0,da611b25a4ebcfa0b6c3629b527c647275c6f60514e79b5e9ead11a83b0ab096,2024-10-29T14:34:04.427000
|
||||
CVE-2024-10438,0,0,9ced19709ace1d6bfb86b8de1801377c2112b016d1dc92ec0264f2bb581a39ab,2024-10-31T00:52:18.370000
|
||||
CVE-2024-10439,0,0,dff63217c69fae9244806d074600acaa18035b339be2a233d07b224cb66e4434,2024-10-31T00:35:36.173000
|
||||
CVE-2024-10438,0,1,63abaf29394d4df7f2656726da882d7c316963a28328a89bd7fb9e37acf36f8f,2025-09-25T14:13:08.880000
|
||||
CVE-2024-10439,0,1,2ed4f3c5fb3eddebff0759235c0f6fc8f2d3bcdcad8eee6f9e50f034ba127e27,2025-09-25T14:13:08.880000
|
||||
CVE-2024-1044,0,0,256d1054bfb8f270c3aa3258631e6291c67d0ef20d821ed1158e7683624e26af,2025-07-11T20:02:42.367000
|
||||
CVE-2024-10440,0,0,28edfb6b2838e0c83bba465fa859f9eabfcf16c21fbb114f33945ddeeeda5c34,2024-10-31T00:34:23.870000
|
||||
CVE-2024-10440,0,1,20e8ea037f98ec2bf84f81df5b1ed5a83836d4677d2af3b2d54ca64c6a7fed42,2025-09-25T14:13:08.880000
|
||||
CVE-2024-10441,0,0,bcc571f371f99849fa6947b841ce1ebd06ed2be724f65ac00ff818dcae727660,2025-03-27T09:15:13.927000
|
||||
CVE-2024-10442,0,0,a4840658738b809609aeb5cab59bac04ac7ad04c438ef21ac68a74cefac7e4bc,2025-03-19T03:15:11.790000
|
||||
CVE-2024-10443,0,0,6679a70b1c52e1622fe297929b46209cff0fe2815c2fc3bfb9f9b299ffa0533c,2025-09-16T06:16:04.327000
|
||||
@@ -277451,7 +277452,7 @@ CVE-2024-53970,0,0,20958d58eb9515921590df62ce8e737c32b8958b1107c3bfc1e974aee7c7d
|
||||
CVE-2024-53974,0,0,52052a572e52b9dbc089a516bde1b3fe92dc22cc036b47b932527a527df79bc8,2025-03-04T14:04:30.393000
|
||||
CVE-2024-53975,0,0,1ef4582fd4bc5bf12a2226ef1587e7e199747f5394364a72a9c8e29bbaf92b0b,2025-04-04T16:19:53.597000
|
||||
CVE-2024-53976,0,0,3c4e290755b1122ca5eef12abc826a22f34cb5f7c1451690e25b02ebe35b73d5,2025-04-04T16:15:43.123000
|
||||
CVE-2024-53977,0,1,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000
|
||||
CVE-2024-53977,0,0,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000
|
||||
CVE-2024-53979,0,0,172b408869a05417a1da8cf6907f79662a75490e703fbb88a760f582875697a1,2024-11-29T19:15:09.847000
|
||||
CVE-2024-5398,0,0,1fca9edd99ff7753e0d36d6f4d73a5a23ccf8ab9dd992541f79488471e393289,2024-06-11T10:15:13.690000
|
||||
CVE-2024-53980,0,0,25270275e7b15ac4ab41a5e880b433dd4bf99fa2318bf1cf75cd2ae0b94938f8,2025-09-05T13:57:24.993000
|
||||
@@ -279260,7 +279261,7 @@ CVE-2024-5686,0,0,494008cd50a5cb32ba05dd687e88d5cd5348379ce547e26ef1644b29c16458
|
||||
CVE-2024-5687,0,0,ceba3175c3bfd14790e93d6d60cf2282164bca8098cfa2f452b5343d2a9e086b,2025-03-27T20:13:57.260000
|
||||
CVE-2024-5688,0,0,d5859f0e06cb4ebc97487fae3042b7b415f604e561186dfe8f72fb7cc29fccbc,2025-04-04T23:46:14.507000
|
||||
CVE-2024-56882,0,0,14ad5dd23b7cd0e6c0aca460d9e8ac5675d52da6a819b7bb02768fc85dd49dcf,2025-02-19T15:15:14.970000
|
||||
CVE-2024-56883,0,1,b1b802f4cf6634c24a8fd47ae4fd46f5cf9b7dc71857565f04d01faa0f8878d9,2025-09-25T13:27:35.977000
|
||||
CVE-2024-56883,0,0,b1b802f4cf6634c24a8fd47ae4fd46f5cf9b7dc71857565f04d01faa0f8878d9,2025-09-25T13:27:35.977000
|
||||
CVE-2024-56889,0,0,32a23e93a83d411b8c8afe93f2105e99a07e2966d415c1e18a89e389c3e58121,2025-04-18T02:06:14.247000
|
||||
CVE-2024-5689,0,0,7954cfa7cab5c9d284e75ff2916a8e3e6c71cab8207a342db66b72c3a9729209,2024-11-21T09:48:10.193000
|
||||
CVE-2024-56897,0,0,c86a728646b989ba2c34050e6cf558894a483f9e45fac8ad92b270dc1bfac754,2025-03-03T20:15:43.540000
|
||||
@@ -285152,7 +285153,7 @@ CVE-2025-10433,0,0,b43f24c0bce8de742cf431a2eb964b20478589fcc9f48e30948f4931605da
|
||||
CVE-2025-10434,0,0,566295c72d39946410c2309480fa8fc7d9aeb7c4d38aabeb863009539ff6b2c3,2025-09-15T15:21:42.937000
|
||||
CVE-2025-10435,0,0,8fc0124e2d800034fdad74e6798e13f26fccc87632300a92587bdbcc0cebe3fc,2025-09-18T19:01:20.383000
|
||||
CVE-2025-10436,0,0,f21ff44bf17938ec96a18cacce855adcf01291edfd9db2076ff92e727b5711b5,2025-09-20T02:53:02.110000
|
||||
CVE-2025-10438,0,1,37fbeb62a5b8e94e0fbe9bde4b75d561e904bc0ea17c20ef003501f9916d0daa,2025-09-25T12:15:29.053000
|
||||
CVE-2025-10438,0,0,37fbeb62a5b8e94e0fbe9bde4b75d561e904bc0ea17c20ef003501f9916d0daa,2025-09-25T12:15:29.053000
|
||||
CVE-2025-10439,0,0,1029fd6f848ac3e882b3ab9cbf5ee55679810a321f8eed0af85ef8621512b267,2025-09-17T14:18:55.093000
|
||||
CVE-2025-1044,0,0,9f8be6c10874ff2755d0454f22f2307f6446f5aad49de046e6d1d7bccf9d96f4,2025-02-18T21:34:01.863000
|
||||
CVE-2025-10440,0,0,3d43700e9f7bcfd9f5bd2f556ae6ed2f63c5b9922e8602e594be7f1fe4330af3,2025-09-15T15:21:42.937000
|
||||
@@ -285164,7 +285165,7 @@ CVE-2025-10445,0,0,35b19f2a559a732e39b9c4022cc70c8b4fa82724999a540f17ac4b2e9949e
|
||||
CVE-2025-10446,0,0,4adfe0855fdf711607b03446c931271c897016ae25a91ee38f3ad7d924e0e8e7,2025-09-19T19:26:02.883000
|
||||
CVE-2025-10447,0,0,97bed52bc6bf6ba67e78df4a8f882d14002e132de5a68a35a6ecf6f33f24c1ef,2025-09-20T02:52:24.587000
|
||||
CVE-2025-10448,0,0,29f20a0dca84b13d3aa2ec4f8b4075356304b83163c43dd911980825e8f26a3b,2025-09-20T02:52:09.333000
|
||||
CVE-2025-10449,1,1,b7555afecb2c4432c02e9044673e414d10b60ddbb54b6e64913eda9e2ae5ce27,2025-09-25T13:15:30.590000
|
||||
CVE-2025-10449,0,0,b7555afecb2c4432c02e9044673e414d10b60ddbb54b6e64913eda9e2ae5ce27,2025-09-25T13:15:30.590000
|
||||
CVE-2025-1045,0,0,3d4e99125d6683010d851d946a9297a9321b6b7ff8ccd958db6e8836001b0da5,2025-08-07T18:26:39.413000
|
||||
CVE-2025-10452,0,0,f21100824742796fe06c01f61e1a08fe39235e450c63be92b89ef8c4e0885bc6,2025-09-15T15:21:42.937000
|
||||
CVE-2025-10453,0,0,a1e8c95306d8e3967b47b91f1b9a30fb2e9cfa01abc836c7dbebcc66d0370c07,2025-09-15T15:21:42.937000
|
||||
@@ -285173,6 +285174,7 @@ CVE-2025-10457,0,0,9ccc17f8db171c9154c70670b30fc277d31ac98b80b8dfec6e3b3cbc7e7b5
|
||||
CVE-2025-10458,0,0,448baf1e97be10cbee681640d1f76fd2e260901329d944829ad17e91d13c3092,2025-09-19T16:00:27.847000
