mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 03:10:49 +00:00
Auto-Update: 2025-11-15T09:00:13.541210+00:00
This commit is contained in:
1 parent
db576997cd
commit
d3be9054e2
16 files changed
+911
-31
No files matched your search
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-11865",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:43.547",
|
||||
"lastModified": "2025-11-15T08:15:43.547",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-863"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/561399",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-11990",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:45.620",
|
||||
"lastModified": "2025-11-15T08:15:45.620",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 3.1,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.6,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-177"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/577850",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3257843",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,80 @@
|
||||
{
|
||||
"id": "CVE-2025-12849",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T07:15:42.640",
|
||||
"lastModified": "2025-11-15T07:15:42.640",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification. This makes it possible for unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the `cg_check_wp_admin_upload_v10` action. It does not enable an attacker to move or upload files."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L42",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L47",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L64",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L15",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L173",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://wordpress.org/plugins/contest-gallery/#developers",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e000c4ad-43ec-4ad0-89f9-74e9e6d8b917?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2025-13115",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T14:15:48.330",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"lastModified": "2025-11-15T07:15:44.957",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security flaw has been discovered in macrozheng mall-swarm up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
"value": "A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -121,6 +121,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/11",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/6",
|
||||
"source": "[email protected]"
|
||||
@@ -137,6 +141,10 @@
|
||||
"url": "https://vuldb.com/?submit.683222",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.686528",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/6",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2025-13116",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T14:15:48.550",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"lastModified": "2025-11-15T07:15:45.330",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A weakness has been identified in macrozheng mall-swarm up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
"value": "A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -121,6 +121,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/13",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/8",
|
||||
"source": "[email protected]"
|
||||
@@ -136,6 +140,10 @@
