mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 00:50:49 +00:00
Auto-Update: 2025-11-17T13:00:13.244490+00:00
This commit is contained in:
1 parent
ff501d443e
commit
d4e8869a60
98 files changed
+7075
-672
No files matched your search
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2022-49956",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T11:15:22.773",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:55:48.467",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,39 +15,174 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: rtl8712: se corrige el error \"use after free\". Las devoluciones de llamada _Read/Write_MACREG son nulas, por lo que las funciones read/write_macreg_hdl() solo liberan el puntero \"pcmd\". Esto genera un error \"use after free\". Elim\u00ednelas."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.37",
|
||||
"versionEndExcluding": "4.9.328",
|
||||
"matchCriteriaId": "9AC39563-8D49-42F4-952A-04264AAB2EF7"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.10",
|
||||
"versionEndExcluding": "4.14.293",
|
||||
"matchCriteriaId": "5D9B742D-912D-4E0C-A42F-367086FDEA88"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.15",
|
||||
"versionEndExcluding": "4.19.258",
|
||||
"matchCriteriaId": "253D30F5-3734-4663-883A-288786D3B66E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.20",
|
||||
"versionEndExcluding": "5.4.213",
|
||||
"matchCriteriaId": "4C373116-9E23-44BA-A6B7-87C8BF5C3B85"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.142",
|
||||
"matchCriteriaId": "D44AD643-5591-432E-BD41-C2C737F54AC0"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.66",
|
||||
"matchCriteriaId": "52AE7E2B-7BE3-4B8A-89CC-AB62434899A3"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "5.19.8",
|
||||
"matchCriteriaId": "7FEC7656-4CE2-424C-8830-EDB160E701C8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-11919",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:54.183",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:25:42.943",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,53 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "129.0.6668.58",
|
||||
"matchCriteriaId": "1C2C3CE1-E8FB-4A05-B400-973CE069B66C"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/352516283",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-11920",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.100",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:25:29.400",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,14 +51,53 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "130.0.6723.92",
|
||||
"matchCriteriaId": "5DBDBA83-6E17-4AAC-BDD1-CAF0C29E271A"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_29.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/371840056",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-13178",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.220",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:25:13.680",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,63 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "128.0.6613.84",
|
||||
"matchCriteriaId": "DAE0C7AB-1D61-4449-BC82-915B019F311F"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/40068607",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-13983",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.380",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:24:59.757",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,53 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "136.0.7103.59",
|
||||
"matchCriteriaId": "D17DB57F-A41C-4EED-A254-FC88BF42FBB6"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/379818904",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-48829",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T20:15:34.917",
|
||||
"lastModified": "2025-11-14T16:42:30.503",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:33:50.973",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.6.1.0",
|
||||
"matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-7017",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.520",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:24:41.543",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,63 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "126.0.6478.182",
|
||||
"matchCriteriaId": "26C1F2B0-2FAA-47FE-A54B-29F3332447DE"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/338248595",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-7021",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.650",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:24:30.807",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,52 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "124.0.6367.60",
|
||||
"matchCriteriaId": "AFB90495-B48B-4020-A2CC-51D77CABEB72"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/40064701",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Permissions Required"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-9126",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:55.770",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:24:10.707",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,52 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "127.0.6533.88",
|
||||
"matchCriteriaId": "28DEAEAE-DAA0-4685-A757-54B3D794B182"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/349653218",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,78 @@
|
||||
{
|
||||
"id": "CVE-2025-11681",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T12:15:43.250",
|
||||
"lastModified": "2025-11-17T12:15:43.250",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Denial-of-service condition in M-Files Server versions before 25.11.15392.1 allows an authenticated user to cause the MFserver process to crash."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-400"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://product.m-files.com/security-advisories/cve-2025-11681/",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-11942",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-19T16:15:36.443",
|
||||
"lastModified": "2025-10-21T19:31:25.450",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:45:11.827",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,22 +140,68 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:70mai:x200_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "2025-10-10",
|
||||
"matchCriteriaId": "92AA7E65-AF30-4F7D-A1DC-89B1EE16146F"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:70mai:x200:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F01430C4-0D39-4493-9CEA-7E44EFD0520B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/geo-chen/70mai/blob/main/README.md#finding-9-bypass-device-pairing-of-70mai-dashcam-omni-x200",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.329021",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.329021",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.672520",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-11943",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-19T20:15:36.083",
|
||||
"lastModified": "2025-10-21T19:31:25.450",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:45:50.343",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -116,22 +136,68 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:70mai:x200_firmware:*:*:*:*:*:*:*:*",
|
||||
"versionEndIncluding": "2025-10-10",
|
||||
"matchCriteriaId": "92AA7E65-AF30-4F7D-A1DC-89B1EE16146F"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:70mai:x200:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F01430C4-0D39-4493-9CEA-7E44EFD0520B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/geo-chen/70mai/blob/main/README.md#finding-10-exposed-root-password-via-unauthenticated-http-server",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.329022",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.329022",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.672521",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12855",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-07T14:15:49.167",
|
||||
"lastModified": "2025-11-12T16:20:22.257",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:43:55.817",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,30 +140,70 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/newsletterdel-sql-injection/report.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331501",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331501",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.679743",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/newsletterdel-sql-injection/report.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12856",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-07T14:15:49.420",
|
||||
