From d3be9054e2a688e2f6edcc46225ea9f386fb9d48 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Sat, 15 Nov 2025 09:04:01 +0000 Subject: [PATCH] Auto-Update: 2025-11-15T09:00:13.541210+00:00 --- CVE-2025/CVE-2025-118xx/CVE-2025-11865.json | 60 ++++++++ CVE-2025/CVE-2025-119xx/CVE-2025-11990.json | 64 +++++++++ CVE-2025/CVE-2025-128xx/CVE-2025-12849.json | 80 +++++++++++ CVE-2025/CVE-2025-131xx/CVE-2025-13115.json | 16 ++- CVE-2025/CVE-2025-131xx/CVE-2025-13116.json | 16 ++- CVE-2025/CVE-2025-131xx/CVE-2025-13117.json | 16 ++- CVE-2025/CVE-2025-131xx/CVE-2025-13118.json | 12 +- CVE-2025/CVE-2025-131xx/CVE-2025-13190.json | 152 ++++++++++++++++++++ CVE-2025/CVE-2025-131xx/CVE-2025-13191.json | 152 ++++++++++++++++++++ CVE-2025/CVE-2025-26xx/CVE-2025-2615.json | 64 +++++++++ CVE-2025/CVE-2025-61xx/CVE-2025-6171.json | 64 +++++++++ CVE-2025/CVE-2025-69xx/CVE-2025-6945.json | 64 +++++++++ CVE-2025/CVE-2025-70xx/CVE-2025-7000.json | 64 +++++++++ CVE-2025/CVE-2025-77xx/CVE-2025-7736.json | 64 +++++++++ README.md | 28 ++-- _state.csv | 26 ++-- 16 files changed, 911 insertions(+), 31 deletions(-) create mode 100644 CVE-2025/CVE-2025-118xx/CVE-2025-11865.json create mode 100644 CVE-2025/CVE-2025-119xx/CVE-2025-11990.json create mode 100644 CVE-2025/CVE-2025-128xx/CVE-2025-12849.json create mode 100644 CVE-2025/CVE-2025-131xx/CVE-2025-13190.json create mode 100644 CVE-2025/CVE-2025-131xx/CVE-2025-13191.json create mode 100644 CVE-2025/CVE-2025-26xx/CVE-2025-2615.json create mode 100644 CVE-2025/CVE-2025-61xx/CVE-2025-6171.json create mode 100644 CVE-2025/CVE-2025-69xx/CVE-2025-6945.json create mode 100644 CVE-2025/CVE-2025-70xx/CVE-2025-7000.json create mode 100644 CVE-2025/CVE-2025-77xx/CVE-2025-7736.json diff --git a/CVE-2025/CVE-2025-118xx/CVE-2025-11865.json b/CVE-2025/CVE-2025-118xx/CVE-2025-11865.json new file mode 100644 index 00000000000..3338053c776 --- /dev/null +++ b/CVE-2025/CVE-2025-118xx/CVE-2025-11865.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-11865", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:43.547", + "lastModified": "2025-11-15T08:15:43.547", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue has been discovered in GitLab EE affecting all versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that, under certain circumstances, could have allowed an attacker to remove Duo flows of another user." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/561399", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11990.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11990.json new file mode 100644 index 00000000000..d6c9d3c7be8 --- /dev/null +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11990.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-11990", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:45.620", + "lastModified": "2025-11-15T08:15:45.620", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to gain CSRF tokens by exploiting improper input validation in repository references combined with redirect handling weaknesses." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 3.1, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-177" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/577850", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3257843", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12849.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12849.json new file mode 100644 index 00000000000..e9b1bea4c39 --- /dev/null +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12849.json @@ -0,0 +1,80 @@ +{ + "id": "CVE-2025-12849", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-15T07:15:42.640", + "lastModified": "2025-11-15T07:15:42.