|
||||
CVE-2025-10459,0,0,7c24af2d1c6e7e8cec8e6ad496dabc1e29ce968a8545f71e64eff3f5e1ac1348,2025-09-20T02:50:13.370000
|
||||
CVE-2025-1046,0,0,81f07d1deb9a9a24dedeaf842687d2a903e2bc0f9d47d264184d1be137aed18f,2025-08-07T18:25:52.370000
|
||||
CVE-2025-10467,1,1,c49bdc9995924508ddfef4159dbe56a00d09ba5b88b80750a1ae379f90fd5508,2025-09-25T14:15:41.927000
|
||||
CVE-2025-10468,0,0,36e4c4ceb0bff746e98d106c4d04b0f468d06d013dd83276aa36c9c2c65d7c97,2025-09-19T16:00:27.847000
|
||||
CVE-2025-1047,0,0,03eefc960e75fe52ee7120cc433f74ee519d5a88a5d2c706c14c4ee6509cdc5a,2025-08-07T18:25:09.377000
|
||||
CVE-2025-10471,0,0,89ae39e037e985ee771b2e19390bd21e2503515e527973e5fc54414bc59dab39,2025-09-16T12:49:16.060000
|
||||
@@ -285193,9 +285195,9 @@ CVE-2025-10491,0,0,951ea6bb0962c3dcb211fcbb4ed7b7b286208045d52fb26507f65445fd451
|
||||
CVE-2025-10492,0,0,555933980c63ddde447931013752af03609e5c783c21d690cb279540b5bafdb9,2025-09-17T14:18:55.093000
|
||||
CVE-2025-10493,0,0,932e8034dc702d0ce0eb1219ecdae380b75ef71b0f63f980cd1f992288ee8ec0,2025-09-18T13:43:34.310000
|
||||
CVE-2025-1050,0,0,7d78b0a4b57c817f83eab2ed22497d07b9145c021386faab3682cb35dbe240fd,2025-08-25T14:43:50.460000
|
||||
CVE-2025-10500,0,0,df343a879bc4608da9e92ef1e2387d4327820be2d4115d99c2ef1d2c87625c98,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10501,0,0,00d8bee28e29b0fc9b737cd88f59ae26ce9e858ad03dd32639ad4922a0d7176d,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10502,0,0,ce5ba1971d844a99dbaeb88129a7d95c1a407e241331b2603ec5686c036de642,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10500,0,1,aab32102e3cf371e619933a360469cab205ac7b5aaee75e6a2844f07a0530204,2025-09-25T15:57:18.723000
|
||||
CVE-2025-10501,0,1,c01e6d03116ba1643495371fc9b642036c718209108f19fa5186f6edfbe6109f,2025-09-25T15:57:08.893000
|
||||
CVE-2025-10502,0,1,773ba26095d60bfb9c48ba55f215e3be9957ce5835f0cefeb7b1068995f20247,2025-09-25T15:56:56.943000
|
||||
CVE-2025-1051,0,0,97f8684be10dfe28d0f98ada5524e2930b4ed1c647264457a2026bc5d2982cce,2025-08-15T16:28:32.310000
|
||||
CVE-2025-1052,0,0,dd0f54ac7a99856d7d318fe87955632258ed518980dc0996f06ddf7223075097,2025-02-18T21:32:45.863000
|
||||
CVE-2025-10527,0,0,55664663e86770667c8d2a4332bc6ca5a98e76b1251c1e5616158a6897779e27,2025-09-19T20:52:16.030000
|
||||
@@ -285211,6 +285213,9 @@ CVE-2025-10535,0,0,c7abf56a97dee8848d43175d6995d08da134c23e1fae7eebbf9abb2f0d7ab
|
||||
CVE-2025-10536,0,0,6ba9d465633fa0f7c584a3b79a675cbbab5fd3a8ea8229e755bfb07bfe42bd23,2025-09-22T18:15:38.967000
|
||||
CVE-2025-10537,0,0,3d0ab9fa5997155f68a71379eee04060dda4d3ea3d3145a7461006cd665c2a04,2025-09-20T02:58:08.467000
|
||||
CVE-2025-1054,0,0,430aa21bf72f645c6e6bfd34970aba7a2e39d4475b698feec899aa71c44032d7,2025-04-23T14:08:13.383000
|
||||
CVE-2025-10540,1,1,e809335b5d4165419b087fef26ef0d2ec506bb6b05869d9c5c84159dc84d3fcb,2025-09-25T14:15:42.203000
|
||||
CVE-2025-10541,1,1,7fac517a7501c6e8c24d1e7b6d7fb188059f3f607c210f3a44a3e7c330bffdb5,2025-09-25T15:16:09.270000
|
||||
CVE-2025-10542,1,1,d2bf9a8385898d074054fcb1948b8dbc1d636ed20d58bb435ba563b82303b5c3,2025-09-25T15:16:09.487000
|
||||
CVE-2025-10546,0,0,f088632bdd001248501a630f914db4c09f6b020f0ee730cb54e4ef4cbd137365,2025-09-18T13:43:45.290000
|
||||
CVE-2025-10548,0,0,48fb7adcbaea594c1e27a17ba7caad16bbd8aadf9b7e7cca8ebfc69b56969f0a,2025-09-24T18:11:24.520000
|
||||
CVE-2025-1055,0,0,6e774b509e3c76627691b837f2d8590aa97e26aef808a880682478160b3479de,2025-06-12T16:06:20.180000
|
||||
@@ -285430,10 +285435,10 @@ CVE-2025-10857,0,0,ff328cd864ba30c420d6f49e97b82da6ace96516466ea8481d6bfde31dc08
|
||||
CVE-2025-1086,0,0,a69d2558168bf2a8aaa109750d1ed5860f8baf2bb5bad3b2b8e78234f1d8c631,2025-02-07T02:15:30.523000
|
||||
CVE-2025-1087,0,0,7a894514c20a110199ea673471a9e60754864e20939d4cb049420f9571e29f70,2025-09-17T14:15:37.177000
|
||||
CVE-2025-1088,0,0,f3787fa29b31267dc245c20fa41e949ee6e12bb796f28ebe55a044ba5017de27,2025-06-18T13:46:52.973000
|
||||
CVE-2025-10890,0,0,1b8cdad03fbe4ba34f12c94193018775f156d15c61aa5f9be65b64f09b4afd2a,2025-09-24T18:15:33.490000
|
||||
CVE-2025-10891,0,0,a4ce72554caa11c6711d5c70c15c5ca7863457ee9fa276897a8e428505b02f02,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10892,0,0,517f7e77cf99f2a9a45c6e1ecc319a597cf85dfa33349dc1f0a863de14f4e4b9,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10894,0,0,6ef1a5dbe30c79678abda0b97384f50688140f49f8bc7e9fb5b70a9fbb9c36ce,2025-09-24T22:15:35.423000
|
||||
CVE-2025-10890,0,1,d0c97dc1379f44ae95572cb915065b420d7113a9648510323323bc3294852bf9,2025-09-25T15:56:42.057000
|
||||
CVE-2025-10891,0,1,ec65bca20daf6cf3a3667100ee8faba38038287356d613e29f0f2e3ec84c3064,2025-09-25T15:55:54.730000
|
||||
CVE-2025-10892,0,1,b321af08f7e176d608a0dc06066e258eba69478d13da7bfc23c4c4319c7e8e9c,2025-09-25T15:55:41.970000
|
||||
CVE-2025-10894,0,1,f131ea2acce339ef2fcf0979d6ce7f092f6b94f443f2178ef2ba1af2b97d6669,2025-09-25T14:15:42.370000
|
||||
CVE-2025-10906,0,0,398f19602f87fe52de5ba52eac045ac633b4ff091d9f8d3bc4dfb35338e2a0fd,2025-09-24T18:11:24.520000
|
||||
CVE-2025-10909,0,0,1eb03db3b4da894115bbf5f69e3a273a6a80a3e00cac6bb5e6337dc71eb895dc,2025-09-24T18:11:24.520000
|
||||
CVE-2025-1091,0,0,41f3aeac640c3e0e17c6b04948a8dcf1ae635325d94a919fd15d739e41c450e8,2025-02-26T00:15:11.250000
|
||||
@@ -285442,13 +285447,17 @@ CVE-2025-1094,0,0,dca1378d2e11e054a0baff76bda52bd172b0e41af32ad66e0ce66e679989e2
|
||||
CVE-2025-10940,0,0,cc658f406e4858b727f47412604774306938318ca02ffa2593c76fb325c2d5e2,2025-09-25T11:15:45.757000
|
||||
CVE-2025-10941,0,0,d7b6d906818254f265af5cae57af4881b3c8c01134c4c42e477e1b5a292dd634,2025-09-25T11:15:47.120000