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.683339",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.686530",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2025-13117",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T15:15:50.463",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"lastModified": "2025-11-15T07:15:45.617",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
"value": "A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -121,6 +121,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/12",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/7",
|
||||
"source": "[email protected]"
|
||||
@@ -136,6 +140,10 @@
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.683340",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.686529",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2025-13118",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T15:15:50.653",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"lastModified": "2025-11-15T07:15:45.897",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
"value": "A vulnerability was detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
@@ -121,6 +121,10 @@
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/14",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/9",
|
||||
"source": "[email protected]"
|
||||
@@ -137,6 +141,10 @@
|
||||
"url": "https://vuldb.com/?submit.683345",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.686531",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Hwwg/cve/issues/9",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
|
||||
@@ -0,0 +1,152 @@
|
||||
{
|
||||
"id": "CVE-2025-13190",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T07:15:46.157",
|
||||
"lastModified": "2025-11-15T07:15:46.157",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [
|
||||
{
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"tags": [
|
||||
"unsupported-when-assigned"
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
|
||||
"baseScore": 9.0,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "SINGLE",
|
||||
"confidentialityImpact": "COMPLETE",
|
||||
"integrityImpact": "COMPLETE",
|
||||
"availabilityImpact": "COMPLETE"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 8.0,
|
||||
"impactScore": 10.0,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-119"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-121"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(scandir.sgi).pdf",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332479",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332479",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.685541",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,152 @@
|
||||
{
|
||||
"id": "CVE-2025-13191",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T07:15:46.627",
|
||||
"lastModified": "2025-11-15T07:15:46.627",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [
|
||||
{
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"tags": [
|
||||
"unsupported-when-assigned"
|
||||
]
|
||||
}
|
||||
],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.4,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
|
||||
"baseScore": 9.0,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "SINGLE",
|
||||
"confidentialityImpact": "COMPLETE",
|
||||
"integrityImpact": "COMPLETE",
|
||||
"availabilityImpact": "COMPLETE"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 8.0,
|
||||
"impactScore": 10.0,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-119"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-121"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(soap.cgi).pdf",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332480",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332480",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.685543",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-2615",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:45.820",