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Contest Gallery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 28.0.2. This is due to the plugin registering the `cg_check_wp_admin_upload_v10` AJAX action for both authenticated and unauthenticated users without implementing capability checks or nonce verification. This makes it possible for unauthenticated attackers to inject arbitrary WordPress media attachments into galleries and manipulate gallery metadata via the `cg_check_wp_admin_upload_v10` action. It does not enable an attacker to move or upload files." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L42", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L47", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/include-functions-v10.php#L64", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L15", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/contest-gallery/tags/28.0.2/v10/v10-admin/gallery/wp-uploader.php#L173", + "source": "security@wordfence.com" + }, + { + "url": "https://wordpress.org/plugins/contest-gallery/#developers", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e000c4ad-43ec-4ad0-89f9-74e9e6d8b917?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13115.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13115.json index 0f585852521..56ca8769f8a 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13115.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13115.json @@ -2,13 +2,13 @@ "id": "CVE-2025-13115", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T14:15:48.330", - "lastModified": "2025-11-14T16:42:03.187", + "lastModified": "2025-11-15T07:15:44.957", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A security flaw has been discovered in macrozheng mall-swarm up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way." + "value": "A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way." } ], "metrics": { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -121,6 +121,10 @@ } ], "references": [ + { + "url": "https://github.com/Hwwg/cve/issues/11", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/6", "source": "cna@vuldb.com" @@ -137,6 +141,10 @@ "url": "https://vuldb.com/?submit.683222", "source": "cna@vuldb.com" }, + { + "url": "https://vuldb.com/?submit.686528", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/6", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13116.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13116.json index 3ba0e5b63e8..7a1386e7ae1 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13116.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13116.json @@ -2,13 +2,13 @@ "id": "CVE-2025-13116", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T14:15:48.550", - "lastModified": "2025-11-14T16:42:03.187", + "lastModified": "2025-11-15T07:15:45.330", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A weakness has been identified in macrozheng mall-swarm up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way." + "value": "A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way." } ], "metrics": { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -121,6 +121,10 @@ } ], "references": [ + { + "url": "https://github.com/Hwwg/cve/issues/13", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/8", "source": "cna@vuldb.com" @@ -136,6 +140,10 @@ { "url": "https://vuldb.com/?submit.683339", "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.686530", + "source": "cna@vuldb.com" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13117.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13117.json index 152c0238e69..63e73d999ff 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13117.