diff --git a/CVE-2024/CVE-2024-79xx/CVE-2024-7959.json b/CVE-2024/CVE-2024-79xx/CVE-2024-7959.json index a0cdc4ec218..3bd9e3fb7d9 100644 --- a/CVE-2024/CVE-2024-79xx/CVE-2024-7959.json +++ b/CVE-2024/CVE-2024-79xx/CVE-2024-7959.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7959", "sourceIdentifier": "security@huntr.dev", "published": "2025-03-20T10:15:38.257", - "lastModified": "2025-03-20T10:15:38.257", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-21T20:06:27.293", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", + "baseScore": 7.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.0 + } + ], "cvssMetricV30": [ { "source": "security@huntr.dev", @@ -51,10 +73,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:openwebui:open_webui:0.3.8:*:*:*:*:*:*:*", + "matchCriteriaId": "7BFA5C2D-BD4F-4BD5-8D4E-D3BE4036FFA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b610a2193", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-79xx/CVE-2024-7983.json b/CVE-2024/CVE-2024-79xx/CVE-2024-7983.json index 532662e3b43..f0fbc21cbbb 100644 --- a/CVE-2024/CVE-2024-79xx/CVE-2024-7983.json +++ b/CVE-2024/CVE-2024-79xx/CVE-2024-7983.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7983", "sourceIdentifier": "security@huntr.dev", "published": "2025-03-20T10:15:38.387", - "lastModified": "2025-03-20T10:15:38.387", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-21T20:06:55.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:openwebui:open_webui:0.3.8:*:*:*:*:*:*:*", + "matchCriteriaId": "7BFA5C2D-BD4F-4BD5-8D4E-D3BE4036FFA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://huntr.com/bounties/f8156ca5-1328-480f-a72b-8d3dfdad87dc", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-79xx/CVE-2024-7990.json b/CVE-2024/CVE-2024-79xx/CVE-2024-7990.json index b4e1bc74b87..fe3dd1b12f8 100644 --- a/CVE-2024/CVE-2024-79xx/CVE-2024-7990.json +++ b/CVE-2024/CVE-2024-79xx/CVE-2024-7990.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7990", "sourceIdentifier": "security@huntr.dev", "published": "2025-03-20T10:15:38.503", - "lastModified": "2025-03-20T10:15:38.503", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-21T20:07:26.380", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:openwebui:open_webui:0.3.8:*:*:*:*:*:*:*", + "matchCriteriaId": "7BFA5C2D-BD4F-4BD5-8D4E-D3BE4036FFA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://huntr.com/bounties/2256e336-0f67-449e-a82d-7fc57081a21c", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-80xx/CVE-2024-8017.json b/CVE-2024/CVE-2024-80xx/CVE-2024-8017.json index 633d76a24c5..e30e904d9f2 100644 --- a/CVE-2024/CVE-2024-80xx/CVE-2024-8017.json +++ b/CVE-2024/CVE-2024-80xx/CVE-2024-8017.json @@ -2,8 +2,8 @@ "id": "CVE-2024-8017", "sourceIdentifier": "security@huntr.dev", "published": "2025-03-20T10:15:38.763", - "lastModified": "2025-03-20T10:15:38.763", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-07-21T20:08:16.507", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*", + "versionEndIncluding": "0.3.8", + "matchCriteriaId": "B15E1DFB-EF7D-4820-B6A9-2D5CD943C9A1" + } + ] + } + ] + } + ], "references": [ { "url": "https://huntr.com/bounties/ef06c7c8-1cb2-42a7-a6e6-17b2e1c744f7", - "source": "security@huntr.dev" + "source": "security@huntr.dev", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20226.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20226.json index 9103c8654e5..140781dd863 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20226.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20226.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20226", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:14.483", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:53:04.737", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,72 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.5", + "matchCriteriaId": "5B7E20B1-E38E-4F5E-9F89-41FD4C231742" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:9.4.0:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "AD39F156-52DB-4F43-8528-37500E3AEB89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2308", + "versionEndExcluding": "9.1.2308.214", + "matchCriteriaId": "2E95F34F-276A-4B6C-B317-DB58839B34CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406.100", + "versionEndExcluding": "9.2.2406.111", + "matchCriteriaId": "4EBEB019-22E2-4948-AA77-85E0AC8219F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408.100", + "versionEndExcluding": "9.3.2408.107", + "matchCriteriaId": "E0D477D5-C135-4D18-BC7D-94D4A5F34E1D" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0305", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20227.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20227.json index fc1737ac1f1..301b2bc1958 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20227.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20227.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20227", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:14.637", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:51:45.463", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,6 +19,26 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", @@ -51,10 +71,86 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.4", + "matchCriteriaId": "E31DE8DF-1AAD-4570-93E3-711C07FE1227" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:9.4.0:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "AD39F156-52DB-4F43-8528-37500E3AEB89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2308", + "versionEndExcluding": "9.1.2308.214", + "matchCriteriaId": "2E95F34F-276A-4B6C-B317-DB58839B34CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2312", + "versionEndExcluding": "9.1.2312.208", + "matchCriteriaId": "CE9FAFD0-7787-425C-81D9-705E99B53E6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2403", + "versionEndExcluding": "9.2.2403.115", + "matchCriteriaId": "A79896AF-1111-47AE-A84E-9D897BF2031C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406.100", + "versionEndExcluding": "9.2.2406.113", + "matchCriteriaId": "000487DA-0E58-4953-A4BD-BEF09D825246" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408.100", + "versionEndExcluding": "9.3.2408.107", + "matchCriteriaId": "E0D477D5-C135-4D18-BC7D-94D4A5F34E1D" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0306", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20228.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20228.json index 86fdcd765fd..6be78165000 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20228.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20228.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20228", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:14.783", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:50:12.957", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,60 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.5", + "matchCriteriaId": "5B7E20B1-E38E-4F5E-9F89-41FD4C231742" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2312", + "versionEndExcluding": "9.1.2312.204", + "matchCriteriaId": "C26D2195-4308-4226-BAD2-C3C6C225A604" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2403.100", + "versionEndExcluding": "9.2.2403.107", + "matchCriteriaId": "CCE7C5DF-BC89-4789-94DA-5F8D2D86C7DE" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0303", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20229.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20229.json index 2d0697f4ba6..e1b40d600a1 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20229.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20229.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20229", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:14.933", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:49:49.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,79 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.5", + "matchCriteriaId": "5B7E20B1-E38E-4F5E-9F89-41FD4C231742" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:9.4.0:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "AD39F156-52DB-4F43-8528-37500E3AEB89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2312", + "versionEndExcluding": "9.1.2312.208", + "matchCriteriaId": "CE9FAFD0-7787-425C-81D9-705E99B53E6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2403", + "versionEndExcluding": "9.2.2403.114", + "matchCriteriaId": "6FCABD9B-90B7-4AAE-AA02-4DAA31D8B397" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406.100", + "versionEndExcluding": "9.2.2406.108", + "matchCriteriaId": "41B20845-FE28-45ED-9B2D-499506F527FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408.100", + "versionEndExcluding": "9.3.2408.104", + "matchCriteriaId": "C5EAD373-D535-44CD-AF6C-023A99EA35B7" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0301", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20231.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20231.json index f7dc99be5d8..ff4d835f622 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20231.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20231.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20231", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:15.083", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:48:56.213", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 5.9 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.6 } ] }, @@ -51,10 +71,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.5", + "matchCriteriaId": "5B7E20B1-E38E-4F5E-9F89-41FD4C231742" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:9.4.0:*:*:*:enterprise:*:*:*", + "matchCriteriaId": "AD39F156-52DB-4F43-8528-37500E3AEB89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_secure_gateway:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.7.0", + "versionEndExcluding": "3.7.23", + "matchCriteriaId": "3B85AEDE-7363-42D5-8F3C-1865BB39166C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_secure_gateway:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.8.0", + "versionEndExcluding": "3.8.38", + "matchCriteriaId": "6DD62957-0C8B-49FC-BC63-2E0CDC041021" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0302", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20232.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20232.json index a79fa360d71..6612ab1495b 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20232.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20232.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20232", "sourceIdentifier": "psirt@cisco.com", "published": "2025-03-26T22:15:15.233", - "lastModified": "2025-03-27T16:45:27.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:45:39.787", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,81 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.8", + "matchCriteriaId": "49EE75F0-2AD6-4712-9E2A-C000A44E5605" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.5", + "matchCriteriaId": "5B7E20B1-E38E-4F5E-9F89-41FD4C231742" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.3", + "matchCriteriaId": "E66E66BA-AFC2-4E0A-B233-9E2C7D985AF0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2308", + "versionEndExcluding": "9.1.2308.212", + "matchCriteriaId": "03261616-B31E-4709-A47B-AC0B580636DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.1.2312.100", + "versionEndExcluding": "9.1.2312.208", + "matchCriteriaId": "5EA2EB1C-85B3-4381-B924-EE6C1F08030D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2403.100", + "versionEndExcluding": "9.2.2403.113", + "matchCriteriaId": "B59EC0E4-4626-498D-8E06-F23CB17E0E29" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406.100", + "versionEndExcluding": "9.2.2406.108", + "matchCriteriaId": "41B20845-FE28-45ED-9B2D-499506F527FB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408.100", + "versionEndExcluding": "9.3.2408.103", + "matchCriteriaId": "2B97D0B2-B795-424A-8565-9DB0127E604E" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0304", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20300.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20300.json index fc178653d41..24198684aa9 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20300.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20300.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20300", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:25.660", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:58:42.110", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,74 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.9", + "matchCriteriaId": "9C13C5BB-B781-41C8-BF00-AA5FD0267515" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.6", + "matchCriteriaId": "6B05EBC8-E9AA-40DD-9D5A-F802748B240D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.2", + "matchCriteriaId": "18674A90-13F1-4051-BD16-F815831CBE91" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406", + "versionEndExcluding": "9.2.2406.118", + "matchCriteriaId": "D64EDBA6-544C-4810-9F6C-A44A28B872A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408", + "versionEndExcluding": "9.3.2408.112", + "matchCriteriaId": "1EC402B1-7900-41D7-98BF-0D63FC082A08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2411", + "versionEndExcluding": "9.3.2411.103", + "matchCriteriaId": "A00DE67F-8EF3-4FBB-AFC7-E8E499F26822" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0708", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20319.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20319.json index ad7b8310f57..f21733c7168 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20319.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20319.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20319", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:25.830", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:58:20.670", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.3", + "matchCriteriaId": "6E95070D-E7E2-40F7-8282-0964FC1664F4" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0702", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20320.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20320.json index e42ba19e1be..a58af9d552c 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20320.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20320.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20320", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:25.987", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:58:05.230", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H", @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.1, "impactScore": 4.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.1, + "impactScore": 5.2 } ] }, @@ -51,10 +71,74 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.3", + "matchCriteriaId": "6E95070D-E7E2-40F7-8282-0964FC1664F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406", + "versionEndExcluding": "9.2.2406.121", + "matchCriteriaId": "69993EB7-DEC3-416D-AD92-72B87A714DAA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408", + "versionEndExcluding": "9.3.2408.117", + "matchCriteriaId": "45C46DB9-D18B-4A8D-ABBE-88C1AA326903" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2411", + "versionEndExcluding": "9.3.2411.107", + "matchCriteriaId": "3EFAE9C0-842B-4E8E-BEC2-B96B1EA0C9C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0703", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20321.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20321.json index b3fceab9dfc..b45dd82cc48 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20321.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20321.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20321", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:26.143", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:57:33.183", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,7 +19,7 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 } ] }, @@ -51,10 +71,74 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.3", + "matchCriteriaId": "6E95070D-E7E2-40F7-8282-0964FC1664F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406", + "versionEndExcluding": "9.2.2406.119", + "matchCriteriaId": "6591B175-F288-4EE6-809A-A2E9B271EDC1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408", + "versionEndExcluding": "9.3.2408.114", + "matchCriteriaId": "845E464B-F86C-4107-B71B-878883BCDE48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2411", + "versionEndExcluding": "9.3.2411.104", + "matchCriteriaId": "0450CB69-409C-4289-B210-CEB463C77C13" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0704", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20322.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20322.json index a785ed193e8..a36ebfa7d74 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20322.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20322.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20322", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:26.307", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:54:57.743", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -19,6 +19,26 @@ "cvssMetricV31": [ { "source": "psirt@cisco.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", "type": "Primary", "cvssData": { "version": "3.1", @@ -51,10 +71,74 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.3", + "matchCriteriaId": "6E95070D-E7E2-40F7-8282-0964FC1664F4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406", + "versionEndExcluding": "9.2.2406.119", + "matchCriteriaId": "6591B175-F288-4EE6-809A-A2E9B271EDC1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408", + "versionEndExcluding": "9.3.2408.113", + "matchCriteriaId": "F337F0F2-005E-4181-98D3-28DAB3C36BE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2411", + "versionEndExcluding": "9.3.2411.104", + "matchCriteriaId": "0450CB69-409C-4289-B210-CEB463C77C13" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0705", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20323.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20323.json index 1c02297e765..ab3629c90f4 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20323.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20323.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20323", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:26.470", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:53:33.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,53 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.3", + "matchCriteriaId": "6E95070D-E7E2-40F7-8282-0964FC1664F4" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0706", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-203xx/CVE-2025-20324.json b/CVE-2025/CVE-2025-203xx/CVE-2025-20324.json index 417b5950fec..da18f94945b 100644 --- a/CVE-2025/CVE-2025-203xx/CVE-2025-20324.json +++ b/CVE-2025/CVE-2025-203xx/CVE-2025-20324.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20324", "sourceIdentifier": "psirt@cisco.com", "published": "2025-07-07T18:15:26.633", - "lastModified": "2025-07-08T16:18:34.923", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-21T20:43:59.423", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,74 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.1.0", + "versionEndExcluding": "9.1.10", + "matchCriteriaId": "F363265C-BE8B-4D9E-BCD7-52D75D4454BA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.2.0", + "versionEndExcluding": "9.2.7", + "matchCriteriaId": "16D7B94B-6E57-4462-BDB1-884E3268967D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.3.0", + "versionEndExcluding": "9.3.5", + "matchCriteriaId": "2AE238E0-742D-4595-8F72-C2D7256718EA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*", + "versionStartIncluding": "9.4.0", + "versionEndExcluding": "9.4.2", + "matchCriteriaId": "18674A90-13F1-4051-BD16-F815831CBE91" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.2.2406", + "versionEndExcluding": "9.2.2406.119", + "matchCriteriaId": "6591B175-F288-4EE6-809A-A2E9B271EDC1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2408", + "versionEndExcluding": "9.3.2408.113", + "matchCriteriaId": "F337F0F2-005E-4181-98D3-28DAB3C36BE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*", + "versionStartIncluding": "9.3.2411", + "versionEndExcluding": "9.3.2411.104", + "matchCriteriaId": "0450CB69-409C-4289-B210-CEB463C77C13" + } + ] + } + ] + } + ], "references": [ { "url": "https://advisory.splunk.com/advisories/SVD-2025-0707", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-35xx/CVE-2025-3576.json b/CVE-2025/CVE-2025-35xx/CVE-2025-3576.json index d8cc81c6514..21c3c03a9ca 100644 --- a/CVE-2025/CVE-2025-35xx/CVE-2025-3576.json +++ b/CVE-2025/CVE-2025-35xx/CVE-2025-3576.json @@ -2,7 +2,7 @@ "id": "CVE-2025-3576", "sourceIdentifier": "secalert@redhat.com", "published": "2025-04-15T06:15:44.047", - "lastModified": "2025-06-24T13:15:22.657", + "lastModified": "2025-07-21T20:15:40.353", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -52,6 +52,10 @@ } ], "references": [ + { + "url": "https://access.redhat.com/errata/RHSA-2025:11487", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:8411", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-461xx/CVE-2025-46117.json b/CVE-2025/CVE-2025-461xx/CVE-2025-46117.json index 7e3fc7e3d33..bfc42720641 100644 --- a/CVE-2025/CVE-2025-461xx/CVE-2025-46117.json +++ b/CVE-2025/CVE-2025-461xx/CVE-2025-46117.json @@ -2,7 +2,7 @@ "id": "CVE-2025-46117", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-21T15:15:27.823", - "lastModified": "2025-07-21T15:15:27.823", + "lastModified": "2025-07-21T20:15:40.937", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hidden debug script `.ap_debug.sh` invoked from the restricted CLI does not properly sanitize its input, allowing an authenticated attacker to execute arbitrary commands as root on the controller or specified target." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + } + ] + } + ], "references": [ { "url": "http://commscope.com", diff --git a/CVE-2025/CVE-2025-514xx/CVE-2025-51403.json b/CVE-2025/CVE-2025-514xx/CVE-2025-51403.json index aa74c79f5bb..579d82f2504 100644 --- a/CVE-2025/CVE-2025-514xx/CVE-2025-51403.json +++ b/CVE-2025/CVE-2025-514xx/CVE-2025-51403.json @@ -2,7 +2,7 @@ "id": "CVE-2025-51403", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-21T19:15:31.510", - "lastModified": "2025-07-21T19:15:31.510", + "lastModified": "2025-07-21T20:15:41.117", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A stored cross-site scripting (XSS) vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], "references": [ { "url": "https://github.com/LiveHelperChat/livehelperchat/pull/2228/commits/2056503ad96e04467ec9af8d827109b9b9b46223", diff --git a/CVE-2025/CVE-2025-518xx/CVE-2025-51868.json b/CVE-2025/CVE-2025-518xx/CVE-2025-51868.json new file mode 100644 index 00000000000..6231771972c --- /dev/null +++ b/CVE-2025/CVE-2025-518xx/CVE-2025-51868.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-51868", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-21T20:15:41.293", + "lastModified": "2025-07-21T20:15:41.293", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the conversation_id parameter to the conversation_history endpoint." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Secsys-FDU/CVE-2025-51868", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-518xx/CVE-2025-51869.json b/CVE-2025/CVE-2025-518xx/CVE-2025-51869.json new file mode 100644 index 00000000000..1900115344f --- /dev/null +++ b/CVE-2025/CVE-2025-518xx/CVE-2025-51869.json @@ -0,0 +1,21 @@ +{ + "id": "CVE-2025-51869", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-21T20:15:41.417", + "lastModified": "2025-07-21T20:15:41.417", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted space_id, thread_id, and message_id parameters to the v1/space/{space_id}/thread/{thread_id}/message/{message_id} endpoint." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://github.com/Secsys-FDU/CVE-2025-51869", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-523xx/CVE-2025-52362.json b/CVE-2025/CVE-2025-523xx/CVE-2025-52362.json new file mode 100644 index 00000000000..da61cd45a97 --- /dev/null +++ b/CVE-2025/CVE-2025-523xx/CVE-2025-52362.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-52362", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-21T20:15:41.547", + "lastModified": "2025-07-21T20:15:41.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Server-Side Request Forgery (SSRF) vulnerability exists in the URL processing functionality of PHProxy version 1.1.1 and prior. The input validation for the _proxurl parameter can be bypassed, allowing a remote, unauthenticated attacker to submit a specially crafted URL" + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/Shulelk/a18c11866be8609b22ff5df780a42422", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/PHProxy/phproxy", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json new file mode 100644 index 00000000000..ea69f639bd7 --- /dev/null +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-53528", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:25.883", + "lastModified": "2025-07-21T21:15:25.883", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions 5.4.3 and below, the version parameter of the \"/docs\" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to execute JavaScript code on a user's session for any application based on Cadwyn via a one-click attack. The vulnerability has been fixed in version 5.4.4." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/zmievsa/cadwyn/commit/b424ecd57cd8dabbc8fe39b8f8ccafea629c7728", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/zmievsa/cadwyn/security/advisories/GHSA-2gxp-6r36-m97r", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-538xx/CVE-2025-53832.json b/CVE-2025/CVE-2025-538xx/CVE-2025-53832.json new file mode 100644 index 00000000000..e59cea525ae --- /dev/null +++ b/CVE-2025/CVE-2025-538xx/CVE-2025-53832.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-53832", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.077", + "lastModified": "2025-07-21T21:15:26.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Lara Translate MCP Server is a Model Context Protocol (MCP) Server for Lara Translate API. Versions 0.0.11 and below contain a command injection vulnerability which exists in the @translated/lara-mcp MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to child_process.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (|, >, &&, etc.). This vulnerability is fixed in version 0.0.12." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/translated/lara-mcp/commit/e534ef690adf390e4ac862a200b2a83f6cf45944", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/translated/lara-mcp/security/advisories/GHSA-xj5p-8h7g-76m7", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54071.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54071.json new file mode 100644 index 00000000000..9c6474b187d --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54071.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54071", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T20:15:41.677", + "lastModified": "2025-07-21T20:15:41.677", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. In versions 4.0.0-beta.3 and below, an authenticated arbitrary file write vulnerability exists in the /api/saves endpoint. This can lead to Remote Code Execution on the system. The vulnerability permits arbitrary file write operations, allowing attackers to create or modify files at any filesystem location with user-supplied content. A user with viewer role or Scope.ASSETS_WRITE permission or above is required to pass authentication checks. The vulnerability is fixed in version 4.0.0-beta.4." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.4, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "HIGH", + "subIntegrityImpact": "HIGH", + "subAvailabilityImpact": "HIGH", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/rommapp/romm/commit/89248d03805e5fabca78443dd202ff32e0b4d9f3", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/rommapp/romm/security/advisories/GHSA-fgxf-hggc-qqmq", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54121.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54121.json new file mode 100644 index 00000000000..49d306b48ec --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54121.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-54121", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T20:15:41.827", + "lastModified": "2025-07-21T20:15:41.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files (greater than the default max spool size) starlette will block the main thread to roll the file over to disk. This blocks the event thread which means the application can't accept new connections. The UploadFile code has a minor bug where instead of just checking for self._in_memory, the logic should also check if the additional bytes will cause a rollover. The vulnerability is fixed in version 0.47.2." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/encode/starlette/blob/fa5355442753f794965ae1af0f87f9fec1b9a3de/starlette/datastructures.py#L436C5-L447C14", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/encode/starlette/commit/9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/encode/starlette/discussions/2927#discussioncomment-13721403", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/encode/starlette/security/advisories/GHSA-2c2j-9gv5-cj73", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54122.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54122.json new file mode 100644 index 00000000000..1c3a0107e71 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54122.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54122", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.237", + "lastModified": "2025-07-21T21:15:26.237", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519. This vulnerability allows an unauthenticated attacker to bypass network isolation and access restrictions, potentially enabling access to internal services, cloud metadata endpoints, and exfiltration of sensitive data from isolated network segments. This vulnerability is fixed in version 25.7.21.2525." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 10.0, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-918" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Manager-io/Manager/security/advisories/GHSA-347w-cgwh-m895", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54127.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54127.json new file mode 100644 index 00000000000..106e5621673 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54127.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-54127", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.403", + "lastModified": "2025-07-21T21:15:26.403", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance. In versions 11.0.6 and below, the NodeJS version of HAX CMS uses an insecure default configuration designed for local development. The default configuration does not perform authorization or authentication checks. If a user were to deploy haxcms-nodejs without modifying the default settings, \u2018HAXCMS_DISABLE_JWT_CHECKS\u2018 would be set to \u2018true\u2018 and their deployment would lack session authentication. This is fixed in version 11.0.7." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1188" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-f38f-jvqj-mfg6", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54128.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54128.json new file mode 100644 index 00000000000..69afcc960dd --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54128.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-54128", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.553", + "lastModified": "2025-07-21T21:15:26.553", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.7 and below, the NodeJS version of HAX CMS has a disabled Content Security Policy (CSP). This configuration is insecure for a production application because it does not protect against cross-site-scripting attacks. The contentSecurityPolicy value is explicitly disabled in the application's Helmet configuration in app.js. This is fixed in version 11.0.8." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.2, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/haxtheweb/haxcms-nodejs/commit/ddb9351c6d6418008d4084a5b17fd6d611bc4e30", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-59g8-h59f-8hjp", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54129.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54129.json new file mode 100644 index 00000000000..c2b5681d995 --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54129.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54129", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.710", + "lastModified": "2025-07-21T21:15:26.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform. In versions 11.0.4 and below, the application returns a 200 response when requesting the data of a valid user and a 404 response when requesting the data of an invalid user. This can be used to infer the existence of valid user accounts. An authenticated attacker can use automated tooling to brute force potential usernames and use the application's response to identify valid accounts. This can be used in conjunction with other vulnerabilities, such as the lack of authorization checks, to enumerate and deface another user's sites. This is fixed in version 11.0.5." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-204" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-wh3h-vfcv-m5g5", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54134.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54134.json new file mode 100644 index 00000000000..88d024bad7f --- /dev/null +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54134.json @@ -0,0 +1,98 @@ +{ + "id": "CVE-2025-54134", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-07-21T21:15:26.863", + "lastModified": "2025-07-21T21:15:26.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. This vulnerability exists because the application does not properly handle exceptions which occur as a result of changes to user-modifiable URL parameters. This is fixed in version 11.0.9." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-248" + }, + { + "lang": "en", + "value": "CWE-703" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/haxtheweb/haxcms-nodejs/blob/main/src/routes/listFiles.js#L22", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/haxtheweb/haxcms-nodejs/blob/main/src/routes/saveFile.js#L52", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/haxtheweb/haxcms-nodejs/commit/e9773d1996233f9bafb06832b8220ec2a98bab34", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-pjj3-j5j6-qj27", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json b/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json index 433211fc124..64a4f95da2f 100644 --- a/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json +++ b/CVE-2025/CVE-2025-60xx/CVE-2025-6020.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6020", "sourceIdentifier": "secalert@redhat.com", "published": "2025-06-17T13:15:21.660", - "lastModified": "2025-07-17T20:15:31.223", + "lastModified": "2025-07-21T20:15:42.027", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -100,6 +100,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:11386", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:11487", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/errata/RHSA-2025:9526", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-62xx/CVE-2025-6235.json b/CVE-2025/CVE-2025-62xx/CVE-2025-6235.json index 982a62b0c2b..57918b43ba5 100644 --- a/CVE-2025/CVE-2025-62xx/CVE-2025-6235.json +++ b/CVE-2025/CVE-2025-62xx/CVE-2025-6235.json @@ -2,7 +2,7 @@ "id": "CVE-2025-6235", "sourceIdentifier": "1c053176-eef3-4d6a-ae0b-24728c86587b", "published": "2025-07-21T14:15:29.957", - "lastModified": "2025-07-21T14:15:29.957", + "lastModified": "2025-07-21T20:15:42.217", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -71,7 +71,7 @@ ], "references": [ { - "url": "https://extreme-networks.my.site.com/", + "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000128019", "source": "1c053176-eef3-4d6a-ae0b-24728c86587b" } ] diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7222.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7222.json new file mode 100644 index 00000000000..45fd1f2ffc4 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7222.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-7222", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:42.350", + "lastModified": "2025-07-21T20:15:42.350", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of 3DM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26473." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "http://www.keyshot.com/csirt", + "source": "zdi-disclosures@trendmicro.com" + }, + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-587/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7223.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7223.json new file mode 100644 index 00000000000..872cad12122 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7223.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7223", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:42.510", + "lastModified": "2025-07-21T20:15:42.510", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of VPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25044." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-474/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7224.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7224.json new file mode 100644 index 00000000000..b27dc172f73 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7224.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7224", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:42.650", + "lastModified": "2025-07-21T20:15:42.650", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of VPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25045." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-475/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7225.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7225.json new file mode 100644 index 00000000000..92d5405c617 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7225.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7225", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:42.787", + "lastModified": "2025-07-21T20:15:42.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of VPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25047." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-476/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7226.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7226.json new file mode 100644 index 00000000000..5ea5913861b --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7226.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7226", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:42.923", + "lastModified": "2025-07-21T20:15:42.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT HMITool VPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT HMITool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of VPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25048." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-477/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7227.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7227.json new file mode 100644 index 00000000000..1cead614bd5 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7227.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7227", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.063", + "lastModified": "2025-07-21T20:15:43.063", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25550." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-478/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7228.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7228.json new file mode 100644 index 00000000000..65ffaf0800e --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7228.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7228", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.207", + "lastModified": "2025-07-21T20:15:43.207", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25571." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-479/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7229.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7229.json new file mode 100644 index 00000000000..a1a2553de9d --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7229.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7229", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.343", + "lastModified": "2025-07-21T20:15:43.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25722." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-480/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7230.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7230.json new file mode 100644 index 00000000000..1ab8fb40758 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7230.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7230", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.487", + "lastModified": "2025-07-21T20:15:43.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT VT-Designer PM3 File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25723." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-843" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-481/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7231.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7231.json new file mode 100644 index 00000000000..80f2f959c01 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7231.