From c619c655d64f4d130f09b0df3320fb1e9fefc5ed Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Sat, 2 Aug 2025 23:58:55 +0000 Subject: [PATCH] Auto-Update: 2025-08-02T23:55:11.882424+00:00 --- CVE-2023/CVE-2023-322xx/CVE-2023-32253.json | 60 ++++++++ CVE-2023/CVE-2023-322xx/CVE-2023-32255.json | 68 +++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23276.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23277.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23278.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23279.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23281.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23283.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23284.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23285.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23286.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23287.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23288.json | 56 ++++++++ CVE-2025/CVE-2025-232xx/CVE-2025-23290.json | 56 ++++++++ CVE-2025/CVE-2025-84xx/CVE-2025-8493.json | 145 ++++++++++++++++++++ README.md | 25 +++- _state.csv | 19 ++- 17 files changed, 981 insertions(+), 8 deletions(-) create mode 100644 CVE-2023/CVE-2023-322xx/CVE-2023-32253.json create mode 100644 CVE-2023/CVE-2023-322xx/CVE-2023-32255.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23276.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23277.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23278.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23279.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23281.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23283.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23284.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23285.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23286.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23287.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23288.json create mode 100644 CVE-2025/CVE-2025-232xx/CVE-2025-23290.json create mode 100644 CVE-2025/CVE-2025-84xx/CVE-2025-8493.json diff --git a/CVE-2023/CVE-2023-322xx/CVE-2023-32253.json b/CVE-2023/CVE-2023-322xx/CVE-2023-32253.json new file mode 100644 index 00000000000..54da7b2a9c8 --- /dev/null +++ b/CVE-2023/CVE-2023-322xx/CVE-2023-32253.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2023-32253", + "sourceIdentifier": "secalert@redhat.com", + "published": "2025-08-02T23:15:24.770", + "lastModified": "2025-08-02T23:15:24.770", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session setup requests, possibly leading to a denial of service." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-413" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-32253", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2385886", + "source": "secalert@redhat.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2023/CVE-2023-322xx/CVE-2023-32255.json b/CVE-2023/CVE-2023-322xx/CVE-2023-32255.json new file mode 100644 index 00000000000..e8c47883a49 --- /dev/null +++ b/CVE-2023/CVE-2023-322xx/CVE-2023-32255.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2023-32255", + "sourceIdentifier": "secalert@redhat.com", + "published": "2025-08-02T23:15:25.820", + "lastModified": "2025-08-02T23:15:25.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup request with an unknown NTLMSSP message type, potentially leading to resource exhaustion." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "secalert@redhat.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-772" + } + ] + } + ], + "references": [ + { + "url": "https://access.redhat.com/security/cve/CVE-2023-32255", + "source": "secalert@redhat.com" + }, + { + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2385884", + "source": "secalert@redhat.com" + }, + { + "url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6d7cb549c2ca20e1f07593f15e936fd54b763028", + "source": "secalert@redhat.com" + }, + { + "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-703/", + "source": "secalert@redhat.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23276.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23276.json new file mode 100644 index 00000000000..f82c7a5cc13 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23276.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23276", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:44.290", + "lastModified": "2025-08-02T22:15:44.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Installer for Windows contains a vulnerability where an attacker may be able to escalate privileges. A successful exploit of this vulnerability may lead to escalation of privileges, denial of service, code execution, information disclosure and data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-552" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23277.