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13117.json @@ -2,13 +2,13 @@ "id": "CVE-2025-13117", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T15:15:50.463", - "lastModified": "2025-11-14T16:42:03.187", + "lastModified": "2025-11-15T07:15:45.617", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + "value": "A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way." } ], "metrics": { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -121,6 +121,10 @@ } ], "references": [ + { + "url": "https://github.com/Hwwg/cve/issues/12", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/7", "source": "cna@vuldb.com" @@ -136,6 +140,10 @@ { "url": "https://vuldb.com/?submit.683340", "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.686529", + "source": "cna@vuldb.com" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13118.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13118.json index 3252c2e14e9..95a31345cdd 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13118.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13118.json @@ -2,13 +2,13 @@ "id": "CVE-2025-13118", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T15:15:50.653", - "lastModified": "2025-11-14T16:42:03.187", + "lastModified": "2025-11-15T07:15:45.897", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." + "value": "A vulnerability was detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way." } ], "metrics": { @@ -121,6 +121,10 @@ } ], "references": [ + { + "url": "https://github.com/Hwwg/cve/issues/14", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/9", "source": "cna@vuldb.com" @@ -137,6 +141,10 @@ "url": "https://vuldb.com/?submit.683345", "source": "cna@vuldb.com" }, + { + "url": "https://vuldb.com/?submit.686531", + "source": "cna@vuldb.com" + }, { "url": "https://github.com/Hwwg/cve/issues/9", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13190.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13190.json new file mode 100644 index 00000000000..3198500e6cd --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13190.json @@ -0,0 +1,152 @@ +{ + "id": "CVE-2025-13190", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-15T07:15:46.157", + "lastModified": "2025-11-15T07:15:46.157", + "vulnStatus": "Received", + "cveTags": [ + { + "sourceIdentifier": "cna@vuldb.com", + "tags": [ + "unsupported-when-assigned" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in D-Link DIR-816L 2_06_b09_beta. This vulnerability affects the function scandir_main of the file /portal/__ajax_exporer.sgi. The manipulation of the argument en results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", + "baseScore": 9.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 8.0, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + }, + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(scandir.sgi).pdf", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332479", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332479", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.685541", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.dlink.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13191.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13191.json new file mode 100644 index 00000000000..eb9803c88e8 --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13191.json @@ -0,0 +1,152 @@ +{ + "id": "CVE-2025-13191", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-15T07:15:46.627", + "lastModified": "2025-11-15T07:15:46.627", + "vulnStatus": "Received", + "cveTags": [ + { + "sourceIdentifier": "cna@vuldb.com", + "tags": [ + "unsupported-when-assigned" + ] + } + ], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in D-Link DIR-816L 2_06_b09_beta. This issue affects the function soapcgi_main of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This vulnerability only affects products that are no longer supported by the maintainer." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.4, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", + "baseScore": 9.