|
||||
CVE-2025-10942,0,0,b156651f98215b4bc886d3e7b2323de5e05d5c073a436985435549159baf5727,2025-09-25T11:15:47.367000
|
||||
CVE-2025-10943,1,1,e8a30df58af17099e8e8bd10f8e6dbdedfea3de4c0e9732c4a60ba53d10b86bf,2025-09-25T12:15:30.340000
|
||||
CVE-2025-10944,1,1,0b480f0f50acdde7b3a123e4863eeef09a42c9f84d14927272ad65bbda2c07d6,2025-09-25T13:15:30.800000
|
||||
CVE-2025-10945,1,1,f270f3f92595025c09e28d18e84eff5bdd669d9b2c66b2d89595c23ddc7692b6,2025-09-25T13:15:31.017000
|
||||
CVE-2025-10946,1,1,82e1a2b24babe3da2bd325bc57f22b1fb69ca7aa8fa5d6668b8f2f08020e96dc,2025-09-25T13:15:31.200000
|
||||
CVE-2025-10947,1,1,b620eeb05759d0d785edda5bcdda6498fd62d59cc5e324f559a526ed3309e204,2025-09-25T13:15:31.387000
|
||||
CVE-2025-10943,0,0,e8a30df58af17099e8e8bd10f8e6dbdedfea3de4c0e9732c4a60ba53d10b86bf,2025-09-25T12:15:30.340000
|
||||
CVE-2025-10944,0,0,0b480f0f50acdde7b3a123e4863eeef09a42c9f84d14927272ad65bbda2c07d6,2025-09-25T13:15:30.800000
|
||||
CVE-2025-10945,0,0,f270f3f92595025c09e28d18e84eff5bdd669d9b2c66b2d89595c23ddc7692b6,2025-09-25T13:15:31.017000
|
||||
CVE-2025-10946,0,0,82e1a2b24babe3da2bd325bc57f22b1fb69ca7aa8fa5d6668b8f2f08020e96dc,2025-09-25T13:15:31.200000
|
||||
CVE-2025-10947,0,1,c31648c16d3c47583e79221da4d2fd293b040b763907d76cef260319292e99c0,2025-09-25T14:15:43.290000
|
||||
CVE-2025-10948,1,1,f0e2be1154e687df36bda07c0de84a997aec7ab7324afaa26bbb5afc40a00452,2025-09-25T15:16:09.617000
|
||||
CVE-2025-10949,1,1,fbe982b1a9f62c2ae05d0f9c0c04436ef5d48c8bfe3c5e9051d04c4a066d88d6,2025-09-25T15:16:09.807000
|
||||
CVE-2025-1095,0,0,9a08709ed6821d4cec41bca98af9a9b4f3ba88066959c4b4eaf1ce8a45c37d8a,2025-08-13T00:36:44.613000
|
||||
CVE-2025-10957,1,1,036ed289facd9ad6eba20d8bc7a92d2b8aedf67c1550a0ec8cb8eededfcdebf3,2025-09-25T12:15:30.577000
|
||||
CVE-2025-10950,1,1,4c58578fe0cf169c0b4b8ef21b0c439d25edd4b556d1723069e13b18b28ce4b3,2025-09-25T15:16:10.023000
|
||||
CVE-2025-10951,1,1,e96dd5e482859b3e6931cbc7b5f8362d28159803d5b8e61b1c2c64f2de92b3c5,2025-09-25T15:16:10.233000
|
||||
CVE-2025-10957,0,0,036ed289facd9ad6eba20d8bc7a92d2b8aedf67c1550a0ec8cb8eededfcdebf3,2025-09-25T12:15:30.577000
|
||||
CVE-2025-1096,0,0,f369ee58dbaa6e142f3d975d8711cac15a0a303facd75e898c558f3e454cc535,2025-02-08T01:15:07.947000
|
||||
CVE-2025-1097,0,0,2202b89d343208abc4d734355b4c7ffd6f25bdeae0a3549fe1a1a5c18a5619b5,2025-03-27T16:45:46.410000
|
||||
CVE-2025-1098,0,0,5e273d1d4e3b115282c7c75a71d4085bca65fed73fce8f6abccd6dd2ec5272b4,2025-03-27T16:45:46.410000
|
||||
@@ -289126,7 +289135,7 @@ CVE-2025-23349,0,0,9c1cd85ef3f1a15a2b0d72ba619ba80ce2b061f12413fa0ec8c628c959bb6
|
||||
CVE-2025-2335,0,0,833479a18c8a0594376e23428e7b5d0c44e7fee9fa697872f4bc27a1568d612e,2025-03-16T03:15:37.907000
|
||||
CVE-2025-23353,0,0,2b0003aedf73bf9e6379f2d0d3a707e29890d3a8e9b54abb74540dafb50e9e22,2025-09-24T18:11:24.520000
|
||||
CVE-2025-23354,0,0,13db437b82e5361f61fddfff96589edb3a904f2f11595fa3ff9b938392a89986,2025-09-24T18:11:24.520000
|
||||
CVE-2025-23359,0,1,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000
|
||||
CVE-2025-23359,0,0,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000
|
||||
CVE-2025-2336,0,0,e04e263f577ee94994be76c7f45e2a366ef0c6a3a1e415c7a4e9e5f507e17810,2025-06-05T20:12:23.777000
|
||||
CVE-2025-23360,0,0,c78c6d407e7aa9fb20b6a8f1cc9d50ed7ab53a4f48ce43f2ffcc5cfeaafc7049,2025-09-23T19:12:03.027000
|
||||
CVE-2025-23362,0,0,f1b04109bb5a53f0fa12693fb841988a838f82d29d11cab82e724120097242c3,2025-01-29T02:15:27.910000
|
||||
@@ -291209,7 +291218,7 @@ CVE-2025-25709,0,0,b6ab1ce659249624d0a92da07c9379cd0e3b96cdcab65e12bbb19c19fd5b7
|
||||
CVE-2025-2571,0,0,35ca25196622c2ffb39af24e9f522dc2cc8709c94ddbbd1fdd75a8e835535687,2025-05-30T16:31:03.107000
|
||||
CVE-2025-25711,0,0,687cbddc40bafa1aa553307129c536c978baa7c3ff70ab2a66988ede6a6f0e53,2025-03-12T16:15:23.023000
|
||||
CVE-2025-2572,0,0,1c17ee1f93d2404a782270dcdbf00d2a78964847890aca890c9cab1a14592a4e,2025-07-17T14:41:45.487000
|
||||
CVE-2025-25723,0,1,ee8fd4f2905eeafa3220c1e8e1a05ba486475ca24a8be57a209a7e6f4bd54afb,2025-09-25T13:27:40.590000
|
||||
CVE-2025-25723,0,0,ee8fd4f2905eeafa3220c1e8e1a05ba486475ca24a8be57a209a7e6f4bd54afb,2025-09-25T13:27:40.590000
|
||||
CVE-2025-25724,0,0,ceaf233b0f81ae9a6f391733c88ea13b491e944a1f678139217a1972e4a0941b,2025-07-17T15:56:36.083000
|
||||
CVE-2025-25725,0,0,ac97ba103984120a346a524ddb442d8216a673461532b95f069cbd7053e539c0,2025-03-02T02:15:36.760000
|
||||
CVE-2025-25726,0,0,1241b8ce4f2f3e5a9582d1cb34e021df8b6f066d37fe203461681ffda7c05f0f,2025-03-02T02:15:36.850000
|
||||
@@ -291442,6 +291451,7 @@ CVE-2025-26265,0,0,dc6169524b361ca35185d09a9fee076e263bc06d923c2410d4d58b5ca82c4
|
||||
CVE-2025-26268,0,0,d9529d610311faa964302e414b9b8c3db6a8500fffae51ef0e05c440ae1ecaef,2025-04-25T16:33:11.420000
|
||||
CVE-2025-26269,0,0,12b9746a2f0528a420442e578b3737c7290da3e519f4876ab7e0a810d8072175,2025-07-11T16:36:33.623000
|
||||
CVE-2025-2627,0,0,2f3ad81f65de29cf1c1820e848f840cadf0a85c3d953dd25546251d732981bcd,2025-04-02T15:46:50.193000
|
||||
CVE-2025-26278,1,1,7ac7d64ca28172c2133327eaec28b01d3c4a19b7db60a8bbf12c246592db5fc8,2025-09-25T14:15:43.873000
|
||||
CVE-2025-2628,0,0,05d1547b9a4ba25743b9dcb0b6bd681f5330882c7d106990b2f631bde4178f60,2025-04-02T15:44:41.567000
|
||||
CVE-2025-2629,0,0,ea8a43a5c74eff85313aeb6f84d8522602681c279c7592e053ad4ffa62d8a2f0,2025-08-18T19:47:18.057000
|
||||
CVE-2025-2630,0,0,d00c7041bce7a6c0b53b65b13c56fc812eabc833bc945e0f7151191f3cbca876,2025-08-18T19:40:32.253000
|
||||
@@ -291896,7 +291906,7 @@ CVE-2025-26789,0,0,ebea494059b94de49b6b520d5766b69e65af5f122cf9ef029bba111909dc2
|
||||
