From b98ea6cbf4bfec9dc424e5a2265d4c98ca995eab Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Thu, 25 Sep 2025 16:03:55 +0000 Subject: [PATCH] Auto-Update: 2025-09-25T16:00:12.126570+00:00 --- CVE-2020/CVE-2020-368xx/CVE-2020-36851.json | 94 ++ CVE-2021/CVE-2021-473xx/CVE-2021-47376.json | 119 ++- CVE-2021/CVE-2021-473xx/CVE-2021-47381.json | 95 +- CVE-2021/CVE-2021-473xx/CVE-2021-47387.json | 165 ++- CVE-2021/CVE-2021-473xx/CVE-2021-47395.json | 180 +++- CVE-2021/CVE-2021-473xx/CVE-2021-47396.json | 129 ++- CVE-2021/CVE-2021-474xx/CVE-2021-47400.json | 124 ++- CVE-2021/CVE-2021-474xx/CVE-2021-47408.json | 106 +- CVE-2021/CVE-2021-474xx/CVE-2021-47410.json | 90 +- CVE-2021/CVE-2021-474xx/CVE-2021-47412.json | 101 +- CVE-2021/CVE-2021-474xx/CVE-2021-47434.json | 172 ++- CVE-2023/CVE-2023-248xx/CVE-2023-24836.json | 6 +- CVE-2023/CVE-2023-526xx/CVE-2023-52659.json | 114 +- CVE-2024/CVE-2024-104xx/CVE-2024-10438.json | 6 +- CVE-2024/CVE-2024-104xx/CVE-2024-10439.json | 6 +- CVE-2024/CVE-2024-104xx/CVE-2024-10440.json | 6 +- CVE-2025/CVE-2025-104xx/CVE-2025-10467.json | 56 + CVE-2025/CVE-2025-105xx/CVE-2025-10500.json | 56 +- CVE-2025/CVE-2025-105xx/CVE-2025-10501.json | 56 +- CVE-2025/CVE-2025-105xx/CVE-2025-10502.json | 56 +- CVE-2025/CVE-2025-105xx/CVE-2025-10540.json | 33 + CVE-2025/CVE-2025-105xx/CVE-2025-10541.json | 33 + CVE-2025/CVE-2025-105xx/CVE-2025-10542.json | 33 + CVE-2025/CVE-2025-108xx/CVE-2025-10890.json | 68 +- CVE-2025/CVE-2025-108xx/CVE-2025-10891.json | 56 +- CVE-2025/CVE-2025-108xx/CVE-2025-10892.json | 86 +- CVE-2025/CVE-2025-108xx/CVE-2025-10894.json | 14 +- CVE-2025/CVE-2025-109xx/CVE-2025-10947.json | 14 +- CVE-2025/CVE-2025-109xx/CVE-2025-10948.json | 149 +++ CVE-2025/CVE-2025-109xx/CVE-2025-10949.json | 141 +++ CVE-2025/CVE-2025-109xx/CVE-2025-10950.json | 141 +++ CVE-2025/CVE-2025-109xx/CVE-2025-10951.json | 137 +++ CVE-2025/CVE-2025-262xx/CVE-2025-26278.json | 25 + CVE-2025/CVE-2025-272xx/CVE-2025-27261.json | 78 ++ CVE-2025/CVE-2025-272xx/CVE-2025-27262.json | 78 ++ CVE-2025/CVE-2025-341xx/CVE-2025-34183.json | 20 +- CVE-2025/CVE-2025-341xx/CVE-2025-34184.json | 12 +- CVE-2025/CVE-2025-341xx/CVE-2025-34185.json | 12 +- CVE-2025/CVE-2025-341xx/CVE-2025-34186.json | 12 +- CVE-2025/CVE-2025-341xx/CVE-2025-34187.json | 79 +- CVE-2025/CVE-2025-361xx/CVE-2025-36139.json | 48 +- CVE-2025/CVE-2025-361xx/CVE-2025-36143.json | 48 +- CVE-2025/CVE-2025-361xx/CVE-2025-36146.json | 26 +- CVE-2025/CVE-2025-366xx/CVE-2025-36601.json | 56 + CVE-2025/CVE-2025-368xx/CVE-2025-36857.json | 56 + CVE-2025/CVE-2025-408xx/CVE-2025-40836.json | 78 ++ CVE-2025/CVE-2025-408xx/CVE-2025-40837.json | 78 ++ CVE-2025/CVE-2025-408xx/CVE-2025-40838.json | 78 ++ CVE-2025/CVE-2025-433xx/CVE-2025-43346.json | 12 +- CVE-2025/CVE-2025-461xx/CVE-2025-46148.json | 33 + CVE-2025/CVE-2025-461xx/CVE-2025-46149.json | 29 + CVE-2025/CVE-2025-461xx/CVE-2025-46150.json | 33 + CVE-2025/CVE-2025-461xx/CVE-2025-46152.json | 29 + CVE-2025/CVE-2025-461xx/CVE-2025-46153.json | 37 + CVE-2025/CVE-2025-473xx/CVE-2025-47329.json | 1037 ++++++++++++++++++- CVE-2025/CVE-2025-549xx/CVE-2025-54942.json | 49 +- CVE-2025/CVE-2025-549xx/CVE-2025-54943.json | 49 +- CVE-2025/CVE-2025-549xx/CVE-2025-54944.json | 49 +- CVE-2025/CVE-2025-549xx/CVE-2025-54945.json | 49 +- CVE-2025/CVE-2025-549xx/CVE-2025-54946.json | 49 +- CVE-2025/CVE-2025-54xx/CVE-2025-5494.json | 56 + CVE-2025/CVE-2025-555xx/CVE-2025-55551.json | 25 + CVE-2025/CVE-2025-557xx/CVE-2025-55780.json | 10 +- CVE-2025/CVE-2025-559xx/CVE-2025-55912.json | 44 +- CVE-2025/CVE-2025-573xx/CVE-2025-57317.json | 25 + CVE-2025/CVE-2025-573xx/CVE-2025-57324.json | 39 +- CVE-2025/CVE-2025-592xx/CVE-2025-59215.json | 33 +- CVE-2025/CVE-2025-592xx/CVE-2025-59216.json | 33 +- CVE-2025/CVE-2025-592xx/CVE-2025-59220.json | 69 +- CVE-2025/CVE-2025-594xx/CVE-2025-59417.json | 61 +- CVE-2025/CVE-2025-594xx/CVE-2025-59422.json | 82 ++ CVE-2025/CVE-2025-594xx/CVE-2025-59426.json | 68 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59823.json | 72 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59830.json | 64 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59831.json | 90 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59832.json | 60 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59834.json | 72 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59838.json | 82 ++ CVE-2025/CVE-2025-598xx/CVE-2025-59839.json | 72 ++ CVE-2025/CVE-2025-95xx/CVE-2025-9567.json | 6 +- CVE-2025/CVE-2025-95xx/CVE-2025-9568.json | 6 +- CVE-2025/CVE-2025-95xx/CVE-2025-9569.json | 6 +- CVE-2025/CVE-2025-95xx/CVE-2025-9570.json | 6 +- README.md | 75 +- _state.csv | 160 +-- 85 files changed, 5845 insertions(+), 352 deletions(-) create mode 100644 CVE-2020/CVE-2020-368xx/CVE-2020-36851.json create mode 100644 CVE-2025/CVE-2025-104xx/CVE-2025-10467.json create mode 100644 CVE-2025/CVE-2025-105xx/CVE-2025-10540.json create mode 100644 CVE-2025/CVE-2025-105xx/CVE-2025-10541.json create mode 100644 CVE-2025/CVE-2025-105xx/CVE-2025-10542.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10948.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10949.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10950.json create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10951.json create mode 100644 CVE-2025/CVE-2025-262xx/CVE-2025-26278.json create mode 100644 CVE-2025/CVE-2025-272xx/CVE-2025-27261.json create mode 100644 CVE-2025/CVE-2025-272xx/CVE-2025-27262.json create mode 100644 CVE-2025/CVE-2025-366xx/CVE-2025-36601.json create mode 100644 CVE-2025/CVE-2025-368xx/CVE-2025-36857.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40836.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40837.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40838.json create mode 100644 CVE-2025/CVE-2025-461xx/CVE-2025-46148.json create mode 100644 CVE-2025/CVE-2025-461xx/CVE-2025-46149.json create mode 100644 CVE-2025/CVE-2025-461xx/CVE-2025-46150.json create mode 100644 CVE-2025/CVE-2025-461xx/CVE-2025-46152.json create mode 100644 CVE-2025/CVE-2025-461xx/CVE-2025-46153.json create mode 100644 CVE-2025/CVE-2025-54xx/CVE-2025-5494.json create mode 100644 CVE-2025/CVE-2025-555xx/CVE-2025-55551.json create mode 100644 CVE-2025/CVE-2025-573xx/CVE-2025-57317.json create mode 100644 CVE-2025/CVE-2025-594xx/CVE-2025-59422.json create mode 100644 CVE-2025/CVE-2025-594xx/CVE-2025-59426.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59823.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59830.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59831.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59832.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59834.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59838.json create mode 100644 CVE-2025/CVE-2025-598xx/CVE-2025-59839.json diff --git a/CVE-2020/CVE-2020-368xx/CVE-2020-36851.json b/CVE-2020/CVE-2020-368xx/CVE-2020-36851.json new file mode 100644 index 00000000000..ff92da78800 --- /dev/null +++ b/CVE-2020/CVE-2020-368xx/CVE-2020-36851.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2020-36851", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-09-25T15:16:01.503", + "lastModified": "2025-09-25T15:16:01.503", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services, retrieve instance role credentials or other sensitive metadata, and interact with internal APIs and services that are not intended to be internet-facing. The vulnerability is exploitable by sending crafted requests to the proxy with the target resource encoded in the URL; many cors-anywhere deployments forward arbitrary methods and headers (including PUT), which can permit exploitation of IMDSv2 workflows as well as access to internal management APIs. Successful exploitation can result in theft of cloud credentials, unauthorized access to internal services, remote code execution or privilege escalation (depending on reachable backends), data exfiltration, and full compromise of cloud resources. Mitigation includes: restricting the proxy to trusted origins or authentication, whitelisting allowed target hosts, preventing access to link-local and internal IP ranges, removing support for unsafe HTTP methods/headers, enabling cloud provider mitigations, and deploying network-level protections." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.5, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "PRESENT", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + }, + { + "lang": "en", + "value": "CWE-942" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Rob--W/cors-anywhere/issues/152", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://github.com/Rob--W/cors-anywhere/issues/78", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.certik.com/resources/blog/cors-anywhere-dangers-of-misconfigured-third-party-software", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/rob-w-cors-anywhere-misconfigured-cors-proxy-allows-ssrf", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2021/CVE-2021-473xx/CVE-2021-47376.json b/CVE-2021/CVE-2021-473xx/CVE-2021-47376.json index 82e83abf383..338c671d101 100644 --- a/CVE-2021/CVE-2021-473xx/CVE-2021-47376.json +++ b/CVE-2021/CVE-2021-473xx/CVE-2021-47376.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47376", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:23.380", - "lastModified": "2024-11-21T06:36:01.090", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:50:04.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,136 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf: Agregar verificaci\u00f3n de tama\u00f1o excesivo antes de llamar a kvcalloc() Confirmaci\u00f3n 7661809d493b (\"mm: no permitir llamadas a kvmalloc() de gran tama\u00f1o\") agregar la verificaci\u00f3n de tama\u00f1o excesivo. Cuando la asignaci\u00f3n es mayor que lo que admite kmalloc(), se activa la siguiente advertencia: ADVERTENCIA: CPU: 0 PID: 8408 en mm/util.c:597 kvmalloc_node+0x108/0x110 mm/util.c:597 M\u00f3dulos vinculados en: CPU : 0 PID: 8408 Comm: syz-executor221 No contaminado 5.14.0-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:kvmalloc_node+0x108/0x110 mm/util .c:597 Seguimiento de llamadas: kvmalloc include/linux/mm.h:806 [en l\u00ednea] kvmalloc_array include/linux/mm.h:824 [en l\u00ednea] kvcalloc include/linux/mm.h:829 [en l\u00ednea] check_btf_line kernel/bpf /verifier.c:9925 [en l\u00ednea] check_btf_info kernel/bpf/verifier.c:10049 [en l\u00ednea] bpf_check+0xd634/0x150d0 kernel/bpf/verifier.c:13759 bpf_prog_load kernel/bpf/syscall.c:2301 [en l\u00ednea] __sys_bpf +0x11181/0x126e0 kernel/bpf/syscall.c:4587 __do_sys_bpf kernel/bpf/syscall.c:4691 [en l\u00ednea] __se_sys_bpf kernel/bpf/syscall.c:4689 [en l\u00ednea] __x64_sys_bpf+0x78/0x90 pf/syscall.c:4689 do_syscall_x64 arch/x86/entry/common.c:50 [en l\u00ednea] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 Entry_SYSCALL_64_after_hwframe+0x44/0xae" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.4.150", + "matchCriteriaId": "6699B466-6903-49FD-A062-EF1025F28A00" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.70", + "matchCriteriaId": "A2A50090-4483-4F44-9147-BF0B012FBF7E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.9", + "matchCriteriaId": "1B31D6C1-A751-438D-906B-0C56B789D498" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e6491b559704da720f6da09dd0a52c4df44c514", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6345a0bee80139ea00a341c4202ebfd1534b5eb0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/93937596e0652d50973f9dc944fea1694ac8cdfd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5fe7cdfee5901ce5513c30e554d51536e003bde", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/0e6491b559704da720f6da09dd0a52c4df44c514", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6345a0bee80139ea00a341c4202ebfd1534b5eb0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/93937596e0652d50973f9dc944fea1694ac8cdfd", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b5fe7cdfee5901ce5513c30e554d51536e003bde", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-473xx/CVE-2021-47381.json b/CVE-2021/CVE-2021-473xx/CVE-2021-47381.json index 96cf572637d..f1769d56b15 100644 --- a/CVE-2021/CVE-2021-473xx/CVE-2021-47381.json +++ b/CVE-2021/CVE-2021-473xx/CVE-2021-47381.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47381", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:23.733", - "lastModified": "2024-11-21T06:36:01.627", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:48:46.770", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,104 @@ "value": " En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: ASoC: SOF: corrige el contenido de salida del volcado de pila de DSP. Corrija el argumento @buf dado a hex_dump_to_buffer() y la direcci\u00f3n de pila utilizada en la salida de error de volcado." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-209" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "9642EBA1-9B61-4E0D-8039-D3BD9EC335D3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/a6bb576ead074ca6fa3b53cb1c5d4037a23de81b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac4dfccb96571ca03af7cac64b7a0b2952c97f3a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6bb576ead074ca6fa3b53cb1c5d4037a23de81b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac4dfccb96571ca03af7cac64b7a0b2952c97f3a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-473xx/CVE-2021-47387.json b/CVE-2021/CVE-2021-473xx/CVE-2021-47387.json index 03c427b7f6c..484d9fbb23d 100644 --- a/CVE-2021/CVE-2021-473xx/CVE-2021-47387.json +++ b/CVE-2021/CVE-2021-473xx/CVE-2021-47387.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47387", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:24.183", - "lastModified": "2024-11-21T06:36:02.443", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:38:17.343", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,63 +15,194 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpufreq: schedutil: utilice el m\u00e9todo kobject release() para liberar sugov_tunables. La estructura sugov_tunables est\u00e1 protegida por kobject, por lo que no podemos liberarla directamente. De lo contrario, obtendr\u00edamos un seguimiento de llamada como este: ODEBUG: activo libre (estado activo 0) tipo de objeto: timer_list sugerencia: delay_work_timer_fn+0x0/0x30 ADVERTENCIA: CPU: 3 PID: 720 en lib/debugobjects.c:505 debug_print_object+0xb8/ 0x100 M\u00f3dulos vinculados en: CPU: 3 PID: 720 Comm: a.sh Contaminado: GW 5.14.0-rc1-next-20210715-yocto-standard+ #507 Nombre del hardware: Placa Marvell OcteonTX CN96XX (DT) pstate: 40400009 (nZcv daif +PAN -UAO -TCO BTYPE=--) pc: debug_print_object+0xb8/0x100 lr: debug_print_object+0xb8/0x100 sp: ffff80001ecaf910 x29: ffff80001ecaf910 x28: ffff00011b10b8d0 x27: d80 x26: ffff00011a8f0000 x25: ffff800013cb3ff0 x24: 0000000000000000 x23: ffff80001142aa68 x22 : ffff800011043d80 x21: ffff00010de46f20 x20: ffff800013c0c520 x19: ffff800011d8f5b0 x18: 0000000000000010 x17: 6e6968207473696c x16: 656d6974203a x15: 6570797420746365 x14: 6a626f2029302065 x13: 303378302f307830 x12: 2b6e665f72656d69 x11: ffff8000124b1560 x10: 0012331520 x9: ffff8000100ca6b0 x8: 000000000017ffe8 x7: c0000000fffeffff x6: 0000000000000001 x5: ffff800011d8c000 x4: ffff800011d8c740 x3: 0000000000000000 x2: ffff0001108301c0 x1: ab3c90eedf9c0f00 x0: 0000000000000000 Rastreo de llamadas: xb8/0x100 __debug_check_no_obj_freed+0x1c0/0x230 debug_check_no_obj_freed+0x20/0x88 slab_free_freelist_hook+0x154/0x1c8 kfree+0x114/0x5d0 sugov_exit+0xbc/ 0xc0 cpufreq_exit_governor+0x44/0x90 cpufreq_set_policy+0x268/0x4a8 store_scaling_governor+0xe0/0x128 store+0xc0/0xf0 sysfs_kf_write+0x54/0x80 kernfs_fop_write_iter+0x128/0x1c0 nuevo _sync_write+0xf0/0x190 vfs_write+0x2d4/0x478 ksys_write+0x74/0x100 __arm64_sys_write+0x24/ 0x30 invoke_syscall.constprop.0+0x54/0xe0 do_el0_svc+0x64/0x158 el0_svc+0x2c/0xb0 el0t_64_sync_handler+0xb0/0xb8 el0t_64_sync+0x198/0x19c sello de evento irq: 5518 hardirqs habilitado por \u00faltima vez en ( 5517): [] consola_unlock+ 0x554/0x6c8 hardirqs deshabilitado por \u00faltima vez en (5518): [] el1_dbg+0x28/0xa0 softirqs habilitado por \u00faltima vez en (5504): [] __do_softirq+0x4d0/0x6c0 softirqs deshabilitado por \u00faltima vez en (5483): ff800010049548 >] irq_exit+0x1b0/0x1b8 Entonces divida el sugov_tunables_free() original en dos funciones, sugov_clear_global_tunables() solo se usa para borrar los global_tunables y el nuevo sugov_tunables_free() se usa como kobj_type::release para liberar los sugov_tunables de forma segura." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-763" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.7", + "versionEndExcluding": "4.9.285", + "matchCriteriaId": "71D61395-0228-4BB6-9B08-38F445F83B82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.249", + "matchCriteriaId": "9DFC8239-9F26-43B2-A340-8EFC6BC6BDA8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.209", + "matchCriteriaId": "21C23429-F802-4256-B3C2-9EEA76AC11FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.151", + "matchCriteriaId": "BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.71", + "matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/30d57cf2c4116ca6d34ecd1cac94ad84f8bc446c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/463c46705f321201090b69c4ad5da0cd2ce614c9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67c98e023135ff81b8d52998a6fdb8ca0c518d82", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d62aec52a8c5b1d25a2364b243fcc5098a2ede9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d4fc84404d45d72f4490417e8cc3efa4af93f1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb4a53ba37532c861a5f3f22803391018a41849a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5c6b312ce3cc97e90ea159446e6bfa06645364d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/30d57cf2c4116ca6d34ecd1cac94ad84f8bc446c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/463c46705f321201090b69c4ad5da0cd2ce614c9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/67c98e023135ff81b8d52998a6fdb8ca0c518d82", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8d62aec52a8c5b1d25a2364b243fcc5098a2ede9", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7d4fc84404d45d72f4490417e8cc3efa4af93f1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cb4a53ba37532c861a5f3f22803391018a41849a", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5c6b312ce3cc97e90ea159446e6bfa06645364d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-473xx/CVE-2021-47395.json b/CVE-2021/CVE-2021-473xx/CVE-2021-47395.json index 9789afef4b7..6494e1e5b71 100644 --- a/CVE-2021/CVE-2021-473xx/CVE-2021-47395.json +++ b/CVE-2021/CVE-2021-473xx/CVE-2021-47395.