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "COMPLETE", + "integrityImpact": "COMPLETE", + "availabilityImpact": "COMPLETE" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 8.0, + "impactScore": 10.0, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + }, + { + "lang": "en", + "value": "CWE-121" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/scanleale/IOT_sec/blob/main/DIR-816L%20stack%20overflow(soap.cgi).pdf", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332480", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332480", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.685543", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.dlink.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-26xx/CVE-2025-2615.json b/CVE-2025/CVE-2025-26xx/CVE-2025-2615.json new file mode 100644 index 00000000000..4001bc5fd95 --- /dev/null +++ b/CVE-2025/CVE-2025-26xx/CVE-2025-2615.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-2615", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:45.820", + "lastModified": "2025-11-15T08:15:45.820", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.7 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that could have allowed a blocked user to access sensitive information by establishing GraphQL subscriptions through WebSocket connections." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/526360", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3049150", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json b/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json new file mode 100644 index 00000000000..f2d2daef3a1 --- /dev/null +++ b/CVE-2025/CVE-2025-61xx/CVE-2025-6171.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-6171", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:46.060", + "lastModified": "2025-11-15T08:15:46.060", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.2 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker with reporter access to view branch names and pipeline details by accessing the packages API endpoint even when repository access was disabled." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/549730", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3183740", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json b/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json new file mode 100644 index 00000000000..576c80a428b --- /dev/null +++ b/CVE-2025/CVE-2025-69xx/CVE-2025-6945.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-6945", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:46.280", + "lastModified": "2025-11-15T08:15:46.280", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to leak sensitive information from confidential issues by injecting hidden prompts into merge request comments." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-77" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/552611", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3173458", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json b/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json new file mode 100644 index 00000000000..2381bf8c5ab --- /dev/null +++ b/CVE-2025/CVE-2025-70xx/CVE-2025-7000.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-7000", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:46.487", + "lastModified": "2025-11-15T08:15:46.487", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 17.6 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2, that, under specific conditions, could have allowed unauthorized users to view confidential branch names by accessing project issues with related merge requests." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/553129", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3214025", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-77xx/CVE-2025-7736.json b/CVE-2025/CVE-2025-77xx/CVE-2025-7736.json new file mode 100644 index 00000000000..715b5490edb --- /dev/null +++ b/CVE-2025/CVE-2025-77xx/CVE-2025-7736.