From beac5ac68ace777435f3ca58e4949cf83c5e014b Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 23 Jul 2025 16:03:51 +0000 Subject: [PATCH] Auto-Update: 2025-07-23T16:00:12.710447+00:00 --- CVE-2010/CVE-2010-100xx/CVE-2010-10012.json | 90 +++++++++++ CVE-2015/CVE-2015-101xx/CVE-2015-10141.json | 102 ++++++++++++ CVE-2016/CVE-2016-150xx/CVE-2016-15045.json | 106 ++++++++++++ CVE-2017/CVE-2017-201xx/CVE-2017-20198.json | 94 +++++++++++ CVE-2018/CVE-2018-251xx/CVE-2018-25113.json | 90 +++++++++++ CVE-2018/CVE-2018-251xx/CVE-2018-25114.json | 94 +++++++++++ CVE-2019/CVE-2019-152xx/CVE-2019-15253.json | 10 +- CVE-2019/CVE-2019-161xx/CVE-2019-16151.json | 55 ++++++- CVE-2019/CVE-2019-17xx/CVE-2019-1707.json | 6 +- CVE-2019/CVE-2019-18xx/CVE-2019-1841.json | 6 +- CVE-2020/CVE-2020-34xx/CVE-2020-3411.json | 6 +- CVE-2020/CVE-2020-34xx/CVE-2020-3466.json | 6 +- CVE-2021/CVE-2021-11xx/CVE-2021-1130.json | 6 +- CVE-2021/CVE-2021-11xx/CVE-2021-1134.json | 6 +- CVE-2021/CVE-2021-12xx/CVE-2021-1257.json | 6 +- CVE-2021/CVE-2021-12xx/CVE-2021-1264.json | 6 +- CVE-2021/CVE-2021-12xx/CVE-2021-1265.json | 6 +- CVE-2021/CVE-2021-13xx/CVE-2021-1303.json | 6 +- CVE-2021/CVE-2021-260xx/CVE-2021-26091.json | 28 +++- CVE-2021/CVE-2021-347xx/CVE-2021-34782.json | 10 +- CVE-2022/CVE-2022-206xx/CVE-2022-20630.json | 10 +- CVE-2022/CVE-2022-49xx/CVE-2022-4978.json | 90 +++++++++++ CVE-2023/CVE-2023-200xx/CVE-2023-20055.json | 10 +- CVE-2023/CVE-2023-200xx/CVE-2023-20059.json | 10 +- CVE-2023/CVE-2023-201xx/CVE-2023-20182.json | 10 +- CVE-2023/CVE-2023-201xx/CVE-2023-20183.json | 10 +- CVE-2023/CVE-2023-201xx/CVE-2023-20184.json | 6 +- CVE-2023/CVE-2023-333xx/CVE-2023-33302.json | 86 +++++++++- CVE-2024/CVE-2024-203xx/CVE-2024-20333.json | 32 +++- CVE-2024/CVE-2024-203xx/CVE-2024-20380.json | 41 ++++- CVE-2024/CVE-2024-205xx/CVE-2024-20507.json | 47 +++++- CVE-2024/CVE-2024-235xx/CVE-2024-23591.json | 12 +- CVE-2024/CVE-2024-488xx/CVE-2024-48889.json | 85 +++++++++- CVE-2024/CVE-2024-529xx/CVE-2024-52961.json | 47 +++++- CVE-2024/CVE-2024-540xx/CVE-2024-54018.json | 28 +++- CVE-2024/CVE-2024-555xx/CVE-2024-55590.json | 28 +++- CVE-2024/CVE-2024-58xx/CVE-2024-5899.json | 86 +++++++++- CVE-2025/CVE-2025-201xx/CVE-2025-20123.json | 42 ++++- CVE-2025/CVE-2025-201xx/CVE-2025-20166.json | 82 +++++++++- CVE-2025/CVE-2025-202xx/CVE-2025-20223.json | 27 +++- CVE-2025/CVE-2025-294xx/CVE-2025-29480.json | 19 ++- CVE-2025/CVE-2025-317xx/CVE-2025-31700.json | 18 ++- CVE-2025/CVE-2025-317xx/CVE-2025-31701.json | 18 ++- CVE-2025/CVE-2025-330xx/CVE-2025-33020.json | 56 +++++++ CVE-2025/CVE-2025-330xx/CVE-2025-33076.json | 56 +++++++ CVE-2025/CVE-2025-330xx/CVE-2025-33077.json | 56 +++++++ CVE-2025/CVE-2025-361xx/CVE-2025-36116.json | 56 +++++++ CVE-2025/CVE-2025-361xx/CVE-2025-36117.json | 56 +++++++ CVE-2025/CVE-2025-365xx/CVE-2025-36520.json | 14 +- CVE-2025/CVE-2025-405xx/CVE-2025-40596.json | 56 +++++++ CVE-2025/CVE-2025-405xx/CVE-2025-40597.json | 56 +++++++ CVE-2025/CVE-2025-405xx/CVE-2025-40598.json | 56 +++++++ CVE-2025/CVE-2025-405xx/CVE-2025-40599.json | 56 +++++++ CVE-2025/CVE-2025-460xx/CVE-2025-46099.json | 60 +++++++ CVE-2025/CVE-2025-463xx/CVE-2025-46354.json | 14 +- CVE-2025/CVE-2025-472xx/CVE-2025-47268.json | 10 +- CVE-2025/CVE-2025-484xx/CVE-2025-48498.json | 14 +- CVE-2025/CVE-2025-489xx/CVE-2025-48964.json | 46 +++++- CVE-2025/CVE-2025-518xx/CVE-2025-51867.json | 43 ++++- CVE-2025/CVE-2025-535xx/CVE-2025-53528.json | 6 +- CVE-2025/CVE-2025-540xx/CVE-2025-54090.json | 56 +++++++ CVE-2025/CVE-2025-541xx/CVE-2025-54139.json | 12 +- CVE-2025/CVE-2025-60xx/CVE-2025-6018.json | 72 +++++++++ CVE-2025/CVE-2025-61xx/CVE-2025-6174.json | 35 +++- CVE-2025/CVE-2025-80xx/CVE-2025-8010.json | 41 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8011.json | 41 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8019.json | 18 ++- CVE-2025/CVE-2025-80xx/CVE-2025-8020.json | 10 +- CVE-2025/CVE-2025-80xx/CVE-2025-8027.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8028.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8029.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8030.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8031.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8032.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8033.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8034.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8036.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8037.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8038.json | 43 ++++- CVE-2025/CVE-2025-80xx/CVE-2025-8039.json | 43 ++++- README.md | 68 +++++--- _state.csv | 169 +++++++++++--------- 82 files changed, 3053 insertions(+), 279 deletions(-) create mode 100644 CVE-2010/CVE-2010-100xx/CVE-2010-10012.json create mode 100644 CVE-2015/CVE-2015-101xx/CVE-2015-10141.json create mode 100644 CVE-2016/CVE-2016-150xx/CVE-2016-15045.json create mode 100644 CVE-2017/CVE-2017-201xx/CVE-2017-20198.json create mode 100644 CVE-2018/CVE-2018-251xx/CVE-2018-25113.json create mode 100644 CVE-2018/CVE-2018-251xx/CVE-2018-25114.json create mode 100644 CVE-2022/CVE-2022-49xx/CVE-2022-4978.json create mode 100644 CVE-2025/CVE-2025-330xx/CVE-2025-33020.json create mode 100644 CVE-2025/CVE-2025-330xx/CVE-2025-33076.json create mode 100644 CVE-2025/CVE-2025-330xx/CVE-2025-33077.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36116.json create mode 100644 CVE-2025/CVE-2025-361xx/CVE-2025-36117.json create mode 100644 CVE-2025/CVE-2025-405xx/CVE-2025-40596.json create mode 100644 CVE-2025/CVE-2025-405xx/CVE-2025-40597.json create mode 100644 CVE-2025/CVE-2025-405xx/CVE-2025-40598.json create mode 100644 CVE-2025/CVE-2025-405xx/CVE-2025-40599.json create mode 100644 CVE-2025/CVE-2025-460xx/CVE-2025-46099.json create mode 100644 CVE-2025/CVE-2025-540xx/CVE-2025-54090.json create mode 100644 CVE-2025/CVE-2025-60xx/CVE-2025-6018.json diff --git a/CVE-2010/CVE-2010-100xx/CVE-2010-10012.json b/CVE-2010/CVE-2010-100xx/CVE-2010-10012.json new file mode 100644 index 00000000000..6fb29382f71 --- /dev/null +++ b/CVE-2010/CVE-2010-100xx/CVE-2010-10012.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2010-10012", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:31.017", + "lastModified": "2025-07-23T14:15:31.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes\u00a0and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/httpdasm_directory_traversal.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/15861", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.japheth.de/httpdASM.html", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/httpasm-path-traversal", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2015/CVE-2015-101xx/CVE-2015-10141.json b/CVE-2015/CVE-2015-101xx/CVE-2015-10141.json new file mode 100644 index 00000000000..d7a5ce7b86b --- /dev/null +++ b/CVE-2015/CVE-2015-101xx/CVE-2015-10141.json @@ -0,0 +1,102 @@ +{ + "id": "CVE-2015-10141", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:31.763", + "lastModified": "2025-07-23T14:15:31.763", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. When remote debugging is enabled, Xdebug listens on port 9000 and accepts debugger protocol commands without authentication. An attacker can send a crafted eval command over this interface to execute arbitrary PHP code, which may invoke system-level functions such as system() or passthru(). This results in full compromise of the host under the privileges of the web server user." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + }, + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "http://web.archive.org/web/20231226215418/https://paper.seebug.org/397/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://kirtixs.com/blog/2015/11/13/xpwn-exploiting-xdebug-enabled-servers/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/44568", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.fortiguard.com/encyclopedia/ips/46000", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/xdebug-remote-debugger-unauth-os-command-execution", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://xdebug.org/", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2016/CVE-2016-150xx/CVE-2016-15045.json b/CVE-2016/CVE-2016-150xx/CVE-2016-15045.json new file mode 100644 index 00000000000..745ca752472 --- /dev/null +++ b/CVE-2016/CVE-2016-150xx/CVE-2016-15045.json @@ -0,0 +1,106 @@ +{ + "id": "CVE-2016-15045", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:31.950", + "lastModified": "2025-07-23T15:15:29.573", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A local privilege escalation vulnerability exists in lastore-daemon, the system package manager daemon used in Deepin Linux (developed by Wuhan Deepin Technology Co., Ltd.). In versions 0.9.53-1 (Deepin 15.5) and 0.9.66-1 (Deepin 15.7), the D-Bus configuration permits any user in the sudo group to invoke the InstallPackage method without password authentication. By default, the first user created on Deepin is in the sudo group. An attacker with shell access can craft a .deb package containing a malicious post-install script and use dbus-send to install it via lastore-daemon, resulting in arbitrary code execution as root." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + }, + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/linuxdeepin/lastore-daemon", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/local/lastore_daemon_dbus_priv_esc.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.deepin.org/en/mirrors/releases/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/39433", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/44523", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/deepin-lastore-daemon-priv-esc", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/39433", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2017/CVE-2017-201xx/CVE-2017-20198.json b/CVE-2017/CVE-2017-201xx/CVE-2017-20198.json new file mode 100644 index 00000000000..bc86f9abe61 --- /dev/null +++ b/CVE-2017/CVE-2017-201xx/CVE-2017-20198.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2017-20198", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:32.140", + "lastModified": "2025-07-23T14:15:32.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Marathon UI in DC/OS < 1.9.0 allows unauthenticated users to deploy arbitrary Docker containers. Due to improper restriction of volume mount configurations, attackers can deploy a container that mounts the host's root filesystem (/) with read/write privileges. When using a malicious Docker image, the attacker can write to /etc/cron.d/ on the host, achieving arbitrary code execution with root privileges. This impacts any system where the Docker daemon honors Marathon container configurations without policy enforcement." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://dcos.io/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dcos_marathon.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://web.archive.org/web/20230609134421/https://warroom.rsmus.com/dcos-marathon-compromise/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/42134", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/dcos-marathon-docker-mount-abuse-rce", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2018/CVE-2018-251xx/CVE-2018-25113.json b/CVE-2018/CVE-2018-251xx/CVE-2018-25113.json new file mode 100644 index 00000000000..6cbfb433752 --- /dev/null +++ b/CVE-2018/CVE-2018-251xx/CVE-2018-25113.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2018-25113", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:32.300", + "lastModified": "2025-07-23T14:15:32.300", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An unauthenticated path traversal vulnerability exists in Dicoogle PACS Web Server version 2.5.0 and possibly earlier. The vulnerability allows remote attackers to read arbitrary files on the underlying system by sending a crafted request to the /exportFile endpoint using the UID parameter. Successful exploitation can reveal sensitive files accessible by the web server user." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-22" + } + ] + } + ], + "references": [ + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/dicoogle_traversal.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/45007", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.fortiguard.com/encyclopedia/ips/46527/dicoogle-pacs-web-server-directory-traversal", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/dicoogle-pacs-web-server-path-traversal", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2018/CVE-2018-251xx/CVE-2018-25114.json b/CVE-2018/CVE-2018-251xx/CVE-2018-25114.json new file mode 100644 index 00000000000..c76ab48b483 --- /dev/null +++ b/CVE-2018/CVE-2018-251xx/CVE-2018-25114.json @@ -0,0 +1,94 @@ +{ + "id": "CVE-2018-25114", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:32.447", + "lastModified": "2025-07-23T14:15:32.447", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A remote code execution vulnerability exists within osCommerce Online Merchant version 2.3.4.1 due to insecure default configuration and missing authentication in the installer workflow. By default, the /install/ directory remains accessible after installation. An unauthenticated attacker can invoke install_4.php, submit crafted POST data, and inject arbitrary PHP code into the configure.php file. When the application later includes this file, the injected payload is executed, resulting in full server-side compromise." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + }, + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/oscommerce_installer_unauth_code_exec.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.exploit-db.com/exploits/44374", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.oscommerce.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/oscommerce-installer-unauth-config-file-injection-php-code-execution", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2019/CVE-2019-152xx/CVE-2019-15253.json b/CVE-2019/CVE-2019-152xx/CVE-2019-15253.json index 48f52d81ff7..81359b7cf44 100644 --- a/CVE-2019/CVE-2019-152xx/CVE-2019-15253.json +++ b/CVE-2019/CVE-2019-152xx/CVE-2019-15253.json @@ -2,7 +2,7 @@ "id": "CVE-2019-15253", "sourceIdentifier": "psirt@cisco.com", "published": "2020-02-05T18:15:10.533", - "lastModified": "2024-11-21T04:28:18.113", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -117,16 +117,16 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.3.0.6", - "matchCriteriaId": "121B9677-BEEC-4F2B-9A57-34C13A15FD2B" + "matchCriteriaId": "8BD13A91-7426-4D58-85E3-EADA59381342" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.3.1.0", "versionEndExcluding": "1.3.1.4", - "matchCriteriaId": "0B19B0B1-A748-4C13-B9FC-C7611A8CE89B" + "matchCriteriaId": "886EF696-8DE1-4F01-83C2-053C0B88B458" } ] } diff --git a/CVE-2019/CVE-2019-161xx/CVE-2019-16151.json b/CVE-2019/CVE-2019-161xx/CVE-2019-16151.json index acf4fff5c98..598807e95f4 100644 --- a/CVE-2019/CVE-2019-161xx/CVE-2019-16151.json +++ b/CVE-2019/CVE-2019-161xx/CVE-2019-16151.json @@ -2,8 +2,8 @@ "id": "CVE-2019-16151", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-21T16:15:13.210", - "lastModified": "2025-03-21T16:15:13.210", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:48:43.560", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 } ] }, @@ -51,10 +71,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.0", + "versionEndExcluding": "6.2.10", + "matchCriteriaId": "8EE47BA6-6F1B-40E9-8FE5-5752389875DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4.0", + "versionEndExcluding": "6.4.2", + "matchCriteriaId": "FECE2DC5-CFCC-4BA9-B416-4EB2C1E4D9BB" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.com/advisory/FG-IR-19-301", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-17xx/CVE-2019-1707.json b/CVE-2019/CVE-2019-17xx/CVE-2019-1707.json index 02a0176dd3e..a19e7b05bfa 100644 --- a/CVE-2019/CVE-2019-17xx/CVE-2019-1707.json +++ b/CVE-2019/CVE-2019-17xx/CVE-2019-1707.json @@ -2,7 +2,7 @@ "id": "CVE-2019-1707", "sourceIdentifier": "psirt@cisco.com", "published": "2019-03-11T21:29:01.170", - "lastModified": "2024-11-21T04:37:08.783", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -115,9 +115,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.2.5", - "matchCriteriaId": "AF56DBB5-A197-4315-A258-2E991A6B5E2C" + "matchCriteriaId": "DC5F0CD4-88B3-4D0C-B05C-59FFE23A9A39" } ] } diff --git a/CVE-2019/CVE-2019-18xx/CVE-2019-1841.json b/CVE-2019/CVE-2019-18xx/CVE-2019-1841.json index 6f647fdef73..dfa25e4430e 100644 --- a/CVE-2019/CVE-2019-18xx/CVE-2019-1841.json +++ b/CVE-2019/CVE-2019-18xx/CVE-2019-1841.json @@ -2,7 +2,7 @@ "id": "CVE-2019-1841", "sourceIdentifier": "psirt@cisco.com", "published": "2019-04-18T02:29:06.123", - "lastModified": "2024-11-21T04:37:30.627", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -115,9 +115,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.2.5", - "matchCriteriaId": "AF56DBB5-A197-4315-A258-2E991A6B5E2C" + "matchCriteriaId": "DC5F0CD4-88B3-4D0C-B05C-59FFE23A9A39" } ] } diff --git a/CVE-2020/CVE-2020-34xx/CVE-2020-3411.json b/CVE-2020/CVE-2020-34xx/CVE-2020-3411.json index d29472ae309..f1af2a6ee9b 100644 --- a/CVE-2020/CVE-2020-34xx/CVE-2020-3411.json +++ b/CVE-2020/CVE-2020-34xx/CVE-2020-3411.json @@ -2,7 +2,7 @@ "id": "CVE-2020-3411", "sourceIdentifier": "psirt@cisco.com", "published": "2020-08-17T18:15:12.680", - "lastModified": "2024-11-21T05:30:58.750", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -117,10 +117,10 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "1.3", "versionEndExcluding": "1.3.1.4", - "matchCriteriaId": "45CC4C28-9747-4D68-B737-A7B52B7502D5" + "matchCriteriaId": "AAD99AD7-C81A-4011-9E30-3CBE55331E38" } ] } diff --git a/CVE-2020/CVE-2020-34xx/CVE-2020-3466.json b/CVE-2020/CVE-2020-34xx/CVE-2020-3466.json index c4dcf946b11..ca83064e473 100644 --- a/CVE-2020/CVE-2020-34xx/CVE-2020-3466.json +++ b/CVE-2020/CVE-2020-34xx/CVE-2020-3466.json @@ -2,7 +2,7 @@ "id": "CVE-2020-3466", "sourceIdentifier": "psirt@cisco.com", "published": "2020-08-26T17:15:13.757", - "lastModified": "2024-11-21T05:31:07.690", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -117,8 +117,8 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:-:*:*:*:*:*:*:*", - "matchCriteriaId": "55ED3A4F-078D-4A7E-A88E-B9EF9115C89A" + "criteria": "cpe:2.3:a:cisco:catalyst_center:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A4CD1671-CBAC-4C77-8C12-83C6142185A7" } ] } diff --git a/CVE-2021/CVE-2021-11xx/CVE-2021-1130.json b/CVE-2021/CVE-2021-11xx/CVE-2021-1130.json index f5f33e59e83..8eb32515a81 100644 --- a/CVE-2021/CVE-2021-11xx/CVE-2021-1130.json +++ b/CVE-2021/CVE-2021-11xx/CVE-2021-1130.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1130", "sourceIdentifier": "psirt@cisco.com", "published": "2021-01-13T22:15:14.473", - "lastModified": "2024-11-21T05:43:39.290", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -115,9 +115,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.1.0", - "matchCriteriaId": "1E4A4D93-A6D7-446A-8BDF-2795C514514E" + "matchCriteriaId": "C4379135-F71A-4D39-85CA-52828D8E6345" } ] } diff --git a/CVE-2021/CVE-2021-11xx/CVE-2021-1134.json b/CVE-2021/CVE-2021-11xx/CVE-2021-1134.json index 53a83070693..54266d83305 100644 --- a/CVE-2021/CVE-2021-11xx/CVE-2021-1134.json +++ b/CVE-2021/CVE-2021-11xx/CVE-2021-1134.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1134", "sourceIdentifier": "psirt@cisco.com", "published": "2021-06-29T03:15:06.890", - "lastModified": "2024-11-21T05:43:39.847", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -117,9 +117,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.2.1", - "matchCriteriaId": "24CD000E-524C-4F34-B544-41F9B4F82870" + "matchCriteriaId": "EF121262-673B-4239-8AFD-11DA1EE218C0" } ] } diff --git a/CVE-2021/CVE-2021-12xx/CVE-2021-1257.json b/CVE-2021/CVE-2021-12xx/CVE-2021-1257.json index cd886ed52a5..41152bff4c0 100644 --- a/CVE-2021/CVE-2021-12xx/CVE-2021-1257.json +++ b/CVE-2021/CVE-2021-12xx/CVE-2021-1257.