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47395", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:24.810", - "lastModified": "2024-11-21T06:36:03.423", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:36:57.800", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,63 +15,209 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mac80211: l\u00edmite inyectado de vht mcs/nss en ieee80211_parse_tx_radiotap. Limite los valores m\u00e1ximos para vht mcs y nss en la rutina ieee80211_parse_tx_radiotap para corregir la siguiente advertencia reportada por syzbot: ADVERTENCIA: CPU: 0 PID : 10717 en include/net/mac80211.h:989 ieee80211_rate_set_vht include/net/mac80211.h:989 [en l\u00ednea] ADVERTENCIA: CPU: 0 PID: 10717 en include/net/mac80211.h:989 ieee80211_parse_tx_radiotap+0x101e/0x12 d0 neto/ mac80211/tx.c:2244 M\u00f3dulos vinculados en: CPU: 0 PID: 10717 Comm: syz-executor.5 Not tainted 5.14.0-syzkaller #0 Nombre del hardware: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01 /2011 RIP: 0010:ieee80211_rate_set_vht include/net/mac80211.h:989 [en l\u00ednea] RIP: 0010:ieee80211_parse_tx_radiotap+0x101e/0x12d0 net/mac80211/tx.c:2244 RSP: 86f3e8 EFLAGS: 00010216 RAX: 0000000000000618 RBX: ffff88804ef76500 RCX: ffffc900143a5000 RDX: 0000000000040000 RSI: ffffffff888f478e RDI: 0000000000000003 RBP: 00000000ffffffff R08: 000 R09: 0000000000000100 R10: ffffffff888f46f9 R11: 0000000000000000 R12: 00000000ffffff8 R13: ffff88804ef7653c R14: 0000000000000001 R15: 0000000000000004 FS: 00007fbf5718f700(0000) GS:ffff8880b9c00000( 0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2de23000 CR3: 000000006a671000 CR4: 000000000015 06f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffe0ff0 DR7: 0000000000000600 ieee80211_monitor_select_queue+0xa6 /0x250 net/mac80211/iface.c:740 netdev_core_pick_tx+0x169/0x2e0 net/core/dev.c:4089 __dev_queue_xmit+0x6f9/0x3710 net/core/dev.c:4165 __bpf_tx_skb net/core/filter.c:2114 [ en l\u00ednea] __bpf_redirect_no_mac net/core/filter.c:2139 [en l\u00ednea] __bpf_redirect+0x5ba/0xd20 net/core/filter.c:2162 ____bpf_clone_redirect net/core/filter.c:2429 [en l\u00ednea] bpf_clone_redirect+0x2ae/0x420 net/core /filter.c:2401 bpf_prog_eeb6f53a69e5c6a2+0x59/0x234 bpf_dispatcher_nop_func include/linux/bpf.h:717 [en l\u00ednea] __bpf_prog_run include/linux/filter.h:624 [en l\u00ednea] bpf_prog_run include/linux/filter.h:631 [ en l\u00ednea] bpf_test_run+0x381/0xa30 net/bpf/test_run.c:119 bpf_prog_test_run_skb+0xb84/0x1ee0 net/bpf/test_run.c:663 bpf_prog_test_run kernel/bpf/syscall.c:3307 [en l\u00ednea] 5df0 n\u00facleo/bpf/ syscall.c:4605 __do_sys_bpf kernel/bpf/syscall.c:4691 [en l\u00ednea] __se_sys_bpf kernel/bpf/syscall.c:4689 [en l\u00ednea] __x64_sys_bpf+0x75/0xb0 kernel/bpf/syscall.c:4689 4 arco/x86/ entrada/common.c:50 [en l\u00ednea] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entrada_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x4665f9" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.7", + "versionEndExcluding": "4.9.285", + "matchCriteriaId": "71D61395-0228-4BB6-9B08-38F445F83B82" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.249", + "matchCriteriaId": "9DFC8239-9F26-43B2-A340-8EFC6BC6BDA8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.209", + "matchCriteriaId": "21C23429-F802-4256-B3C2-9EEA76AC11FF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.151", + "matchCriteriaId": "BFFC8E38-107A-4B6F-9FFD-9B2FD8B89EF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.71", + "matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1282bb00835ff79d2d9c023055d514df5b4de260", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13cb6d826e0ac0d144b0d48191ff1a111d32f0c6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/76538c7b4df314bb937e44c5cb1782f37d47443c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/997ee230e4f5285cd98445c102d9033c7ec4814b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab85997465b972d39d9747fc16311fa5773374b2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce5f372f5f084ff51c285fc27b232f15a3d00f0b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5bb852aa2ad963074f0ad73030dbc20a30853e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/1282bb00835ff79d2d9c023055d514df5b4de260", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/13cb6d826e0ac0d144b0d48191ff1a111d32f0c6", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/76538c7b4df314bb937e44c5cb1782f37d47443c", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/997ee230e4f5285cd98445c102d9033c7ec4814b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab85997465b972d39d9747fc16311fa5773374b2", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce5f372f5f084ff51c285fc27b232f15a3d00f0b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e5bb852aa2ad963074f0ad73030dbc20a30853e3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-473xx/CVE-2021-47396.json b/CVE-2021/CVE-2021-473xx/CVE-2021-47396.json index 3836a287616..1c9f6aaf59e 100644 --- a/CVE-2021/CVE-2021-473xx/CVE-2021-47396.json +++ b/CVE-2021/CVE-2021-473xx/CVE-2021-47396.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47396", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:24.920", - "lastModified": "2024-11-21T06:36:03.537", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:36:22.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,146 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: mac80211-hwsim: corrige el manejo tard\u00edo del hrtimer de baliza. Thomas explic\u00f3 en https://lore.kernel.org/r/87mtoeb4hb.ffs@tglx que nuestro manejo del hrtimer aqu\u00ed es incorrecto : Si el temporizador se activa tarde (por ejemplo, debido a la programaci\u00f3n de vCPU, seg\u00fan lo informado por Dmitry/syzbot), entonces intenta rearmar el temporizador en la pr\u00f3xima fecha l\u00edmite, que podr\u00eda haber sido ya en el pasado: 1 2 3 N N+1 | | | ... | | ^ intenci\u00f3n de disparar aqu\u00ed (1) ^ pr\u00f3xima fecha l\u00edmite aqu\u00ed (2) ^ realmente disparado aqu\u00ed La pr\u00f3xima vez que se active, ser\u00e1 m\u00e1s tarde, pero a\u00fan as\u00ed intentar\u00e1 programar la pr\u00f3xima fecha l\u00edmite (ahora 3), etc. hasta que se ponga al d\u00eda N, pero eso podr\u00eda llevar mucho tiempo, causando bloqueos, etc. Ahora, todo esto es simulaci\u00f3n, as\u00ed que solo tenemos que arreglarlo, pero tenga en cuenta que el comportamiento es incorrecto incluso seg\u00fan la especificaci\u00f3n, ya que no tiene ning\u00fan valor enviar todos esos balizas no alineadas: deben estar alineadas con el TBTT (1, 2, 3, ... en la imagen), y si llegamos un poco (o mucho) tarde, simplemente reanudemos en ese punto. Por lo tanto, cambie el c\u00f3digo para usar hrtimer_forward_now(), lo que garantizar\u00e1 que el siguiente disparo del temporizador sea en N+1 (en la imagen), es decir, el siguiente punto del intervalo despu\u00e9s de la hora actual." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.9", + "versionEndExcluding": "5.4.151", + "matchCriteriaId": "F5D7395A-83A7-4825-A32C-2C9C08BC5AB9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.71", + "matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2c204cf594df3b9468368dc9d0b24d482d93cda7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/313bbd1990b6ddfdaa7da098d0c56b098a833572", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bee85de2c8155388c09a2e1530a243ec1c96f05", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed2adf69e29848d1eb9df99633dde655421c92ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2c204cf594df3b9468368dc9d0b24d482d93cda7", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/313bbd1990b6ddfdaa7da098d0c56b098a833572", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9bee85de2c8155388c09a2e1530a243ec1c96f05", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed2adf69e29848d1eb9df99633dde655421c92ed", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-474xx/CVE-2021-47400.json b/CVE-2021/CVE-2021-474xx/CVE-2021-47400.json index 0b72eb5f5ee..f4b9d18fad4 100644 --- a/CVE-2021/CVE-2021-474xx/CVE-2021-47400.json +++ b/CVE-2021/CVE-2021-474xx/CVE-2021-47400.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47400", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:25.457", - "lastModified": "2024-11-21T06:36:03.997", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:35:04.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -39,38 +59,122 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0", + "versionEndExcluding": "5.4.151", + "matchCriteriaId": "B178BD06-0B91-4A7A-B7A1-D512D04B9C79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.71", + "matchCriteriaId": "60C740E4-6C54-40CD-A914-2232D8FC781D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3dac38bdce7932901b9f0b71c62331852c809e61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b09e88e1bf7fe86540fab4b5f3eece8abead39e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8ba689cb69523144d10606096ef686002dd7285", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3dac38bdce7932901b9f0b71c62331852c809e61", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5a31d4e73ada8022427b69b10fd1f01a6a8d4b3d", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b09e88e1bf7fe86540fab4b5f3eece8abead39e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8ba689cb69523144d10606096ef686002dd7285", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-474xx/CVE-2021-47408.json b/CVE-2021/CVE-2021-474xx/CVE-2021-47408.json index e3d942540a5..6ed8ebe4fe7 100644 --- a/CVE-2021/CVE-2021-474xx/CVE-2021-47408.json +++ b/CVE-2021/CVE-2021-474xx/CVE-2021-47408.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47408", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:26.337", - "lastModified": "2024-11-21T06:36:05.087", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:32:02.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -17,6 +17,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -39,30 +59,100 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.71", + "matchCriteriaId": "7A97507B-D1C6-49E3-9F7E-BFCDE3EA3905" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.10", + "matchCriteriaId": "1A437B0D-8305-4C72-B691-D26986A126CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/7ea6f5848281182ce0cff6cafdcf3fbdeb8ca7e1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e2d192301a0df8160d1555b66ae8611e8050e424", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9edc188fc76499b0b9bd60364084037f6d03773", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7ea6f5848281182ce0cff6cafdcf3fbdeb8ca7e1", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e2d192301a0df8160d1555b66ae8611e8050e424", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e9edc188fc76499b0b9bd60364084037f6d03773", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-474xx/CVE-2021-47410.json b/CVE-2021/CVE-2021-474xx/CVE-2021-47410.json index f868cab6c4d..eea87116ccc 100644 --- a/CVE-2021/CVE-2021-474xx/CVE-2021-47410.json +++ b/CVE-2021/CVE-2021-474xx/CVE-2021-47410.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47410", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:26.527", - "lastModified": "2024-11-21T06:36:05.360", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:30:01.593", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,99 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: drm/amdkfd: corrige la advertencia de svm_migrate_fini. El administrador de dispositivos libera recursos espec\u00edficos del dispositivo cuando un controlador se desconecta de un dispositivo, las llamadas a devm_memunmap_pages y devm_release_mem_region en svm_migrate_fini son redundantes. Provoca el siguiente seguimiento de advertencia despu\u00e9s del parche \"drm/amdgpu: dividir amdgpu_device_fini en temprano y tarde\", por lo tanto, elimine la funci\u00f3n svm_migrate_fini. ERROR: https://gitlab.freedesktop.org/drm/amd/-/issues/1718 ADVERTENCIA: CPU: 1 PID: 3646 en drivers/base/devres.c:795 devm_release_action+0x51/0x60 Seguimiento de llamadas:? memunmap_pages+0x360/0x360 svm_migrate_fini+0x2d/0x60 [amdgpu] kgd2kfd_device_exit+0x23/0xa0 [amdgpu] amdgpu_amdkfd_device_fini_sw+0x1d/0x30 [amdgpu_device_fini_sw+0x45/0 x290 [amdgpu] amdgpu_driver_release_kms+0x12/0x30 [amdgpu] drm_dev_release+0x20/0x40 [drm] release_nodes+0x196/0x1e0 device_release_driver_internal+0x104/0x1d0 driver_detach+0x47/0x90 bus_remove_driver+0x7a/0xd0 pci_unregister_driver+0x3d/0x90 amdgpu_exit+0x11/0x20 [amdgpu]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "5.14.11", + "matchCriteriaId": "8E0DFC85-98DB-49FC-9DE8-EEB84F72AE4E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/197ae17722e989942b36e33e044787877f158574", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac7d732b24f4061f8a732ada49b054ab38c63e15", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/197ae17722e989942b36e33e044787877f158574", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ac7d732b24f4061f8a732ada49b054ab38c63e15", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-474xx/CVE-2021-47412.json b/CVE-2021/CVE-2021-474xx/CVE-2021-47412.json index fb0122a1aa3..1deaccff465 100644 --- a/CVE-2021/CVE-2021-474xx/CVE-2021-47412.json +++ b/CVE-2021/CVE-2021-474xx/CVE-2021-47412.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47412", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-21T15:15:26.700", - "lastModified": "2025-08-28T15:15:36.777", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:27:14.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,112 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bloque: no llame a rq_qos_ops->done_bio si no se realiza un seguimiento de la biograf\u00eda. El framework rq_qos solo se aplica en el controlador basado en solicitudes, por lo que: 1) rq_qos_done_bio() no necesita hacerlo ser llamado para un controlador basado en biograf\u00eda 2) No es necesario llamar a rq_qos_done_bio() para una biograf\u00eda que no est\u00e1 rastreada, como una biograf\u00eda terminada por un c\u00f3digo de manejo de errores. Especialmente en bio_endio(): 1) la cola de solicitudes se remite a trav\u00e9s de bio->bi_bdev->bd_disk->queue, que puede desaparecer ya que el recuento de la cola de solicitudes no se puede mantener en los dos casos anteriores 2) q->rq_qos se puede liberar en blk_cleanup_queue() al llamar a __rq_qos_done_bio() Solucione el posible p\u00e1nico del kernel al no llamar a rq_qos_ops->done_bio si no se realiza un seguimiento de la biograf\u00eda. Esta forma es segura porque tanto ioc_rqos_done_bio() como blkcg_iolatency_done_bio() no funcionan si no se realiza un seguimiento de la biograf\u00eda." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.10.241", + "matchCriteriaId": "AC788FBF-3063-4B89-9406-EA698F0B9B1C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.11", + "matchCriteriaId": "9E845F47-DE3A-41CF-BB74-007A8AF3E47C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/004b8f8a691205a93d9e80d98b786b2b97424d6e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a647a524a46736786c95cdb553a070322ca096e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/db60edbfff332a6a5477c367af8125f034570989", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/004b8f8a691205a93d9e80d98b786b2b97424d6e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a647a524a46736786c95cdb553a070322ca096e3", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-474xx/CVE-2021-47434.json b/CVE-2021/CVE-2021-474xx/CVE-2021-47434.json index 10dce83ccaa..c2118c2558b 100644 --- a/CVE-2021/CVE-2021-474xx/CVE-2021-47434.json +++ b/CVE-2021/CVE-2021-474xx/CVE-2021-47434.json @@ -2,8 +2,8 @@ "id": "CVE-2021-47434", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-22T07:15:08.707", - "lastModified": "2024-11-21T06:36:08.147", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:58:00.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,55 +15,197 @@ "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: xhci: corrige la corrupci\u00f3n del puntero del anillo de comando al cancelar un comando. El puntero del anillo de comando est\u00e1 ubicado en los bits [6:63] del registro de control del anillo de comando (CRCR). Todos los bits de control, como el comando de parada y cancelaci\u00f3n, se encuentran en bits [0:3]. Mientras abortamos un comando, leemos el CRCR, configuramos el bit de cancelaci\u00f3n y escribimos en el CRCR. La lectura siempre dar\u00e1 un puntero de anillo de comando como todo ceros. B\u00e1sicamente, escribimos s\u00f3lo los bits de control. Dado que dividimos la escritura de 64 bits en dos escrituras de 32 bits, existe la posibilidad de que el anillo de comando xHC se detenga antes de que se escriba la palabra d superior (todo ceros). Si eso sucede, xHC actualiza la palabra clave superior de su puntero de anillo de comando interno con todo ceros. La pr\u00f3xima vez, cuando se reinicie el anillo de comando, veremos fallas de acceso a la memoria xHC. Solucione este problema escribiendo \u00fanicamente en la palabra clave inferior de CRCR donde se encuentran todos los bits de control." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.14.252", + "matchCriteriaId": "0D8A0F39-FBF8-4A67-BAF0-80CC2FB1765E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.213", + "matchCriteriaId": "674A3961-B6D4-4956-870E-AA63F9EA53CA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.155", + "matchCriteriaId": "80D76835-2D7B-4764-A145-011C8FF56E8F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.75", + "matchCriteriaId": "58849EA5-8425-4847-92D4-B1044AF6A5B8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.14.14", + "matchCriteriaId": "BF43A331-D430-4B9D-A612-E63C62AE4A86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E46C74C6-B76B-4C94-A6A4-FD2FFF62D644" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "60134C3A-06E4-48C1-B04F-2903732A4E56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "0460DA88-8FE1-46A2-9DDA-1F1ABA552E71" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "AF55383D-4DF2-45DC-93F7-571F4F978EAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "9E9481B2-8AA6-4CBD-B5D3-C10F51FF6D01" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/01c2dcb67e71c351006dd17cbba86c26b7f61eaf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22bcb65ea41072ab5d03c0c6290e04e0df6d09a0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62c182b5e763e5f4062e72678e72ce3e02dd4d1b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dec944bb7079b37968cf69c8a438f91f15c4cc61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e54abefe703ab7c4e5983e889babd1447738ca42", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff0e50d3564f33b7f4b35cadeabd951d66cfc570", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/01c2dcb67e71c351006dd17cbba86c26b7f61eaf", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22bcb65ea41072ab5d03c0c6290e04e0df6d09a0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/62c182b5e763e5f4062e72678e72ce3e02dd4d1b", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dec944bb7079b37968cf69c8a438f91f15c4cc61", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e54abefe703ab7c4e5983e889babd1447738ca42", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ff0e50d3564f33b7f4b35cadeabd951d66cfc570", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2023/CVE-2023-248xx/CVE-2023-24836.json b/CVE-2023/CVE-2023-248xx/CVE-2023-24836.json index 5788c2fd68f..3d18b02798d 100644 --- a/CVE-2023/CVE-2023-248xx/CVE-2023-24836.json +++ b/CVE-2023/CVE-2023-248xx/CVE-2023-24836.json @@ -2,7 +2,7 @@ "id": "CVE-2023-24836", "sourceIdentifier": "twcert@cert.org.tw", "published": "2023-04-27T02:15:09.243", - "lastModified": "2024-11-21T07:48:29.607", + "lastModified": "2025-09-25T14:13:08.880", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -56,8 +56,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:ctms:7.0_1227:*:*:*:*:*:*:*", - "matchCriteriaId": "DBEE2F92-DEE5-4BC6-A03F-AC5F3376FE85" + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:7.0_1227:*:*:*:*:*:*:*", + "matchCriteriaId": "42728C6D-7EA2-47FC-9E10-CA71EB2FD5D5" } ] } diff --git a/CVE-2023/CVE-2023-526xx/CVE-2023-52659.json b/CVE-2023/CVE-2023-526xx/CVE-2023-52659.json index c913c4af186..12d42bc5ada 100644 --- a/CVE-2023/CVE-2023-526xx/CVE-2023-52659.json +++ b/CVE-2023/CVE-2023-526xx/CVE-2023-52659.json @@ -2,8 +2,8 @@ "id": "CVE-2023-52659", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-05-17T13:15:57.677", - "lastModified": "2024-11-21T08:40:18.277", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:54:17.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/mm: garantiza que la entrada a pfn_to_kaddr() se trate como un tipo de 64 bits. En plataformas de 64 bits, la macro pfn_to_kaddr() requiere que el valor de entrada sea de 64 bits en para garantizar que los bits de direcci\u00f3n v\u00e1lidos no se pierdan al cambiar esa entrada mediante PAGE_SHIFT para calcular la direcci\u00f3n f\u00edsica para la que proporcionar una direcci\u00f3n virtual. Un ejemplo de ello es pvalidate_pages() (utilizado por invitados SEV-SNP), donde el GFN en la estructura utilizada para las solicitudes de cambio de estado de p\u00e1gina es un campo de bits de 40 bits, por lo que se intenta pasar este campo GFN directamente a pfn_to_kaddr( ) termina causando fallas en los invitados cuando se trata de direcciones por encima del rango de 1 TB debido a lo anterior. Solucione este problema con los invitados SEV-SNP, as\u00ed como cualquier caso similar que pueda causar problemas en el c\u00f3digo actual/futuro, utilizando una funci\u00f3n en l\u00ednea, en lugar de una macro, de modo que la entrada se convierta impl\u00edcitamente a la entrada esperada de 64 bits. tipo antes de realizar la operaci\u00f3n de cambio. Si bien se podr\u00eda argumentar que el problema est\u00e1 en el lado de la persona que llama, otros arcos/macros han adoptado enfoques similares para lidiar con casos como este, como ARM que env\u00eda expl\u00edcitamente la entrada a phys_addr_t: e48866647b48 (\"ARM: 8396/1: use phys_addr_t in pfn_to_kaddr()\") La funci\u00f3n en l\u00ednea AC es a\u00fan mejor. [mingo: refin\u00f3 un poco m\u00e1s el registro de cambios y agreg\u00f3 __always_inline. ]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.6.23", + "matchCriteriaId": "89C006B8-BD53-4D24-9E4A-3482F60C50EC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.7.11", + "matchCriteriaId": "9B95D3A6-E162-47D5-ABFC-F3FA74FA7CFD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.8", + "versionEndExcluding": "6.8.2", + "matchCriteriaId": "543A75FF-25B8-4046-A514-1EA8EDD87AB1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-104xx/CVE-2024-10438.json b/CVE-2024/CVE-2024-104xx/CVE-2024-10438.json index ccb025d59e9..89b4419fc01 100644 --- a/CVE-2024/CVE-2024-104xx/CVE-2024-10438.json +++ b/CVE-2024/CVE-2024-104xx/CVE-2024-10438.json @@ -2,7 +2,7 @@ "id": "CVE-2024-10438", "sourceIdentifier": "twcert@cert.org.tw", "published": "2024-10-28T03:15:02.423", - "lastModified": "2024-10-31T00:52:18.370", + "lastModified": "2025-09-25T14:13:08.880", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -80,9 +80,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.14", - "matchCriteriaId": "A786BFD6-9D10-4A78-8CCB-F9BE63987831" + "matchCriteriaId": "F4860D33-9942-415C-BC6F-07CD6F677511" } ] } diff --git a/CVE-2024/CVE-2024-104xx/CVE-2024-10439.json b/CVE-2024/CVE-2024-104xx/CVE-2024-10439.json index 588f93ddf31..61b49ae78a0 100644 --- a/CVE-2024/CVE-2024-104xx/CVE-2024-10439.json +++ b/CVE-2024/CVE-2024-104xx/CVE-2024-10439.json @@ -2,7 +2,7 @@ "id": "CVE-2024-10439", "sourceIdentifier": "twcert@cert.org.tw", "published": "2024-10-28T03:15:02.700", - "lastModified": "2024-10-31T00:35:36.173", + "lastModified": "2025-09-25T14:13:08.880", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -80,9 +80,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.8", - "matchCriteriaId": "CDDB3F05-6AA5-419B-814B-6BBB1B9CB18C" + "matchCriteriaId": "EFFD55D2-BDDF-4556-949D-2D503DD8C344" } ] } diff --git a/CVE-2024/CVE-2024-104xx/CVE-2024-10440.json b/CVE-2024/CVE-2024-104xx/CVE-2024-10440.json index 598668e7666..f7402903bf9 100644 --- a/CVE-2024/CVE-2024-104xx/CVE-2024-10440.json +++ b/CVE-2024/CVE-2024-104xx/CVE-2024-10440.json @@ -2,7 +2,7 @@ "id": "CVE-2024-10440", "sourceIdentifier": "twcert@cert.org.tw", "published": "2024-10-28T03:15:02.920", - "lastModified": "2024-10-31T00:34:23.870", + "lastModified": "2025-09-25T14:13:08.880", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -60,9 +60,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:ehdr_ctms:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0", - "matchCriteriaId": "292FB491-FB8E-4F39-8615-E29EFE59E248" + "matchCriteriaId": "D5ACFE67-A76A-448E-892A-667D0336827A" } ] } diff --git a/CVE-2025/CVE-2025-104xx/CVE-2025-10467.json b/CVE-2025/CVE-2025-104xx/CVE-2025-10467.json new file mode 100644 index 00000000000..f7ea4131722 --- /dev/null +++ b/CVE-2025/CVE-2025-104xx/CVE-2025-10467.