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-7736", + "sourceIdentifier": "cve@gitlab.com", + "published": "2025-11-15T08:15:48.077", + "lastModified": "2025-11-15T08:15:48.077", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated attacker to bypass access control restrictions and view GitLab Pages content intended only for project members by authenticating through OAuth providers." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@gitlab.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.1, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "cve@gitlab.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://about.gitlab.com/releases/2025/11/12/patch-release-gitlab-18-5-2-released/", + "source": "cve@gitlab.com" + }, + { + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/556098", + "source": "cve@gitlab.com" + }, + { + "url": "https://hackerone.com/reports/3250156", + "source": "cve@gitlab.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index ea1eaed504b..30b6798522e 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-15T07:00:11.170931+00:00 +2025-11-15T09:00:13.541210+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-15T06:15:43.980000+00:00 +2025-11-15T08:15:48.077000+00:00 ``` ### Last Data Feed Release @@ -33,23 +33,33 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318346 +318356 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `10` -- [CVE-2025-12494](CVE-2025/CVE-2025-124xx/CVE-2025-12494.json) (`2025-11-15T06:15:42.213`) -- [CVE-2025-12847](CVE-2025/CVE-2025-128xx/CVE-2025-12847.json) (`2025-11-15T06:15:43.383`) -- [CVE-2025-13189](CVE-2025/CVE-2025-131xx/CVE-2025-13189.json) (`2025-11-15T06:15:43.553`) -- [CVE-2025-8994](CVE-2025/CVE-2025-89xx/CVE-2025-8994.json) (`2025-11-15T06:15:43.980`) +- [CVE-2025-11865](CVE-2025/CVE-2025-118xx/CVE-2025-11865.json) (`2025-11-15T08:15:43.547`) +- [CVE-2025-11990](CVE-2025/CVE-2025-119xx/CVE-2025-11990.json) (`2025-11-15T08:15:45.620`) +- [CVE-2025-12849](CVE-2025/CVE-2025-128xx/CVE-2025-12849.json) (`2025-11-15T07:15:42.640`) +- [CVE-2025-13190](CVE-2025/CVE-2025-131xx/CVE-2025-13190.json) (`2025-11-15T07:15:46.157`) +- [CVE-2025-13191](CVE-2025/CVE-2025-131xx/CVE-2025-13191.json) (`2025-11-15T07:15:46.627`) +- [CVE-2025-2615](CVE-2025/CVE-2025-26xx/CVE-2025-2615.json) (`2025-11-15T08:15:45.820`) +- [CVE-2025-6171](CVE-2025/CVE-2025-61xx/CVE-2025-6171.json) (`2025-11-15T08:15:46.060`) +- [CVE-2025-6945](CVE-2025/CVE-2025-69xx/CVE-2025-6945.json) (`2025-11-15T08:15:46.280`) +- [CVE-2025-7000](CVE-2025/CVE-2025-70xx/CVE-2025-7000.json) (`2025-11-15T08:15:46.487`) +- [CVE-2025-7736](CVE-2025/CVE-2025-77xx/CVE-2025-7736.json) (`2025-11-15T08:15:48.077`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `4` +- [CVE-2025-13115](CVE-2025/CVE-2025-131xx/CVE-2025-13115.json) (`2025-11-15T07:15:44.957`) +- [CVE-2025-13116](CVE-2025/CVE-2025-131xx/CVE-2025-13116.json) (`2025-11-15T07:15:45.330`) +- [CVE-2025-13117](CVE-2025/CVE-2025-131xx/CVE-2025-13117.json) (`2025-11-15T07:15:45.617`) +- [CVE-2025-13118](CVE-2025/CVE-2025-131xx/CVE-2025-13118.json) (`2025-11-15T07:15:45.897`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 90cdfde1809..8646d2e2459 100644 --- a/_state.csv +++ b/_state.csv @@ -287185,6 +287185,7 @@ CVE-2025-11860,0,0,bd551eab914a88ef808378d9ad314bbffd20bd8ba8e4b37e270a957a2647d CVE-2025-11862,0,0,6d6e7394f0a72f7bdbb043fd59ea47e9d4fe599808ee04cc15bed34f68614cac,2025-11-12T16:19:34.210000 CVE-2025-11863,0,0,a8d025e79651147a06d0a126f4fd0540f13bdb7cc59e35b2e2f10e4eeda45596,2025-11-12T16:19:59.103000 CVE-2025-11864,0,0,23d4d42895f3b2d37ef1b8aa991857cf6327e9e3dab8d090081276b723b33696,2025-10-21T19:31:50.020000 +CVE-2025-11865,1,1,f2ff948d5329a5ce7d856d3fa9ca28cda126c6d1ace667ed4ba2c3486c6486fb,2025-11-15T08:15:43.547000 CVE-2025-11866,0,0,ab2f90a19f770f753559f0645fd59615de727e7a263d503ef1b13f1dab18d6c6,2025-10-22T21:12:48.953000 