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1257", "sourceIdentifier": "psirt@cisco.com", "published": "2021-01-20T20:15:14.207", - "lastModified": "2024-11-21T05:43:56.587", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -117,9 +117,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.1.1.0", - "matchCriteriaId": "AED3A396-9834-466E-A28C-1F7A83CABA2B" + "matchCriteriaId": "6A61A019-AD52-4283-B896-80C1CF4E89D8" } ] } diff --git a/CVE-2021/CVE-2021-12xx/CVE-2021-1264.json b/CVE-2021/CVE-2021-12xx/CVE-2021-1264.json index 305993d08f1..47bccc814f4 100644 --- a/CVE-2021/CVE-2021-12xx/CVE-2021-1264.json +++ b/CVE-2021/CVE-2021-12xx/CVE-2021-1264.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1264", "sourceIdentifier": "psirt@cisco.com", "published": "2021-01-20T20:15:15.267", - "lastModified": "2024-11-21T05:43:57.560", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -105,9 +105,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "1.3.1.0", - "matchCriteriaId": "2E89C4DD-68DC-4E9A-9429-1382D92DBE2F" + "matchCriteriaId": "A67AEA65-5185-4750-A3C1-6C23A33B4D01" } ] } diff --git a/CVE-2021/CVE-2021-12xx/CVE-2021-1265.json b/CVE-2021/CVE-2021-12xx/CVE-2021-1265.json index 6845aa2f4fb..41dc716797a 100644 --- a/CVE-2021/CVE-2021-12xx/CVE-2021-1265.json +++ b/CVE-2021/CVE-2021-12xx/CVE-2021-1265.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1265", "sourceIdentifier": "psirt@cisco.com", "published": "2021-01-20T20:15:15.407", - "lastModified": "2024-11-21T05:43:57.693", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -107,9 +107,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.1.1.0", - "matchCriteriaId": "AED3A396-9834-466E-A28C-1F7A83CABA2B" + "matchCriteriaId": "6A61A019-AD52-4283-B896-80C1CF4E89D8" } ] } diff --git a/CVE-2021/CVE-2021-13xx/CVE-2021-1303.json b/CVE-2021/CVE-2021-13xx/CVE-2021-1303.json index bdc5c5b940b..53ceea6e415 100644 --- a/CVE-2021/CVE-2021-13xx/CVE-2021-1303.json +++ b/CVE-2021/CVE-2021-13xx/CVE-2021-1303.json @@ -2,7 +2,7 @@ "id": "CVE-2021-1303", "sourceIdentifier": "psirt@cisco.com", "published": "2021-01-20T20:15:17.033", - "lastModified": "2024-11-21T05:44:02.830", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -107,9 +107,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.1.2.0", - "matchCriteriaId": "8EA9D7C1-B44C-4BAE-AE25-4C584C38DF6B" + "matchCriteriaId": "CB7DE478-0258-4EE4-A5CE-E1D6A48F1202" } ] } diff --git a/CVE-2021/CVE-2021-260xx/CVE-2021-26091.json b/CVE-2021/CVE-2021-260xx/CVE-2021-26091.json index 5c5c3cfb7f1..937b50bc466 100644 --- a/CVE-2021/CVE-2021-260xx/CVE-2021-26091.json +++ b/CVE-2021/CVE-2021-260xx/CVE-2021-26091.json @@ -2,8 +2,8 @@ "id": "CVE-2021-26091", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-24T16:15:16.450", - "lastModified": "2025-03-27T16:44:44.143", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:53:04.907", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.0", + "versionEndExcluding": "6.4.5", + "matchCriteriaId": "E6ECDB5E-50A7-4E63-9F38-A7C58EF06C3F" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.com/advisory/FG-IR-21-031", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2021/CVE-2021-347xx/CVE-2021-34782.json b/CVE-2021/CVE-2021-347xx/CVE-2021-34782.json index 90c821a962a..b773a927a7c 100644 --- a/CVE-2021/CVE-2021-347xx/CVE-2021-34782.json +++ b/CVE-2021/CVE-2021-347xx/CVE-2021-34782.json @@ -2,7 +2,7 @@ "id": "CVE-2021-34782", "sourceIdentifier": "psirt@cisco.com", "published": "2021-10-06T20:15:18.677", - "lastModified": "2024-11-21T06:11:11.420", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -115,16 +115,16 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.2.5", - "matchCriteriaId": "50E90585-0B10-4C39-93D6-3A87F64D6DF3" + "matchCriteriaId": "535C1458-9AB1-4D3E-9397-2B8A85742A7F" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.2.3.0", "versionEndExcluding": "2.2.3.3", - "matchCriteriaId": "C1C06ACF-9D47-4DBC-BE38-4FB5FA0770D5" + "matchCriteriaId": "B122C79C-60F4-4852-970A-D9BDAAC30D49" } ] } diff --git a/CVE-2022/CVE-2022-206xx/CVE-2022-20630.json b/CVE-2022/CVE-2022-206xx/CVE-2022-20630.json index 196574a80c8..f6b49c5bb82 100644 --- a/CVE-2022/CVE-2022-206xx/CVE-2022-20630.json +++ b/CVE-2022/CVE-2022-206xx/CVE-2022-20630.json @@ -2,7 +2,7 @@ "id": "CVE-2022-20630", "sourceIdentifier": "psirt@cisco.com", "published": "2022-02-10T18:15:08.860", - "lastModified": "2024-11-21T06:43:11.887", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -115,17 +115,17 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.1.2.0", "versionEndExcluding": "2.2.2.8", - "matchCriteriaId": "66415B51-F19E-4383-AEF8-6A7502EB0F68" + "matchCriteriaId": "08DEFF7A-5C58-4151-9303-06FD3D4E5977" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.2.3.0", "versionEndExcluding": "2.2.3.4", - "matchCriteriaId": "01FD99C4-BCB1-417E-ADCE-73314AD2E857" + "matchCriteriaId": "35BC2769-7CCD-46A4-92DA-E17C32C03CCC" } ] } diff --git a/CVE-2022/CVE-2022-49xx/CVE-2022-4978.json b/CVE-2022/CVE-2022-49xx/CVE-2022-4978.json new file mode 100644 index 00000000000..1764dde8925 --- /dev/null +++ b/CVE-2022/CVE-2022-49xx/CVE-2022-4978.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2022-4978", + "sourceIdentifier": "disclosure@vulncheck.com", + "published": "2025-07-23T14:15:32.640", + "lastModified": "2025-07-23T14:15:32.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Remote Control Server, maintained by\u00a0Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "disclosure@vulncheck.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-78" + }, + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], + "references": [ + { + "url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/remote_control_collection_rce.rb", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://remote-control-collection.com/", + "source": "disclosure@vulncheck.com" + }, + { + "url": "https://www.vulncheck.com/advisories/steppschuh-remote-control-server-unauth-rce", + "source": "disclosure@vulncheck.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-200xx/CVE-2023-20055.json b/CVE-2023/CVE-2023-200xx/CVE-2023-20055.json index f2c340ad6e4..63dcc231455 100644 --- a/CVE-2023/CVE-2023-200xx/CVE-2023-20055.json +++ b/CVE-2023/CVE-2023-200xx/CVE-2023-20055.json @@ -2,7 +2,7 @@ "id": "CVE-2023-20055", "sourceIdentifier": "psirt@cisco.com", "published": "2023-03-23T17:15:14.127", - "lastModified": "2024-11-21T07:40:26.907", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,14 +86,14 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.3.3.6", - "matchCriteriaId": "11170788-2BEF-4430-9185-B4514595D23E" + "matchCriteriaId": "1BE4616D-A0C4-4E43-B300-4A689EBC7FA3" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:2.3.4.0:*:*:*:*:*:*:*", - "matchCriteriaId": "C42DE1B1-DA01-4F77-9A4B-F5B0BADCE974" + "criteria": "cpe:2.3:a:cisco:catalyst_center:2.3.4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "80114D6D-ADCA-48F6-B22E-1D5FBDB9BA68" } ] } diff --git a/CVE-2023/CVE-2023-200xx/CVE-2023-20059.json b/CVE-2023/CVE-2023-200xx/CVE-2023-20059.json index 60a36d15395..959e16322a3 100644 --- a/CVE-2023/CVE-2023-200xx/CVE-2023-20059.json +++ b/CVE-2023/CVE-2023-200xx/CVE-2023-20059.json @@ -2,7 +2,7 @@ "id": "CVE-2023-20059", "sourceIdentifier": "psirt@cisco.com", "published": "2023-03-23T17:15:14.303", - "lastModified": "2024-11-21T07:40:27.463", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,16 +86,16 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.3.3.7", - "matchCriteriaId": "9F4B9391-B8AE-4B4D-9083-5822C78AE6F5" + "matchCriteriaId": "A043AAF2-566B-4124-BEEF-C5522606B9EC" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.3.4.0", "versionEndExcluding": "2.3.5.0", - "matchCriteriaId": "4E921B2B-B1A1-4E5B-89F3-17270A4B79E9" + "matchCriteriaId": "8D5FAB09-904E-409A-BB91-92211144CABE" } ] } diff --git a/CVE-2023/CVE-2023-201xx/CVE-2023-20182.json b/CVE-2023/CVE-2023-201xx/CVE-2023-20182.json index a14eae2fbf7..e6c4bf325db 100644 --- a/CVE-2023/CVE-2023-201xx/CVE-2023-20182.json +++ b/CVE-2023/CVE-2023-201xx/CVE-2023-20182.json @@ -2,7 +2,7 @@ "id": "CVE-2023-20182", "sourceIdentifier": "psirt@cisco.com", "published": "2023-05-18T03:15:11.023", - "lastModified": "2024-11-21T07:40:45.847", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,16 +86,16 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.3.3.7", - "matchCriteriaId": "9F4B9391-B8AE-4B4D-9083-5822C78AE6F5" + "matchCriteriaId": "A043AAF2-566B-4124-BEEF-C5522606B9EC" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.3.4", "versionEndExcluding": "2.3.5.3", - "matchCriteriaId": "7969260D-2E94-47F7-A88E-BD34462886BD" + "matchCriteriaId": "F455FC6D-9908-4B12-9C85-2F17910B3736" } ] } diff --git a/CVE-2023/CVE-2023-201xx/CVE-2023-20183.json b/CVE-2023/CVE-2023-201xx/CVE-2023-20183.json index 07c3fed621b..75b75e48203 100644 --- a/CVE-2023/CVE-2023-201xx/CVE-2023-20183.json +++ b/CVE-2023/CVE-2023-201xx/CVE-2023-20183.json @@ -2,7 +2,7 @@ "id": "CVE-2023-20183", "sourceIdentifier": "psirt@cisco.com", "published": "2023-05-18T03:15:11.090", - "lastModified": "2024-11-21T07:40:45.987", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,16 +86,16 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.3.3.7", - "matchCriteriaId": "9F4B9391-B8AE-4B4D-9083-5822C78AE6F5" + "matchCriteriaId": "A043AAF2-566B-4124-BEEF-C5522606B9EC" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.3.4", "versionEndExcluding": "2.3.5.3", - "matchCriteriaId": "7969260D-2E94-47F7-A88E-BD34462886BD" + "matchCriteriaId": "F455FC6D-9908-4B12-9C85-2F17910B3736" } ] } diff --git a/CVE-2023/CVE-2023-201xx/CVE-2023-20184.json b/CVE-2023/CVE-2023-201xx/CVE-2023-20184.json index 0842ce8c09c..1700686dedf 100644 --- a/CVE-2023/CVE-2023-201xx/CVE-2023-20184.json +++ b/CVE-2023/CVE-2023-201xx/CVE-2023-20184.json @@ -2,7 +2,7 @@ "id": "CVE-2023-20184", "sourceIdentifier": "psirt@cisco.com", "published": "2023-05-18T03:15:11.150", - "lastModified": "2024-11-21T07:40:46.130", + "lastModified": "2025-07-23T15:26:38.713", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ @@ -86,9 +86,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:cisco:dna_center:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", "versionEndExcluding": "2.2.3.5", - "matchCriteriaId": "CC423BEF-D42B-4D8F-9DB7-C2FD19E75BD5" + "matchCriteriaId": "3840B999-B7EE-46E0-A7C8-BEB135E77A9A" } ] } diff --git a/CVE-2023/CVE-2023-333xx/CVE-2023-33302.json b/CVE-2023/CVE-2023-333xx/CVE-2023-33302.json index e7919298641..6299910d929 100644 --- a/CVE-2023/CVE-2023-333xx/CVE-2023-33302.json +++ b/CVE-2023/CVE-2023-333xx/CVE-2023-33302.json @@ -2,8 +2,8 @@ "id": "CVE-2023-33302", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-31T15:15:41.680", - "lastModified": "2025-04-01T20:26:30.593", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:53:22.097", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -51,10 +71,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.0", + "versionEndIncluding": "5.4.12", + "matchCriteriaId": "F55E66F3-2827-4707-9720-FBD56335B973" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.0", + "versionEndExcluding": "6.0.11", + "matchCriteriaId": "98D4A72C-BD04-40D1-9561-BE46247CE338" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2.0", + "versionEndExcluding": "6.2.7", + "matchCriteriaId": "FA33C194-BB9C-43C8-864C-15396010FAAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4.0", + "versionEndExcluding": "6.4.5", + "matchCriteriaId": "5DAB4EFB-D73F-4FC5-8FE7-278BADB9F78E" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:*", + "versionStartIncluding": "1.1.0", + "versionEndExcluding": "7.2.1", + "matchCriteriaId": "3F262B16-971F-492A-9502-67D90DC25846" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-21-023", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-203xx/CVE-2024-20333.json b/CVE-2024/CVE-2024-203xx/CVE-2024-20333.json index 79a1a43eea9..742167f24a4 100644 --- a/CVE-2024/CVE-2024-203xx/CVE-2024-20333.json +++ b/CVE-2024/CVE-2024-203xx/CVE-2024-20333.json @@ -2,8 +2,8 @@ "id": "CVE-2024-20333", "sourceIdentifier": "psirt@cisco.com", "published": "2024-03-27T17:15:53.480", - "lastModified": "2024-11-21T08:52:23.783", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T14:53:12.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.5.4", + "matchCriteriaId": "D3707C5B-81B2-4E9E-8941-562BBEFE0AA0" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccc-authz-bypass-5EKchJRb", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccc-authz-bypass-5EKchJRb", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-203xx/CVE-2024-20380.json b/CVE-2024/CVE-2024-203xx/CVE-2024-20380.json index 95774c57fa0..b69e77337ed 100644 --- a/CVE-2024/CVE-2024-203xx/CVE-2024-20380.json +++ b/CVE-2024/CVE-2024-203xx/CVE-2024-20380.json @@ -2,8 +2,8 @@ "id": "CVE-2024-20380", "sourceIdentifier": "psirt@cisco.com", "published": "2024-04-18T20:15:17.520", - "lastModified": "2024-11-21T08:52:30.310", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:08:46.247", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,47 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:clamav:clamav:1.3.0:-:*:*:*:*:*:*", + "matchCriteriaId": "C3ACEAD4-CF16-48BD-A344-B427B017219C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:clamav:clamav:1.3.0:rc:*:*:*:*:*:*", + "matchCriteriaId": "03381195-B417-4D4D-BB35-284E35652BB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:clamav:clamav:1.3.0:rc2:*:*:*:*:*:*", + "matchCriteriaId": "6BEAF0FC-6347-47F5-A865-87AAB4F6D64C" + } + ] + } + ] + } + ], "references": [ { "url": "https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://blog.clamav.net/2024/04/clamav-131-123-106-patch-versions.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-205xx/CVE-2024-20507.json b/CVE-2024/CVE-2024-205xx/CVE-2024-20507.json index 56839476d07..0244c80b04f 100644 --- a/CVE-2024/CVE-2024-205xx/CVE-2024-20507.json +++ b/CVE-2024/CVE-2024-205xx/CVE-2024-20507.json @@ -2,8 +2,8 @@ "id": "CVE-2024-20507", "sourceIdentifier": "psirt@cisco.com", "published": "2024-11-06T17:15:16.257", - "lastModified": "2024-11-06T18:17:17.287", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:33:38.953", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -36,6 +36,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ] }, @@ -51,10 +71,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:meeting_management:*:*:*:*:*:*:*:*", + "versionEndExcluding": "3.10.0", + "matchCriteriaId": "F2872A09-6812-49F4-9721-A094A3EFEA7F" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmm-info-disc-9ZEMAhGA", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-235xx/CVE-2024-23591.json b/CVE-2024/CVE-2024-235xx/CVE-2024-23591.json index adc996c2b08..faacc38c446 100644 --- a/CVE-2024/CVE-2024-235xx/CVE-2024-23591.json +++ b/CVE-2024/CVE-2024-235xx/CVE-2024-23591.json @@ -2,8 +2,8 @@ "id": "CVE-2024-23591", "sourceIdentifier": "psirt@lenovo.com", "published": "2024-02-16T17:15:08.800", - "lastModified": "2025-01-28T14:28:25.570", - "vulnStatus": "Analyzed", + "lastModified": "2025-07-23T15:15:30.030", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -113,12 +113,8 @@ ], "references": [ { - "url": "https://https://support.lenovo.com/us/en/product_security/LEN-150020", - "source": "psirt@lenovo.com", - "tags": [ - "Broken Link", - "Vendor Advisory" - ] + "url": "https://support.lenovo.com/us/en/product_security/LEN-150020", + "source": "psirt@lenovo.com" }, { "url": "https://https://support.lenovo.com/us/en/product_security/LEN-150020", diff --git a/CVE-2024/CVE-2024-488xx/CVE-2024-48889.json b/CVE-2024/CVE-2024-488xx/CVE-2024-48889.json index 841e7a6d1c8..fbc103709ac 100644 --- a/CVE-2024/CVE-2024-488xx/CVE-2024-48889.json +++ b/CVE-2024/CVE-2024-488xx/CVE-2024-48889.json @@ -2,8 +2,8 @@ "id": "CVE-2024-48889", "sourceIdentifier": "psirt@fortinet.com", "published": "2024-12-18T13:15:06.463", - "lastModified": "2024-12-18T15:15:11.713", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:04:55.817", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -81,10 +81,89 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.4.10", + "versionEndExcluding": "6.4.15", + "matchCriteriaId": "1991ADC0-7D04-4384-90B5-868B0008E3B0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.5", + "versionEndExcluding": "7.0.13", + "matchCriteriaId": "A0B2B047-143D-4D7F-8838-0CB83647CC08" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.2.3", + "versionEndExcluding": "7.2.8", + "matchCriteriaId": "8B3C4C96-2375-4C7F-90CF-D6D89866DD4E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.5", + "matchCriteriaId": "0666260A-1327-4C43-A841-04FB4459449C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager:7.6.0:*:*:*:*:*:*:*", + "matchCriteriaId": "0141F06A-F5FE-4DF3-B60E-DD76A1AD8A56" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.1", + "versionEndExcluding": "7.0.13", + "matchCriteriaId": "29B3A5F2-3121-4902-BBB6-8B4D07767F77" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.2.1", + "versionEndExcluding": "7.2.8", + "matchCriteriaId": "E3A26BF0-DF69-42F6-B9D8-D3BEE3DD352C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortimanager_cloud:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.1", + "versionEndExcluding": "7.4.5", + "matchCriteriaId": "6E0BCF26-B311-4FFF-866B-3DCA14A26268" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-425", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-529xx/CVE-2024-52961.json b/CVE-2024/CVE-2024-529xx/CVE-2024-52961.json index 56270bd8167..771161637e1 100644 --- a/CVE-2024/CVE-2024-529xx/CVE-2024-52961.json +++ b/CVE-2024/CVE-2024-529xx/CVE-2024-52961.json @@ -2,8 +2,8 @@ "id": "CVE-2024-52961", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-11T15:15:42.960", - "lastModified": "2025-03-11T15:15:42.960", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:07:53.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", + "versionEndExcluding": "4.0.6", + "matchCriteriaId": "145ED28B-323B-4B4C-8E88-98FDBDAA86E1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.2.0", + "versionEndExcluding": "4.2.8", + "matchCriteriaId": "A19FD0B7-EB27-4118-944C-BF38648A7A0F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.4.0", + "versionEndExcluding": "4.4.7", + "matchCriteriaId": "2DB040DB-3A14-40ED-A79A-751E415CF496" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortisandbox:5.0.0:*:*:*:*:*:*:*", + "matchCriteriaId": "A76F978E-2082-45A0-93FE-107B0BAFE0C3" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-306", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-540xx/CVE-2024-54018.json b/CVE-2024/CVE-2024-540xx/CVE-2024-54018.json index b2663295337..8cabf2c26a3 100644 --- a/CVE-2024/CVE-2024-540xx/CVE-2024-54018.json +++ b/CVE-2024/CVE-2024-540xx/CVE-2024-54018.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54018", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-11T15:15:43.113", - "lastModified": "2025-03-11T15:15:43.113", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:37:06.523", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortisandbox:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.2.0", + "versionEndExcluding": "4.4.6", + "matchCriteriaId": "688272AF-8646-4076-BED7-001CDBA1EB2F" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-110", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-555xx/CVE-2024-55590.json b/CVE-2024/CVE-2024-555xx/CVE-2024-55590.json index d0544f65083..02e3a7826e4 100644 --- a/CVE-2024/CVE-2024-555xx/CVE-2024-55590.json +++ b/CVE-2024/CVE-2024-555xx/CVE-2024-55590.json @@ -2,8 +2,8 @@ "id": "CVE-2024-55590", "sourceIdentifier": "psirt@fortinet.com", "published": "2025-03-11T15:15:43.650", - "lastModified": "2025-03-11T15:15:43.650", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:45:34.770", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fortinet:fortiisolator:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.4.0", + "versionEndExcluding": "2.4.6", + "matchCriteriaId": "CE52CDEC-F555-44E8-84E7-3FB84C18FA16" + } + ] + } + ] + } + ], "references": [ { "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-178", - "source": "psirt@fortinet.com" + "source": "psirt@fortinet.