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-10467", + "sourceIdentifier": "iletisim@usom.gov.tr", + "published": "2025-09-25T14:15:41.927", + "lastModified": "2025-09-25T14:15:41.927", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.This issue affects OBS (Student Affairs Information System): before v25.0401." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L", + "baseScore": 8.9, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.3, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "iletisim@usom.gov.tr", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://www.usom.gov.tr/bildirim/tr-25-0298", + "source": "iletisim@usom.gov.tr" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10500.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10500.json index b8d79285c5f..8fc09e927fb 100644 --- a/CVE-2025/CVE-2025-105xx/CVE-2025-10500.json +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10500.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10500", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:38.507", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:57:18.723", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.185", + "matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/435875050", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10501.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10501.json index 14f08337bb4..117856b8437 100644 --- a/CVE-2025/CVE-2025-105xx/CVE-2025-10501.json +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10501.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10501", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:39.100", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:57:08.893", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.185", + "matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/440737137", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10502.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10502.json index 9ca604dec16..24e1988cd3a 100644 --- a/CVE-2025/CVE-2025-105xx/CVE-2025-10502.json +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10502.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10502", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:39.287", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:56:56.943", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.185", + "matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/438038775", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10540.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10540.json new file mode 100644 index 00000000000..07550c3f075 --- /dev/null +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10540.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-10540", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-09-25T14:15:42.203", + "lastModified": "2025-09-25T14:15:42.203", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-319" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/imonitor", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10541.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10541.json new file mode 100644 index 00000000000..0eb2e17f903 --- /dev/null +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10541.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-10541", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-09-25T15:16:09.270", + "lastModified": "2025-09-25T15:16:09.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\\sysupdate\\ directory during startup. Because any local user can create and write to this directory, an attacker can place malicious DLLs or executables in it. Upon service restart, the files are moved to the application\u2019s installation path and executed with SYSTEM privileges, leading to privilege escalation." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/imonitor", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10542.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10542.json new file mode 100644 index 00000000000..7b9978279df --- /dev/null +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10542.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-10542", + "sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "published": "2025-09-25T15:16:09.487", + "lastModified": "2025-09-25T15:16:09.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client\u2019s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients." + } + ], + "metrics": {}, + "weaknesses": [ + { + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1392" + } + ] + } + ], + "references": [ + { + "url": "https://r.sec-consult.com/imonitor", + "source": "551230f0-3615-47bd-b7cc-93e92e730bbf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-108xx/CVE-2025-10890.json b/CVE-2025/CVE-2025-108xx/CVE-2025-10890.json index 8af13702e9f..b39ad01670f 100644 --- a/CVE-2025/CVE-2025-108xx/CVE-2025-10890.json +++ b/CVE-2025/CVE-2025-108xx/CVE-2025-10890.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10890", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:39.620", - "lastModified": "2025-09-24T18:15:33.490", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:56:42.057", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -46,6 +46,16 @@ } ] }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-203" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -57,14 +67,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.207", + "matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/430336833", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-108xx/CVE-2025-10891.json b/CVE-2025/CVE-2025-108xx/CVE-2025-10891.json index f1299467d24..3c56747998e 100644 --- a/CVE-2025/CVE-2025-108xx/CVE-2025-10891.json +++ b/CVE-2025/CVE-2025-108xx/CVE-2025-10891.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10891", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:39.753", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:55:54.730", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.207", + "matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/443765373", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-108xx/CVE-2025-10892.json b/CVE-2025/CVE-2025-108xx/CVE-2025-10892.json index cbdeb0a72ee..07be003fc53 100644 --- a/CVE-2025/CVE-2025-108xx/CVE-2025-10892.json +++ b/CVE-2025/CVE-2025-108xx/CVE-2025-10892.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10892", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-09-24T17:15:39.940", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:55:41.970", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -13,6 +13,26 @@ ], "metrics": { "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -45,16 +65,74 @@ "value": "CWE-472" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + } + ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.207", + "matchCriteriaId": "3D069E2A-50D9-4C05-9331-42D8534136B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] } ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/444048019", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-108xx/CVE-2025-10894.json b/CVE-2025/CVE-2025-108xx/CVE-2025-10894.json index e79ee0e2b33..db3ac1e313f 100644 --- a/CVE-2025/CVE-2025-108xx/CVE-2025-10894.json +++ b/CVE-2025/CVE-2025-108xx/CVE-2025-10894.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10894", "sourceIdentifier": "secalert@redhat.com", "published": "2025-09-24T22:15:35.423", - "lastModified": "2025-09-24T22:15:35.423", + "lastModified": "2025-09-25T14:15:42.370", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", @@ -38,7 +38,7 @@ "weaknesses": [ { "source": "secalert@redhat.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -71,6 +71,14 @@ { "url": "https://www.wiz.io/blog/s1ngularity-supply-chain-attack", "source": "secalert@redhat.com" + }, + { + "url": "https://github.com/nrwl/nx/security/advisories/GHSA-cxm3-wv7p-598c", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://www.stepsecurity.io/blog/supply-chain-security-alert-popular-nx-build-system-package-compromised-with-data-stealing-malware", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json index 7b711f3f2bc..6df3882d6cc 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10947.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10947", "sourceIdentifier": "cna@vuldb.com", "published": "2025-09-25T13:15:31.387", - "lastModified": "2025-09-25T13:15:31.387", + "lastModified": "2025-09-25T14:15:43.290", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,14 @@ { "url": "https://vuldb.com/?submit.652282", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main?tab=readme-ov-file#-proofs", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10948.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10948.json new file mode 100644 index 00000000000..ca78d0f5479 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10948.json @@ -0,0 +1,149 @@ +{ + "id": "CVE-2025-10948", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T14:15:43.460", + "lastModified": "2025-09-25T15:16:09.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", + "baseScore": 9.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 8.0, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + }, + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc#technical-proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325818", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325818", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.652387", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10949.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10949.json new file mode 100644 index 00000000000..ec069d09e3f --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10949.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10949", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T15:16:09.807", + "lastModified": "2025-09-25T15:16:09.807", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of the component Markdown Handler. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N", + "baseScore": 3.3, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "LOW", + "exploitabilityScore": 6.4, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/duckpigdog/CVE/blob/main/iView%20Editor%20XSS.docx", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325819", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325819", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.652402", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10950.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10950.json new file mode 100644 index 00000000000..7d924a971e3 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10950.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-10950", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T15:16:10.023", + "lastModified": "2025-09-25T15:16:10.023", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function log_handler of the file ml_logger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/geyang/ml-logger/issues/72", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325820", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325820", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.652461", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10951.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10951.json new file mode 100644 index 00000000000..6e4f31df950 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10951.json @@ -0,0 +1,137 @@ +{ + "id": "CVE-2025-10951", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-09-25T15:16:10.233", + "lastModified": "2025-09-25T15:16:10.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function log_handler of the file ml_logger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/geyang/ml-logger/issues/73", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.325821", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.325821", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.652462", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-262xx/CVE-2025-26278.json b/CVE-2025/CVE-2025-262xx/CVE-2025-26278.json new file mode 100644 index 00000000000..5a25f75e6fb --- /dev/null +++ b/CVE-2025/CVE-2025-262xx/CVE-2025-26278.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-26278", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T14:15:43.873", + "lastModified": "2025-09-25T14:15:43.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/tariqhawis/ad92d5e683f3a5d83e0629955ff42ad7", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-26278", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-272xx/CVE-2025-27261.json b/CVE-2025/CVE-2025-272xx/CVE-2025-27261.json new file mode 100644 index 00000000000..7e46dfff84f --- /dev/null +++ b/CVE-2025/CVE-2025-272xx/CVE-2025-27261.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-27261", + "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "published": "2025-09-25T14:15:44.240", + "lastModified": "2025-09-25T14:15:44.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ericsson\nIndoor Connect 8855 contains a SQL injection vulnerability\nwhich if exploited can lead to unauthorized disclosure and\nmodification of user and configuration data." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25", + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-272xx/CVE-2025-27262.json b/CVE-2025/CVE-2025-272xx/CVE-2025-27262.json new file mode 100644 index 00000000000..6407b97053c --- /dev/null +++ b/CVE-2025/CVE-2025-272xx/CVE-2025-27262.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-27262", + "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "published": "2025-09-25T15:16:10.737", + "lastModified": "2025-09-25T15:16:10.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ericsson\nIndoor Connect 8855 contains a command injection vulnerability which if\nexploited can lead to loss of integrity and confidentiality, as well as\nunauthorized disclosure and modification of user and configuration data. It\nmay also be possible to execute commands with escalated privileges, impact\nservice availability, as well as modify system files and configuration\ndata." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25", + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-341xx/CVE-2025-34183.json b/CVE-2025/CVE-2025-341xx/CVE-2025-34183.json index 4894996a568..3f96033cf98 100644 --- a/CVE-2025/CVE-2025-341xx/CVE-2025-34183.json +++ b/CVE-2025/CVE-2025-341xx/CVE-2025-34183.json @@ -2,7 +2,7 @@ "id": "CVE-2025-34183", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-09-16T20:15:34.287", - "lastModified": "2025-09-22T18:58:17.053", + "lastModified": "2025-09-25T14:56:22.493", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -101,9 +101,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "4.7.18.0.eden", - "matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3" + "criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.7.18.0", + "matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22" } ] }, @@ -113,8 +113,8 @@ "cpeMatch": [ { "vulnerable": false, - "criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*", - "matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D" + "criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6" } ] } @@ -149,8 +149,8 @@ "source": "disclosure@vulncheck.com", "tags": [ "Exploit", - "Third Party Advisory", - "Release Notes" + "Release Notes", + "Third Party Advisory" ] }, { @@ -158,8 +158,8 @@ "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": [ "Exploit", - "Third Party Advisory", - "Release Notes" + "Release Notes", + "Third Party Advisory" ] } ] diff --git a/CVE-2025/CVE-2025-341xx/CVE-2025-34184.json b/CVE-2025/CVE-2025-341xx/CVE-2025-34184.json index 0321e197693..88b6262ebfa 100644 --- a/CVE-2025/CVE-2025-341xx/CVE-2025-34184.json +++ b/CVE-2025/CVE-2025-341xx/CVE-2025-34184.json @@ -2,7 +2,7 @@ "id": "CVE-2025-34184", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-09-16T20:15:34.433", - "lastModified": "2025-09-24T15:58:04.650", + "lastModified": "2025-09-25T14:56:30.853", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -101,9 +101,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "4.7.18.0.eden", - "matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3" + "criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.7.18.0", + "matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22" } ] }, @@ -113,8 +113,8 @@ "cpeMatch": [ { "vulnerable": false, - "criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*", - "matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D" + "criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6" } ] } diff --git a/CVE-2025/CVE-2025-341xx/CVE-2025-34185.json b/CVE-2025/CVE-2025-341xx/CVE-2025-34185.json index 55f0227eb43..90f1e49261c 100644 --- a/CVE-2025/CVE-2025-341xx/CVE-2025-34185.json +++ b/CVE-2025/CVE-2025-341xx/CVE-2025-34185.json @@ -2,7 +2,7 @@ "id": "CVE-2025-34185", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-09-16T20:15:34.577", - "lastModified": "2025-09-24T16:14:03.060", + "lastModified": "2025-09-25T14:56:39.847", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -115,9 +115,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "4.7.18.0.eden", - "matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3" + "criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.7.18.0", + "matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22" } ] }, @@ -127,8 +127,8 @@ "cpeMatch": [ { "vulnerable": false, - "criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*", - "matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D" + "criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6" } ] } diff --git a/CVE-2025/CVE-2025-341xx/CVE-2025-34186.json b/CVE-2025/CVE-2025-341xx/CVE-2025-34186.json index ec1adf7c10c..80463087381 100644 --- a/CVE-2025/CVE-2025-341xx/CVE-2025-34186.json +++ b/CVE-2025/CVE-2025-341xx/CVE-2025-34186.json @@ -2,7 +2,7 @@ "id": "CVE-2025-34186", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-09-16T20:15:34.720", - "lastModified": "2025-09-24T16:22:03.347", + "lastModified": "2025-09-25T14:56:49.430", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -115,9 +115,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:o:ilevia:eve_x1_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "4.7.18.0.eden", - "matchCriteriaId": "1382145F-9250-46E7-8617-CE13CEF9FBC3" + "criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.7.18.0", + "matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22" } ] }, @@ -127,8 +127,8 @@ "cpeMatch": [ { "vulnerable": false, - "criteria": "cpe:2.3:h:ilevia:eve_x1:-:*:*:*:*:*:*:*", - "matchCriteriaId": "91DE9E31-8295-451B-8B06-C17BE83A9C2D" + "criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6" } ] } diff --git a/CVE-2025/CVE-2025-341xx/CVE-2025-34187.json b/CVE-2025/CVE-2025-341xx/CVE-2025-34187.json index d086199412c..2e77be756a4 100644 --- a/CVE-2025/CVE-2025-341xx/CVE-2025-34187.json +++ b/CVE-2025/CVE-2025-341xx/CVE-2025-34187.json @@ -2,8 +2,8 @@ "id": "CVE-2025-34187", "sourceIdentifier": "disclosure@vulncheck.com", "published": "2025-09-16T20:15:34.860", - "lastModified": "2025-09-17T14:18:55.093", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T14:51:36.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,22 +95,67 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "4.7.18.0", + "matchCriteriaId": "25D89BA5-1632-4243-BE68-D42803774A22" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72B4F8B5-4641-4371-8759-3AB18EC87FB6" + } + ] + } + ] + } + ], "references": [ { "url": "https://packetstorm.news/files/id/209226/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Permissions Required" + ] }, { "url": "https://www.ilevia.com/", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Product" + ] }, { "url": "https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.php", - "source": "disclosure@vulncheck.com" + "source": "disclosure@vulncheck.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36139.