|
||||
"lastModified": "2025-11-15T08:15:45.820",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user to access sensitive information by establishing GraphQL subscriptions through WebSocket connections."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-201"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/526360",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3049150",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-6171",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:46.060",
|
||||
"lastModified": "2025-11-15T08:15:46.060",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even when repository access was disabled."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/549730",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3183740",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-6945",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:46.280",
|
||||
"lastModified": "2025-11-15T08:15:46.280",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 3.5,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.1,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-77"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/552611",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3173458",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-7000",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:46.487",
|
||||
"lastModified": "2025-11-15T08:15:46.487",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorized users to view confidential branch names by accessing project issues with related merge requests."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-201"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/553129",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3214025",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-7736",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-15T08:15:48.077",
|
||||
"lastModified": "2025-11-15T08:15:48.077",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by authenticating through OAuth providers."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 3.1,
|
||||
"baseSeverity": "LOW",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.6,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-863"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/556098",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hackerone.com/reports/3250156",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-11-15T07:00:11.170931+00:00
|
||||
2025-11-15T09:00:13.541210+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-11-15T06:15:43.980000+00:00
|
||||
2025-11-15T08:15:48.077000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,23 +33,33 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
318346
|
||||
318356
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `4`
|
||||
Recently added CVEs: `10`
|
||||
|
||||
- [CVE-2025-12494](CVE-2025/CVE-2025-124xx/CVE-2025-12494.json) (`2025-11-15T06:15:42.213`)
|
||||
- [CVE-2025-12847](CVE-2025/CVE-2025-128xx/CVE-2025-12847.json) (`2025-11-15T06:15:43.383`)
|
||||
- [CVE-2025-13189](CVE-2025/CVE-2025-131xx/CVE-2025-13189.json) (`2025-11-15T06:15:43.553`)
|
||||
- [CVE-2025-8994](CVE-2025/CVE-2025-89xx/CVE-2025-8994.json) (`2025-11-15T06:15:43.980`)
|
||||
- [CVE-2025-11865](CVE-2025/CVE-2025-118xx/CVE-2025-11865.json) (`2025-11-15T08:15:43.547`)
|
||||
- [CVE-2025-11990](CVE-2025/CVE-2025-119xx/CVE-2025-11990.json) (`2025-11-15T08:15:45.620`)
|