CVE-2025-2679,0,0,cafe0cb961640352f6700d1f4f9c72cc0c9f8d69b76916ff519f9c4a67eb3536,2025-06-04T15:19:35.357000
|
||||
CVE-2025-26791,0,0,a7d63ea0959b4846f11cfb3951f45279f457c98157e5d52d56097a5da007bce1,2025-02-14T16:15:37.350000
|
||||
CVE-2025-26793,0,0,d30b44911459092c9e08ffe42552727cfd072bd06f4aa8564ac964446a27eec1,2025-02-24T17:15:14.580000
|
||||
CVE-2025-26794,0,1,6e9618df8b457b71f21ca97d29f508999c2f86c458299a1f81bf001397d1e23d,2025-09-25T13:12:00.833000
|
||||
CVE-2025-26794,0,0,6e9618df8b457b71f21ca97d29f508999c2f86c458299a1f81bf001397d1e23d,2025-09-25T13:12:00.833000
|
||||
CVE-2025-26795,0,0,3283f9e1bb19da1c039a6534fc32235ec5e4cbc609a28f146625988b1ff56282,2025-07-11T16:16:19.057000
|
||||
CVE-2025-26796,0,0,68ab74fb372251311859b8e434d48ae111cce4d9cb690323b59ceca29e2126f1,2025-04-01T20:27:46.867000
|
||||
CVE-2025-2680,0,0,934be0066d2f2c151ff263e21e7acbd87991eb5817b720319e92f8127f51bdc5,2025-06-04T15:16:46.930000
|
||||
@@ -292297,6 +292307,8 @@ CVE-2025-27255,0,0,e778f08cf23683afc5d4a9e46aba9493b6f8173a4bc86a191d0135a1893c7
|
||||
CVE-2025-27256,0,0,faa5f1c45cf1df7eaa32fc86b6cec46d0d1a169c24ab8cf8bd8a3126393a2add,2025-03-12T12:15:15.047000
|
||||
CVE-2025-27257,0,0,35c5381be4b8261e4f71266ede8fcd92d8a42ce97885652c7e62cfebbc1b8ddf,2025-03-12T12:15:15.187000
|
||||
CVE-2025-2726,0,0,9cfc0fcc043bfda05f579a7e6f6f984b284a2a8cc8a7109cf633c337996e62e5,2025-04-11T20:15:23.087000
|
||||
CVE-2025-27261,1,1,4bc7027f32495869ed791f2f5c0a398bdfe30ebc53c4e9070811ae32cb884e60,2025-09-25T14:15:44.240000
|
||||
CVE-2025-27262,1,1,c7cb83c70c3c19c45fefdf011702fdc9355389e1a66acf3e9ec3338bd815a4ed,2025-09-25T15:16:10.737000
|
||||
CVE-2025-27263,0,0,0d6473ce6be397da70ae29bc260e636ca3c6169d6fa59d6f77401b8f5578c5c3,2025-03-03T14:15:57.980000
|
||||
CVE-2025-27264,0,0,57766bee671a71e603c6190f5ecce6b6ab03f589b571849a06d4f3626124f857,2025-03-03T14:15:58.123000
|
||||
CVE-2025-27265,0,0,064ce13be3b2caa339c06df0a9bbd275da3bf393870e4191cf15429558044c93,2025-02-24T15:15:14.310000
|
||||
@@ -296827,11 +296839,11 @@ CVE-2025-34176,0,0,ce031af045d7170815766dd05513225d98e7b84328b85dc0d0c5b2f4ab05e
|
||||
CVE-2025-34177,0,0,19599bcead82fedac98310e50abdc314a19946fa553ba60d8295f8a421ba8b71,2025-09-17T18:15:44.463000
|
||||
CVE-2025-34178,0,0,ed88bc2de084b661e5a18259d0b5bb092e58c25d57d1b288714b1f4a96f45414,2025-09-17T18:15:44.570000
|
||||
CVE-2025-3418,0,0,339c13b005a4f5030fbc9506024b1d7817e98dc63768ee98336e99fe36b19c7e,2025-04-15T18:39:27.967000
|
||||
CVE-2025-34183,0,0,d78cc79019dc3755f89fde03f5b84141ab8dfacb9e0445519b6ef2d751808166,2025-09-22T18:58:17.053000
|
||||
CVE-2025-34184,0,0,3a8173aaba7b5471b87ab2cd7dbaf2e218f0357ec7d1d163610f8305f7d70abf,2025-09-24T15:58:04.650000
|
||||
CVE-2025-34185,0,0,b8890ba45a399f1c263a18c9b15d7216f6e91f8ba4100779a1a708df002472c3,2025-09-24T16:14:03.060000
|
||||
CVE-2025-34186,0,0,22e6bca43953fc061b48d5252ae0e726e089bf3a2d33fc839fa4d298431f12ca,2025-09-24T16:22:03.347000
|
||||
CVE-2025-34187,0,0,4d2ac2f81bec13347f7d0f10a22702a56993a4e85ee8110cdd18a669bfddbcd4,2025-09-17T14:18:55.093000
|
||||
CVE-2025-34183,0,1,b447fb97741da544c611688015fd4511a102ae26c79571bf7e67680e5a96861c,2025-09-25T14:56:22.493000
|
||||
CVE-2025-34184,0,1,9ee63c1c614693fd22b5a3c615e126c99cd6fba02904191a646cde9580831531,2025-09-25T14:56:30.853000
|
||||
CVE-2025-34185,0,1,7250ba041e1dffcddb59802f31b268ac08fcf87fc15a7deb3b71e549b23bf24b,2025-09-25T14:56:39.847000
|
||||
CVE-2025-34186,0,1,864d0b28596fe728a349ff13971efdd9fac20d1a15f9796c00e510b39f9afd70,2025-09-25T14:56:49.430000
|
||||
CVE-2025-34187,0,1,50d3e6ce495ea0026a7139894ea1aba70dd9d3a87759e010b7c60d8fdeb4b0bd,2025-09-25T14:51:36.743000
|
||||
CVE-2025-34188,0,0,3ef22d024b9e096d29f2a02b99ec34adb804dc98a5b3d34106480d8e91bea839,2025-09-24T19:48:26.270000
|
||||
CVE-2025-34189,0,0,a97a83497bba594710a1bc81bb26bfc012acc44d687dc0f98025d700ea81ad33,2025-09-24T19:28:54.507000
|
||||
CVE-2025-3419,0,0,83686447659d1374debfbd584a9e75e08e8154b34b844ae39a181c0642efa458,2025-06-04T22:42:06.187000
|
||||
@@ -297122,10 +297134,10 @@ CVE-2025-36124,0,0,495ab5b80c18934d694b85f1fd5c515432023769133dc6b0f110ddc5106cc
|
||||
CVE-2025-36125,0,0,065ad8bfb76e5aab8cc5e8bdc82623ade84c6be49c8c9463be9f1d533787a61f,2025-09-11T17:14:25.240000
|
||||
CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000
|
||||
CVE-2025-36133,0,0,bee880bb5fb76cfb4423e3458e3e19970e6f04fadc77dc2522065e6f772e6389,2025-09-02T15:55:25.420000
|
||||
CVE-2025-36139,0,0,12726ed5680de391524c50c461ad504bfc2d001f7596ee674aedf2130ff11181,2025-09-19T16:00:27.847000
|
||||
CVE-2025-36139,0,1,c172b4a8e972ceedb37b722555077120805e269ac8f9b9901ae94e1d34885dc9,2025-09-25T15:49:02.467000
|
||||
CVE-2025-3614,0,0,1e9cefdd84c33d8de2c3ee7d2836b527bad3030475ccee2fdfaac67d11194e78,2025-07-28T15:07:38.667000
|
||||
CVE-2025-36143,0,0,9fc52a1a466c2ffa98d586070dba8a0cd6679cb4a4dde11eba9f737e15d19c7f,2025-09-19T16:00:27.847000
|
||||
CVE-2025-36146,0,0,78d4caa80e633e895665b9f88d5ca6b0cbf1ca5494c3bf4d696a0be3bd30eb0d,2025-09-19T16:00:27.847000
|
||||
CVE-2025-36143,0,1,1e82b2da60297014ec7d27a8e98d8cb4e86c5412a88d55b136ab5a2614b0727c,2025-09-25T15:50:10.570000
|
||||
CVE-2025-36146,0,1,e3618150e691b0b74ea90f60d841a93c82818d79e7aee8ea2f7ecaf82383ed59,2025-09-25T15:52:20.303000
|
||||
CVE-2025-3615,0,0,8fdf4606cb6a0284ee0e09827c413ea146851550983dc6357a6b31a17ed36258,2025-04-17T20:21:48.243000
|
||||
CVE-2025-36157,0,0,d4042d7b050d6d535f4db44d44cd43950e23acfe375ebe2b6e16a9b8b0723ed0,2025-08-25T20:24:45.327000
|
||||
CVE-2025-3616,0,0,85ddfd303733fa62ed9efef24f9f8a85faf23ed34487370e2b7cef38515b10a2,2025-05-28T17:38:29.717000
|
||||