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36139.json index da7137139f2..8f2a4b7bca8 100644 --- a/CVE-2025/CVE-2025-361xx/CVE-2025-36139.json +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36139.json @@ -2,8 +2,8 @@ "id": "CVE-2025-36139", "sourceIdentifier": "psirt@us.ibm.com", "published": "2025-09-18T16:15:50.310", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:49:02.467", + "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "psirt@us.ibm.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.3, "impactScore": 2.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.7, + "impactScore": 2.7 } ] }, @@ -47,10 +67,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ibm:watsonx.data.:2.2:*:*:*:*:*:*:*", + "matchCriteriaId": "5CCDD16E-9E71-4DC8-A229-6F4F961B7FA3" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7245387", - "source": "psirt@us.ibm.com" + "source": "psirt@us.ibm.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36143.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36143.json index 41ac2f7daf9..d9eb39b7a07 100644 --- a/CVE-2025/CVE-2025-361xx/CVE-2025-36143.json +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36143.json @@ -2,8 +2,8 @@ "id": "CVE-2025-36143", "sourceIdentifier": "psirt@us.ibm.com", "published": "2025-09-18T16:15:50.493", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:50:10.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,7 +15,7 @@ "cvssMetricV31": [ { "source": "psirt@us.ibm.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 5.9 } ] }, @@ -47,10 +67,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ibm:watsonx.data:2.2:*:*:*:*:*:*:*", + "matchCriteriaId": "446704B5-8F3D-4608-A242-0FFA9E4E4297" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7245379", - "source": "psirt@us.ibm.com" + "source": "psirt@us.ibm.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36146.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36146.json index 3c424086c63..f80eea5bf9e 100644 --- a/CVE-2025/CVE-2025-361xx/CVE-2025-36146.json +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36146.json @@ -2,8 +2,8 @@ "id": "CVE-2025-36146", "sourceIdentifier": "psirt@us.ibm.com", "published": "2025-09-18T16:15:50.663", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:52:20.303", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:ibm:watsonx.data:2.2:*:*:*:*:*:*:*", + "matchCriteriaId": "446704B5-8F3D-4608-A242-0FFA9E4E4297" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.ibm.com/support/pages/node/7245384", - "source": "psirt@us.ibm.com" + "source": "psirt@us.ibm.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-366xx/CVE-2025-36601.json b/CVE-2025/CVE-2025-366xx/CVE-2025-36601.json new file mode 100644 index 00000000000..91443d15ab5 --- /dev/null +++ b/CVE-2025/CVE-2025-366xx/CVE-2025-36601.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36601", + "sourceIdentifier": "security_alert@emc.com", + "published": "2025-09-25T15:16:10.890", + "lastModified": "2025-09-25T15:16:10.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security_alert@emc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 4.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security_alert@emc.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-us/000353080/dsa-2025-272-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities", + "source": "security_alert@emc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-368xx/CVE-2025-36857.json b/CVE-2025/CVE-2025-368xx/CVE-2025-36857.json new file mode 100644 index 00000000000..d2a88770d94 --- /dev/null +++ b/CVE-2025/CVE-2025-368xx/CVE-2025-36857.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36857", + "sourceIdentifier": "cve@rapid7.com", + "published": "2025-09-25T15:16:11.060", + "lastModified": "2025-09-25T15:16:11.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, whereby an attacker can\u00a0place files in directories belonging to other users or projects. Affected versions allow standard users to add custom configuration files. These files, which are loaded in alphabetical order, can override or change the settings of the original configuration files, creating a security vulnerability. This issue stems from improper directory access management.\n\nThis vulnerability was remediated in version 7.5.021 of the product." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@rapid7.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@rapid7.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] + } + ], + "references": [ + { + "url": "https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider", + "source": "cve@rapid7.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40836.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40836.json new file mode 100644 index 00000000000..ef3b2efc9a9 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40836.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-40836", + "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "published": "2025-09-25T15:16:11.233", + "lastModified": "2025-09-25T15:16:11.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ericsson\nIndoor Connect 8855 contains an improper input validation vulnerability which if exploited can lead to loss of integrity and confidentiality, as well\nas unauthorized disclosure and modification of\n\n\n\nof user\nand configuration data. It may also be possible to execute commands with escalated privileges, impact\nservice availability, as well as modify system files and configuration\ndata." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25", + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40837.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40837.json new file mode 100644 index 00000000000..889e8baad25 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40837.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-40837", + "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "published": "2025-09-25T15:16:11.447", + "lastModified": "2025-09-25T15:16:11.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ericsson\nIndoor Connect 8855 contains a missing authorization vulnerability which if\nexploited can allow access to the system as a user with higher privileges than\nintended." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25", + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40838.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40838.json new file mode 100644 index 00000000000..e994be3a0e7 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40838.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-40838", + "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "published": "2025-09-25T15:16:11.587", + "lastModified": "2025-09-25T15:16:11.587", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Ericsson\nIndoor Connect 8855 contains a vulnerability where server-side security can be\nbypassed in the client which if exploited can lead to unauthorized disclosure\nof user accounts." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-522" + } + ] + } + ], + "references": [ + { + "url": "https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25", + "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43346.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43346.json index 69e6c666584..51b00f140db 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43346.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43346.json @@ -2,8 +2,8 @@ "id": "CVE-2025-43346", "sourceIdentifier": "product-security@apple.com", "published": "2025-09-15T23:15:36.837", - "lastModified": "2025-09-17T14:04:55.827", - "vulnStatus": "Analyzed", + "lastModified": "2025-09-25T15:16:11.717", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -18,19 +18,19 @@ "type": "Secondary", "cvssData": { "version": "3.1", - "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", - "baseScore": 6.2, + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", - "userInteraction": "NONE", + "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, - "exploitabilityScore": 2.5, + "exploitabilityScore": 1.8, "impactScore": 3.6 } ] diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46148.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46148.json new file mode 100644 index 00000000000..1e0430127c1 --- /dev/null +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46148.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-46148", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.007", + "lastModified": "2025-09-25T15:16:12.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/shaoyuyoung/65a587a579dfdff887b9b35bb79b9093", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/151198", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/pull/152993", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46149.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46149.json new file mode 100644 index 00000000000..bad6a20c6a2 --- /dev/null +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46149.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-46149", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.153", + "lastModified": "2025-09-25T15:16:12.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/147848", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/pull/147961", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46150.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46150.json new file mode 100644 index 00000000000..e1bae21f84d --- /dev/null +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46150.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-46150", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.303", + "lastModified": "2025-09-25T15:16:12.303", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/141538", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/141538#issuecomment-2537424658", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/pull/144395", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46152.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46152.json new file mode 100644 index 00000000000..fbc4be02adf --- /dev/null +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46152.json @@ -0,0 +1,29 @@ +{ + "id": "CVE-2025-46152", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.470", + "lastModified": "2025-09-25T15:16:12.470", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the \"other\" argument." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/143555", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/pull/143635", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46153.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46153.json new file mode 100644 index 00000000000..46fd445f970 --- /dev/null +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46153.json @@ -0,0 +1,37 @@ +{ + "id": "CVE-2025-46153", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.603", + "lastModified": "2025-09-25T15:16:12.603", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a", + "source": "cve@mitre.org" + }, + { + "url": "https://gist.github.com/shaoyuyoung/e636f2e7a306105b7e96809e2b85c28a", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/compare/v2.6.0...v2.7.0", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/142853", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/pull/143460", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-473xx/CVE-2025-47329.json b/CVE-2025/CVE-2025-473xx/CVE-2025-47329.json index 9f4945bcf6c..1cd2c404d0a 100644 --- a/CVE-2025/CVE-2025-473xx/CVE-2025-47329.json +++ b/CVE-2025/CVE-2025-473xx/CVE-2025-47329.json @@ -2,8 +2,8 @@ "id": "CVE-2025-47329", "sourceIdentifier": "product-security@qualcomm.com", "published": "2025-09-24T16:15:37.820", - "lastModified": "2025-09-24T18:11:24.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:58:55.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,1041 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:fastconnect_7800_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B3053D68-C5D8-4D47-A4F0-9F3AF2289E1D" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:fastconnect_7800:-:*:*:*:*:*:*:*", + "matchCriteriaId": "638DBC7F-456F-487D-BED2-2214DFF8BEE2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qam8255p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "3723C7B1-A7E2-401F-8D6D-189350F6BCA5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qam8255p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B12B89EF-7B12-481E-BCBC-F12B9D16321A" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qam8775p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "49B2DF91-BE6B-4E9E-B63C-98DADD29AD6B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qam8775p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "58170126-928F-4AE5-B5AF-5ED4710F9BA2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9B828AC8-4A01-4537-B2BD-8180C99F5C32" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*", + "matchCriteriaId": "66C16E1E-9D4A-4F20-B697-833FDCCA86FB" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "828CFB37-76A6-4927-9D00-AF9A1C432DD6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*", + "matchCriteriaId": "11405993-5903-4716-B452-370281034B42" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8374DDB3-D484-4141-AE0C-42333D2721F6" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "643EC76D-2836-48E6-81DA-78C4883C33CA" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*", + "matchCriteriaId": "477F6529-4CE1-44FC-B6EE-D24D44C71AE7" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "288F637F-22F8-47CF-B67F-C798A730A1BD" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D0996EA3-1C92-4933-BE34-9CF625E59FE7" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0AE207DB-9770-40ED-961D-FDA75965826F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0E23922D-C37F-476F-A623-4C1458A9156F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qcm6690_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "94571295-84F0-43D3-8CF8-ABF3FB977394" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qcm6690:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7EA7F79E-7657-4644-A8FD-A9655A25E175" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:qcs6690_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F8AD50C4-E725-48B8-8291-A62EF153D50A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:qcs6690:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4B5A7BC1-E4B1-486C-A433-D206A42A1356" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0514D433-162C-4680-8912-721D19BE6201" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C8648B38-2597-401A-8F53-D582FA911569" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A01CD59B-8F21-4CD6-8A1A-7B37547A8715" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "51BC0A66-493B-43BE-B51F-640BDF2FF32E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa8255p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "EC6E268D-C4AF-4950-9223-39EA36D538A8" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa8255p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "073C1A81-D02B-4F2F-9378-CD1B2DCE0E5B" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa8770p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "781CCC31-C08F-499B-BE73-6C7DB70437AF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa8770p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "75AFAA21-0589-4C6A-9418-34EE8A61BBAD" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa8775p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "1C79595B-1259-4431-96F9-C5A24E624305" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa8775p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0F2F3431-9CD7-4D4F-833D-DD4D3ACF94C7" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sa9000p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A024AB04-B213-4018-A4C1-FA467C7BA775" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sa9000p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2A8AB7C-5D34-4794-8C06-2193075B323F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:snapdragon_8_gen_3_mobile_platform_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0FAB6D60-1C03-4F85-B874-FF169402ED09" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:snapdragon_8_gen_3_mobile_platform:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C89A8D93-46DA-4547-A9F1-076FC0D5119D" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "53E5BBDA-C07D-42E2-9A34-EC1F6454CAA4" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0BB2408F-C768-4DD2-B834-B62E188D6CC2" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:snapdragon_ar1_gen_1_platform_\\\"luna1\\\"_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C1717CFD-91F8-4E9E-9635-7A99C7BB540F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:snapdragon_ar1_gen_1_platform_\\\"luna1\\\":-:*:*:*:*:*:*:*", + "matchCriteriaId": "6C85939F-869E-4228-B745-A29FD56B8A45" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0C455E7D-D256-4240-BE72-2A93273D685A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:snapdragon_w5\\+_gen_1_wearable_platform:-:*:*:*:*:*:*:*", + "matchCriteriaId": "423E21A1-8F52-46DA-9AC2-77159FEB6001" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sw5100_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AA1BF9BB-AF11-46A7-A71C-F7D289E76E3F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sw5100:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7B8455D6-287D-4934-8E4D-F4127A9C0449" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:sw5100p_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DB599A9F-0305-4FE4-8623-0F86630FEDCB" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:sw5100p:-:*:*:*:*:*:*:*", + "matchCriteriaId": "EEB883BF-68B2-4C25-84DC-5DA953BFAA2F" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "70292B01-617F-44AD-AF77-1AFC1450523D" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*", + "matchCriteriaId": "FA94C6D6-85DB-4031-AAF4-C399019AE16D" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "92B17201-8185-47F1-9720-5AB4ECD11B22" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E1FA2EB9-416F-4D69-8786-386CC73978AE" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcd9390_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "896F1C04-9957-440F-BF01-C3772CC3B3DF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcd9390:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A90555EB-47A7-4717-92D5-35B561825F06" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcd9395_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "699056F6-1517-4F25-AE07-4FFCF6923B9F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcd9395:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E4C023D2-6FF5-4FFC-B9F2-895979166580" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcn6450_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "1FAFC9FA-E6EF-44C5-BD50-2824C7711541" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcn6450:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6F895CDD-F9BB-45AD-AE60-71F4549114A4" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcn6755_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "2BC386D9-3D2B-40FA-A2D9-199BB138F46A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcn6755:-:*:*:*:*:*:*:*", + "matchCriteriaId": "133FFD9F-FA09-4801-939B-AD1D507BE5FE" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcn7861_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "57608D47-894C-4895-B4B3-4733D55D57DB" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcn7861:-:*:*:*:*:*:*:*", + "matchCriteriaId": "2FFD2C38-1A61-4BED-ABFA-DAE0C4B78620" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wcn7881_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D765C392-5F38-4E6A-9E88-59629E7A6911" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wcn7881:-:*:*:*:*:*:*:*", + "matchCriteriaId": "FAE8F4F9-F692-4EC0-A3FE-2CDD681DCBFD" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "11B69595-E488-4590-A150-CE5BE08B5E13" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8832_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "7ACAD26E-B79E-4659-91A5-D301281F7D36" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8832:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F0E46DA6-9494-4D92-A4AE-A272AF6ACCCC" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F80BC68E-7476-4A40-9F48-53722FE9A5BF" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*", + "matchCriteriaId": "6B36F4B2-BAA3-45AD-9967-0EB482C99708" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8840_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CA33DE15-C177-43B3-AD50-FF797753D12E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8840:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AE1A5841-5BCB-4033-ACB9-23F3FCA65309" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8845_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5B47BF35-3AA0-4667-842E-19B0FE30BF3C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8845:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8A071672-9405-4418-9141-35CEADBB65AF" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:qualcomm:wsa8845h_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BB7CF473-8B25-4851-91F2-1BD693CCDC85" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:qualcomm:wsa8845h:-:*:*:*:*:*:*:*", + "matchCriteriaId": "91E591F2-8F72-4A5A-9264-2742EB2DABDA" + } + ] + } + ] + } + ], "references": [ { "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/september-2025-bulletin.html", - "source": "product-security@qualcomm.com" + "source": "product-security@qualcomm.