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7231", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.623", + "lastModified": "2025-07-21T20:15:43.623", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "INVT VT-Designer PM3 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of INVT VT-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PM3 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25724." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-482/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7233.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7233.json new file mode 100644 index 00000000000..31f6ac399af --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7233.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7233", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.763", + "lastModified": "2025-07-21T20:15:43.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-26072." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-494/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7234.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7234.json new file mode 100644 index 00000000000..b5016b4f1a8 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7234.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7234", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:43.913", + "lastModified": "2025-07-21T20:15:43.913", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26074." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-495/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7235.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7235.json new file mode 100644 index 00000000000..38f1ab9383e --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7235.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7235", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.053", + "lastModified": "2025-07-21T20:15:44.053", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26075." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-485/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7236.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7236.json new file mode 100644 index 00000000000..c22208938e7 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7236.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7236", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.187", + "lastModified": "2025-07-21T20:15:44.187", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26080." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-487/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7237.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7237.json new file mode 100644 index 00000000000..18cd794eacc --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7237.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7237", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.343", + "lastModified": "2025-07-21T20:15:44.343", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26083." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-504/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7238.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7238.json new file mode 100644 index 00000000000..2d71e520294 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7238.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7238", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.480", + "lastModified": "2025-07-21T20:15:44.480", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26084." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-505/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7239.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7239.json new file mode 100644 index 00000000000..3cc569e3fbe --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7239.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7239", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.613", + "lastModified": "2025-07-21T20:15:44.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26085." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-506/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7240.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7240.json new file mode 100644 index 00000000000..0a3b5a35ed3 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7240.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7240", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.750", + "lastModified": "2025-07-21T20:15:44.750", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26086." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-488/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json new file mode 100644 index 00000000000..4d2d85b4dbb --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7241.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7241", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:44.897", + "lastModified": "2025-07-21T20:15:44.897", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26087." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-489/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json new file mode 100644 index 00000000000..1387434f2cb --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7242.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7242", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.037", + "lastModified": "2025-07-21T20:15:45.037", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26088." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-490/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json new file mode 100644 index 00000000000..0c160c15bdc --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7243.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7243", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.180", + "lastModified": "2025-07-21T20:15:45.180", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26091." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-491/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json new file mode 100644 index 00000000000..9c659c4df2e --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7244.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7244", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.317", + "lastModified": "2025-07-21T20:15:45.317", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26093." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-497/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json new file mode 100644 index 00000000000..38a9e5191cd --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7246.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7246", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.453", + "lastModified": "2025-07-21T20:15:45.453", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26095." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-498/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7247.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7247.json new file mode 100644 index 00000000000..256d8062ca9 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7247.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7247", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.597", + "lastModified": "2025-07-21T20:15:45.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26096." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-499/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7248.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7248.json new file mode 100644 index 00000000000..4cccec86734 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7248.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7248", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.733", + "lastModified": "2025-07-21T20:15:45.733", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26098." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-501/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7249.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7249.json new file mode 100644 index 00000000000..dd2b32a14f0 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7249.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7249", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:45.867", + "lastModified": "2025-07-21T20:15:45.867", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26100." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-492/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7250.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7250.json new file mode 100644 index 00000000000..9a5942d44aa --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7250.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7250", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.007", + "lastModified": "2025-07-21T20:15:46.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26107." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-486/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7251.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7251.json new file mode 100644 index 00000000000..8edd7a1ad77 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7251.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7251", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.163", + "lastModified": "2025-07-21T20:15:46.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26108." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-483/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7252.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7252.json new file mode 100644 index 00000000000..75943066b58 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7252.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7252", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.323", + "lastModified": "2025-07-21T20:15:46.323", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26109." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-484/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7253.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7253.json new file mode 100644 index 00000000000..6b35498b04b --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7253.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7253", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.463", + "lastModified": "2025-07-21T20:15:46.463", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26112." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-493/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7254.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7254.json new file mode 100644 index 00000000000..e4864c25000 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7254.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7254", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.597", + "lastModified": "2025-07-21T20:15:46.597", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26113." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-496/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7255.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7255.json new file mode 100644 index 00000000000..60ff533343f --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7255.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7255", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.737", + "lastModified": "2025-07-21T20:15:46.737", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26118." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-500/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7256.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7256.json new file mode 100644 index 00000000000..ac54632db94 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7256.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7256", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:46.873", + "lastModified": "2025-07-21T20:15:46.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26119." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-502/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7257.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7257.json new file mode 100644 index 00000000000..bfc123d125a --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7257.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7257", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.030", + "lastModified": "2025-07-21T20:15:47.030", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26126." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-503/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7258.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7258.json new file mode 100644 index 00000000000..09dd26cfee5 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7258.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7258", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.167", + "lastModified": "2025-07-21T20:15:47.167", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26127." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-507/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7260.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7260.json new file mode 100644 index 00000000000..9589b66fafc --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7260.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7260", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.310", + "lastModified": "2025-07-21T20:15:47.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26129." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-508/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7261.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7261.json new file mode 100644 index 00000000000..e94a375a427 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7261.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7261", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.443", + "lastModified": "2025-07-21T20:15:47.443", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26130." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-509/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7262.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7262.json new file mode 100644 index 00000000000..47fa498c5ec --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7262.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7262", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.590", + "lastModified": "2025-07-21T20:15:47.590", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26132." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-510/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7263.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7263.json new file mode 100644 index 00000000000..c95552e27cd --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7263.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7263", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.723", + "lastModified": "2025-07-21T20:15:47.723", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26170." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-511/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7264.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7264.json new file mode 100644 index 00000000000..96259ac31b0 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7264.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7264", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:47.863", + "lastModified": "2025-07-21T20:15:47.863", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26171." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-512/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7265.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7265.json new file mode 100644 index 00000000000..9b609dbe4ee --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7265.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7265", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.010", + "lastModified": "2025-07-21T20:15:48.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26173." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-513/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7266.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7266.json new file mode 100644 index 00000000000..a46600e75ff --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7266.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7266", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.140", + "lastModified": "2025-07-21T20:15:48.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26174." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-514/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7267.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7267.json new file mode 100644 index 00000000000..e259c80de3a --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7267.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7267", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.280", + "lastModified": "2025-07-21T20:15:48.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26179." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-515/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7268.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7268.json new file mode 100644 index 00000000000..95caadfbfb8 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7268.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7268", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.420", + "lastModified": "2025-07-21T20:15:48.420", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26182." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-516/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7269.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7269.json new file mode 100644 index 00000000000..6263efccacc --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7269.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7269", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.553", + "lastModified": "2025-07-21T20:15:48.553", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26188." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-517/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7270.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7270.json new file mode 100644 index 00000000000..dc11ed090f6 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7270.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7270", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.693", + "lastModified": "2025-07-21T20:15:48.693", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26189." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-518/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7271.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7271.json new file mode 100644 index 00000000000..fcc26d22dd3 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7271.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7271", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.830", + "lastModified": "2025-07-21T20:15:48.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26193." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-520/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7272.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7272.json new file mode 100644 index 00000000000..93f54febe5a --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7272.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7272", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:48.980", + "lastModified": "2025-07-21T20:15:48.980", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26198." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-521/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7273.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7273.json new file mode 100644 index 00000000000..bea655dd470 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7273.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7273", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.137", + "lastModified": "2025-07-21T20:15:49.137", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26202." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-519/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7274.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7274.json new file mode 100644 index 00000000000..b1b0b224a28 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7274.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7274", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.277", + "lastModified": "2025-07-21T20:15:49.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26203." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-525/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7275.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7275.json new file mode 100644 index 00000000000..dd83b4f603f --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7275.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7275", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.417", + "lastModified": "2025-07-21T20:15:49.417", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26204." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-522/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7276.