"lastModified": "2025-11-12T16:20:22.257",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:43:41.087",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,30 +140,70 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/reservation-sql-injection/report.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331502",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331502",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.679744",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/reservation-sql-injection/report.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12857",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-07T14:15:49.680",
|
||||
"lastModified": "2025-11-12T16:20:22.257",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:43:22.537",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,26 +140,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/roombook-sql-injection/report.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331503",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331503",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.679745",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12913",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-08T20:15:34.580",
|
||||
"lastModified": "2025-11-12T16:19:59.103",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:42:54.190",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,26 +140,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/HoyaAm/cve-hoya/blob/main/report.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331631",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331631",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.681061",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12932",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T05:15:43.897",
|
||||
"lastModified": "2025-11-12T16:19:59.103",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:42:33.317",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,28 +138,75 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "42CE41EF-8BBD-48C2-871E-5FE729477690"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/puppytgyh/-CVE/issues/7",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331652",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331652",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682272",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12933",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T06:15:34.133",
|
||||
"lastModified": "2025-11-12T16:19:59.103",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:42:20.207",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,28 +138,75 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "42CE41EF-8BBD-48C2-871E-5FE729477690"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/puppytgyh/-CVE/issues/8",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331653",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331653",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682276",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12938",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T12:15:47.020",
|
||||
"lastModified": "2025-11-12T16:19:59.103",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:41:57.123",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,24 +138,68 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:projectworlds:online_admission_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2454BEDC-553B-4192-A2AE-48CEEA8B71E8"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/juzidddd/CVE/issues/1",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331662",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331662",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682313",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-12939",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-10T13:15:44.713",
|
||||
"lastModified": "2025-11-14T19:15:57.257",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:41:39.120",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,32 +138,84 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:janobe:interview_management_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "765F8425-3BE1-4C95-A372-B03A323B3C5C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/puppytgyh/-CVE/issues/10",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.331663",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.331663",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682314",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/puppytgyh/-CVE/issues/10",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13012",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.253",
|
||||
"lastModified": "2025-11-13T16:15:49.603",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:39:49.590",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,65 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "115.30.0",
|
||||
"matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionStartIncluding": "140.0",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991458",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-89/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13013",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.367",
|
||||
"lastModified": "2025-11-13T16:15:49.770",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:39:40.203",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,65 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "115.30.0",
|
||||
"matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionStartIncluding": "140.0",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991945",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-89/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13014",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.473",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:39:29.170",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,65 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "115.30.0",
|
||||
"matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionStartIncluding": "140.0",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994241",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-89/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13015",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.573",
|
||||
"lastModified": "2025-11-13T16:15:49.927",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:39:17.383",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,65 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "115.30.0",
|
||||
"matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionStartIncluding": "140.0",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994164",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-89/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13016",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.677",
|
||||
"lastModified": "2025-11-13T16:15:50.083",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:38:52.407",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -35,18 +35,63 @@
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992130",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13017",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.793",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:38:44.923",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,18 +47,51 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980904",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13018",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:38.900",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:38:28.200",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,18 +47,51 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984940",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13019",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.000",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:38:16.037",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,18 +47,51 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988412",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13020",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.097",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:38:00.403",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,18 +47,51 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
|
||||
"versionEndExcluding": "140.5.0",
|
||||
"matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1995686",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-88/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13021",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.193",
|
||||
"lastModified": "2025-11-13T16:15:50.227",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:37:50.063",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986431",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13022",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.287",
|
||||
"lastModified": "2025-11-13T16:15:50.383",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:37:38.103",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988488",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13023",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.403",
|
||||
"lastModified": "2025-11-13T16:15:50.533",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:37:29.513",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992032",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13024",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.510",