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23277.json new file mode 100644 index 00000000000..96279a31d38 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23277.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23277", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:44.487", + "lastModified": "2025-08-02T22:15:44.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.3, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23278.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23278.json new file mode 100644 index 00000000000..c982a3cfff3 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23278.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23278", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:44.657", + "lastModified": "2025-08-02T22:15:44.657", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index validation by issuing a call with crafted parameters. A successful exploit of this vulnerability might lead to data tampering \u00a0or denial of service." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23279.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23279.json new file mode 100644 index 00000000000..3333f88f5e7 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23279.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23279", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:44.830", + "lastModified": "2025-08-02T22:15:44.830", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, denial of service, or data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-367" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23281.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23281.json new file mode 100644 index 00000000000..9d81bfbe3e3 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23281.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23281", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:44.993", + "lastModified": "2025-08-02T22:15:44.993", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can win a race condition might be able to trigger a use-after-free error. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, or information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.0, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23283.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23283.json new file mode 100644 index 00000000000..959401b0ee9 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23283.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23283", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:45.160", + "lastModified": "2025-08-02T22:15:45.160", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23284.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23284.json new file mode 100644 index 00000000000..1b22b5b8d43 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23284.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23284", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T23:15:26.377", + "lastModified": "2025-08-02T23:15:26.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack buffer overflow. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, or data tampering." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23285.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23285.json new file mode 100644 index 00000000000..bde91f1bdef --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23285.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23285", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T23:15:26.617", + "lastModified": "2025-08-02T23:15:26.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-732" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23286.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23286.json new file mode 100644 index 00000000000..bc5afd40b87 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23286.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23286", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:45.327", + "lastModified": "2025-08-02T22:15:45.327", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A successful exploit of this vulnerability might lead to information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23287.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23287.json new file mode 100644 index 00000000000..827c75c1c13 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23287.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23287", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:45.493", + "lastModified": "2025-08-02T22:15:45.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level information. A successful exploit of this vulnerability may lead to Information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23288.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23288.json new file mode 100644 index 00000000000..de2a70bf3bd --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23288.