@@ -297207,6 +297219,7 @@ CVE-2025-36594,0,0,2a566af0a69a3913c8d5a7f6fd7a5d60ea164662df00afab702bbc75eea3f
|
||||
CVE-2025-36595,0,0,b7b187e5206ceda5ed8598c137a9a911cd79671eea070c646cfc4cea47d2e09b,2025-06-30T18:38:48.477000
|
||||
CVE-2025-36599,0,0,1c5deb350a91c0937bc5474ef4668a9588885c4b06717b17ac1bb6eea480f085,2025-07-10T13:17:30.017000
|
||||
CVE-2025-36600,0,0,2fbe90f71a77d176cb60166b8b5ce924bd24c0a2469c140bbd821284fd8da7d7,2025-08-18T18:55:09.460000
|
||||
CVE-2025-36601,1,1,801adaf16a78128fb57b7ad27c43cb0a415740a3be3c41015b9129c26e6baca6,2025-09-25T15:16:10.890000
|
||||
CVE-2025-36603,0,0,b83bbf93952c968cfa21dd0a11113a0c987b1b2802a8f9789b17e416dbb44238,2025-08-06T14:30:53.813000
|
||||
CVE-2025-36604,0,0,de42779bcf8b452f2bb18d9f9416cef1c959d98bafc929884192297de42ad888,2025-08-15T16:10:20.663000
|
||||
CVE-2025-36605,0,0,5032fdaad8f75c4093784f848d1dc94ccd33ec97ad79d57f90adabbe91bfac04,2025-08-15T16:10:03.957000
|
||||
@@ -297259,6 +297272,7 @@ CVE-2025-36852,0,0,dee8ab0224e580dd4f3b987fb8708b2945cb8678d654eab4fb9316cebea64
|
||||
CVE-2025-36853,0,0,5dea9df2e4d0256e9b85c736342001205da5733cf59b3d913ea0384a52bd5610,2025-09-08T16:25:38.810000
|
||||
CVE-2025-36854,0,0,191b8ee50b90a29e30424542d05ba644c1ea820e2de20f125f177a0f790756d9,2025-09-08T16:25:38.810000
|
||||
CVE-2025-36855,0,0,5635364b271ce20a1c00a1c2899a72f40879f852a3d50a367c8c2aa8672ced87,2025-09-08T16:25:38.810000
|
||||
CVE-2025-36857,1,1,adf55cad1cedc183749d318ecf65e773ecaa716cf7ecf8a01fc2cf33fbbeb111,2025-09-25T15:16:11.060000
|
||||
CVE-2025-3686,0,0,0df30c8de6b0b9161a0c8150130ffb5e72bd0f69a6162c2cb918ce22a84cbd7c,2025-06-25T18:53:22.990000
|
||||
CVE-2025-3687,0,0,3c2ac79e70973e7c9aecbfd30ed0e9ec614f41f5f30401eb4fc3b31170f656e2,2025-06-25T18:52:43.527000
|
||||
CVE-2025-3688,0,0,0c5a9c39d0a46b352ad26209271a79a845e7971d7d876bb2609e071b04f68cc2,2025-04-16T13:25:37.340000
|
||||
@@ -299258,7 +299272,7 @@ CVE-2025-40693,0,0,b8a8bb6dfd6944c00ba54decc6086b1710041077b93d0f227ddfb368ea743
|
||||
CVE-2025-40694,0,0,e578c3cdf9d11b2ef09b7118f0275e015848c92bdc7e2e8a3149800078f8b0c5,2025-09-12T15:31:24.010000
|
||||
CVE-2025-40695,0,0,9db5970302d93ab7c97ed854d5351a44131d9f251764809fbb196aad53045c98,2025-09-12T15:31:11.180000
|
||||
CVE-2025-40696,0,0,8bfe4d36ec8f1559d58227abaac4bdd24631c6baadc9cf9ae1407420244fbaec,2025-09-12T15:30:57.173000
|
||||
CVE-2025-40698,1,1,95ddea10c74ab6ac5c2cb41b2d8ad181f675c9bbfedc845c3fe46b626c1516d4,2025-09-25T12:15:30.760000
|
||||
CVE-2025-40698,0,0,95ddea10c74ab6ac5c2cb41b2d8ad181f675c9bbfedc845c3fe46b626c1516d4,2025-09-25T12:15:30.760000
|
||||
CVE-2025-4070,0,0,95239c8a358b05c88e31535f0df25ceb69331749309a950b338783db56336302,2025-05-09T13:50:22.543000
|
||||
CVE-2025-40702,0,0,922c97d78daeddf868fa5a305ec9a141e7c812e2723d817ebe1949a1ffce3d99,2025-09-02T16:59:58.307000
|
||||
CVE-2025-40703,0,0,387f7870a3b578f8d6dd994a8417a1b96867f558ffbdb664038c80af8375350d,2025-09-02T16:59:46.367000
|
||||
@@ -299341,6 +299355,9 @@ CVE-2025-40804,0,0,924dba457c12e8455a96638b25846b3ff17071b0960df9986f7d22802102c
|
||||
CVE-2025-4081,0,0,f16673fb48c24de93e5c053aca80fb5176268314afb8a43b122ba2153bcbfb6b,2025-05-30T16:31:03.107000
|
||||
CVE-2025-4082,0,0,f101f0f3cf1047a16cc8caac21e6de29d89617400e817162e18bc298869bce86,2025-05-09T19:33:39.363000
|
||||
CVE-2025-4083,0,0,aab0e7ab9444e5b40631ead4a4be93598a1c41c9013f544453ee8d28c06657c0,2025-05-09T19:33:33.723000
|
||||
CVE-2025-40836,1,1,5f8aafc92e17a00f58ecfee27f262ee9688e6fdb4d6f93df1251936e3e3524d9,2025-09-25T15:16:11.233000
|
||||
CVE-2025-40837,1,1,4df67dc4e4d93344e76b5ffba80d7b6a491f2f3dae1c4f8e506958d5b72c79ac,2025-09-25T15:16:11.447000
|
||||
CVE-2025-40838,1,1,fde99b31ce1c1819eb29a3536f38fc35051d88017240b53c057108771481b59d,2025-09-25T15:16:11.587000
|
||||
CVE-2025-4084,0,0,7ab4ed18f9bc09589ba4cfa35c769fb76a8e08e311a02f32727a71098d5ce184,2025-05-09T19:33:28.887000
|
||||
CVE-2025-40846,0,0,e8fc35d6a7d67ee9712f1abee1dad03d3790bb520dcd9dfe7fbc6fa5b041752b,2025-05-08T14:39:09.683000
|
||||
CVE-2025-4085,0,0,3ec3610647f22a9df95ad3f290526a8f289f25a671fa2c6b59cd4d2708efd3da,2025-05-09T19:33:24.233000
|
||||
@@ -300014,7 +300031,7 @@ CVE-2025-43341,0,0,2d17eacfd547c29eb16144d9ce72081500998e1362c17de8558f1652bd5f3
|
||||
CVE-2025-43342,0,0,b98e0e9ff5f3094c4f49dcbf0e279e2e2551c5b1bd1b7ff1380a61e470d7a3ce,2025-09-17T14:06:07.447000
|
||||
CVE-2025-43343,0,0,1c0d2ec09cef56f050e19885603fc1a49de0650ecb1fa71a592cb04cad30f9a5,2025-09-17T14:05:49.413000
|
||||
CVE-2025-43344,0,0,1e630708e3e53639bae545204e191c3bb5cd720bc28b214ecc46db43e4b41e2c,2025-09-17T14:05:08.087000
|
||||
CVE-2025-43346,0,0,28c7272eeeb483c094c76139f4c8b472a5f2da411cc81bd19ead5789941c4d2e,2025-09-17T14:04:55.827000
|
||||
CVE-2025-43346,0,1,0483bd549d5e44c0454e2cfe9a09eb667bce7d068027d1524f0b2271214e9b04,2025-09-25T15:16:11.717000
|
||||
CVE-2025-43347,0,0,ab529146ed66d4d8c9e6c3c1fd200f4bf1d3f4a56320d9f57aca1c32630dddff,2025-09-17T14:04:43.977000
|
||||
CVE-2025-43349,0,0,11c3f6360839d6279f43ed724980b806f9280e126d7169d9686f847a4e9a8e83,2025-09-17T13:54:52.190000
|
||||
CVE-2025-4335,0,0,ab91d891d4885edde448eb60f8fb4e6853bc982358f87a0b04b64a0f12c1f76e,2025-05-07T14:13:20.483000
|
||||
@@ -300917,6 +300934,11 @@ CVE-2025-46121,0,0,8dbe213f31b46111ff96215508808eaeade46c38a87893d5471126770e675
|
||||
CVE-2025-46122,0,0,c80ef7e8af8f80669a89f8a37ee36da721f63411673211a87d3236e83ed7f60d,2025-08-05T17:18:47.920000
|
||||
CVE-2025-46123,0,0,fe47d4c8287dbb2f73b056e568b43dfbb7ccde69a0e316b43998f89f73b27b65,2025-08-05T17:18:56.067000
|
||||
CVE-2025-4613,0,0,cdece17d7aac2b268318a695cef81a8a4c9b3ca958a6eead0821fbfa89216fec,2025-08-01T22:07:33.530000
|
||||