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json b/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json index 514de5c02e4..29056227b6e 100644 --- a/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json +++ b/CVE-2024/CVE-2024-58xx/CVE-2024-5899.json @@ -2,8 +2,8 @@ "id": "CVE-2024-5899", "sourceIdentifier": "cve-coordination@google.com", "published": "2024-06-18T09:15:09.767", - "lastModified": "2024-11-21T09:48:32.817", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:00:34.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,6 +59,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -71,24 +93,76 @@ "value": "CWE-20" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:bazel_for_android_studio:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024.06.04.0.2", + "matchCriteriaId": "DE67B43C-78F7-4868-926D-D920C4AB0834" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:bazel_for_clion:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024.06.04.0.2", + "matchCriteriaId": "1B7AB8DA-017F-463F-AF23-49CDBD4CC756" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:bazel_for_intellij:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2024.06.04.0.2", + "matchCriteriaId": "AE5DB19D-DAC5-48AE-A248-77C42B350DF4" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/bazelbuild/intellij/releases/tag/v2024.06.04-aswb-stable", - "source": "cve-coordination@google.com" + "source": "cve-coordination@google.com", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/bazelbuild/intellij/security/advisories/GHSA-hh9f-wmhw-46vg", - "source": "cve-coordination@google.com" + "source": "cve-coordination@google.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://github.com/bazelbuild/intellij/releases/tag/v2024.06.04-aswb-stable", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Release Notes" + ] }, { "url": "https://github.com/bazelbuild/intellij/security/advisories/GHSA-hh9f-wmhw-46vg", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20123.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20123.json index 6fd0c16dc84..a4e29dbbc6b 100644 --- a/CVE-2025/CVE-2025-201xx/CVE-2025-20123.json +++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20123.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20123", "sourceIdentifier": "psirt@cisco.com", "published": "2025-01-08T16:15:38.150", - "lastModified": "2025-01-08T16:15:38.150", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:39:33.987", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.0", + "versionEndExcluding": "5.0.4", + "matchCriteriaId": "2B049465-8238-4167-9803-069F41D58921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "D637FA70-DA08-42DE-9756-101AC5991371" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.0", + "versionEndExcluding": "7.0.1", + "matchCriteriaId": "C6D2C01D-1989-4D7B-90FD-16C1F79DF9CB" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xwork-xss-KCcg7WwU", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-201xx/CVE-2025-20166.json b/CVE-2025/CVE-2025-201xx/CVE-2025-20166.json index 8fbd88a4adf..9d0e3909120 100644 --- a/CVE-2025/CVE-2025-201xx/CVE-2025-20166.json +++ b/CVE-2025/CVE-2025-201xx/CVE-2025-20166.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20166", "sourceIdentifier": "psirt@cisco.com", "published": "2025-01-08T17:15:16.990", - "lastModified": "2025-01-08T17:15:16.990", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T15:47:56.950", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,88 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.0.0", + "versionEndExcluding": "5.0.4", + "matchCriteriaId": "2B049465-8238-4167-9803-069F41D58921" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0.0", + "versionEndExcluding": "6.0.3", + "matchCriteriaId": "D637FA70-DA08-42DE-9756-101AC5991371" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:crosswork_network_controller:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.0", + "versionEndExcluding": "7.0.1", + "matchCriteriaId": "C6D2C01D-1989-4D7B-90FD-16C1F79DF9CB" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:common_services_platform_collector:2.11:*:*:*:*:*:*:*", + "matchCriteriaId": "DF33B965-4F53-42CB-BE47-4EB9756D3CF9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:common_services_platform_collector:2.11.0.1:*:*:*:*:*:*:*", + "matchCriteriaId": "C97CCEBD-1EBD-47C2-8D56-A0103B3EEDCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:common_services_platform_collector:2.11.0.2:*:*:*:*:*:*:*", + "matchCriteriaId": "123CBB5D-DB97-43D2-8FDF-E03692CDAE56" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:common_services_platform_collector:2.11.0.3:*:*:*:*:*:*:*", + "matchCriteriaId": "9208E7F7-7ABC-498E-A021-661B48775545" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:common_services_platform_collector:30.1.1-0:*:*:*:*:*:*:*", + "matchCriteriaId": "DC962FCB-C2D2-4F29-881C-E3518AF4C9B4" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cspc-xss-CDOJZyH", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xwork-xss-KCcg7WwU", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-202xx/CVE-2025-20223.json b/CVE-2025/CVE-2025-202xx/CVE-2025-20223.json index 39a9cb83b95..92af64c0037 100644 --- a/CVE-2025/CVE-2025-202xx/CVE-2025-20223.json +++ b/CVE-2025/CVE-2025-202xx/CVE-2025-20223.json @@ -2,8 +2,8 @@ "id": "CVE-2025-20223", "sourceIdentifier": "psirt@cisco.com", "published": "2025-05-07T18:15:42.070", - "lastModified": "2025-05-08T14:39:09.683", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-07-23T14:53:16.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,10 +51,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.3.7.7", + "matchCriteriaId": "789E7FF9-0284-468B-A480-F2144934302C" + } + ] + } + ] + } + ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-insec-acc-mtt8EhEb", - "source": "psirt@cisco.com" + "source": "psirt@cisco.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-294xx/CVE-2025-29480.json b/CVE-2025/CVE-2025-294xx/CVE-2025-29480.json index 4f2ecfca8c5..c96ebb06c4f 100644 --- a/CVE-2025/CVE-2025-294xx/CVE-2025-29480.json +++ b/CVE-2025/CVE-2025-294xx/CVE-2025-29480.json @@ -2,13 +2,20 @@ "id": "CVE-2025-29480", "sourceIdentifier": "cve@mitre.org", "published": "2025-04-07T20:15:20.607", - "lastModified": "2025-04-15T16:11:16.913", - "vulnStatus": "Analyzed", - "cveTags": [], + "lastModified": "2025-07-23T15:15:30.723", + "vulnStatus": "Modified", + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function." + "value": "Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced." }, { "lang": "es", @@ -69,6 +76,10 @@ } ], "references": [ + { + "url": "https://github.com/OSGeo/gdal/issues/12188#issuecomment-2847873794", + "source": "cve@mitre.org" + }, { "url": "https://github.com/lmarch2/poc/blob/main/gdal/gdal.md", "source": "cve@mitre.org", diff --git a/CVE-2025/CVE-2025-317xx/CVE-2025-31700.json b/CVE-2025/CVE-2025-317xx/CVE-2025-31700.json index 0f6a2a5a33d..0f2cafc6bfe 100644 --- a/CVE-2025/CVE-2025-317xx/CVE-2025-31700.json +++ b/CVE-2025/CVE-2025-317xx/CVE-2025-31700.json @@ -2,13 +2,17 @@ "id": "CVE-2025-31700", "sourceIdentifier": "cybersecurity@dahuatech.com", "published": "2025-07-23T07:15:24.987", - "lastModified": "2025-07-23T07:15:24.987", + "lastModified": "2025-07-23T15:15:30.970", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been found in Dahua products.\n\nAttackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern." + }, + { + "lang": "es", + "value": "Se ha detectado una vulnerabilidad en los productos Dahua. Los atacantes podr\u00edan explotar una vulnerabilidad de desbordamiento de b\u00fafer mediante el env\u00edo de paquetes maliciosos especialmente manipulados, lo que podr\u00eda causar interrupciones del servicio (p. ej., bloqueos) o ejecuci\u00f3n remota de c\u00f3digo (RCE). Algunos dispositivos pueden contar con mecanismos de protecci\u00f3n como la aleatorizaci\u00f3n del dise\u00f1o del espacio de direcciones (ASLR), lo que reduce la probabilidad de una explotaci\u00f3n exitosa de RCE. Sin embargo, los ataques de denegaci\u00f3n de servicio (DoS) siguen siendo preocupantes." } ], "metrics": { @@ -35,6 +39,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], "references": [ { "url": "https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775", diff --git a/CVE-2025/CVE-2025-317xx/CVE-2025-31701.json b/CVE-2025/CVE-2025-317xx/CVE-2025-31701.json index bee24f0009d..27b3cc5b49f 100644 --- a/CVE-2025/CVE-2025-317xx/CVE-2025-31701.json +++ b/CVE-2025/CVE-2025-317xx/CVE-2025-31701.json @@ -2,13 +2,17 @@ "id": "CVE-2025-31701", "sourceIdentifier": "cybersecurity@dahuatech.com", "published": "2025-07-23T07:15:25.393", - "lastModified": "2025-07-23T07:15:25.393", + "lastModified": "2025-07-23T15:15:31.087", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability has been found in Dahua products.\n\nAttackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern." + }, + { + "lang": "es", + "value": "Se ha detectado una vulnerabilidad en los productos Dahua. Los atacantes podr\u00edan explotar una vulnerabilidad de desbordamiento de b\u00fafer mediante el env\u00edo de paquetes maliciosos especialmente manipulados, lo que podr\u00eda causar interrupciones del servicio (p. ej., bloqueos) o ejecuci\u00f3n remota de c\u00f3digo (RCE). Algunos dispositivos pueden contar con mecanismos de protecci\u00f3n como la aleatorizaci\u00f3n del dise\u00f1o del espacio de direcciones (ASLR), lo que reduce la probabilidad de una explotaci\u00f3n exitosa de RCE. Sin embargo, los ataques de denegaci\u00f3n de servicio (DoS) siguen siendo preocupantes." } ], "metrics": { @@ -35,6 +39,18 @@ } ] }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], "references": [ { "url": "https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775", diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33020.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33020.json new file mode 100644 index 00000000000..2dfe5fa773b --- /dev/null +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33020.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-33020", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-07-23T15:15:31.247", + "lastModified": "2025-07-23T15:15:31.247", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 transmits sensitive information without encryption that could allow an attacker to obtain highly sensitive information." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-311" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7240374", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33076.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33076.json new file mode 100644 index 00000000000..7e2fc1e7eb8 --- /dev/null +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33076.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-33076", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-07-23T15:15:31.397", + "lastModified": "2025-07-23T15:15:31.397", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7240368", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-330xx/CVE-2025-33077.json b/CVE-2025/CVE-2025-330xx/CVE-2025-33077.json new file mode 100644 index 00000000000..009a65093b4 --- /dev/null +++ b/CVE-2025/CVE-2025-330xx/CVE-2025-33077.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-33077", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-07-23T15:15:31.540", + "lastModified": "2025-07-23T15:15:31.540", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Engineering Systems Design Rhapsody 9.0.2, 10.0, and 10.0.1 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7240375", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36116.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36116.json new file mode 100644 index 00000000000..4b4318c9829 --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36116.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36116", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-07-23T15:15:31.690", + "lastModified": "2025-07-23T15:15:31.690", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-1385" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7240351", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-361xx/CVE-2025-36117.json b/CVE-2025/CVE-2025-361xx/CVE-2025-36117.json new file mode 100644 index 00000000000..a4f1de8adcf --- /dev/null +++ b/CVE-2025/CVE-2025-361xx/CVE-2025-36117.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-36117", + "sourceIdentifier": "psirt@us.ibm.com", + "published": "2025-07-23T15:15:31.867", + "lastModified": "2025-07-23T15:15:31.867", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@us.ibm.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-384" + } + ] + } + ], + "references": [ + { + "url": "https://www.ibm.com/support/pages/node/7240351", + "source": "psirt@us.ibm.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json b/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json index 712d6cf35f0..58366f5939d 100644 --- a/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json +++ b/CVE-2025/CVE-2025-365xx/CVE-2025-36520.json @@ -2,20 +2,24 @@ "id": "CVE-2025-36520", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:27.320", - "lastModified": "2025-07-22T16:15:27.320", + "lastModified": "2025-07-23T15:15:32.037", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability." + }, + { + "lang": "es", + "value": "Existe una vulnerabilidad de desreferencia de puntero nulo en la funcionalidad de mensajes de b\u00fafer de protocolo net_connectmsg de Bloomberg Comdb2 8.1. Un paquete de red especialmente manipulado puede provocar una denegaci\u00f3n de servicio. Un atacante puede enviar paquetes para activar esta vulnerabilidad." } ], "metrics": { "cvssMetricV31": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", @@ -38,7 +42,7 @@ "weaknesses": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -51,6 +55,10 @@ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197", "source": "talos-cna@cisco.com" + }, + { + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40596.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40596.json new file mode 100644 index 00000000000..545f888aef3 --- /dev/null +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40596.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-40596", + "sourceIdentifier": "PSIRT@sonicwall.com", + "published": "2025-07-23T15:15:32.140", + "lastModified": "2025-07-23T15:15:32.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "PSIRT@sonicwall.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012", + "source": "PSIRT@sonicwall.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40597.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40597.json new file mode 100644 index 00000000000..e91b228ebbd --- /dev/null +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40597.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-40597", + "sourceIdentifier": "PSIRT@sonicwall.com", + "published": "2025-07-23T15:15:32.320", + "lastModified": "2025-07-23T15:15:32.320", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Heap-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "PSIRT@sonicwall.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-122" + } + ] + } + ], + "references": [ + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012", + "source": "PSIRT@sonicwall.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40598.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40598.json new file mode 100644 index 00000000000..867853a49ed --- /dev/null +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40598.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-40598", + "sourceIdentifier": "PSIRT@sonicwall.com", + "published": "2025-07-23T15:15:32.490", + "lastModified": "2025-07-23T15:15:32.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScript code." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "PSIRT@sonicwall.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0012", + "source": "PSIRT@sonicwall.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json b/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json new file mode 100644 index 00000000000..8654b4d2049 --- /dev/null +++ b/CVE-2025/CVE-2025-405xx/CVE-2025-40599.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-40599", + "sourceIdentifier": "PSIRT@sonicwall.com", + "published": "2025-07-23T14:15:33.090", + "lastModified": "2025-07-23T14:15:33.090", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.3, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "PSIRT@sonicwall.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0014", + "source": "PSIRT@sonicwall.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-460xx/CVE-2025-46099.json b/CVE-2025/CVE-2025-460xx/CVE-2025-46099.json new file mode 100644 index 00000000000..5fbc428636b --- /dev/null +++ b/CVE-2025/CVE-2025-460xx/CVE-2025-46099.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-46099", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-07-23T14:15:33.490", + "lastModified": "2025-07-23T14:15:33.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module directory and access it via the module routing logic in albums.site.php, resulting in arbitrary command execution through a GET parameter." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "http://pluck.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/0xC4J/CVE-Lists/blob/main/CVE-2025-46099/CVE-2025-46099.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json index 6ec4982d482..a9aead75a87 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46354.json @@ -2,20 +2,24 @@ "id": "CVE-2025-46354", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:29.697", - "lastModified": "2025-07-22T16:15:29.697", + "lastModified": "2025-07-23T15:15:32.780", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability." + }, + { + "lang": "es", + "value": "Existe una vulnerabilidad de denegaci\u00f3n de servicio en la funcionalidad de \"Commit/Abort\" de operaciones de Operation functionality de Bloomberg Comdb2 8.1. Un paquete de red especialmente manipulado puede provocar una denegaci\u00f3n de servicio. Un atacante puede enviar un paquete malicioso para activar esta vulnerabilidad." } ], "metrics": { "cvssMetricV31": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", @@ -38,7 +42,7 @@ "weaknesses": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -51,6 +55,10 @@ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198", "source": "talos-cna@cisco.com" + }, + { + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-472xx/CVE-2025-47268.json b/CVE-2025/CVE-2025-472xx/CVE-2025-47268.json index ce9e9aef175..71e574b7827 100644 --- a/CVE-2025/CVE-2025-472xx/CVE-2025-47268.json +++ b/CVE-2025/CVE-2025-472xx/CVE-2025-47268.json @@ -2,13 +2,13 @@ "id": "CVE-2025-47268", "sourceIdentifier": "cve@mitre.org", "published": "2025-05-05T14:15:29.063", - "lastModified": "2025-06-13T18:21:42.427", - "vulnStatus": "Analyzed", + "lastModified": "2025-07-23T15:15:32.887", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "ping in iputils through 20240905 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication." + "value": "ping in iputils before 20250602 allows a denial of service (application error or incorrect data collection) via a crafted ICMP Echo Reply packet, because of a signed 64-bit integer overflow in timestamp multiplication." }, { "lang": "es", @@ -101,6 +101,10 @@ "Patch" ] }, + { + "url": "https://github.com/iputils/iputils/releases/tag/20250602", + "source": "cve@mitre.org" + }, { "url": "https://github.com/Zephkek/ping-rtt-overflow/", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", diff --git a/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json b/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json index a881f15d1bd..7900665392c 100644 --- a/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json +++ b/CVE-2025/CVE-2025-484xx/CVE-2025-48498.json @@ -2,20 +2,24 @@ "id": "CVE-2025-48498", "sourceIdentifier": "talos-cna@cisco.com", "published": "2025-07-22T16:15:29.877", - "lastModified": "2025-07-22T16:15:29.877", + "lastModified": "2025-07-23T15:15:33.083", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability." + }, + { + "lang": "es", + "value": "Existe una vulnerabilidad de desreferencia de puntero nulo en el componente Distributed Transaction de Bloomberg Comdb2 8.1 al procesar varios campos utilizados para la coordinaci\u00f3n. Un mensaje de b\u00fafer de protocolo especialmente manipulado puede provocar una denegaci\u00f3n de servicio. Un atacante puede simplemente conectarse a una instancia de base de datos a trav\u00e9s de TCP y enviar el mensaje manipulado para activar esta vulnerabilidad." } ], "metrics": { "cvssMetricV31": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", @@ -38,7 +42,7 @@ "weaknesses": [ { "source": "talos-cna@cisco.