CVE-2025-11867,0,0,0c17ff5a267951a73149ee282144b83b7ac82fde1ff4c560e878dba77857f880,2025-10-22T21:12:48.953000 CVE-2025-11869,0,0,50ced9490d1dcd085a9e71140e8a9266e6a99c5755a89b9a92011e093cce0374,2025-11-12T16:19:59.103000 @@ -287287,6 +287288,7 @@ CVE-2025-11987,0,0,5f075ac4a2454fb926f2866639bb4f71f7c834ea0e6ac91e4d06ad777e261 CVE-2025-11988,0,0,6cbecb6eb8b2608e674b35628a9253a390fff295a349cd26dcc2c1719add3b8f,2025-11-12T16:19:34.210000 CVE-2025-11989,0,0,baa04a8f64a226698ee9a980572f05996e247a74b57e8d1ac6bc4745c5b300d9,2025-10-28T13:38:41 CVE-2025-1199,0,0,b293e1750426e162cd73c69f2470f66e74330c6db9c1208ddcbe2ec678b89d9d,2025-02-18T18:06:10.360000 +CVE-2025-11990,1,1,06d02575b99c69c6220bd6cb3572eec42fdf8f7b74d84a6720c7dc230b0ed25f,2025-11-15T08:15:45.620000 CVE-2025-11992,0,0,6b27e900875e9e0d6d31b263fd4e1b9a28385f65c747215977920f57471d5905,2025-10-27T13:20:15.637000 CVE-2025-11994,0,0,3921fb2c567ca626b98d66dcaa998d9969a79a099b1816b616d3be665e555ebb,2025-11-12T16:19:12.850000 CVE-2025-11995,0,0,6f8958ce899f0704a85806bb10326db23bb70663c3cd48669a3dcf953846ff97,2025-11-04T15:41:31.450000 @@ -287651,7 +287653,7 @@ CVE-2025-12489,0,0,850b8eb6280a7e4cde63d5b20105e10c9e7370dd652e28d24ee3ada782c21 CVE-2025-1249,0,0,6a7f3a2500b58cdcea7c9e46385c15368818268591d8a8d12de3eb4b42bd3d72,2025-02-26T15:15:24.470000 CVE-2025-12490,0,0,d0b74707ca49afec0707ca0a5680af5248ef0cae9a52925a7e15ad9b13e531d6,2025-11-12T16:20:22.257000 CVE-2025-12493,0,0,afa6849609808be1f20c2a6526313c6aca9571ed2a54395ad594ae38296a91aa,2025-11-04T15:40:45.533000 -CVE-2025-12494,1,1,becc557fc02ddbfa81a76ca22af2ed5d63a18ee816fa5b3a03aec0fe6068e236,2025-11-15T06:15:42.213000 +CVE-2025-12494,0,0,becc557fc02ddbfa81a76ca22af2ed5d63a18ee816fa5b3a03aec0fe6068e236,2025-11-15T06:15:42.213000 CVE-2025-12497,0,0,94cf9e3997719b7ee185a7136d9952b49e7451390ed218f220190fd4f117f1fd,2025-11-06T19:45:30.990000 CVE-2025-12498,0,0,8e216cf239903977bb0102b60142c6d23559e4bbbce7ca7baeaf16b85945c569,2025-11-12T16:19:59.103000 CVE-2025-1250,0,0,948f8f8504fb4e6039d5daa9421aaf6329f46c4cdc22875f0ce19678fe699b47,2025-09-20T02:56:35.303000 @@ -287809,7 +287811,8 @@ CVE-2025-12837,0,0,15c981ca5f1b8599c1e18df92c70ed28371cb8e9a530f650a3bf01b63caf1 CVE-2025-1284,0,0,393272fa917c5d80ef985d32ab805d823a71b31438834e15c90de4305d50626f,2025-04-29T13:52:47.470000 CVE-2025-12844,0,0,9640ab10cb34cc02300656f7a48550cdfdeae8a96f6fcaf6fa632791ecfd5125,2025-11-14T16:42:03.187000 CVE-2025-12846,0,0,f4caf7b99e2679a119105a3681208a8c75cf900a961ea9fe3fa4e4cf70b9070f,2025-11-12T16:19:34.210000 -CVE-2025-12847,1,1,17575f9ccdd9a45aee344716a7e3a1072a47e2103bcb1ce9de70b406f34f9371,2025-11-15T06:15:43.383000 +CVE-2025-12847,0,0,17575f9ccdd9a45aee344716a7e3a1072a47e2103bcb1ce9de70b406f34f9371,2025-11-15T06:15:43.383000 +CVE-2025-12849,1,1,a089b60c8b337ddc9ef52819f3e613fa4e055740fbeb37d4f7daea0112da6cf6,2025-11-15T07:15:42.640000 CVE-2025-1285,0,0,3182990c1bc942ab8f686c8030ea96842badd7c599b496272a03f16c99f15c97,2025-03-14T05:15:41.977000 CVE-2025-12853,0,0,3da4812ded871535155fc4b26ce159a40ade1254f05c47c19b5b5a9bd6e68291,2025-11-12T16:20:22.257000 CVE-2025-12854,0,0,d262b6914cc6de0e1c6caa359b8a991e80bd15730f71198dcff1fbec51a852d9,2025-11-12T16:20:22.257000 @@ -287940,10 +287943,10 @@ CVE-2025-13102,0,0,eed289c0979fbe565a6e2542c7d41fed4639a49d1388d282ebe1ab17e5413 CVE-2025-13107,0,0,39d12227955a4ccd61f3112355aede160449ce44188f672ecf923f796608eae5,2025-11-14T16:42:03.187000 CVE-2025-1311,0,0,7710d787ca70c6c546450cc6c7a6c27a4be0c39d3b39dd1aa2c960d1ee02ebdf,2025-03-22T07:15:24.433000 CVE-2025-13114,0,0,4e3e1eb0eb9a6e45db3fc16969cfde162699b609de37b56dbe7e94249433b6eb,2025-11-14T16:42:03.187000 -CVE-2025-13115,0,0,331db78f3f1e3e96a6f7169b51e52c0858fff43be306689727ce8c9c2eec0503,2025-11-14T16:42:03.187000 -CVE-2025-13116,0,0,9b489149d749489c51cd7705ff14fefe0d7324c23f3025ac32a4ad9f6b313e53,2025-11-14T16:42:03.187000 -CVE-2025-13117,0,0,2feb754cd26c194cd2334dfff46b2c9186b69dc3c90598f05195e1c37297205c,2025-11-14T16:42:03.187000 -CVE-2025-13118,0,0,acf42af67ab94e8aec169835fcb56458403570f697fd59a36cf54c96e8eb2f04,2025-11-14T16:42:03.187000 +CVE-2025-13115,0,1,26a943f901f226d5a4944f2431f45b1d4a0ba3363b20f6ad1b720001e76678c1,2025-11-15T07:15:44.957000 +CVE-2025-13116,0,1,ea8f64d7b7d1ecd545022502e9e7e358c183f245dfe2da4fe7e826f9286ccad1,2025-11-15T07:15:45.330000 +CVE-2025-13117,0,1,51a4072dcf63cfcdae5c6b6fc5d4cd28bb497b3d7d360b79693750c4cda0052a,2025-11-15T07:15:45.617000 +CVE-2025-13118,0,1,0852b80b1bb5c12b1f01406e6d693c1701f9733966c93f75d39621168b7125de,2025-11-15T07:15:45.897000 CVE-2025-13119,0,0,6ca3b55a300f62b8a495032be97ff9f35ce7093a36e16cead9b559cb07fef057,2025-11-14T16:42:03.187000 CVE-2025-1312,0,0,722f6492fca6972e3871e5d5750f81958bc068d23fe675f5f9ed3d0327ccb7dd,2025-03-27T16:45:27.850000 CVE-2025-13120,0,0,043f4346c38bb5f78a61ef5515aacaac48678dd6d13d72eb4b923fb1eedbb713,2025-11-14T16:42:03.187000 @@ -287976,8 +287979,10 @@ CVE-2025-13185,0,0,5908e481b1b60fcabf66dd771539643ba88c6e323fbe1ba985f24aac4967b CVE-2025-13186,0,0,37d27cee7145da2f9c548cefa2ca42b0f450568268ce9da0e15e481e3a713874,2025-11-14T22:15:45.063000 CVE-2025-13187,0,0,a94cf48ee4eb8f8c52118f5fee2b6289aa8f4018ae9a5e7680b27284e68b2366,2025-11-14T22:15:45.287000 CVE-2025-13188,0,0,74a2c82372ef44d5b3f5a9d20a24c46441650cc031441ddbd3fbefa75cab2189,2025-11-14T23:15:43.843000 -CVE-2025-13189,1,1,e766bb2b78a2af51c0028546f4854e8a41ce69740fc01339f3ad98aa36517690,2025-11-15T06:15:43.553000 +CVE-2025-13189,0,0,e766bb2b78a2af51c0028546f4854e8a41ce69740fc01339f3ad98aa36517690,2025-11-15T06:15:43.553000 CVE-2025-1319,0,0,d637e8c27cef5c6953f5ca61f84240e7056619d466e4788e83e08596d90aba8a,2025-03-06T15:09:58.827000 +CVE-2025-13190,1,1,741a88839817fd67a11cee4e5c4c4538122fdde76812cef8ca3774d6feef8a59,2025-11-15T07:15:46.157000 +CVE-2025-13191,1,1,18e40585184c6af337c85d2b0326a9523bb6788ef467c116da9057e8b6f91a07,2025-11-15T07:15:46.627000 CVE-2025-1320,0,0,13286132de07d5b3e75d1dc00002068d71264e2873deeb1c22836d23ecec950d,2025-08-11T14:14:38.580000 CVE-2025-13204,0,0,1dc85e9ea0499260c89378bdd48e709dc481f298ead6a27bd09f5bfe959c653e,2025-11-14T21:15:44.367000 CVE-2025-1321,0,0,3da7738bfdaa0898de004d40e4fadbe2a67a378d68f0f0d09a0d5c3a6126abd2,2025-03-05T18:46:16.890000 @@ -293930,6 +293935,7 @@ CVE-2025-26136,0,0,dd9385473c9de6671090737c25c945df8fcb57e05d63e2da81bba3bba0b8a CVE-2025-26137,0,0,004205e5376adff96c010e010531e03852f5eb4905a1a3c73ed331cf2f44f325,2025-04-01T20:37:44.117000 CVE-2025-26138,0,0,4c83b447574a31d9857c309d7f5649f5104ee78c2e6617a4327eaace6a44e40b,2025-04-01T20:37:28.490000 CVE-2025-2614,0,0,8f2ed06510c2429f847ebad20c780bb0dea3fc02cb9f29c562e6966154e894b2,2025-08-15T16:30:52.027000 +CVE-2025-2615,1,1,79fab36e1f72e260cf87177aea7c83419875a632e3a8a839433b80b1d19e423b,2025-11-15T08:15:45.820000 CVE-2025-26153,0,0,fbd54e08d3ed017020223f9a7b6b482516a3990fb93f496abb0ee8889236b21e,2025-04-18T12:15:15.033000 CVE-2025-26156,0,0,962eae3fa0ac2ee7ef9345ac9060a4193d262807409fdde8171c1e14753b4430,2025-04-02T18:49:33.170000 CVE-2025-26157,0,0,38de05e421d679d343d79e185476ab67eea088104866559f392814d0f7cd1051,2025-06-06T17:58:10.687000 @@ -313874,6 +313880,7 @@ CVE-2025-61690,0,0,4ca1e0da46ce90ce2654e003fface6498e5c618774382ab7e243aa66cffed CVE-2025-61691,0,0,eec839b13fa21074d44e3bbffeae75a4b252e2fc2cfd48d4a38fd47ce3e2546c,2025-10-07T14:13:05.040000 CVE-2025-61692,0,0,6d4b2dd3d04d38f2353f575dfbbccc93c25bf9f06993949a8d61ea2f96eae14c,2025-10-07T14:09:27 CVE-2025-6170,0,0,8ee62512245e2af562128802327ad4e5836ac5fc4d880ffe07a3d169847f512f,2025-11-03T20:19:18.300000 +CVE-2025-6171,1,1,7a21757cdcba124dcb6190cae2c0a698989b08f91a61ca0d40bc54a8ebdb2419,2025-11-15T08:15:46.060000 CVE-2025-61714,0,0,c02deb5a89a330eb5e764d72dfc6a2022cdb6c3eb0846d7603c4fcf125e99cde,2025-10-01T03:15:36.940000 