CVE-2025-46148,1,1,deaad3b37248be948cfc088774fa4661ddb1dcf8dfb7c7060039639086da2af6,2025-09-25T15:16:12.007000
|
||||
CVE-2025-46149,1,1,14b1813e8c9d41d84e8a56146114e319324a703d1134290a7e41149d80650c85,2025-09-25T15:16:12.153000
|
||||
CVE-2025-46150,1,1,928ae05c942d8c738f14b64854db559ed55f30b6a14be1d2c6b0c6976d660ff4,2025-09-25T15:16:12.303000
|
||||
CVE-2025-46152,1,1,ab5211ab9f377a93a4042bda4f864b36fe19e6277556f4f18898ed0a264c6b9a,2025-09-25T15:16:12.470000
|
||||
CVE-2025-46153,1,1,3073b8755975b727816729e0ffb3162087c6f872ccf571bc718643be2ee9a334,2025-09-25T15:16:12.603000
|
||||
CVE-2025-46154,0,0,28136877062a9fbae66fc92d86286e5d62e1cd8a9e62fd05c5a06eb514bf383d,2025-06-09T18:06:28.423000
|
||||
CVE-2025-46157,0,0,15ef5f092148ce037ce48bb6f5f34f7194730ff07b7e1a3244e0e823362d2bc8,2025-06-26T15:53:12.230000
|
||||
CVE-2025-46158,0,0,496021feb7f909223ea58ad77cd1644e57cf02b0d8b0ef3c8c84068942351766,2025-06-26T16:15:30.733000
|
||||
@@ -301808,7 +301830,7 @@ CVE-2025-47324,0,0,40049889413e702152cb8a48c1b40cc873f01436a0727f76cbbb786f078d0
|
||||
CVE-2025-47326,0,0,9c486ef819e53db90b66c834417850eea0d5545d4063a9d360c9b17701093b3e,2025-09-24T18:11:24.520000
|
||||
CVE-2025-47327,0,0,4e45d0e323f7df2c0f66afb0c855829432dff4fbeb76ff218919296a5ab977fa,2025-09-24T18:11:24.520000
|
||||
CVE-2025-47328,0,0,29ee7ddd61f8b5b9c1db29488e1c048045517ba76853e52f99ec7dc9db3cde0d,2025-09-24T18:11:24.520000
|
||||
CVE-2025-47329,0,0,c7e9bce2a1fa2134df73ecec9748b0587b69332d65d4bae057fd2deb33b2d083,2025-09-24T18:11:24.520000
|
||||
CVE-2025-47329,0,1,26ddee6fb8e5d44e98ca87701eef221e8130edac380a57ac68819d91bea34715,2025-09-25T15:58:55.557000
|
||||
CVE-2025-4733,0,0,1feecf34d1e945b07bf7f8173c5a6199da7cad3eaaa8962b3eeb1affdc22767c,2025-06-20T14:09:01.650000
|
||||
CVE-2025-4734,0,0,ff13ac1d2cde78d45dc6342e4d68c6311ae8114b779224c605f286f666a46962,2025-06-21T15:15:20.100000
|
||||
CVE-2025-4735,0,0,f96e4d2d2fb70e0f1c88cd9e2e0e0d4de95ba2f9e43dcc187f8debac18edd909,2025-05-28T14:26:46.997000
|
||||
@@ -306348,12 +306370,13 @@ CVE-2025-54926,0,0,869dbde8519c090fb7f1d5a8b8495ed14be5b51548b2b1d168383609def36
|
||||
CVE-2025-54927,0,0,e4d646762d99414b47372563037d8fca39f064c7ca12b4699d9d41015f0dc1df,2025-08-20T14:39:07.860000
|
||||
CVE-2025-5493,0,0,ee080df396ccf1633462f8bea7e98123459cf9ce73fdb4862d9d12054c10cec0,2025-07-02T14:31:01.553000
|
||||
CVE-2025-54939,0,0,87ffd419239cd8768d907ea5e036989914fccdf5beeb5ca33a7e52706e3664ed,2025-08-27T15:52:46.787000
|
||||
CVE-2025-5494,1,1,ddb7a684b4dd72a34315a9c2196587151b5bbcb8d669768bdcbfdbcd09aa43be,2025-09-25T14:15:46.783000
|
||||
CVE-2025-54940,0,0,5cb09ce7b55585318e61af90407d9c27bd28df00241bdde208ef2d4b9b5d35d8,2025-08-08T20:30:18.180000
|
||||
CVE-2025-54942,0,0,2f66fefe69f23b6d93997658a36ce46f3fb69bf694a1bdc8f5a4a8b15b5edd35,2025-09-02T15:55:35.520000
|
||||
CVE-2025-54943,0,0,3200f0b4d8bd2b636635d27e08f2b15c0aa05af42caf5502fa9dae541c363662,2025-09-02T15:55:35.520000
|
||||
CVE-2025-54944,0,0,7194c08e1d653eda218bf9a41ca6261508c9ddbaaa0f5c580417fdf5d1be4a79,2025-09-02T15:55:35.520000
|
||||
CVE-2025-54945,0,0,1b72aa47d9a07671f2d765d82cd37e370e56e48a38b8678b0701e088f55b7193,2025-09-02T15:55:35.520000
|
||||
CVE-2025-54946,0,0,2d2f5a26b291512fe95a425c98634e22d96268b56b07eaddb04ab8930aee32ee,2025-09-02T15:55:35.520000
|
||||
CVE-2025-54942,0,1,5fa327894c9c265abf7a4ab57c0f412aad4b325ec4a6e4648332ce6e6085ee84,2025-09-25T14:21:33.457000
|
||||
CVE-2025-54943,0,1,51e66c4a67a0893777e86088c3c8bc7e5943f251113a3864b0b257ae3e38e1f7,2025-09-25T14:14:52.863000
|
||||
CVE-2025-54944,0,1,1f2f2bd57746e3c1fa2db7fa61c8cc3770ba42d316fffd6de151bb5eb6b2d97b,2025-09-25T14:15:22.430000
|
||||
CVE-2025-54945,0,1,1622e02a1092dfc3675c7eedec29d3b0eabdb695d14d372026bc3867f2105207,2025-09-25T14:15:06.757000
|
||||
CVE-2025-54946,0,1,62c9f5553e6a283b38a9cf9599d8b2b869742cbdf9e3af42b224c67906486da9,2025-09-25T14:16:05.113000
|
||||
CVE-2025-54948,0,0,8cc226f4733ee4a5cf7160dce3437fb4b70e0744ac0f5177ef9452cf75471ccb,2025-08-19T01:00:02.773000
|
||||
CVE-2025-54949,0,0,056a181e94828dc320f131275dde7cbd3e9c5bc8e976a21777e5b57458abe8a7,2025-08-12T15:15:30.227000
|
||||
CVE-2025-5495,0,0,627c107a7144d6261875c74bebd9da1796689e08747b21aa3599eeaec4deae9a,2025-08-11T18:48:40.963000
|
||||
@@ -306637,6 +306660,7 @@ CVE-2025-55524,0,0,beb957094edda12c486584ab9348ec6f0105763418f9bb04171426196f31c
|
||||
CVE-2025-55526,0,0,38ea54a1796d3c33b1c24f777c91327f624fb606d5dca6b21a82c5a7098a015c,2025-09-15T19:38:14.897000
|
||||
CVE-2025-5553,0,0,fe4c614ffbe08afefea4288d466eb90eee97d4e2f16090dab1d687305d5627f3,2025-06-10T15:16:07.670000
|
||||
CVE-2025-5554,0,0,bb973700fe34126bf117ec751e38d204eccbaefe0d39d643366a25cffb57f45d,2025-06-10T15:16:16.877000
|
||||
CVE-2025-55551,1,1,956f87777b6f62af788cf822ec1fd5f43a572cfbffa10ad290a6685c465501c2,2025-09-25T15:16:12.887000
|
||||
CVE-2025-5556,0,0,1f63a7f5a7a91cd0b5f15f9dd5246b4bb97c1dcec71534f8a57046e817922924,2025-06-10T15:16:25.960000
|
||||
CVE-2025-55564,0,0,6e1224fa6a194465d8b17b65b95a0811add0548d95f4d4a21d147c7651236a4e,2025-09-03T14:53:05.053000
|
||||
CVE-2025-5557,0,0,fd128465c0bc90cacbb5b3b2d601b7eb1c9da01523b98b89dfee1d497f1d2b1a,2025-06-10T15:16:34.460000
|
||||
@@ -306749,7 +306773,7 @@ CVE-2025-55763,0,0,16099e8c1a80dbca272d3e09512dca34a57b487a237d4f548b35535467935
|
||||
CVE-2025-5577,0,0,862bbaad6dfd6bc3941b913aa0d44c2f574c2a1c00c138cbc3600dc62caa3a63,2025-06-04T18:28:13.103000
|
||||
CVE-2025-55777,0,0,acf30158407374a02b79b7145c629b7eee037d0c79cad4778f851c178e0350ba,2025-09-15T18:15:39.077000
|
||||
CVE-2025-5578,0,0,32e2b67e097a268e61a1363cf2f541533741f65d29219018b3efd0a9d82e02d7,2025-06-04T18:27:38.557000