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -51,6 +55,10 @@ { "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199", "source": "talos-cna@cisco.com" + }, + { + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-489xx/CVE-2025-48964.json b/CVE-2025/CVE-2025-489xx/CVE-2025-48964.json index 8916812a2bd..0b8c4718768 100644 --- a/CVE-2025/CVE-2025-489xx/CVE-2025-48964.json +++ b/CVE-2025/CVE-2025-489xx/CVE-2025-48964.json @@ -2,17 +2,41 @@ "id": "CVE-2025-48964", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-22T18:15:36.020", - "lastModified": "2025-07-22T18:15:36.020", + "lastModified": "2025-07-23T15:15:33.183", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "ping in iputils through 20240905 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero)." + "value": "ping in iputils before 20250602 allows a denial of service (application error in adaptive ping mode or incorrect data collection) via a crafted ICMP Echo Reply packet, because a zero timestamp can lead to large intermediate values that have an integer overflow when squared during statistics calculations. NOTE: this issue exists because of an incomplete fix for CVE-2025-47268 (that fix was only about timestamp calculations, and it did not account for a specific scenario where the original timestamp in the ICMP payload is zero)." + }, + { + "lang": "es", + "value": "El ping en iputils hasta la versi\u00f3n 20240905 permite una denegaci\u00f3n de servicio (error de aplicaci\u00f3n en modo ping adaptativo o recopilaci\u00f3n incorrecta de datos) mediante un paquete de respuesta de eco ICMP manipulado, ya que una marca de tiempo cero puede generar valores intermedios grandes que presentan un desbordamiento de enteros al elevarlos al cuadrado durante los c\u00e1lculos estad\u00edsticos. NOTA: Este problema existe debido a una correcci\u00f3n incompleta para CVE-2025-47268 (dicha correcci\u00f3n solo afectaba a los c\u00e1lculos de marca de tiempo y no contemplaba un escenario espec\u00edfico donde la marca de tiempo original en la payload ICMP es cero)." } ], "metrics": { "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 2.5 + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -36,6 +60,16 @@ ] }, "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-190" + } + ] + }, { "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", @@ -52,10 +86,18 @@ "url": "https://bugzilla.suse.com/show_bug.cgi?id=1243772", "source": "cve@mitre.org" }, + { + "url": "https://github.com/iputils/iputils/commit/afa36390394a6e0cceba03b52b59b6d41710608c", + "source": "cve@mitre.org" + }, { "url": "https://github.com/iputils/iputils/issues", "source": "cve@mitre.org" }, + { + "url": "https://github.com/iputils/iputils/releases/tag/20250602", + "source": "cve@mitre.org" + }, { "url": "https://github.com/iputils/iputils/security/advisories/GHSA-25fr-jw29-74f9", "source": "cve@mitre.org" diff --git a/CVE-2025/CVE-2025-518xx/CVE-2025-51867.json b/CVE-2025/CVE-2025-518xx/CVE-2025-51867.json index 0562f040cb3..f9f9d17bab8 100644 --- a/CVE-2025/CVE-2025-518xx/CVE-2025-51867.json +++ b/CVE-2025/CVE-2025-518xx/CVE-2025-51867.json @@ -2,16 +2,55 @@ "id": "CVE-2025-51867", "sourceIdentifier": "cve@mitre.org", "published": "2025-07-22T14:15:36.000", - "lastModified": "2025-07-22T14:15:36.000", + "lastModified": "2025-07-23T15:15:33.450", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint." + }, + { + "lang": "es", + "value": "Vulnerabilidad de referencia directa a objetos inseguros (IDOR) en Deepfiction AI (deepfiction.ai) hasta el 3 de junio de 2025, que permite a los atacantes chatear con el LLM usando los cr\u00e9ditos de otros usuarios a trav\u00e9s de informaci\u00f3n confidencial obtenida por el endpoint /browse/stories." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-639" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://github.com/Secsys-FDU/CVE-2025-51867", diff --git a/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json b/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json index 3b6b3dfdc8a..02c3a45ec23 100644 --- a/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json +++ b/CVE-2025/CVE-2025-535xx/CVE-2025-53528.json @@ -2,13 +2,13 @@ "id": "CVE-2025-53528", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-21T21:15:25.883", - "lastModified": "2025-07-22T13:05:40.573", + "lastModified": "2025-07-23T15:15:33.743", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions 5.4.3 and below, the version parameter of the \"/docs\" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to execute JavaScript code on a user's session for any application based on Cadwyn via a one-click attack. The vulnerability has been fixed in version 5.4.4." + "value": "Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the \"/docs\" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow an attacker to execute JavaScript code on a user's session for any application based on Cadwyn via a one-click attack. The vulnerability has been fixed in version 5.4.3." }, { "lang": "es", @@ -42,7 +42,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-540xx/CVE-2025-54090.json b/CVE-2025/CVE-2025-540xx/CVE-2025-54090.json new file mode 100644 index 00000000000..618e51ba927 --- /dev/null +++ b/CVE-2025/CVE-2025-540xx/CVE-2025-54090.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-54090", + "sourceIdentifier": "security@apache.org", + "published": "2025-07-23T14:15:34.177", + "lastModified": "2025-07-23T14:15:34.177", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A bug in Apache HTTP Server 2.4.64 results in all \"RewriteCond expr ...\" tests evaluating as \"true\".\n\n\n\nUsers are recommended to upgrade to version 2.4.65, which fixes the issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@apache.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-253" + } + ] + } + ], + "references": [ + { + "url": "https://httpd.apache.org/security/vulnerabilities_24.html", + "source": "security@apache.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-541xx/CVE-2025-54139.json b/CVE-2025/CVE-2025-541xx/CVE-2025-54139.json index 73670f46769..9a24f2b1309 100644 --- a/CVE-2025/CVE-2025-541xx/CVE-2025-54139.json +++ b/CVE-2025/CVE-2025-541xx/CVE-2025-54139.json @@ -2,13 +2,17 @@ "id": "CVE-2025-54139", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-23T00:15:25.737", - "lastModified": "2025-07-23T00:15:25.737", + "lastModified": "2025-07-23T15:15:33.890", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend. In haxcms-nodejs versions 11.0.12 and below and in haxcms-php versions 11.0.7 and below, all pages within the HAX CMS application do not contain headers to prevent other websites from loading the site within an iframe. This applies to both the CMS and generated sites. An unauthenticated attacker can load the standalone login page or other sensitive functionality within an iframe, performing a UI redressing attack (clickjacking). This can be used to perform social engineering attacks to attempt to coerce users into performing unintended actions within the HAX CMS application. This is fixed in haxcms-nodejs version 11.0.13 and haxcms-php 11.0.8." + }, + { + "lang": "es", + "value": "HAX CMS permite a los usuarios gestionar su universo de micrositios con un backend NodeJS o PHP. En las versiones 11.0.12 y anteriores de haxcms-nodejs y 11.0.7 y anteriores de haxcms-php, ninguna p\u00e1gina de la aplicaci\u00f3n HAX CMS contiene encabezados para impedir que otros sitios web la carguen dentro de un iframe. Esto aplica tanto al CMS como a los sitios generados. Un atacante no autenticado puede cargar la p\u00e1gina de inicio de sesi\u00f3n independiente u otra funcionalidad sensible dentro de un iframe, realizando un ataque de correcci\u00f3n de la interfaz de usuario (clickjacking). Esto puede utilizarse para realizar ataques de ingenier\u00eda social que intenten obligar a los usuarios a realizar acciones no deseadas dentro de la aplicaci\u00f3n HAX CMS. Esto se ha corregido en las versiones 11.0.13 y 11.0.8 de haxcms-nodejs y 11.0.8 de haxcms-php." } ], "metrics": { @@ -38,7 +42,7 @@ "weaknesses": [ { "source": "security-advisories@github.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -59,6 +63,10 @@ { "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-54vw-f4xf-f92j", "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/haxtheweb/issues/security/advisories/GHSA-54vw-f4xf-f92j", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-60xx/CVE-2025-6018.json b/CVE-2025/CVE-2025-60xx/CVE-2025-6018.json new file mode 100644 index 00000000000..ea65201fba3 --- /dev/null +++ b/CVE-2025/CVE-2025-60xx/CVE-2025-6018.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-6018", + "sourceIdentifier": "secalert@redhat.com", + "published": "2025-07-23T15:15:34.810", + "lastModified": "2025-07-23T15:15:34.810", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A Local Privilege Escalation (LPE) vulnerability has been discovered in pam-config within Linux Pluggable Authentication Modules (PAM). This flaw allows an unprivileged local attacker (for example, a user logged in via SSH) to obtain the elevated privileges normally reserved for a physically present, \"allow_active\" user. The highest risk is that the attacker can then perform all allow_active yes Polkit actions, which are typically restricted to console users, potentially gaining unauthorized control over system configurations, services, or other sensitive operations." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2025-6018", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372693", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.suse.com/show_bug.cgi?id=1243226", + "source": "secalert@redhat.com" + }, + { + "url": "https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt", + "source": "secalert@redhat.com" + }, + { + "url": "https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-61xx/CVE-2025-6174.json b/CVE-2025/CVE-2025-61xx/CVE-2025-6174.json index bffba85a95e..95226a9260a 100644 --- a/CVE-2025/CVE-2025-61xx/CVE-2025-6174.json +++ b/CVE-2025/CVE-2025-61xx/CVE-2025-6174.json @@ -2,20 +2,51 @@ "id": "CVE-2025-6174", "sourceIdentifier": "contact@wpscan.com", "published": "2025-07-23T06:15:28.223", - "lastModified": "2025-07-23T06:15:28.223", + "lastModified": "2025-07-23T15:15:35.080", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The Qwizcards | online quizzes and flashcards WordPress plugin through 3.9.4 does not sanitise and escape the \"_stylesheet\" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or any other user." + }, + { + "lang": "es", + "value": "El complemento Qwizcards | online quizzes and flashcards para Wordpress hasta la versi\u00f3n 3.9.4 no depura ni escapa el par\u00e1metro \"_stylesheet\" antes de mostrarlo nuevamente en la p\u00e1gina, lo que genera Cross-Site Scripting reflejado que podr\u00eda usarse contra usuarios con privilegios altos, como el administrador o cualquier otro usuario." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } + ] + }, "references": [ { "url": "https://wpscan.com/vulnerability/ff827f67-712e-4ab6-b6aa-7f5e6ff1283a/", "source": "contact@wpscan.com" + }, + { + "url": "https://wpscan.com/vulnerability/ff827f67-712e-4ab6-b6aa-7f5e6ff1283a/", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8010.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8010.json index 68cbdca4f1b..f6f520951d3 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8010.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8010.json @@ -2,16 +2,43 @@ "id": "CVE-2025-8010", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-07-22T22:15:38.873", - "lastModified": "2025-07-22T22:15:38.873", + "lastModified": "2025-07-23T14:15:34.913", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" + }, + { + "lang": "es", + "value": "La confusi\u00f3n de tipos en la versi\u00f3n 8 de Google Chrome anterior a la versi\u00f3n 138.0.7204.168 permit\u00eda a un atacante remoto explotar la corrupci\u00f3n del mont\u00f3n mediante una p\u00e1gina HTML manipulada. (Gravedad de seguridad de Chromium: Alta)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", @@ -22,6 +49,16 @@ "value": "CWE-843" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-843" + } + ] } ], "references": [ diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8011.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8011.json index 9edf811b6f9..6f88d534b0b 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8011.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8011.json @@ -2,16 +2,43 @@ "id": "CVE-2025-8011", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-07-22T22:15:39.013", - "lastModified": "2025-07-22T22:15:39.013", + "lastModified": "2025-07-23T14:15:35.087", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" + }, + { + "lang": "es", + "value": "La confusi\u00f3n de tipos en la versi\u00f3n 8 de Google Chrome anterior a la versi\u00f3n 138.0.7204.168 permit\u00eda a un atacante remoto explotar la corrupci\u00f3n del mont\u00f3n mediante una p\u00e1gina HTML manipulada. (Gravedad de seguridad de Chromium: Alta)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", @@ -22,6 +49,16 @@ "value": "CWE-843" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-843" + } + ] } ], "references": [ diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8019.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8019.json index 7d2d7b89ce4..87309e8f3e7 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8019.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8019.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8019", "sourceIdentifier": "cna@vuldb.com", "published": "2025-07-22T16:15:35.907", - "lastModified": "2025-07-22T16:15:35.907", + "lastModified": "2025-07-23T15:15:35.233", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used." + }, + { + "lang": "es", + "value": "Se encontr\u00f3 una vulnerabilidad en Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. Se ha clasificado como cr\u00edtica. Este problema afecta a la funci\u00f3n sub_40B6F0 del archivo at/appy.cgi. La manipulaci\u00f3n del argumento wan_proto provoca un desbordamiento del b\u00fafer. El ataque puede ejecutarse en remoto. Se ha hecho p\u00fablico el exploit y puede que sea utilizado." } ], "metrics": { @@ -59,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", @@ -107,7 +111,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +144,14 @@ { "url": "https://vuldb.com/?submit.619530", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + }, + { + "url": "https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md#payload", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8020.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8020.json index 2db0c08d64d..fcf6b1c92f6 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8020.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8020.json @@ -2,13 +2,17 @@ "id": "CVE-2025-8020", "sourceIdentifier": "report@snyk.io", "published": "2025-07-23T05:15:30.590", - "lastModified": "2025-07-23T05:15:30.590", + "lastModified": "2025-07-23T15:15:35.363", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "All versions of the package private-ip are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide an IP or hostname that resolves to a multicast IP address (224.0.0.0/4) which is not included as part of the private IP ranges in the package's source code." + }, + { + "lang": "es", + "value": "Todas las versiones del paquete private-ip son vulnerables a server-side request forgery (SSRF), donde un atacante puede proporcionar una IP o un nombre de host que se resuelve en una direcci\u00f3n IP de multidifusi\u00f3n (224.0.0.0/4) que no est\u00e1 incluida como parte de los rangos de IP privados en el c\u00f3digo fuente del paquete." } ], "metrics": { @@ -99,6 +103,10 @@ { "url": "https://security.snyk.io/vuln/SNYK-JS-PRIVATEIP-9510757", "source": "report@snyk.io" + }, + { + "url": "https://security.snyk.io/vuln/SNYK-JS-PRIVATEIP-9510757", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8027.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8027.json index 2fae3eb52a9..9259951a382 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8027.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8027.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8027", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:49.830", - "lastModified": "2025-07-22T21:15:49.830", + "lastModified": "2025-07-23T14:15:35.253", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "En plataformas de 64 bits, IonMonkey-JIT solo escrib\u00eda 32 bits del espacio de valor de retorno de 64 bits en la pila. Sin embargo, Baseline-JIT le\u00eda los 64 bits completos. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-457" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968423", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8028.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8028.json index a92f64b8689..6f21dbca7fd 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8028.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8028.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8028", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:49.953", - "lastModified": "2025-07-22T21:15:49.953", + "lastModified": "2025-07-23T15:15:35.570", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "En arm64, una instrucci\u00f3n WASM `br_table` con muchas entradas podr\u00eda provocar que la etiqueta se alejara demasiado de la instrucci\u00f3n, lo que causar\u00eda truncamiento y un c\u00e1lculo incorrecto de la direcci\u00f3n de la rama. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-1332" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971581", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8029.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8029.json index 342dbfd570b..a8a07d79354 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8029.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8029.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8029", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.057", - "lastModified": "2025-07-22T21:15:50.057", + "lastModified": "2025-07-23T15:15:35.723", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Thunderbird ejecutaba URLs `javascript:` al usarlas en las etiquetas `object` e `embed`. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1928021", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8030.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8030.json index 34f422788d0..df912160248 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8030.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8030.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8030", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.157", - "lastModified": "2025-07-22T21:15:50.157", + "lastModified": "2025-07-23T15:15:35.863", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Insufficient escaping in the \u201cCopy as cURL\u201d feature could potentially be used to trick a user into executing unexpected code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Un escape insuficiente en la funci\u00f3n \"Copiar como cURL\" podr\u00eda utilizarse para enga\u00f1ar al usuario y que ejecute c\u00f3digo inesperado. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-94" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1968414", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8031.