||||
- [CVE-2025-12849](CVE-2025/CVE-2025-128xx/CVE-2025-12849.json) (`2025-11-15T07:15:42.640`)
|
||||
- [CVE-2025-13190](CVE-2025/CVE-2025-131xx/CVE-2025-13190.json) (`2025-11-15T07:15:46.157`)
|
||||
- [CVE-2025-13191](CVE-2025/CVE-2025-131xx/CVE-2025-13191.json) (`2025-11-15T07:15:46.627`)
|
||||
- [CVE-2025-2615](CVE-2025/CVE-2025-26xx/CVE-2025-2615.json) (`2025-11-15T08:15:45.820`)
|
||||
- [CVE-2025-6171](CVE-2025/CVE-2025-61xx/CVE-2025-6171.json) (`2025-11-15T08:15:46.060`)
|
||||
- [CVE-2025-6945](CVE-2025/CVE-2025-69xx/CVE-2025-6945.json) (`2025-11-15T08:15:46.280`)
|
||||
- [CVE-2025-7000](CVE-2025/CVE-2025-70xx/CVE-2025-7000.json) (`2025-11-15T08:15:46.487`)
|
||||
- [CVE-2025-7736](CVE-2025/CVE-2025-77xx/CVE-2025-7736.json) (`2025-11-15T08:15:48.077`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `0`
|
||||
Recently modified CVEs: `4`
|
||||
|
||||
- [CVE-2025-13115](CVE-2025/CVE-2025-131xx/CVE-2025-13115.json) (`2025-11-15T07:15:44.957`)
|
||||
- [CVE-2025-13116](CVE-2025/CVE-2025-131xx/CVE-2025-13116.json) (`2025-11-15T07:15:45.330`)
|
||||
- [CVE-2025-13117](CVE-2025/CVE-2025-131xx/CVE-2025-13117.json) (`2025-11-15T07:15:45.617`)
|
||||
- [CVE-2025-13118](CVE-2025/CVE-2025-131xx/CVE-2025-13118.json) (`2025-11-15T07:15:45.897`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+18
-8
@@ -287185,6 +287185,7 @@ CVE-2025-11860,0,0,bd551eab914a88ef808378d9ad314bbffd20bd8ba8e4b37e270a957a2647d
|
||||
CVE-2025-11862,0,0,6d6e7394f0a72f7bdbb043fd59ea47e9d4fe599808ee04cc15bed34f68614cac,2025-11-12T16:19:34.210000
|
||||
CVE-2025-11863,0,0,a8d025e79651147a06d0a126f4fd0540f13bdb7cc59e35b2e2f10e4eeda45596,2025-11-12T16:19:59.103000
|
||||
CVE-2025-11864,0,0,23d4d42895f3b2d37ef1b8aa991857cf6327e9e3dab8d090081276b723b33696,2025-10-21T19:31:50.020000
|
||||
CVE-2025-11865,1,1,f2ff948d5329a5ce7d856d3fa9ca28cda126c6d1ace667ed4ba2c3486c6486fb,2025-11-15T08:15:43.547000
|
||||
CVE-2025-11866,0,0,ab2f90a19f770f753559f0645fd59615de727e7a263d503ef1b13f1dab18d6c6,2025-10-22T21:12:48.953000
|
||||
CVE-2025-11867,0,0,0c17ff5a267951a73149ee282144b83b7ac82fde1ff4c560e878dba77857f880,2025-10-22T21:12:48.953000
|
||||
CVE-2025-11869,0,0,50ced9490d1dcd085a9e71140e8a9266e6a99c5755a89b9a92011e093cce0374,2025-11-12T16:19:59.103000
|
||||
@@ -287287,6 +287288,7 @@ CVE-2025-11987,0,0,5f075ac4a2454fb926f2866639bb4f71f7c834ea0e6ac91e4d06ad777e261
|
||||
CVE-2025-11988,0,0,6cbecb6eb8b2608e674b35628a9253a390fff295a349cd26dcc2c1719add3b8f,2025-11-12T16:19:34.210000
|
||||
CVE-2025-11989,0,0,baa04a8f64a226698ee9a980572f05996e247a74b57e8d1ac6bc4745c5b300d9,2025-10-28T13:38:41
|
||||
CVE-2025-1199,0,0,b293e1750426e162cd73c69f2470f66e74330c6db9c1208ddcbe2ec678b89d9d,2025-02-18T18:06:10.360000
|
||||
CVE-2025-11990,1,1,06d02575b99c69c6220bd6cb3572eec42fdf8f7b74d84a6720c7dc230b0ed25f,2025-11-15T08:15:45.620000
|
||||
CVE-2025-11992,0,0,6b27e900875e9e0d6d31b263fd4e1b9a28385f65c747215977920f57471d5905,2025-10-27T13:20:15.637000
|
||||
CVE-2025-11994,0,0,3921fb2c567ca626b98d66dcaa998d9969a79a099b1816b616d3be665e555ebb,2025-11-12T16:19:12.850000
|
||||
CVE-2025-11995,0,0,6f8958ce899f0704a85806bb10326db23bb70663c3cd48669a3dcf953846ff97,2025-11-04T15:41:31.450000
|
||||
@@ -287651,7 +287653,7 @@ CVE-2025-12489,0,0,850b8eb6280a7e4cde63d5b20105e10c9e7370dd652e28d24ee3ada782c21
|
||||
CVE-2025-1249,0,0,6a7f3a2500b58cdcea7c9e46385c15368818268591d8a8d12de3eb4b42bd3d72,2025-02-26T15:15:24.470000
|
||||
CVE-2025-12490,0,0,d0b74707ca49afec0707ca0a5680af5248ef0cae9a52925a7e15ad9b13e531d6,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12493,0,0,afa6849609808be1f20c2a6526313c6aca9571ed2a54395ad594ae38296a91aa,2025-11-04T15:40:45.533000