|
||||
CVE-2025-55780,0,0,1bf074c1a14ab5fcdc7a028ec0b3e53fb5dcf12ffa0a975502e13bcd48ae7faa,2025-09-24T19:15:38.550000
|
||||
CVE-2025-55780,0,1,363ac2796d0ccfd7975afeacd64f6fd0b8ec6e25a169da007fbfdf953c8dfc53,2025-09-25T15:16:13.037000
|
||||
CVE-2025-5579,0,0,f50149d8544a2d773348b89ae7f885564e1c15d6fd801a8287e0be610055b816,2025-06-04T18:27:53.140000
|
||||
CVE-2025-5580,0,0,5420af4803342beed15a14e9e13364c54154082896c2011e3016de8bff3b1595,2025-06-04T17:43:09.830000
|
||||
CVE-2025-5581,0,0,c54747d4f47de2d53a0450ac3d2803f6b1ce7f3a8f3dd0d32c7ea29ca0ea8be0,2025-06-04T17:44:44.413000
|
||||
@@ -306774,7 +306798,7 @@ CVE-2025-5590,0,0,6716e39e14dca75da7b001f861b33c9910a40bed8e3e64e8d834c073ec799a
|
||||
CVE-2025-55904,0,0,9b20bd0d4dd990004635530186589ad51756fb5a3878e74dde199e9aa67e1015,2025-09-23T15:45:10.240000
|
||||
CVE-2025-55910,0,0,7273ce905ec06b8b5d5fb77039223304ff1aa1908f7d6bd33af6dc93b065b0cd,2025-09-22T21:23:01.543000
|
||||
CVE-2025-55911,0,0,d3c498f627ead16eee86639d5d7ba88d8a7df7494dd00909e0077f38a564d38f,2025-09-19T16:00:27.847000
|
||||
CVE-2025-55912,0,0,bd1b294f2ed59ee6cb31ba33cd1615b71711f3a28621003c950ef67f42b00335,2025-09-19T16:00:27.847000
|
||||
CVE-2025-55912,0,1,af1eac225f251827cc23c804c9416e4b1d5b538725b3f916e515dceb8419af04,2025-09-25T15:51:51.443000
|
||||
CVE-2025-5592,0,0,36c388f33c323490a93ebd79d5f124d5f4fdc10d946cc1144d6e587fb6694158,2025-06-09T15:02:45.030000
|
||||
CVE-2025-5593,0,0,6df395e5fe3476beb67761792da6574eda83b6d9a337db7d77d384194417b8ee,2025-06-13T01:00:11.693000
|
||||
CVE-2025-5594,0,0,83e7fdcfac2ba201d4fe551d7608819296af218dfeb5718bd91a2cdb5f7cbdd0,2025-06-13T00:58:21.617000
|
||||
@@ -307024,13 +307048,14 @@ CVE-2025-57295,0,0,3aadc6b6b0f217be622a90f358f63d046b8b60149ae6202390a506e67e07b
|
||||
CVE-2025-57296,0,0,f57a5df8b15262590a9eb35e41be5db4ed1145dc747aaa829d64d02f51ff648d,2025-09-22T21:23:01.543000
|
||||
CVE-2025-5730,0,0,d7cf0e46e5bf4b3cf9819e6569c27830cf201df4389a6e99a29cf7476a516726,2025-07-01T16:37:04.960000
|
||||
CVE-2025-5731,0,0,6fc15f5041ba39386d85d84b93f60844519d93387ca88053576a03c7fb91167d,2025-09-02T18:04:30.160000
|
||||
CVE-2025-57317,1,1,fe1c5e836b190b09a37993fbdb74e851bebafa54cdffbc396bdb7c97748815a4,2025-09-25T14:15:44.603000
|
||||
CVE-2025-57318,0,0,7ea9e11be660d7e2861d31cabf00d6a1f6ab7f8c0fedbdea2ca0978d0fbe43b0,2025-09-24T21:15:31.960000
|
||||
CVE-2025-57319,0,0,3e7221e09a254ba5109ccce98c92aecc7ee3f16fce3b72d37a69dffe4f520955,2025-09-24T21:15:32.083000
|
||||
CVE-2025-5732,0,0,e44c4abf488eb73f34cf4fc12053fa1034be5ba1cd633b45abb888bfd8cfede8,2025-06-10T14:58:00.633000
|
||||
CVE-2025-57320,0,0,86e885539a4ac441e27af32635fd89b881e8d921894cce31fdb905be7e185bd4,2025-09-24T21:15:32.207000
|
||||
CVE-2025-57321,0,0,972ed340268e38ded37c19fd965b9bf79d05629875e766d65d4a9d8a4e6c47ba,2025-09-24T20:15:31.867000
|
||||
CVE-2025-57323,0,0,f21732cc4530577dc8a65fd4eb2a75868b43567d006df1f9179d95f86d25953f,2025-09-24T21:15:32.327000
|
||||
CVE-2025-57324,0,0,e477a0a0d769bac1af05edd6f6791774352deeaa94357b358368558f1589421c,2025-09-24T21:15:32.493000
|
||||
CVE-2025-57324,0,1,d9f8e308e190db5d9caa5bb7a6b9aee2e1d0b7ca6772aa82b9b852f697dae0f2,2025-09-25T15:16:13.250000
|
||||
CVE-2025-57325,0,0,03d4c4ed981ff82081512a92ef8ad203784701f66dd60981bf6e944bac38ad64,2025-09-24T20:15:32.123000
|
||||
CVE-2025-57326,0,0,1525af52798fe3776f78629e114f087d038506b03923f211eb263ce8a38b1bce,2025-09-24T20:15:32.273000
|
||||
CVE-2025-57327,0,0,347c87113ea9f78bfb06907c1563604f2d892016233601bcdbade2fb6dda6c37,2025-09-24T20:15:32.410000
|
||||
@@ -308052,10 +308077,10 @@ CVE-2025-5917,0,0,1cf4d16122784ee2c88b26590ef2d87d49417429ba027cc72d8d32de4940c2
|
||||
CVE-2025-5918,0,0,a14225d037386282dc8701766fcface8292ce670b4c6fc562cc980c9b5e9f1c9,2025-08-15T18:35:04.390000
|
||||
CVE-2025-5920,0,0,3f88c3667885406165d1ae39a3379b564fa086388f88e17a8e52604b775465c3,2025-07-08T18:15:42.893000
|
||||
CVE-2025-5921,0,0,426dc73263941b8490014068112e2ea0e56e06c9ed8fa3ac72f0f197cf887957,2025-08-06T16:48:59.193000
|
||||
CVE-2025-59215,0,0,335409b5578159be5822ec191e30afbd6150a7c1bd68e8e7e0ef3bf9750a4a2c,2025-09-19T16:00:27.847000
|
||||
CVE-2025-59216,0,0,4e58c7aaf845e541fc341c24ec7822fd485d6e5c0ca6ede9a7fbfc98ec56a382,2025-09-19T16:00:27.847000
|
||||
CVE-2025-59215,0,1,6687c1691a6937978e066a17d60722d8b88d5cfc26b87afae1a97b5fce234350,2025-09-25T15:52:47.320000
|
||||
CVE-2025-59216,0,1,4380ea6a143632927c561aa39d9d3ce07640364f0c605774ae692464cad22c65,2025-09-25T15:53:03.740000
|
||||
CVE-2025-5922,0,0,6f9b7484ad131f02c7183df94bab3b69eda255b628b492f20b7c92228b0cb12f,2025-07-31T18:42:56.503000
|
||||
CVE-2025-59220,0,0,5a25c7b8ad1e0bd88aabe6df3111bf00c84036be6c972d23b50a70bdd250cb90,2025-09-19T16:00:27.847000
|
||||
CVE-2025-59220,0,1,d4aeb8690f64c8042b853c5f136806327614043d872c260577b842d28cb86c81,2025-09-25T15:53:26.307000
|
||||
CVE-2025-5923,0,0,bd32fa6b95a8f310c6b07918d04b1a4cdef7f962ecfa8c2518b68d11b4b0741e,2025-06-16T12:32:18.840000
|
||||
CVE-2025-5924,0,0,e5569afefc2dc17b32a552fbc140ea78dd0087634a8b357eb3997017a1b3e8ef,2025-07-10T15:13:40.917000
|
||||
CVE-2025-5925,0,0,74cb0f740f96269546a558716b8983e19baddafe2aff8e369ed86d426f629748,2025-06-12T16:06:39.330000
|
||||
@@ -308124,12 +308149,14 @@ CVE-2025-59413,0,0,f02dcbf84397c0f11bbe0449015a7bd612048949aac6750e4d2d0db054b40
|
||||
CVE-2025-59414,0,0,92d819ee372e5f275e6339c0faea93210cfde566c089a022161b72cee19f99fa,2025-09-18T13:43:34.310000
|
||||
CVE-2025-59415,0,0,e7c780a774982f6fc0aab75472d5e4f45a62d00aad3d988862ea44baa5b46fa3,2025-09-18T13:43:34.310000
|
||||
CVE-2025-59416,0,0,45c379fa01835c09e11baabda8e6c8dbe27dea0b3eab0b7f83c5c21a4611292f,2025-09-18T13:43:34.310000