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8031.json index e6dda979f5c..b3ba4e84df5 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8031.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8031.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8031", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.257", - "lastModified": "2025-07-22T21:15:50.257", + "lastModified": "2025-07-23T14:15:35.420", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "La parte `username:password` no se elimin\u00f3 correctamente de las URL en los informes de CSP, lo que podr\u00eda filtrar credenciales de autenticaci\u00f3n b\u00e1sica HTTP. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-276" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1971719", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8032.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8032.json index 0a71002fade..ee4e43c3d98 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8032.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8032.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8032", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.360", - "lastModified": "2025-07-22T21:15:50.360", + "lastModified": "2025-07-23T14:15:35.573", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "La carga de documentos XSLT no propag\u00f3 correctamente el documento fuente, lo que eludi\u00f3 su CSP. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-693" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1974407", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8033.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8033.json index 4dbd783466b..95d2e816b17 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8033.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8033.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8033", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.457", - "lastModified": "2025-07-22T21:15:50.457", + "lastModified": "2025-07-23T14:15:35.740", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "El motor de JavaScript no gestionaba correctamente los generadores cerrados y era posible resumirlos, lo que provocaba una desreferencia nullptr. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1973990", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8034.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8034.json index a5227b9315d..6e0b20544b5 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8034.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8034.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8034", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.560", - "lastModified": "2025-07-22T21:15:50.560", + "lastModified": "2025-07-23T14:15:35.903", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Errores de seguridad de memoria presentes en Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 y Thunderbird 140. Algunos de estos errores mostraron evidencia de corrupci\u00f3n de memoria y presumimos que, con suficiente esfuerzo, algunos de ellos podr\u00edan haberse explotado para ejecutar c\u00f3digo arbitrario. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1970422%2C1970422%2C1970422%2C1970422", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8036.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8036.json index 7ee7bb817d9..850fc2c58d1 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8036.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8036.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8036", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.760", - "lastModified": "2025-07-22T21:15:50.760", + "lastModified": "2025-07-23T15:15:36.003", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Thunderbird almacen\u00f3 en cach\u00e9 las respuestas de preflight de CORS tras los cambios de direcci\u00f3n IP. Esto permiti\u00f3 eludir CORS mediante revinculaci\u00f3n de DNS. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-350" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1960834", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8037.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8037.json index ed96cfe0157..f9b76f81c84 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8037.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8037.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8037", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.860", - "lastModified": "2025-07-22T21:15:50.860", + "lastModified": "2025-07-23T15:15:36.143", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Al configurar una cookie sin nombre con un signo igual en su valor, se eclipsaban otras cookies. Incluso si la cookie sin nombre se configuraba mediante HTTP y la cookie eclipsada inclu\u00eda el atributo \"Secure\". Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", + "baseScore": 9.1, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-614" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1964767", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8038.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8038.json index 082d78e4812..b667452c3c9 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8038.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8038.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8038", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:50.960", - "lastModified": "2025-07-22T21:15:50.960", + "lastModified": "2025-07-23T14:15:36.073", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Thunderbird ignored paths when checking the validity of navigations in a frame. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "Thunderbird ignoraba las rutas al comprobar la validez de las navegaciones en un frame. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-345" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1808979", diff --git a/CVE-2025/CVE-2025-80xx/CVE-2025-8039.json b/CVE-2025/CVE-2025-80xx/CVE-2025-8039.json index 639c90ea920..beecf1f8235 100644 --- a/CVE-2025/CVE-2025-80xx/CVE-2025-8039.json +++ b/CVE-2025/CVE-2025-80xx/CVE-2025-8039.json @@ -2,16 +2,55 @@ "id": "CVE-2025-8039", "sourceIdentifier": "security@mozilla.org", "published": "2025-07-22T21:15:51.060", - "lastModified": "2025-07-22T21:15:51.060", + "lastModified": "2025-07-23T14:15:36.240", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", "value": "In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1." + }, + { + "lang": "es", + "value": "En algunos casos, los t\u00e9rminos de b\u00fasqueda persist\u00edan en la barra de URL incluso despu\u00e9s de salir de la p\u00e1gina de b\u00fasqueda. Esta vulnerabilidad afecta a Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141 y Thunderbird < 140.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] } ], - "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970997", diff --git a/README.md b/README.md index 0d2102fd7d4..4220ae30285 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-07-23T14:00:14.666544+00:00 +2025-07-23T16:00:12.710447+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-07-23T13:51:54+00:00 +2025-07-23T15:53:22.097000+00:00 ``` ### Last Data Feed Release @@ -33,33 +33,63 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -302911 +302930 ``` ### CVEs added in the last Commit -Recently added CVEs: `12` +Recently added CVEs: `19` -- [CVE-2024-12310](CVE-2024/CVE-2024-123xx/CVE-2024-12310.json) (`2025-07-23T12:15:25.063`) -- [CVE-2024-40682](CVE-2024/CVE-2024-406xx/CVE-2024-40682.json) (`2025-07-23T12:15:26.607`) -- [CVE-2024-40686](CVE-2024/CVE-2024-406xx/CVE-2024-40686.json) (`2025-07-23T12:15:26.803`) -- [CVE-2024-41750](CVE-2024/CVE-2024-417xx/CVE-2024-41750.json) (`2025-07-23T12:15:26.977`) -- [CVE-2024-41751](CVE-2024/CVE-2024-417xx/CVE-2024-41751.json) (`2025-07-23T12:15:27.160`) -- [CVE-2025-4296](CVE-2025/CVE-2025-42xx/CVE-2025-4296.json) (`2025-07-23T12:15:27.640`) -- [CVE-2025-4411](CVE-2025/CVE-2025-44xx/CVE-2025-4411.json) (`2025-07-23T13:15:25.167`) -- [CVE-2025-50127](CVE-2025/CVE-2025-501xx/CVE-2025-50127.json) (`2025-07-23T12:15:28.050`) -- [CVE-2025-54294](CVE-2025/CVE-2025-542xx/CVE-2025-54294.json) (`2025-07-23T12:15:28.220`) -- [CVE-2025-54295](CVE-2025/CVE-2025-542xx/CVE-2025-54295.json) (`2025-07-23T12:15:28.370`) -- [CVE-2025-54296](CVE-2025/CVE-2025-542xx/CVE-2025-54296.json) (`2025-07-23T12:15:28.527`) -- [CVE-2025-54297](CVE-2025/CVE-2025-542xx/CVE-2025-54297.json) (`2025-07-23T12:15:28.683`) +- [CVE-2010-10012](CVE-2010/CVE-2010-100xx/CVE-2010-10012.json) (`2025-07-23T14:15:31.017`) +- [CVE-2015-10141](CVE-2015/CVE-2015-101xx/CVE-2015-10141.json) (`2025-07-23T14:15:31.763`) +- [CVE-2016-15045](CVE-2016/CVE-2016-150xx/CVE-2016-15045.json) (`2025-07-23T14:15:31.950`) +- [CVE-2017-20198](CVE-2017/CVE-2017-201xx/CVE-2017-20198.json) (`2025-07-23T14:15:32.140`) +- [CVE-2018-25113](CVE-2018/CVE-2018-251xx/CVE-2018-25113.json) (`2025-07-23T14:15:32.300`) +- [CVE-2018-25114](CVE-2018/CVE-2018-251xx/CVE-2018-25114.json) (`2025-07-23T14:15:32.447`) +- [CVE-2022-4978](CVE-2022/CVE-2022-49xx/CVE-2022-4978.json) (`2025-07-23T14:15:32.640`) +- [CVE-2025-33020](CVE-2025/CVE-2025-330xx/CVE-2025-33020.json) (`2025-07-23T15:15:31.247`) +- [CVE-2025-33076](CVE-2025/CVE-2025-330xx/CVE-2025-33076.json) (`2025-07-23T15:15:31.397`) +- [CVE-2025-33077](CVE-2025/CVE-2025-330xx/CVE-2025-33077.json) (`2025-07-23T15:15:31.540`) +- [CVE-2025-36116](CVE-2025/CVE-2025-361xx/CVE-2025-36116.json) (`2025-07-23T15:15:31.690`) +- [CVE-2025-36117](CVE-2025/CVE-2025-361xx/CVE-2025-36117.json) (`2025-07-23T15:15:31.867`) +- [CVE-2025-40596](CVE-2025/CVE-2025-405xx/CVE-2025-40596.json) (`2025-07-23T15:15:32.140`) +- [CVE-2025-40597](CVE-2025/CVE-2025-405xx/CVE-2025-40597.json) (`2025-07-23T15:15:32.320`) +- [CVE-2025-40598](CVE-2025/CVE-2025-405xx/CVE-2025-40598.json) (`2025-07-23T15:15:32.490`) +- [CVE-2025-40599](CVE-2025/CVE-2025-405xx/CVE-2025-40599.json) (`2025-07-23T14:15:33.090`) +- [CVE-2025-46099](CVE-2025/CVE-2025-460xx/CVE-2025-46099.json) (`2025-07-23T14:15:33.490`) +- [CVE-2025-54090](CVE-2025/CVE-2025-540xx/CVE-2025-54090.json) (`2025-07-23T14:15:34.177`) +- [CVE-2025-6018](CVE-2025/CVE-2025-60xx/CVE-2025-6018.json) (`2025-07-23T15:15:34.810`) ### CVEs modified in the last Commit -Recently modified CVEs: `2` +Recently modified CVEs: `61` -- [CVE-2024-20328](CVE-2024/CVE-2024-203xx/CVE-2024-20328.json) (`2025-07-23T13:51:54.000`) -- [CVE-2025-20308](CVE-2025/CVE-2025-203xx/CVE-2025-20308.json) (`2025-07-23T13:34:12.610`) +- [CVE-2025-36520](CVE-2025/CVE-2025-365xx/CVE-2025-36520.json) (`2025-07-23T15:15:32.037`) +- [CVE-2025-46354](CVE-2025/CVE-2025-463xx/CVE-2025-46354.json) (`2025-07-23T15:15:32.780`) +- [CVE-2025-47268](CVE-2025/CVE-2025-472xx/CVE-2025-47268.json) (`2025-07-23T15:15:32.887`) +- [CVE-2025-48498](CVE-2025/CVE-2025-484xx/CVE-2025-48498.json) (`2025-07-23T15:15:33.083`) +- [CVE-2025-48964](CVE-2025/CVE-2025-489xx/CVE-2025-48964.json) (`2025-07-23T15:15:33.183`) +- [CVE-2025-51867](CVE-2025/CVE-2025-518xx/CVE-2025-51867.json) (`2025-07-23T15:15:33.450`) +- [CVE-2025-53528](CVE-2025/CVE-2025-535xx/CVE-2025-53528.json) (`2025-07-23T15:15:33.743`) +- [CVE-2025-54139](CVE-2025/CVE-2025-541xx/CVE-2025-54139.json) (`2025-07-23T15:15:33.890`) +- [CVE-2025-6174](CVE-2025/CVE-2025-61xx/CVE-2025-6174.json) (`2025-07-23T15:15:35.080`) +- [CVE-2025-8010](CVE-2025/CVE-2025-80xx/CVE-2025-8010.json) (`2025-07-23T14:15:34.913`) +- [CVE-2025-8011](CVE-2025/CVE-2025-80xx/CVE-2025-8011.json) (`2025-07-23T14:15:35.087`) +- [CVE-2025-8019](CVE-2025/CVE-2025-80xx/CVE-2025-8019.json) (`2025-07-23T15:15:35.233`) +- [CVE-2025-8020](CVE-2025/CVE-2025-80xx/CVE-2025-8020.json) (`2025-07-23T15:15:35.363`) +- [CVE-2025-8027](CVE-2025/CVE-2025-80xx/CVE-2025-8027.json) (`2025-07-23T14:15:35.253`) +- [CVE-2025-8028](CVE-2025/CVE-2025-80xx/CVE-2025-8028.json) (`2025-07-23T15:15:35.570`) +- [CVE-2025-8029](CVE-2025/CVE-2025-80xx/CVE-2025-8029.json) (`2025-07-23T15:15:35.723`) +- [CVE-2025-8030](CVE-2025/CVE-2025-80xx/CVE-2025-8030.json) (`2025-07-23T15:15:35.863`) +- [CVE-2025-8031](CVE-2025/CVE-2025-80xx/CVE-2025-8031.json) (`2025-07-23T14:15:35.420`) +- [CVE-2025-8032](CVE-2025/CVE-2025-80xx/CVE-2025-8032.json) (`2025-07-23T14:15:35.573`) +- [CVE-2025-8033](CVE-2025/CVE-2025-80xx/CVE-2025-8033.json) (`2025-07-23T14:15:35.740`) +- [CVE-2025-8034](CVE-2025/CVE-2025-80xx/CVE-2025-8034.json) (`2025-07-23T14:15:35.903`) +- [CVE-2025-8036](CVE-2025/CVE-2025-80xx/CVE-2025-8036.json) (`2025-07-23T15:15:36.003`) +- [CVE-2025-8037](CVE-2025/CVE-2025-80xx/CVE-2025-8037.json) (`2025-07-23T15:15:36.143`) +- [CVE-2025-8038](CVE-2025/CVE-2025-80xx/CVE-2025-8038.json) (`2025-07-23T14:15:36.073`) +- [CVE-2025-8039](CVE-2025/CVE-2025-80xx/CVE-2025-8039.json) (`2025-07-23T14:15:36.240`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 4537ccc76f3..b0208b979ae 100644 --- a/_state.csv +++ b/_state.csv @@ -42724,6 +42724,7 @@ CVE-2010-10008,0,0,a3eb94a65944798868f11ea1aac02d998b2b29ed7229e328e78327ba3c45b CVE-2010-10009,0,0,345bbbbf8e44284748f94f67ddbdd6bcfd6b582f6021eefa65e2977ac71b03c4,2024-11-21T01:13:23.990000 CVE-2010-10010,0,0,4bfb530acb00e83b09681488b98d06bac29754f3b62a552bc042f2734145902e,2024-11-21T01:13:24.107000 CVE-2010-10011,0,0,61f49d31fe31d7a749919479cb3a44541367b1881ec2f5154c0d19b574109a0b,2024-11-21T01:13:24.237000 +CVE-2010-10012,1,1,55205954d18b1dbcc88634aa7973a841826eff33ab37b8c64be4007d68ece30f,2025-07-23T14:15:31.017000 CVE-2010-1003,0,0,25355236c571e9cdc8d1fe6c84f0e3d2d797a3681a4309d8ec76537dec4215bf,2025-04-11T00:51:21.963000 CVE-2010-1004,0,0,5e374f407edae5811e2464d25bee678a9761a3da1ee2e5e867b0781d4964643a,2025-04-11T00:51:21.963000 CVE-2010-1005,0,0,e326f97b0acc52fa7829741f3e5d33dfe8ca25f6cd55ad532bf0bb4aad212060,2025-04-11T00:51:21.963000 @@ -74600,6 +74601,7 @@ CVE-2015-10138,0,0,15abc3657951bfb217429a87858e4dcc8b95d6f616298b816a6eedbbdfc26 CVE-2015-10139,0,0,1c8b0f7ac7627e06bea3dbc35b3ce6d2b055c340bc7ddc416fd8832fac7fdc1d,2025-07-22T13:06:07.260000 CVE-2015-1014,0,0,a4e4859abbe2f2aefc965cf861f878e1946328e913a87ffba831e230545a090e,2024-11-21T02:24:29.743000 CVE-2015-10140,0,0,f8f5e428527b8a4ed744a4b573083b4e995e2eaa05727ec5ca5f631616ab42c6,2025-07-22T14:15:32.590000 +CVE-2015-10141,1,1,bfb025e45fe2e46a0c01ed6059ec27d5fe8308633d7b58a4897cbd7442f764a7,2025-07-23T14:15:31.763000 CVE-2015-1015,0,0,b49e3699f4ec89619375a9517e2b5f9d50c3487fa75c75c6378a9b5bce91112f,2025-04-12T10:46:40.837000 CVE-2015-1026,0,0,4e8b5d97c4f066ca1c38fb4a8d17ab347344fb9b5738d5ccdeb08af100a84224,2025-04-12T10:46:40.837000 CVE-2015-1027,0,0,8656357f461ae80057dd5e6360827a63d9921f378a4cdd3e8450b47a52c65e0c,2025-04-20T01:37:25.860000 @@ -84941,6 +84943,7 @@ CVE-2016-15040,0,0,f1433b9ff9227b671143f455abaf34589c7f787b4f82feaabc1f428077f41 CVE-2016-15041,0,0,abbfe79b32a3aa33302400a74c358e15a9067e179ef0b79c57fa7f447a33ea61,2024-10-16T16:38:14.557000 CVE-2016-15042,0,0,c33821c110b3223059a6c4ae574c1ad22700883e3cfe1fdfbe27d3a83436fffd,2024-10-30T21:12:53.463000 CVE-2016-15043,0,0,be4b61e8bb2e8694b92ee603ea4ede23ee24d27135687b6b83e9140a7d211f4f,2025-07-22T13:06:07.260000 +CVE-2016-15045,1,1,f21b6e8967671c11994b9a2ba0a65257e20c5931a3fbb18feccc9f0708a8308d,2025-07-23T15:15:29.573000 CVE-2016-1505,0,0,a78d4f4b7b935401dc8997b39de87702499467bb350ff6ddc0188f933a2544fa,2025-04-12T10:46:40.837000 CVE-2016-1513,0,0,06136b6111d450b6f9a09af32cd105798eeb2e0357d398298aa697c3a3f64994,2025-04-12T10:46:40.837000 CVE-2016-1514,0,0,b7fef097b48e8e79c45cbf0778b00b6a0da537c685d5ef916a10faf8cfdae6e7,2023-11-07T02:29:56.923000 @@ -102596,6 +102599,7 @@ CVE-2017-20194,0,0,2ef68f420c7767e9da26d58c0322a3b0184d3e0f958f630f006b5a7525531 CVE-2017-20195,0,0,7925f7e5197d6a733d1f6ba8fe7f174063b555482c30e77dd80a7d567e532c9c,2024-10-29T14:34:04.427000 CVE-2017-20196,0,0,d3c3fc62bc8dc0302911d2c38b5ebbde54bef43021fa2fe4a124876dd95c1446,2025-01-28T15:15:08.267000 CVE-2017-20197,0,0,8bf48f900900ccedd72ddd6d8b964e7adfc8f712be2c6b60b297356b54d7fcd7,2025-04-09T20:02:41.860000 +CVE-2017-20198,1,1,870fea9910d7aadada905ecfa2e61182c3722ccd8b44b09a92f571ef60906fb9,2025-07-23T14:15:32.140000 CVE-2017-2020,0,0,0176f89e76e77d17aff44beb265bbd6290607491912cdad54f562216e17fef40,2023-11-07T02:43:30.943000 CVE-2017-2021,0,0,76f10f5cd36e75a57c68367deb797f3f6432a879d0c98ef2f911f8615c163241,2023-11-07T02:43:31.170000 CVE-2017-2022,0,0,9f249157715bb01a33c6885e22f286efa78b6a3306959a78f30cb9dd84a9f46c,2023-11-07T02:43:31.413000 @@ -121480,6 +121484,8 @@ CVE-2018-25109,0,0,78a6fcfa9783d17890c8ccdbf5bd43dceffab865f734cb93193e2f03c2543 CVE-2018-25110,0,0,abecf77d0fbcf00bec56ae07fcdaac59d13802e5d641bed90dfb73d9379f33a8,2025-05-23T15:54:42.643000 CVE-2018-25111,0,0,fd7c22ba4243e97d0a0b451d1d2b6d57813800a320143a3c6b2118f21dd07e63,2025-06-16T16:25:41.307000 CVE-2018-25112,0,0,954f7a367dec1fbbe0a0e8ae5051683ca4d26796a396cf4c400a9183f2d08361,2025-06-04T14:54:33.783000 +CVE-2018-25113,1,1,8c0d1a556b14a12edfe44b75c449076cea8985428708689c09887b7ba84aaa11,2025-07-23T14:15:32.300000 +CVE-2018-25114,1,1,fc63c4a1218cac4e2f016028d7084d885d8dbd69efe16ded3f3bada11195af7c,2025-07-23T14:15:32.447000 CVE-2018-2515,0,0,5409b099d6b1ad12de2273669dad1cdf61ce6e1c2e305b93396a548635b48aa4,2023-11-07T02:57:57.887000 CVE-2018-2560,0,0,64c0ce8dd86b8cd41f028fc0faeb4c2703b3a3d6c99b5cfb7e065de6e8a10aab,2024-11-21T04:03:56.060000 CVE-2018-2561,0,0,03752647d2e63906688e002ddaaa7e85aba13094709fdf81fa6e8215efd59a07,2024-11-21T04:03:56.197000 @@ -133281,7 +133287,7 @@ CVE-2019-1525,0,0,c11eec7ec146de9fd592f1768b5afdf2c602021214e64a36eb497d32cf1e87 CVE-2019-15250,0,0,f8053df2f4bea35b711fbdd071b3aba2ae0a5bb3b5b7751615b309548b145651,2024-11-21T04:28:17.670000 CVE-2019-15251,0,0,50549bbbda92ef9726206df45f347b2289c92f4fe57f4625c792298caa79568f,2024-11-21T04:28:17.827000 CVE-2019-15252,0,0,d3a69be71b21afed1d9b7432268c41be808186ae3cbebe8b760c11ea10c7d15d,2024-11-21T04:28:17.967000 -CVE-2019-15253,0,0,f00179aca9bc652e19602abb18de3ae246b5c860ad416d29564f41b663b3dc73,2024-11-21T04:28:18.113000 +CVE-2019-15253,0,1,93c3ca04ea5c8cc452824a2258a79d74c52c222e9728f5cd9a00086309e38022,2025-07-23T15:26:38.713000 CVE-2019-15255,0,0,70dfeae37f7e5a83a92807d0ed0cfa1f1f15009c9fc09e02610b771bfa04a441,2024-11-21T04:28:18.257000 CVE-2019-15256,0,0,c6ac43689f283e69b8a193147fea211e4f05dee32dc11a073f91120c453430ca,2024-11-21T04:28:18.393000 CVE-2019-15257,0,0,00dcc893f800ed0d54f95ba2d13f99764d30f8d5cd1bd10324169c1e7aa4d6e0,2024-11-21T04:28:18.550000 @@ -134154,7 +134160,7 @@ CVE-2019-16148,0,0,a19ea0830015076ed2aa786790a8f5f0b9992b0755be9e2897b7be0662603 CVE-2019-16149,0,0,7cdb5133f02966e33afb5f1fc60c9844d9c976b35bc8de60fd005286bd69b262,2025-07-15T18:59:31.720000 CVE-2019-1615,0,0,aa52848fb05b8b2f8938e61eee3cdc6d5553493898d3d1ee2281bb1d6547d88f,2024-11-21T04:36:56.073000 CVE-2019-16150,0,0,a6461a4622b00ba70e3add49472eab1393dc846b2d8d2e8a753bdc0b6916d833,2024-11-21T04:30:09.220000 -CVE-2019-16151,0,0,bed7de91743cd8d0252be7f35f09fc24cb44befef4c331b01aa2b6b558bb2e98,2025-03-21T16:15:13.210000 +CVE-2019-16151,0,1,a94cf53322e3ab124220500b0c91816f600d45c80edf0a4a2082478bc2ce923d,2025-07-23T15:48:43.560000 CVE-2019-16152,0,0,131cc19e20054d2bf5ae58c81eac14d7c9cd0a3eb2b604f29ab52be39d83ff25,2024-11-21T04:30:09.340000 CVE-2019-16153,0,0,d575345081973e4fcc8f9153136e3d576f01551c1b047ab612d9da9abb6b3d45,2024-11-21T04:30:09.460000 CVE-2019-16154,0,0,1ff82499783ec63d49ea8270078edd98a0c47eef625fc27184f390fdbb5fad1d,2024-11-21T04:30:09.590000 @@ -134930,7 +134936,7 @@ CVE-2019-17066,0,0,15c8413428a33d63087c8f5926f76f680e7eb5aae93ef5dd58454a6dbc526 CVE-2019-17067,0,0,5e85586014aee482e749ff641bcfb309a2c40ac2ef2742dd075794a8933cdb8d,2024-11-21T04:31:38.360000 CVE-2019-17068,0,0,4c560155df9173a7c1df95c6d6f811bec3317c86ba0b2b2547d1ee66c97f3440,2024-11-21T04:31:38.500000 CVE-2019-17069,0,0,5f2571e98fd6167b1cb19f25d7ddce10095a6809117bbe4c1c8f3f720049f339,2024-11-21T04:31:38.653000 -CVE-2019-1707,0,0,89a41c639c631c24fe0135595c72ac9c765a5026e4dc16643edbb18822160fbd,2024-11-21T04:37:08.783000 +CVE-2019-1707,0,1,d68689bfd41e2d20a26bfafcb2e769d5e68d8bedb31d46fd40d7ff59dff9d75e,2025-07-23T15:26:38.713000 CVE-2019-17070,0,0,68cfde51c1416a306fc9fec1df50f9ce66d4f98d7d8cdc1674463f0b86eb66cd,2024-11-21T04:31:38.800000 