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54942.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54942.json index 0376eed8e7b..46d709367a0 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54942.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54942.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54942", "sourceIdentifier": "ART@zuso.ai", "published": "2025-08-30T04:15:49.407", - "lastModified": "2025-09-02T15:55:35.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T14:21:33.457", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.11", + "matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50" + } + ] + } + ] + } + ], "references": [ { "url": "https://zuso.ai/advisory/", - "source": "ART@zuso.ai" + "source": "ART@zuso.ai", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54943.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54943.json index ffb8287a047..3c14f63e649 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54943.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54943.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54943", "sourceIdentifier": "ART@zuso.ai", "published": "2025-08-30T04:15:52.697", - "lastModified": "2025-09-02T15:55:35.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T14:14:52.863", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.11", + "matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50" + } + ] + } + ] + } + ], "references": [ { "url": "https://zuso.ai/advisory/", - "source": "ART@zuso.ai" + "source": "ART@zuso.ai", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54944.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54944.json index 5df0aa54739..8c5f5b07dc4 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54944.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54944.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54944", "sourceIdentifier": "ART@zuso.ai", "published": "2025-08-30T04:15:56.073", - "lastModified": "2025-09-02T15:55:35.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T14:15:22.430", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.11", + "matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50" + } + ] + } + ] + } + ], "references": [ { "url": "https://zuso.ai/advisory/", - "source": "ART@zuso.ai" + "source": "ART@zuso.ai", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54945.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54945.json index b823da71b42..e984c72096e 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54945.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54945.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54945", "sourceIdentifier": "ART@zuso.ai", "published": "2025-08-30T04:15:57.540", - "lastModified": "2025-09-02T15:55:35.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T14:15:06.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.11", + "matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50" + } + ] + } + ] + } + ], "references": [ { "url": "https://zuso.ai/advisory/", - "source": "ART@zuso.ai" + "source": "ART@zuso.ai", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-549xx/CVE-2025-54946.json b/CVE-2025/CVE-2025-549xx/CVE-2025-54946.json index 04e1f0d2878..487165fc53f 100644 --- a/CVE-2025/CVE-2025-549xx/CVE-2025-54946.json +++ b/CVE-2025/CVE-2025-549xx/CVE-2025-54946.json @@ -2,8 +2,8 @@ "id": "CVE-2025-54946", "sourceIdentifier": "ART@zuso.ai", "published": "2025-08-30T04:15:57.823", - "lastModified": "2025-09-02T15:55:35.520", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T14:16:05.113", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,10 +91,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.11", + "matchCriteriaId": "2C206040-D197-4959-94F2-62F205237B50" + } + ] + } + ] + } + ], "references": [ { "url": "https://zuso.ai/advisory/", - "source": "ART@zuso.ai" + "source": "ART@zuso.ai", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-54xx/CVE-2025-5494.json b/CVE-2025/CVE-2025-54xx/CVE-2025-5494.json new file mode 100644 index 00000000000..86337f0f90a --- /dev/null +++ b/CVE-2025/CVE-2025-54xx/CVE-2025-5494.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-5494", + "sourceIdentifier": "0fc0942c-577d-436f-ae8e-945763c79b02", + "published": "2025-09-25T14:15:46.783", + "lastModified": "2025-09-25T14:15:46.783", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.\n\nThis issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "0fc0942c-577d-436f-ae8e-945763c79b02", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L", + "baseScore": 3.9, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.3, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "0fc0942c-577d-436f-ae8e-945763c79b02", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html", + "source": "0fc0942c-577d-436f-ae8e-945763c79b02" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-555xx/CVE-2025-55551.json b/CVE-2025/CVE-2025-555xx/CVE-2025-55551.json new file mode 100644 index 00000000000..864c98371dc --- /dev/null +++ b/CVE-2025/CVE-2025-555xx/CVE-2025-55551.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-55551", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T15:16:12.887", + "lastModified": "2025-09-25T15:16:12.887", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/shaoyuyoung/0e7d2a586297ae9c8ed14d8706749efc", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/pytorch/pytorch/issues/151401", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55780.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55780.json index dcf25a65fd8..6321ba1b981 100644 --- a/CVE-2025/CVE-2025-557xx/CVE-2025-55780.json +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55780.json @@ -2,7 +2,7 @@ "id": "CVE-2025-55780", "sourceIdentifier": "cve@mitre.org", "published": "2025-09-23T18:15:34.743", - "lastModified": "2025-09-24T19:15:38.550", + "lastModified": "2025-09-25T15:16:13.037", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -51,6 +51,14 @@ { "url": "https://bugs.ghostscript.com/show_bug.cgi?id=708720", "source": "cve@mitre.org" + }, + { + "url": "https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=bdd5d241748807378a78a622388e0312332513c5", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/ISH2YU/CVE-2025-55780/tree/main", + "source": "cve@mitre.org" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-559xx/CVE-2025-55912.json b/CVE-2025/CVE-2025-559xx/CVE-2025-55912.json index 4c9e1b39022..e95791538b3 100644 --- a/CVE-2025/CVE-2025-559xx/CVE-2025-55912.json +++ b/CVE-2025/CVE-2025-559xx/CVE-2025-55912.json @@ -2,8 +2,8 @@ "id": "CVE-2025-55912", "sourceIdentifier": "cve@mitre.org", "published": "2025-09-18T16:15:51.000", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:51:51.443", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,54 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oxygenz:clipbucket_v5:*:*:*:*:*:*:*:*", + "versionEndIncluding": "5.5.0", + "matchCriteriaId": "F6E74143-F46A-42D3-93F3-9BE607C96CB9" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/MacWarrior/clipbucket-v5/blob/5.5.0/upload/actions/photo_uploader.php", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/MacWarrior/clipbucket-v5/releases?page=2", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/MacWarrior/clipbucket-v5/tree/5.5.0", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Patch", + "Mitigation" + ] }, { "url": "https://medium.com/@mukund.s1337/cve-2025-55912-clipbucket-5-5-0-unauthenticated-arbitrary-file-upload-rce-720c0c0fbc58", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-573xx/CVE-2025-57317.json b/CVE-2025/CVE-2025-573xx/CVE-2025-57317.json new file mode 100644 index 00000000000..fd85dab032a --- /dev/null +++ b/CVE-2025/CVE-2025-573xx/CVE-2025-57317.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-57317", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-09-25T14:15:44.603", + "lastModified": "2025-09-25T14:15:44.603", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57317", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/apidoc-core%400.15.0/index.js", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-573xx/CVE-2025-57324.json b/CVE-2025/CVE-2025-573xx/CVE-2025-57324.json index 7862ef991d1..af556936c4c 100644 --- a/CVE-2025/CVE-2025-573xx/CVE-2025-57324.json +++ b/CVE-2025/CVE-2025-573xx/CVE-2025-57324.json @@ -2,7 +2,7 @@ "id": "CVE-2025-57324", "sourceIdentifier": "cve@mitre.org", "published": "2025-09-24T21:15:32.493", - "lastModified": "2025-09-24T21:15:32.493", + "lastModified": "2025-09-25T15:16:13.250", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "parse is a package designed to parse JavaScript SDK. A Prototype Pollution vulnerability in the SingleInstanceStateController.initializeState function of parse version 5.3.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1321" + } + ] + } + ], "references": [ { "url": "https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/parse%405.3.0/index.js", diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59215.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59215.json index 7232e5b5259..80f7ffe7b8c 100644 --- a/CVE-2025/CVE-2025-592xx/CVE-2025-59215.json +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59215.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59215", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-18T22:15:49.697", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:52:47.320", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59215", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59216.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59216.json index af20888fd22..246f1391f79 100644 --- a/CVE-2025/CVE-2025-592xx/CVE-2025-59216.json +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59216.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59216", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-18T22:15:49.867", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:53:03.740", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59216", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-592xx/CVE-2025-59220.json b/CVE-2025/CVE-2025-592xx/CVE-2025-59220.json index c9bdc230600..9e111051723 100644 --- a/CVE-2025/CVE-2025-592xx/CVE-2025-59220.json +++ b/CVE-2025/CVE-2025-592xx/CVE-2025-59220.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59220", "sourceIdentifier": "secure@microsoft.com", "published": "2025-09-18T22:15:50.037", - "lastModified": "2025-09-19T16:00:27.847", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-09-25T15:53:26.307", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,73 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19044.6332", + "matchCriteriaId": "7A6EFA39-1D7C-4663-A412-AA6802FB27E8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.19045.6332", + "matchCriteriaId": "45F6F341-FC2F-4629-8259-C5F8CC8E2EB3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22621.5909", + "matchCriteriaId": "86480500-CDA6-4F8F-9B8C-F3FC77B15F67" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.22631.5909", + "matchCriteriaId": "0A6C6080-3904-45F2-897E-F6583DB4A70A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "6E1B4513-36E7-4DCD-96B3-A56184D37C87" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.20348.4106", + "matchCriteriaId": "DFE7D988-2ABE-4833-AFEB-90926E10B8EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.25398.1849", + "matchCriteriaId": "986B3446-8F5A-4D4C-A240-7052ED135E5B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.0.26100.6508", + "matchCriteriaId": "B7DF196D-36BE-4A48-844E-E1D8405A9E1A" + } + ] + } + ] + } + ], "references": [ { "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59220", - "source": "secure@microsoft.com" + "source": "secure@microsoft.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json index 11b483bd4f3..a81bff48394 100644 --- a/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59417.json @@ -2,8 +2,8 @@ "id": "CVE-2025-59417", "sourceIdentifier": "security-advisories@github.com", "published": "2025-09-18T15:15:38.557", - "lastModified": "2025-09-19T17:15:52.510", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-09-25T15:32:15.280", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,18 +91,47 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.129.4", + "matchCriteriaId": "9B9636E7-8964-4516-9416-DB35F799A85C" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Vendor Advisory" + ] }, { "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59422.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59422.json new file mode 100644 index 00000000000..65b216a3e77 --- /dev/null +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59422.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-59422", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T14:15:45.677", + "lastModified": "2025-09-25T14:15:45.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversation_id=&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/langgenius/dify/commit/b2d8a7eaf1693841411934e2056042845ab4f354", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-594xx/CVE-2025-59426.json b/CVE-2025/CVE-2025-594xx/CVE-2025-59426.json new file mode 100644 index 00000000000..a3acdaebb2f --- /dev/null +++ b/CVE-2025/CVE-2025-594xx/CVE-2025-59426.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-59426", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T14:15:45.930", + "lastModified": "2025-09-25T15:16:13.433", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-* headers to the origin as-is, or where the origin trusts them without validation, an attacker can inject an arbitrary host and trigger an open redirect that sends users to a malicious domain. This issue has been patched in version 1.130.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-601" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lobehub/lobe-chat/blob/aa841a3879c30142720485182ad62aa0dbd74edc/src/app/(backend)/oidc/consent/route.ts#L113-L127", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/lobehub/lobe-chat/commit/70f52a3c1fadbd41a9db0e699d1e44d9965de445", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-xph5-278p-26qx", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-xph5-278p-26qx", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59823.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59823.json new file mode 100644 index 00000000000..5e08176a55e --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59823.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-59823", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T15:16:13.560", + "lastModified": "2025-09-25T15:16:13.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP providers prior to version 1.46.0. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This affects all Gardener installations where Terraformer is used/can be enabled for infrastructure provisioning with any of the affected components. This issue has been patched in Gardener Extensions for AWS providers version 1.64.0, Azure providers version 1.55.0, OpenStack providers version 1.49.0, and GCP providers version 1.46.0." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/gardener/gardener-extension-provider-aws/releases/tag/v1.64.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/gardener/gardener-extension-provider-aws/security/advisories/GHSA-227x-7mh8-3cf6", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/gardener/gardener-extension-provider-azure/releases/tag/v1.55.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/gardener/gardener-extension-provider-gcp/releases/tag/v1.46.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/gardener/gardener-extension-provider-openstack/releases/tag/v1.49.0", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59830.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59830.json new file mode 100644 index 00000000000..7732c9cbe74 --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59830.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-59830", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T15:16:13.780", + "lastModified": "2025-09-25T15:16:13.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its params_limit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters than intended. Applications or middleware that directly invoke Rack::QueryParser with its default configuration (no explicit delimiter) could be exposed to increased CPU and memory consumption. This can be abused as a limited denial-of-service vector. This issue has been patched in version 2.2.18." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + }, + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/rack/rack/commit/54e4ffdd5affebcb0c015cc6ae74635c0831ed71", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/rack/rack/security/advisories/GHSA-625h-95r8-8xpm", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59831.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59831.json new file mode 100644 index 00000000000..1cf2e7d5604 --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59831.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-59831", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T14:15:46.147", + "lastModified": "2025-09-25T15:16:13.973", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommiters(options, callback) which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not sanitize for user input or practice secure process execution API to separate commands from their arguments and as such, uncontrolled user input is concatenated into command execution. This issue has been patched in version 0.1.2." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + }, + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/snowyu/git-commiters.js/commit/7f0abfedbf506e3a61ac875d91324a8dbe756e84", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59832.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59832.json new file mode 100644 index 00000000000..60e8c11ece7 --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59832.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-59832", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T15:16:14.100", + "lastModified": "2025-09-25T15:16:14.100", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin\u2019s browser, exfiltrate the admin\u2019s cookies/CSRF token, and hijack their session. This issue has been patched in version 1.4.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", + "baseScore": 9.9, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.1, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Mmo-kali/CVE/blob/main/CVE-2025-59832/2025-08-Horilla_Vulnerability_1.pdf", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/horilla-opensource/horilla/security/advisories/GHSA-8x78-6q9g-hv2h", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59834.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59834.json new file mode 100644 index 00000000000..49c0efd5a7a --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59834.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-59834", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T14:15:46.357", + "lastModified": "2025-09-25T15:16:14.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. This issue has been patched via commit 041729c." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + }, + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59838.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59838.json new file mode 100644 index 00000000000..1f9f52daa26 --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59838.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-59838", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T15:16:14.390", + "lastModified": "2025-09-25T15:16:14.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Monkeytype is a minimalistic and customizable typing test. In versions 25.36.0 and prior, improper handling of user input when loading a saved custom text results in XSS. This issue has been patched via commit f025b12." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/monkeytypegame/monkeytype/commit/f025b121cbe437e29de432b4aa72e0de22c755b7", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/monkeytypegame/monkeytype/security/advisories/GHSA-j4xx-fww5-774w", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-598xx/CVE-2025-59839.json b/CVE-2025/CVE-2025-598xx/CVE-2025-59839.json new file mode 100644 index 00000000000..72b852f2f50 --- /dev/null +++ b/CVE-2025/CVE-2025-598xx/CVE-2025-59839.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-59839", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-09-25T14:15:46.570", + "lastModified": "2025-09-25T15:16:14.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for stored XSS through wikitext. This issue has been patched via commit 4e075d3." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/ext.embedVideo.videolink.js#L5-L20", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/modules/iframe.js#L139-L155", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/commit/4e075d3dc9a15a3ee53f449a684d5ab847e52f01", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-4j5h-mvj3-m48v", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/security/advisories/GHSA-4j5h-mvj3-m48v", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9567.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9567.json index aa799c1cb21..07a97c0c540 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9567.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9567.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9567", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-09-01T03:15:32.337", - "lastModified": "2025-09-24T18:29:32.680", + "lastModified": "2025-09-25T14:18:08.317", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -100,8 +100,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*", - "matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960" + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*", + "matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C" } ] } diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9568.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9568.json index 11eb8ec77e9..a4416bba21a 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9568.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9568.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9568", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-09-01T03:15:32.570", - "lastModified": "2025-09-24T18:29:42.523", + "lastModified": "2025-09-25T14:18:31.453", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -100,8 +100,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*", - "matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960" + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*", + "matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C" } ] } diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9569.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9569.json index 368fe2ea8db..f1240889545 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9569.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9569.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9569", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-09-01T03:15:32.767", - "lastModified": "2025-09-24T18:29:47.877", + "lastModified": "2025-09-25T14:18:03.243", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -100,8 +100,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*", - "matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960" + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*", + "matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C" } ] } diff --git a/CVE-2025/CVE-2025-95xx/CVE-2025-9570.json b/CVE-2025/CVE-2025-95xx/CVE-2025-9570.json index 389850e163a..934d67f9321 100644 --- a/CVE-2025/CVE-2025-95xx/CVE-2025-9570.json +++ b/CVE-2025/CVE-2025-95xx/CVE-2025-9570.json @@ -2,7 +2,7 @@ "id": "CVE-2025-9570", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-09-01T04:15:51.600", - "lastModified": "2025-09-23T20:49:17.047", + "lastModified": "2025-09-25T14:18:25.953", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ @@ -100,8 +100,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:sun.net:corporate_training_management_system:-:*:*:*:*:*:*:*", - "matchCriteriaId": "3FADCD5B-23AB-4D47-A93F-2D32A00BB960" + "criteria": "cpe:2.3:a:sun.net:ehrd_ctms:-:*:*:*:*:*:*:*", + "matchCriteriaId": "530A8AFE-E89B-43AB-B06D-5DFCBCF1572C" } ] } diff --git a/README.md b/README.md index f1c501f427c..8733673ef5c 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-09-25T14:00:11.535404+00:00 +2025-09-25T16:00:12.126570+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-09-25T13:50:04.687000+00:00 +2025-09-25T15:58:55.557000+00:00 ``` ### Last Data Feed Release @@ -33,34 +33,69 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -311505 +311539 ``` ### CVEs added in the last Commit -Recently added CVEs: `8` +Recently added CVEs: `34` -- [CVE-2025-10449](CVE-2025/CVE-2025-104xx/CVE-2025-10449.json) (`2025-09-25T13:15:30.590`) -- [CVE-2025-10943](CVE-2025/CVE-2025-109xx/CVE-2025-10943.json) (`2025-09-25T12:15:30.340`) -- [CVE-2025-10944](CVE-2025/CVE-2025-109xx/CVE-2025-10944.json) (`2025-09-25T13:15:30.800`) -- [CVE-2025-10945](CVE-2025/CVE-2025-109xx/CVE-2025-10945.json) (`2025-09-25T13:15:31.017`) -- [CVE-2025-10946](CVE-2025/CVE-2025-109xx/CVE-2025-10946.json) (`2025-09-25T13:15:31.200`) -- [CVE-2025-10947](CVE-2025/CVE-2025-109xx/CVE-2025-10947.json) (`2025-09-25T13:15:31.387`) -- [CVE-2025-10957](CVE-2025/CVE-2025-109xx/CVE-2025-10957.json) (`2025-09-25T12:15:30.577`) -- [CVE-2025-40698](CVE-2025/CVE-2025-406xx/CVE-2025-40698.json) (`2025-09-25T12:15:30.760`) +- [CVE-2025-26278](CVE-2025/CVE-2025-262xx/CVE-2025-26278.json) (`2025-09-25T14:15:43.873`) +- [CVE-2025-27261](CVE-2025/CVE-2025-272xx/CVE-2025-27261.json) (`2025-09-25T14:15:44.240`) +- [CVE-2025-27262](CVE-2025/CVE-2025-272xx/CVE-2025-27262.json) (`2025-09-25T15:16:10.737`) +- [CVE-2025-36601](CVE-2025/CVE-2025-366xx/CVE-2025-36601.json) (`2025-09-25T15:16:10.890`) +- [CVE-2025-36857](CVE-2025/CVE-2025-368xx/CVE-2025-36857.json) (`2025-09-25T15:16:11.060`) +- [CVE-2025-40836](CVE-2025/CVE-2025-408xx/CVE-2025-40836.json) (`2025-09-25T15:16:11.233`) +- [CVE-2025-40837](CVE-2025/CVE-2025-408xx/CVE-2025-40837.json) (`2025-09-25T15:16:11.447`) +- [CVE-2025-40838](CVE-2025/CVE-2025-408xx/CVE-2025-40838.json) (`2025-09-25T15:16:11.587`) +- [CVE-2025-46148](CVE-2025/CVE-2025-461xx/CVE-2025-46148.json) (`2025-09-25T15:16:12.007`) +- [CVE-2025-46149](CVE-2025/CVE-2025-461xx/CVE-2025-46149.json) (`2025-09-25T15:16:12.153`) +- [CVE-2025-46150](CVE-2025/CVE-2025-461xx/CVE-2025-46150.json) (`2025-09-25T15:16:12.303`) +- [CVE-2025-46152](CVE-2025/CVE-2025-461xx/CVE-2025-46152.json) (`2025-09-25T15:16:12.470`) +- [CVE-2025-46153](CVE-2025/CVE-2025-461xx/CVE-2025-46153.json) (`2025-09-25T15:16:12.603`) +- [CVE-2025-5494](CVE-2025/CVE-2025-54xx/CVE-2025-5494.json) (`2025-09-25T14:15:46.783`) +- [CVE-2025-55551](CVE-2025/CVE-2025-555xx/CVE-2025-55551.json) (`2025-09-25T15:16:12.887`) +- [CVE-2025-57317](CVE-2025/CVE-2025-573xx/CVE-2025-57317.json) (`2025-09-25T14:15:44.603`) +- [CVE-2025-59422](CVE-2025/CVE-2025-594xx/CVE-2025-59422.json) (`2025-09-25T14:15:45.677`) +- [CVE-2025-59426](CVE-2025/CVE-2025-594xx/CVE-2025-59426.json) (`2025-09-25T14:15:45.930`) +- [CVE-2025-59823](CVE-2025/CVE-2025-598xx/CVE-2025-59823.json) (`2025-09-25T15:16:13.560`) +- [CVE-2025-59830](CVE-2025/CVE-2025-598xx/CVE-2025-59830.json) (`2025-09-25T15:16:13.780`) +- [CVE-2025-59831](CVE-2025/CVE-2025-598xx/CVE-2025-59831.json) (`2025-09-25T14:15:46.147`) +- [CVE-2025-59832](CVE-2025/CVE-2025-598xx/CVE-2025-59832.json) (`2025-09-25T15:16:14.100`) +- [CVE-2025-59834](CVE-2025/CVE-2025-598xx/CVE-2025-59834.json) (`2025-09-25T14:15:46.357`) +- [CVE-2025-59838](CVE-2025/CVE-2025-598xx/CVE-2025-59838.json) (`2025-09-25T15:16:14.390`) +- [CVE-2025-59839](CVE-2025/CVE-2025-598xx/CVE-2025-59839.json) (`2025-09-25T14:15:46.570`) ### CVEs modified in the last Commit -Recently modified CVEs: `7` +Recently modified CVEs: `49` -- [CVE-2022-45690](CVE-2022/CVE-2022-456xx/CVE-2022-45690.json) (`2025-09-25T12:42:19.910`) -- [CVE-2024-53977](CVE-2024/CVE-2024-539xx/CVE-2024-53977.json) (`2025-09-25T13:39:30.720`) -- [CVE-2024-56883](CVE-2024/CVE-2024-568xx/CVE-2024-56883.json) (`2025-09-25T13:27:35.977`) -- [CVE-2025-10438](CVE-2025/CVE-2025-104xx/CVE-2025-10438.json) (`2025-09-25T12:15:29.053`) -- [CVE-2025-23359](CVE-2025/CVE-2025-233xx/CVE-2025-23359.json) (`2025-09-25T13:50:04.687`) -- [CVE-2025-25723](CVE-2025/CVE-2025-257xx/CVE-2025-25723.json) (`2025-09-25T13:27:40.590`) -- [CVE-2025-26794](CVE-2025/CVE-2025-267xx/CVE-2025-26794.json) (`2025-09-25T13:12:00.833`) +- [CVE-2025-34184](CVE-2025/CVE-2025-341xx/CVE-2025-34184.json) (`2025-09-25T14:56:30.853`) +- [CVE-2025-34185](CVE-2025/CVE-2025-341xx/CVE-2025-34185.json) (`2025-09-25T14:56:39.847`) +- [CVE-2025-34186](CVE-2025/CVE-2025-341xx/CVE-2025-34186.json) (`2025-09-25T14:56:49.430`) +- [CVE-2025-34187](CVE-2025/CVE-2025-341xx/CVE-2025-34187.json) (`2025-09-25T14:51:36.743`) +- [CVE-2025-36139](CVE-2025/CVE-2025-361xx/CVE-2025-36139.json) (`2025-09-25T15:49:02.467`) +- [CVE-2025-36143](CVE-2025/CVE-2025-361xx/CVE-2025-36143.json) (`2025-09-25T15:50:10.570`) +- [CVE-2025-36146](CVE-2025/CVE-2025-361xx/CVE-2025-36146.json) (`2025-09-25T15:52:20.303`) +- [CVE-2025-43346](CVE-2025/CVE-2025-433xx/CVE-2025-43346.json) (`2025-09-25T15:16:11.717`) +- [CVE-2025-47329](CVE-2025/CVE-2025-473xx/CVE-2025-47329.json) (`2025-09-25T15:58:55.557`) +- [CVE-2025-54942](CVE-2025/CVE-2025-549xx/CVE-2025-54942.json) (`2025-09-25T14:21:33.457`) +- [CVE-2025-54943](CVE-2025/CVE-2025-549xx/CVE-2025-54943.json) (`2025-09-25T14:14:52.863`) +- [CVE-2025-54944](CVE-2025/CVE-2025-549xx/CVE-2025-54944.json) (`2025-09-25T14:15:22.430`) +- [CVE-2025-54945](CVE-2025/CVE-2025-549xx/CVE-2025-54945.json) (`2025-09-25T14:15:06.757`) +- [CVE-2025-54946](CVE-2025/CVE-2025-549xx/CVE-2025-54946.json) (`2025-09-25T14:16:05.113`) +- [CVE-2025-55780](CVE-2025/CVE-2025-557xx/CVE-2025-55780.json) (`2025-09-25T15:16:13.037`) +- [CVE-2025-55912](CVE-2025/CVE-2025-559xx/CVE-2025-55912.json) (`2025-09-25T15:51:51.443`) +- [CVE-2025-57324](CVE-2025/CVE-2025-573xx/CVE-2025-57324.json) (`2025-09-25T15:16:13.250`) +- [CVE-2025-59215](CVE-2025/CVE-2025-592xx/CVE-2025-59215.json) (`2025-09-25T15:52:47.320`) +- [CVE-2025-59216](CVE-2025/CVE-2025-592xx/CVE-2025-59216.json) (`2025-09-25T15:53:03.740`) +- [CVE-2025-59220](CVE-2025/CVE-2025-592xx/CVE-2025-59220.json) (`2025-09-25T15:53:26.307`) +- [CVE-2025-59417](CVE-2025/CVE-2025-594xx/CVE-2025-59417.json) (`2025-09-25T15:32:15.280`) +- [CVE-2025-9567](CVE-2025/CVE-2025-95xx/CVE-2025-9567.json) (`2025-09-25T14:18:08.317`) +- [CVE-2025-9568](CVE-2025/CVE-2025-95xx/CVE-2025-9568.json) (`2025-09-25T14:18:31.453`) +- [CVE-2025-9569](CVE-2025/CVE-2025-95xx/CVE-2025-9569.json) (`2025-09-25T14:18:03.243`) +- [CVE-2025-9570](CVE-2025/CVE-2025-95xx/CVE-2025-9570.json) (`2025-09-25T14:18:25.953`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 41c80cd9d06..50880be49ab 100644 --- a/_state.csv +++ b/_state.csv @@ -159912,6 +159912,7 @@ CVE-2020-36848,0,0,e7777caea4a957d8c6addc4c693d548e0ef8e8d53a06ed462f0abe85c0007 CVE-2020-36849,0,0,d13b48e093ec6b2c441ef55df92f15ab856380f6cf8e4d10d7bfdd12664fed9b,2025-07-15T13:14:49.980000 CVE-2020-3685,0,0,ebc768dfe955ad0c52041c7e2608a91c2b5719c6059fc65a66fc055e90d4e6b0,2024-11-21T05:31:34.290000 CVE-2020-36850,0,0,989f346c403572d39693cf47a1a81eeb6efd9e67dc20ec40854ad97aabaf142a,2025-07-29T14:14:55.157000 +CVE-2020-36851,1,1,a5a7d2850a0b22d3f28c889c2dff20b6e97f1c1a7345adab6ba4dab3146b6e49,2025-09-25T15:16:01.503000 CVE-2020-3686,0,0,fed42ed77b3514bcd56d213454eba10c6543e81893514c48ebacb4355f05304f,2024-11-21T05:31:34.463000 CVE-2020-3687,0,0,4f5fc687e6ec97625652ba8cc878e5dcedb758a9b86899e8a0bd5d38bccb2613,2024-11-21T05:31:34.637000 CVE-2020-3688,0,0,7155463c2e1adade3e99c9eb3a8b2f9018619b146f279496aabde13c3c9bf8bd,2024-11-21T05:31:34.760000 @@ -187996,18 +187997,18 @@ CVE-2021-47372,0,0,0ce4f68d2ef5ee1532898222948501be7d3a88241a391a98a79a0bfd35d56 CVE-2021-47373,0,0,e8950542d9e9b736cb4f33eeb6e6f914784149ee2bc33f0cf40eac5de5491073,2024-12-26T17:57:35.547000 CVE-2021-47374,0,0,bdd28303c766e453ae27d387b954e03bc1f022c92553c76e9d93f191de6cbf0b,2025-05-12T19:52:58.193000 CVE-2021-47375,0,0,d5ff14c47ab87537b3b47f0550b2d236f13eefecf7b074b5b7cd598aa2e4229b,2025-04-02T14:53:06.550000 -CVE-2021-47376,0,0,e4e2e91a48ccc0e7be03f9d0eb65fe1705fa52f5bac1244bd9675e31930ce773,2024-11-21T06:36:01.090000 +CVE-2021-47376,0,1,21b4fe021000e33e0a38bf36a60c9b6b7def66f391bdd0b7b440e812065372da,2025-09-25T15:50:04.063000 CVE-2021-47377,0,0,cbaeb70b9806767a5a3a5aa11b89a836e7a242ea2c157a7c29d647c590b451c9,2024-05-28T19:15:08.857000 CVE-2021-47378,0,0,dc05947c255a80e62863251ff802457c95ce0fd546c22a5007bd657768fbf9a3,2025-04-02T14:52:37.450000 CVE-2021-47379,0,0,3af783699b681bcffb74a2660da0530399c3e52991b6855e838ae2f4f2a4a6f7,2024-12-23T20:47:30.867000 CVE-2021-47380,0,0,334d3b8b44718c38a1a24aa2305d3adcb569796b98de33e4074b5736ae175e69,2024-12-23T20:48:01.910000 -CVE-2021-47381,0,0,ea9581172c2cef8c9f5c61fde5035f577a718b0e4516fc363d9583f7adc1168e,2024-11-21T06:36:01.627000 +CVE-2021-47381,0,1,6d246b85ca46b02c0b7398294ddf957cb8715ba98820fa77416daf1b15733681,2025-09-25T15:48:46.770000 CVE-2021-47382,0,0,8bab4ab03bcce99a1b3027a4efeeeb53a848c9a61cc4386f322e0997042df3bf,2024-12-23T21:00:53.340000 CVE-2021-47383,0,0,141a9abfaf9f7ad900cc51da15af8d23f122a9f9a0018526a57216a7b18cef85,2025-09-23T20:14:35.603000 CVE-2021-47384,0,0,3a485c6e18d0b68b48ba35f28c64be82ac297bde8af43ac28a1d6c55bfe29808,2025-04-02T14:52:28.823000 CVE-2021-47385,0,0,c6a82e7a12e897338326b0272d766105a2467dab6588deae93331929ba6df3aa,2024-12-23T21:01:31.227000 CVE-2021-47386,0,0,3c5598c9639b0d6a6ac897c45b0dcec60da56498f6af27ffb38ee92c18e49d80,2025-04-02T14:52:22.973000 -CVE-2021-47387,0,0,f9abbc75a71e5f75679f53162608a51731e5b30a945f073035121479b6bfac5c,2024-11-21T06:36:02.443000 +CVE-2021-47387,0,1,005eeeb914c3030594d49ecc4bd1d9ac227f0f917f9b22ed26b3f47dd1c6225c,2025-09-25T15:38:17.343000 CVE-2021-47388,0,0,5a99c0375f375933a2ee3ed84e78b90361dbfbf675205e3e3fce5b62f99bd86e,2024-12-30T20:05:07.740000 CVE-2021-47389,0,0,676ee6fd9c8d0712dd14f8647af66f3d27425468ebf72afbe9de4bb119d5e6bf,2025-04-02T14:52:16.460000 CVE-2021-47390,0,0,76b23b24c5c2d0ae53e9c1096f39d0e46b517e03d31e39981405101939ea2a5e,2024-12-30T20:01:12.947000 @@ -188015,12 +188016,12 @@ CVE-2021-47391,0,0,dceb5027fe85dc40838f585206e7a99f16f0370243c62cf0d6112073994e8 CVE-2021-47392,0,0,d77e14c15146fdb51699956bd3b4d96c4d7458be2c75766e8a8430b167823013,2025-09-23T20:16:25.177000 CVE-2021-47393,0,0,cbff3809795eee26e4372313fd4343a242eeb9abc3aa9cc6f22100098305acfc,2025-09-23T20:17:04.563000 CVE-2021-47394,0,0,a08dc2185e6f8d265da9bc55ce98d4b694bcc929e8ed70483d7ed8ea583c1bb1,2025-02-03T16:11:30.727000 -CVE-2021-47395,0,0,bed9ae2678523feb920dc0ab8c1ea494e9fe309d996c61c0c7583d6b417dd2b9,2024-11-21T06:36:03.423000 -CVE-2021-47396,0,0,1218531809f9b22f861167391c7c6c53877c57c033a282e8dd14c3683c604cfb,2024-11-21T06:36:03.537000 +CVE-2021-47395,0,1,6248a304787d6dab0feb3d7716b9350ed767d8d7011799d90cf6dd4671b78cb8,2025-09-25T15:36:57.800000 +CVE-2021-47396,0,1,05743cbcf8131f84e0ea225e5fd070b2b9bc6f9fcfe9b99cc236751e8ee9dc09,2025-09-25T15:36:22.513000 CVE-2021-47397,0,0,15e7f502ba571f755e0489a5425995f66f3a94aa55ff9302b96f3500e4220711,2024-12-24T16:06:56.063000 CVE-2021-47398,0,0,a5e2933d4721fdc9cb7b2fa369b9429444a2f9870deeb64a583ecbd002093c00,2025-09-19T14:28:59.223000 CVE-2021-47399,0,0,c94f1ef0340f44c1b19ac5f27a7318803b709fd2ae8159cca95350b02a34346d,2024-12-24T16:06:15.200000 -CVE-2021-47400,0,0,dac63ab253e754c2b35510166f57e6916cfba5dfd95e7f078149171e94273e9f,2024-11-21T06:36:03.997000 +CVE-2021-47400,0,1,ff801754110a68ead7099872a221230baccbc9458ca2874f45ad57962126971c,2025-09-25T15:35:04.500000 CVE-2021-47401,0,0,d12dbc8d376d3440078cac2b1efbe8a3925e554b79c64e70e90f324a27e64c5f,2025-09-19T14:32:36.823000 CVE-2021-47402,0,0,df6182da0586e70f043313304e97f2a74ab78a0abb8ffc0780d924ab695e6504,2025-01-14T17:29:04.687000 CVE-2021-47403,0,0,44dc7099881136c9adbdcf2f396256320a98706f22d1228e149180cb19b872df,2025-04-02T14:52:09.830000 @@ -188028,11 +188029,11 @@ CVE-2021-47404,0,0,b4a6c4984c318e0b5f084184228def57d269d3a8a4195164e12844a9b471a CVE-2021-47405,0,0,1cdbd44c13d2f8232fde2c8c485c2b6990b3a78ee79f2bb0f3bce11552afaaa0,2025-02-03T16:11:50.860000 CVE-2021-47406,0,0,7be0a97ea86c4cc76a2f429cc1e35b4ed64b17516994c738b226292e891ca623,2025-04-02T14:51:38.020000 CVE-2021-47407,0,0,c3e42b88722d38355ac9676d8e92d5b8c69e4083755f86cee921fb0904e5d57f,2025-03-04T16:47:54.193000 -CVE-2021-47408,0,0,1bb9de9f9fb0c138f101bdd077c488720764253896933e9ddd90af986223f012,2024-11-21T06:36:05.087000 +CVE-2021-47408,0,1,cc9fd698d2869974981eca139500b4183d1faf877ba2cdd21b3e0fc1f8fb68f0,2025-09-25T15:32:02.877000 CVE-2021-47409,0,0,4409848935610c806a916f78420b16db2a2ab2efcb7ac8dd99c83d5249f8b960,2024-12-30T20:00:41.677000 -CVE-2021-47410,0,0,4075c00f9d5ffd89b59e95e73a9e5fa86e05d5bb14ffa8d2023787fcb8cce122,2024-11-21T06:36:05.360000 +CVE-2021-47410,0,1,4e38541580393ff01ea3fc6dea37fdfaa8bf9dc934e0ca5620ff77960dd5e969,2025-09-25T15:30:01.593000 CVE-2021-47411,0,0,d0414849cfb396e83266669cd4701dbb6a1022ea5a51c35023bb94eb4cfc8a37,2024-05-25T14:15:50.770000 -CVE-2021-47412,0,0,491f067141d50bdbacb51160ce4563d646318e50fe05755c4e555b2afab4e6fb,2025-08-28T15:15:36.777000 +CVE-2021-47412,0,1,31018b0e827701879091256562a82f10fb82d65d086bc179b71025312f17d2f2,2025-09-25T15:27:14.790000 CVE-2021-47413,0,0,269d04830df035e17e52fb59428cdae6c99bbe3c5236fc44bbeb5952e9d53939,2024-12-30T20:00:33.497000 CVE-2021-47414,0,0,a83b6ed138679e0a43562ce58d15e7d1f7e5382db9d90a7386573fd9d8fa4042,2024-11-21T06:36:05.703000 CVE-2021-47415,0,0,8de0f983558918b457e68f423e69956d3f931f2fec09c7ffbcdf46078d9be9bb,2024-12-31T18:51:37.767000 @@ -188054,7 +188055,7 @@ CVE-2021-47430,0,0,db1b39de9ef90e4e0a805197f54270c3cd47ec0b970b774ab1c6a2bede3a1 CVE-2021-47431,0,0,6b0b589b520a3fb5ec393e476fb3e98fdf6c14c18de7ff8ba74fda90e7b6a6aa,2025-09-23T20:25:23.837000 CVE-2021-47432,0,0,7b0f86bae526144577bb7cded9fbc968abecfc546c0a213f07dd10bc578a932b,2025-04-02T14:51:30.763000 CVE-2021-47433,0,0,4665d69408034a8f61f2f7a3ef27a521461a82b8fc95da599554878d40570716,2024-11-21T06:36:08.040000 -CVE-2021-47434,0,0,5d889b13cb9c4b665236a8505baf9fc1a75a9299c3e831d6b6d287c793912fec,2024-11-21T06:36:08.147000 +CVE-2021-47434,0,1,a9ed18014dd2d7dd8a96de5c3b4be36e02d23294c72862ac17577e040efc8de9,2025-09-25T15:58:00.120000 CVE-2021-47435,0,0,15cd1ff840c477f998041450b016486f8abce38dab583041ac04502b3bdd0a58,2025-01-31T15:16:51.193000 CVE-2021-47436,0,0,ded6bc2cc7652a6e41c8d7e1729468d2b1cf50eb1a9a046140b177f45fb3b9b8,2025-03-01T02:38:25.597000 CVE-2021-47437,0,0,4b84844b5d0afa1aee4eb9cd8d91132cc86915fa767cebe46028421178083be8,2025-01-10T18:15:20.720000 @@ -211294,7 +211295,7 @@ CVE-2022-45685,0,0,df0f53d28103ac6a23f08aa6415a74ad54ee3f1117f84c062447701fdadad CVE-2022-45688,0,0,8f721417b1a5edb5051d55b53c132f0ba61c4b685d741b4af4debc3e44e958b4,2025-09-19T18:54:20.100000 CVE-2022-45689,0,0,870ab60a5c6ea98825b9fbdd39954a2b15960e07d0b89207657712821345ec89,2025-04-22T15:16:04.870000 CVE-2022-4569,0,0,4a2599063fefb513ab23f360a9f2529d620d0c97fa1dc35085c7a5a3cf63116b,2024-11-21T07:35:30.753000 -CVE-2022-45690,0,1,b7a61d03ad45745a37ea7157467b9aee57b35331b5054629752dc5e0e46bb8db,2025-09-25T12:42:19.910000 +CVE-2022-45690,0,0,b7a61d03ad45745a37ea7157467b9aee57b35331b5054629752dc5e0e46bb8db,2025-09-25T12:42:19.910000 CVE-2022-45693,0,0,16e0fdae126746a476c4d8896dad9274b38ecbc704e8591fb4b8e1894c95050a,2025-04-22T15:16:05.277000 CVE-2022-45697,0,0,34e5f81a9d7d780bc32c7f8e99772f6393c876c7e4c870d659e3da43d3fa8093,2024-11-21T07:29:36.173000 CVE-2022-45699,0,0,0f78ff7cfdaa963a27bca80c4b3c4925736061e38fec3ac933fe895e5a7a166c,2025-06-17T06:15:21.230000 @@ -221214,7 +221215,7 @@ CVE-2023-24832,0,0,caf4a483f2cb7c8fcdf75ef85a3c61dff115a7f19facb4a1cb945c56705d4 CVE-2023-24833,0,0,975e396f7c3efc181ab7fb3ab3c5840503ac5a70f5ce18fa48be1249aadb3e19,2025-01-21T21:15:09.350000 CVE-2023-24834,0,0,acbead2f009392faf8de71d73210bd1b6b8b31da2ef57c8f3ffa546101669f8e,2024-11-21T07:48:29.377000 CVE-2023-24835,0,0,0bd87445a7918bbeefc7f2a991a49df5dc01ada7da4139308cc26b2528dd7754,2024-11-21T07:48:29.497000 -CVE-2023-24836,0,0,a73f0275689a6c5fb37cf7dcbb35381a8a35c3aa8c025ec0c06deb9c98fa4c9f,2024-11-21T07:48:29.607000 +CVE-2023-24836,0,1,ada7cff06903f3176d8d6838433fc3311791d7fcf3367ce26564983ae560fcd0,2025-09-25T14:13:08.880000 CVE-2023-24837,0,0,d2bc3f8819c88ba265667c54f4b97169707e71d98212a502c31be40499f8defa,2024-11-21T07:48:29.740000 CVE-2023-24838,0,0,41bb1c6e424f81a2c096d13acdb4d9939876f918a0b662f162f49639f52c5acc,2024-11-21T07:48:29.850000 CVE-2023-24839,0,0,2eaeac87ee2dfcbc566ca045445ce1fe7bb3dbcd122759ca9103903acde9bdbb,2024-11-21T07:48:29.970000 @@ -242714,7 +242715,7 @@ CVE-2023-52655,0,0,bdc324ff18b790be0ce1f3fd2f246fa9c4f96c44e5e41479727c0e2d09219 CVE-2023-52656,0,0,dd75b6d83cb83e011583365da02de12104ac19791ae350e100dbd43c541ac610,2025-08-21T13:15:35.400000 CVE-2023-52657,0,0,0742fcfb934ef5c7634de623b7c401792494241ab438a9573cda4fa4dca0204f,2025-09-18T17:07:34.477000 CVE-2023-52658,0,0,47f80212036fa3cc5e42c8df8acafe256f428ae8cd496cd93bab5c3d5e7099c8,2025-09-18T17:24:50.720000 -CVE-2023-52659,0,0,12014b1e0c02fea24ca1ce52074272db691cfe6ae39ed530e006a5540be4dd92,2024-11-21T08:40:18.277000 +CVE-2023-52659,0,1,81db5a50a104795dba344a4a3c78ca2ebc3e981526120407bc40fa4fe70a660e,2025-09-25T15:54:17.010000 CVE-2023-5266,0,0,36a025257ca1a5a01d1722477c5cdddc95c4c243398db33d451514cf043d9aad,2024-11-21T08:41:24.657000 CVE-2023-52660,0,0,358e8dc47410610b9f9672166cf82c0f3b48f9a136624210ebe4beaef46e7ab7,2024-11-21T08:40:18.393000 CVE-2023-52661,0,0,29f08503b11905d870693a85b6cd929ba1b38e060dbe561f424d2e51bd9f1345,2025-09-19T14:19:01.363000 @@ -246745,10 +246746,10 @@ CVE-2024-10434,0,0,9d6d4758a3d5a35f5a2be811154b346f3d0e874e8cde4af9c6f52ff74a167 CVE-2024-10435,0,0,63b1aaed049f4b31533c2867026e9d788fe8f8141494e5b70348a4fc8c6189f2,2024-10-28T13:58:09.230000 