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23288", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T22:15:45.660", + "lastModified": "2025-08-02T22:15:45.660", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA GPU Display Driver for Windows contains a vulnerability \u00a0where an attacker may cause an exposure of sensitive system information with local unprivileged system access. A successful exploit of this vulnerability may lead to Information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.3, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-497" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-232xx/CVE-2025-23290.json b/CVE-2025/CVE-2025-232xx/CVE-2025-23290.json new file mode 100644 index 00000000000..a0e9eace9e6 --- /dev/null +++ b/CVE-2025/CVE-2025-232xx/CVE-2025-23290.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-23290", + "sourceIdentifier": "psirt@nvidia.com", + "published": "2025-08-02T23:15:26.780", + "lastModified": "2025-08-02T23:15:26.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics which may be influenced by work in other VMs. A successful exploit of this vulnerability might lead to information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "psirt@nvidia.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 2.5, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.0, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "psirt@nvidia.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + } + ] + } + ], + "references": [ + { + "url": "https://nvidia.custhelp.com/app/answers/detail/a_id/5670", + "source": "psirt@nvidia.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-84xx/CVE-2025-8493.json b/CVE-2025/CVE-2025-84xx/CVE-2025-8493.json new file mode 100644 index 00000000000..a9081245157 --- /dev/null +++ b/CVE-2025/CVE-2025-84xx/CVE-2025-8493.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-8493", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-08-02T23:15:26.943", + "lastModified": "2025-08-02T23:15:26.943", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_student_query.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://code-projects.org/", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.318592", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.318592", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.626716", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.yuque.com/gongzi-jsnek/xb2q3a/dpgm5r79h1o8mp1b?singleDoc", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 9f9a01ec713..4b0492d7e46 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-08-02T20:00:12.850843+00:00 +2025-08-02T23:55:11.882424+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-08-02T19:15:25.460000+00:00 +2025-08-02T23:15:26.943000+00:00 ``` ### Last Data Feed Release @@ -33,15 +33,28 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -304000 +304015 ``` ### CVEs added in the last Commit -Recently added CVEs: `2` +Recently added CVEs: `15` -- [CVE-2025-8470](CVE-2025/CVE-2025-84xx/CVE-2025-8470.json) (`2025-08-02T18:15:26.337`) -- [CVE-2025-8471](CVE-2025/CVE-2025-84xx/CVE-2025-8471.json) (`2025-08-02T19:15:25.460`) +- [CVE-2023-32253](CVE-2023/CVE-2023-322xx/CVE-2023-32253.json) (`2025-08-02T23:15:24.770`) +- [CVE-2023-32255](CVE-2023/CVE-2023-322xx/CVE-2023-32255.json) (`2025-08-02T23:15:25.820`) +- [CVE-2025-23276](CVE-2025/CVE-2025-232xx/CVE-2025-23276.json) (`2025-08-02T22:15:44.290`) +- [CVE-2025-23277](CVE-2025/CVE-2025-232xx/CVE-2025-23277.json) (`2025-08-02T22:15:44.487`) +- [CVE-2025-23278](CVE-2025/CVE-2025-232xx/CVE-2025-23278.json) (`2025-08-02T22:15:44.657`) +- [CVE-2025-23279](CVE-2025/CVE-2025-232xx/CVE-2025-23279.json) (`2025-08-02T22:15:44.830`) +- [CVE-2025-23281](CVE-2025/CVE-2025-232xx/CVE-2025-23281.json) (`2025-08-02T22:15:44.993`) +- [CVE-2025-23283](CVE-2025/CVE-2025-232xx/CVE-2025-23283.json) (`2025-08-02T22:15:45.160`) +- [CVE-2025-23284](CVE-2025/CVE-2025-232xx/CVE-2025-23284.json) (`2025-08-02T23:15:26.377`) +- [CVE-2025-23285](CVE-2025/CVE-2025-232xx/CVE-2025-23285.json) (`2025-08-02T23:15:26.617`) +- [CVE-2025-23286](CVE-2025/CVE-2025-232xx/CVE-2025-23286.json) (`2025-08-02T22:15:45.327`) +- [CVE-2025-23287](CVE-2025/CVE-2025-232xx/CVE-2025-23287.json) (`2025-08-02T22:15:45.493`) +- [CVE-2025-23288](CVE-2025/CVE-2025-232xx/CVE-2025-23288.json) (`2025-08-02T22:15:45.660`) +- [CVE-2025-23290](CVE-2025/CVE-2025-232xx/CVE-2025-23290.json) (`2025-08-02T23:15:26.780`) +- [CVE-2025-8493](CVE-2025/CVE-2025-84xx/CVE-2025-8493.json) (`2025-08-02T23:15:26.943`) ### CVEs modified in the last Commit diff --git a/_state.csv b/_state.csv index d31c211fe98..b0f21155cd6 100644 --- a/_state.csv +++ b/_state.csv @@ -226710,7 +226710,9 @@ CVE-2023-3225,0,0,4bdd21824614daf357158e9af8ed9b9f6eebaa73a9b980bd3a2d9a25c3e086 CVE-2023-32250,0,0,fb128cdf3a5a07bcc5aa7ea425c270f5cbffd389b48e7f3fadc94a1562329b3e,2024-11-21T08:02:58.833000 CVE-2023-32251,0,0,3583360f225589b761ec66c3d80ac05a86dffe33fdd0977932c759175e8a42c9,2025-08-01T01:15:34.020000 