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7276.json new file mode 100644 index 00000000000..ed5b08557e9 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7276.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7276", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.550", + "lastModified": "2025-07-21T20:15:49.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26208." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-523/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7277.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7277.json new file mode 100644 index 00000000000..b304814d0dd --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7277.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7277", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.687", + "lastModified": "2025-07-21T20:15:49.687", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26209." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-524/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7278.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7278.json new file mode 100644 index 00000000000..8fc5a0d4317 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7278.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7278", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.823", + "lastModified": "2025-07-21T20:15:49.823", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26211." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-526/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7279.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7279.json new file mode 100644 index 00000000000..c7d19eb1dd8 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7279.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7279", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:49.960", + "lastModified": "2025-07-21T20:15:49.960", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of CGM files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26213." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-527/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7280.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7280.json new file mode 100644 index 00000000000..49d34baff69 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7280.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7280", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.107", + "lastModified": "2025-07-21T20:15:50.107", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26214." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-528/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7281.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7281.json new file mode 100644 index 00000000000..021c0889172 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7281.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7281", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.240", + "lastModified": "2025-07-21T20:15:50.240", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26215." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-529/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7282.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7282.json new file mode 100644 index 00000000000..3e815e729d7 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7282.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7282", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.380", + "lastModified": "2025-07-21T20:15:50.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26216." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-530/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7283.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7283.json new file mode 100644 index 00000000000..ae9ad2b7c03 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7283.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7283", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.513", + "lastModified": "2025-07-21T20:15:50.513", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26219." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-531/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7284.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7284.json new file mode 100644 index 00000000000..718b5d0014d --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7284.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7284", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.647", + "lastModified": "2025-07-21T20:15:50.647", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26220." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-536/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7285.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7285.json new file mode 100644 index 00000000000..7ea9d0a6674 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7285.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7285", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.787", + "lastModified": "2025-07-21T20:15:50.787", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26221." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-537/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7286.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7286.json new file mode 100644 index 00000000000..ad99563ab16 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7286.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7286", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:50.930", + "lastModified": "2025-07-21T20:15:50.930", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26222." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-532/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7287.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7287.json new file mode 100644 index 00000000000..51b0f7bb78c --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7287.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7287", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.070", + "lastModified": "2025-07-21T20:15:51.070", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26223." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-533/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7288.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7288.json new file mode 100644 index 00000000000..30bd17ed5c6 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7288.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7288", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.203", + "lastModified": "2025-07-21T20:15:51.203", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26224." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-534/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7289.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7289.json new file mode 100644 index 00000000000..2beb5c89c56 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7289.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7289", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.337", + "lastModified": "2025-07-21T20:15:51.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26225." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-535/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7290.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7290.json new file mode 100644 index 00000000000..02862957c38 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7290.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7290", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.477", + "lastModified": "2025-07-21T20:15:51.477", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26226." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-538/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7291.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7291.json new file mode 100644 index 00000000000..29a33c2fd77 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7291.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7291", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.613", + "lastModified": "2025-07-21T20:15:51.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26227." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-539/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7292.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7292.json new file mode 100644 index 00000000000..39f89230994 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7292.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7292", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.753", + "lastModified": "2025-07-21T20:15:51.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26228." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-540/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7293.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7293.json new file mode 100644 index 00000000000..15805799acb --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7293.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7293", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:51.890", + "lastModified": "2025-07-21T20:15:51.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26229." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-541/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7294.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7294.json new file mode 100644 index 00000000000..83dec243181 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7294.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7294", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.060", + "lastModified": "2025-07-21T20:15:52.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26230." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-543/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7295.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7295.json new file mode 100644 index 00000000000..5a7913ce167 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7295.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7295", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.200", + "lastModified": "2025-07-21T20:15:52.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26242." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-544/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7296.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7296.json new file mode 100644 index 00000000000..a2c411e3818 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7296.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7296", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.337", + "lastModified": "2025-07-21T20:15:52.337", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26243." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-546/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7297.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7297.json new file mode 100644 index 00000000000..e3f76491a98 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7297.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7297", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.470", + "lastModified": "2025-07-21T20:15:52.470", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26244." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-545/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7298.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7298.json new file mode 100644 index 00000000000..d8ec8977625 --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7298.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7298", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.600", + "lastModified": "2025-07-21T20:15:52.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26246." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-542/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-72xx/CVE-2025-7299.json b/CVE-2025/CVE-2025-72xx/CVE-2025-7299.json new file mode 100644 index 00000000000..182af66bb1a --- /dev/null +++ b/CVE-2025/CVE-2025-72xx/CVE-2025-7299.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7299", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.730", + "lastModified": "2025-07-21T20:15:52.730", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26376." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-573/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7300.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7300.json new file mode 100644 index 00000000000..b66808d60cc --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7300.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7300", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:52.870", + "lastModified": "2025-07-21T20:15:52.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26377." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-547/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7301.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7301.json new file mode 100644 index 00000000000..1614cccb7b4 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7301.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7301", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.010", + "lastModified": "2025-07-21T20:15:53.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26380." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-548/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7302.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7302.json new file mode 100644 index 00000000000..41d8e8f00dc --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7302.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7302", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.223", + "lastModified": "2025-07-21T20:15:53.223", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26381." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-549/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7303.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7303.json new file mode 100644 index 00000000000..4384190b599 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7303.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7303", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.360", + "lastModified": "2025-07-21T20:15:53.360", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26384." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-550/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7304.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7304.json new file mode 100644 index 00000000000..1d44b7d34c4 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7304.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7304", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.493", + "lastModified": "2025-07-21T20:15:53.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26385." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-551/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7305.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7305.json new file mode 100644 index 00000000000..94f53d20664 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7305.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7305", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.627", + "lastModified": "2025-07-21T20:15:53.627", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26386." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-552/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7306.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7306.json new file mode 100644 index 00000000000..d65c495fa1c --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7306.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7306", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.757", + "lastModified": "2025-07-21T20:15:53.757", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26387." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-553/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7307.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7307.json new file mode 100644 index 00000000000..c449047ba20 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7307.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7307", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:53.890", + "lastModified": "2025-07-21T20:15:53.890", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26388." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-554/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7308.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7308.json new file mode 100644 index 00000000000..2fd9ff3762a --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7308.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7308", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.027", + "lastModified": "2025-07-21T20:15:54.027", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26389." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-555/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7309.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7309.json new file mode 100644 index 00000000000..6993750fb79 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7309.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7309", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.163", + "lastModified": "2025-07-21T20:15:54.163", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26391." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-557/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7310.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7310.json new file mode 100644 index 00000000000..802566f1bc6 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7310.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7310", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.300", + "lastModified": "2025-07-21T20:15:54.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26393." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-556/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7311.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7311.json new file mode 100644 index 00000000000..55669c1a6fc --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7311.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7311", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.440", + "lastModified": "2025-07-21T20:15:54.440", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26395." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-558/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7312.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7312.json new file mode 100644 index 00000000000..32b8aa37e79 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7312.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7312", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.580", + "lastModified": "2025-07-21T20:15:54.580", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26398." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-559/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7313.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7313.json new file mode 100644 index 00000000000..bf1967dec14 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7313.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7313", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.720", + "lastModified": "2025-07-21T20:15:54.720", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26399." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-560/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7314.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7314.json new file mode 100644 index 00000000000..d11c3922359 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7314.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7314", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:54.860", + "lastModified": "2025-07-21T20:15:54.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26400." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-561/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7315.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7315.json new file mode 100644 index 00000000000..6fa63ad6cdd --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7315.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7315", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.007", + "lastModified": "2025-07-21T20:15:55.007", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26408." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-562/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7316.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7316.json new file mode 100644 index 00000000000..6d556c283e2 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7316.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7316", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.140", + "lastModified": "2025-07-21T20:15:55.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26410." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-563/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7317.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7317.json new file mode 100644 index 00000000000..851588dea6b --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7317.