CVE-2019-17071,0,0,162de4387faab66e50d72ec23bc2978466301aeb08b6764facee3d9f06746549,2024-11-21T04:31:38.940000 CVE-2019-17072,0,0,721321cf455e0fa1c155d9d55d5093e0a1e5c0f49ffdf5d72be8972e8af0736a,2024-11-21T04:31:39.077000 @@ -135756,7 +135762,7 @@ CVE-2019-18397,0,0,88989429918714139f04d871eb27ec3fe9ef954c2ffd3d765a58215bd5e94 CVE-2019-1840,0,0,ba296725bb6454ca9b5391f89f8ce8323fd6f32996689e13b19aa2761ccf6275,2024-11-21T04:37:30.500000 CVE-2019-18408,0,0,6b3303ed2c40a24966d71307a7e535a4030d128016ad8cc9b745978729385154,2024-11-21T04:33:12.187000 CVE-2019-18409,0,0,2e15c18dbfb3921ffe2f44a5eed639815e7cb766a6828f772cb583ed905e94f8,2024-11-21T04:33:12.357000 -CVE-2019-1841,0,0,42cfa35546b1c673fda8efc6d12422a23d77613db503dd8ea236d0df1141614d,2024-11-21T04:37:30.627000 +CVE-2019-1841,0,1,62163a524eaaa6c666e7693c1c7789c1ce484c6a7f69840578911cc211e79328,2025-07-23T15:26:38.713000 CVE-2019-18411,0,0,91cde6a61641710c3a7433d6e6fb2ae1959d1824476bf69babde53db90609a5c,2024-11-21T04:33:12.487000 CVE-2019-18412,0,0,71529481cab288988911d7c09fb6f1274e7361e2164553036cdaa5915138d9bd,2024-11-21T04:33:12.633000 CVE-2019-18413,0,0,9ac82e090bd9d02d9203baf48b1ced924ae5051b477f04b303dccc6d3fd02f3d,2024-11-21T04:33:12.760000 @@ -158182,7 +158188,7 @@ CVE-2020-3407,0,0,2fc2c612c1729bb65fa4d7b6ba79ed8b471613d202de9811438645f91ca449 CVE-2020-3408,0,0,5208ca87a47528b29636ec35e9b9aab2126964309d24b7edc47fce88479261cf,2024-11-21T05:30:58.377000 CVE-2020-3409,0,0,bf01a8b73fb97f7bfccedc0304d39b900557e442790a17af7656c0d8d8080927,2024-11-21T05:30:58.503000 CVE-2020-3410,0,0,fe7107b2feef2a41deed0977c5624f0f72a09db097d289450c1153e95dd1dc3d,2024-11-26T16:09:02.407000 -CVE-2020-3411,0,0,ec1fa6c96e1332d08ee36fca1a6c370f59fc619b02e19fbaa3201e14151deee3,2024-11-21T05:30:58.750000 +CVE-2020-3411,0,1,497f0b1b5e8ca4b62eb8e7cd78144fd47cc5f0ae61bd4eae27765317983ed23f,2025-07-23T15:26:38.713000 CVE-2020-3412,0,0,7f7d6efa90bf1ae5fa6e0015ca5ca60a8bda66a2495e4d6ddc45801cee722c83,2024-11-21T05:30:58.883000 CVE-2020-3413,0,0,53a655f927fd4bd69d8641284f1d57f45f5b0d9c89c23553a94f4228a1ad3822,2024-11-21T05:30:59 CVE-2020-3414,0,0,4edcdeab8b7531e1eda4a256a19595b5bc5d001577ddb82570b102a4bb57a14d,2024-11-21T05:30:59.130000 @@ -158234,7 +158240,7 @@ CVE-2020-3462,0,0,a6e8cfc6144f0366997e26cb519ff8ee0365617077bdf0c885c0c6659da4c1 CVE-2020-3463,0,0,fe73c0faf4f57d0d92d6b7518f5ceef2af11828137612d85b5f50a7084d1a525,2024-11-21T05:31:07.323000 CVE-2020-3464,0,0,fa127f5efbcee98e8fbbfa2979bc5aa6bee7d9d555e27a8e2d2b29062bb6bed2,2024-11-21T05:31:07.440000 CVE-2020-3465,0,0,be031664a2dcc0f7c783affdffc67a7af570b9b63da7f182caccb38c917a35f5,2024-11-21T05:31:07.557000 -CVE-2020-3466,0,0,7afd97206c4b933ad419e20f84a36a83c140571a16ca3cfe5cd163c033999b58,2024-11-21T05:31:07.690000 +CVE-2020-3466,0,1,b13d683f1bd57dfab3ff898274dba535ca0f8199909f65d3bc2fac71107750aa,2025-07-23T15:26:38.713000 CVE-2020-3467,0,0,0971bbbfb341e2087cd236565c82a3739f2d46a2278ce546d4c6737dc0f1cd5d,2024-11-21T05:31:07.800000 CVE-2020-3468,0,0,85e790bfb4369be26f6429110257372926bacf9f98c2d72b544c6a941ddc312f,2024-11-21T05:31:07.937000 CVE-2020-3470,0,0,d238e9428261ad487e8df4747705e9e96acc3a328419f290173b1616df5b04dd,2024-11-21T05:31:08.060000 @@ -165872,11 +165878,11 @@ CVE-2021-1126,0,0,f695f2c9298903c70375c8a0d4d3c47614a1498bfc33843d28a316b92a7690 CVE-2021-1127,0,0,297ad85914f99cc4ba143c680b4ab2445213504edbef3e5e41b270464d94cf54,2024-11-21T05:43:38.920000 CVE-2021-1128,0,0,de44aae037ebe07ef980f813986bd40e2631f7d49ac251f1823f2f78fda9c9fd,2024-11-21T05:43:39.040000 CVE-2021-1129,0,0,e2e250346828feb57b124176f7495c93e7217c60d9c7277592d1757c8a750b18,2024-11-21T05:43:39.177000 -CVE-2021-1130,0,0,3379bb39e14e7a9b6268a2132342b5b8ea024d21eb6b531c32716e69bdf27535,2024-11-21T05:43:39.290000 +CVE-2021-1130,0,1,c2f8cc106161d0b14b78629a582a89a23a3dcceff1d1e75554fab4ebdea66a6a,2025-07-23T15:26:38.713000 CVE-2021-1131,0,0,5aaec7399d1bc7ea8bf0208b03b36d69c40405843742b6005baff28febf593ee,2024-11-21T05:43:39.420000 CVE-2021-1132,0,0,7b464ac803be3f83423773df9da5f54af4dbbd4d81a2ace077a1f7b2bb728cd5,2024-11-18T17:11:17.393000 CVE-2021-1133,0,0,4e88332eff9ff3f38e44ae8e3049afcfb12089e60398b05d2cee4cdd10b9105d,2024-11-21T05:43:39.700000 -CVE-2021-1134,0,0,ac5b8d1e97008d23775b6c829ad384580ad322cfa71acd8f89de550b880faab0,2024-11-21T05:43:39.847000 +CVE-2021-1134,0,1,106995de48897b45cf138f43a0d563588b797702078eeb7ee69df043939ee5fa,2025-07-23T15:26:38.713000 CVE-2021-1135,0,0,b03a29758136a18a0ed645d3aa97eed54cda24f84b2543ac19d1b135e8e750b1,2024-11-21T05:43:39.990000 CVE-2021-1136,0,0,3dc770ff667fe27882de2acb8bfd612f70927d26a5f8cf8d0cd229666381dd16,2024-11-21T05:43:40.120000 CVE-2021-1137,0,0,e347b86a9468829b5a1ad2de8a86112bdd7622b9cc0d97553f6daa24c3de0dc1,2024-11-21T05:43:40.260000 @@ -165999,15 +166005,15 @@ CVE-2021-1253,0,0,09b36e67686c86ed9b62b15152ca575847b1b5718136258c6cad33f9bf77a9 CVE-2021-1254,0,0,ccab989a45de0e7817ea89e97f80f8305b4d6f9348ef1cb0e11f228a59e16b08,2024-11-21T05:43:56.193000 CVE-2021-1255,0,0,02171c7000c755f2594c628481045ec2736cf651a220e7d53e2aea884d496abd,2024-11-21T05:43:56.320000 CVE-2021-1256,0,0,5078577a14a89fce4e541ae7df026332e91c4d55f6d8dc66680cacd9d41e2dd6,2024-11-21T05:43:56.447000 -CVE-2021-1257,0,0,9c3dfb383f911909b3c65501e0db54287974c61c180be6e8e5723639bc5cfae2,2024-11-21T05:43:56.587000 +CVE-2021-1257,0,1,136b027a7b3d6adc0f08af5a4f9d7467d562baefab50d963004e526505336aec,2025-07-23T15:26:38.713000 CVE-2021-1258,0,0,55b75e7209989c676605276d450882c7e0ed527b4b5e8e3eae595e718fb616cb,2024-11-21T05:43:56.737000 CVE-2021-1259,0,0,0d0ba81d08a888d92b2aacd7d6fadd2e0b0094eb716efce8396c0f9e5147d8f5,2024-11-21T05:43:56.873000 CVE-2021-1260,0,0,61c37ea335fc93bae61a21bea7406580180f36ad6e84ed589182bca051f5f864,2024-11-21T05:43:56.993000 CVE-2021-1261,0,0,2a308d1136f76043551c8408016ca7523bcbc66ad2d5e2096090a982d629c8a6,2024-11-21T05:43:57.127000 CVE-2021-1262,0,0,5ba45a3d6400cbbf3299e1ea38c7ff34edeeb5bcb32cd52d37a3d17e1d4bc0c9,2024-11-21T05:43:57.260000 CVE-2021-1263,0,0,65add51bf2c07abd1c4aa43f75d092e789937a5a8e17658b8814140fea847128,2024-11-21T05:43:57.417000 -CVE-2021-1264,0,0,f10eeeb52690fbca21d98b9f49b2768a648b0adf91b4a42749142ab135e0e563,2024-11-21T05:43:57.560000 -CVE-2021-1265,0,0,fc73460a6e80d974fb91533f1e7c5ddd4c85345ce240abf0fee75f7c451eef20,2024-11-21T05:43:57.693000 +CVE-2021-1264,0,1,8f22ffdda66d27814a628664276acb3348c5fba27d0a4751843b2714d26739bd,2025-07-23T15:26:38.713000 +CVE-2021-1265,0,1,caca859356bc78577dedc133175e0f1bff14c3b3ecefe31a27cfcc9890425aaf,2025-07-23T15:26:38.713000 CVE-2021-1266,0,0,5a10e1b3dec6dafbfc9883f6c7cba5c4a5cb764396919c9ae91294f2bb50f9f2,2024-11-21T05:43:57.827000 CVE-2021-1267,0,0,bb0ea59a79225c4dfcb7dcb49e4675eeb866517676557b2827bc11446534af07,2024-11-26T16:09:02.407000 CVE-2021-1268,0,0,6877fc1852ace55e6003cc1c4e74ff224ef6890d1356532ac4cb4e6e7b3d11b1,2024-11-21T05:43:58.110000 @@ -166045,7 +166051,7 @@ CVE-2021-1299,0,0,c7ddb799b1da625e681dffaab2d1d37c0b47b3fcd376173be18c8f4f783abd CVE-2021-1300,0,0,b00185e2186ba490a78b8d59972e7c55576b7a9b2ad75c9e2b11e36423695687,2024-11-21T05:44:02.410000 CVE-2021-1301,0,0,3701d295bd48f57fe47734a4e49b445947541f524f1d618a681d45a06cebf9f7,2024-11-21T05:44:02.557000 CVE-2021-1302,0,0,609543c37f766ab1e42b9769f635856306e144c468ee5648fe27a2f8c3184e9f,2024-11-21T05:44:02.693000 -CVE-2021-1303,0,0,7fc226f10ab374931b5a62b75709bf7750ec15a811b3053d47c74100e9636d85,2024-11-21T05:44:02.830000 +CVE-2021-1303,0,1,9848b2c74f664a5d34f3976e96ca2687d8edf5cfaf2e83656e104b92518a24ce,2025-07-23T15:26:38.713000 CVE-2021-1304,0,0,c60d7a028c6b4279a6122ed60accbb4245e7ea3e57fa83b9a3f3d657cc7d0d99,2024-11-21T05:44:02.973000 CVE-2021-1305,0,0,22dc5a27402743b3e940d996d3ec7ae229bf59d363f613a7e24815fe1789e7d0,2024-11-21T05:44:03.123000 CVE-2021-1306,0,0,5af13cb2ff8027062771d7c247895e54e5aef3150b8ce2e0ddf7091b853a1eb4,2024-11-21T05:44:03.263000 @@ -172038,7 +172044,7 @@ CVE-2021-26087,0,0,b903815a9faac9a91bc8496492ec489558e2e0a9967f0461d017d67082fd5 CVE-2021-26088,0,0,c26e6d0a3d2d39cb55ac02c63c46a7014509930ab7b8dfa748b6804dc94fc467,2024-11-21T05:55:50.907000 CVE-2021-26089,0,0,6d8844e9a67c7f9126a795bec2dc39b17e18dec81df6faf3063ff3a641ec63a3,2024-11-21T05:55:51.027000 CVE-2021-26090,0,0,e3f8c1b2626ee36fd370ee3c68bcb4a42ad821868abe4e4fa89f643789009be7,2024-11-21T05:55:51.150000 -CVE-2021-26091,0,0,ec993c449aec33bdc4201289a821433f69c192d4d318ecc1eb97ff28a684598c,2025-03-27T16:44:44.143000 +CVE-2021-26091,0,1,e8416cd61008fd8561b5e1aee6d861e7efbc06438be7e4f8012f9d8e1dc72f7d,2025-07-23T15:53:04.907000 CVE-2021-26092,0,0,bc381940e01045bf4ebcb99f1b03b7940fa8d07e8399794e6e19a6f437b8a7ae,2024-11-21T05:55:51.277000 CVE-2021-26093,0,0,31467fe46d016631b7115882fed483d4e26219df3a71123948f1a1afe27b3728,2025-01-21T20:44:31.650000 CVE-2021-26095,0,0,eab82fd930a577aba43ab891efe1cc8f8949906b0a8e50a351f70144f3de22e3,2024-11-21T05:55:51.413000 @@ -178390,7 +178396,7 @@ CVE-2021-34779,0,0,c746a18a6ddd353983e01947e4ac330625ecac8273ca58ecd087e576b8d60 CVE-2021-3478,0,0,60423a769ca8243c7c67f9eec1f5de0590008b4fb5039a61420db3f0eb85c1a7,2024-11-21T06:21:38.417000 CVE-2021-34780,0,0,033c62c4242f4e2225ea4e5cb51033082b07dcff1ffc0a8d13cae057d1114083,2024-11-21T06:11:11.140000 CVE-2021-34781,0,0,30e3ef947876089217bfa864e20cc161cd78194c0d2719e43154302cae7b5790,2024-11-21T06:11:11.290000 -CVE-2021-34782,0,0,38ab8264f6059fffeaad310a6c25281700129fab101b52b3e103cc3d8b6e2ed6,2024-11-21T06:11:11.420000 +CVE-2021-34782,0,1,09a1ce52f4b0101a37da3467ba49fcabffb6212b04aec31615c8c23b7647e9a8,2025-07-23T15:26:38.713000 CVE-2021-34783,0,0,8a7b2ea2b94df22abcf4b9f3ba94c83d3db6c9286cd88fe9e67e2a75c054d92d,2024-11-21T06:11:11.547000 CVE-2021-34784,0,0,d2eb6cd251343248af94eda7036deb95decec6db3e335b5f16c2c5ac9ed9934e,2024-11-21T06:11:11.693000 CVE-2021-34785,0,0,93237965c4d3d9f89b62ddb0be7865f2c64c56d94bc798896eac27b0d60d5eef,2024-11-21T06:11:11.833000 @@ -190573,7 +190579,7 @@ CVE-2022-20627,0,0,01bd972d554418795c2cbceea0d703fbfa280d715b73c0f4433447837fabf CVE-2022-20628,0,0,fc7ce5607aa84759b2d96217987d5514661e549973f62910a0a13ee1b34dedfb,2024-11-26T16:09:02.407000 CVE-2022-20629,0,0,47a93a0ca43a7ea490b6e364835f20e15d54b7716d3ce60228b6b923cac45abc,2024-11-26T16:09:02.407000 CVE-2022-2063,0,0,b76259f1d9a1b3b1e39cec4ce8db00ea41befcc4ab98f6c1c4badb495293bb48,2024-11-21T07:00:15.470000 -CVE-2022-20630,0,0,5725b31326fac3ee36837956e3a06e5e777654a78ecff25242d9b78dd06c3e05,2024-11-21T06:43:11.887000 +CVE-2022-20630,0,1,f9155ac0f1d9a2b102246aed6eee911dd3d0371cc746bb9b623f52cb48558438,2025-07-23T15:26:38.713000 CVE-2022-20631,0,0,d5e6cba3d52776201ad34e64370c5bc856a7f61dd8e640109361a62279f217d0,2024-11-18T17:11:56.587000 CVE-2022-20632,0,0,59c15d8ce387a47ce6bc4e571a8e0e0687d9159ebd6f062458cfb1bbd1f4949c,2024-11-18T17:11:56.587000 CVE-2022-20633,0,0,952ff325d93c0967d8ea8fc0982c204a7de93e3c39da9b218d6545f995c5c504,2024-11-18T17:11:56.587000 @@ -214278,6 +214284,7 @@ CVE-2022-49776,0,0,9ce96451543971c4cf8d4815aa0a945053c3f375562d2b46db647709fb7dc CVE-2022-49777,0,0,79747c04a68431fa71c12a4406b37b4b2ed947c0c30250fc3bfe48333fe880e9,2025-05-02T13:53:20.943000 CVE-2022-49778,0,0,539ec1b938558ad5624715f157ec1c02ee49e5a67869a8143ac7d8edd0933c76,2025-05-02T13:53:20.943000 CVE-2022-49779,0,0,e1cd1153c37e46469c931fdc4c9fb604c74ecded17bd97127c0562a00114a53b,2025-05-02T13:53:20.943000 +CVE-2022-4978,1,1,340a51a7e9ed4c9409a012d240799d05880c0311d6ecf944664c819a2f485730,2025-07-23T14:15:32.640000 CVE-2022-49780,0,0,e660879d5a71acf4280487ad052a9ee0511abe8d5eb2cd428759de18c2e18f67,2025-05-02T13:53:20.943000 CVE-2022-49781,0,0,44afc08c291f3fb434e67db3ed07e4d9e4e4988e9bf0e178d0bb62224abb60e7,2025-05-02T13:53:20.943000 CVE-2022-49782,0,0,95b2de10ecf7687be046a603e8ff0a316f56d5dfe6076d6576510228336e160d,2025-05-02T13:53:20.943000 @@ -216705,11 +216712,11 @@ CVE-2023-20050,0,0,557cd2d9ea8b7585d208862cd34260e25019d4142c9eb7b761c3d4a62ed64 CVE-2023-20051,0,0,cd740bd6b00f1af851d910a85c37b198a2df9086bfa4d35ec8c910db308ad6ca,2024-11-21T07:40:26.517000 CVE-2023-20052,0,0,a931b33a626346f0f38b6687b3d171f4d3de959d3d42dfe61924b859bb5fc55c,2024-11-21T07:40:26.643000 CVE-2023-20053,0,0,1fa83e829ac7d20c8d4f09fe196fa2aebc16b5092c410511ceb1bafc02c8b61b,2024-11-21T07:40:26.780000 -CVE-2023-20055,0,0,f52cb2ac81b9d3e72e74066cf7aedffa32cd16b3e55312806cec9c3a63b6b5f5,2024-11-21T07:40:26.907000 +CVE-2023-20055,0,1,a8a7b2161276ab863652e59e3d2b6deb1dc7d9f451643184f6a64dac7406ba7d,2025-07-23T15:26:38.713000 CVE-2023-20056,0,0,e5f2206e3e6eb19e7a34e861a532a7a629bac3a919dd569f5ebfecc89d883878,2024-11-21T07:40:27.043000 CVE-2023-20057,0,0,6d35cc4f176cd68b18588af5732f3c585eddaf30fc7a9a24c8806fbf78a60d1a,2024-11-21T07:40:27.190000 CVE-2023-20058,0,0,00631ac37fdfd111ce0a785c8715359c9fc3d0aa9bf0e3ca3bec5194ebce8078,2024-11-21T07:40:27.327000 -CVE-2023-20059,0,0,1232c30a015e573177f9a8e1cbfdf5efc4a9e280e7cb64084d423714c6ac9035,2024-11-21T07:40:27.463000 +CVE-2023-20059,0,1,a9fcc38b882c1c788af4d9981e3ad9fe436ccbe5e76b69f5342499f05097dea0,2025-07-23T15:26:38.713000 CVE-2023-2006,0,0,4810298c835dffe0c8c43a7e8d6651d757b7713039df441bddf460af0df3f039,2025-04-23T17:16:28.713000 CVE-2023-20060,0,0,b3ec1cd7d20e83c92337a5524a28240b5f682730e7d4ff4e5bd9b1aadff5ee02,2024-11-18T17:11:56.587000 CVE-2023-20061,0,0,ba18a84f5e638c92fbe1219739cca042ac87b87532616249d714ffe453f80999,2024-11-21T07:40:27.663000 @@ -216839,9 +216846,9 @@ CVE-2023-20178,0,0,8d2b15de57c67f8df081d88f86886b02e37c35d377349c492b0a1473e5567 CVE-2023-20179,0,0,d1499a1fcdee96c4d7142e358936c8fe23c61daa51def2fee058898122d3249e,2024-11-21T07:40:45.417000 CVE-2023-20180,0,0,618c67d623ef1861c78056048a3faf645c9d807fc083037eda01845d0370bb9f,2024-11-21T07:40:45.563000 CVE-2023-20181,0,0,2e780463bb42bbaa113f2e4fe7a99c4d5c8a614c666bd0a25583f1a9b9505191,2024-11-21T07:40:45.690000 -CVE-2023-20182,0,0,a92842435aa5e287274a6764b8a47a778be285a2744f3cfa890c12d6813aeeeb,2024-11-21T07:40:45.847000 -CVE-2023-20183,0,0,66d8941613d491a0934c0d88aa636f0e35574b8671496490851b453c7d875810,2024-11-21T07:40:45.987000 -CVE-2023-20184,0,0,dfc5af96dfd325c19c7ebcc39e0f088feb76f0a6201838ea334f7bbb6d399f24,2024-11-21T07:40:46.130000 +CVE-2023-20182,0,1,d1b5172415df1719fd1dd11a2589077a571ca38501a6248ab47e8f096c23bc82,2025-07-23T15:26:38.713000 +CVE-2023-20183,0,1,61e088c2c06eaeaf516f6e97d79d287616b434d71d2d22f312cb1a4d44d93c19,2025-07-23T15:26:38.713000 +CVE-2023-20184,0,1,930c76f65c0db0dd847f6a76f814570d12274a1ea9190e16d828e955fac27639,2025-07-23T15:26:38.713000 CVE-2023-20185,0,0,b9fc9045145eef7be80d597232820998aa81efc562b1fcfdc24bdd0fe0375b3e,2024-11-21T07:40:46.280000 CVE-2023-20186,0,0,45c2304de2650eda7503e7a5b6b812a97b558834c3d018ac11886acddaa1b8a8,2024-11-21T07:40:46.460000 CVE-2023-20187,0,0,06b2c4e61b7276271878d38db6ba08df36b3b38576a4d8e473bde6e45ac0cc16,2024-11-21T07:40:46.903000 @@ -227649,7 +227656,7 @@ CVE-2023-33299,0,0,27187b22bcf5b692e8c22c11eab27d8b578f609f08467595ce9608c2ca052 CVE-2023-3330,0,0,79701b2c45499bdd043c812cb833ad5abf5c67d1a07608a303232abd8861bd69,2024-11-21T08:17:01.777000 CVE-2023-33300,0,0,e8e3405c5b6361a1b0ae303b471db9510f640f26dfa1345b18633e0ee1169b04,2025-03-14T16:15:27.203000 CVE-2023-33301,0,0,07e39c7bf3a5bc42efb1d0e586c8f3f0fcc618e7ae8db0cea8c4f55191f28f4b,2024-11-21T08:05:22.220000 -CVE-2023-33302,0,0,f24213eaede26656e615494f86edb7cca7fdff09eb14a42c15b1fb26850354bd,2025-04-01T20:26:30.593000 +CVE-2023-33302,0,1,7ac8f96747ccb3c23eb4855d5b66af86e4b1f7de2a87bfa1d0264d26432df723,2025-07-23T15:53:22.097000 CVE-2023-33303,0,0,5ed83ae2fd8f092fd97b465a3e790ef17cec97f8c1f34227abaa3684eb09991c,2024-11-21T08:05:22.373000 CVE-2023-33304,0,0,e286c62da84928042225cc8f2918434951acd6f76bb76b4459304cd2bac3ec39,2024-11-21T08:05:22.530000 CVE-2023-33305,0,0,dbd1d893ac16204711a7d41b6ca1081ab6d21b9c33c6dc9a0e829a5e152321f1,2024-11-21T08:05:22.690000 @@ -247844,7 +247851,7 @@ CVE-2024-12307,0,0,dd08ec1d0c570e2dfd8ff10541807fa47db4494718b1c9efb61df634a03bf CVE-2024-12308,0,0,dc3e72ca7859a06f42d4d356596aaf419643b2057c76db5df6221da728ebfce3,2025-05-07T17:33:46.187000 CVE-2024-12309,0,0,16d03882c6009566e79b9c8c2443055d4427c7f1e57279e0146963b711b56a47,2024-12-13T09:15:07.810000 CVE-2024-1231,0,0,200ab0f6d04cefa3c0f162194c7937f97b6afd2e02286a534b02c705e2b3e09a,2025-04-01T17:20:48.183000 -CVE-2024-12310,1,1,d745bb6c1103710e4953e254d3a7d9e339aee512eaba368657e57dfd3f23f002,2025-07-23T12:15:25.063000 +CVE-2024-12310,0,0,d745bb6c1103710e4953e254d3a7d9e339aee512eaba368657e57dfd3f23f002,2025-07-23T12:15:25.063000 CVE-2024-12311,0,0,24f9661274938f189cb59db18086aaca469ee34b30c52ea12fc920e9d7a91125,2025-05-14T14:13:35.077000 CVE-2024-12312,0,0,81d22bd123230bacbdc2896ec02614f9266db15df91f1b6305d0718b6052467b,2024-12-12T07:15:10.090000 CVE-2024-12313,0,0,f89dcbc889465a7c3dbcd85f625c342b4a0907147c3b92e03163b2cc2948077f,2025-01-07T05:15:17.853000 @@ -250395,13 +250402,13 @@ CVE-2024-20324,0,0,7a51f8f50e105ff17ffb80c19a2f418dcc611aa90071eaf23c16480803590 CVE-2024-20325,0,0,97e99f803573b3b88e591e2aa3bb77cbe3eb16644f1fb0f051e604bd3e8b4f97,2025-05-06T17:43:06.773000 CVE-2024-20326,0,0,e89b5b9a93761d4c10c9dabb769a04585a4c6dfd5ac72d424acdaadeea5aa608,2024-11-21T08:52:22.797000 CVE-2024-20327,0,0,9dc180a4a7bf64138e3e2de1ba2aa4a0e32e9abba31a72da446050c630843598,2025-05-06T17:11:55.517000 -CVE-2024-20328,0,1,6bfeae1a06c628f7f8d7dacca9727292cc00145fcc1f609372986de621ac775a,2025-07-23T13:51:54 +CVE-2024-20328,0,0,6bfeae1a06c628f7f8d7dacca9727292cc00145fcc1f609372986de621ac775a,2025-07-23T13:51:54 CVE-2024-20329,0,0,59bc89e172c3db01e2da16247216791562db76304a4e6467b9f47a122f82d155,2024-10-25T12:56:36.827000 CVE-2024-2033,0,0,8a9325accbb5e95011f069183eb95b4369668f581b52d1c64931eabfc42d1fe9,2024-11-21T09:08:53.393000 CVE-2024-20330,0,0,8ba79e64256db4e20d7f893356c700012d7764696ed4a35022c6cfb9fef2a9fa,2024-10-25T12:56:36.827000 CVE-2024-20331,0,0,7ac19cd54d374beecf09f7a9d9f0b2bee3bd547342030b289664e259437b39b2,2024-11-01T17:32:56.807000 CVE-2024-20332,0,0,cba9f4881d89f0b71c3df6cdc1331af652238ecb094a4677984cf47f34f72d1f,2025-04-08T19:44:31.590000 -CVE-2024-20333,0,0,8e2fd6f0b062d71bcf9fa926927097bc7a56d2fdf082ea72f06b540b126cfeb7,2024-11-21T08:52:23.783000 +CVE-2024-20333,0,1,7b2be796c54cf6d11c12d3073cb2c32142c556e742610296618517242edbd078,2025-07-23T14:53:12.207000 CVE-2024-20334,0,0,d22a6252077bd300417c5beb7f4482ddef2e8b171f614e5b7831ba9502e3807a,2025-04-11T15:47:42.270000 CVE-2024-20335,0,0,38da38af3b0a791913c57da5fdee6d056dbcc4c51a9bcdc9c7606a00e5b5c636,2024-11-21T08:52:24.043000 CVE-2024-20336,0,0,ce2f17937ab632a6dd5ae0dfb4b584ea61fa32a5289ff3d135f5359888926e79,2024-11-21T08:52:24.187000 @@ -250451,7 +250458,7 @@ CVE-2024-20377,0,0,738d1f26080969998de2b0d240ec661cdf346903ba67909b455df35ae7b33 CVE-2024-20378,0,0,cfdb67e4484c7d8352327e09adf5dee399eedf525c90419f788b5041a7cfa93c,2024-11-21T08:52:30.107000 CVE-2024-20379,0,0,f6b182aba1f5bea74c992ea3496378e31429790ebaa564f57ec1bdcd738a12f1,2024-11-26T16:09:02.407000 CVE-2024-2038,0,0,a3a7a3e24ecae0b84a6a9e24c5c693be1d1fdd37db796b330eac6b7e8cd72018,2024-11-21T09:08:54.393000 -CVE-2024-20380,0,0,52ff045cdd3863bab68c233643aecbc307a3fb67fe28e04320763830e99a3824,2024-11-21T08:52:30.310000 +CVE-2024-20380,0,1,11abffda47913e0052af3ac897754dc0b064a9fd43ef1895069362add09b45f2,2025-07-23T15:08:46.247000 CVE-2024-20381,0,0,c0c1e72d09de162858c50f3eb24b8e3b2eaddf6db3013286ef5d0324b4df5094,2024-10-08T21:43:28.757000 CVE-2024-20382,0,0,92d04b0d91cc1813c983467bab79d38c94510ff0bc760aa68a27e77d5960a671,2025-06-06T18:51:11.123000 CVE-2024-20383,0,0,617126a1a30b56caa324787ca2c439bbb2e8383571de91ef560adba715caef73,2024-11-21T08:52:30.840000 @@ -250580,7 +250587,7 @@ CVE-2024-20503,0,0,b612922289b155f23847df3347d364f98e8d41b1b1be152ee8cf44ef5e123 CVE-2024-20504,0,0,c8cda198c4aeb11c1251ccfdbdc1c30e7cf5db68aaaa703cc20eeab58959a47d,2024-11-06T18:17:17.287000 CVE-2024-20505,0,0,d116393c3d5be2510ee9d766c6fe080a404c1bd651360d1247a177c83d4dada1,2025-03-25T16:15:17.613000 CVE-2024-20506,0,0,dabbe563a850f67acfc60db90477a720d10fa63928326c875bf8151feafbe238,2025-03-25T17:15:47.027000 -CVE-2024-20507,0,0,ad3c3d70e719b64e35428f0224f3cb5a92aad815d928ab309a851c0219476f30,2024-11-06T18:17:17.287000 +CVE-2024-20507,0,1,2a1b4ddc4a7bd0d03b646243dcb305664d079c62151f852a6d1c8b22ae2304ad,2025-07-23T15:33:38.953000 