CVE-2023-32252,0,0,62413a2967fc432ac8366e7a90f5f61ef808a024b2f83cfb74d2848fc7979acd,2024-11-21T08:02:58.980000 +CVE-2023-32253,1,1,ea635baaa83ad0817252e2328f8b42caa8ed7badb2e057eaa06698374ea93bc3,2025-08-02T23:15:24.770000 CVE-2023-32254,0,0,3c2d456b70f0a0814207a7dffbe64f00d4f0b0b0c773694ecab52ef2d6f8d0dd,2024-11-21T08:02:59.120000 +CVE-2023-32255,1,1,b41026482cac45397661d540e633afe587b587a64fe00f66f5c205489632d8ed,2025-08-02T23:15:25.820000 CVE-2023-32256,0,0,42b89c90b0d8d60b1d161442e4a426371089367c6db8a0a28ba6b97d87e65bbe,2025-08-01T18:15:27.910000 CVE-2023-32257,0,0,c2ac83314ddb6036280c6224799a47046079c5f5ce06ee6ccf67e314524b6662,2024-11-21T08:02:59.257000 CVE-2023-32258,0,0,3d5ae71f61541698242c34c093e215d73b479486a5c5eaa284d1ce2480183a05,2024-11-21T08:02:59.390000 @@ -287291,9 +287293,21 @@ CVE-2025-23267,0,0,5c478a7d6b3145698500b8dbf055d78795d2f5176c7607618d07d3ba845fa CVE-2025-23269,0,0,c52723ad2bc66f23bc78681dcbec3b0e3b683f8ddb54977de98ffde7247b81a2,2025-07-17T21:15:50.197000 CVE-2025-2327,0,0,623acf4a26d9d0a627c39d6e7bd3767484bbbf51b695c128c65dda426894e878,2025-06-17T20:50:23.507000 CVE-2025-23270,0,0,8824d11f24b21588634e20e6077d697aa34d6251ba417864c1f35f3f02c619d3,2025-07-17T21:15:50.197000 +CVE-2025-23276,1,1,4996160f9b9c9f20ad39a4c52620965b69f78bbd067cc921b4affb897ef52d51,2025-08-02T22:15:44.290000 +CVE-2025-23277,1,1,c9df4aed30fe1026c97c42a0addfc008d627011d65c6ae94b1bc96cb8e4c5518,2025-08-02T22:15:44.487000 +CVE-2025-23278,1,1,6f89d9a0f2a5992542da6bcee95d58bd423f82647ad7b37c36b0f4538edb11ed,2025-08-02T22:15:44.657000 +CVE-2025-23279,1,1,6ae0442a671e5afe9d6e69a970f1679a57fbda9b16907a567880fa2cfb3eecf7,2025-08-02T22:15:44.830000 CVE-2025-2328,0,0,432be9c7b77876c37841232148e3f6774268d50f769033c9c60a49c79bb54e41,2025-03-28T18:11:40.180000 +CVE-2025-23281,1,1,c831d1dc342cec6d4378f32a88cd6c84c12fc70b41eeb5fabdcf5a67fbda760e,2025-08-02T22:15:44.993000 +CVE-2025-23283,1,1,95823fe7771c104b66849bb4b48d5219dde273aa42349345e100780571b9543a,2025-08-02T22:15:45.160000 +CVE-2025-23284,1,1,df48879f4c7e5aec79b36a62705e8c6e63762ce78ce44dc9caf48e46977cd568,2025-08-02T23:15:26.377000 +CVE-2025-23285,1,1,9e354d163e2264effc741afb779b62f8d7438ea133b9cd442d4ca3445a9dc4d1,2025-08-02T23:15:26.617000 +CVE-2025-23286,1,1,e0c5a8328e47b68304ea04bfaaecbea826ff82cdb6554d11e2a5b58e7277b9c1,2025-08-02T22:15:45.327000 +CVE-2025-23287,1,1,7e547ef524d7951456185d18512f94c0a4a51bdfe877bf8188d47a72122cfa62,2025-08-02T22:15:45.493000 +CVE-2025-23288,1,1,08eca578aaae11453e027651f05b17707571c9320a46ed431cd8caaa5fc14d3c,2025-08-02T22:15:45.660000 CVE-2025-23289,0,0,b1cd75aeae92ce5e9d0daf156758bf3618da6fab4ea2bcf667ae11e82302b952,2025-07-31T21:15:27.067000 CVE-2025-2329,0,0,71c0ee1c1f614f9312a59dc078df1e59e35ed322ab9ff42837a4af863ccee6d8,2025-07-29T14:14:55.157000 +CVE-2025-23290,1,1,f4ada1e85625ee6f6522adedffee65ef7df7e167cbc43fe5e4ad091eb60c1fda,2025-08-02T23:15:26.780000 CVE-2025-2330,0,0,1df117b57a1069bffe144a5d3b363c8e9a1397ded736e89d3f8a97166b75b1d2,2025-07-10T15:25:12.770000 CVE-2025-2331,0,0,ba6a506c04c459bf4d4f1d883b767008a848176622abe4526fa84600ec186015,2025-03-22T12:15:26.833000 CVE-2025-2332,0,0,046a67a9cf7f433a88b7d72805ea1318db1beb7a584083c71cb5548df758625f,2025-03-27T16:45:27.850000 @@ -303989,8 +304003,8 @@ CVE-2025-8466,0,0,d978535a5301fb561fa17c19f5dc664bedcd24966fa249b828aafd95bc62cc CVE-2025-8467,0,0,3aa786c3105fcfc0b73b9bcf6a3a189ecb6b3902d53712be8d1ea12b103c5352,2025-08-02T11:15:25.450000 CVE-2025-8468,0,0,667edd2a5138bb60a9ad803c4840992e1e0e9a1e21327163e6bd92d4a9c7878e,2025-08-02T15:15:26.753000 CVE-2025-8469,0,0,21f5ff738f20edfb57a99ba6760a7068dbf971117616b56d8058a76625d3daf9,2025-08-02T17:15:26.477000 -CVE-2025-8470,1,1,82add2195621bd3c301d0bf2952093e914a72955e07dbe6b70ece22a9c9dca93,2025-08-02T18:15:26.337000 -CVE-2025-8471,1,1,021cc530c812da96c4b3bf0304df4507eab04fa0ca6231e7daf9ec1f0a9574c2,2025-08-02T19:15:25.460000 +CVE-2025-8470,0,0,82add2195621bd3c301d0bf2952093e914a72955e07dbe6b70ece22a9c9dca93,2025-08-02T18:15:26.337000 +CVE-2025-8471,0,0,021cc530c812da96c4b3bf0304df4507eab04fa0ca6231e7daf9ec1f0a9574c2,2025-08-02T19:15:25.460000 CVE-2025-8472,0,0,fc52c719f761fffd2aee3eb030c9286500a9474c94e02812ad20484e82441f14,2025-08-01T18:15:57.450000 CVE-2025-8473,0,0,50a233c352899cd7aedf4cc63438eae901667857c4f49a3dd88ff25095e2301e,2025-08-01T18:15:57.600000 CVE-2025-8474,0,0,d0c5de4e14334623d8ae0f9c1e83bdf9e593f94878a917cd446d67daa2d4a277,2025-08-01T18:15:57.743000 @@ -303999,3 +304013,4 @@ CVE-2025-8476,0,0,7a902782e9f8412a375f706b58315891d1de7f3dc992b77672a88ef11cf790 CVE-2025-8477,0,0,cc31d310afb63c2c9bf432c0cfef547c635b97bf5afdbac26e93465ac260baf1,2025-08-01T18:15:58.167000 CVE-2025-8480,0,0,4f09d3a809bf8f592461b1498f9614bfdb00ed3c0bed3eb76a4b23eb37695544,2025-08-01T18:15:58.333000 CVE-2025-8488,0,0,1e460b881b8c22ae3506776fa3d82a8315c5e9f0fd128545939e9c30314a470d,2025-08-02T10:15:27.477000 +CVE-2025-8493,1,1,2a69776c0bd02b92a0f463d0fdff14ec46d2d2d3c5ec0fb675352cd87f796352,2025-08-02T23:15:26.943000