CVE-2024-10436,0,0,44f06f3a87e685276f3a35fbd1af09c953e5e2381cae8d5060bcc2bfe9da5bb5,2024-10-29T14:34:04.427000 CVE-2024-10437,0,0,da611b25a4ebcfa0b6c3629b527c647275c6f60514e79b5e9ead11a83b0ab096,2024-10-29T14:34:04.427000 -CVE-2024-10438,0,0,9ced19709ace1d6bfb86b8de1801377c2112b016d1dc92ec0264f2bb581a39ab,2024-10-31T00:52:18.370000 -CVE-2024-10439,0,0,dff63217c69fae9244806d074600acaa18035b339be2a233d07b224cb66e4434,2024-10-31T00:35:36.173000 +CVE-2024-10438,0,1,63abaf29394d4df7f2656726da882d7c316963a28328a89bd7fb9e37acf36f8f,2025-09-25T14:13:08.880000 +CVE-2024-10439,0,1,2ed4f3c5fb3eddebff0759235c0f6fc8f2d3bcdcad8eee6f9e50f034ba127e27,2025-09-25T14:13:08.880000 CVE-2024-1044,0,0,256d1054bfb8f270c3aa3258631e6291c67d0ef20d821ed1158e7683624e26af,2025-07-11T20:02:42.367000 -CVE-2024-10440,0,0,28edfb6b2838e0c83bba465fa859f9eabfcf16c21fbb114f33945ddeeeda5c34,2024-10-31T00:34:23.870000 +CVE-2024-10440,0,1,20e8ea037f98ec2bf84f81df5b1ed5a83836d4677d2af3b2d54ca64c6a7fed42,2025-09-25T14:13:08.880000 CVE-2024-10441,0,0,bcc571f371f99849fa6947b841ce1ebd06ed2be724f65ac00ff818dcae727660,2025-03-27T09:15:13.927000 CVE-2024-10442,0,0,a4840658738b809609aeb5cab59bac04ac7ad04c438ef21ac68a74cefac7e4bc,2025-03-19T03:15:11.790000 CVE-2024-10443,0,0,6679a70b1c52e1622fe297929b46209cff0fe2815c2fc3bfb9f9b299ffa0533c,2025-09-16T06:16:04.327000 @@ -277451,7 +277452,7 @@ CVE-2024-53970,0,0,20958d58eb9515921590df62ce8e737c32b8958b1107c3bfc1e974aee7c7d CVE-2024-53974,0,0,52052a572e52b9dbc089a516bde1b3fe92dc22cc036b47b932527a527df79bc8,2025-03-04T14:04:30.393000 CVE-2024-53975,0,0,1ef4582fd4bc5bf12a2226ef1587e7e199747f5394364a72a9c8e29bbaf92b0b,2025-04-04T16:19:53.597000 CVE-2024-53976,0,0,3c4e290755b1122ca5eef12abc826a22f34cb5f7c1451690e25b02ebe35b73d5,2025-04-04T16:15:43.123000 -CVE-2024-53977,0,1,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000 +CVE-2024-53977,0,0,2f7d14d786d37c0be3b1e52e51312637e5d5d5ce74028f4b7be6d93a3dc7aa73,2025-09-25T13:39:30.720000 CVE-2024-53979,0,0,172b408869a05417a1da8cf6907f79662a75490e703fbb88a760f582875697a1,2024-11-29T19:15:09.847000 CVE-2024-5398,0,0,1fca9edd99ff7753e0d36d6f4d73a5a23ccf8ab9dd992541f79488471e393289,2024-06-11T10:15:13.690000 CVE-2024-53980,0,0,25270275e7b15ac4ab41a5e880b433dd4bf99fa2318bf1cf75cd2ae0b94938f8,2025-09-05T13:57:24.993000 @@ -279260,7 +279261,7 @@ CVE-2024-5686,0,0,494008cd50a5cb32ba05dd687e88d5cd5348379ce547e26ef1644b29c16458 CVE-2024-5687,0,0,ceba3175c3bfd14790e93d6d60cf2282164bca8098cfa2f452b5343d2a9e086b,2025-03-27T20:13:57.260000 CVE-2024-5688,0,0,d5859f0e06cb4ebc97487fae3042b7b415f604e561186dfe8f72fb7cc29fccbc,2025-04-04T23:46:14.507000 CVE-2024-56882,0,0,14ad5dd23b7cd0e6c0aca460d9e8ac5675d52da6a819b7bb02768fc85dd49dcf,2025-02-19T15:15:14.970000 -CVE-2024-56883,0,1,b1b802f4cf6634c24a8fd47ae4fd46f5cf9b7dc71857565f04d01faa0f8878d9,2025-09-25T13:27:35.977000 +CVE-2024-56883,0,0,b1b802f4cf6634c24a8fd47ae4fd46f5cf9b7dc71857565f04d01faa0f8878d9,2025-09-25T13:27:35.977000 CVE-2024-56889,0,0,32a23e93a83d411b8c8afe93f2105e99a07e2966d415c1e18a89e389c3e58121,2025-04-18T02:06:14.247000 CVE-2024-5689,0,0,7954cfa7cab5c9d284e75ff2916a8e3e6c71cab8207a342db66b72c3a9729209,2024-11-21T09:48:10.193000 CVE-2024-56897,0,0,c86a728646b989ba2c34050e6cf558894a483f9e45fac8ad92b270dc1bfac754,2025-03-03T20:15:43.540000 @@ -285152,7 +285153,7 @@ CVE-2025-10433,0,0,b43f24c0bce8de742cf431a2eb964b20478589fcc9f48e30948f4931605da CVE-2025-10434,0,0,566295c72d39946410c2309480fa8fc7d9aeb7c4d38aabeb863009539ff6b2c3,2025-09-15T15:21:42.937000 CVE-2025-10435,0,0,8fc0124e2d800034fdad74e6798e13f26fccc87632300a92587bdbcc0cebe3fc,2025-09-18T19:01:20.383000 CVE-2025-10436,0,0,f21ff44bf17938ec96a18cacce855adcf01291edfd9db2076ff92e727b5711b5,2025-09-20T02:53:02.110000 -CVE-2025-10438,0,1,37fbeb62a5b8e94e0fbe9bde4b75d561e904bc0ea17c20ef003501f9916d0daa,2025-09-25T12:15:29.053000 +CVE-2025-10438,0,0,37fbeb62a5b8e94e0fbe9bde4b75d561e904bc0ea17c20ef003501f9916d0daa,2025-09-25T12:15:29.053000 CVE-2025-10439,0,0,1029fd6f848ac3e882b3ab9cbf5ee55679810a321f8eed0af85ef8621512b267,2025-09-17T14:18:55.093000 CVE-2025-1044,0,0,9f8be6c10874ff2755d0454f22f2307f6446f5aad49de046e6d1d7bccf9d96f4,2025-02-18T21:34:01.863000 CVE-2025-10440,0,0,3d43700e9f7bcfd9f5bd2f556ae6ed2f63c5b9922e8602e594be7f1fe4330af3,2025-09-15T15:21:42.937000 @@ -285164,7 +285165,7 @@ CVE-2025-10445,0,0,35b19f2a559a732e39b9c4022cc70c8b4fa82724999a540f17ac4b2e9949e CVE-2025-10446,0,0,4adfe0855fdf711607b03446c931271c897016ae25a91ee38f3ad7d924e0e8e7,2025-09-19T19:26:02.883000 CVE-2025-10447,0,0,97bed52bc6bf6ba67e78df4a8f882d14002e132de5a68a35a6ecf6f33f24c1ef,2025-09-20T02:52:24.587000 CVE-2025-10448,0,0,29f20a0dca84b13d3aa2ec4f8b4075356304b83163c43dd911980825e8f26a3b,2025-09-20T02:52:09.333000 -CVE-2025-10449,1,1,b7555afecb2c4432c02e9044673e414d10b60ddbb54b6e64913eda9e2ae5ce27,2025-09-25T13:15:30.590000 +CVE-2025-10449,0,0,b7555afecb2c4432c02e9044673e414d10b60ddbb54b6e64913eda9e2ae5ce27,2025-09-25T13:15:30.590000 CVE-2025-1045,0,0,3d4e99125d6683010d851d946a9297a9321b6b7ff8ccd958db6e8836001b0da5,2025-08-07T18:26:39.413000 CVE-2025-10452,0,0,f21100824742796fe06c01f61e1a08fe39235e450c63be92b89ef8c4e0885bc6,2025-09-15T15:21:42.937000 CVE-2025-10453,0,0,a1e8c95306d8e3967b47b91f1b9a30fb2e9cfa01abc836c7dbebcc66d0370c07,2025-09-15T15:21:42.937000 @@ -285173,6 +285174,7 @@ CVE-2025-10457,0,0,9ccc17f8db171c9154c70670b30fc277d31ac98b80b8dfec6e3b3cbc7e7b5 CVE-2025-10458,0,0,448baf1e97be10cbee681640d1f76fd2e260901329d944829ad17e91d13c3092,2025-09-19T16:00:27.847000 CVE-2025-10459,0,0,7c24af2d1c6e7e8cec8e6ad496dabc1e29ce968a8545f71e64eff3f5e1ac1348,2025-09-20T02:50:13.370000 CVE-2025-1046,0,0,81f07d1deb9a9a24dedeaf842687d2a903e2bc0f9d47d264184d1be137aed18f,2025-08-07T18:25:52.370000 +CVE-2025-10467,1,1,c49bdc9995924508ddfef4159dbe56a00d09ba5b88b80750a1ae379f90fd5508,2025-09-25T14:15:41.927000 CVE-2025-10468,0,0,36e4c4ceb0bff746e98d106c4d04b0f468d06d013dd83276aa36c9c2c65d7c97,2025-09-19T16:00:27.847000 CVE-2025-1047,0,0,03eefc960e75fe52ee7120cc433f74ee519d5a88a5d2c706c14c4ee6509cdc5a,2025-08-07T18:25:09.377000 CVE-2025-10471,0,0,89ae39e037e985ee771b2e19390bd21e2503515e527973e5fc54414bc59dab39,2025-09-16T12:49:16.060000 @@ -285193,9 +285195,9 @@ CVE-2025-10491,0,0,951ea6bb0962c3dcb211fcbb4ed7b7b286208045d52fb26507f65445fd451 CVE-2025-10492,0,0,555933980c63ddde447931013752af03609e5c783c21d690cb279540b5bafdb9,2025-09-17T14:18:55.093000 CVE-2025-10493,0,0,932e8034dc702d0ce0eb1219ecdae380b75ef71b0f63f980cd1f992288ee8ec0,2025-09-18T13:43:34.310000 CVE-2025-1050,0,0,7d78b0a4b57c817f83eab2ed22497d07b9145c021386faab3682cb35dbe240fd,2025-08-25T14:43:50.460000 -CVE-2025-10500,0,0,df343a879bc4608da9e92ef1e2387d4327820be2d4115d99c2ef1d2c87625c98,2025-09-24T18:11:24.520000 -CVE-2025-10501,0,0,00d8bee28e29b0fc9b737cd88f59ae26ce9e858ad03dd32639ad4922a0d7176d,2025-09-24T18:11:24.520000 -CVE-2025-10502,0,0,ce5ba1971d844a99dbaeb88129a7d95c1a407e241331b2603ec5686c036de642,2025-09-24T18:11:24.520000 +CVE-2025-10500,0,1,aab32102e3cf371e619933a360469cab205ac7b5aaee75e6a2844f07a0530204,2025-09-25T15:57:18.723000 +CVE-2025-10501,0,1,c01e6d03116ba1643495371fc9b642036c718209108f19fa5186f6edfbe6109f,2025-09-25T15:57:08.893000 +CVE-2025-10502,0,1,773ba26095d60bfb9c48ba55f215e3be9957ce5835f0cefeb7b1068995f20247,2025-09-25T15:56:56.943000 CVE-2025-1051,0,0,97f8684be10dfe28d0f98ada5524e2930b4ed1c647264457a2026bc5d2982cce,2025-08-15T16:28:32.310000 CVE-2025-1052,0,0,dd0f54ac7a99856d7d318fe87955632258ed518980dc0996f06ddf7223075097,2025-02-18T21:32:45.863000 CVE-2025-10527,0,0,55664663e86770667c8d2a4332bc6ca5a98e76b1251c1e5616158a6897779e27,2025-09-19T20:52:16.030000 @@ -285211,6 +285213,9 @@ CVE-2025-10535,0,0,c7abf56a97dee8848d43175d6995d08da134c23e1fae7eebbf9abb2f0d7ab CVE-2025-10536,0,0,6ba9d465633fa0f7c584a3b79a675cbbab5fd3a8ea8229e755bfb07bfe42bd23,2025-09-22T18:15:38.967000 CVE-2025-10537,0,0,3d0ab9fa5997155f68a71379eee04060dda4d3ea3d3145a7461006cd665c2a04,2025-09-20T02:58:08.467000 CVE-2025-1054,0,0,430aa21bf72f645c6e6bfd34970aba7a2e39d4475b698feec899aa71c44032d7,2025-04-23T14:08:13.383000 +CVE-2025-10540,1,1,e809335b5d4165419b087fef26ef0d2ec506bb6b05869d9c5c84159dc84d3fcb,2025-09-25T14:15:42.203000 +CVE-2025-10541,1,1,7fac517a7501c6e8c24d1e7b6d7fb188059f3f607c210f3a44a3e7c330bffdb5,2025-09-25T15:16:09.270000 +CVE-2025-10542,1,1,d2bf9a8385898d074054fcb1948b8dbc1d636ed20d58bb435ba563b82303b5c3,2025-09-25T15:16:09.487000 CVE-2025-10546,0,0,f088632bdd001248501a630f914db4c09f6b020f0ee730cb54e4ef4cbd137365,2025-09-18T13:43:45.290000 CVE-2025-10548,0,0,48fb7adcbaea594c1e27a17ba7caad16bbd8aadf9b7e7cca8ebfc69b56969f0a,2025-09-24T18:11:24.520000 CVE-2025-1055,0,0,6e774b509e3c76627691b837f2d8590aa97e26aef808a880682478160b3479de,2025-06-12T16:06:20.180000 @@ -285430,10 +285435,10 @@ CVE-2025-10857,0,0,ff328cd864ba30c420d6f49e97b82da6ace96516466ea8481d6bfde31dc08 CVE-2025-1086,0,0,a69d2558168bf2a8aaa109750d1ed5860f8baf2bb5bad3b2b8e78234f1d8c631,2025-02-07T02:15:30.523000 CVE-2025-1087,0,0,7a894514c20a110199ea673471a9e60754864e20939d4cb049420f9571e29f70,2025-09-17T14:15:37.177000 CVE-2025-1088,0,0,f3787fa29b31267dc245c20fa41e949ee6e12bb796f28ebe55a044ba5017de27,2025-06-18T13:46:52.973000 -CVE-2025-10890,0,0,1b8cdad03fbe4ba34f12c94193018775f156d15c61aa5f9be65b64f09b4afd2a,2025-09-24T18:15:33.490000 -CVE-2025-10891,0,0,a4ce72554caa11c6711d5c70c15c5ca7863457ee9fa276897a8e428505b02f02,2025-09-24T18:11:24.520000 -CVE-2025-10892,0,0,517f7e77cf99f2a9a45c6e1ecc319a597cf85dfa33349dc1f0a863de14f4e4b9,2025-09-24T18:11:24.520000 -CVE-2025-10894,0,0,6ef1a5dbe30c79678abda0b97384f50688140f49f8bc7e9fb5b70a9fbb9c36ce,2025-09-24T22:15:35.423000 +CVE-2025-10890,0,1,d0c97dc1379f44ae95572cb915065b420d7113a9648510323323bc3294852bf9,2025-09-25T15:56:42.057000 +CVE-2025-10891,0,1,ec65bca20daf6cf3a3667100ee8faba38038287356d613e29f0f2e3ec84c3064,2025-09-25T15:55:54.730000 +CVE-2025-10892,0,1,b321af08f7e176d608a0dc06066e258eba69478d13da7bfc23c4c4319c7e8e9c,2025-09-25T15:55:41.970000 +CVE-2025-10894,0,1,f131ea2acce339ef2fcf0979d6ce7f092f6b94f443f2178ef2ba1af2b97d6669,2025-09-25T14:15:42.370000 CVE-2025-10906,0,0,398f19602f87fe52de5ba52eac045ac633b4ff091d9f8d3bc4dfb35338e2a0fd,2025-09-24T18:11:24.520000 CVE-2025-10909,0,0,1eb03db3b4da894115bbf5f69e3a273a6a80a3e00cac6bb5e6337dc71eb895dc,2025-09-24T18:11:24.520000 CVE-2025-1091,0,0,41f3aeac640c3e0e17c6b04948a8dcf1ae635325d94a919fd15d739e41c450e8,2025-02-26T00:15:11.250000 @@ -285442,13 +285447,17 @@ CVE-2025-1094,0,0,dca1378d2e11e054a0baff76bda52bd172b0e41af32ad66e0ce66e679989e2 CVE-2025-10940,0,0,cc658f406e4858b727f47412604774306938318ca02ffa2593c76fb325c2d5e2,2025-09-25T11:15:45.757000 CVE-2025-10941,0,0,d7b6d906818254f265af5cae57af4881b3c8c01134c4c42e477e1b5a292dd634,2025-09-25T11:15:47.120000 CVE-2025-10942,0,0,b156651f98215b4bc886d3e7b2323de5e05d5c073a436985435549159baf5727,2025-09-25T11:15:47.367000 -CVE-2025-10943,1,1,e8a30df58af17099e8e8bd10f8e6dbdedfea3de4c0e9732c4a60ba53d10b86bf,2025-09-25T12:15:30.340000 -CVE-2025-10944,1,1,0b480f0f50acdde7b3a123e4863eeef09a42c9f84d14927272ad65bbda2c07d6,2025-09-25T13:15:30.800000 -CVE-2025-10945,1,1,f270f3f92595025c09e28d18e84eff5bdd669d9b2c66b2d89595c23ddc7692b6,2025-09-25T13:15:31.017000 -CVE-2025-10946,1,1,82e1a2b24babe3da2bd325bc57f22b1fb69ca7aa8fa5d6668b8f2f08020e96dc,2025-09-25T13:15:31.200000 -CVE-2025-10947,1,1,b620eeb05759d0d785edda5bcdda6498fd62d59cc5e324f559a526ed3309e204,2025-09-25T13:15:31.387000 +CVE-2025-10943,0,0,e8a30df58af17099e8e8bd10f8e6dbdedfea3de4c0e9732c4a60ba53d10b86bf,2025-09-25T12:15:30.340000 +CVE-2025-10944,0,0,0b480f0f50acdde7b3a123e4863eeef09a42c9f84d14927272ad65bbda2c07d6,2025-09-25T13:15:30.800000 +CVE-2025-10945,0,0,f270f3f92595025c09e28d18e84eff5bdd669d9b2c66b2d89595c23ddc7692b6,2025-09-25T13:15:31.017000 +CVE-2025-10946,0,0,82e1a2b24babe3da2bd325bc57f22b1fb69ca7aa8fa5d6668b8f2f08020e96dc,2025-09-25T13:15:31.200000 +CVE-2025-10947,0,1,c31648c16d3c47583e79221da4d2fd293b040b763907d76cef260319292e99c0,2025-09-25T14:15:43.290000 +CVE-2025-10948,1,1,f0e2be1154e687df36bda07c0de84a997aec7ab7324afaa26bbb5afc40a00452,2025-09-25T15:16:09.617000 +CVE-2025-10949,1,1,fbe982b1a9f62c2ae05d0f9c0c04436ef5d48c8bfe3c5e9051d04c4a066d88d6,2025-09-25T15:16:09.807000 CVE-2025-1095,0,0,9a08709ed6821d4cec41bca98af9a9b4f3ba88066959c4b4eaf1ce8a45c37d8a,2025-08-13T00:36:44.613000 -CVE-2025-10957,1,1,036ed289facd9ad6eba20d8bc7a92d2b8aedf67c1550a0ec8cb8eededfcdebf3,2025-09-25T12:15:30.577000 +CVE-2025-10950,1,1,4c58578fe0cf169c0b4b8ef21b0c439d25edd4b556d1723069e13b18b28ce4b3,2025-09-25T15:16:10.023000 +CVE-2025-10951,1,1,e96dd5e482859b3e6931cbc7b5f8362d28159803d5b8e61b1c2c64f2de92b3c5,2025-09-25T15:16:10.233000 +CVE-2025-10957,0,0,036ed289facd9ad6eba20d8bc7a92d2b8aedf67c1550a0ec8cb8eededfcdebf3,2025-09-25T12:15:30.577000 CVE-2025-1096,0,0,f369ee58dbaa6e142f3d975d8711cac15a0a303facd75e898c558f3e454cc535,2025-02-08T01:15:07.947000 CVE-2025-1097,0,0,2202b89d343208abc4d734355b4c7ffd6f25bdeae0a3549fe1a1a5c18a5619b5,2025-03-27T16:45:46.410000 CVE-2025-1098,0,0,5e273d1d4e3b115282c7c75a71d4085bca65fed73fce8f6abccd6dd2ec5272b4,2025-03-27T16:45:46.410000 @@ -289126,7 +289135,7 @@ CVE-2025-23349,0,0,9c1cd85ef3f1a15a2b0d72ba619ba80ce2b061f12413fa0ec8c628c959bb6 CVE-2025-2335,0,0,833479a18c8a0594376e23428e7b5d0c44e7fee9fa697872f4bc27a1568d612e,2025-03-16T03:15:37.907000 CVE-2025-23353,0,0,2b0003aedf73bf9e6379f2d0d3a707e29890d3a8e9b54abb74540dafb50e9e22,2025-09-24T18:11:24.520000 CVE-2025-23354,0,0,13db437b82e5361f61fddfff96589edb3a904f2f11595fa3ff9b938392a89986,2025-09-24T18:11:24.520000 -CVE-2025-23359,0,1,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000 +CVE-2025-23359,0,0,2b7c514907f082c48dac4cc0d5fd4d74d78df7de995a1b37d3d8feb875f208bb,2025-09-25T13:50:04.687000 CVE-2025-2336,0,0,e04e263f577ee94994be76c7f45e2a366ef0c6a3a1e415c7a4e9e5f507e17810,2025-06-05T20:12:23.777000 CVE-2025-23360,0,0,c78c6d407e7aa9fb20b6a8f1cc9d50ed7ab53a4f48ce43f2ffcc5cfeaafc7049,2025-09-23T19:12:03.027000 CVE-2025-23362,0,0,f1b04109bb5a53f0fa12693fb841988a838f82d29d11cab82e724120097242c3,2025-01-29T02:15:27.910000 @@ -291209,7 +291218,7 @@ CVE-2025-25709,0,0,b6ab1ce659249624d0a92da07c9379cd0e3b96cdcab65e12bbb19c19fd5b7 CVE-2025-2571,0,0,35ca25196622c2ffb39af24e9f522dc2cc8709c94ddbbd1fdd75a8e835535687,2025-05-30T16:31:03.107000 CVE-2025-25711,0,0,687cbddc40bafa1aa553307129c536c978baa7c3ff70ab2a66988ede6a6f0e53,2025-03-12T16:15:23.023000 CVE-2025-2572,0,0,1c17ee1f93d2404a782270dcdbf00d2a78964847890aca890c9cab1a14592a4e,2025-07-17T14:41:45.487000 -CVE-2025-25723,0,1,ee8fd4f2905eeafa3220c1e8e1a05ba486475ca24a8be57a209a7e6f4bd54afb,2025-09-25T13:27:40.590000 +CVE-2025-25723,0,0,ee8fd4f2905eeafa3220c1e8e1a05ba486475ca24a8be57a209a7e6f4bd54afb,2025-09-25T13:27:40.590000 CVE-2025-25724,0,0,ceaf233b0f81ae9a6f391733c88ea13b491e944a1f678139217a1972e4a0941b,2025-07-17T15:56:36.083000 CVE-2025-25725,0,0,ac97ba103984120a346a524ddb442d8216a673461532b95f069cbd7053e539c0,2025-03-02T02:15:36.760000 CVE-2025-25726,0,0,1241b8ce4f2f3e5a9582d1cb34e021df8b6f066d37fe203461681ffda7c05f0f,2025-03-02T02:15:36.850000 @@ -291442,6 +291451,7 @@ CVE-2025-26265,0,0,dc6169524b361ca35185d09a9fee076e263bc06d923c2410d4d58b5ca82c4 CVE-2025-26268,0,0,d9529d610311faa964302e414b9b8c3db6a8500fffae51ef0e05c440ae1ecaef,2025-04-25T16:33:11.420000 CVE-2025-26269,0,0,12b9746a2f0528a420442e578b3737c7290da3e519f4876ab7e0a810d8072175,2025-07-11T16:36:33.623000 CVE-2025-2627,0,0,2f3ad81f65de29cf1c1820e848f840cadf0a85c3d953dd25546251d732981bcd,2025-04-02T15:46:50.193000 +CVE-2025-26278,1,1,7ac7d64ca28172c2133327eaec28b01d3c4a19b7db60a8bbf12c246592db5fc8,2025-09-25T14:15:43.873000 CVE-2025-2628,0,0,05d1547b9a4ba25743b9dcb0b6bd681f5330882c7d106990b2f631bde4178f60,2025-04-02T15:44:41.567000 CVE-2025-2629,0,0,ea8a43a5c74eff85313aeb6f84d8522602681c279c7592e053ad4ffa62d8a2f0,2025-08-18T19:47:18.057000 CVE-2025-2630,0,0,d00c7041bce7a6c0b53b65b13c56fc812eabc833bc945e0f7151191f3cbca876,2025-08-18T19:40:32.253000 @@ -291896,7 +291906,7 @@ CVE-2025-26789,0,0,ebea494059b94de49b6b520d5766b69e65af5f122cf9ef029bba111909dc2 CVE-2025-2679,0,0,cafe0cb961640352f6700d1f4f9c72cc0c9f8d69b76916ff519f9c4a67eb3536,2025-06-04T15:19:35.357000 CVE-2025-26791,0,0,a7d63ea0959b4846f11cfb3951f45279f457c98157e5d52d56097a5da007bce1,2025-02-14T16:15:37.350000 CVE-2025-26793,0,0,d30b44911459092c9e08ffe42552727cfd072bd06f4aa8564ac964446a27eec1,2025-02-24T17:15:14.580000 -CVE-2025-26794,0,1,6e9618df8b457b71f21ca97d29f508999c2f86c458299a1f81bf001397d1e23d,2025-09-25T13:12:00.833000 +CVE-2025-26794,0,0,6e9618df8b457b71f21ca97d29f508999c2f86c458299a1f81bf001397d1e23d,2025-09-25T13:12:00.833000 CVE-2025-26795,0,0,3283f9e1bb19da1c039a6534fc32235ec5e4cbc609a28f146625988b1ff56282,2025-07-11T16:16:19.057000 CVE-2025-26796,0,0,68ab74fb372251311859b8e434d48ae111cce4d9cb690323b59ceca29e2126f1,2025-04-01T20:27:46.867000 CVE-2025-2680,0,0,934be0066d2f2c151ff263e21e7acbd87991eb5817b720319e92f8127f51bdc5,2025-06-04T15:16:46.930000 @@ -292297,6 +292307,8 @@ CVE-2025-27255,0,0,e778f08cf23683afc5d4a9e46aba9493b6f8173a4bc86a191d0135a1893c7 CVE-2025-27256,0,0,faa5f1c45cf1df7eaa32fc86b6cec46d0d1a169c24ab8cf8bd8a3126393a2add,2025-03-12T12:15:15.047000 CVE-2025-27257,0,0,35c5381be4b8261e4f71266ede8fcd92d8a42ce97885652c7e62cfebbc1b8ddf,2025-03-12T12:15:15.187000 CVE-2025-2726,0,0,9cfc0fcc043bfda05f579a7e6f6f984b284a2a8cc8a7109cf633c337996e62e5,2025-04-11T20:15:23.087000 +CVE-2025-27261,1,1,4bc7027f32495869ed791f2f5c0a398bdfe30ebc53c4e9070811ae32cb884e60,2025-09-25T14:15:44.240000 +CVE-2025-27262,1,1,c7cb83c70c3c19c45fefdf011702fdc9355389e1a66acf3e9ec3338bd815a4ed,2025-09-25T15:16:10.737000 CVE-2025-27263,0,0,0d6473ce6be397da70ae29bc260e636ca3c6169d6fa59d6f77401b8f5578c5c3,2025-03-03T14:15:57.980000 CVE-2025-27264,0,0,57766bee671a71e603c6190f5ecce6b6ab03f589b571849a06d4f3626124f857,2025-03-03T14:15:58.123000 CVE-2025-27265,0,0,064ce13be3b2caa339c06df0a9bbd275da3bf393870e4191cf15429558044c93,2025-02-24T15:15:14.310000 @@ -296827,11 +296839,11 @@ CVE-2025-34176,0,0,ce031af045d7170815766dd05513225d98e7b84328b85dc0d0c5b2f4ab05e CVE-2025-34177,0,0,19599bcead82fedac98310e50abdc314a19946fa553ba60d8295f8a421ba8b71,2025-09-17T18:15:44.463000 CVE-2025-34178,0,0,ed88bc2de084b661e5a18259d0b5bb092e58c25d57d1b288714b1f4a96f45414,2025-09-17T18:15:44.570000 CVE-2025-3418,0,0,339c13b005a4f5030fbc9506024b1d7817e98dc63768ee98336e99fe36b19c7e,2025-04-15T18:39:27.967000 -CVE-2025-34183,0,0,d78cc79019dc3755f89fde03f5b84141ab8dfacb9e0445519b6ef2d751808166,2025-09-22T18:58:17.053000 -CVE-2025-34184,0,0,3a8173aaba7b5471b87ab2cd7dbaf2e218f0357ec7d1d163610f8305f7d70abf,2025-09-24T15:58:04.650000 -CVE-2025-34185,0,0,b8890ba45a399f1c263a18c9b15d7216f6e91f8ba4100779a1a708df002472c3,2025-09-24T16:14:03.060000 -CVE-2025-34186,0,0,22e6bca43953fc061b48d5252ae0e726e089bf3a2d33fc839fa4d298431f12ca,2025-09-24T16:22:03.347000 -CVE-2025-34187,0,0,4d2ac2f81bec13347f7d0f10a22702a56993a4e85ee8110cdd18a669bfddbcd4,2025-09-17T14:18:55.093000 +CVE-2025-34183,0,1,b447fb97741da544c611688015fd4511a102ae26c79571bf7e67680e5a96861c,2025-09-25T14:56:22.493000 +CVE-2025-34184,0,1,9ee63c1c614693fd22b5a3c615e126c99cd6fba02904191a646cde9580831531,2025-09-25T14:56:30.853000 +CVE-2025-34185,0,1,7250ba041e1dffcddb59802f31b268ac08fcf87fc15a7deb3b71e549b23bf24b,2025-09-25T14:56:39.847000 +CVE-2025-34186,0,1,864d0b28596fe728a349ff13971efdd9fac20d1a15f9796c00e510b39f9afd70,2025-09-25T14:56:49.430000 +CVE-2025-34187,0,1,50d3e6ce495ea0026a7139894ea1aba70dd9d3a87759e010b7c60d8fdeb4b0bd,2025-09-25T14:51:36.743000 CVE-2025-34188,0,0,3ef22d024b9e096d29f2a02b99ec34adb804dc98a5b3d34106480d8e91bea839,2025-09-24T19:48:26.270000 CVE-2025-34189,0,0,a97a83497bba594710a1bc81bb26bfc012acc44d687dc0f98025d700ea81ad33,2025-09-24T19:28:54.507000 CVE-2025-3419,0,0,83686447659d1374debfbd584a9e75e08e8154b34b844ae39a181c0642efa458,2025-06-04T22:42:06.187000 @@ -297122,10 +297134,10 @@ CVE-2025-36124,0,0,495ab5b80c18934d694b85f1fd5c515432023769133dc6b0f110ddc5106cc CVE-2025-36125,0,0,065ad8bfb76e5aab8cc5e8bdc82623ade84c6be49c8c9463be9f1d533787a61f,2025-09-11T17:14:25.240000 CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000 CVE-2025-36133,0,0,bee880bb5fb76cfb4423e3458e3e19970e6f04fadc77dc2522065e6f772e6389,2025-09-02T15:55:25.420000 -CVE-2025-36139,0,0,12726ed5680de391524c50c461ad504bfc2d001f7596ee674aedf2130ff11181,2025-09-19T16:00:27.847000 +CVE-2025-36139,0,1,c172b4a8e972ceedb37b722555077120805e269ac8f9b9901ae94e1d34885dc9,2025-09-25T15:49:02.467000 CVE-2025-3614,0,0,1e9cefdd84c33d8de2c3ee7d2836b527bad3030475ccee2fdfaac67d11194e78,2025-07-28T15:07:38.667000 -CVE-2025-36143,0,0,9fc52a1a466c2ffa98d586070dba8a0cd6679cb4a4dde11eba9f737e15d19c7f,2025-09-19T16:00:27.847000 -CVE-2025-36146,0,0,78d4caa80e633e895665b9f88d5ca6b0cbf1ca5494c3bf4d696a0be3bd30eb0d,2025-09-19T16:00:27.847000 +CVE-2025-36143,0,1,1e82b2da60297014ec7d27a8e98d8cb4e86c5412a88d55b136ab5a2614b0727c,2025-09-25T15:50:10.570000 +CVE-2025-36146,0,1,e3618150e691b0b74ea90f60d841a93c82818d79e7aee8ea2f7ecaf82383ed59,2025-09-25T15:52:20.303000 CVE-2025-3615,0,0,8fdf4606cb6a0284ee0e09827c413ea146851550983dc6357a6b31a17ed36258,2025-04-17T20:21:48.243000 CVE-2025-36157,0,0,d4042d7b050d6d535f4db44d44cd43950e23acfe375ebe2b6e16a9b8b0723ed0,2025-08-25T20:24:45.327000 