|
||||
CVE-2025-12494,1,1,becc557fc02ddbfa81a76ca22af2ed5d63a18ee816fa5b3a03aec0fe6068e236,2025-11-15T06:15:42.213000
|
||||
CVE-2025-12494,0,0,becc557fc02ddbfa81a76ca22af2ed5d63a18ee816fa5b3a03aec0fe6068e236,2025-11-15T06:15:42.213000
|
||||
CVE-2025-12497,0,0,94cf9e3997719b7ee185a7136d9952b49e7451390ed218f220190fd4f117f1fd,2025-11-06T19:45:30.990000
|
||||
CVE-2025-12498,0,0,8e216cf239903977bb0102b60142c6d23559e4bbbce7ca7baeaf16b85945c569,2025-11-12T16:19:59.103000
|
||||
CVE-2025-1250,0,0,948f8f8504fb4e6039d5daa9421aaf6329f46c4cdc22875f0ce19678fe699b47,2025-09-20T02:56:35.303000
|
||||
@@ -287809,7 +287811,8 @@ CVE-2025-12837,0,0,15c981ca5f1b8599c1e18df92c70ed28371cb8e9a530f650a3bf01b63caf1
|
||||
CVE-2025-1284,0,0,393272fa917c5d80ef985d32ab805d823a71b31438834e15c90de4305d50626f,2025-04-29T13:52:47.470000
|
||||
CVE-2025-12844,0,0,9640ab10cb34cc02300656f7a48550cdfdeae8a96f6fcaf6fa632791ecfd5125,2025-11-14T16:42:03.187000
|
||||
CVE-2025-12846,0,0,f4caf7b99e2679a119105a3681208a8c75cf900a961ea9fe3fa4e4cf70b9070f,2025-11-12T16:19:34.210000
|
||||
CVE-2025-12847,1,1,17575f9ccdd9a45aee344716a7e3a1072a47e2103bcb1ce9de70b406f34f9371,2025-11-15T06:15:43.383000
|
||||
CVE-2025-12847,0,0,17575f9ccdd9a45aee344716a7e3a1072a47e2103bcb1ce9de70b406f34f9371,2025-11-15T06:15:43.383000
|
||||
CVE-2025-12849,1,1,a089b60c8b337ddc9ef52819f3e613fa4e055740fbeb37d4f7daea0112da6cf6,2025-11-15T07:15:42.640000
|
||||
CVE-2025-1285,0,0,3182990c1bc942ab8f686c8030ea96842badd7c599b496272a03f16c99f15c97,2025-03-14T05:15:41.977000
|
||||
CVE-2025-12853,0,0,3da4812ded871535155fc4b26ce159a40ade1254f05c47c19b5b5a9bd6e68291,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12854,0,0,d262b6914cc6de0e1c6caa359b8a991e80bd15730f71198dcff1fbec51a852d9,2025-11-12T16:20:22.257000
|
||||
@@ -287940,10 +287943,10 @@ CVE-2025-13102,0,0,eed289c0979fbe565a6e2542c7d41fed4639a49d1388d282ebe1ab17e5413
|
||||
CVE-2025-13107,0,0,39d12227955a4ccd61f3112355aede160449ce44188f672ecf923f796608eae5,2025-11-14T16:42:03.187000
|
||||
CVE-2025-1311,0,0,7710d787ca70c6c546450cc6c7a6c27a4be0c39d3b39dd1aa2c960d1ee02ebdf,2025-03-22T07:15:24.433000
|
||||
CVE-2025-13114,0,0,4e3e1eb0eb9a6e45db3fc16969cfde162699b609de37b56dbe7e94249433b6eb,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13115,0,0,331db78f3f1e3e96a6f7169b51e52c0858fff43be306689727ce8c9c2eec0503,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13116,0,0,9b489149d749489c51cd7705ff14fefe0d7324c23f3025ac32a4ad9f6b313e53,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13117,0,0,2feb754cd26c194cd2334dfff46b2c9186b69dc3c90598f05195e1c37297205c,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13118,0,0,acf42af67ab94e8aec169835fcb56458403570f697fd59a36cf54c96e8eb2f04,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13115,0,1,26a943f901f226d5a4944f2431f45b1d4a0ba3363b20f6ad1b720001e76678c1,2025-11-15T07:15:44.957000
|
||||
CVE-2025-13116,0,1,ea8f64d7b7d1ecd545022502e9e7e358c183f245dfe2da4fe7e826f9286ccad1,2025-11-15T07:15:45.330000
|
||||
CVE-2025-13117,0,1,51a4072dcf63cfcdae5c6b6fc5d4cd28bb497b3d7d360b79693750c4cda0052a,2025-11-15T07:15:45.617000
|
||||
CVE-2025-13118,0,1,0852b80b1bb5c12b1f01406e6d693c1701f9733966c93f75d39621168b7125de,2025-11-15T07:15:45.897000
|
||||
CVE-2025-13119,0,0,6ca3b55a300f62b8a495032be97ff9f35ce7093a36e16cead9b559cb07fef057,2025-11-14T16:42:03.187000
|
||||
CVE-2025-1312,0,0,722f6492fca6972e3871e5d5750f81958bc068d23fe675f5f9ed3d0327ccb7dd,2025-03-27T16:45:27.850000
|
||||
CVE-2025-13120,0,0,043f4346c38bb5f78a61ef5515aacaac48678dd6d13d72eb4b923fb1eedbb713,2025-11-14T16:42:03.187000