CVE-2025-61715,0,0,acebc75d3bddb97cd22dac1f8d270822aed8a8abfbc5b81f36e35c32dd634eea,2025-10-01T03:15:37.037000 CVE-2025-61716,0,0,6e3f1bbce6eaebe3bc7f361bf2947f5e8e48283a61be4413f8db8272c46649fc,2025-10-01T03:15:37.113000 @@ -315691,6 +315698,7 @@ CVE-2025-6941,0,0,d7ff2114d170dc7e5bff5f40cdb7a06eded9f742c1abd7e043d25b1d0d4b1d CVE-2025-6942,0,0,ce17090e9af93141dbee0b9e4a07d73c52cfd336a45382f6ec1d10b523f6b0dd,2025-07-03T15:13:53.147000 CVE-2025-6943,0,0,9d5662bf5a97ef158e8578579ae7fb47da438572174bda0455cea7222adc555b,2025-10-10T15:31:36.950000 CVE-2025-6944,0,0,cd76b115fd7f359ccb790195d23f72b54c96a11e15da86773a169e7312518130,2025-07-08T16:18:53.607000 +CVE-2025-6945,1,1,bc3d859ad340a2c91817a70c50a69dce26ebaf6c935b621a15b9d1483b3c8975,2025-11-15T08:15:46.280000 CVE-2025-6947,0,0,cec3a1c0fbec7fdea8f722c826042355f13f1c82dbde37df28e8c1e43620b6a1,2025-09-16T12:49:16.060000 CVE-2025-6948,0,0,e074631eac837c6f6633f226d5c10aa078d8aacb82aa64d46ff3ec569d5a5338,2025-07-25T16:42:31.690000 CVE-2025-6949,0,0,3c31534551ea404e4d5dff32740e2d6f1992be5fe1ca54442aa1e2a5a324a225,2025-10-21T19:31:50.020000 @@ -315739,6 +315747,7 @@ CVE-2025-6996,0,0,389b5795c73c63dae649f42ab7815c8dbcec37793ecdb641765ba144a08d4e CVE-2025-6997,0,0,ef30c285c567b5ef817e31f1f8606816007f5424156995e271a8ccfddeae8f28,2025-08-11T19:13:21.383000 CVE-2025-6998,0,0,b2b570d330eb95ecf00eaecd1f0057e21dc6b18b2d8db9a94384530a6200d8c3,2025-07-25T15:29:19.837000 CVE-2025-6999,0,0,57f2f94e8174a2f5d6e026cc8ba66046203a702e201497da69417b6e38b050df,2025-09-16T12:49:16.060000 +CVE-2025-7000,1,1,b79fcae09ea98cf8886614c65a79d99168ddb30631381f55e43bfdef17e3b37a,2025-11-15T08:15:46.487000 CVE-2025-7001,0,0,b65a71149d67562aefa02e66a87df5f05478e88e56059df140a4d9dc9fc4ec95,2025-07-28T14:36:43.487000 CVE-2025-7012,0,0,2ea0353a5f012d08772fe047c1121e5fd68afa7fc20c7e9aa387fbe5460e9165,2025-07-15T13:14:24.053000 CVE-2025-7020,0,0,3a7a1f0717237db96737c5536fb7e46132725cfc93ee918efca9d68522c9a7f9,2025-08-11T18:32:48.867000 @@ -316386,6 +316395,7 @@ CVE-2025-7731,0,0,1d4da55eeeda93e67ead3e1e669419a663710c592339f870a92ab279b4cf51 CVE-2025-7732,0,0,fdda4dc5b2c54b958785b2ac9cdb3d937d98cb631ca468401b18d7ba5b25eaef,2025-08-29T16:22:31.970000 CVE-2025-7734,0,0,a789d1c026abaa03b1450a7b8de5329ea680f270579ad8783b2599b0858b8166,2025-08-15T16:33:23.090000 CVE-2025-7735,0,0,9e855fd260f9738cbc7400c0d679aa2191f854dae0f459704b63c33bef137338,2025-07-17T21:15:50.197000 +CVE-2025-7736,1,1,13174f61bf78fb284bb2711bb5b94d85afbea45c82b3076c1c360ce6ff7a83b8,2025-11-15T08:15:48.077000 CVE-2025-7738,0,0,ac4152bbb7946644775b07dfc9ed27f8a902198d2ef55ecf007de5ba1d3f331d,2025-08-04T22:15:28.823000 CVE-2025-7739,0,0,1888301e2537d2d9349ab75c06b4759cd5eed37e872789a0f403082e39aa77d8,2025-08-15T16:33:31.673000 CVE-2025-7742,0,0,f73971937c79f617122a4b2d73fa4d96db8576ec3ea7bf576a8cdd0a09436d70,2025-07-25T15:29:19.837000 @@ -317505,7 +317515,7 @@ CVE-2025-8990,0,0,fc853b3ee6e8f5b629842d86c7d8cf1ef4835738fff9a847ff1aa62eb9d31f CVE-2025-8991,0,0,9bc6731d09dc448fc200ea123a89ac4a3bfb5e1940cf9355fed4621013d684c0,2025-09-11T15:34:27.427000 CVE-2025-8992,0,0,4b5bb1cb484925e83d97d5f01b3e9c834b8bc76664cbe5b529fbbf06aac3730c,2025-08-27T18:22:30.943000 CVE-2025-8993,0,0,196d4ee6a9c7d77e8b0bae34ee0db110e9f57e42c5993299e7cd589b8660558d,2025-08-18T15:11:54.517000 -CVE-2025-8994,1,1,8a345693daf4c5a913cc17a280e720e72b4fd547bc8bca2618abbbabb552fc5c,2025-11-15T06:15:43.980000 +CVE-2025-8994,0,0,8a345693daf4c5a913cc17a280e720e72b4fd547bc8bca2618abbbabb552fc5c,2025-11-15T06:15:43.980000 CVE-2025-8995,0,0,25826511af9ab581bcdce63e6af2ab460627927570525a8e32b3fbf70e359f08,2025-08-21T19:58:03.550000 CVE-2025-8996,0,0,064606e56aab53dedd11f230de8fda8648fdafdd341b76e62121ebf57874d797,2025-08-21T19:59:55.280000 CVE-2025-8997,0,0,e46317ad4bd00e8a38b4dd18fd441638702e9de3370540c06698efa4ad4272e0,2025-08-25T20:24:45.327000