CVE-2025-3616,0,0,85ddfd303733fa62ed9efef24f9f8a85faf23ed34487370e2b7cef38515b10a2,2025-05-28T17:38:29.717000 @@ -297207,6 +297219,7 @@ CVE-2025-36594,0,0,2a566af0a69a3913c8d5a7f6fd7a5d60ea164662df00afab702bbc75eea3f CVE-2025-36595,0,0,b7b187e5206ceda5ed8598c137a9a911cd79671eea070c646cfc4cea47d2e09b,2025-06-30T18:38:48.477000 CVE-2025-36599,0,0,1c5deb350a91c0937bc5474ef4668a9588885c4b06717b17ac1bb6eea480f085,2025-07-10T13:17:30.017000 CVE-2025-36600,0,0,2fbe90f71a77d176cb60166b8b5ce924bd24c0a2469c140bbd821284fd8da7d7,2025-08-18T18:55:09.460000 +CVE-2025-36601,1,1,801adaf16a78128fb57b7ad27c43cb0a415740a3be3c41015b9129c26e6baca6,2025-09-25T15:16:10.890000 CVE-2025-36603,0,0,b83bbf93952c968cfa21dd0a11113a0c987b1b2802a8f9789b17e416dbb44238,2025-08-06T14:30:53.813000 CVE-2025-36604,0,0,de42779bcf8b452f2bb18d9f9416cef1c959d98bafc929884192297de42ad888,2025-08-15T16:10:20.663000 CVE-2025-36605,0,0,5032fdaad8f75c4093784f848d1dc94ccd33ec97ad79d57f90adabbe91bfac04,2025-08-15T16:10:03.957000 @@ -297259,6 +297272,7 @@ CVE-2025-36852,0,0,dee8ab0224e580dd4f3b987fb8708b2945cb8678d654eab4fb9316cebea64 CVE-2025-36853,0,0,5dea9df2e4d0256e9b85c736342001205da5733cf59b3d913ea0384a52bd5610,2025-09-08T16:25:38.810000 CVE-2025-36854,0,0,191b8ee50b90a29e30424542d05ba644c1ea820e2de20f125f177a0f790756d9,2025-09-08T16:25:38.810000 CVE-2025-36855,0,0,5635364b271ce20a1c00a1c2899a72f40879f852a3d50a367c8c2aa8672ced87,2025-09-08T16:25:38.810000 +CVE-2025-36857,1,1,adf55cad1cedc183749d318ecf65e773ecaa716cf7ecf8a01fc2cf33fbbeb111,2025-09-25T15:16:11.060000 CVE-2025-3686,0,0,0df30c8de6b0b9161a0c8150130ffb5e72bd0f69a6162c2cb918ce22a84cbd7c,2025-06-25T18:53:22.990000 CVE-2025-3687,0,0,3c2ac79e70973e7c9aecbfd30ed0e9ec614f41f5f30401eb4fc3b31170f656e2,2025-06-25T18:52:43.527000 CVE-2025-3688,0,0,0c5a9c39d0a46b352ad26209271a79a845e7971d7d876bb2609e071b04f68cc2,2025-04-16T13:25:37.340000 @@ -299258,7 +299272,7 @@ CVE-2025-40693,0,0,b8a8bb6dfd6944c00ba54decc6086b1710041077b93d0f227ddfb368ea743 CVE-2025-40694,0,0,e578c3cdf9d11b2ef09b7118f0275e015848c92bdc7e2e8a3149800078f8b0c5,2025-09-12T15:31:24.010000 CVE-2025-40695,0,0,9db5970302d93ab7c97ed854d5351a44131d9f251764809fbb196aad53045c98,2025-09-12T15:31:11.180000 CVE-2025-40696,0,0,8bfe4d36ec8f1559d58227abaac4bdd24631c6baadc9cf9ae1407420244fbaec,2025-09-12T15:30:57.173000 -CVE-2025-40698,1,1,95ddea10c74ab6ac5c2cb41b2d8ad181f675c9bbfedc845c3fe46b626c1516d4,2025-09-25T12:15:30.760000 +CVE-2025-40698,0,0,95ddea10c74ab6ac5c2cb41b2d8ad181f675c9bbfedc845c3fe46b626c1516d4,2025-09-25T12:15:30.760000 CVE-2025-4070,0,0,95239c8a358b05c88e31535f0df25ceb69331749309a950b338783db56336302,2025-05-09T13:50:22.543000 CVE-2025-40702,0,0,922c97d78daeddf868fa5a305ec9a141e7c812e2723d817ebe1949a1ffce3d99,2025-09-02T16:59:58.307000 CVE-2025-40703,0,0,387f7870a3b578f8d6dd994a8417a1b96867f558ffbdb664038c80af8375350d,2025-09-02T16:59:46.367000 @@ -299341,6 +299355,9 @@ CVE-2025-40804,0,0,924dba457c12e8455a96638b25846b3ff17071b0960df9986f7d22802102c CVE-2025-4081,0,0,f16673fb48c24de93e5c053aca80fb5176268314afb8a43b122ba2153bcbfb6b,2025-05-30T16:31:03.107000 CVE-2025-4082,0,0,f101f0f3cf1047a16cc8caac21e6de29d89617400e817162e18bc298869bce86,2025-05-09T19:33:39.363000 CVE-2025-4083,0,0,aab0e7ab9444e5b40631ead4a4be93598a1c41c9013f544453ee8d28c06657c0,2025-05-09T19:33:33.723000 +CVE-2025-40836,1,1,5f8aafc92e17a00f58ecfee27f262ee9688e6fdb4d6f93df1251936e3e3524d9,2025-09-25T15:16:11.233000 +CVE-2025-40837,1,1,4df67dc4e4d93344e76b5ffba80d7b6a491f2f3dae1c4f8e506958d5b72c79ac,2025-09-25T15:16:11.447000 +CVE-2025-40838,1,1,fde99b31ce1c1819eb29a3536f38fc35051d88017240b53c057108771481b59d,2025-09-25T15:16:11.587000 CVE-2025-4084,0,0,7ab4ed18f9bc09589ba4cfa35c769fb76a8e08e311a02f32727a71098d5ce184,2025-05-09T19:33:28.887000 CVE-2025-40846,0,0,e8fc35d6a7d67ee9712f1abee1dad03d3790bb520dcd9dfe7fbc6fa5b041752b,2025-05-08T14:39:09.683000 CVE-2025-4085,0,0,3ec3610647f22a9df95ad3f290526a8f289f25a671fa2c6b59cd4d2708efd3da,2025-05-09T19:33:24.233000 @@ -300014,7 +300031,7 @@ CVE-2025-43341,0,0,2d17eacfd547c29eb16144d9ce72081500998e1362c17de8558f1652bd5f3 CVE-2025-43342,0,0,b98e0e9ff5f3094c4f49dcbf0e279e2e2551c5b1bd1b7ff1380a61e470d7a3ce,2025-09-17T14:06:07.447000 CVE-2025-43343,0,0,1c0d2ec09cef56f050e19885603fc1a49de0650ecb1fa71a592cb04cad30f9a5,2025-09-17T14:05:49.413000 CVE-2025-43344,0,0,1e630708e3e53639bae545204e191c3bb5cd720bc28b214ecc46db43e4b41e2c,2025-09-17T14:05:08.087000 -CVE-2025-43346,0,0,28c7272eeeb483c094c76139f4c8b472a5f2da411cc81bd19ead5789941c4d2e,2025-09-17T14:04:55.827000 +CVE-2025-43346,0,1,0483bd549d5e44c0454e2cfe9a09eb667bce7d068027d1524f0b2271214e9b04,2025-09-25T15:16:11.717000 CVE-2025-43347,0,0,ab529146ed66d4d8c9e6c3c1fd200f4bf1d3f4a56320d9f57aca1c32630dddff,2025-09-17T14:04:43.977000 CVE-2025-43349,0,0,11c3f6360839d6279f43ed724980b806f9280e126d7169d9686f847a4e9a8e83,2025-09-17T13:54:52.190000 CVE-2025-4335,0,0,ab91d891d4885edde448eb60f8fb4e6853bc982358f87a0b04b64a0f12c1f76e,2025-05-07T14:13:20.483000 @@ -300917,6 +300934,11 @@ CVE-2025-46121,0,0,8dbe213f31b46111ff96215508808eaeade46c38a87893d5471126770e675 CVE-2025-46122,0,0,c80ef7e8af8f80669a89f8a37ee36da721f63411673211a87d3236e83ed7f60d,2025-08-05T17:18:47.920000 CVE-2025-46123,0,0,fe47d4c8287dbb2f73b056e568b43dfbb7ccde69a0e316b43998f89f73b27b65,2025-08-05T17:18:56.067000 CVE-2025-4613,0,0,cdece17d7aac2b268318a695cef81a8a4c9b3ca958a6eead0821fbfa89216fec,2025-08-01T22:07:33.530000 +CVE-2025-46148,1,1,deaad3b37248be948cfc088774fa4661ddb1dcf8dfb7c7060039639086da2af6,2025-09-25T15:16:12.007000 +CVE-2025-46149,1,1,14b1813e8c9d41d84e8a56146114e319324a703d1134290a7e41149d80650c85,2025-09-25T15:16:12.153000 +CVE-2025-46150,1,1,928ae05c942d8c738f14b64854db559ed55f30b6a14be1d2c6b0c6976d660ff4,2025-09-25T15:16:12.303000 +CVE-2025-46152,1,1,ab5211ab9f377a93a4042bda4f864b36fe19e6277556f4f18898ed0a264c6b9a,2025-09-25T15:16:12.470000 +CVE-2025-46153,1,1,3073b8755975b727816729e0ffb3162087c6f872ccf571bc718643be2ee9a334,2025-09-25T15:16:12.603000 CVE-2025-46154,0,0,28136877062a9fbae66fc92d86286e5d62e1cd8a9e62fd05c5a06eb514bf383d,2025-06-09T18:06:28.423000 CVE-2025-46157,0,0,15ef5f092148ce037ce48bb6f5f34f7194730ff07b7e1a3244e0e823362d2bc8,2025-06-26T15:53:12.230000 CVE-2025-46158,0,0,496021feb7f909223ea58ad77cd1644e57cf02b0d8b0ef3c8c84068942351766,2025-06-26T16:15:30.733000 @@ -301808,7 +301830,7 @@ CVE-2025-47324,0,0,40049889413e702152cb8a48c1b40cc873f01436a0727f76cbbb786f078d0 CVE-2025-47326,0,0,9c486ef819e53db90b66c834417850eea0d5545d4063a9d360c9b17701093b3e,2025-09-24T18:11:24.520000 CVE-2025-47327,0,0,4e45d0e323f7df2c0f66afb0c855829432dff4fbeb76ff218919296a5ab977fa,2025-09-24T18:11:24.520000 CVE-2025-47328,0,0,29ee7ddd61f8b5b9c1db29488e1c048045517ba76853e52f99ec7dc9db3cde0d,2025-09-24T18:11:24.520000 -CVE-2025-47329,0,0,c7e9bce2a1fa2134df73ecec9748b0587b69332d65d4bae057fd2deb33b2d083,2025-09-24T18:11:24.520000 +CVE-2025-47329,0,1,26ddee6fb8e5d44e98ca87701eef221e8130edac380a57ac68819d91bea34715,2025-09-25T15:58:55.557000 CVE-2025-4733,0,0,1feecf34d1e945b07bf7f8173c5a6199da7cad3eaaa8962b3eeb1affdc22767c,2025-06-20T14:09:01.650000 CVE-2025-4734,0,0,ff13ac1d2cde78d45dc6342e4d68c6311ae8114b779224c605f286f666a46962,2025-06-21T15:15:20.100000 CVE-2025-4735,0,0,f96e4d2d2fb70e0f1c88cd9e2e0e0d4de95ba2f9e43dcc187f8debac18edd909,2025-05-28T14:26:46.997000 @@ -306348,12 +306370,13 @@ CVE-2025-54926,0,0,869dbde8519c090fb7f1d5a8b8495ed14be5b51548b2b1d168383609def36 CVE-2025-54927,0,0,e4d646762d99414b47372563037d8fca39f064c7ca12b4699d9d41015f0dc1df,2025-08-20T14:39:07.860000 CVE-2025-5493,0,0,ee080df396ccf1633462f8bea7e98123459cf9ce73fdb4862d9d12054c10cec0,2025-07-02T14:31:01.553000 CVE-2025-54939,0,0,87ffd419239cd8768d907ea5e036989914fccdf5beeb5ca33a7e52706e3664ed,2025-08-27T15:52:46.787000 +CVE-2025-5494,1,1,ddb7a684b4dd72a34315a9c2196587151b5bbcb8d669768bdcbfdbcd09aa43be,2025-09-25T14:15:46.783000 CVE-2025-54940,0,0,5cb09ce7b55585318e61af90407d9c27bd28df00241bdde208ef2d4b9b5d35d8,2025-08-08T20:30:18.180000 -CVE-2025-54942,0,0,2f66fefe69f23b6d93997658a36ce46f3fb69bf694a1bdc8f5a4a8b15b5edd35,2025-09-02T15:55:35.520000 -CVE-2025-54943,0,0,3200f0b4d8bd2b636635d27e08f2b15c0aa05af42caf5502fa9dae541c363662,2025-09-02T15:55:35.520000 -CVE-2025-54944,0,0,7194c08e1d653eda218bf9a41ca6261508c9ddbaaa0f5c580417fdf5d1be4a79,2025-09-02T15:55:35.520000 -CVE-2025-54945,0,0,1b72aa47d9a07671f2d765d82cd37e370e56e48a38b8678b0701e088f55b7193,2025-09-02T15:55:35.520000 -CVE-2025-54946,0,0,2d2f5a26b291512fe95a425c98634e22d96268b56b07eaddb04ab8930aee32ee,2025-09-02T15:55:35.520000 +CVE-2025-54942,0,1,5fa327894c9c265abf7a4ab57c0f412aad4b325ec4a6e4648332ce6e6085ee84,2025-09-25T14:21:33.457000 +CVE-2025-54943,0,1,51e66c4a67a0893777e86088c3c8bc7e5943f251113a3864b0b257ae3e38e1f7,2025-09-25T14:14:52.863000 +CVE-2025-54944,0,1,1f2f2bd57746e3c1fa2db7fa61c8cc3770ba42d316fffd6de151bb5eb6b2d97b,2025-09-25T14:15:22.430000 +CVE-2025-54945,0,1,1622e02a1092dfc3675c7eedec29d3b0eabdb695d14d372026bc3867f2105207,2025-09-25T14:15:06.757000 +CVE-2025-54946,0,1,62c9f5553e6a283b38a9cf9599d8b2b869742cbdf9e3af42b224c67906486da9,2025-09-25T14:16:05.113000 CVE-2025-54948,0,0,8cc226f4733ee4a5cf7160dce3437fb4b70e0744ac0f5177ef9452cf75471ccb,2025-08-19T01:00:02.773000 CVE-2025-54949,0,0,056a181e94828dc320f131275dde7cbd3e9c5bc8e976a21777e5b57458abe8a7,2025-08-12T15:15:30.227000 CVE-2025-5495,0,0,627c107a7144d6261875c74bebd9da1796689e08747b21aa3599eeaec4deae9a,2025-08-11T18:48:40.963000 @@ -306637,6 +306660,7 @@ CVE-2025-55524,0,0,beb957094edda12c486584ab9348ec6f0105763418f9bb04171426196f31c CVE-2025-55526,0,0,38ea54a1796d3c33b1c24f777c91327f624fb606d5dca6b21a82c5a7098a015c,2025-09-15T19:38:14.897000 CVE-2025-5553,0,0,fe4c614ffbe08afefea4288d466eb90eee97d4e2f16090dab1d687305d5627f3,2025-06-10T15:16:07.670000 CVE-2025-5554,0,0,bb973700fe34126bf117ec751e38d204eccbaefe0d39d643366a25cffb57f45d,2025-06-10T15:16:16.877000 +CVE-2025-55551,1,1,956f87777b6f62af788cf822ec1fd5f43a572cfbffa10ad290a6685c465501c2,2025-09-25T15:16:12.887000 CVE-2025-5556,0,0,1f63a7f5a7a91cd0b5f15f9dd5246b4bb97c1dcec71534f8a57046e817922924,2025-06-10T15:16:25.960000 CVE-2025-55564,0,0,6e1224fa6a194465d8b17b65b95a0811add0548d95f4d4a21d147c7651236a4e,2025-09-03T14:53:05.053000 CVE-2025-5557,0,0,fd128465c0bc90cacbb5b3b2d601b7eb1c9da01523b98b89dfee1d497f1d2b1a,2025-06-10T15:16:34.460000 @@ -306749,7 +306773,7 @@ CVE-2025-55763,0,0,16099e8c1a80dbca272d3e09512dca34a57b487a237d4f548b35535467935 CVE-2025-5577,0,0,862bbaad6dfd6bc3941b913aa0d44c2f574c2a1c00c138cbc3600dc62caa3a63,2025-06-04T18:28:13.103000 CVE-2025-55777,0,0,acf30158407374a02b79b7145c629b7eee037d0c79cad4778f851c178e0350ba,2025-09-15T18:15:39.077000 CVE-2025-5578,0,0,32e2b67e097a268e61a1363cf2f541533741f65d29219018b3efd0a9d82e02d7,2025-06-04T18:27:38.557000 -CVE-2025-55780,0,0,1bf074c1a14ab5fcdc7a028ec0b3e53fb5dcf12ffa0a975502e13bcd48ae7faa,2025-09-24T19:15:38.550000 +CVE-2025-55780,0,1,363ac2796d0ccfd7975afeacd64f6fd0b8ec6e25a169da007fbfdf953c8dfc53,2025-09-25T15:16:13.037000 CVE-2025-5579,0,0,f50149d8544a2d773348b89ae7f885564e1c15d6fd801a8287e0be610055b816,2025-06-04T18:27:53.140000 CVE-2025-5580,0,0,5420af4803342beed15a14e9e13364c54154082896c2011e3016de8bff3b1595,2025-06-04T17:43:09.830000 CVE-2025-5581,0,0,c54747d4f47de2d53a0450ac3d2803f6b1ce7f3a8f3dd0d32c7ea29ca0ea8be0,2025-06-04T17:44:44.413000 @@ -306774,7 +306798,7 @@ CVE-2025-5590,0,0,6716e39e14dca75da7b001f861b33c9910a40bed8e3e64e8d834c073ec799a CVE-2025-55904,0,0,9b20bd0d4dd990004635530186589ad51756fb5a3878e74dde199e9aa67e1015,2025-09-23T15:45:10.240000 CVE-2025-55910,0,0,7273ce905ec06b8b5d5fb77039223304ff1aa1908f7d6bd33af6dc93b065b0cd,2025-09-22T21:23:01.543000 CVE-2025-55911,0,0,d3c498f627ead16eee86639d5d7ba88d8a7df7494dd00909e0077f38a564d38f,2025-09-19T16:00:27.847000 -CVE-2025-55912,0,0,bd1b294f2ed59ee6cb31ba33cd1615b71711f3a28621003c950ef67f42b00335,2025-09-19T16:00:27.847000 +CVE-2025-55912,0,1,af1eac225f251827cc23c804c9416e4b1d5b538725b3f916e515dceb8419af04,2025-09-25T15:51:51.443000 CVE-2025-5592,0,0,36c388f33c323490a93ebd79d5f124d5f4fdc10d946cc1144d6e587fb6694158,2025-06-09T15:02:45.030000 CVE-2025-5593,0,0,6df395e5fe3476beb67761792da6574eda83b6d9a337db7d77d384194417b8ee,2025-06-13T01:00:11.693000 CVE-2025-5594,0,0,83e7fdcfac2ba201d4fe551d7608819296af218dfeb5718bd91a2cdb5f7cbdd0,2025-06-13T00:58:21.617000 @@ -307024,13 +307048,14 @@ CVE-2025-57295,0,0,3aadc6b6b0f217be622a90f358f63d046b8b60149ae6202390a506e67e07b CVE-2025-57296,0,0,f57a5df8b15262590a9eb35e41be5db4ed1145dc747aaa829d64d02f51ff648d,2025-09-22T21:23:01.543000 CVE-2025-5730,0,0,d7cf0e46e5bf4b3cf9819e6569c27830cf201df4389a6e99a29cf7476a516726,2025-07-01T16:37:04.960000 CVE-2025-5731,0,0,6fc15f5041ba39386d85d84b93f60844519d93387ca88053576a03c7fb91167d,2025-09-02T18:04:30.160000 +CVE-2025-57317,1,1,fe1c5e836b190b09a37993fbdb74e851bebafa54cdffbc396bdb7c97748815a4,2025-09-25T14:15:44.603000 CVE-2025-57318,0,0,7ea9e11be660d7e2861d31cabf00d6a1f6ab7f8c0fedbdea2ca0978d0fbe43b0,2025-09-24T21:15:31.960000 CVE-2025-57319,0,0,3e7221e09a254ba5109ccce98c92aecc7ee3f16fce3b72d37a69dffe4f520955,2025-09-24T21:15:32.083000 CVE-2025-5732,0,0,e44c4abf488eb73f34cf4fc12053fa1034be5ba1cd633b45abb888bfd8cfede8,2025-06-10T14:58:00.633000 CVE-2025-57320,0,0,86e885539a4ac441e27af32635fd89b881e8d921894cce31fdb905be7e185bd4,2025-09-24T21:15:32.207000 CVE-2025-57321,0,0,972ed340268e38ded37c19fd965b9bf79d05629875e766d65d4a9d8a4e6c47ba,2025-09-24T20:15:31.867000 CVE-2025-57323,0,0,f21732cc4530577dc8a65fd4eb2a75868b43567d006df1f9179d95f86d25953f,2025-09-24T21:15:32.327000 -CVE-2025-57324,0,0,e477a0a0d769bac1af05edd6f6791774352deeaa94357b358368558f1589421c,2025-09-24T21:15:32.493000 +CVE-2025-57324,0,1,d9f8e308e190db5d9caa5bb7a6b9aee2e1d0b7ca6772aa82b9b852f697dae0f2,2025-09-25T15:16:13.250000 CVE-2025-57325,0,0,03d4c4ed981ff82081512a92ef8ad203784701f66dd60981bf6e944bac38ad64,2025-09-24T20:15:32.123000 CVE-2025-57326,0,0,1525af52798fe3776f78629e114f087d038506b03923f211eb263ce8a38b1bce,2025-09-24T20:15:32.273000 CVE-2025-57327,0,0,347c87113ea9f78bfb06907c1563604f2d892016233601bcdbade2fb6dda6c37,2025-09-24T20:15:32.410000 @@ -308052,10 +308077,10 @@ CVE-2025-5917,0,0,1cf4d16122784ee2c88b26590ef2d87d49417429ba027cc72d8d32de4940c2 CVE-2025-5918,0,0,a14225d037386282dc8701766fcface8292ce670b4c6fc562cc980c9b5e9f1c9,2025-08-15T18:35:04.390000 CVE-2025-5920,0,0,3f88c3667885406165d1ae39a3379b564fa086388f88e17a8e52604b775465c3,2025-07-08T18:15:42.893000 CVE-2025-5921,0,0,426dc73263941b8490014068112e2ea0e56e06c9ed8fa3ac72f0f197cf887957,2025-08-06T16:48:59.193000 -CVE-2025-59215,0,0,335409b5578159be5822ec191e30afbd6150a7c1bd68e8e7e0ef3bf9750a4a2c,2025-09-19T16:00:27.847000 -CVE-2025-59216,0,0,4e58c7aaf845e541fc341c24ec7822fd485d6e5c0ca6ede9a7fbfc98ec56a382,2025-09-19T16:00:27.847000 +CVE-2025-59215,0,1,6687c1691a6937978e066a17d60722d8b88d5cfc26b87afae1a97b5fce234350,2025-09-25T15:52:47.320000 +CVE-2025-59216,0,1,4380ea6a143632927c561aa39d9d3ce07640364f0c605774ae692464cad22c65,2025-09-25T15:53:03.740000 CVE-2025-5922,0,0,6f9b7484ad131f02c7183df94bab3b69eda255b628b492f20b7c92228b0cb12f,2025-07-31T18:42:56.503000 -CVE-2025-59220,0,0,5a25c7b8ad1e0bd88aabe6df3111bf00c84036be6c972d23b50a70bdd250cb90,2025-09-19T16:00:27.847000 +CVE-2025-59220,0,1,d4aeb8690f64c8042b853c5f136806327614043d872c260577b842d28cb86c81,2025-09-25T15:53:26.307000 CVE-2025-5923,0,0,bd32fa6b95a8f310c6b07918d04b1a4cdef7f962ecfa8c2518b68d11b4b0741e,2025-06-16T12:32:18.840000 CVE-2025-5924,0,0,e5569afefc2dc17b32a552fbc140ea78dd0087634a8b357eb3997017a1b3e8ef,2025-07-10T15:13:40.917000 CVE-2025-5925,0,0,74cb0f740f96269546a558716b8983e19baddafe2aff8e369ed86d426f629748,2025-06-12T16:06:39.330000 @@ -308124,12 +308149,14 @@ CVE-2025-59413,0,0,f02dcbf84397c0f11bbe0449015a7bd612048949aac6750e4d2d0db054b40 CVE-2025-59414,0,0,92d819ee372e5f275e6339c0faea93210cfde566c089a022161b72cee19f99fa,2025-09-18T13:43:34.310000 CVE-2025-59415,0,0,e7c780a774982f6fc0aab75472d5e4f45a62d00aad3d988862ea44baa5b46fa3,2025-09-18T13:43:34.310000 CVE-2025-59416,0,0,45c379fa01835c09e11baabda8e6c8dbe27dea0b3eab0b7f83c5c21a4611292f,2025-09-18T13:43:34.310000 -CVE-2025-59417,0,0,e4fbe2edfa6afebc95d39276a9fd9ea2a0fc0bd5292ebbd050963016be1af0e6,2025-09-19T17:15:52.510000 +CVE-2025-59417,0,1,c1dafcb30cde24c19d7a192f0951e8dbc5e5f4474688494318bd99fc10d65603,2025-09-25T15:32:15.280000 CVE-2025-59418,0,0,4302f3678b6e34cab7bb2eca9e342b970b78211ea3a1dd2a2315b62e4c33bd5a,2025-09-22T21:22:33.590000 CVE-2025-5942,0,0,9a67d84942bda0fcd3c617faafa154ffcc880f1119ecef24c537b5296a7050db,2025-08-14T13:11:53.633000 CVE-2025-59420,0,0,a55ba03cbfbb3e96688854600cbf40fc75097ccda97d9f13c4547589003ce699,2025-09-22T21:22:33.590000 CVE-2025-59421,0,0,06f8033ed00364ab2174cb9f00d79ee39eb91b94be08c069ed5c67de2c8c2fbe,2025-09-19T16:00:27.847000 +CVE-2025-59422,1,1,b71d17869c1f614b9da542e94a8c46744355293d07c01096a3d3845e486970ff,2025-09-25T14:15:45.677000 CVE-2025-59424,0,0,e46084d599a1837d7c51e1c4f419804dff50eaff86a5a50a7d79afaa42a0536f,2025-09-19T16:00:27.847000 +CVE-2025-59426,1,1,c81b0b180a7ff612ed5b7156ce7beebcb94efb5115f00619bc38a37b8c5b8230,2025-09-25T15:16:13.433000 CVE-2025-59427,0,0,3f98c566064c7cc542185b0f3d2d0c5d985a90de18d235f0f38b27e06fb961ef,2025-09-22T21:23:01.543000 CVE-2025-5943,0,0,35b1a03e31f4997e71998954ee281c02ada0936b00fc64cfacb7aa84cfa29429,2025-06-12T16:06:29.520000 CVE-2025-59430,0,0,2568765a4b3f4fcb3d14b6110ffa46fe589dac70bbe30dc3b21fb5f36eb79421,2025-09-22T21:22:16.313000 @@ -308260,12 +308287,19 @@ CVE-2025-59813,0,0,8b3177a440b4052d8ba6a4b0435fc6cc2915aa429257ec7c38cceacb29b8f CVE-2025-5982,0,0,d8aaac7624ef6b343b1d273eb44a02d83df24595fbd6261248dc2f7645001779,2025-08-12T13:07:39.247000 CVE-2025-59821,0,0,a40aac982f3f1a5b870a946a6d86e74be0047ed74f0c2d1b6df8cc853cb84c45,2025-09-24T18:11:24.520000 CVE-2025-59822,0,0,deb1358c8d6410efad2d1da49bdd1798cf15411eec4f7b9f998908e95377099d,2025-09-24T18:11:24.520000 +CVE-2025-59823,1,1,4c3ef709e084e8be16b7376735ae076966157451a54f9026b5a568c5aaf189bb,2025-09-25T15:16:13.560000 CVE-2025-59824,0,0,83d896528ac5f2f7b26a31fb24142cba16e5496fd5af61bb862b10bc9c8887cf,2025-09-24T20:15:33.343000 CVE-2025-59825,0,0,d118f5d214b500baa3a5a589c3ec8ed48c806b3f023ae524a3d71268e3368273,2025-09-24T18:11:24.520000 CVE-2025-59826,0,0,fba659dd5b65c5bec109497663435b1541708552be9270a40343ae64d486d0ba,2025-09-24T18:11:24.520000 CVE-2025-59827,0,0,b3e9f446abbdccec0294b32e6f219efc9be78046b08770c3dbffff5f1a942c45,2025-09-24T21:15:32.613000 CVE-2025-59828,0,0,1ec8dda814da51f0baa3fecfa7f0c1507c853f8699770d651bf3e302adbc4bb6,2025-09-24T20:15:33.527000 +CVE-2025-59830,1,1,36c08b887da99c78db2735caf24941f5a2d7c72647da82f66994258b720bcbd4,2025-09-25T15:16:13.780000 +CVE-2025-59831,1,1,a3c537e62e9db0903b8ea9b44dffa4e2d006905324614d06901a02863232bf4b,2025-09-25T15:16:13.973000 +CVE-2025-59832,1,1,a37b3101d35dc7f28210419056714b5ea17f9717f3fc7c6772e549a004a5e625,2025-09-25T15:16:14.100000 CVE-2025-59833,0,0,3eb466152f2b0d7c8cadf92a9a77de53e9db3cc7da39c582c32d3498655f6052,2025-09-24T21:15:32.767000 +CVE-2025-59834,1,1,54141e8ce2104a050e33482fd0a8b1cd3b46e6cc318e1129a62829a62161247c,2025-09-25T15:16:14.277000 +CVE-2025-59838,1,1,917f845b8a392eab3ec8222eb3cca9270dfd6e71216e3ecd9d56b920afbf903e,2025-09-25T15:16:14.390000 +CVE-2025-59839,1,1,4e5b6363915a2c42b05c2fbe7492fccff015b8c18ee2058621ffa93baa3a9fe9,2025-09-25T15:16:14.560000 CVE-2025-5984,0,0,9c065cc4f1bf71f29d217205fa1a3017b01589309492c87e21e29320e0443497,2025-06-17T20:34:36.177000 CVE-2025-5985,0,0,6bc7c20833bbb87d89e08ff2c433a1431f6002ad9972fe39c1f3aa9dac9d18ca,2025-06-17T20:34:19.473000 CVE-2025-5986,0,0,5cad509000c0831e557b68272b8d7dbc9b1f9f855a32309ac32da79f6d8d3b69,2025-07-02T16:07:00.620000 @@ -311184,10 +311218,10 @@ CVE-2025-9542,0,0,7e06e2f884aa3127801e5947ec0fe0a0cb93227afc86ba971025d15ab22ed3 CVE-2025-9556,0,0,d811849af7e6509162d508c174ddf69eac50a031a0e7ac87859c744e2fba2fa4,2025-09-15T15:21:42.937000 CVE-2025-9565,0,0,e10691a66350f68294477bfad80a513e72bddae645c967f5140be3f2006c6a15,2025-09-17T14:18:55.093000 CVE-2025-9566,0,0,03f356886c13c1847bc1a9785d1bc0f802b6b44b66189b7d245fd40c755eaedb,2025-09-23T22:15:34.537000 -CVE-2025-9567,0,0,1626199082f9830e86ea4dff624935bfbd1f48a94d548cfe534552f5e5ea61c7,2025-09-24T18:29:32.680000 -CVE-2025-9568,0,0,d7f02e05432204555cc054998d76244abab4f93ec20c8be32539b38d28366dc7,2025-09-24T18:29:42.523000 -CVE-2025-9569,0,0,1ccbf777ec1e59bd59d454307427c7f95a77ca15fa9cd5684883e2fb651f341c,2025-09-24T18:29:47.877000 -CVE-2025-9570,0,0,b4cfc187b9808bd4402af9b860ccfb8fc752d1478b6e53aed59a3aa3c60811a2,2025-09-23T20:49:17.047000 +CVE-2025-9567,0,1,8e645ebf39eb681428b67456f32d5bfbf9f1818546c9697ac8767386e40b2f08,2025-09-25T14:18:08.317000 +CVE-2025-9568,0,1,9ed41f8cd2d5be7c18f0db441311b59c18d886bd1931ade0989484532a33bddc,2025-09-25T14:18:31.453000 +CVE-2025-9569,0,1,61b0300024f5eb874d14b911391ad1034be29f5dd4dce90a91c275c8b6546222,2025-09-25T14:18:03.243000 +CVE-2025-9570,0,1,5969a8f8c1c463735483686d3a49d38237b507f2c3c7f58d83e249fb2da1007d,2025-09-25T14:18:25.953000 CVE-2025-9573,0,0,fedc335bed5ccf349d9fdf82448b74c55258f9f18c904cc4fa42d9b22923d3f3,2025-09-02T15:55:25.420000 CVE-2025-9575,0,0,c3772db5a4f852984d5a8070bef9f35cdb8d13c424825e12aacd600f600bcaa8,2025-09-04T18:32:04.087000 CVE-2025-9576,0,0,ff3a4d8d7932d7c1d0806ff5a309e9d87d4ded596b514b326976c60eedf2d151,2025-09-09T19:13:21.963000