|
||||
@@ -287976,8 +287979,10 @@ CVE-2025-13185,0,0,5908e481b1b60fcabf66dd771539643ba88c6e323fbe1ba985f24aac4967b
|
||||
CVE-2025-13186,0,0,37d27cee7145da2f9c548cefa2ca42b0f450568268ce9da0e15e481e3a713874,2025-11-14T22:15:45.063000
|
||||
CVE-2025-13187,0,0,a94cf48ee4eb8f8c52118f5fee2b6289aa8f4018ae9a5e7680b27284e68b2366,2025-11-14T22:15:45.287000
|
||||
CVE-2025-13188,0,0,74a2c82372ef44d5b3f5a9d20a24c46441650cc031441ddbd3fbefa75cab2189,2025-11-14T23:15:43.843000
|
||||
CVE-2025-13189,1,1,e766bb2b78a2af51c0028546f4854e8a41ce69740fc01339f3ad98aa36517690,2025-11-15T06:15:43.553000
|
||||
CVE-2025-13189,0,0,e766bb2b78a2af51c0028546f4854e8a41ce69740fc01339f3ad98aa36517690,2025-11-15T06:15:43.553000
|
||||
CVE-2025-1319,0,0,d637e8c27cef5c6953f5ca61f84240e7056619d466e4788e83e08596d90aba8a,2025-03-06T15:09:58.827000
|
||||
CVE-2025-13190,1,1,741a88839817fd67a11cee4e5c4c4538122fdde76812cef8ca3774d6feef8a59,2025-11-15T07:15:46.157000
|
||||
CVE-2025-13191,1,1,18e40585184c6af337c85d2b0326a9523bb6788ef467c116da9057e8b6f91a07,2025-11-15T07:15:46.627000
|
||||
CVE-2025-1320,0,0,13286132de07d5b3e75d1dc00002068d71264e2873deeb1c22836d23ecec950d,2025-08-11T14:14:38.580000
|
||||
CVE-2025-13204,0,0,1dc85e9ea0499260c89378bdd48e709dc481f298ead6a27bd09f5bfe959c653e,2025-11-14T21:15:44.367000
|
||||
CVE-2025-1321,0,0,3da7738bfdaa0898de004d40e4fadbe2a67a378d68f0f0d09a0d5c3a6126abd2,2025-03-05T18:46:16.890000
|
||||
@@ -293930,6 +293935,7 @@ CVE-2025-26136,0,0,dd9385473c9de6671090737c25c945df8fcb57e05d63e2da81bba3bba0b8a
|
||||
CVE-2025-26137,0,0,004205e5376adff96c010e010531e03852f5eb4905a1a3c73ed331cf2f44f325,2025-04-01T20:37:44.117000
|
||||
CVE-2025-26138,0,0,4c83b447574a31d9857c309d7f5649f5104ee78c2e6617a4327eaace6a44e40b,2025-04-01T20:37:28.490000
|
||||
CVE-2025-2614,0,0,8f2ed06510c2429f847ebad20c780bb0dea3fc02cb9f29c562e6966154e894b2,2025-08-15T16:30:52.027000
|
||||
CVE-2025-2615,1,1,79fab36e1f72e260cf87177aea7c83419875a632e3a8a839433b80b1d19e423b,2025-11-15T08:15:45.820000
|
||||
CVE-2025-26153,0,0,fbd54e08d3ed017020223f9a7b6b482516a3990fb93f496abb0ee8889236b21e,2025-04-18T12:15:15.033000
|
||||
CVE-2025-26156,0,0,962eae3fa0ac2ee7ef9345ac9060a4193d262807409fdde8171c1e14753b4430,2025-04-02T18:49:33.170000
|
||||
CVE-2025-26157,0,0,38de05e421d679d343d79e185476ab67eea088104866559f392814d0f7cd1051,2025-06-06T17:58:10.687000
|
||||
@@ -313874,6 +313880,7 @@ CVE-2025-61690,0,0,4ca1e0da46ce90ce2654e003fface6498e5c618774382ab7e243aa66cffed
|
||||
CVE-2025-61691,0,0,eec839b13fa21074d44e3bbffeae75a4b252e2fc2cfd48d4a38fd47ce3e2546c,2025-10-07T14:13:05.040000
|
||||
CVE-2025-61692,0,0,6d4b2dd3d04d38f2353f575dfbbccc93c25bf9f06993949a8d61ea2f96eae14c,2025-10-07T14:09:27
|
||||
CVE-2025-6170,0,0,8ee62512245e2af562128802327ad4e5836ac5fc4d880ffe07a3d169847f512f,2025-11-03T20:19:18.300000
|
||||
CVE-2025-6171,1,1,7a21757cdcba124dcb6190cae2c0a698989b08f91a61ca0d40bc54a8ebdb2419,2025-11-15T08:15:46.060000
|
||||
CVE-2025-61714,0,0,c02deb5a89a330eb5e764d72dfc6a2022cdb6c3eb0846d7603c4fcf125e99cde,2025-10-01T03:15:36.940000
|
||||
CVE-2025-61715,0,0,acebc75d3bddb97cd22dac1f8d270822aed8a8abfbc5b81f36e35c32dd634eea,2025-10-01T03:15:37.037000
|
||||
CVE-2025-61716,0,0,6e3f1bbce6eaebe3bc7f361bf2947f5e8e48283a61be4413f8db8272c46649fc,2025-10-01T03:15:37.113000
|
||||
@@ -315691,6 +315698,7 @@ CVE-2025-6941,0,0,d7ff2114d170dc7e5bff5f40cdb7a06eded9f742c1abd7e043d25b1d0d4b1d
|
||||
CVE-2025-6942,0,0,ce17090e9af93141dbee0b9e4a07d73c52cfd336a45382f6ec1d10b523f6b0dd,2025-07-03T15:13:53.147000
|
||||
CVE-2025-6943,0,0,9d5662bf5a97ef158e8578579ae7fb47da438572174bda0455cea7222adc555b,2025-10-10T15:31:36.950000