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7317", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.277", + "lastModified": "2025-07-21T20:15:55.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26411." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-564/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7318.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7318.json new file mode 100644 index 00000000000..4caebfde8a2 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7318.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7318", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.410", + "lastModified": "2025-07-21T20:15:55.410", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26412." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-565/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7319.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7319.json new file mode 100644 index 00000000000..897529879dd --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7319.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7319", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.550", + "lastModified": "2025-07-21T20:15:55.550", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26413." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-566/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7320.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7320.json new file mode 100644 index 00000000000..0c03de3563b --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7320.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7320", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.690", + "lastModified": "2025-07-21T20:15:55.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26418." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-567/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7321.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7321.json new file mode 100644 index 00000000000..1e6f196974a --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7321.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7321", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.827", + "lastModified": "2025-07-21T20:15:55.827", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26421." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-568/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7322.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7322.json new file mode 100644 index 00000000000..50dc0cebc47 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7322.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7322", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:55.963", + "lastModified": "2025-07-21T20:15:55.963", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26423." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-569/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7323.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7323.json new file mode 100644 index 00000000000..634ed4ec469 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7323.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7323", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:56.103", + "lastModified": "2025-07-21T20:15:56.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DWG files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26428." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-570/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7324.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7324.json new file mode 100644 index 00000000000..74daf3d9d61 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7324.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7324", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:56.243", + "lastModified": "2025-07-21T20:15:56.243", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26430." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-571/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-73xx/CVE-2025-7325.json b/CVE-2025/CVE-2025-73xx/CVE-2025-7325.json new file mode 100644 index 00000000000..9b756616ba3 --- /dev/null +++ b/CVE-2025/CVE-2025-73xx/CVE-2025-7325.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-7325", + "sourceIdentifier": "zdi-disclosures@trendmicro.com", + "published": "2025-07-21T20:15:56.397", + "lastModified": "2025-07-21T20:15:56.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26434." + } + ], + "metrics": { + "cvssMetricV30": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Secondary", + "cvssData": { + "version": "3.0", + "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "zdi-disclosures@trendmicro.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-572/", + "source": "zdi-disclosures@trendmicro.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-78xx/CVE-2025-7872.json b/CVE-2025/CVE-2025-78xx/CVE-2025-7872.json index 13e642c4478..fbae4cf4f76 100644 --- a/CVE-2025/CVE-2025-78xx/CVE-2025-7872.json +++ b/CVE-2025/CVE-2025-78xx/CVE-2025-7872.json @@ -2,7 +2,7 @@ "id": "CVE-2025-7872", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-20T07:15:22.923", - "lastModified": "2025-07-20T07:15:22.923", + "lastModified": "2025-07-21T21:15:27.187", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -122,7 +122,7 @@ ], "references": [ { - "url": "https://github.com/marcelomulder/CVEs/blob/main/Report%201.md", + "url": "https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-7872.md", "source": "cna@vuldb.com" }, { diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7936.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7936.json new file mode 100644 index 00000000000..91a4f210a6d --- /dev/null +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7936.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-7936", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-07-21T20:15:56.613", + "lastModified": "2025-07-21T20:15:56.613", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is the function queryPage of the file com/platform/controller/ScheduleJobLogController.java. The manipulation of the argument beanName/methodName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://gitee.com/fuyang_lipengjun/platform/issues/ICLIK1", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.317065", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.317065", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.618979", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json new file mode 100644 index 00000000000..802250f7e88 --- /dev/null +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7938.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-7938", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-07-21T20:15:56.803", + "lastModified": "2025-07-21T20:15:56.803", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in jerryshensjf JPACookieShop \u86cb\u7cd5\u5546\u57ceJPA\u7248 1.0 and classified as critical. This issue affects the function updateGoods of the file GoodsController.java. The manipulation leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + }, + { + "lang": "en", + "value": "CWE-639" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Bemcliu/cve-reports/blob/main/cve-02-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Privilege%20Escalation/readme.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.317075", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.317075", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.618985", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json new file mode 100644 index 00000000000..3634571eb68 --- /dev/null +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7939.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-7939", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-07-21T21:15:27.380", + "lastModified": "2025-07-21T21:15:27.380", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in jerryshensjf JPACookieShop \u86cb\u7cd5\u5546\u57ceJPA\u7248 1.0. It has been classified as critical. Affected is the function addGoods of the file GoodsController.java. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + }, + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Bemcliu/cve-reports/blob/main/cve-03-%E8%9B%8B%E7%B3%95%E5%95%86%E5%9F%8EJPA%E7%89%88-Arbitrary%20File%20Upload/readme.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.317076", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.317076", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.618986", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-79xx/CVE-2025-7940.json b/CVE-2025/CVE-2025-79xx/CVE-2025-7940.json new file mode 100644 index 00000000000..c1a77255943 --- /dev/null +++ b/CVE-2025/CVE-2025-79xx/CVE-2025-7940.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-7940", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-07-21T21:15:27.560", + "lastModified": "2025-07-21T21:15:27.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Genshin Albedo Cat House App 1.0.2 on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.house.auscat. The manipulation leads to improper export of android application components. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 4.3, + "accessVector": "LOCAL", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 3.1, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-926" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/KMov-g/androidapps/blob/main/com.house.auscat.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/KMov-g/androidapps/blob/main/com.house.auscat.md#video-proof-of-concept", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.317077", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.317077", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.619036", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 4769df410fc..19403bdbc89 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-07-21T20:00:11.345883+00:00 +2025-07-21T22:00:12.389101+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-07-21T19:47:31.643000+00:00 +2025-07-21T21:15:27.560000+00:00 ``` ### Last Data Feed Release @@ -33,64 +33,67 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -302603 +302720 ``` ### CVEs added in the last Commit -Recently added CVEs: `20` +Recently added CVEs: `117` -- [CVE-2020-26799](CVE-2020/CVE-2020-267xx/CVE-2020-26799.json) (`2025-07-21T19:15:28.030`) -- [CVE-2025-36057](CVE-2025/CVE-2025-360xx/CVE-2025-36057.json) (`2025-07-21T19:15:28.840`) -- [CVE-2025-36062](CVE-2025/CVE-2025-360xx/CVE-2025-36062.json) (`2025-07-21T19:15:28.997`) -- [CVE-2025-36106](CVE-2025/CVE-2025-361xx/CVE-2025-36106.json) (`2025-07-21T19:15:29.157`) -- [CVE-2025-36107](CVE-2025/CVE-2025-361xx/CVE-2025-36107.json) (`2025-07-21T18:15:27.297`) -- [CVE-2025-36845](CVE-2025/CVE-2025-368xx/CVE-2025-36845.json) (`2025-07-21T18:15:27.467`) -- [CVE-2025-36846](CVE-2025/CVE-2025-368xx/CVE-2025-36846.json) (`2025-07-21T18:15:27.587`) -- [CVE-2025-44652](CVE-2025/CVE-2025-446xx/CVE-2025-44652.json) (`2025-07-21T18:15:27.703`) -- [CVE-2025-44654](CVE-2025/CVE-2025-446xx/CVE-2025-44654.json) (`2025-07-21T18:15:27.817`) -- [CVE-2025-51396](CVE-2025/CVE-2025-513xx/CVE-2025-51396.json) (`2025-07-21T19:15:30.957`) -- [CVE-2025-51397](CVE-2025/CVE-2025-513xx/CVE-2025-51397.json) (`2025-07-21T19:15:31.073`) -- [CVE-2025-51398](CVE-2025/CVE-2025-513xx/CVE-2025-51398.json) (`2025-07-21T19:15:31.187`) -- [CVE-2025-51400](CVE-2025/CVE-2025-514xx/CVE-2025-51400.json) (`2025-07-21T19:15:31.310`) -- [CVE-2025-51401](CVE-2025/CVE-2025-514xx/CVE-2025-51401.json) (`2025-07-21T19:15:31.410`) -- [CVE-2025-51403](CVE-2025/CVE-2025-514xx/CVE-2025-51403.json) (`2025-07-21T19:15:31.510`) -- [CVE-2025-52575](CVE-2025/CVE-2025-525xx/CVE-2025-52575.json) (`2025-07-21T18:15:28.077`) -- [CVE-2025-7933](CVE-2025/CVE-2025-79xx/CVE-2025-7933.json) (`2025-07-21T18:15:28.633`) -- [CVE-2025-7934](CVE-2025/CVE-2025-79xx/CVE-2025-7934.json) (`2025-07-21T19:15:32.670`) -- [CVE-2025-7935](CVE-2025/CVE-2025-79xx/CVE-2025-7935.json) (`2025-07-21T19:15:32.850`) -- [CVE-2025-7962](CVE-2025/CVE-2025-79xx/CVE-2025-7962.json) (`2025-07-21T18:15:28.820`) +- [CVE-2025-7305](CVE-2025/CVE-2025-73xx/CVE-2025-7305.json) (`2025-07-21T20:15:53.627`) +- [CVE-2025-7306](CVE-2025/CVE-2025-73xx/CVE-2025-7306.json) (`2025-07-21T20:15:53.757`) +- [CVE-2025-7307](CVE-2025/CVE-2025-73xx/CVE-2025-7307.json) (`2025-07-21T20:15:53.890`) +- [CVE-2025-7308](CVE-2025/CVE-2025-73xx/CVE-2025-7308.json) (`2025-07-21T20:15:54.027`) +- [CVE-2025-7309](CVE-2025/CVE-2025-73xx/CVE-2025-7309.json) (`2025-07-21T20:15:54.163`) +- [CVE-2025-7310](CVE-2025/CVE-2025-73xx/CVE-2025-7310.json) (`2025-07-21T20:15:54.300`) +- [CVE-2025-7311](CVE-2025/CVE-2025-73xx/CVE-2025-7311.json) (`2025-07-21T20:15:54.440`) +- [CVE-2025-7312](CVE-2025/CVE-2025-73xx/CVE-2025-7312.json) (`2025-07-21T20:15:54.580`) +- [CVE-2025-7313](CVE-2025/CVE-2025-73xx/CVE-2025-7313.json) (`2025-07-21T20:15:54.720`) +- [CVE-2025-7314](CVE-2025/CVE-2025-73xx/CVE-2025-7314.json) (`2025-07-21T20:15:54.860`) +- [CVE-2025-7315](CVE-2025/CVE-2025-73xx/CVE-2025-7315.json) (`2025-07-21T20:15:55.007`) +- [CVE-2025-7316](CVE-2025/CVE-2025-73xx/CVE-2025-7316.json) (`2025-07-21T20:15:55.140`) +- [CVE-2025-7317](CVE-2025/CVE-2025-73xx/CVE-2025-7317.json) (`2025-07-21T20:15:55.277`) +- [CVE-2025-7318](CVE-2025/CVE-2025-73xx/CVE-2025-7318.json) (`2025-07-21T20:15:55.410`) +- [CVE-2025-7319](CVE-2025/CVE-2025-73xx/CVE-2025-7319.json) (`2025-07-21T20:15:55.550`) +- [CVE-2025-7320](CVE-2025/CVE-2025-73xx/CVE-2025-7320.json) (`2025-07-21T20:15:55.690`) +- [CVE-2025-7321](CVE-2025/CVE-2025-73xx/CVE-2025-7321.json) (`2025-07-21T20:15:55.827`) +- [CVE-2025-7322](CVE-2025/CVE-2025-73xx/CVE-2025-7322.json) (`2025-07-21T20:15:55.963`) +- [CVE-2025-7323](CVE-2025/CVE-2025-73xx/CVE-2025-7323.json) (`2025-07-21T20:15:56.103`) +- [CVE-2025-7324](CVE-2025/CVE-2025-73xx/CVE-2025-7324.json) (`2025-07-21T20:15:56.243`) +- [CVE-2025-7325](CVE-2025/CVE-2025-73xx/CVE-2025-7325.json) (`2025-07-21T20:15:56.397`) +- [CVE-2025-7936](CVE-2025/CVE-2025-79xx/CVE-2025-7936.json) (`2025-07-21T20:15:56.613`) +- [CVE-2025-7938](CVE-2025/CVE-2025-79xx/CVE-2025-7938.json) (`2025-07-21T20:15:56.803`) +- [CVE-2025-7939](CVE-2025/CVE-2025-79xx/CVE-2025-7939.json) (`2025-07-21T21:15:27.380`) +- [CVE-2025-7940](CVE-2025/CVE-2025-79xx/CVE-2025-7940.json) (`2025-07-21T21:15:27.560`) ### CVEs modified in the last Commit -Recently modified CVEs: `42` +Recently modified CVEs: `23` -- [CVE-2025-27042](CVE-2025/CVE-2025-270xx/CVE-2025-27042.json) (`2025-07-21T19:29:15.750`) -- [CVE-2025-27043](CVE-2025/CVE-2025-270xx/CVE-2025-27043.json) (`2025-07-21T18:54:07.477`) -- [CVE-2025-27044](CVE-2025/CVE-2025-270xx/CVE-2025-27044.json) (`2025-07-21T18:54:25.313`) -- [CVE-2025-27046](CVE-2025/CVE-2025-270xx/CVE-2025-27046.json) (`2025-07-21T18:55:41.270`) -- [CVE-2025-27047](CVE-2025/CVE-2025-270xx/CVE-2025-27047.json) (`2025-07-21T18:56:55.017`) -- [CVE-2025-27050](CVE-2025/CVE-2025-270xx/CVE-2025-27050.json) (`2025-07-21T18:57:13.133`) -- [CVE-2025-27051](CVE-2025/CVE-2025-270xx/CVE-2025-27051.json) (`2025-07-21T18:59:07.647`) -- [CVE-2025-27056](CVE-2025/CVE-2025-270xx/CVE-2025-27056.json) (`2025-07-21T18:35:57.497`) -- [CVE-2025-27057](CVE-2025/CVE-2025-270xx/CVE-2025-27057.json) (`2025-07-21T18:49:14.217`) -- [CVE-2025-27058](CVE-2025/CVE-2025-270xx/CVE-2025-27058.json) (`2025-07-21T18:51:35.960`) -- [CVE-2025-27061](CVE-2025/CVE-2025-270xx/CVE-2025-27061.json) (`2025-07-21T18:51:58.323`) -- [CVE-2025-27209](CVE-2025/CVE-2025-272xx/CVE-2025-27209.json) (`2025-07-21T19:15:28.603`) -- [CVE-2025-27210](CVE-2025/CVE-2025-272xx/CVE-2025-27210.json) (`2025-07-21T19:15:28.733`) -- [CVE-2025-46116](CVE-2025/CVE-2025-461xx/CVE-2025-46116.json) (`2025-07-21T19:15:29.673`) -- [CVE-2025-47189](CVE-2025/CVE-2025-471xx/CVE-2025-47189.json) (`2025-07-21T19:15:29.837`) -- [CVE-2025-50581](CVE-2025/CVE-2025-505xx/CVE-2025-50581.json) (`2025-07-21T19:15:29.990`) -- [CVE-2025-50582](CVE-2025/CVE-2025-505xx/CVE-2025-50582.json) (`2025-07-21T19:15:30.167`) -- [CVE-2025-50583](CVE-2025/CVE-2025-505xx/CVE-2025-50583.json) (`2025-07-21T19:15:30.323`) -- [CVE-2025-50584](CVE-2025/CVE-2025-505xx/CVE-2025-50584.json) (`2025-07-21T19:15:30.490`) -- [CVE-2025-50585](CVE-2025/CVE-2025-505xx/CVE-2025-50585.json) (`2025-07-21T19:15:30.647`) -- [CVE-2025-50708](CVE-2025/CVE-2025-507xx/CVE-2025-50708.json) (`2025-07-21T19:15:30.800`) -- [CVE-2025-7864](CVE-2025/CVE-2025-78xx/CVE-2025-7864.json) (`2025-07-21T19:15:31.773`) -- [CVE-2025-7865](CVE-2025/CVE-2025-78xx/CVE-2025-7865.json) (`2025-07-21T19:15:31.893`) -- [CVE-2025-7894](CVE-2025/CVE-2025-78xx/CVE-2025-7894.json) (`2025-07-21T19:15:32.010`) -- [CVE-2025-7902](CVE-2025/CVE-2025-79xx/CVE-2025-7902.json) (`2025-07-21T19:15:32.127`) +- [CVE-2024-7959](CVE-2024/CVE-2024-79xx/CVE-2024-7959.json) (`2025-07-21T20:06:27.293`) +- [CVE-2024-7983](CVE-2024/CVE-2024-79xx/CVE-2024-7983.json) (`2025-07-21T20:06:55.510`) +- [CVE-2024-7990](CVE-2024/CVE-2024-79xx/CVE-2024-7990.json) (`2025-07-21T20:07:26.380`) +- [CVE-2024-8017](CVE-2024/CVE-2024-80xx/CVE-2024-8017.json) (`2025-07-21T20:08:16.507`) +- [CVE-2025-20226](CVE-2025/CVE-2025-202xx/CVE-2025-20226.json) (`2025-07-21T20:53:04.737`) +- [CVE-2025-20227](CVE-2025/CVE-2025-202xx/CVE-2025-20227.json) (`2025-07-21T20:51:45.463`) +- [CVE-2025-20228](CVE-2025/CVE-2025-202xx/CVE-2025-20228.json) (`2025-07-21T20:50:12.957`) +- [CVE-2025-20229](CVE-2025/CVE-2025-202xx/CVE-2025-20229.json) (`2025-07-21T20:49:49.243`) +- [CVE-2025-20231](CVE-2025/CVE-2025-202xx/CVE-2025-20231.json) (`2025-07-21T20:48:56.213`) +- [CVE-2025-20232](CVE-2025/CVE-2025-202xx/CVE-2025-20232.json) (`2025-07-21T20:45:39.787`) +- [CVE-2025-20300](CVE-2025/CVE-2025-203xx/CVE-2025-20300.json) (`2025-07-21T20:58:42.110`) +- [CVE-2025-20319](CVE-2025/CVE-2025-203xx/CVE-2025-20319.json) (`2025-07-21T20:58:20.670`) +- [CVE-2025-20320](CVE-2025/CVE-2025-203xx/CVE-2025-20320.json) (`2025-07-21T20:58:05.230`) +- [CVE-2025-20321](CVE-2025/CVE-2025-203xx/CVE-2025-20321.json) (`2025-07-21T20:57:33.183`) +- [CVE-2025-20322](CVE-2025/CVE-2025-203xx/CVE-2025-20322.json) (`2025-07-21T20:54:57.743`) +- [CVE-2025-20323](CVE-2025/CVE-2025-203xx/CVE-2025-20323.json) (`2025-07-21T20:53:33.120`) +- [CVE-2025-20324](CVE-2025/CVE-2025-203xx/CVE-2025-20324.json) (`2025-07-21T20:43:59.423`) +- [CVE-2025-3576](CVE-2025/CVE-2025-35xx/CVE-2025-3576.json) (`2025-07-21T20:15:40.353`) +- [CVE-2025-46117](CVE-2025/CVE-2025-461xx/CVE-2025-46117.json) (`2025-07-21T20:15:40.937`) +- [CVE-2025-51403](CVE-2025/CVE-2025-514xx/CVE-2025-51403.json) (`2025-07-21T20:15:41.117`) +- [CVE-2025-6020](CVE-2025/CVE-2025-60xx/CVE-2025-6020.json) (`2025-07-21T20:15:42.027`) +- [CVE-2025-6235](CVE-2025/CVE-2025-62xx/CVE-2025-6235.json) (`2025-07-21T20:15:42.217`) +- [CVE-2025-7872](CVE-2025/CVE-2025-78xx/CVE-2025-7872.json) (`2025-07-21T21:15:27.187`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 322ff7c8a5b..f785a31d19a 100644 --- a/_state.csv +++ b/_state.csv @@ -155929,7 +155929,7 @@ CVE-2020-26773,0,0,36abaabcb2ec6422284d54e22cbf880feb3135b3bd3a3b4beeaede9de55f2 CVE-2020-2678,0,0,c3a7d35f3e8d9e891f3ec35e046a6b18dadbac822c7eb6046ccbecbda65072f3,2024-11-21T05:25:58.583000 CVE-2020-2679,0,0,a1a66d000f2226b2edee0388a72722c0848d76b8301232e9c3e0d82b52ce3bd9,2024-11-21T05:25:58.767000 CVE-2020-26797,0,0,0cde9ce3e2060c8e512cc4e03e60b73fb30bb4b3164eeb22d0c6e049ca33c13b,2024-11-21T05:20:18.060000 -CVE-2020-26799,1,1,eb8a28084cccfc6b506cf77b39cde9a1e04a18c5e3237a1301a9261a03444c73,2025-07-21T19:15:28.030000 +CVE-2020-26799,0,0,eb8a28084cccfc6b506cf77b39cde9a1e04a18c5e3237a1301a9261a03444c73,2025-07-21T19:15:28.030000 CVE-2020-2680,0,0,743bd0abed4a564b1b1e4f201a52eb23255fc6d3fd0c812553f687a82d879b49,2024-11-21T05:25:58.933000 CVE-2020-26800,0,0,c461e9f7b0253a116f289098839c08911ca7f1d32cc66bf2f8afd2b4b0401dbf,2024-11-21T05:20:18.203000 CVE-2020-26801,0,0,e9c75eeca5941b60fea484b659f3e9d85b67cf7df56e034edf17bcd0bd7eca2d,2024-11-21T05:20:18.340000 @@ -275689,7 +275689,7 @@ CVE-2024-53005,0,0,3dc6e47151847664b25c50b95732d760b83155ba3d3a6b0bd92fd6b07af51 CVE-2024-53006,0,0,9319c5ef0bd10ec00679ded4a4ad11e13d0be340e712e774cbfbbe0a5382401c,2024-12-13T18:46:25.473000 CVE-2024-53007,0,0,7ba22a6b4032cf25f35c1ef00a1f90b930f980bf5515302c33e7724c5430a878,2025-01-31T08:15:08.157000 CVE-2024-53008,0,0,36a5b7477386f9a2d6dcbfd20d0c70ef83d1d8823020ec6fd4bce6966412829a,2024-11-28T03:15:16.363000 -CVE-2024-53009,0,1,b172dda48fe447caad173fb2b1dfa21f9e4bb600f2d7a579f0f2e728cf6dedcb,2025-07-21T19:32:59.003000 +CVE-2024-53009,0,0,b172dda48fe447caad173fb2b1dfa21f9e4bb600f2d7a579f0f2e728cf6dedcb,2025-07-21T19:32:59.003000 CVE-2024-5301,0,0,9944435231e4232deb9644b6756c62dd37aded32278d6910acfd86a9fca6bba1,2024-11-21T09:47:23.327000 CVE-2024-53010,0,0,e92ea489ea86ddb06142add3a7b47a2b4c77fd3f05e7b1a7bf67e9e564744128,2025-06-04T14:54:33.783000 CVE-2024-53011,0,0,9f543daf6d1032b8c529ba0691f6774574470a7477d429016cd467649e59ce57,2025-06-18T23:27:51.907000 @@ -280854,7 +280854,7 @@ CVE-2024-7756,0,0,6163543dbee45590fdddbcb2fae0bebdda459902cb0eb5a2dd2ef4d61e1551 CVE-2024-7757,0,0,ca7d079474a8e4f4b2f55e1721105da3a15a9e1d63f2bd4356eaaa03e8d55f39,2024-08-21T09:15:04.973000 CVE-2024-7758,0,0,7fc903ca15ba736b0d651784a7c410062b37d7c1e20d9b4c29a0e72260e84649,2025-06-04T20:09:05.957000 CVE-2024-7759,0,0,6833c186bc2bd963c79fdcd26c87ebcef1b76ed26610dd5c36d7eea8408c2b58,2025-06-11T16:26:25.170000 -CVE-2024-7760,0,1,c9c25c5e45807b004e9aa4de0ca117fb0bda01ef4e7b4e04eaf8a90ffe9bf1f0,2025-07-21T19:47:31.643000 +CVE-2024-7760,0,0,c9c25c5e45807b004e9aa4de0ca117fb0bda01ef4e7b4e04eaf8a90ffe9bf1f0,2025-07-21T19:47:31.643000 CVE-2024-7761,0,0,ebb720dbe2bd1de9212fdab0910814bac23ab596b21857aa02cf184b9fa8a531,2025-06-11T16:23:56.157000 CVE-2024-7762,0,0,efc682ee624d5b382e815feb7831bd7a07f4a49207ea741c015354c496b4f789,2025-06-05T14:21:28.267000 CVE-2024-7763,0,0,2bb0069c10c49c394434577c411e688ec0e38c5bfa827add12427bf96ca99483,2024-10-30T14:13:45.763000 @@ -281044,7 +281044,7 @@ CVE-2024-7954,0,0,93a82d9eb91dffe6882cc9693eaf8a0cd41cb42ca7e49fa92bbf3372a2f48b CVE-2024-7955,0,0,5de3c1006959087e1b0c6c314f3f28817f18d3fc96b9eb86b463fe5f535731c8,2025-05-16T20:12:58.150000 CVE-2024-7957,0,0,2dc0481d9344462005635b0c7ba679259964d7ae5ba14267d5ec7fcbb30bbc93,2025-03-20T10:15:38.130000 CVE-2024-7958,0,0,483ea949f242fd0880547068782264d397026329e525a14dcbacca7c22e7bcec,2024-08-19T20:15:08.907000 -CVE-2024-7959,0,0,6ed705ff2ba1866d4cdb13fb7998ca589454b7254e68eef42cbd2f0d339a51de,2025-03-20T10:15:38.257000 +CVE-2024-7959,0,1,b9d5beee43878a1022a4a53e28761b44c571994bf61eb7e9d7fdcb35b0a7403c,2025-07-21T20:06:27.293000 CVE-2024-7960,0,0,5510bd365fde412ce4f147a1de3de6f5b970947f2b1e87734cb48cc1d3e47fb6,2024-09-19T01:52:55.193000 CVE-2024-7961,0,0,27bc7795aab5199694ff965ec6adae8992029bba378c22061b3b09371c781863,2024-09-19T01:52:24.530000 CVE-2024-7962,0,0,bbbb8d83df424e2e0a4956c9fb9130e4c8a70448b1aa652c3cffd5f63e2ae62e,2024-11-01T14:19:28.453000 @@ -281068,14 +281068,14 @@ CVE-2024-7979,0,0,ed970a69fc30e58c5537bdd89a33772167048656a414d4a732e4d6366510c7 CVE-2024-7980,0,0,e8a3a45c56239daf8539e2eefc5a5fa653a5119b71f94f66cec627822cde6491,2024-08-26T15:14:10.730000 CVE-2024-7981,0,0,d69d8a362badd61c145e1651abaf26465e912ea9bb972b41f19b2d51d8034356,2025-03-20T21:15:22.703000 CVE-2024-7982,0,0,a2bf66704c3700a51fdef56f81f1a81066d3ca4518959602f1911a6142da9b80,2025-05-15T16:42:46.287000 -CVE-2024-7983,0,0,e01858f04aaaa116640002c3c352e52dc4dd89672532728e94801290952ee456,2025-03-20T10:15:38.387000 +CVE-2024-7983,0,1,0fd7ce0af8caa8b4a8e091d71827b48af7cdab63cc8b54392b9fc1d7e27265a0,2025-07-21T20:06:55.510000 CVE-2024-7984,0,0,2fe3613ee6f8711ca61bcc27ec3b005d19d888dd50e6506f28aa6823c1c24eb5,2025-06-11T16:15:33.657000 CVE-2024-7985,0,0,ec1bd93d5f9861900169c49521b54a80432ffce2591a30e5deaf45d454faf56c,2024-11-08T15:22:33.123000 CVE-2024-7986,0,0,7aa2749a7f39e6ff6d65b29682fc3751b884600325ccbd2df79626d2bca17185,2025-03-03T19:11:33.343000 CVE-2024-7987,0,0,408ab95ecf75e2d07c3e9445941bad830e3599aae4004b6b3198df0552516904,2024-08-26T18:35:13.553000 CVE-2024-7988,0,0,09d3f7d89a87370bd48978c69be2120f08467490773370f6645beb798db695e0,2024-08-26T18:35:14.617000 CVE-2024-7989,0,0,cd26af6c9ba19e6a7e0856f5be7c1437b90e54abd28d7f811499d7cb8cc81786,2024-08-26T21:15:29.777000 -CVE-2024-7990,0,0,8924a4023cb8c175a49c1ac23cda776b92d16f30209a92f097ab567891c2a00d,2025-03-20T10:15:38.503000 +CVE-2024-7990,0,1,47503546a5d779331a5acdce4473c0196bdc05741656e1ba5936e071d627c044,2025-07-21T20:07:26.380000 CVE-2024-7991,0,0,834d662c9b73967e1e136c93a9d468e0201b664314dc5f31e6d05e5dd69ccb30,2025-04-11T17:15:39.500000 CVE-2024-7992,0,0,ef9fb0a441ef15710ffc6a8786ad2128833a9e2eb95416d5785a7bee6a385b2c,2025-04-11T17:15:39.660000 CVE-2024-7993,0,0,07965c83eccb4d0c1d02c4c0f63f174d1471ffa40acc41fbcf0de6e84ca8ceef,2025-02-10T21:15:21.287000 @@ -281099,7 +281099,7 @@ CVE-2024-8013,0,0,dc5b1c2e35bafa7255738e812ffebf786dde0f2de29016b5ba51301dc88bfb CVE-2024-8014,0,0,39e994a4d1933801df3f4cf2c5711208feaf312c586e5f3bd95bad3cd1015817,2024-10-15T14:54:09.580000 CVE-2024-8015,0,0,33626b26385446797a61c181f5f01dfceff5d026445e957ac4ce3433f483ec21,2024-10-15T14:55:12.340000 CVE-2024-8016,0,0,98f884399532243b9538a89e03ff0ddb6154bc90560cf2212f646ca4d6e43091,2024-09-03T14:51:16.470000 -CVE-2024-8017,0,0,4ce3543e7025339852966454d776a3b6965b0c7be52f784f04e9905e1a5c16eb,2025-03-20T10:15:38.763000 +CVE-2024-8017,0,1,acf18a1e1c33aa695324f9328609641aa66eb32e9f97b14a55a80522760085e5,2025-07-21T20:08:16.507000 CVE-2024-8018,0,0,52a3b01287f61dd2959fdafadd58e0ec43775cbe52beab65402662dfee02fbd6,2025-07-15T15:26:48.443000 CVE-2024-8019,0,0,12069f92af3110e42e152a9324c7dada63cdd010c59a79809b2e742058803bb6,2025-03-20T10:15:39.010000 CVE-2024-8020,0,0,e61b7fcea6959879cfb3924a99736037016bbe406328a8ded825a928d320335b,2025-03-20T10:15:39.137000 @@ -284779,14 +284779,14 @@ CVE-2025-20216,0,0,4a38ffab08fdb4167d437b7d770de81bb363077208994eb22b5a2ba2f8ec6 CVE-2025-2022,0,0,c9ad71ba052e9c1605df985ea1077314ff2f2de2db94e627f5f312a848b4aa7b,2025-07-07T18:06:20.173000 CVE-2025-20221,0,0,441bd557b47b2908f03604c1b9dd38d669af6d4b442ac0b555aca282daa95e97,2025-07-11T14:43:38.090000 CVE-2025-20223,0,0,a48a979961083d0bc057e13d1957c2cd446c272df640626d792f56868b5f599e,2025-05-08T14:39:09.683000 -CVE-2025-20226,0,0,a7d7b78f2b5a462f8f8fbab923acda4e88e803bdf6f9ea923d4c1585374bb992,2025-03-27T16:45:27.850000 -CVE-2025-20227,0,0,ebcb82651c5013fa465b51a80c2e78cd1d33a6427c1af7533371d5290d22f2da,2025-03-27T16:45:27.850000 -CVE-2025-20228,0,0,534b9553dd8322185403c8e6b4a57a19af6d06b32406fd059f4312378482ac08,2025-03-27T16:45:27.850000 -CVE-2025-20229,0,0,f53867065dbf14b112afb2bb6015da49bf27d7c6fda8ad90a9c3e5362ed1b4f3,2025-03-27T16:45:27.850000 +CVE-2025-20226,0,1,66bca3e8bcd18873c2b8770139da09a42a5e2b1e8b0d78643807c813a4965cbe,2025-07-21T20:53:04.737000 +CVE-2025-20227,0,1,e666aa20d819a8d3907a3fe4dd579232a013b919df1d57c8b190765a9aeb4f40,2025-07-21T20:51:45.463000 +CVE-2025-20228,0,1,63b4c757b27c4e220230f1ef2181112c6f458ffbba693d2568647b76cb18580c,2025-07-21T20:50:12.957000 +CVE-2025-20229,0,1,124809750f2e52d6922f53468089e2fcc29de7f0971084b292fcee893149b7ba,2025-07-21T20:49:49.243000 CVE-2025-2023,0,0,1c7b011a97db93a511da983b255079459319076481b1b5c7cc8ab752f12e352f,2025-07-07T18:06:12.043000 CVE-2025-20230,0,0,12caed4ab4025dd71a4e62df5f2ecbe0fa14ee0c8769f9e7264e5535743f3409,2025-03-27T16:45:27.850000 -CVE-2025-20231,0,0,fbddf1f07bff5553e8e6ae71aba5cdc02e602550b76ade428d64bd81c9f9cc41,2025-03-27T16:45:27.850000 -CVE-2025-20232,0,0,0d5d053026f8c32cba542b805870a42fc42882344ea0c79ae85ae165075eb299,2025-03-27T16:45:27.850000 +CVE-2025-20231,0,1,d744ba7134eae75c327f43144246d2d73e26349bc906eeffcb5023c5ff367cf1,2025-07-21T20:48:56.213000 +CVE-2025-20232,0,1,7115846d90cbb8af34173877ec76abe07d867beb38ae229494b2f773acee6e10,2025-07-21T20:45:39.787000 CVE-2025-20233,0,0,827e4cb515e7d3bbb9223a377b0054261580f1cd7e2f972f151a15685ae6593c,2025-03-27T16:45:27.850000 CVE-2025-20234,0,0,8b46cfcdf4b6dadf2cdd2e27a21874994333126a592f7f2eec8dfa878ceac05b,2025-06-23T20:16:59.783000 CVE-2025-20236,0,0,55b2ae3f1bf092b063afc4d02a8f07dde44a769e479d01cdad07be9b4ecd11f4,2025-04-17T20:22:16.240000 @@ -284826,19 +284826,19 @@ CVE-2025-2029,0,0,d542afcc372a129fd7977f37fa3c5e3e2b220f9ceca1025a42b23e0691f5c3 CVE-2025-20297,0,0,fd036aef2926b86f71d7b735e8eace20d04567625f017b30a40eab31b1a018ed,2025-06-04T14:54:53.980000 CVE-2025-20298,0,0,5ef123b99aecda479eda59b2805a60f94ea649d648ececceda6a02d8cab7316c,2025-06-04T14:54:53.980000 CVE-2025-2030,0,0,0e82bd47c24dfd47a0763661b2667fde4902819acb4b011b12553acdfd131e3f,2025-03-10T07:15:36.400000 -CVE-2025-20300,0,0,752745500d003de2d3e3f097702903245f99e3a561f12e18b404712631616246,2025-07-08T16:18:34.923000 +CVE-2025-20300,0,1,7c8de3a138c945f35aa1196507f346b5a08ba294d444cae2ab2cabf69bd4add5,2025-07-21T20:58:42.110000 CVE-2025-20307,0,0,c47df8322043b50a5ea22167c3b057cdb81a8847e0951940c5fe4aebc3e37b29,2025-07-03T15:13:53.147000 CVE-2025-20308,0,0,f4037d20edfbc3fae532b8871f27100d4384c76d028655f4f8ccb9f783f6e182,2025-07-03T15:13:53.147000 CVE-2025-20309,0,0,94007e1fb11a791c6ba09a860b1df0ccb261944c8d118491b5a803627f33a93f,2025-07-03T15:23:28.870000 CVE-2025-2031,0,0,f0e6a81edfa1417e63c121f9ecf488da08992c1c9a6c102e64ae87468bb47def,2025-05-12T20:56:38.933000 CVE-2025-20310,0,0,ecff3dd677283899194911f7b4401feff49c537f670936a5a03c1400a237e149,2025-07-03T15:13:53.147000 -CVE-2025-20319,0,0,403f23fcbf4671a8ab626111a14f395ec0f2ea25626fa4107c1df1a3c7898be5,2025-07-08T16:18:34.923000 +CVE-2025-20319,0,1,4c1f64977e569f0732de1dae1c505dcc0004208d0725311987c8478c83f493f0,2025-07-21T20:58:20.670000 CVE-2025-2032,0,0,322fbe54e0e9f8c1f8fc80a5a1dbfb0b1da1a60c079e30b220dbe7508c728edb,2025-05-12T20:43:29.347000 -CVE-2025-20320,0,0,8a43cfa23fd2c22d8516875602cdff74e543cb4a36ed71663ea194ede8d289f8,2025-07-08T16:18:34.923000 -CVE-2025-20321,0,0,2c5e5f8b0ffa6cd50fe9a08a936c814837e2e536905f34f763424f6c15af6616,2025-07-08T16:18:34.923000 -CVE-2025-20322,0,0,5fd141dbf638586508014e0103c3941b999893ecd219d0bbc9172fe123848661,2025-07-08T16:18:34.923000 -CVE-2025-20323,0,0,67be3a702bcb12fe36376953ec531a4b9cca99ee087a1bca977abddd1e3d416c,2025-07-08T16:18:34.923000 -CVE-2025-20324,0,0,ae1de7fda6b169b2f7a8b88cd582f4daaa9367527cb3a53285792bbefb1b37d8,2025-07-08T16:18:34.923000 +CVE-2025-20320,0,1,c09a872c4a02aeab8351d8936513693ebcd4206bd8ea48c39aa77d549841f28b,2025-07-21T20:58:05.230000 +CVE-2025-20321,0,1,b8d5ec6a0156cb295efaed50b158f884f0c7933c6181143c48b5dc8f23aaf999,2025-07-21T20:57:33.183000 +CVE-2025-20322,0,1,95fbc24c176ffc41c8c2a8bd5503d1fed7e487ad490ba6d083828af854fbb467,2025-07-21T20:54:57.743000 +CVE-2025-20323,0,1,d2e56475ec29e8ef1e20d530266a7984535f979f183b7fde4ad0888234cbc899,2025-07-21T20:53:33.120000 +CVE-2025-20324,0,1,0232511c57c24c2c8999d47145b54a98085ea98089b79ebe76638cc24dcc6f7e,2025-07-21T20:43:59.423000 CVE-2025-20325,0,0,923bbb4bbf39d66f263be2945aba70aab88d3eb8a001b1d8dcd2d96e88172fdc,2025-07-08T16:18:34.923000 CVE-2025-2033,0,0,a9925f74a4090ac521f925c7b018b5a07f14be6b2b87ade4d28cf6d0a23ae832,2025-05-13T20:58:31.063000 CVE-2025-20337,0,0,1f21933d714a52897974bd61de3436b907033fd212eecd3f5b0dedffcce00883,2025-07-17T20:42:07.780000 @@ -285452,18 +285452,18 @@ CVE-2025-21418,0,0,286c461de95fba525ffd95fe19188a97b0613df56bf1afe14ca9be4aa494d CVE-2025-21419,0,0,acdb4d37a32faa1cb0f65f0fbb7358475e2deb811438263e59eb8f6bcbeca8e1,2025-02-14T17:32:53.087000 CVE-2025-21420,0,0,32a7e46f27d290c0e9a5b92e079c0424752a30e3cfa9e5d424062d7af6a66d41,2025-02-14T17:36:09.683000 CVE-2025-21421,0,0,f15bf249b08721bdbad98ddd0135517b6ad56087f845d4d9619503a691f86d18,2025-04-07T14:17:50.220000 -CVE-2025-21422,0,1,c230fe01c6e8b3523cd1de9781ec07aafa4f2876537a5491a7c6ea19aa8d8945,2025-07-21T19:33:10.060000 +CVE-2025-21422,0,0,c230fe01c6e8b3523cd1de9781ec07aafa4f2876537a5491a7c6ea19aa8d8945,2025-07-21T19:33:10.060000 CVE-2025-21423,0,0,0e328d405ecfbb8fe86632fa5a763291326842f944399e5e60b0b14a8178f014,2025-04-07T14:17:50.220000 CVE-2025-21424,0,0,3a83225b8d2edd7b934464a21b7f49bd35353b067d8247c64049e806cfc35f96,2025-03-07T14:12:17.933000 CVE-2025-21425,0,0,2973138d7d9b6e35e7d945a94baa50b4f2fca4c64a4564e5551f5d2248e34508,2025-04-07T14:17:50.220000 -CVE-2025-21426,0,1,57726b578185c0ab746661564a668af772fbcdc63cf860355582f463b9ea5b34,2025-07-21T19:37:20.947000 -CVE-2025-21427,0,1,68519e4332f50f2699219850ce0e15eafca0efdc9cf6637c5b7403aca7a0c07f,2025-07-21T19:41:23.737000 +CVE-2025-21426,0,0,57726b578185c0ab746661564a668af772fbcdc63cf860355582f463b9ea5b34,2025-07-21T19:37:20.947000 +CVE-2025-21427,0,0,68519e4332f50f2699219850ce0e15eafca0efdc9cf6637c5b7403aca7a0c07f,2025-07-21T19:41:23.737000 CVE-2025-21428,0,0,69b7442476ea6fd4758477152b60b52350e6c0f429301f169d66bd9991f80aef,2025-04-07T14:17:50.220000 CVE-2025-21429,0,0,870d21a2653678c9bcc5dba6b9c6c70a3d313f6766692e0010768363d71bb739,2025-04-07T14:17:50.220000 CVE-2025-21430,0,0,b58800afdeb82d2fa1166c7a812e6cb300a5e0ba757e90c33913521b0810a404,2025-04-07T14:17:50.220000 CVE-2025-21431,0,0,0747d8dea6587a9b7f15f86751be6678f61e3a1c0761e2401a2264a2bfc8a59a,2025-04-07T14:17:50.220000 -CVE-2025-21432,0,1,8c7398d0cb9a75ce5201e5f896f63c2ac5fb20b7533ac85d63db43851997b182,2025-07-21T19:42:26.893000 -CVE-2025-21433,0,1,f74c0ab3d1e0638a4036f58eb8b03c4b1dc2f005d2f7752665bd148e6b430c9e,2025-07-21T19:45:31.420000 +CVE-2025-21432,0,0,8c7398d0cb9a75ce5201e5f896f63c2ac5fb20b7533ac85d63db43851997b182,2025-07-21T19:42:26.893000 +CVE-2025-21433,0,0,f74c0ab3d1e0638a4036f58eb8b03c4b1dc2f005d2f7752665bd148e6b430c9e,2025-07-21T19:45:31.420000 CVE-2025-21434,0,0,e97b8c7db7b59840aab9791601fe67bf15763c97aa47c7325190ba36366f1b64,2025-04-07T14:17:50.220000 CVE-2025-21435,0,0,5ee5afa3d171e3c1b3b86828f8cca5087faa3199de081dd271b08927f77c403f,2025-04-07T14:17:50.220000 CVE-2025-21436,0,0,521a5912af5bbce349dcd7dfc43a4fbaa2b25357df3d302375c63b4105e5794b,2025-04-07T14:17:50.220000 @@ -285474,21 +285474,21 @@ CVE-2025-21440,0,0,beead78335a07e923a7e0e2f3c4cea3393d64f4794a92e98798fb031a740c CVE-2025-21441,0,0,6767c9feebb7b2b01446d669a9d5908e7e079326445739929c36a44179f4e96a,2025-04-07T14:17:50.220000 CVE-2025-21442,0,0,e3b357683ad4065cccd1ed602ad51647e904baebd6f01fc1649f64566424937a,2025-04-07T14:17:50.220000 CVE-2025-21443,0,0,62996cb6f060941b6ecddbc544a73b97b0f46a7a491c3db31b968a3a02fa92ab,2025-04-07T14:17:50.220000 -CVE-2025-21444,0,1,b8019c6557f6d3bbcf0eb1ac475c7a0812e0ca5e4d32e0c414b1a265e9831572,2025-07-21T19:45:42.533000 -CVE-2025-21445,0,1,1344b067fe2f08dd69f52a866f1bb59ef2f898dba0b16a10a295ebe8817792bd,2025-07-21T19:46:09.200000 -CVE-2025-21446,0,1,e033926e465894c5f5f7642f42b4c38cb11cdf79c2991b19db59697d6066593d,2025-07-21T19:20:28.930000 +CVE-2025-21444,0,0,b8019c6557f6d3bbcf0eb1ac475c7a0812e0ca5e4d32e0c414b1a265e9831572,2025-07-21T19:45:42.533000 +CVE-2025-21445,0,0,1344b067fe2f08dd69f52a866f1bb59ef2f898dba0b16a10a295ebe8817792bd,2025-07-21T19:46:09.200000 +CVE-2025-21446,0,0,e033926e465894c5f5f7642f42b4c38cb11cdf79c2991b19db59697d6066593d,2025-07-21T19:20:28.930000 CVE-2025-21447,0,0,426315f42c42f42a5481406e4be3e161d98a87e5838d319262f923ee65bfacbf,2025-04-07T14:17:50.220000 CVE-2025-21448,0,0,7ebc4e443c7ecb4c31b427e79060d2d52e541e1fd347aab91892496c29efee53,2025-04-07T14:17:50.220000 -CVE-2025-21449,0,1,7b3eb4cf3f981dcffd089de0ae12a35cebf1e5c5e6f7ea5eb5a937813025369b,2025-07-21T19:22:35.307000 -CVE-2025-21450,0,1,1bf51675cca567f048fdc2cf90771ac83036cda000993f636e0a9b911624075d,2025-07-21T19:23:03.047000 +CVE-2025-21449,0,0,7b3eb4cf3f981dcffd089de0ae12a35cebf1e5c5e6f7ea5eb5a937813025369b,2025-07-21T19:22:35.307000 +CVE-2025-21450,0,0,1bf51675cca567f048fdc2cf90771ac83036cda000993f636e0a9b911624075d,2025-07-21T19:23:03.047000 CVE-2025-21453,0,0,a6792c38b141416584424c30fdb9e75757be44c603a39ac6c3466999938a3409,2025-05-09T19:10:06.443000 -CVE-2025-21454,0,1,be1ae70b83c27dd885deb4eb4b08a7f2a7143d11b6b0b356c0b5664faef962b6,2025-07-21T19:28:40.503000 +CVE-2025-21454,0,0,be1ae70b83c27dd885deb4eb4b08a7f2a7143d11b6b0b356c0b5664faef962b6,2025-07-21T19:28:40.503000 CVE-2025-21459,0,0,5c386ebea9ff578717babb7aa51aad849d73bca7cd137939105262b1d5b65dd6,2025-05-09T19:09:53.410000 CVE-2025-2146,0,0,f9f0ee70a1a39eb0556adf9eb68f745a3064e4c76eb406a896b9039c6428fac4,2025-06-03T15:49:50.793000 CVE-2025-21460,0,0,389cc7be8fa099528db069375678ba8c4a64d44cb4ba042b2379ea417e3aa0f3,2025-05-09T19:09:33.447000 CVE-2025-21462,0,0,472fd520000393ead0a178585c5420674292d66900bca0ccacb3268944c15d7e,2025-05-09T19:09:19.660000 CVE-2025-21463,0,0,593907bcf873c565a7c581e265b97d32aba720c27ffcf57b3226463b4c2d25ca,2025-06-04T14:54:33.783000 -CVE-2025-21466,0,1,bb1e75068bc313e1812207ada4ebee3c2e08475921eca2d3df7e78365740f1d8,2025-07-21T19:28:54.260000 +CVE-2025-21466,0,0,bb1e75068bc313e1812207ada4ebee3c2e08475921eca2d3df7e78365740f1d8,2025-07-21T19:28:54.260000 CVE-2025-21467,0,0,ee6894e4cbe2827de5e9551f2468fe4483ae3970632b17da0270579a63a0e452,2025-05-09T19:09:11.167000 CVE-2025-21468,0,0,657db3e9e3b08d3a920f7b517225c72105a802e2c6d292c94318fca052f3a5a0,2025-05-09T19:09:01.703000 CVE-2025-21469,0,0,44a98d2c7da1387889249fd5539f1241bba1748830f946c1d60c946e176d6446,2025-05-09T19:08:51.337000 @@ -288601,7 +288601,7 @@ CVE-2025-2481,0,0,c2c28d972678d70cba9bebdec9ea93fe1d44de9c5f8caa95f7b1a4769c38aa CVE-2025-24810,0,0,5dc96a04891b646d8f099d1fa627e0a60065bb9f47866c74211a0f5415867e23,2025-01-28T05:15:11.413000 CVE-2025-24811,0,0,2da7e99907675b0c3b84fff601eb43c4c4c27c662d95c7205901bce5bb8705d8,2025-02-11T11:15:16.907000 CVE-2025-24812,0,0,3542fd62679fcd1754aabe0f38d924c5bd34578dfc13aa46aeaa150dd810a16a,2025-02-11T11:15:17.080000 -CVE-2025-24813,0,1,4dcd5fc693eeee8c3fc239b5e64a098cb2f6984805ad0a76bd8404ec656b1c46,2025-07-21T18:15:26.490000 +CVE-2025-24813,0,0,4dcd5fc693eeee8c3fc239b5e64a098cb2f6984805ad0a76bd8404ec656b1c46,2025-07-21T18:15:26.490000 CVE-2025-24814,0,0,0b610fe4d31f3ef25049496a5f40059090873e3f5c53f90c1c81fd84d53f6fce,2025-06-25T16:41:43.923000 CVE-2025-2482,0,0,13e04c36e9d9620c8f99c8187c0daf7048ec08de8db27a61dd4fede0b1090515,2025-03-22T07:15:25.307000 CVE-2025-24826,0,0,afc4a3c6aa0e8288830e8c91cc81c25b8636a1b49a80120ea49c59c3d903f3ac,2025-01-28T21:15:18.817000 @@ -289808,8 +289808,8 @@ CVE-2025-2685,0,0,e47390d79e6358f0707017a49a80b868500d2e61df885503f5f07ed00adc5d CVE-2025-26850,0,0,ea27eb1b3b2850c5e2f3f852b88f446f462bb76fba327729294191852414dd2a,2025-07-08T16:18:53.607000 CVE-2025-26852,0,0,d2fbc16260605a1399a1a51f29d4909881f6e74e5303f79849970f70fec18739,2025-04-23T18:59:47.253000 CVE-2025-26853,0,0,b4d501221b958b69b8680b27722da7876f60455a590dcd68bb308199eb3f564e,2025-04-23T19:13:36.757000 -CVE-2025-26854,0,1,c598731cad7080389e342826b6dada15fcd27a7ac425bebfd0042a7f06d6c9e0,2025-07-21T19:15:28.283000 -CVE-2025-26855,0,1,718cffb0e7c29e4a2cb2f01dab6bee16830682453353ea3150abb3c11e6ff5e8,2025-07-21T19:15:28.447000 +CVE-2025-26854,0,0,c598731cad7080389e342826b6dada15fcd27a7ac425bebfd0042a7f06d6c9e0,2025-07-21T19:15:28.283000 +CVE-2025-26855,0,0,718cffb0e7c29e4a2cb2f01dab6bee16830682453353ea3150abb3c11e6ff5e8,2025-07-21T19:15:28.447000 CVE-2025-26856,0,0,7824298cfc11aa81d23219a23487dd842dd5c11d44f90723ef1786188c90cd64,2025-02-20T06:15:21.673000 CVE-2025-26857,0,0,6f21fa82e13fdcc7bcb7f3ef6dda5171a735ca4141e7c0df0340f6e37550898e,2025-04-16T13:25:37.340000 CVE-2025-2686,0,0,eb80a0c8f7b31a5582d2e1c5cc77c14ca573ee9db201a3a963e2f24b2e246438,2025-03-24T06:15:13.127000 @@ -289984,21 +289984,21 @@ CVE-2025-2703,0,0,d5ea40e178148932f49d90ec4c309716760c7d3b1ed975c047629950db3be6 CVE-2025-27031,0,0,9fa4d5238e55dfabc5a9becc0748532469d6008767dbc00fd4050a94f50be84d,2025-06-04T14:54:33.783000 CVE-2025-27038,0,0,fe0578cb45b48dbd7571220d905a674d9df1e67d36609a2b08ca2656fb74b6b8,2025-06-04T17:23:58.387000 CVE-2025-2704,0,0,2cd2fdcb7bf078b49adccb5ec3568934eab2cf5655946edca476f7cde559986a,2025-05-24T01:38:01.433000 -CVE-2025-27042,0,1,3dfc2041298a289edf38a7be6caa164a41f7452a1816f462cef45d790446d100,2025-07-21T19:29:15.750000 -CVE-2025-27043,0,1,15c6bbdc7aab31979c9454788f5a80336310ddd5f971af4180b407f6f03f5979,2025-07-21T18:54:07.477000 -CVE-2025-27044,0,1,8f87bfd62f7d7893a62c937d9c7839f93b0b4a17d2d6bdf2574d4e53e03fd0f1,2025-07-21T18:54:25.313000 -CVE-2025-27046,0,1,adaa6312ef31c2bbd7946dc446caeebf12e95b665f48f93c80aeac2fb0fd584d,2025-07-21T18:55:41.270000 -CVE-2025-27047,0,1,92018ffd06510e655256c3ac1241070c027ae068eb262a1acf104593177cd5a1,2025-07-21T18:56:55.017000 +CVE-2025-27042,0,0,3dfc2041298a289edf38a7be6caa164a41f7452a1816f462cef45d790446d100,2025-07-21T19:29:15.750000 +CVE-2025-27043,0,0,15c6bbdc7aab31979c9454788f5a80336310ddd5f971af4180b407f6f03f5979,2025-07-21T18:54:07.477000 +CVE-2025-27044,0,0,8f87bfd62f7d7893a62c937d9c7839f93b0b4a17d2d6bdf2574d4e53e03fd0f1,2025-07-21T18:54:25.313000 +CVE-2025-27046,0,0,adaa6312ef31c2bbd7946dc446caeebf12e95b665f48f93c80aeac2fb0fd584d,2025-07-21T18:55:41.270000 +CVE-2025-27047,0,0,92018ffd06510e655256c3ac1241070c027ae068eb262a1acf104593177cd5a1,2025-07-21T18:56:55.017000 CVE-2025-2705,0,0,d7cf085971e80ff2f3017b9a76ca7e7c021414ba6b4da520921b330deccd7930,2025-03-27T16:45:46.410000 -CVE-2025-27050,0,1,6024ef1bf246f645e1973e98d3ae2cd9a0218cf0adb70e7d7e14e751e5b9c1d7,2025-07-21T18:57:13.133000 -CVE-2025-27051,0,1,493518db6d488afa0ae5ff18b8821eb41655daec05fe6dd120d91cf604536eed,2025-07-21T18:59:07.647000 +CVE-2025-27050,0,0,6024ef1bf246f645e1973e98d3ae2cd9a0218cf0adb70e7d7e14e751e5b9c1d7,2025-07-21T18:57:13.133000 +CVE-2025-27051,0,0,493518db6d488afa0ae5ff18b8821eb41655daec05fe6dd120d91cf604536eed,2025-07-21T18:59:07.647000 CVE-2025-27052,0,0,e9118d38c674b36508c8a46f1fd14d1ccd88d6c3beaaf1f9b84991c9c89dd4ed,2025-07-21T17:51:58.650000 CVE-2025-27055,0,0,be862ddd8bbb5dee6a773a3baf2ec9121bc448eb0e1fc0d381e642489f32ab68,2025-07-21T17:54:05.730000 -CVE-2025-27056,0,1,583652170da1344a0ce5048f8eac2a2681c38a56057da80ab7450ec1b917d84f,2025-07-21T18:35:57.497000 -CVE-2025-27057,0,1,959ddce9eb3d4f2c00ee86958b82a5fdcc3c89c6dfad95c5496228c98dcb2e03,2025-07-21T18:49:14.217000 -CVE-2025-27058,0,1,7256dd9edf999e0492a3f0e4ecf2da64bc24e13f77938658cbdb08cf63df43e8,2025-07-21T18:51:35.960000 +CVE-2025-27056,0,0,583652170da1344a0ce5048f8eac2a2681c38a56057da80ab7450ec1b917d84f,2025-07-21T18:35:57.497000 +CVE-2025-27057,0,0,959ddce9eb3d4f2c00ee86958b82a5fdcc3c89c6dfad95c5496228c98dcb2e03,2025-07-21T18:49:14.217000 +CVE-2025-27058,0,0,7256dd9edf999e0492a3f0e4ecf2da64bc24e13f77938658cbdb08cf63df43e8,2025-07-21T18:51:35.960000 CVE-2025-2706,0,0,b7301874e71862c2693f8002ec404483a315cca246767eff2f97ca78b31281f9,2025-03-27T16:45:46.410000 -CVE-2025-27061,0,1,efc88268433152517a527f813e8239961db93df17197660fa56a5f28b84db447,2025-07-21T18:51:58.323000 +CVE-2025-27061,0,0,efc88268433152517a527f813e8239961db93df17197660fa56a5f28b84db447,2025-07-21T18:51:58.323000 CVE-2025-2707,0,0,5d95bb96cec47e1b12a72bfc727440ca24f0903598349e4533a44c3556b01ce7,2025-07-15T13:07:48.617000 CVE-2025-27078,0,0,d965af916f92d2db1a98213768345ac86ccaa481e270cc65e36339f5a02ca0fe,2025-04-08T18:13:53.347000 CVE-2025-27079,0,0,2e6807eb9db0ff0cab73307a945a3f280ecd9d2483ae144485c2a82083b449a4,2025-04-08T18:13:53.347000 @@ -290127,9 +290127,9 @@ CVE-2025-27204,0,0,915ee58270bed657aa3414a33920c2828a16919cebf1c439beba158fba489 CVE-2025-27205,0,0,b5a3be62757c631169ae6f30a73aa85000f349fef09deb61e50341f0061f73f9,2025-04-09T20:03:01.577000 CVE-2025-27206,0,0,d294d50f3906c6fb3fe785cd1596aadcf69ed2db2162953cfc8dc1288ebf1c78,2025-06-23T19:25:38.097000 CVE-2025-27207,0,0,1c7dcef4ac4e484392f18d8488dffbf14e7319161e3db5ca63f06641870014a6,2025-07-11T16:42:26.887000 -CVE-2025-27209,0,1,062b6997fb016fd5239cbfa052fac0c87a920c8ba2ce5ecc85cbf48a62622d57,2025-07-21T19:15:28.603000 +CVE-2025-27209,0,0,062b6997fb016fd5239cbfa052fac0c87a920c8ba2ce5ecc85cbf48a62622d57,2025-07-21T19:15:28.603000 CVE-2025-2721,0,0,aa8959d6414ccd78b185fee276132fe2183524f73060666b030d6ef296f0e6b0,2025-04-22T13:15:42.990000 -CVE-2025-27210,0,1,7220916ac5fb4c7bc421e7eea7eef7ab7ead258209014b09102f604c03c54932,2025-07-21T19:15:28.733000 +CVE-2025-27210,0,0,7220916ac5fb4c7bc421e7eea7eef7ab7ead258209014b09102f604c03c54932,2025-07-21T19:15:28.733000 CVE-2025-27218,0,0,a1f84aab7c20671025069586dc6eda2e424af576b61d56df1ec2458e5aa40a25,2025-02-20T21:15:26.510000 CVE-2025-27219,0,0,461867c9c6ad1aeffed9a753c37dda365d03d66745eecef158a52cad45739e4c,2025-03-05T14:08:20.493000 CVE-2025-2722,0,0,5429e7ab595a3d641318e5e903d551e7af1ff80fa04c038e41577e9264377585,2025-04-22T13:15:43.080000 @@ -294534,7 +294534,7 @@ CVE-2025-3572,0,0,85452ae8a7fdcd086072bc1a78d977cf0bc1d5dd6fa9f5553989fa8c8fb7fd CVE-2025-3573,0,0,095399568374006bc1e93d539eebcb743d7cc965cdc4a121e4480938fddae558,2025-04-15T18:39:27.967000 CVE-2025-3574,0,0,94473ff233af08be74c232281156bfa5db699f8872e1802977040bd9e36c2d62,2025-04-15T18:39:27.967000 CVE-2025-3575,0,0,73e2cf1e3fbb3ccb86ef07985e1084456954c5cbbd5b3215dbed3da8318cbbf4,2025-04-15T18:39:27.967000 -CVE-2025-3576,0,0,957bbbebfac26fb5d2c366a1581678e2e0c111337065d1b5061024ff1fcc5960,2025-06-24T13:15:22.657000 +CVE-2025-3576,0,1,6fbfda5a257f8a03f438c8316c77cf695eda85e5b86592b01d7fbdab2858edf1,2025-07-21T20:15:40.353000 CVE-2025-3577,0,0,56629bd7e990c7a0d492f7fcbfe38c7580cf294d9e5db776d3fa189b9e593731,2025-06-23T19:29:59.393000 CVE-2025-3578,0,0,e13e840aaf0a24c67a679c44959c85bec14fbcb560caa6c65722eed662e1826f,2025-04-15T18:39:27.967000 CVE-2025-3579,0,0,6c0217c9a43a942438244f9ebf630b5c65085fd986d644363e1cb943f76ed2bf,2025-04-15T18:39:27.967000 @@ -294581,9 +294581,9 @@ CVE-2025-36049,0,0,2a677c358d9f805db8bbb2e9b50a2fe58c97d8abe6296a5b5533901f920d6 CVE-2025-3605,0,0,9176bdbc7dac7692b3792270d47f63d72180fcbe4f8435ffab86ce86c23fcbca,2025-05-12T17:32:32.760000 CVE-2025-36050,0,0,9924fee6b96a28ef599becda3313e6f2a6f534db0fa5f23b692badcc78188651,2025-06-23T20:16:40.143000 CVE-2025-36056,0,0,8728ee390c02dc52039ad580e98737cbeff578c2f2ac5efcc7cf00c78a40962c,2025-07-03T15:14:12.767000 -CVE-2025-36057,1,1,a82c94a34cd6fe6cfdc0c9bef1f891b071abe41643f7b2eb7129b394b3ee8a19,2025-07-21T19:15:28.840000 +CVE-2025-36057,0,0,a82c94a34cd6fe6cfdc0c9bef1f891b071abe41643f7b2eb7129b394b3ee8a19,2025-07-21T19:15:28.840000 CVE-2025-3606,0,0,9e462a995d1e7019ecb96791362c7ba0b1305419ebea53ce8f14b67c14ed347e,2025-04-29T13:52:28.490000 -CVE-2025-36062,1,1,87b7b2a513f95d157be79818c2bfc41f6cf7e9e516f9a0e14def25b9fccf6ea2,2025-07-21T19:15:28.997000 +CVE-2025-36062,0,0,87b7b2a513f95d157be79818c2bfc41f6cf7e9e516f9a0e14def25b9fccf6ea2,2025-07-21T19:15:28.997000 CVE-2025-3607,0,0,00a61937e6c72150e849325aa06a18ed35736c13546aa89382694e35fbdc7236,2025-04-29T13:52:47.470000 CVE-2025-3608,0,0,9a5b2a685e23ed54a5b4d9074656a8f2a2ccacace07a3f4ed149936d1bf208f0,2025-05-21T19:48:33.080000 CVE-2025-3609,0,0,70aca4a435588edac6811092b960a9852b2ca7d0874089032dd75bd132c774d9,2025-05-07T14:13:35.980000 @@ -294591,8 +294591,8 @@ CVE-2025-36090,0,0,00f5e719085cb44e9a9e7d0728b5e8412c5f525ffd00cd40ea700871c1ad6 CVE-2025-36097,0,0,cd02e00ab39d5f1970b9b9401d3cfcc3b743d825c8d75fb7d30e4cf1be73695f,2025-07-17T21:15:50.197000 CVE-2025-3610,0,0,61c3f9e10cb5c67e4aacd07ec451ffafa8175978740a3ca7853e9c21ac959413,2025-05-07T14:13:35.980000 CVE-2025-36104,0,0,c9e652d59f5185dd37085d4a607f4f60343bbd3b0c5fb12feaa7fe0814d4bf90,2025-07-15T13:14:49.980000 -CVE-2025-36106,1,1,96fdd3ac9c87d801692e11a05fa887cb83c8ded44bdf67226cebdb0ba2699fc0,2025-07-21T19:15:29.157000 -CVE-2025-36107,1,1,c5c97ab243db5dcb490e255b569437546d57dd90f9a9fd16d1dd8f743a06b569,2025-07-21T18:15:27.297000 +CVE-2025-36106,0,0,96fdd3ac9c87d801692e11a05fa887cb83c8ded44bdf67226cebdb0ba2699fc0,2025-07-21T19:15:29.157000 +CVE-2025-36107,0,0,c5c97ab243db5dcb490e255b569437546d57dd90f9a9fd16d1dd8f743a06b569,2025-07-21T18:15:27.297000 CVE-2025-3611,0,0,af8c03fabc0cb26da4d67c2ffa94c7fe04a3ec72fe85b993092d516946b525af,2025-07-08T17:11:34.797000 CVE-2025-3612,0,0,b3e7e1fd46c9147c27f3feb15d1a5ba8eabce3f8bab41f1f78e6d74dff7b1b50,2025-04-15T18:39:27.967000 CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000 @@ -294687,8 +294687,8 @@ CVE-2025-3681,0,0,fd79f589c2a11fea7baa92fbbc12d2fd79bf8565cff2f1417893682e280545 CVE-2025-3682,0,0,de57eace49a6d27204917c5ceecbe658fdb389a40602552630be6620ebd4bb86,2025-04-29T20:17:53.050000 CVE-2025-3683,0,0,806199c36683a1a495080faf4f821b587dc0a352eaa7192b73d771799e75d407,2025-04-29T20:18:17.860000 CVE-2025-3684,0,0,7836d98df2297c3ae4c00520b5763d5507d37fc0ab3fa0fd3ea28ab66ce84d57,2025-04-24T12:58:54.257000 -CVE-2025-36845,1,1,aa3f84f6877119025cce83be0e1a816817c624baa08fdc330409f2341e13eb6a,2025-07-21T19:15:29.360000 -CVE-2025-36846,1,1,6b3bc43904be3babc8644d10031286644f9e97694043f47245fc40bfd4373f80,2025-07-21T19:15:29.520000 +CVE-2025-36845,0,0,aa3f84f6877119025cce83be0e1a816817c624baa08fdc330409f2341e13eb6a,2025-07-21T19:15:29.360000 +CVE-2025-36846,0,0,6b3bc43904be3babc8644d10031286644f9e97694043f47245fc40bfd4373f80,2025-07-21T19:15:29.520000 CVE-2025-3685,0,0,3a67948a7766390cea93599c00e3b1b3041acf42fb5dac717813d68e2a48374a,2025-05-28T21:09:35.543000 CVE-2025-36852,0,0,dee8ab0224e580dd4f3b987fb8708b2945cb8678d654eab4fb9316cebea641f7,2025-06-12T16:06:29.520000 CVE-2025-3686,0,0,0df30c8de6b0b9161a0c8150130ffb5e72bd0f69a6162c2cb918ce22a84cbd7c,2025-06-25T18:53:22.990000 @@ -296770,9 +296770,9 @@ CVE-2025-44649,0,0,d368a0854dafbc9447d98ab71cb9b5464c35e0978ccbb52df0c3678309a32 CVE-2025-4465,0,0,5e3539ad4e09afd6024346d5d536b7c9a31934bd86f0564a89f4126149c02dea,2025-05-16T15:35:50.777000 CVE-2025-44650,0,0,fb1632289b4f6afa7eb7a48124e2455f4ec62ec0e69c672961a6b108a0603017,2025-07-21T16:15:29.090000 CVE-2025-44651,0,0,773ebbf83c0c392c6bf2de086a7222e9f9072c91ac59452eb95ad5309c5cba56,2025-07-21T16:15:29.207000 -CVE-2025-44652,1,1,13a76cae4572663135b18f91c2e78f8d7391ad0117ab7dbbf74b6da4a8bcd869,2025-07-21T18:15:27.703000 +CVE-2025-44652,0,0,13a76cae4572663135b18f91c2e78f8d7391ad0117ab7dbbf74b6da4a8bcd869,2025-07-21T18:15:27.703000 CVE-2025-44653,0,0,f2a75ac1bc7868771650ae6dddfe26e0a6049f72e6b7340d7065905f4703b35f,2025-07-21T17:15:37.247000 -CVE-2025-44654,1,1,d50e1d45fb9322d03ed6bc2b4965f275f6b69b819dceb0277e79c77454b19ca6,2025-07-21T18:15:27.817000 +CVE-2025-44654,0,0,d50e1d45fb9322d03ed6bc2b4965f275f6b69b819dceb0277e79c77454b19ca6,2025-07-21T18:15:27.817000 CVE-2025-44655,0,0,164369a044933cd1c003072c01330c291c07536d8f0465a7d712815b86e5d97a,2025-07-21T16:15:29.323000 CVE-2025-44657,0,0,699979da988b01f0af075d79db354f4615861afd7878072f371f7c55b9e5b0b0,2025-07-21T16:15:29.443000 CVE-2025-44658,0,0,46c61febb585c8f141bc1cf52a72507bd2a14bcdc2815973e485fcb24dda00fb,2025-07-21T16:15:29.560000 @@ -297117,8 +297117,8 @@ CVE-2025-46101,0,0,6d44fb5fd8a3dd02cb4ccaef14f5f6922e3d3a0251e26986917804d7cd476 CVE-2025-46102,0,0,71408c6823e4563ce89dfc2be3377d691bd8c7f84a15d9ed1dc887da4378e2d9,2025-07-17T21:15:50.197000 CVE-2025-46109,0,0,a81953cf13c139be94a1c266dfcc581a11077f2b3187b5b6aa057caceb5c0bbc,2025-06-26T15:51:06.490000 CVE-2025-4611,0,0,551957ca30c77144066c2501102cbe8b5cc59e5d0e8959ef20d14b731299a950,2025-05-21T20:24:58.133000 -CVE-2025-46116,0,1,74137010d24ab8c695b25b0d1aba1678bc0d111d39ff68231b6c57cd32a246a3,2025-07-21T19:15:29.673000 -CVE-2025-46117,0,0,17f9277a5aed4d7368666a1a17a4429f8d8e612be2d870e2a5875fe0633a8721,2025-07-21T15:15:27.823000 +CVE-2025-46116,0,0,74137010d24ab8c695b25b0d1aba1678bc0d111d39ff68231b6c57cd32a246a3,2025-07-21T19:15:29.673000 +CVE-2025-46117,0,1,9af902f9ebf0a05617ab41b0888ec0a6e8e127a39cdbb9802b57ccc06de2eed9,2025-07-21T20:15:40.937000 CVE-2025-46118,0,0,f0cb6fc2837cccdfa3ce8787649bb5fc7c4e2d50dd43a85a6909397496a6a221,2025-07-21T15:15:27.940000 CVE-2025-46119,0,0,0c8a5121652b693d594e7e566b2639d24108408f08e7bb973ee619be418cee1d,2025-07-21T15:15:28.047000 CVE-2025-46120,0,0,26aaad9f369cf140fe533a4e67cf7b211cb617622d0b1ff849d609ecae59b79b,2025-07-21T15:15:28.157000 @@ -297885,7 +297885,7 @@ CVE-2025-47178,0,0,25c10ec9f76c1380de675d8b38e604132e558132c70f7cffd9221e9dd924c CVE-2025-4718,0,0,e197120a33051d36a3bdf1b0305cf7de5c5f5941a30eaf0eb2f8e25b8c33d5d8,2025-05-28T14:26:27.280000 CVE-2025-47181,0,0,0dcaa7da62eb599bc0c4884b7faedf2756f0f5de47436d94bd3a1a0bf83ba2ad,2025-07-08T16:18:17.580000 CVE-2025-47182,0,0,53f87a273acaefbf1eae69d26a4ad76a0c6e6a7e45d884bb8dfa99b5c8575b00,2025-07-17T14:39:42.343000 -CVE-2025-47189,0,1,d912169ba9ad4f4f6332ce8620abe76f51a2af573de0f71e5281763adec9840f,2025-07-21T19:15:29.837000 +CVE-2025-47189,0,0,d912169ba9ad4f4f6332ce8620abe76f51a2af573de0f71e5281763adec9840f,2025-07-21T19:15:29.837000 CVE-2025-4719,0,0,8f45404e8c5e0b5372b6c6d3c18e425f04bef83b0b8978ee2807105e5fc3ce21,2025-05-28T14:26:35.423000 CVE-2025-4720,0,0,ab92b1fc5d01e1f35f68c76c8f5bceafc841c3ab0985f1035de502421e632bac,2025-05-27T14:13:08.100000 CVE-2025-47201,0,0,f7da15483f84676db296d7fc167792c339031bbfa11c378fcc7b75aaf9edeb30,2025-05-07T16:51:09.947000 @@ -299759,11 +299759,11 @@ CVE-2025-5055,0,0,2813a40f904a4d38c72314bdeb0478f12eb76957b4f05117bb45d588d4e24d CVE-2025-5056,0,0,41abcc4b21c4c44af1bb2b5ebe6eed640fd93ff380221b407c4bb670519af696,2025-05-28T02:08:30.840000 CVE-2025-5057,0,0,c177a6255394eb47f572d99869089826f5992edac771e2e307615417afe5454f,2025-05-28T02:04:36.163000 CVE-2025-5058,0,0,b982b0ab611f02898cee1e3cb0ec577285a5619a5b05fbdab919f73bae7be780,2025-07-11T19:14:50.940000 -CVE-2025-50581,0,1,cf9aaf08b05d86e76fd1449a76d253cae55f7e94ae921e1080f56c9b761d4649,2025-07-21T19:15:29.990000 -CVE-2025-50582,0,1,ba485ddf85e28ad5dd2300bac7aead1cd6cd80c785435c2da129873f23d2d0f9,2025-07-21T19:15:30.167000 -CVE-2025-50583,0,1,e7c4aa07dcbd66956462b5838e9448cc40155a543db70f249471c36e4469c75e,2025-07-21T19:15:30.323000 -CVE-2025-50584,0,1,ede0f9b4c9a77326c7854d129df1b15bc832f1cb5b83ff319b17fd5fbbb7712e,2025-07-21T19:15:30.490000 -CVE-2025-50585,0,1,29f3b0770ac01e8aee4fc6f9203784bdd378ec59d3ccff9d7257f89f74122ef0,2025-07-21T19:15:30.647000 +CVE-2025-50581,0,0,cf9aaf08b05d86e76fd1449a76d253cae55f7e94ae921e1080f56c9b761d4649,2025-07-21T19:15:29.990000 +CVE-2025-50582,0,0,ba485ddf85e28ad5dd2300bac7aead1cd6cd80c785435c2da129873f23d2d0f9,2025-07-21T19:15:30.167000 +CVE-2025-50583,0,0,e7c4aa07dcbd66956462b5838e9448cc40155a543db70f249471c36e4469c75e,2025-07-21T19:15:30.323000 +CVE-2025-50584,0,0,ede0f9b4c9a77326c7854d129df1b15bc832f1cb5b83ff319b17fd5fbbb7712e,2025-07-21T19:15:30.490000 +CVE-2025-50585,0,0,29f3b0770ac01e8aee4fc6f9203784bdd378ec59d3ccff9d7257f89f74122ef0,2025-07-21T19:15:30.647000 CVE-2025-50586,0,0,4b4746c6ca9493c8dbc0b0427a299c42bdef54d0852a026397d237543dfae790,2025-07-18T19:15:23.870000 CVE-2025-5059,0,0,f8f742257ec34ff8db6f494385cd1222a7c04c23d48b685959ae7dfe1442b4eb,2025-05-28T02:02:49.230000 CVE-2025-5062,0,0,ea43e2bec17428dcf904c1e371b5b8f8bc57f591a4cc8d2fa99a1d8c990c5624,2025-07-11T19:57:04.163000 @@ -299777,7 +299777,7 @@ CVE-2025-5068,0,0,743f6f8e9f7972849bbf135b58a69c40f5a6f921a1bb6da952423dea4534ee CVE-2025-50693,0,0,e45af4df59709862d79fed94eba81f3c720eac46d3c47878fa15d033f0971882,2025-06-27T16:35:39.350000 CVE-2025-50695,0,0,accd627332da7d97b76cb5783ee219c402d198efaa23d938427a710819f5d635,2025-06-27T16:33:31.330000 CVE-2025-50699,0,0,1e25e54b0056394e6903ff353773e34767f017adf3a0d8d11456cc6f07cbe587,2025-07-08T14:20:25.187000 -CVE-2025-50708,0,1,fa10110dadd885f4f3eecfa770c6a75088a05a9feb692c7c1f7756a42ee74802,2025-07-21T19:15:30.800000 +CVE-2025-50708,0,0,fa10110dadd885f4f3eecfa770c6a75088a05a9feb692c7c1f7756a42ee74802,2025-07-21T19:15:30.800000 CVE-2025-5071,0,0,884ba5d773bfa631189c2fa39c9690b3ec846f53f569c43eb315d4166f9f7924,2025-06-23T20:16:59.783000 CVE-2025-5072,0,0,018794b89a334645a6a5efb53691bc8d4bdc43518fdcf52adffd3eaacbe48488,2025-07-03T15:14:12.767000 CVE-2025-5073,0,0,a1230535d583b5f466b5fe2615cca31afcba55333f600b324f190ec047a41d18,2025-06-05T20:13:49.707000 @@ -299835,13 +299835,13 @@ CVE-2025-5137,0,0,a461b4cd382da5c206010b8729faf9840aa41b3d9e8c8cf8ba7880897f06f3 CVE-2025-5138,0,0,93cb713787e8030d0af7953a6d4f76509c75980d651a759b2f51250e8b4fdca6,2025-06-20T05:15:29.257000 CVE-2025-51381,0,0,481aaef1e3c0378e55a934cf42f6dc1d5f8c8df5bb80d726f9f4df7d76406b99,2025-06-18T13:46:52.973000 CVE-2025-5139,0,0,9584b8867ef5df5f63b980a8e2a9b849712a42f018080e8307dd4e64a561de8e,2025-06-24T20:29:44.870000 -CVE-2025-51396,1,1,b0b8049e2bc7411d05c8136774cb9a656d005937cd32175992f62722f159da36,2025-07-21T19:15:30.957000 -CVE-2025-51397,1,1,809bd7a2515a1e11975ef1f2f86590dc5cdca93a9f5531413a275489e00875cb,2025-07-21T19:15:31.073000 -CVE-2025-51398,1,1,7d14e2a1bb91b9ae33c103b82a66585c049714f4efcf53ec562a6d295c6d2b90,2025-07-21T19:15:31.187000 +CVE-2025-51396,0,0,b0b8049e2bc7411d05c8136774cb9a656d005937cd32175992f62722f159da36,2025-07-21T19:15:30.957000 +CVE-2025-51397,0,0,809bd7a2515a1e11975ef1f2f86590dc5cdca93a9f5531413a275489e00875cb,2025-07-21T19:15:31.073000 +CVE-2025-51398,0,0,7d14e2a1bb91b9ae33c103b82a66585c049714f4efcf53ec562a6d295c6d2b90,2025-07-21T19:15:31.187000 CVE-2025-5140,0,0,7eb8851e623e7595aeb04f88f3b17c4f06b9055459a202a999065089d465d23f,2025-05-28T14:58:52.920000 -CVE-2025-51400,1,1,3e8f00de62fb330e7f1c5de4b8077703998b8cd52abcc145493ca4356a71db76,2025-07-21T19:15:31.310000 -CVE-2025-51401,1,1,3e9de8a27be2be6bea0ab1b6694df9e5bb364ee7446bf2d9105f7e1057aa9935,2025-07-21T19:15:31.410000 -CVE-2025-51403,1,1,9246b1db23f02ed5575e8d0c72ed1768efd2177f4edc4aa46b6ddc514c5fe37e,2025-07-21T19:15:31.510000 +CVE-2025-51400,0,0,3e8f00de62fb330e7f1c5de4b8077703998b8cd52abcc145493ca4356a71db76,2025-07-21T19:15:31.310000 +CVE-2025-51401,0,0,3e9de8a27be2be6bea0ab1b6694df9e5bb364ee7446bf2d9105f7e1057aa9935,2025-07-21T19:15:31.410000 +CVE-2025-51403,0,1,ab8092bb66e88da3aced570e4393fb85225884a7fea1bf4e0878328038b29b60,2025-07-21T20:15:41.117000 CVE-2025-5141,0,0,32d08b53cd9dfda342d808d47eadaeec14b7afb09c7bdf983da4a71452918e3a,2025-06-17T20:50:23.507000 CVE-2025-5142,0,0,cfb77a196d5255a5a436db83dff520eaaa1d53cc832ec32bce9b0d13a0b8d87b,2025-06-04T18:29:34.470000 CVE-2025-5143,0,0,59c67b68aa1c9e8f64177e44a082cd73131629855fbac8a6779cd17075a96f9c,2025-07-09T19:02:15.157000 @@ -299904,6 +299904,8 @@ CVE-2025-5183,0,0,c805e02643e0e27a9dd9169f81c14e80e19028c481797ace1339fadf2ddd19 CVE-2025-5184,0,0,0c83a5fa50189682781f691fc4b3c0711f14dbbbb155d47eaa329f84d4444e80,2025-06-03T15:46:21.597000 CVE-2025-5185,0,0,38d3e8df6b4bf723f8b7c203881d74ed487013508bbfe062800873a9ef93893c,2025-05-28T15:01:30.720000 CVE-2025-5186,0,0,f1c0dc9e00200ceb159990b282fc6fc2adc0cb5ea875d85c26223f5d5865c3f8,2025-05-28T18:15:33.550000 +CVE-2025-51868,1,1,9ea4114839c69e6ead7ddb284a3f960e2b48ceeef69449fad1f269d970f8a77c,2025-07-21T20:15:41.293000 +CVE-2025-51869,1,1,8f68314995a8d88627e018d4a980aa0368712fe891854d7dcde1be7944a5d7dc,2025-07-21T20:15:41.417000 CVE-2025-5190,0,0,b83fcbe64867ed5f66064afe0985f0f8e1099ccb823b90fa56196e26e3f4bf39,2025-05-30T16:31:03.107000 CVE-2025-5192,0,0,60cab63e53de16bf0d2b760f814c5b69c2d153aa1edfa79d1c5ac599f5bf94f5,2025-06-06T14:07:28.330000 CVE-2025-5194,0,0,4df3127e5af28c1f6bd0baf7cd26efd1d47e75f425ed5ccd61a737547926d6fd,2025-07-07T14:56:27.477000 @@ -299963,6 +299965,7 @@ CVE-2025-5234,0,0,293a80900954a5cfc61c0e52327a36c077c1c102c8ff1da665acc482ae567e CVE-2025-5235,0,0,9f99135aac66ddf72cbc0dbdd83c4db7648e86e689f203314291273a812d09e8,2025-06-04T18:29:21.090000 CVE-2025-52357,0,0,4063fed641fc9db99fba55a8ac24d9a1eab493af82dcaea33f1fab6da3dd5fd9,2025-07-10T13:17:30.017000 CVE-2025-5236,0,0,21b3f9a42248749cfd7dac46ffac19b1b1d972c6879013b8f47a703a60b1c09a,2025-06-04T18:30:22.220000 +CVE-2025-52362,1,1,405d76f35bd3baad0a9fc74a37c36a9cabe452b91d0917230fc27c871ff09eba,2025-07-21T20:15:41.547000 CVE-2025-52363,0,0,d8522489fb6286869ccb745039d23c98fc05ed4e8b36d5f3a4390f8af7a8cf52,2025-07-15T13:14:24.053000 CVE-2025-52364,0,0,75eee3fc1f3194734cfb02d068eb0f32c76ddc97fcebb2a8d6af1af0c6c63393,2025-07-14T17:15:35.283000 CVE-2025-5237,0,0,908366c4316ddadbb21a5bf615748f21dc3d5af688b69c0cf4ce305efec5d0f6,2025-06-18T13:46:52.973000 @@ -300042,7 +300045,7 @@ CVE-2025-52571,0,0,1f0c454df829e6f6435f272fdeb6f88291e39f2976b10cfc88996d263664e CVE-2025-52572,0,0,ededdf716ad21b95fa1b0a76567ae25f781b900c759a6ecf5b267016f1e30ffe,2025-06-26T18:58:14.280000 CVE-2025-52573,0,0,e1af9d84afd14d286cbe5957ae63c7faa48c0f3a0921dbcb6011005dce16f5ba,2025-06-26T18:57:43.670000 CVE-2025-52574,0,0,300ad49fda96b1146f72dc5e6b507b470eb066cc1482415523bd1c42dd4c145b,2025-06-26T18:58:14.280000 -CVE-2025-52575,1,1,7d24cc29081ccdbe4dd86b996cf30df24e6de5f0d77465984992f678d1630d44,2025-07-21T18:15:28.077000 +CVE-2025-52575,0,0,7d24cc29081ccdbe4dd86b996cf30df24e6de5f0d77465984992f678d1630d44,2025-07-21T18:15:28.077000 CVE-2025-52576,0,0,9c9ac88fbbb89604ba09e59c25075690e4073dde6ddbecf549180177c762e003,2025-06-26T18:57:43.670000 CVE-2025-52577,0,0,e2465dab053d52d39d2752b97c97386ecab8705ddaed673b7888427b842a42b5,2025-07-15T13:14:49.980000 CVE-2025-52579,0,0,6367e506f8c15bdbfb7d46cc7b9f990ea0201d97a338af617b72d17885fce8f9,2025-07-15T13:14:49.980000 @@ -300509,6 +300512,7 @@ CVE-2025-53519,0,0,f205a900351bede4a67110e091f17d39ce7622fb4ae9f8a2f9899121137b8 CVE-2025-53525,0,0,62c057f03cbeb70a344e67d4d0c7cc980c9dc9e99d597eab290f49009834cd81,2025-07-10T21:17:53.667000 CVE-2025-53526,0,0,5f981a713397cf87c60d4483e797a2045322cbe752682fafb5e21844724678a6,2025-07-10T21:17:00.730000 CVE-2025-53527,0,0,a23333bfc502e866b26cc1a6e07c737ab86baadd058fbca83f0c0c78ef6520ac,2025-07-10T21:16:47.187000 +CVE-2025-53528,1,1,6f019984df621304b838f0ab8d127d8f777627dc11cbcdde6486dda4a1adaf73,2025-07-21T21:15:25.883000 CVE-2025-53529,0,0,5d4ee1e3f0a870cc8b9c15e3ae783ea97591811dacaf5b71ca632a8b63f3aa8f,2025-07-10T21:16:36.407000 CVE-2025-5353,0,0,dd46960e1f427bdbbf95b7db25861021bd6a105d1964762d36bb387898435214,2025-07-10T15:08:37.390000 CVE-2025-53530,0,0,d7b925dd3e4c2340b96932a2e5a6cf84b1fa14fc858b73d4ba3558324ba90217,2025-07-10T21:16:15.440000 @@ -300660,6 +300664,7 @@ CVE-2025-53824,0,0,035298e63b5577e4899e85d3baa108f8144c6f210df5f8fe9d3f3fccedf09 CVE-2025-53825,0,0,788983375cc9d3103fecf837ca61b3e1e9800664523df061dc3adafe211faf9f,2025-07-15T20:15:50.550000 CVE-2025-53826,0,0,1da652e22e9af844487693e491ba882a9262691bdd2c92cbda3bcd689d825a05,2025-07-15T20:07:28.023000 CVE-2025-5383,0,0,8d910c0db0130346f379840d2bf9503c3f708eab6ff85bcc60373aa1b27486a5,2025-06-09T19:00:27.167000 +CVE-2025-53832,1,1,13febadb5dc4ad93499773cfd6aba63cbd6ae9b306ee9082358f3a22b92727bb,2025-07-21T21:15:26.077000 CVE-2025-53833,0,0,976776094d4499c5f70dcbad5d59240a5f1c6e0ba870a602745706c70b5df15f,2025-07-15T13:14:24.053000 CVE-2025-53834,0,0,d34b6d68a299e8ab344825d1d5aa537985eaed18956ef9c8723ab451dd6b5868,2025-07-15T13:14:24.053000 CVE-2025-53835,0,0,5050283b464a57d91332cca59ee44875d0f78eb83334e91f09676ed440354f4e,2025-07-15T20:15:50.740000 @@ -300799,6 +300804,7 @@ CVE-2025-54066,0,0,38ca277636d85af2ff1b4a29f626f3aa593ece79371a1471291e5b33d7f49 CVE-2025-54068,0,0,5113f0a7a54ac310d44bef48f38e236a85dc201112c36ab03cecadb38de2a141,2025-07-17T21:15:50.197000 CVE-2025-5407,0,0,b4ae60046ae6fef1141fec2d3d54964f6f96b96f9d0f16f2f795339dac8ae435,2025-06-02T17:32:17.397000 CVE-2025-54070,0,0,06d964c92691346b61960e0da18167c2de8c6d74567cf02bfb206c2e189a3038,2025-07-17T21:15:50.197000 +CVE-2025-54071,1,1,e1301c8d76ab9cc4e7765a75e23e040c0e3f15707fc406421739e9519b774116,2025-07-21T20:15:41.677000 CVE-2025-54073,0,0,5d0c0369de7944ab4d0cdf146f3ea0abf4aba410f6570d9889adf5baf24cc8a7,2025-07-18T16:15:30.350000 CVE-2025-54075,0,0,4019ac8e49d11fe0fe7ef6ba52cd54c520e520daa8da6b7510d7b03486429c82,2025-07-18T16:15:30.557000 CVE-2025-54076,0,0,4ea2c997b73a6eee688525e48d9f1b60481d9e86e343d2057e3d35443122c689,2025-07-18T16:15:30.743000 @@ -300811,6 +300817,12 @@ CVE-2025-5409,0,0,e19327c856251bb6630e10234de5c371173630bbc620fa2c6779542a53a319 CVE-2025-5410,0,0,60de637176ae188b21c928ddf29aeb5cb2d5057ec1cb9930e2bf7416d8e02e6f,2025-06-02T17:32:17.397000 CVE-2025-5411,0,0,ad8be7495abcae78273f6c1ce2f42bd21b73f6b28a6ccf317309fd27de8359de,2025-06-02T17:32:17.397000 CVE-2025-5412,0,0,cdedc82e39d6eb66906e9774b875480255e558374703496c9f6705513eee4b45,2025-06-02T17:32:17.397000 +CVE-2025-54121,1,1,312feb4f972b3d576da04928fe227a8952dcbfa313cda4606708b4ac03f48d40,2025-07-21T20:15:41.827000 +CVE-2025-54122,1,1,92665a49a66f95239b039c873283bc8c57195dac99004af21816b038249ecf63,2025-07-21T21:15:26.237000 +CVE-2025-54127,1,1,0d75aec1f4e3757791a8e788b8ad83d0240248f7120c799013bc81947cc5d18a,2025-07-21T21:15:26.403000 +CVE-2025-54128,1,1,6c62c230595fc737d0b74b15124956f44bddd3f46f5f44f98c37fa6ec544a23e,2025-07-21T21:15:26.553000 +CVE-2025-54129,1,1,390242468277f01f6aefce74825adb63ceea240741de6ad5b62fb976c30c1d45,2025-07-21T21:15:26.710000 +CVE-2025-54134,1,1,08751803c1b2793f899f3c0698a9a2c0f967367d6b95285eab012f0d954b8513,2025-07-21T21:15:26.863000 CVE-2025-5416,0,0,266c845d49e2255fc5eb4cf11bdb985e393c0453b6b5daec439fd6bb188a82de,2025-06-23T20:16:40.143000 CVE-2025-5419,0,0,95d78b45793b28ae306f8e0f53782fa40f5a170ff965bedb7e7498c73924369e,2025-06-23T18:29:13.093000 CVE-2025-5420,0,0,ceb88ecddbe17e7db586e3f1c0ac9514310ce698fc43cdb541522aa063e06b05,2025-06-18T15:16:05.153000 @@ -301323,7 +301335,7 @@ CVE-2025-6009,0,0,78abb2d4f36e6029b865859c44e8b3b2ae426316eb8bf2e15ca3e33565c4ca CVE-2025-6012,0,0,26f2f66d87f45d6aa756cc004552cfa11ed42d44708395d664a6658fe8d21b45,2025-06-16T12:32:18.840000 CVE-2025-6017,0,0,cdf296e1429037cbf00bd284008bfaf96f2ac3ba0f0da1dc4e6958978cbc6e8e,2025-07-03T15:13:53.147000 CVE-2025-6019,0,0,bf632c485beb37dbe798f798f4eff0baa7c87b8abc0217b675bda9385ddb8133,2025-07-10T14:15:26.630000 -CVE-2025-6020,0,0,93631352da9fbcb0cc4dac2c4ec086c1467cfabbe85085d402326fc47a940893,2025-07-17T20:15:31.223000 +CVE-2025-6020,0,1,c7eb26e482cfedaffa32238220a44d56acb9f2615c3e42a342ba0adb1b322aa2,2025-07-21T20:15:42.027000 CVE-2025-6021,0,0,7068482937d1f7821bd6021706fd86f2f9cfe7dee3ae94c146ed8914d65f875e,2025-07-09T14:15:33.413000 CVE-2025-6022,0,0,673713355118472c1ebaabd5c5e4854e0f9320e04b049cdd5cc68d5d0f25f012,2025-07-05T23:15:26.353000 CVE-2025-6023,0,0,194c56ef3a0f2533fe2326186787dca6dc9b713a94948602d1d6b735c942ed34,2025-07-18T08:15:28.040000 @@ -301474,7 +301486,7 @@ CVE-2025-6231,0,0,34ac09618214440a411227d87363141f738823d97f3d67b0e13ca725541228 CVE-2025-6232,0,0,fd89e29aebca0b91f3c598b07da5d90b50be9b50e4144633fc6580a069c74ed8,2025-07-17T21:15:50.197000 CVE-2025-6233,0,0,8582c628da765c5180e942c1473c00ee9136eed446e0f935aa2a3863502c529e,2025-07-18T10:15:34.940000 CVE-2025-6234,0,0,0491328da59a34702cb5ec5ccee49e9ec3370c2c41c6aa5eaeaf74439b88e196,2025-07-11T18:29:08.090000 -CVE-2025-6235,0,0,49145d9b55e6daed501decf000c40b34f1fbb1bd6f806a43c7918215a0e19f04,2025-07-21T14:15:29.957000 +CVE-2025-6235,0,1,20b653c684de8738e1b9e60cfdd594f15414871ec9caf8eae6d12b966dbd89ec,2025-07-21T20:15:42.217000 CVE-2025-6236,0,0,0cb993ee3e7e7466ae2b5d98ede34be9b66a8b69331ceea9820d8b08034c243a,2025-07-11T18:28:45.253000 CVE-2025-6238,0,0,70e8544f27b2c647ed75133c57e9501fbdebb41e79fc43e2c23c74ed4d734482,2025-07-08T16:18:53.607000 CVE-2025-6240,0,0,ba4da5fd605eca3c919532cf0a8a1661ebda5a87c35d4010c4dddeaa23d93e9a,2025-06-23T20:16:59.783000 @@ -302215,7 +302227,108 @@ CVE-2025-7217,0,0,536b5b080115809bc6cb21c3649bcc6d0d05680bd0a1e5d027e8211320c9be CVE-2025-7218,0,0,fbf9b40fdc12b74b354e4c306cb54d64b150e5d3e9713ac37a090e30a10d5a81,2025-07-11T16:27:18.217000 CVE-2025-7219,0,0,412ab9f393e70f987752b3fc1f09f3b6b6297c3219f7402a479e03d67bdd3556,2025-07-11T16:27:22.900000 CVE-2025-7220,0,0,f368df49d34cc3520b7a803dca0a6f5f09889b041232af9f8306864aba27ee03,2025-07-11T16:27:52.557000 +CVE-2025-7222,1,1,f947c6f88ccba7dc2da47915b935dc5dceb73a45d5acc31f99e9b6761676821b,2025-07-21T20:15:42.350000 +CVE-2025-7223,1,1,d71779f7ba6267cfce8b215b78c9d694d4e329d1398390463521ef747c194c84,2025-07-21T20:15:42.510000 +CVE-2025-7224,1,1,39e4bbf4e6e2c69afd071ab48740ddc1735f43a05591c2060de704b68d0ba0d1,2025-07-21T20:15:42.650000 +CVE-2025-7225,1,1,f22fa8c9fe0ba0e9c1264f6a799c0e63495fa4b15d7a89b03841fbd61eba2bd5,2025-07-21T20:15:42.787000 +CVE-2025-7226,1,1,d1b80c811d7d075827e4e290adbe5e53e13544656be999fe2cf50473e15f12f9,2025-07-21T20:15:42.923000 +CVE-2025-7227,1,1,a96c13e920d1baf7b579a894acc77be59ae478d579143b743366332c7b40064b,2025-07-21T20:15:43.063000 +CVE-2025-7228,1,1,78ac429f16c345dd5698eed31971c51035d4b0f9f18f859b44b67660a66cfb5f,2025-07-21T20:15:43.207000 +CVE-2025-7229,1,1,104fb33d3cd30f0f2e31fddacde88cf5321c3a0b93117faf41046aeda2f95b77,2025-07-21T20:15:43.343000 +CVE-2025-7230,1,1,80c5ddc284df6a0b1a5c0ecec120b5fa2e94159b1046fb79b6a0912f3104b677,2025-07-21T20:15:43.487000 +CVE-2025-7231,1,1,cc5de63a5560fbf95a6f594b621ffe5d552aaf8b921bc5434092d45e652d3459,2025-07-21T20:15:43.623000 +CVE-2025-7233,1,1,5883dfd8a268806d6f4c22e22790cebb3bea12d78503b828f82f9023971ee999,2025-07-21T20:15:43.763000 +CVE-2025-7234,1,1,53298487e4d0a42b9c3228bb9dd1732a88526408c8d9e8d049e67fa39653a1e6,2025-07-21T20:15:43.913000 +CVE-2025-7235,1,1,f15e03bad4d094df132ef5b6c1c00e640ae15bcfbba49764a63cd1912a8f3c7c,2025-07-21T20:15:44.053000 +CVE-2025-7236,1,1,6b533e7d684e3bb097caceda5ed66167d367d65f443a1ff724c2d12ebdf29334,2025-07-21T20:15:44.187000 +CVE-2025-7237,1,1,e48d81f7ce8385f346fcea458fb978cd38743eeb514f7160aa8a0a1eb0605252,2025-07-21T20:15:44.343000 +CVE-2025-7238,1,1,1ebee00ea82c9fa5994d930d48d8705b3ac0a8084130f39bc5082e7e194f8258,2025-07-21T20:15:44.480000 +CVE-2025-7239,1,1,08757711d074d4622b28fb2cfd986ef805e542067dade39b8c3b4c5b067dbe76,2025-07-21T20:15:44.613000 +CVE-2025-7240,1,1,a5c376dcf9b510e45131ac71f2d67655b5b69ea57c169f708300c9c535cf0e9c,2025-07-21T20:15:44.750000 +CVE-2025-7241,1,1,848b13bb53158e5da6e9d653ba6e78fcd754babc1bfa11746fd5d36ac67e73f3,2025-07-21T20:15:44.897000 +CVE-2025-7242,1,1,f066f50e92e21917b2079294727f2f6c9feb01af6d9da2c46fc1397a799ab5e7,2025-07-21T20:15:45.037000 +CVE-2025-7243,1,1,f4eda2fb86fa0137e0496220f6dd19b28a315fd3af6e4ab120cc75a5518b7f25,2025-07-21T20:15:45.180000 +CVE-2025-7244,1,1,de7ad5e727a0bf5accfb8c482b9c76cbfa2c59888f6c4331519bf623e016dfae,2025-07-21T20:15:45.317000 +CVE-2025-7246,1,1,935c67e6d2d41d32149e438e6277bafa14a6991fd1489c7ecad2683ed321bd16,2025-07-21T20:15:45.453000 +CVE-2025-7247,1,1,fb00ffd1910573c868e4d00d2c589246bb259903195f2e74d64e2edeb8b06ddf,2025-07-21T20:15:45.597000 +CVE-2025-7248,1,1,c1a7f0b75feaec3d3e75f97e011e200e09b4c4fb2133b61de4ba4e6fdbf02f4b,2025-07-21T20:15:45.733000 +CVE-2025-7249,1,1,098c98ff6f65a51e2ee87b468da7045615a1c0790d09b51567e8b07dac8757ef,2025-07-21T20:15:45.867000 +CVE-2025-7250,1,1,e0e50967b8a439b81aa7d7b4fb831f1aad66ca99fbc8de6406914b148d6f85bf,2025-07-21T20:15:46.007000 +CVE-2025-7251,1,1,a8c8ceb1db45b21f265d8e565ae02efd2be3fbebcf75c8af39e2a1d28eb90405,2025-07-21T20:15:46.163000 +CVE-2025-7252,1,1,76b09450b84dfb220e49a1c3a3b0d14088957a5a7ee64e09817773d021804413,2025-07-21T20:15:46.323000 +CVE-2025-7253,1,1,638f449674ac26a488fcbcc567f834de5afb2d62a20e9b167e4351fcd0f936ef,2025-07-21T20:15:46.463000 +CVE-2025-7254,1,1,732727cc0e97de5aca9da264e1936afd06a21e789714b8650a69568479ced8d8,2025-07-21T20:15:46.597000 +CVE-2025-7255,1,1,3fe2861e2ee769950c3dfb4da4677a8fac404766996f1adc541ef1f0b51b8616,2025-07-21T20:15:46.737000 +CVE-2025-7256,1,1,3625e1a06503d27c367d657bf72da44da1be5d1bd02edf8c175aca67b137c4e4,2025-07-21T20:15:46.873000 +CVE-2025-7257,1,1,6f1f78c48ef4ab317c69a56b614fe9557ee5e0fdd7d2f0604bca7f72dfeaf198,2025-07-21T20:15:47.030000 +CVE-2025-7258,1,1,31b9027efd070de0a4ab14fc028f5f2129b3f34a5fe54bd2e5ccb9a6ff04a158,2025-07-21T20:15:47.167000 CVE-2025-7259,0,0,8fd7864e8f7fb6c249652178c4014f15a5857d3e35a24f0168719b78d426bcb5,2025-07-08T16:18:34.923000 +CVE-2025-7260,1,1,bad1c0d338c947774623d15ce3fe6f350d451eafd64c24d70c2db08561651801,2025-07-21T20:15:47.310000 +CVE-2025-7261,1,1,6f154dbf7dba63226bebcfd4fed7be2e06923750fd4b64a2ee5ed5fe74b21cb6,2025-07-21T20:15:47.443000 +CVE-2025-7262,1,1,a7277c9ca7b0825a836ccf2f3e8ab5c9e907b7711e05e6df4b8cd5ecd235dbe3,2025-07-21T20:15:47.590000 +CVE-2025-7263,1,1,1c20aea7caa12004f56309cc0b484ff24de022cd0107299222ae02935803f957,2025-07-21T20:15:47.723000 +CVE-2025-7264,1,1,c2d43a4b86ec933320b84cbcf22dcaa7e42477ed32e3c192ceb129bec61e4a6b,2025-07-21T20:15:47.863000 +CVE-2025-7265,1,1,0ae246d0956a9b77f262ba24cd2ac7734bdc23ec4cf680377cb52148a12e02e1,2025-07-21T20:15:48.010000 +CVE-2025-7266,1,1,ccae2b03b05bfa45c477b6f935d6997752de1d6afee37676852a046ab381b85c,2025-07-21T20:15:48.140000 +CVE-2025-7267,1,1,361e08b3511ea482cff91d442f3351875159241bb5aeb94970071c11e5763c76,2025-07-21T20:15:48.280000 +CVE-2025-7268,1,1,eb1548ce94f990cca27a59ae86dd79a49b425dd04d5e9439983cc1a482267362,2025-07-21T20:15:48.420000 +CVE-2025-7269,1,1,ec8d1eed04ef21d9e749105cd530a8b393d1a1ec59ab373f072a5c12b17ad896,2025-07-21T20:15:48.553000 +CVE-2025-7270,1,1,fc567f59f812967b1d5bf95a4c468214abcb8d56f0b53a421f2bb14be8c6cd16,2025-07-21T20:15:48.693000 +CVE-2025-7271,1,1,f0ca6e1b6219dfdc9feccbc2e4e587f29938c06461abc452c66ecbb06fdc5ef7,2025-07-21T20:15:48.830000 +CVE-2025-7272,1,1,4d254b5030563bd174fe880f92808c89b8711102ff459421c82ef2bef5bc3676,2025-07-21T20:15:48.980000 +CVE-2025-7273,1,1,99488b26656e797b544f4e2c8a0e3e2766681a64b67733df5ba05d60596c5a9f,2025-07-21T20:15:49.137000 +CVE-2025-7274,1,1,8f28d800eefe37b0bbba690620a6364095aac5cad6fa3a9c2ffa2433615fc298,2025-07-21T20:15:49.277000 +CVE-2025-7275,1,1,5b5d33f90be52b644c7f892c93e8c5066cc2c1896b6b064c005b5fd3fe6cd8ad,2025-07-21T20:15:49.417000 +CVE-2025-7276,1,1,762ff34ba151f67e58d98a12b51af1689019bc1151cc5139d825cbc75ecd67a2,2025-07-21T20:15:49.550000 +CVE-2025-7277,1,1,625925fa2e51763be824198e3c3b9b1e7821dc4d4b6f80899f9c65f3e733a9ac,2025-07-21T20:15:49.687000 +CVE-2025-7278,1,1,d70fe49379824ff793315142eecba0f9cc9e74c621cd03e7aeb4b2de38e2c137,2025-07-21T20:15:49.823000 +CVE-2025-7279,1,1,b1d218e1fcefdb2543c838cea1805b3671028be4562af97813b1ea478d786f51,2025-07-21T20:15:49.960000 +CVE-2025-7280,1,1,b7f11e2c3437858cc43b5fb74e27a757b8662b2e51fcfd6c27b280aee872b75a,2025-07-21T20:15:50.107000 +CVE-2025-7281,1,1,5350db10ec12515d969553f49d8bd985eed1cde51affb6a54ab4f62ac603057d,2025-07-21T20:15:50.240000 +CVE-2025-7282,1,1,b7484b74c24bdb480c00e2e733eb58ca52b3fe1ebe379dfd6cc3fc7fb4f961ac,2025-07-21T20:15:50.380000 +CVE-2025-7283,1,1,956b38744cfc259a2ffa1efb6c4b9b317f9f4c180229021960e816fa62c2293f,2025-07-21T20:15:50.513000 +CVE-2025-7284,1,1,c2780f9853837d9fb5ab809ce52b44b4e956ebc4c4db54416e324755c8343466,2025-07-21T20:15:50.647000 +CVE-2025-7285,1,1,5636051b5c103ddbceefa4bf69cad25e087f0e2dc31df2999000c1200ae2a06e,2025-07-21T20:15:50.787000 +CVE-2025-7286,1,1,97f523786a524af6a810635aec31a8cc73c5e8bdb1435a387fb377d54d94add1,2025-07-21T20:15:50.930000 +CVE-2025-7287,1,1,3728453c0df63d02586b34e3694f94a43100eb60f1057a312945b1c0ab214879,2025-07-21T20:15:51.070000 +CVE-2025-7288,1,1,43f84ab56312b064777bb663e75223b5ea48e18b2f58bfa4bbdaf86f3bfc8704,2025-07-21T20:15:51.203000 +CVE-2025-7289,1,1,1ef15fa5523ea383c68aa74c939a2cdab3c2f983c9b8b565de3aaceeaa6d66fd,2025-07-21T20:15:51.337000 +CVE-2025-7290,1,1,3de140c448293196f1f314aa73064d9d15ca3784797b6edd93fb6a6a73eab9ce,2025-07-21T20:15:51.477000 +CVE-2025-7291,1,1,f876ab1465789a04df84b47092cdd9cfc04464803c15d5e4cc8ebbeb1b37d0a5,2025-07-21T20:15:51.613000 +CVE-2025-7292,1,1,fece502f690e732931bf8b0fad37834cb115376a787bdb755b239c62f29b929d,2025-07-21T20:15:51.753000 +CVE-2025-7293,1,1,9741d021f3769a15427996392d1134d33a8675ea40e8573bfdb624eccd55156c,2025-07-21T20:15:51.890000 +CVE-2025-7294,1,1,2ad9a58fe1f05dba60944b0c920a5cc22c65807882f3fa369757834dba049c36,2025-07-21T20:15:52.060000 +CVE-2025-7295,1,1,d207b15d09a519649510d48e8a2cd94c5ca94be4f32d8484293507060ac7df2d,2025-07-21T20:15:52.200000 +CVE-2025-7296,1,1,92ec56339f74e8d0a382ef24f7acc187606bd9979255c30ae9a4dd1fc563bde0,2025-07-21T20:15:52.337000 +CVE-2025-7297,1,1,632cd43388666290944555c5bc893d89c4ff8ce4ee4301c07890088be83a7811,2025-07-21T20:15:52.470000 +CVE-2025-7298,1,1,9ea64cd72d8a722bb241171695dbda29114ebd0284513262e1ea381342c3917c,2025-07-21T20:15:52.600000 +CVE-2025-7299,1,1,0ccf7257ffb04a072b3cc4f535d67bda1231332cf4bbc68a3f680ae0d1463b9e,2025-07-21T20:15:52.730000 +CVE-2025-7300,1,1,dcdc149be23fe58dd0c0cdb05b9a24ab7e9792b62923cb5218508f2fdb02bb04,2025-07-21T20:15:52.870000 +CVE-2025-7301,1,1,4e6b9b4dfe4d48f4c443578c56c739ce752a3f3d30614d0d6e8c00da3ed2ddb8,2025-07-21T20:15:53.010000 +CVE-2025-7302,1,1,38daffb0e42d044ad1ef5d29867d6ade8f5a2342c2dfe6adfc82ff59dd933e09,2025-07-21T20:15:53.223000 +CVE-2025-7303,1,1,aea2420bd31a71bfc8ea72e1938f13bf814e04d392814e17c64d6633d2d90e20,2025-07-21T20:15:53.360000 +CVE-2025-7304,1,1,d64f99264347843f752b498dfc9d8249679c9f3e687ce2b69b4ae9acbfa2d57d,2025-07-21T20:15:53.493000 +CVE-2025-7305,1,1,0c4ce74e2a6088182590659e2a7d2decd469a41d56a3ee55164b89500ed2605e,2025-07-21T20:15:53.627000 +CVE-2025-7306,1,1,92ab095c337a7a6dd6876a2bf505c486859b564e5b72b4f1a4286f764b4da57f,2025-07-21T20:15:53.757000 +CVE-2025-7307,1,1,754e3061ff23dae2b3043a1ba55ae703f7a4f8b894b7246f4be7d1a281c536ee,2025-07-21T20:15:53.890000 +CVE-2025-7308,1,1,b8f58c49fb59e33ba0373e1bfdd32769f23af0e5442126541354ae7919f9d320,2025-07-21T20:15:54.027000 +CVE-2025-7309,1,1,f8cb07c0ed378e773fd4cd5b0f8ffbd744fc9a64caf0fe520a899544963dab1a,2025-07-21T20:15:54.163000 +CVE-2025-7310,1,1,9b39e1f321da969b29d28cf0f2d0834a0366c3c3d618b46b3aea8a6690f68a81,2025-07-21T20:15:54.300000 +CVE-2025-7311,1,1,3acdf661ed34a42fb17b88f748ff13f2940c40bc7d6cdad31c469624b9a46c35,2025-07-21T20:15:54.440000 +CVE-2025-7312,1,1,0ebcb1a7cdd90017454ca0b927ac2af9ed368e9d6f64436cc027131e86bad763,2025-07-21T20:15:54.580000 +CVE-2025-7313,1,1,79ace087e7c708da2586ccceae24430f379d85297d7d75ad95c4550583366bba,2025-07-21T20:15:54.720000 +CVE-2025-7314,1,1,806bfbd3da4e4ce2c7069034fc36c92d0000a57657c38172a729efc83ba90ed2,2025-07-21T20:15:54.860000 +CVE-2025-7315,1,1,92212b044b6ed5335525940aeac6086e4b4772b226eb4e8e683f414a7955d5af,2025-07-21T20:15:55.007000 +CVE-2025-7316,1,1,ba669a3a17f6305e1f5e7853fe31f21852b6b619bb6c5f6a5648b7855af3644a,2025-07-21T20:15:55.140000 +CVE-2025-7317,1,1,4a34f8c9e350a384bb44cfc59995f4e24100f4e4c06c3ee325219f7dbb45a4f7,2025-07-21T20:15:55.277000 +CVE-2025-7318,1,1,3e4bcc3424076076e3870d925aa73db453afe3edc73aefece208d44c3a90b423,2025-07-21T20:15:55.410000 +CVE-2025-7319,1,1,717c4ffb354530492635d67a7040ad74b61c949c6ff1d4b8140c683fdd2a2b65,2025-07-21T20:15:55.550000 +CVE-2025-7320,1,1,6ea438c8b578cc0733d11da589ff63247e8c8a30cdd861c6a873e0f527d1ae5f,2025-07-21T20:15:55.690000 +CVE-2025-7321,1,1,569eb14f22d3385a553106e5cd98c011e204954994d36bdf6d8b53627a1e1773,2025-07-21T20:15:55.827000 +CVE-2025-7322,1,1,937cf0fef965a8e0d97b900184da1ac48333d4c792441a49468cac9d8b4abda3,2025-07-21T20:15:55.963000 +CVE-2025-7323,1,1,921f347fa35ffe171f7e99abfef5dd6904f7916fffa81d11b9ba35570f5fccd4,2025-07-21T20:15:56.103000 +CVE-2025-7324,1,1,50b0705110b9ca7a41ef9c145030cc5d9085499c646062a51ab4afee4a2c5f6b,2025-07-21T20:15:56.243000 +CVE-2025-7325,1,1,87efb47fe353bef9fc614ef83bc17156ecf563fdee313399483d5e66937b82ca,2025-07-21T20:15:56.397000 CVE-2025-7326,0,0,a926832238f7185cff49615632b48d55b4c66375eeb58ee6f193322631bdc494,2025-07-10T17:15:48.623000 CVE-2025-7327,0,0,fea7e66755f3c8a72d9b59756b834e193683b58fa561ae04239b17c903ff1b30,2025-07-09T13:50:56.863000 CVE-2025-7338,0,0,bac800821c2eebec6f0a18851446d0d244cbfec2f13a5de305a4cba02b75e455,2025-07-17T21:15:50.197000 @@ -302533,15 +302646,15 @@ CVE-2025-7860,0,0,31369abdf1edfc9f1ce2f1585fe3c3b41e9954f53d2f1eec8be9477d7de738 CVE-2025-7861,0,0,d8d6920aaf5348167428b1ccda4e0211035ca6dff4a646ba14ac8feb8bf492e6,2025-07-20T01:15:31.303000 CVE-2025-7862,0,0,fef57d3abaf6f531af1a71a518df9c83962eb487779d317d451681eb7815637c,2025-07-20T03:15:23.773000 CVE-2025-7863,0,0,d7d6d1efcb05b9ec58f01de0dc98514a9c28fff8f6d2493df18226b2f5717763,2025-07-20T03:15:24.027000 -CVE-2025-7864,0,1,9e2b92722244b7f2847c73d737eff2e7b2b21bde79f95f4df3b484faeb57d515,2025-07-21T19:15:31.773000 -CVE-2025-7865,0,1,5ac91acee6449487c03925aec0abcba7f1384d5cb741f8c1c35ec70fa0e0477e,2025-07-21T19:15:31.893000 +CVE-2025-7864,0,0,9e2b92722244b7f2847c73d737eff2e7b2b21bde79f95f4df3b484faeb57d515,2025-07-21T19:15:31.773000 +CVE-2025-7865,0,0,5ac91acee6449487c03925aec0abcba7f1384d5cb741f8c1c35ec70fa0e0477e,2025-07-21T19:15:31.893000 CVE-2025-7866,0,0,51b85980ed81604214a7312aebd4eefbc1f34ded6c494873a66dd88c3c76f7d5,2025-07-20T04:15:40.770000 CVE-2025-7867,0,0,95f449dcd5ba2e022d0e7bf2b010f001a520086b6c2b7da01ed7de038f9369a1,2025-07-20T05:15:41.710000 CVE-2025-7868,0,0,2c651a05afde07e14579423f9fb3b62c4923b86c6e676dae5af399d53e2cbbf3,2025-07-20T05:15:41.927000 CVE-2025-7869,0,0,de45681cc5b8080fc94fb3aaa961c678f1b1cce15b8229a982f784b45d3f8386,2025-07-20T05:15:42.107000 CVE-2025-7870,0,0,a7074e0b8854ec9f71539282a730af5100a506503bd377e1d873a284db308c6f,2025-07-20T06:15:26.920000 CVE-2025-7871,0,0,5e41cc995837050d88a57253c1b7b7c05a9d47df3b9d23393229e16ce77cc9bd,2025-07-20T06:15:28.093000 -CVE-2025-7872,0,0,60b5f0e6c4592a903888f30510272e0e3b529ba9ecaf1a7265695127f4d26be8,2025-07-20T07:15:22.923000 +CVE-2025-7872,0,1,bb4a8e18f8cbc1f004904457647574ec21d54b0fb78cfe4570c7dd477e5f39c1,2025-07-21T21:15:27.187000 CVE-2025-7873,0,0,ee67d74f1d9911f777ba1278dd20c6b883c0ddb3ca55719bccdd4360c8503e48,2025-07-20T07:15:25.147000 CVE-2025-7874,0,0,a8cbec3318987783ca005add98e1863ccd35679b039745f7c7f04193a66b091d,2025-07-21T17:15:38.423000 CVE-2025-7875,0,0,b98c9c85dc209fa1ca686ddcde2f4f45ee327644c8d4966fa52bee0e22e74ab2,2025-07-21T17:15:38.550000 @@ -302563,13 +302676,13 @@ CVE-2025-7890,0,0,365ee5250f1170f037e33fd1b3e312037acaa8f07a8397857f3e20af435ba5 CVE-2025-7891,0,0,290f035c3ad733a30470397095748630c8f84992fd9c0e267bef7616ffb711e1,2025-07-21T13:15:28.143000 CVE-2025-7892,0,0,a11ed0d43e14cf91f8d66aca0fb298d9937648fbbfc7c5dca9df25bde34ac1cf,2025-07-21T13:15:28.270000 CVE-2025-7893,0,0,ceb6d6e3a56b817013ccb70ca9fcf408c3f0c7a2421000a7b6aae7fe21924db1,2025-07-21T13:15:28.403000 -CVE-2025-7894,0,1,b1c2b058cb04b462ff0e1fa681e88d0ea0cce7027a5c77589fd17a1cd4923695,2025-07-21T19:15:32.010000 +CVE-2025-7894,0,0,b1c2b058cb04b462ff0e1fa681e88d0ea0cce7027a5c77589fd17a1cd4923695,2025-07-21T19:15:32.010000 CVE-2025-7895,0,0,3fe99238196e5d28b22b53e69feb52cec3d092c59276337c48d55b7b484e5d30,2025-07-20T15:15:24.670000 CVE-2025-7896,0,0,307f51f10cd7657f124dbee16472392d780050caaeb0b0faaaa4518a0758e32c,2025-07-20T15:15:24.997000 CVE-2025-7897,0,0,2de41986195ed7f5ed493625c3649c25e40db0ee5c3fda2df0efb8bab3b8919d,2025-07-20T15:15:25.227000 CVE-2025-7898,0,0,fcfa62ddfafa85ff4cb2df42f3f489901770f5d35cf775fa64a31af9b9029515,2025-07-21T13:15:28.913000 CVE-2025-7901,0,0,ee77ed3800b29eeb7e638b92fc44ff330861c3e40267d8104351b94a2b53f09c,2025-07-20T16:15:24.560000 -CVE-2025-7902,0,1,f08adca60b1f4f1ff0ca6bef137fc815e22d170c1fb9db3541cbf1d74b9218fa,2025-07-21T19:15:32.127000 +CVE-2025-7902,0,0,f08adca60b1f4f1ff0ca6bef137fc815e22d170c1fb9db3541cbf1d74b9218fa,2025-07-21T19:15:32.127000 CVE-2025-7903,0,0,aafd3ab3e36146e0e8c432cb746818e10b1292ea976f0202214eb937ab6fef02,2025-07-20T17:15:23.653000 CVE-2025-7904,0,0,cc8be41e365b987461e2179cff0cb1a1142986e8e7a45b593a8a9f4c397cec43,2025-07-20T17:15:24.487000 CVE-2025-7905,0,0,78428f49b339defc158620615e9cfe24997b766517b6c2ffbf0f40669f168967,2025-07-20T19:15:24.583000 @@ -302598,7 +302711,11 @@ CVE-2025-7929,0,0,ac075cab4a4534dee6465a8450383106ec51cc35b7a2ebc2ad7a30f35fea83 CVE-2025-7930,0,0,305d0488514bde378800be9378661ddbfa027f9802e2afdf8e5067e7c9ec0299,2025-07-21T16:15:32.290000 CVE-2025-7931,0,0,6a1f7c7e3d0c468070efca45b58cb3396d8c1d16abc84b6eca3d3c67338a3bf8,2025-07-21T17:15:39.040000 CVE-2025-7932,0,0,ea1d2805bbc5a06627d9ead7129ce0793bb95e704ab90c794514b04db13ab6de,2025-07-21T17:15:39.410000 -CVE-2025-7933,1,1,ce2974abe1368df9290a1e7eba0668d9566efe1afe6dd78b7440b8356c0d6c5b,2025-07-21T18:15:28.633000 -CVE-2025-7934,1,1,6684d3d321cc7af41e62a0cc2ea48d6b82c3b91684edcba82e0068e6898ab248,2025-07-21T19:15:32.670000 -CVE-2025-7935,1,1,c449fe233672652d6c71a8d0e41baba1f5fc95fb2203247f7da14981b3ea4655,2025-07-21T19:15:32.850000 -CVE-2025-7962,1,1,d9e4943b663505881adc9c834a67d53dae5d1e78f775d9ad4af75e8582fdb927,2025-07-21T18:15:28.820000 +CVE-2025-7933,0,0,ce2974abe1368df9290a1e7eba0668d9566efe1afe6dd78b7440b8356c0d6c5b,2025-07-21T18:15:28.633000 +CVE-2025-7934,0,0,6684d3d321cc7af41e62a0cc2ea48d6b82c3b91684edcba82e0068e6898ab248,2025-07-21T19:15:32.670000 +CVE-2025-7935,0,0,c449fe233672652d6c71a8d0e41baba1f5fc95fb2203247f7da14981b3ea4655,2025-07-21T19:15:32.850000 +CVE-2025-7936,1,1,6aee953ad18bfd32b4ba7ccf9fdb0bb47d7d0b90382a7c77b6d72c916d18eff9,2025-07-21T20:15:56.613000 +CVE-2025-7938,1,1,441977d7410b8984662f2a71c5f780615883dfa23e26e8b1d3ef108d13227c0b,2025-07-21T20:15:56.803000 +CVE-2025-7939,1,1,d2c820d4f2718046fdc627e524e6a48f70a72bbcb73ae2a12d2a7671599ef608,2025-07-21T21:15:27.380000 +CVE-2025-7940,1,1,f07060aa4bbc92d34af0a8285f0051b9df94a0217bb604ab4a0f7dcdc8c0194f,2025-07-21T21:15:27.560000 +CVE-2025-7962,0,0,d9e4943b663505881adc9c834a67d53dae5d1e78f775d9ad4af75e8582fdb927,2025-07-21T18:15:28.820000