CVE-2024-20508,0,0,736e0172acb76c338f12f2ff516597a0f98c248ac5fe6687777d82a86f39b256,2024-10-03T14:43:23.810000 CVE-2024-20509,0,0,a39b65e5760a255e42fa765c3fb0daee34f60c133cf4e610dc4ed1e1066b8661,2025-06-04T21:15:37.017000 CVE-2024-2051,0,0,5c688e48241bbb5f92d5d4858f33d5ee7cda7c412aae30dc1b76af9654330fc9,2024-11-21T09:08:55.927000 @@ -253108,7 +253115,7 @@ CVE-2024-23588,0,0,c896bd9b8289657f23ce61f2b7bc0d6a9b21890ffc09a248ae27bab09f369 CVE-2024-23589,0,0,85f795a24604d13ac6022879540ab3f66b6cc006c27b745d3a1cdfd30ee74158,2025-05-30T16:31:03.107000 CVE-2024-2359,0,0,f8a16aff6b690ef0a387e0bd83c3d967a7f54dab13e1526a35b1308feb8246a0,2024-11-21T09:09:35.413000 CVE-2024-23590,0,0,f0fb793c953582179e31c56f792b965f6a4bfd70b908379c8dbf925a73440dcf,2025-07-10T21:41:27.290000 -CVE-2024-23591,0,0,73e5c8e9559de251c033aa091f318ad51a29efd0bdc50ce9f12daf1770233266,2025-01-28T14:28:25.570000 +CVE-2024-23591,0,1,9e6364a7b5d8ee34fe8a369fba8a6a0f1d8935d1f792a139166c6c9995df86eb,2025-07-23T15:15:30.030000 CVE-2024-23592,0,0,ef014cbf8808263f731f61b0bea284cf199deacfcf795438ec07cedc3d97e15d,2024-11-21T08:57:58.270000 CVE-2024-23593,0,0,1669104ef0f6d536595a3f0242aea2e399af734f766398709f067343dd11f88d,2024-11-21T08:57:58.400000 CVE-2024-23594,0,0,1f0e1d4dfefab44adcf5b5a1aea994e7319979d868c10f29cf8eb184905dd76b,2024-11-21T08:57:58.520000 @@ -266274,8 +266281,8 @@ CVE-2024-40679,0,0,ab37f5e30f32673081958808596357f8a003dc4d5169bfc16913d632a4e3e CVE-2024-4068,0,0,6064b7191c4bfe6385dfb9559ff0d900f6a3c128ca3c30b46fda682863dc73a3,2024-11-21T09:42:07.710000 CVE-2024-40680,0,0,bd67df4a239df055ff0046ce7193fc2f150970ac8a25905d079ed701abf99ef9,2024-10-31T17:15:12.990000 CVE-2024-40681,0,0,2b5a5c013480bd5cc87a564fe6701f318e09e1cde3fb5250634972a9f9aebf6b,2024-10-31T17:15:13.143000 -CVE-2024-40682,1,1,e7db88f16266b3dc31fc89537d9c5d56e075fe8e4a0a834ac975072e431d1ca0,2025-07-23T12:15:26.607000 -CVE-2024-40686,1,1,f14a5d7ceb233bd705a1274e01209d5cf125e6d927a06917c9b669715c8de325,2025-07-23T12:15:26.803000 +CVE-2024-40682,0,0,e7db88f16266b3dc31fc89537d9c5d56e075fe8e4a0a834ac975072e431d1ca0,2025-07-23T12:15:26.607000 +CVE-2024-40686,0,0,f14a5d7ceb233bd705a1274e01209d5cf125e6d927a06917c9b669715c8de325,2025-07-23T12:15:26.803000 CVE-2024-40689,0,0,41d3e4691112f48676cdb44eacf0cb30b856617ce94bb50310ea65e78ab406af,2024-11-21T09:31:28.053000 CVE-2024-4069,0,0,3179fab3da05beda5471e6250aa837ed59e4aa93863d356ef96d9d5c7d1e0a77,2025-03-05T18:39:46.950000 CVE-2024-40690,0,0,ac3fd8879f79e94d956d55740e068f2d064b41dedd1ece8ce64e710fe502e9c1,2024-11-21T09:31:28.197000 @@ -267094,8 +267101,8 @@ CVE-2024-41744,0,0,6d994053234257fe6fe921edc726848bf7b5e6eece3c0315caad7dc0cc98b CVE-2024-41745,0,0,6dba06d9ea0cc08ac8425e0341c71668811a6cd02139664e48e7481acbda9d69,2024-11-14T20:35:33.390000 CVE-2024-41746,0,0,989806c900ffd11c21b1fa6f91d833c84f6c1680e4b868bdf0c4c4b2010f26cb,2025-01-16T18:15:22.863000 CVE-2024-4175,0,0,5386392290fa38470dd8910cd3753515f25308d1edd31217aca2a63897449a15,2024-11-21T09:42:20.143000 -CVE-2024-41750,1,1,3b3d7003034c14f70145e9b5221d5d37c095a9ddfe4e17e32a8edda17a682d81,2025-07-23T12:15:26.977000 -CVE-2024-41751,1,1,4829b30032a1d4567207d34b4a57b9ae691bb9bd5d7557a7ba0782db70e63e5c,2025-07-23T12:15:27.160000 +CVE-2024-41750,0,0,3b3d7003034c14f70145e9b5221d5d37c095a9ddfe4e17e32a8edda17a682d81,2025-07-23T12:15:26.977000 +CVE-2024-41751,0,0,4829b30032a1d4567207d34b4a57b9ae691bb9bd5d7557a7ba0782db70e63e5c,2025-07-23T12:15:27.160000 CVE-2024-41752,0,0,04e93d2aa0d5f5c09f5bd50535183c7216d854c9071e1cb65e129028f085fb9a,2025-01-10T19:33:46.213000 CVE-2024-41753,0,0,7d5d6a26c816a6da1d27260fc9700aaf448c7816bdd6b78cc084f410c6247da9,2025-05-05T20:54:19.760000 CVE-2024-41757,0,0,a5a5b0a6e795aee0906142951bbe27b1948183166d22ae2d1b5e51440e1ee9b6,2025-07-18T13:40:10.800000 @@ -272461,7 +272468,7 @@ CVE-2024-48884,0,0,5fd0bb45d4daca6fec84e3590a2c87e5a7fdfd8e521218f0c75f216ace5f8 CVE-2024-48885,0,0,f1a5e74246adb6d7bd8e325564baa4055ce18f2e80eed587565e5479d790b2f4,2025-02-03T21:11:41.750000 CVE-2024-48886,0,0,0c43c603ad0a80f9c21978b3b5043d329abd064d0a00462c64b3fb5285dce5fd,2025-02-03T22:16:04.733000 CVE-2024-48887,0,0,e5f36371957d4862dd374156d2fb4255b22ed5fa861b55573bbfed74b2aa7f25,2025-04-08T18:13:53.347000 -CVE-2024-48889,0,0,b91146ff80af9e0a70e60d177059514309aa07d3d1ed7c0d2244bb40847957f1,2024-12-18T15:15:11.713000 +CVE-2024-48889,0,1,87072c80a84f6e20da7f74f347c4534fea29ee9faf81ba0b851aaaa95c6b82c2,2025-07-23T15:04:55.817000 CVE-2024-4889,0,0,54e41cd985dde0162870a1a62b42a9fd40bf90446677bc64ce2d3dd7fe90e1b1,2024-11-21T09:43:47.970000 CVE-2024-48890,0,0,e4c2ca148242c15d7451f4a3f4325a96e3aaa804db1c474d5b5964d77366de86,2025-02-03T22:13:42.850000 CVE-2024-48893,0,0,4f56fb1297afed12ceeb17e448071cc4ac40c56f80a066a1a7973c4290bf29b7,2025-02-03T22:12:20.713000 @@ -275652,7 +275659,7 @@ CVE-2024-52958,0,0,98e92315476166e2b33ba1e5334b4d282532d45d1556c1889e5c3ca4b973b CVE-2024-52959,0,0,ab868f6da3782d67cb53183f2f781a21b6375778bdbc1b7f5893121d76931881,2024-11-27T06:15:19.083000 CVE-2024-5296,0,0,f4668a62dc8d11409bf71e36f1f99bcc5881901b7026ad13be4beab222eb08c7,2024-11-21T09:47:22.827000 CVE-2024-52960,0,0,fae4551d6f5890cd1cc0118af23473ce9c16850a8f8d27eba0836b043bfb643a,2025-03-11T15:15:42.813000 -CVE-2024-52961,0,0,dea18f81475188c7e018159200e77f633cf269c0485ba3fe6589eb2b7c40b189,2025-03-11T15:15:42.960000 +CVE-2024-52961,0,1,d60479a4a04a3d4f9fb7f85d90de085cffa16e034d39c8d55455bc9b356b0f23,2025-07-23T15:07:53.190000 CVE-2024-52962,0,0,9240ade3fad853885a25bf28704e25cc341a5380bdb89f44660e2092b7a63982,2025-04-08T18:13:53.347000 CVE-2024-52963,0,0,ae3a3bc3ff79384440030ff505ca2ca370b023f5f8023877a92497503fa052d6,2025-02-03T21:56:00.043000 CVE-2024-52965,0,0,cf01fb52ec368b423ec7a00284a4fea6f38d016cbcd8c839b052b60995f5c149,2025-07-22T17:25:57.280000 @@ -276469,7 +276476,7 @@ CVE-2024-54010,0,0,e416058a0e43b3161d01186417b7b48190d37daf5d8ae647cfe2dafe7e0f5 CVE-2024-54014,0,0,fef0a2723f6d0eb99b08285b0e1281168729dd64327291d1bbdb15f503c04c5e,2024-12-05T03:15:14.530000 CVE-2024-54015,0,0,40971c469c3896fb9f44684b71eb7b15c5b49eb2e701c300dd7c0c4ad6b2d8b6,2025-05-13T10:15:22.143000 CVE-2024-54016,0,0,3b5eb58b4244700d1bcb32c4dac2bd0c90e1e201611d8a89739b74a30622a284,2025-04-01T20:35:54.023000 -CVE-2024-54018,0,0,cad6d12f1a14e927d37238581f95d0e8ab02634a89452232f8dadfac53c033d6,2025-03-11T15:15:43.113000 +CVE-2024-54018,0,1,e89a48408ccde067f0444cb99f4f1e3adbb255d3b63a30036085d24f9631e795,2025-07-23T15:37:06.523000 CVE-2024-54019,0,0,a8eec760e60d241c261cac2fbd4385efc99850362288725ac5df8434ddaddce4,2025-06-12T16:06:39.330000 CVE-2024-5402,0,0,8a48be9314b3c9a679ac7b7baef4e61d2577cdb21f0001defb98f97ce31ab9a7,2024-11-21T09:47:34.947000 CVE-2024-54020,0,0,deedde63d908f2774e588bfa00ef40030e124db57741b462401a683c70fb1d25,2025-06-04T14:34:54.323000 @@ -277327,7 +277334,7 @@ CVE-2024-55585,0,0,10db4abe2df25dafa61974320d02f386f6536dda492088dc02ec05c47bc92 CVE-2024-55586,0,0,925f554fe1c6418481a3cd536be7ee8d09491d59c7f2a3844aeb8009a61c81a3,2024-12-12T02:08:22.247000 CVE-2024-55587,0,0,043360c021c66dd2c5a5e7aa976c02dd7134a3fcd9d370dcc05a2b2b78d778ba,2024-12-12T17:15:11.197000 CVE-2024-5559,0,0,da875044adc3709281edfed6e696b593f02a48923f7270d2350dbdeb9c3f0186,2024-11-21T09:47:55.840000 -CVE-2024-55590,0,0,29d4e2d6471a5b9da95911ddb2a988c50d815440a7aadcd4b27a881ccba14712,2025-03-11T15:15:43.650000 +CVE-2024-55590,0,1,be279beec601a53d52312df719053259daaa5ea232d91ba313adb80db08203ba,2025-07-23T15:45:34.770000 CVE-2024-55591,0,0,92e19e8d5fbeb8ffc3cb8033dbc9038c812258b0e349023cae68889d8104a7e5,2025-01-23T02:00:02.310000 CVE-2024-55592,0,0,9816656964d5ec6954045a42352f94d21e8e010544dae859d96c107f7d4d5d94,2025-03-11T15:15:43.823000 CVE-2024-55593,0,0,4651565ceba3085bb8ca70fe9039d9f6a893a058022ead3391b6c8b5d7155600,2025-02-03T22:06:19.163000 @@ -279090,7 +279097,7 @@ CVE-2024-5895,0,0,752d3cf662f17a4f3c7f7e879cdc7b8537ae16b2349d3852aa7b8b0a2a439f CVE-2024-5896,0,0,b4627d6aad35b598f68210f30f33fb9dbf452b802e1039b023010866f8b83347,2024-11-21T09:48:32.373000 CVE-2024-5897,0,0,6eb88a75ad407b2504ccd055c67eeea3d592b86e8ee0ce595d22cedc4b1bbbdd,2024-11-21T09:48:32.523000 CVE-2024-5898,0,0,3ab93646c8afc955ec0bbf4ec69565e3e8fbf6db202064381ce706ae13547a72,2024-11-21T09:48:32.670000 -CVE-2024-5899,0,0,64f93de646ae5fc60f23342e4aeb391969f25ce7054391bb2507e9668b05e09e,2024-11-21T09:48:32.817000 +CVE-2024-5899,0,1,f2263fb86f7cbfc7caa8cf2b688d8ab299276fc2d5df5712ff0f16c2ef83bf64,2025-07-23T15:00:34.233000 CVE-2024-5900,0,0,99ade6c9a9a1f5e54dd7771ee7da0a5a1818fe002b234a6c65f415cb19725c09,2025-07-05T23:15:23.947000 CVE-2024-5901,0,0,6418f11733e5a2fb65eb65998d9588d12fa78aa1c2d06d614004b6462ce72ad5,2025-03-13T14:09:27.020000 CVE-2024-5902,0,0,417a6817ec3d881a45d0749becc571c7644c221795de9a888a2dbeffa8796521,2025-07-10T18:14:44.577000 @@ -284697,7 +284704,7 @@ CVE-2025-20119,0,0,966174a4c9d991ad6b83e65d9f7d13b4b14250c9460c971b03cac87408097 CVE-2025-2012,0,0,8463cac9c3fc9e0427a85d985f341e4da3e0cd03bd98a387107507d1a3261cea,2025-07-07T18:07:42.763000 CVE-2025-20120,0,0,90f1ba6ef64c219b181393acc75cd98c4d438dc741835e99791cb504eb40f51f,2025-04-07T14:18:49.830000 CVE-2025-20122,0,0,0164e6440d8c7019cdfaf4c6a35db9dff1c3e205fba5447b785ae99c84e61f33,2025-05-08T14:39:09.683000 -CVE-2025-20123,0,0,de0e2ee9204f4a04ceea1910b99fa9c19c34866a6ef4e69299265f979ffad510,2025-01-08T16:15:38.150000 +CVE-2025-20123,0,1,93d617d4622a38bae29dae992abac3ecc9f7480b46457e128421ee3384866043,2025-07-23T15:39:33.987000 CVE-2025-20124,0,0,6db356d2fcd38b26aa3e47d7a0ec82ed7c18925211d51966c9b8a29c55acd1c9,2025-03-28T13:22:42.077000 CVE-2025-20125,0,0,9b041d5c53f5490382f82b588b3201679544300d0493ced7b6aca90b7bba2e5c,2025-03-28T13:37:16.650000 CVE-2025-20126,0,0,7b05da48cad990b2e17f26ed5e8d6da25a580a5cf4f716c7ad4e8835da045da5,2025-07-22T15:33:29.487000 @@ -284733,7 +284740,7 @@ CVE-2025-20162,0,0,1900af0f361cbea364068b7643200d80f21354daf0a9ff2178b09203fa0db CVE-2025-20163,0,0,f4cd280b8e8a7243c9229946dfebcf1c8c93bb3c5eca0ca859c9d99b62a0e88c,2025-07-22T16:58:34.137000 CVE-2025-20164,0,0,50b8e7719ab234633ec1ec5fa9fd183d5b0f2f5146e43eac03ecd5de53a46168,2025-05-08T14:39:09.683000 CVE-2025-20165,0,0,9f7b026247b5eae4a58783714ebe8eb2d48f865473657f5e720d75dccad8e306,2025-02-18T20:15:25.050000 -CVE-2025-20166,0,0,96d5726ca24f4531a66ef2215a68dccdad336b2fd7d2f71791c019cb3a6d5163,2025-01-08T17:15:16.990000 +CVE-2025-20166,0,1,f84d818cae2aff69e35c3681eabd9c06ebd3639fa42a32fb2ba703067087c581,2025-07-23T15:47:56.950000 CVE-2025-20167,0,0,07090f5f73893ce7a7f63b8dbe397ff57d54c4cdc37bbefbe4dc905874869caa,2025-01-08T17:15:17.163000 CVE-2025-20168,0,0,24fc772dc3ea5c2e7c84ac7fd0e2daf2c33d11c28d47f590a8d9933ab82b49d9,2025-01-08T17:15:17.323000 CVE-2025-20169,0,0,e4ca61b11f750ca0ea271ae4ec5ca898e3a61d9686d2233e9cf938c18cad269a,2025-07-03T17:20:15.920000 @@ -284790,7 +284797,7 @@ CVE-2025-20214,0,0,8fa33638454319d365a90bd454dd1a1f39a45198e1855aecaf6190aaf057b CVE-2025-20216,0,0,4a38ffab08fdb4167d437b7d770de81bb363077208994eb22b5a2ba2f8ec6c6b,2025-05-08T14:39:09.683000 CVE-2025-2022,0,0,c9ad71ba052e9c1605df985ea1077314ff2f2de2db94e627f5f312a848b4aa7b,2025-07-07T18:06:20.173000 CVE-2025-20221,0,0,441bd557b47b2908f03604c1b9dd38d669af6d4b442ac0b555aca282daa95e97,2025-07-11T14:43:38.090000 -CVE-2025-20223,0,0,a48a979961083d0bc057e13d1957c2cd446c272df640626d792f56868b5f599e,2025-05-08T14:39:09.683000 +CVE-2025-20223,0,1,3c8b965ac105c6f761a99ba3f5bd518688feeeac7f345d854d4ddd469189386d,2025-07-23T14:53:16.167000 CVE-2025-20226,0,0,66bca3e8bcd18873c2b8770139da09a42a5e2b1e8b0d78643807c813a4965cbe,2025-07-21T20:53:04.737000 CVE-2025-20227,0,0,e666aa20d819a8d3907a3fe4dd579232a013b919df1d57c8b190765a9aeb4f40,2025-07-21T20:51:45.463000 CVE-2025-20228,0,0,63b4c757b27c4e220230f1ef2181112c6f458ffbba693d2568647b76cb18580c,2025-07-21T20:50:12.957000 @@ -284840,7 +284847,7 @@ CVE-2025-20298,0,0,5ef123b99aecda479eda59b2805a60f94ea649d648ececceda6a02d8cab73 CVE-2025-2030,0,0,0e82bd47c24dfd47a0763661b2667fde4902819acb4b011b12553acdfd131e3f,2025-03-10T07:15:36.400000 CVE-2025-20300,0,0,7c8de3a138c945f35aa1196507f346b5a08ba294d444cae2ab2cabf69bd4add5,2025-07-21T20:58:42.110000 CVE-2025-20307,0,0,c47df8322043b50a5ea22167c3b057cdb81a8847e0951940c5fe4aebc3e37b29,2025-07-03T15:13:53.147000 -CVE-2025-20308,0,1,371939e8395b23c274f3b1b326fbc3908d57c0fed8074fe2286a93256d360fbf,2025-07-23T13:34:12.610000 +CVE-2025-20308,0,0,371939e8395b23c274f3b1b326fbc3908d57c0fed8074fe2286a93256d360fbf,2025-07-23T13:34:12.610000 CVE-2025-20309,0,0,94007e1fb11a791c6ba09a860b1df0ccb261944c8d118491b5a803627f33a93f,2025-07-03T15:23:28.870000 CVE-2025-2031,0,0,f0e6a81edfa1417e63c121f9ecf488da08992c1c9a6c102e64ae87468bb47def,2025-05-12T20:56:38.933000 CVE-2025-20310,0,0,ecff3dd677283899194911f7b4401feff49c537f670936a5a03c1400a237e149,2025-07-03T15:13:53.147000 @@ -291240,7 +291247,7 @@ CVE-2025-29476,0,0,3010ae735c879d92a342e7748811b3946ae8287c6c80f89374bb498690e8b CVE-2025-29477,0,0,ed82737459abd8702e931f1c75e84bf87de7b88cc3a00edc818a74f5a080759e,2025-06-18T13:55:45.723000 CVE-2025-29478,0,0,95539760950ade4571816f9ae6141a29c105591902e01f13a4661b18fef5d518,2025-04-08T18:13:53.347000 CVE-2025-29479,0,0,729ebc51cda55a12446526775028ebe3993e9c2eba2c006a3ccde1a3f431c976,2025-04-12T17:15:15.363000 -CVE-2025-29480,0,0,fccc80452a403cf5c99938bfd7c9eaaec06c05c7e6df0c61a508030330f44afd,2025-04-15T16:11:16.913000 +CVE-2025-29480,0,1,f40e4443135e8e931f4ff9bc89a84cdbf2860a6703d31ad13b84516d8bc60bff,2025-07-23T15:15:30.723000 CVE-2025-29481,0,0,651478cdf11b2f30dcb5729a22b173656bea0fb1d0d7df14d7b431abd3589a83,2025-04-15T15:42:59.650000 CVE-2025-29482,0,0,2cab37c54d13cda86887e1c0060157c6b1c882b7c4856799cb0258ba73174691,2025-04-15T16:10:44.037000 CVE-2025-29483,0,0,a44df1db1a75ca4ccf8a0bab57f388d77d71341421d00a01658dce0d1318836c,2025-04-01T16:08:17.700000 @@ -292989,8 +292996,8 @@ CVE-2025-31696,0,0,7181c70430e7f11f94551e571b933443a77c74627eab2d3af9d5a2722d8bb CVE-2025-31697,0,0,d2f6e5dae8beddd7adbc933b42660d8199d000a2c4970c75b74c3c6a7e4fd487,2025-04-29T16:15:34.633000 CVE-2025-31698,0,0,87c4ddeb0134fca1c51de33abe36496f95c1af2daa78c31dc17300427f35b06a,2025-07-01T20:14:42.687000 CVE-2025-3170,0,0,afb2bda5dd4e3285c33c62d49a05a12fd30d05e815744685a436b70b7583067d,2025-04-08T20:52:02.413000 -CVE-2025-31700,0,0,04338e19b5046232f519fbf325e592e70262c8c38ccad5503b4bd337fb4e288b,2025-07-23T07:15:24.987000 -CVE-2025-31701,0,0,22d63d477985f7313ae9d223299b0c7fd2c2f0e1c18484039a66fcd39de2d1b5,2025-07-23T07:15:25.393000 +CVE-2025-31700,0,1,dce5446bf4d1726a711c0f3113049e0d3e2aa0daed1a780375c435f26d36a40d,2025-07-23T15:15:30.970000 +CVE-2025-31701,0,1,4adeaa8fdd68668e276011417855f20b7c033e832c28ba91d57589dde859607e,2025-07-23T15:15:31.087000 CVE-2025-3171,0,0,facd85de14a5feadcffd67276b1dd3aaa07eb8c0a878fc188d12f11d57d8217c,2025-04-08T20:43:42.857000 CVE-2025-31710,0,0,66b943a0cc10a097358c13445d1f5df7386c2942496f3871e72b75f2365fb784,2025-06-10T15:15:23.847000 CVE-2025-31711,0,0,a1e429f12e9dd794426c9c92b102152b28ef2a4735f38b55311c0d017b7aca8b,2025-06-10T15:15:41.490000 @@ -294133,6 +294140,7 @@ CVE-2025-33005,0,0,cc36f120cbed36c030ac1a468cb0a7afdae6956296ad02b259f7e3a82ab30 CVE-2025-3301,0,0,b2cbbbf942710dc17dd30bf45e19011afe7becbc724cdeebd3bb45dd2691a5aa,2025-05-02T13:53:49.480000 CVE-2025-33014,0,0,ddae9e7363e518c616d55ee851919e31437e4010c82dfed728b23bb94f98a06e,2025-07-22T13:06:07.260000 CVE-2025-3302,0,0,80e8c3047a64b0011a10d189db2e4065f571217a3046dfb0e9c9d79b74e71566,2025-06-12T16:06:20.180000 +CVE-2025-33020,1,1,467001a78a2de0f7fdd0092cf681186cad859ffa5a6ec3451b2afac6a8b3107d,2025-07-23T15:15:31.247000 CVE-2025-33024,0,0,a929691d5533595a80202115459e86f84fc81996ba9c41d2a68880f3e6fcf59f,2025-05-13T19:35:18.080000 CVE-2025-33025,0,0,4b295e88dd02f429bce7f4aed7e0b1b7ea585aae960bbc6de9d4364036c40d6c,2025-05-13T19:35:18.080000 CVE-2025-33026,0,0,16823ea87e15ed5dd06862f606f290dd47fd68e96dd8b001f96144de8d0bef0f,2025-04-22T17:37:37.900000 @@ -294171,6 +294179,8 @@ CVE-2025-33072,0,0,da8dbb3f32bc92a4fea66cbf1913465f4b8680e98b695ceda185e1985ccda CVE-2025-33073,0,0,a0663af921914a5fb8eed42aaea3fda79b7c589f80743ebb1e1600be9b52f5a0,2025-07-10T16:03:37.580000 CVE-2025-33074,0,0,18fcd41dcb3c6273c73253eac7fa48f9c3a067330384af16f609b96399dd2bb1,2025-05-12T19:42:26.413000 CVE-2025-33075,0,0,1abac72358e5a5310ad3884d369405184c5b8dbdc0638a09bcb81b5c3cefb34c,2025-07-09T16:46:06.693000 +CVE-2025-33076,1,1,7ba2417897b29db40a262c737a870bfea83d56417e0cd21a29774e5926a079cd,2025-07-23T15:15:31.397000 +CVE-2025-33077,1,1,4a228f375c6a11db7abbc2c7ec096d6f78c4fb2e5a216e522857a07e3325f0b1,2025-07-23T15:15:31.540000 CVE-2025-33079,0,0,1e4651240e39e7fec62de5fbc9b5c0572a8e849a3e4ceef1cd2352f3faf983e0,2025-06-09T18:49:31.260000 CVE-2025-3308,0,0,4b8d71911211f133728a91e073b25c990ecfbff65585df599965a7e80c999bcc,2025-04-08T17:38:09.607000 CVE-2025-3309,0,0,7325978445055221f9794565a82ef91ec3f38daa8638a7cf620dd6aa80f6a64b,2025-05-28T17:31:33.590000 @@ -294617,6 +294627,8 @@ CVE-2025-36104,0,0,c9e652d59f5185dd37085d4a607f4f60343bbd3b0c5fb12feaa7fe0814d4b CVE-2025-36106,0,0,69e44d87688ba269bd5be0135f105c8865976369a7fa84a94335bcae2a86a785,2025-07-22T13:05:40.573000 CVE-2025-36107,0,0,1cf514ca0ff127c5dbea7064403e02d3cf203c831abe2c875c318d852c83c522,2025-07-22T13:05:40.573000 CVE-2025-3611,0,0,af8c03fabc0cb26da4d67c2ffa94c7fe04a3ec72fe85b993092d516946b525af,2025-07-08T17:11:34.797000 +CVE-2025-36116,1,1,c01c357288d97233e7a6e2c569f2b41af08251103459039688c915dd7ac947ae,2025-07-23T15:15:31.690000 +CVE-2025-36117,1,1,ca3146e72fed52537650aa4df563d131d10248ee12cc977cf9cbe205111185ea,2025-07-23T15:15:31.867000 CVE-2025-3612,0,0,b3e7e1fd46c9147c27f3feb15d1a5ba8eabce3f8bab41f1f78e6d74dff7b1b50,2025-04-15T18:39:27.967000 CVE-2025-3613,0,0,9c314abbc6473987a4462c7f86d0ede7026d1a1d89f3e10127913343b31eedd8,2025-04-15T18:39:27.967000 CVE-2025-3615,0,0,8fdf4606cb6a0284ee0e09827c413ea146851550983dc6357a6b31a17ed36258,2025-04-17T20:21:48.243000 @@ -294657,7 +294669,7 @@ CVE-2025-3651,0,0,30e087cb1671b81c1bf0c1d2a4d51e77f706a32948b7aa67dbe7688506dce6 CVE-2025-36512,0,0,573e568f2f4f660f2fde1639a870920e6db92c55669dfc71499152ce12934342,2025-07-22T16:15:27.117000 CVE-2025-36513,0,0,40997ded6ccfa9f42a498c7fa3aba63677e185863eb779042a0e6b33a18b51a9,2025-06-06T14:07:28.330000 CVE-2025-36519,0,0,3a4d6f4137f15e2668d747832a5e9059e9f4241d7c90d7835bd0ba19f6e7da32,2025-06-26T18:58:14.280000 -CVE-2025-36520,0,0,d50e75b8396a7b4ef12eeea64ad9556ef0cfd576b3addfc4c53891587eaf1543,2025-07-22T16:15:27.320000 +CVE-2025-36520,0,1,9544016b0410b6049343e6541c653cd2ca00c29e80632ba0ae9bf507128914ae,2025-07-23T15:15:32.037000 CVE-2025-36521,0,0,76dbe5c9e005eebc45d03f4e270884a68d88e62c1e707e433be80dfc20224dd6,2025-05-02T13:52:51.693000 CVE-2025-36525,0,0,304058dc6057ec0d8f22d43f92f7c943e71e5e18bc158b199ea34013a3ed45ac,2025-05-08T14:39:09.683000 CVE-2025-36527,0,0,760bc907999d36f8a046dc03eb19c07cc3891fbdfc35cb8c53858aa720a6ac60,2025-06-16T15:15:28.320000 @@ -295973,6 +295985,10 @@ CVE-2025-40591,0,0,287b7cab1fd76e8adb3aa980b49a631f0bc9062780824cad9dd2f0ff13f69 CVE-2025-40592,0,0,d167b00de1483c951fe43cc552b62b49543eff58159af12bb6823a6122401016,2025-07-08T11:15:29.330000 CVE-2025-40593,0,0,fc05c6a5fd94f322d4859899df3496875992167f41cb7914cff600ee12352a27,2025-07-08T16:18:14.207000 CVE-2025-40595,0,0,e8883618ba87c7020b44e8c6f164b0155ef7e7a3cf9c54a337a593438f28d611,2025-05-16T14:43:56.797000 +CVE-2025-40596,1,1,8c2473471ef88781096750cc77aee4782fdeab16d455a89263f423e727fce9aa,2025-07-23T15:15:32.140000 +CVE-2025-40597,1,1,b54250f53f98d48395b9a2fe99904dc3e233354cc17840e0cd4ebed52d7cf567,2025-07-23T15:15:32.320000 +CVE-2025-40598,1,1,c5866aa1d5fe041ef96f3c42070b4b1d267e77254befe222e967fefc7e18abba,2025-07-23T15:15:32.490000 +CVE-2025-40599,1,1,0fe9991983419b34e5e9b0b72ee10e4cd18e9e28ac8c6c306e70aed849359a8e,2025-07-23T14:15:33.090000 CVE-2025-4060,0,0,170985bf8f2f8cc428b363944749e5a7390ec03c3ff9ebf1391dace27bffb441,2025-05-09T19:34:16.987000 CVE-2025-4061,0,0,38d10b753ff5d559244af6fd3081a54533e11210e5e1217338182a3bb0bb72be,2025-05-09T19:34:08.123000 CVE-2025-40615,0,0,fb669980e98609bbda6816a2ee11ac960b4e28e8f364a76e361f7ee6d07e9dc9,2025-05-02T13:53:40.163000 @@ -296399,7 +296415,7 @@ CVE-2025-42953,0,0,81cee349ca1b0595ab280c2d4657fb9a09934d5e69f66ce05ce3b45424d41 