|
||||
CVE-2025-6944,0,0,cd76b115fd7f359ccb790195d23f72b54c96a11e15da86773a169e7312518130,2025-07-08T16:18:53.607000
|
||||
CVE-2025-6945,1,1,bc3d859ad340a2c91817a70c50a69dce26ebaf6c935b621a15b9d1483b3c8975,2025-11-15T08:15:46.280000
|
||||
CVE-2025-6947,0,0,cec3a1c0fbec7fdea8f722c826042355f13f1c82dbde37df28e8c1e43620b6a1,2025-09-16T12:49:16.060000
|
||||
CVE-2025-6948,0,0,e074631eac837c6f6633f226d5c10aa078d8aacb82aa64d46ff3ec569d5a5338,2025-07-25T16:42:31.690000
|
||||
CVE-2025-6949,0,0,3c31534551ea404e4d5dff32740e2d6f1992be5fe1ca54442aa1e2a5a324a225,2025-10-21T19:31:50.020000
|
||||
@@ -315739,6 +315747,7 @@ CVE-2025-6996,0,0,389b5795c73c63dae649f42ab7815c8dbcec37793ecdb641765ba144a08d4e
|
||||
CVE-2025-6997,0,0,ef30c285c567b5ef817e31f1f8606816007f5424156995e271a8ccfddeae8f28,2025-08-11T19:13:21.383000
|
||||
CVE-2025-6998,0,0,b2b570d330eb95ecf00eaecd1f0057e21dc6b18b2d8db9a94384530a6200d8c3,2025-07-25T15:29:19.837000
|
||||
CVE-2025-6999,0,0,57f2f94e8174a2f5d6e026cc8ba66046203a702e201497da69417b6e38b050df,2025-09-16T12:49:16.060000
|
||||
CVE-2025-7000,1,1,b79fcae09ea98cf8886614c65a79d99168ddb30631381f55e43bfdef17e3b37a,2025-11-15T08:15:46.487000
|
||||
CVE-2025-7001,0,0,b65a71149d67562aefa02e66a87df5f05478e88e56059df140a4d9dc9fc4ec95,2025-07-28T14:36:43.487000
|
||||
CVE-2025-7012,0,0,2ea0353a5f012d08772fe047c1121e5fd68afa7fc20c7e9aa387fbe5460e9165,2025-07-15T13:14:24.053000
|
||||
CVE-2025-7020,0,0,3a7a1f0717237db96737c5536fb7e46132725cfc93ee918efca9d68522c9a7f9,2025-08-11T18:32:48.867000
|
||||
@@ -316386,6 +316395,7 @@ CVE-2025-7731,0,0,1d4da55eeeda93e67ead3e1e669419a663710c592339f870a92ab279b4cf51
|
||||
CVE-2025-7732,0,0,fdda4dc5b2c54b958785b2ac9cdb3d937d98cb631ca468401b18d7ba5b25eaef,2025-08-29T16:22:31.970000
|
||||
CVE-2025-7734,0,0,a789d1c026abaa03b1450a7b8de5329ea680f270579ad8783b2599b0858b8166,2025-08-15T16:33:23.090000
|
||||
CVE-2025-7735,0,0,9e855fd260f9738cbc7400c0d679aa2191f854dae0f459704b63c33bef137338,2025-07-17T21:15:50.197000
|
||||
CVE-2025-7736,1,1,13174f61bf78fb284bb2711bb5b94d85afbea45c82b3076c1c360ce6ff7a83b8,2025-11-15T08:15:48.077000
|
||||
CVE-2025-7738,0,0,ac4152bbb7946644775b07dfc9ed27f8a902198d2ef55ecf007de5ba1d3f331d,2025-08-04T22:15:28.823000
|
||||
CVE-2025-7739,0,0,1888301e2537d2d9349ab75c06b4759cd5eed37e872789a0f403082e39aa77d8,2025-08-15T16:33:31.673000
|
||||
CVE-2025-7742,0,0,f73971937c79f617122a4b2d73fa4d96db8576ec3ea7bf576a8cdd0a09436d70,2025-07-25T15:29:19.837000
|
||||
@@ -317505,7 +317515,7 @@ CVE-2025-8990,0,0,fc853b3ee6e8f5b629842d86c7d8cf1ef4835738fff9a847ff1aa62eb9d31f
|
||||
CVE-2025-8991,0,0,9bc6731d09dc448fc200ea123a89ac4a3bfb5e1940cf9355fed4621013d684c0,2025-09-11T15:34:27.427000
|
||||
CVE-2025-8992,0,0,4b5bb1cb484925e83d97d5f01b3e9c834b8bc76664cbe5b529fbbf06aac3730c,2025-08-27T18:22:30.943000
|
||||
CVE-2025-8993,0,0,196d4ee6a9c7d77e8b0bae34ee0db110e9f57e42c5993299e7cd589b8660558d,2025-08-18T15:11:54.517000
|
||||
CVE-2025-8994,1,1,8a345693daf4c5a913cc17a280e720e72b4fd547bc8bca2618abbbabb552fc5c,2025-11-15T06:15:43.980000
|
||||
CVE-2025-8994,0,0,8a345693daf4c5a913cc17a280e720e72b4fd547bc8bca2618abbbabb552fc5c,2025-11-15T06:15:43.980000
|
||||
CVE-2025-8995,0,0,25826511af9ab581bcdce63e6af2ab460627927570525a8e32b3fbf70e359f08,2025-08-21T19:58:03.550000
|
||||
CVE-2025-8996,0,0,064606e56aab53dedd11f230de8fda8648fdafdd341b76e62121ebf57874d797,2025-08-21T19:59:55.280000
|
||||
CVE-2025-8997,0,0,e46317ad4bd00e8a38b4dd18fd441638702e9de3370540c06698efa4ad4272e0,2025-08-25T20:24:45.327000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user