|
||||
CVE-2025-59417,0,0,e4fbe2edfa6afebc95d39276a9fd9ea2a0fc0bd5292ebbd050963016be1af0e6,2025-09-19T17:15:52.510000
|
||||
CVE-2025-59417,0,1,c1dafcb30cde24c19d7a192f0951e8dbc5e5f4474688494318bd99fc10d65603,2025-09-25T15:32:15.280000
|
||||
CVE-2025-59418,0,0,4302f3678b6e34cab7bb2eca9e342b970b78211ea3a1dd2a2315b62e4c33bd5a,2025-09-22T21:22:33.590000
|
||||
CVE-2025-5942,0,0,9a67d84942bda0fcd3c617faafa154ffcc880f1119ecef24c537b5296a7050db,2025-08-14T13:11:53.633000
|
||||
CVE-2025-59420,0,0,a55ba03cbfbb3e96688854600cbf40fc75097ccda97d9f13c4547589003ce699,2025-09-22T21:22:33.590000
|
||||
CVE-2025-59421,0,0,06f8033ed00364ab2174cb9f00d79ee39eb91b94be08c069ed5c67de2c8c2fbe,2025-09-19T16:00:27.847000
|
||||
CVE-2025-59422,1,1,b71d17869c1f614b9da542e94a8c46744355293d07c01096a3d3845e486970ff,2025-09-25T14:15:45.677000
|
||||
CVE-2025-59424,0,0,e46084d599a1837d7c51e1c4f419804dff50eaff86a5a50a7d79afaa42a0536f,2025-09-19T16:00:27.847000
|
||||
CVE-2025-59426,1,1,c81b0b180a7ff612ed5b7156ce7beebcb94efb5115f00619bc38a37b8c5b8230,2025-09-25T15:16:13.433000
|
||||
CVE-2025-59427,0,0,3f98c566064c7cc542185b0f3d2d0c5d985a90de18d235f0f38b27e06fb961ef,2025-09-22T21:23:01.543000
|
||||
CVE-2025-5943,0,0,35b1a03e31f4997e71998954ee281c02ada0936b00fc64cfacb7aa84cfa29429,2025-06-12T16:06:29.520000
|
||||
CVE-2025-59430,0,0,2568765a4b3f4fcb3d14b6110ffa46fe589dac70bbe30dc3b21fb5f36eb79421,2025-09-22T21:22:16.313000
|
||||
@@ -308260,12 +308287,19 @@ CVE-2025-59813,0,0,8b3177a440b4052d8ba6a4b0435fc6cc2915aa429257ec7c38cceacb29b8f
|
||||
CVE-2025-5982,0,0,d8aaac7624ef6b343b1d273eb44a02d83df24595fbd6261248dc2f7645001779,2025-08-12T13:07:39.247000
|
||||
CVE-2025-59821,0,0,a40aac982f3f1a5b870a946a6d86e74be0047ed74f0c2d1b6df8cc853cb84c45,2025-09-24T18:11:24.520000
|
||||
CVE-2025-59822,0,0,deb1358c8d6410efad2d1da49bdd1798cf15411eec4f7b9f998908e95377099d,2025-09-24T18:11:24.520000
|
||||
CVE-2025-59823,1,1,4c3ef709e084e8be16b7376735ae076966157451a54f9026b5a568c5aaf189bb,2025-09-25T15:16:13.560000
|
||||
CVE-2025-59824,0,0,83d896528ac5f2f7b26a31fb24142cba16e5496fd5af61bb862b10bc9c8887cf,2025-09-24T20:15:33.343000
|
||||
CVE-2025-59825,0,0,d118f5d214b500baa3a5a589c3ec8ed48c806b3f023ae524a3d71268e3368273,2025-09-24T18:11:24.520000
|
||||
CVE-2025-59826,0,0,fba659dd5b65c5bec109497663435b1541708552be9270a40343ae64d486d0ba,2025-09-24T18:11:24.520000
|
||||
CVE-2025-59827,0,0,b3e9f446abbdccec0294b32e6f219efc9be78046b08770c3dbffff5f1a942c45,2025-09-24T21:15:32.613000
|
||||
CVE-2025-59828,0,0,1ec8dda814da51f0baa3fecfa7f0c1507c853f8699770d651bf3e302adbc4bb6,2025-09-24T20:15:33.527000
|
||||
CVE-2025-59830,1,1,36c08b887da99c78db2735caf24941f5a2d7c72647da82f66994258b720bcbd4,2025-09-25T15:16:13.780000
|
||||
CVE-2025-59831,1,1,a3c537e62e9db0903b8ea9b44dffa4e2d006905324614d06901a02863232bf4b,2025-09-25T15:16:13.973000
|
||||
CVE-2025-59832,1,1,a37b3101d35dc7f28210419056714b5ea17f9717f3fc7c6772e549a004a5e625,2025-09-25T15:16:14.100000
|
||||
CVE-2025-59833,0,0,3eb466152f2b0d7c8cadf92a9a77de53e9db3cc7da39c582c32d3498655f6052,2025-09-24T21:15:32.767000
|
||||
CVE-2025-59834,1,1,54141e8ce2104a050e33482fd0a8b1cd3b46e6cc318e1129a62829a62161247c,2025-09-25T15:16:14.277000
|
||||
CVE-2025-59838,1,1,917f845b8a392eab3ec8222eb3cca9270dfd6e71216e3ecd9d56b920afbf903e,2025-09-25T15:16:14.390000
|
||||
CVE-2025-59839,1,1,4e5b6363915a2c42b05c2fbe7492fccff015b8c18ee2058621ffa93baa3a9fe9,2025-09-25T15:16:14.560000
|
||||
CVE-2025-5984,0,0,9c065cc4f1bf71f29d217205fa1a3017b01589309492c87e21e29320e0443497,2025-06-17T20:34:36.177000
|
||||
CVE-2025-5985,0,0,6bc7c20833bbb87d89e08ff2c433a1431f6002ad9972fe39c1f3aa9dac9d18ca,2025-06-17T20:34:19.473000
|
||||
CVE-2025-5986,0,0,5cad509000c0831e557b68272b8d7dbc9b1f9f855a32309ac32da79f6d8d3b69,2025-07-02T16:07:00.620000
|
||||
@@ -311184,10 +311218,10 @@ CVE-2025-9542,0,0,7e06e2f884aa3127801e5947ec0fe0a0cb93227afc86ba971025d15ab22ed3
|
||||
CVE-2025-9556,0,0,d811849af7e6509162d508c174ddf69eac50a031a0e7ac87859c744e2fba2fa4,2025-09-15T15:21:42.937000
|
||||
CVE-2025-9565,0,0,e10691a66350f68294477bfad80a513e72bddae645c967f5140be3f2006c6a15,2025-09-17T14:18:55.093000
|
||||
CVE-2025-9566,0,0,03f356886c13c1847bc1a9785d1bc0f802b6b44b66189b7d245fd40c755eaedb,2025-09-23T22:15:34.537000
|
||||
CVE-2025-9567,0,0,1626199082f9830e86ea4dff624935bfbd1f48a94d548cfe534552f5e5ea61c7,2025-09-24T18:29:32.680000
|
||||
CVE-2025-9568,0,0,d7f02e05432204555cc054998d76244abab4f93ec20c8be32539b38d28366dc7,2025-09-24T18:29:42.523000
|
||||
CVE-2025-9569,0,0,1ccbf777ec1e59bd59d454307427c7f95a77ca15fa9cd5684883e2fb651f341c,2025-09-24T18:29:47.877000
|
||||
CVE-2025-9570,0,0,b4cfc187b9808bd4402af9b860ccfb8fc752d1478b6e53aed59a3aa3c60811a2,2025-09-23T20:49:17.047000
|
||||
CVE-2025-9567,0,1,8e645ebf39eb681428b67456f32d5bfbf9f1818546c9697ac8767386e40b2f08,2025-09-25T14:18:08.317000
|
||||
CVE-2025-9568,0,1,9ed41f8cd2d5be7c18f0db441311b59c18d886bd1931ade0989484532a33bddc,2025-09-25T14:18:31.453000
|
||||
CVE-2025-9569,0,1,61b0300024f5eb874d14b911391ad1034be29f5dd4dce90a91c275c8b6546222,2025-09-25T14:18:03.243000
|
||||
CVE-2025-9570,0,1,5969a8f8c1c463735483686d3a49d38237b507f2c3c7f58d83e249fb2da1007d,2025-09-25T14:18:25.953000
|
||||
CVE-2025-9573,0,0,fedc335bed5ccf349d9fdf82448b74c55258f9f18c904cc4fa42d9b22923d3f3,2025-09-02T15:55:25.420000
|
||||
CVE-2025-9575,0,0,c3772db5a4f852984d5a8070bef9f35cdb8d13c424825e12aacd600f600bcaa8,2025-09-04T18:32:04.087000
|
||||
CVE-2025-9576,0,0,ff3a4d8d7932d7c1d0806ff5a309e9d87d4ded596b514b326976c60eedf2d151,2025-09-09T19:13:21.963000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user