CVE-2025-42954,0,0,1c8684be31dbb867014015e5ed8da212c2280672b5b4c5882c5713c126d72f2a,2025-07-08T16:18:14.207000 CVE-2025-42956,0,0,4172d0a4a696fcfc82d91a78ae89186350161d670dcbf4766feff578b0556fe9,2025-07-08T16:18:14.207000 CVE-2025-42959,0,0,e9837cc3f9761a3c96be8a303a62ec0c064ef7fbceeed0cb603057ff0f864d46,2025-07-08T16:18:14.207000 -CVE-2025-4296,1,1,46446323982bdf81a7714e9be44ff9debb6cf6abacee02ad84d7d3e0e08b8b4e,2025-07-23T12:15:27.640000 +CVE-2025-4296,0,0,46446323982bdf81a7714e9be44ff9debb6cf6abacee02ad84d7d3e0e08b8b4e,2025-07-23T12:15:27.640000 CVE-2025-42960,0,0,1e56f4fe40d736bfe01ea1ffd516cddc4ae1b86a0f8f180f9bd9bba1f5ed6647,2025-07-08T16:18:14.207000 CVE-2025-42961,0,0,58f576f912f46ee1a638380a445f36b09ad3533d144e36ee4a306df44e2cc875,2025-07-08T16:18:14.207000 CVE-2025-42962,0,0,cbbbefe4eb6f65e2a857f6e3ac6e5cd7d508fb9f93720b389c9f0ac3cbb19c2a,2025-07-08T16:18:14.207000 @@ -296735,7 +296751,7 @@ CVE-2025-44083,0,0,9046793f34bd6f929b6235055941a80a823b0cd56db66235de77c34aa9f0f CVE-2025-44084,0,0,9e514baa1a1b4ecd455bdc468a519f4662e489440f358688b169a12eb8124052,2025-05-30T16:19:21.193000 CVE-2025-44091,0,0,1bbce08c3d080c11ff7ce8d9935a282c0e574dcf8b6198290c34e4b73fe4ddc4,2025-07-02T15:52:20.513000 CVE-2025-44108,0,0,7f74cb8563a8e2b89a17733e62268b2a8dcb711594c4c578db48bdedf50f42d6,2025-06-12T16:26:10.203000 -CVE-2025-4411,1,1,f91533f272b838e331300ba1c961836f03fc774fc29e0688148aea2bd616ea0d,2025-07-23T13:15:25.167000 +CVE-2025-4411,0,0,f91533f272b838e331300ba1c961836f03fc774fc29e0688148aea2bd616ea0d,2025-07-23T13:15:25.167000 CVE-2025-44110,0,0,40655c12d535de96e9af0530c97aab6193addb0ec4d9bc7565ff96634b123dda,2025-06-12T13:56:06.197000 CVE-2025-44115,0,0,f4048a768a9c3bfb169ae566f384c1b85dd60f51eddb9136d8a89bd9c2a57faa,2025-06-13T17:21:25.870000 CVE-2025-4412,0,0,8c8c59397117a84a167d36fb79f68c5cd99b79261327a1fb082cf24faee6cc19,2025-05-28T15:01:30.720000 @@ -297160,6 +297176,7 @@ CVE-2025-4607,0,0,7929f7497a2f3fdbdefa5c40c24e8dfb722bcbca57929b42733b89c15e0bc1 CVE-2025-46078,0,0,2fc8a269b5a28c0015e225ca3c3d8f64c503abc0c5a8ea5ce240137e0c4c6776,2025-06-04T19:59:09.353000 CVE-2025-46080,0,0,e77557f865cb8f0c8a7b01f1f6fbdee1ca66bad8ebda2925b71b207a25112a43,2025-06-04T19:59:02.890000 CVE-2025-46096,0,0,e46e913b0fe20a27c7a6297a3680c5637edd7add55053ff1310b775a32e2d62b,2025-06-23T14:08:37.750000 +CVE-2025-46099,1,1,fc2c5cd9613e8e54544669aa0ebd5f73ea215f54b980d6602ceda58d26258832,2025-07-23T14:15:33.490000 CVE-2025-4610,0,0,d61d953fe0fd6f0d2b21233839836df5133468380db75b47c2a05d78020b6b82,2025-05-19T13:35:20.460000 CVE-2025-46101,0,0,6d44fb5fd8a3dd02cb4ccaef14f5f6922e3d3a0251e26986917804d7cd47634d,2025-06-24T16:15:28.403000 CVE-2025-46102,0,0,71408c6823e4563ce89dfc2be3377d691bd8c7f84a15d9ed1dc887da4378e2d9,2025-07-17T21:15:50.197000 @@ -297274,7 +297291,7 @@ CVE-2025-46349,0,0,1714a97271744ee922f4bd027ddde23d095fab400e525c7e78a72152293a3 CVE-2025-4635,0,0,dbd97ddcf9f06e6a17bd98831167ca852ef57632eda54b68ef8eca53b0008e92,2025-05-30T16:31:03.107000 CVE-2025-46350,0,0,e9c2d732d02d04db30379a06f4d06a3199d3f19fe29e090eebfdcec4aeb7f535,2025-05-09T13:57:36.823000 CVE-2025-46352,0,0,618391598a4bc31a1d4677ab5a474da78aeac6261ac4ae8b26099a8c01185f09,2025-05-30T16:31:03.107000 -CVE-2025-46354,0,0,33616fe4aa648f8f07c7f9c4cd7e0b999961a73ba57f8f3bd187a366451b8c26,2025-07-22T16:15:29.697000 +CVE-2025-46354,0,1,a6e3d9bd465e067fc0210009d75ed8edcbe4a61f154de2242fd9d4d143ed854a,2025-07-23T15:15:32.780000 CVE-2025-46355,0,0,5a064c3f281b9d23670e4671cbb55d7d2442f434945aa8aa1f5e2ef16f08e8ac,2025-06-04T14:54:33.783000 CVE-2025-46358,0,0,0be29f1609d552944cbdd8572b2fc83c559b739741e7ce400140f44aa3c6635f,2025-07-15T13:14:49.980000 CVE-2025-4636,0,0,42769483161d9081ca44d7da54fb93931edabd656065d5921f77e2f9979ff65e,2025-05-30T16:31:03.107000 @@ -297957,7 +297974,7 @@ CVE-2025-47245,0,0,7b2364c00905e8788c2fdd2e6bd15f21012a4e700ac145a877fe64795e90a CVE-2025-4725,0,0,66c4a60d0e4f4a7fbec206db155bcf8ac0f31d5e93feae58e116a2133abd51a4,2025-05-27T19:51:39.457000 CVE-2025-47256,0,0,c5f61341ce1b30960f41faf1ef0c8059c16b1b83f0508df1bf27b84fa8e3d8ae,2025-05-07T14:13:20.483000 CVE-2025-4726,0,0,984a3badb3ae6972f992c3a68c560c7dfd9d5fe06debdb311c424144763624af,2025-05-27T19:51:34.753000 -CVE-2025-47268,0,0,4a46b9885e97102b8415ee3e4814f6839dc4a606dc76c0dedcf7a1f41c27c030,2025-06-13T18:21:42.427000 +CVE-2025-47268,0,1,c1114e08d61b16d338a84af56234df9f2e709a5377cd54080e025f1c640980d2,2025-07-23T15:15:32.887000 CVE-2025-47269,0,0,b9d52d64e2c0cec1ecdcd2f4d7408887dda629b4e369e1e7b2409608db43df35,2025-05-12T17:32:32.760000 CVE-2025-4727,0,0,8969a844acb51d1753bc87877879fed95de1d0baf44d432214b9cd44fd598ac5,2025-06-23T15:14:50.350000 CVE-2025-47270,0,0,f7de4b1bbad67df8d0ed8562ed81ad54a4a617d8e905a95b0012c5c493a9cba4,2025-05-12T17:32:32.760000 @@ -298793,7 +298810,7 @@ CVE-2025-48494,0,0,0329dcb313613e53f258f49f9571ad3f690e1a097f931b0aba423ffd21693 CVE-2025-48495,0,0,231a0a2df8efd4f811988b128f1772192e88580d1043466f8b361c6491441d56,2025-06-02T17:32:17.397000 CVE-2025-48496,0,0,928f57dde76bd5c33e78704f772ad597574444952a08bd78d9f4c3630309e71f,2025-07-15T13:14:49.980000 CVE-2025-48497,0,0,87864234e61d762b45107c5a61a3b1913d445c275f7eb7f6e202fd8227edee1b,2025-06-26T18:57:43.670000 -CVE-2025-48498,0,0,094c07217cffc3d22cb60399dd576cb20f3530b630d5e18198ba09fdb941f4ff,2025-07-22T16:15:29.877000 +CVE-2025-48498,0,1,5ddec49ba787b84cd484a871ae8d010cb2e728a9064fce629c95666de58793bc,2025-07-23T15:15:33.083000 CVE-2025-4850,0,0,f4734de71688bb34b47f04cb41c5af0cc568cf46c9e6cb90745360a2b3c7693b,2025-05-24T00:57:35.620000 CVE-2025-48501,0,0,5c57adc3870af6b8ef95f48e7913473030230717b94ab82a9be37e526f077c85,2025-07-08T16:18:34.923000 CVE-2025-4851,0,0,e5a9ac67f494616a05e2f84fff689d174d4a8c96dcdf95534865dd01a2cf2a1b,2025-05-24T01:03:29.400000 @@ -298998,7 +299015,7 @@ CVE-2025-4896,0,0,eb43857d84c4e3c0ca9bf4ac15086d7606c87aaeb17237d45e10278d343111 CVE-2025-48960,0,0,6388a249faff67cc5a4d2fa4bca8d3989a10ec11030dddacff72a168ec2922af,2025-06-04T14:54:33.783000 CVE-2025-48961,0,0,44e1cee69124b46bd6b795101bc0b7c9c4699ce00a138653c66e2e8aeff53be4,2025-06-04T14:54:33.783000 CVE-2025-48962,0,0,4b2d64282106eed58f9e4647aa4bdcfb03945a2468e53d084f7081033bf14af0,2025-06-04T14:54:33.783000 -CVE-2025-48964,0,0,c0cb1ba216b06fb84a7dd49780a18d131565e07ddee75c3c22da893c801cdeaf,2025-07-22T18:15:36.020000 +CVE-2025-48964,0,1,a808fc9f97574e806d0e25670f7cd4ad50c19353e272784dc4035a2d9fd01795,2025-07-23T15:15:33.183000 CVE-2025-48965,0,0,83f4f4c08e3bb683270d3cb074f16e0686d72d3b05cf6c5e386f203378382b5a,2025-07-22T13:06:07.260000 CVE-2025-4897,0,0,104730cc5ad0680860a774881c7ad06896ad7afe2bb00c017480a43cf79011cd,2025-05-27T16:30:05.410000 CVE-2025-48976,0,0,0762aea215a5cf1c20d5ae5e5a623e752328a4a748ef4fc1e4d0bd03e0f922fd,2025-07-15T14:21:41.997000 @@ -299746,7 +299763,7 @@ CVE-2025-50123,0,0,cc9bd0c42246e706ec7c5f334eb41580d9a82d5e6b86833604cee08f6e1e1 CVE-2025-50124,0,0,85515de2fe2923dbd47169bb58356889cbe2269ace9e4d1938076c902ea78806,2025-07-15T13:14:49.980000 CVE-2025-50125,0,0,0b2835d8a959a04a447f7f0aa0d2fb2ca19e76325bb2e7ea5cf6ecb84e96fb76,2025-07-15T13:14:49.980000 CVE-2025-50126,0,0,d439b22f62c4dc192173e4313bafe16130388b0ec639697a9626546426148390,2025-07-22T13:06:27.983000 -CVE-2025-50127,1,1,b5dd7bd01e4997ac32fbc4b0692ae1f201e46851834f8db4a3e8df5a920a8c59,2025-07-23T12:15:28.050000 +CVE-2025-50127,0,0,b5dd7bd01e4997ac32fbc4b0692ae1f201e46851834f8db4a3e8df5a920a8c59,2025-07-23T12:15:28.050000 CVE-2025-5013,0,0,39609cc7be62bab5e0dcdb82a67ea2f685567abbda8b6a9de4ad396fb54bfac3,2025-06-17T14:10:53.597000 CVE-2025-50130,0,0,48cefc39d33638bb0480f92517ca8596c7aacb8a73f0e3c4912aa860c32d7cf0,2025-07-08T16:18:14.207000 CVE-2025-5014,0,0,9c8607db6d9e14448cfdf407e465c7bfde043729f553b3e6d26ffe1d0d8748b5,2025-07-03T15:13:53.147000 @@ -299979,7 +299996,7 @@ CVE-2025-51862,0,0,f7959239790f7c45e0a7db069b3918b7e8b1160452fb34e748a4e3bd4bf03 CVE-2025-51863,0,0,a44f49ebfb40daa1419107384d0551a68f14bb585ea2709266300f14b8bdef08,2025-07-22T16:15:31.683000 CVE-2025-51864,0,0,e935da35f73a5fa18f21d6fbd574154133505ea3019df57e7d80461ec2bdf309,2025-07-22T16:15:31.893000 CVE-2025-51865,0,0,908a2b8487d9a36fbeea1e697c382d7b1e66164ad583dada27c007b6137b8ce5,2025-07-22T16:15:32.090000 -CVE-2025-51867,0,0,ce8dbd36e7ee4316e9c943879fa8561e2351598c7392b98748beb24be77b5edb,2025-07-22T14:15:36 +CVE-2025-51867,0,1,50dc510f6ed2a4f1c088fc69befa7770139b984b7727d19f8a96e130237b1b5f,2025-07-23T15:15:33.450000 CVE-2025-51868,0,0,3038741a9ee93f44555f2e14f08579d062f14125fc2bd6787c92f9bf10b57a84,2025-07-22T14:15:36.113000 CVE-2025-51869,0,0,150883a3114bb2cd61741329847c9be966dbcdf06c5cbe2e45d26d3c3d8b44c0,2025-07-22T14:15:36.270000 CVE-2025-5190,0,0,b83fcbe64867ed5f66064afe0985f0f8e1099ccb823b90fa56196e26e3f4bf39,2025-05-30T16:31:03.107000 @@ -300591,7 +300608,7 @@ CVE-2025-53519,0,0,f205a900351bede4a67110e091f17d39ce7622fb4ae9f8a2f9899121137b8 CVE-2025-53525,0,0,62c057f03cbeb70a344e67d4d0c7cc980c9dc9e99d597eab290f49009834cd81,2025-07-10T21:17:53.667000 CVE-2025-53526,0,0,5f981a713397cf87c60d4483e797a2045322cbe752682fafb5e21844724678a6,2025-07-10T21:17:00.730000 CVE-2025-53527,0,0,a23333bfc502e866b26cc1a6e07c737ab86baadd058fbca83f0c0c78ef6520ac,2025-07-10T21:16:47.187000 -CVE-2025-53528,0,0,e27cc8f54a062bcc8a0c5f5e2a9c2be05b47d2442529b6e0ac810a6a58e71452,2025-07-22T13:05:40.573000 +CVE-2025-53528,0,1,32f1cfdd13275dacaef538b3dfd7621cb5108dbe9bcfc33523ed74985b1dfd09,2025-07-23T15:15:33.743000 CVE-2025-53529,0,0,5d4ee1e3f0a870cc8b9c15e3ae783ea97591811dacaf5b71ca632a8b63f3aa8f,2025-07-10T21:16:36.407000 CVE-2025-5353,0,0,dd46960e1f427bdbbf95b7db25861021bd6a105d1964762d36bb387898435214,2025-07-10T15:08:37.390000 CVE-2025-53530,0,0,d7b925dd3e4c2340b96932a2e5a6cf84b1fa14fc858b73d4ba3558324ba90217,2025-07-10T21:16:15.440000 @@ -300897,6 +300914,7 @@ CVE-2025-54079,0,0,4b5b7350d8d20448ec544466332a3a57c456eca1368c1dbb0ae94ac42ab1b CVE-2025-5408,0,0,4ea50252a3a1c6dbc6b050284f6928a887a07f0d5ebe1dc1421f53a664871129,2025-06-02T17:32:17.397000 CVE-2025-54082,0,0,4efa547bbe30a474a29da1327cd559410bff95d8dfe4b7bde8b1d59cc508b667,2025-07-22T13:05:40.573000 CVE-2025-5409,0,0,e19327c856251bb6630e10234de5c371173630bbc620fa2c6779542a53a31980,2025-06-02T17:32:17.397000 +CVE-2025-54090,1,1,36b9565dbcffec9d5c973088c5d541ce6d8d523447fade2beef6025c831fe7fe,2025-07-23T14:15:34.177000 CVE-2025-5410,0,0,60de637176ae188b21c928ddf29aeb5cb2d5057ec1cb9930e2bf7416d8e02e6f,2025-06-02T17:32:17.397000 CVE-2025-5411,0,0,ad8be7495abcae78273f6c1ce2f42bd21b73f6b28a6ccf317309fd27de8359de,2025-06-02T17:32:17.397000 CVE-2025-5412,0,0,cdedc82e39d6eb66906e9774b875480255e558374703496c9f6705513eee4b45,2025-06-02T17:32:17.397000 @@ -300909,7 +300927,7 @@ CVE-2025-54129,0,0,ef1d8f32e2612d931978824ee75790b11835c3e242552f7c6df5dfc788121 CVE-2025-54134,0,0,30889b3f1336667bd31985cf068fe60ada79e0ac54c75e3cd0b0ff9c5155220d,2025-07-22T13:05:40.573000 CVE-2025-54137,0,0,a38bee52be5134441cf252645e2090c5a771d35b804ddd90aac9b23a541d9d87,2025-07-22T22:15:38.097000 CVE-2025-54138,0,0,5c6080e991ac8620ff3db64e995c7b0da911af6b7dfa0fef9704061007ff9e53,2025-07-22T22:15:38.240000 -CVE-2025-54139,0,0,ac6888e6ca25c72246d54f7451bd3371519b6022828ef6de89c29dc2151c8dc7,2025-07-23T00:15:25.737000 +CVE-2025-54139,0,1,44c5aad0a70e54eb53c67a2d8a2f4744ea93e29dadad2681e25fd4b37c3f92fe,2025-07-23T15:15:33.890000 CVE-2025-54140,0,0,5af87dfcf71e280246aad085751f65b4b198188f2122b94f6ee27a351adda547,2025-07-22T22:15:38.390000 CVE-2025-54141,0,0,1d4bcd7624bb585e9773266cf3c84f80eeb234bbf5fe8cfb94d3e6ed8a10f7cd,2025-07-22T22:15:38.537000 CVE-2025-5416,0,0,266c845d49e2255fc5eb4cf11bdb985e393c0453b6b5daec439fd6bb188a82de,2025-06-23T20:16:40.143000 @@ -300924,10 +300942,10 @@ CVE-2025-5426,0,0,91d69104043a6386cfca11e8e329e92c24335e5efeef3d1a43c9e13795e344 CVE-2025-5427,0,0,5f63d9ad9dc6404e6fb72008382c641e46396609fcc52c5828eb2252185ffd4c,2025-06-18T15:14:51.873000 CVE-2025-5428,0,0,2e7c423ec5ae3bf4368570058331740a674fc62a4682da3d065e5fa91ab978f5,2025-06-16T16:18:13.987000 CVE-2025-5429,0,0,4fb90f6f61f001b2df63d98ac4a6940b3b8387c064a27049429bbaa8520457eb,2025-06-18T15:14:39.320000 -CVE-2025-54294,1,1,99d35b8b9bd94112ab8a68b14a7539ff4689093ed61b513ef05b3e0cab6a8963,2025-07-23T12:15:28.220000 -CVE-2025-54295,1,1,663b08a9d2a64fd8e544d7a7feeac1cd25f204334106621766d4391114c76f28,2025-07-23T12:15:28.370000 -CVE-2025-54296,1,1,7c125670182a5b4bee83d0d5a25997815b469609da7b96bb52885d15bd644249,2025-07-23T12:15:28.527000 -CVE-2025-54297,1,1,3d9804fb8f050969d1d6e29733607e22867ff50d2347202b512566ba4c3e5c8a,2025-07-23T12:15:28.683000 +CVE-2025-54294,0,0,99d35b8b9bd94112ab8a68b14a7539ff4689093ed61b513ef05b3e0cab6a8963,2025-07-23T12:15:28.220000 +CVE-2025-54295,0,0,663b08a9d2a64fd8e544d7a7feeac1cd25f204334106621766d4391114c76f28,2025-07-23T12:15:28.370000 +CVE-2025-54296,0,0,7c125670182a5b4bee83d0d5a25997815b469609da7b96bb52885d15bd644249,2025-07-23T12:15:28.527000 +CVE-2025-54297,0,0,3d9804fb8f050969d1d6e29733607e22867ff50d2347202b512566ba4c3e5c8a,2025-07-23T12:15:28.683000 CVE-2025-5430,0,0,0eb1babcf8d1008ba0c4b518e797e8a418d268a1c98e13323c1d397172d29254,2025-06-16T16:14:05.270000 CVE-2025-54309,0,0,6ec8a72b2ace9e068c214c2dc6143e6d51d7404df2d41e69d57344dbc3a32bd5,2025-07-23T01:00:01.893000 CVE-2025-5431,0,0,f5ef4b2894d947be9cba680ed0279161886dc4fb2bd6b3b30f2bbfb4395270f6,2025-06-17T18:41:10.970000 @@ -301456,6 +301474,7 @@ CVE-2025-6008,0,0,cf45d1b8877307f98a5e962959db4dd8b70df84c99522375a10c3d04cde082 CVE-2025-6009,0,0,78abb2d4f36e6029b865859c44e8b3b2ae426316eb8bf2e15ca3e33565c4ca16,2025-06-19T01:25:17.743000 CVE-2025-6012,0,0,26f2f66d87f45d6aa756cc004552cfa11ed42d44708395d664a6658fe8d21b45,2025-06-16T12:32:18.840000 CVE-2025-6017,0,0,cdf296e1429037cbf00bd284008bfaf96f2ac3ba0f0da1dc4e6958978cbc6e8e,2025-07-03T15:13:53.147000 +CVE-2025-6018,1,1,cd8028290a521802bda6195c99f7db5bc1d405adc2bf72dc6895f152e15e9887,2025-07-23T15:15:34.810000 CVE-2025-6019,0,0,bf632c485beb37dbe798f798f4eff0baa7c87b8abc0217b675bda9385ddb8133,2025-07-10T14:15:26.630000 CVE-2025-6020,0,0,c7eb26e482cfedaffa32238220a44d56acb9f2615c3e42a342ba0adb1b322aa2,2025-07-21T20:15:42.027000 CVE-2025-6021,0,0,66555e0b8723d7193b1b0ca96528d48d6f142e5928c987ddd9e91b3d97342925,2025-07-23T08:15:26.557000 @@ -301581,7 +301600,7 @@ CVE-2025-6169,0,0,24b56c63dd5c2b9799043dae6dc3b75a3e06e9ee630be707f681a9bb09cd5b CVE-2025-6170,0,0,b78aff7a1c8e8db8ce7aabd9ccc1b29ff578e0357c573a194099cb12287faea6,2025-06-17T20:50:23.507000 CVE-2025-6172,0,0,df5b11377ae2bcb860baea092fdadde3351cf8aeca30edf92e0d7977024948be,2025-06-16T17:15:31.503000 CVE-2025-6173,0,0,c070b1517acd95c5e869ebc2e1f1712fafd19138bea48c0324a49cddfc5a27e5,2025-06-26T15:57:47.900000 -CVE-2025-6174,0,0,57dbe531f015b956717e03874095eecd162ee9c479f8836b78cb8e0a538b333b,2025-07-23T06:15:28.223000 +CVE-2025-6174,0,1,2a7eb1c27f01f134f001c40a1c4df321bccf574548b44d40d21264a366e6154e,2025-07-23T15:15:35.080000 CVE-2025-6177,0,0,edd6b1d41a5c4b8e0408f6aa59fea86a8c8b780a92c52491789320f71941d7a1,2025-07-02T18:26:40.590000 CVE-2025-6179,0,0,42334162f4ea7781bf58c27d11fa5142617025c2a62fd9b39e81ec90028c3d21,2025-07-02T18:23:31.617000 CVE-2025-6185,0,0,93420679597ee9b6122b57535d8fd4967222a986aa26ad73f74df7ffea602aa4,2025-07-22T13:06:27.983000 @@ -302883,28 +302902,28 @@ CVE-2025-7951,0,0,2fe8ee9fb3dc62944d7dbe88c8b0ad03f4da7943daaa63e246a4525bfdd831 CVE-2025-7952,0,0,b94dfae7bdeebd2589a27fddcee16ab82222abaa7a75ebd898e5cf67a82a6693,2025-07-22T13:05:40.573000 CVE-2025-7953,0,0,3a2957e2eddf8a3cc7a9d916892231c9e9a68656acf1bd8e83e80c27a8fe6f97,2025-07-22T13:05:40.573000 CVE-2025-7962,0,0,f2bc3f10329a5a9b199a75f0420f89ed1540e3da720d96f10cb6addfdba1a9ca,2025-07-22T13:05:40.573000 -CVE-2025-8010,0,0,bef3e6a4849949e2b9f242a276452080405eafbc3c17a6eee4e4891daa1fd0a0,2025-07-22T22:15:38.873000 -CVE-2025-8011,0,0,7f821c224d002daa3d9423491a53b4f8734d509a50a7bcdedbd62278d1e7d5b2,2025-07-22T22:15:39.013000 +CVE-2025-8010,0,1,9f9b91829a3208a01ebc1bbaf76a64ff931aa92b1e0f96a71c584616d35d54a0,2025-07-23T14:15:34.913000 +CVE-2025-8011,0,1,2c714e6f5a67e9cdefafdb713318eab88e0d1c45fd2e4e74f38942c526b28399,2025-07-23T14:15:35.087000 CVE-2025-8015,0,0,5ed8d24b4d6562e1e05d14f6cca3dbaf537a71e3ee1431f3a63d9262eaced0c6,2025-07-22T15:15:42.113000 CVE-2025-8017,0,0,e904a7ed547c6c8a281b124fa5c492b4460bdaf518f508e832d2d65b847e7d88,2025-07-22T14:15:48.403000 CVE-2025-8018,0,0,a2217df3037dfc55a3cf901aba5f9fe4cbebe93e60b378e08ddc038685cd7415,2025-07-22T15:15:42.417000 -CVE-2025-8019,0,0,f7104353cb48d93be61a73fa48c51439c3a4f7fc7dbbe3054d9b425c5817f1c0,2025-07-22T16:15:35.907000 -CVE-2025-8020,0,0,ce678c17e02617236f9076b28193d31493f8d588a06567b3c4e4ebbd6d136f57,2025-07-23T05:15:30.590000 +CVE-2025-8019,0,1,a44ab7763cc2688072187e09c13115dcae2476db6470af6ad07e6fa7f4994981,2025-07-23T15:15:35.233000 +CVE-2025-8020,0,1,27a2f3ddfc0212db0fb2b275dbfe5513e7cc671486ae8b6cbb3f5320703ddf64,2025-07-23T15:15:35.363000 CVE-2025-8021,0,0,72c9c73fa270aa0d4977d04225f1025dc1c3cbefc3b82fce71677d9f6072c6be,2025-07-23T05:15:30.763000 CVE-2025-8022,0,0,b8f9973ed46686fe5be6d6610954981fe391cfb9761c8692378ba7efdea3087d,2025-07-23T05:15:30.933000 -CVE-2025-8027,0,0,f6d0a3fe99960a1e4a0d6db268d7616d0de689a893068631d8dcd1ac208a4c3b,2025-07-22T21:15:49.830000 -CVE-2025-8028,0,0,d86113b524cbc1b468fbf07d50116d1d24fa32198460a961252552a82955a75e,2025-07-22T21:15:49.953000 -CVE-2025-8029,0,0,33c3d81796200e988276a4d272659d16e88f20a1e173d83fecf87fc4d623b766,2025-07-22T21:15:50.057000 -CVE-2025-8030,0,0,83914efb6b40d951535300c7dedaadd9ca0e8979f43677dded184db420720472,2025-07-22T21:15:50.157000 -CVE-2025-8031,0,0,538ebb5e4efd35daea0c32b71d885e565815ee61696f8ec47ca567d0bf27a8f5,2025-07-22T21:15:50.257000 -CVE-2025-8032,0,0,779033680971fc7224dbc891053e870535cf363fbda264acf5bea43995b655fe,2025-07-22T21:15:50.360000 -CVE-2025-8033,0,0,0bd1da2ec85ba2ccc187db3378dfc50c969f8d89d59db7c6cff0baeb6fffda16,2025-07-22T21:15:50.457000 -CVE-2025-8034,0,0,e87f42e8a85a4f1ac16058a983cf4746e2092f30ddbf44ff29f46056851680f0,2025-07-22T21:15:50.560000 +CVE-2025-8027,0,1,f8faa7bd666d80d5896284e822e6ef0fa8e5aea89c397911fa8043e678c03ddd,2025-07-23T14:15:35.253000 +CVE-2025-8028,0,1,f271591d932c2b8a84dfcd1c8a6bd92681dca1e3696c488001a44d45d9aef71e,2025-07-23T15:15:35.570000 +CVE-2025-8029,0,1,05f43eb1a8f696b372fc2b637d10021a3d9f093f13b40d07c1c96346517212df,2025-07-23T15:15:35.723000 +CVE-2025-8030,0,1,b4fdc660f8ca299cab7b1b1929716476ed965ad57c2b2271f32aae56a61f4d69,2025-07-23T15:15:35.863000 +CVE-2025-8031,0,1,ebfe9af5e51552b73b2076bd6217e4a6eeb5ecd61c92b6dffedf79831b4a2130,2025-07-23T14:15:35.420000 +CVE-2025-8032,0,1,be8aa8820e513bf2869e0a0b6d131e173a3e3b6bc1a27b23b406b8fb17efcc23,2025-07-23T14:15:35.573000 +CVE-2025-8033,0,1,22cf63a6ff95fc1ad6bed510cf4c87807015d12080d4124216a7815c903a7f7a,2025-07-23T14:15:35.740000 +CVE-2025-8034,0,1,6b651522c50ef52ddcc948f6d90ebf0e810155566e30a3ceb898dddce6b665b8,2025-07-23T14:15:35.903000 CVE-2025-8035,0,0,5ee6db17babf7065b3c9bd95c53fbb3884849d5c13b64f5ea0f959c6e5bba886,2025-07-22T21:15:50.660000 -CVE-2025-8036,0,0,c358e1d2229eeceb9535f5a0c7d0685ca921e30577d01c2ab2001c18c545e2f3,2025-07-22T21:15:50.760000 -CVE-2025-8037,0,0,6c6d55305223716c8b73db766ad7332e0c917a8c040965d423c26597911fae0c,2025-07-22T21:15:50.860000 -CVE-2025-8038,0,0,0358abb9b5755ca19a1686d4c7a93e28d827f60ee9f094ea7d565f7176026257,2025-07-22T21:15:50.960000 -CVE-2025-8039,0,0,5371986f40ba30b4079232f37c691a736c185ef47c3487d0c7defda85131447d,2025-07-22T21:15:51.060000 +CVE-2025-8036,0,1,6cc98334bf76aefaa774c9b5b6428fff08f0ff7d4b5b8200253225d004d446ae,2025-07-23T15:15:36.003000 +CVE-2025-8037,0,1,ceaba4790727a1e8ca3a0398bebbf1e40430d07a34d8fa7c4b4455a99d568a79,2025-07-23T15:15:36.143000 +CVE-2025-8038,0,1,265e2ffb742b0640b7f729e712b1197aa750cfab5fd6a9a20de813b9f7038668,2025-07-23T14:15:36.073000 +CVE-2025-8039,0,1,4a93325fed58b68153f33c5b88682c2dd0bf6d6215d5251174a99d10873826ea,2025-07-23T14:15:36.240000 CVE-2025-8040,0,0,5aaa58a6d21ebabe928488aa63f7228a17b9318e3ed78827bc7f55dcd2360f95,2025-07-22T21:15:51.163000 CVE-2025-8043,0,0,f277d17ee1929df1f7da18c4cdbfe0bee1116d601b44d4ce70b76b58a7f54290,2025-07-22T21:15:51.263000 CVE-2025-8044,0,0,608740f3208d786e973fa4b0b48fffb0e0786f67fc8bd96d4e084ea9733f2128,2025-07-22T21:15:51.363000