|
||||
"lastModified": "2025-11-13T16:15:50.683",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:37:21.517",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992902",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13025",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.613",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:37:12.383",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994022",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13026",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.713",
|
||||
"lastModified": "2025-11-12T16:19:34.210",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:36:55.850",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994441",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13027",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-11T16:15:39.820",
|
||||
"lastModified": "2025-11-12T22:15:43.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:36:27.433",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,38 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
|
||||
"versionEndExcluding": "145.0",
|
||||
"matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1987237%2C1990079%2C1991715%2C1994994",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Broken Link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.mozilla.org/security/advisories/mfsa2025-87/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13057",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T19:15:35.607",
|
||||
"lastModified": "2025-11-14T16:42:30.503",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:34:13.523",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,32 +138,84 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:campcodes:school_fees_payment_management_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "450DC6BC-1A28-40FC-987F-4AA647D910F5"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/QingqingOK/CVE/issues/1",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332184",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332184",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682367",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.campcodes.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/QingqingOK/CVE/issues/1",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13059",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T20:15:39.170",
|
||||
"lastModified": "2025-11-14T18:15:44.860",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:33:23.140",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,32 +138,84 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:oretnom23:alumni_management_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "D7D6E2A9-DEF6-4636-BC2D-36085C47930C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/CaseyW33/CVE/issues/1",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332186",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332186",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682548",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/CaseyW33/CVE/issues/1",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13060",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T20:15:39.357",
|
||||
"lastModified": "2025-11-14T18:15:45.413",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:32:35.167",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,32 +138,82 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:oretnom23:survey_application_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BC838E1E-FAEC-4100-8364-41B7D342A010"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332187",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332187",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682565",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13061",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T21:15:48.763",
|
||||
"lastModified": "2025-11-14T17:15:59.597",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:31:25.667",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,32 +138,84 @@
|
||||
"value": "CWE-434"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-434"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:angeljudesuarez:online_voting_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "89B24FA5-BBF1-4283-B2B2-8F1A365BD78C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/yihaofuweng/cve/issues/55",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://itsourcecode.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332188",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332188",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.682587",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/yihaofuweng/cve/issues/55",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13097",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:56.443",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:23:36.557",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,86 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "136.0.7103.59",
|
||||
"matchCriteriaId": "D17DB57F-A41C-4EED-A254-FC88BF42FBB6"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "136.0.7103.48",
|
||||
"matchCriteriaId": "BE27FC5D-F829-489D-B54E-07E00B2E5997"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/402791076",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13102",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:56.563",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:18:45.040",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,51 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "134.0.6998.35",
|
||||
"matchCriteriaId": "CCEA13AF-B0C2-4D3A-A4DA-60C02F7FC46D"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/351564774",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13107",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:56.687",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:18:25.437",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,62 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "140.0.7339.80",
|
||||
"matchCriteriaId": "614C3A2A-11F8-45CE-BEF0-9033AD4AE057"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/429440615",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13119",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T15:15:50.857",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:30:52.537",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
|
||||
"baseScore": 6.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,28 +138,75 @@
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-352"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:simple_e-banking_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "DED1A614-568F-49D9-A364-A8ECC0E6B07C"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332324",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332324",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.683335",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13122",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T18:15:50.110",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:30:18.140",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -118,24 +138,67 @@
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332350",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332350",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.683789",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13169",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T16:15:53.480",
|
||||
"lastModified": "2025-11-14T17:16:00.407",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:17:57.580",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,30 +140,70 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BB45381F-7BBB-408B-98AA-D931AC3C779B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/hanshi-798/CVE/blob/main/tmp72/report.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332457",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332457",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.684616",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/hanshi-798/CVE/blob/main/tmp72/report.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-13170",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T16:15:53.737",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:18:14.443",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -76,6 +76,26 @@
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
@@ -120,26 +140,63 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BB45381F-7BBB-408B-98AA-D931AC3C779B"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/pfdlyy/CVE/issues/1",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332458",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Permissions Required",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332458",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.684617",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory",
|
||||
"VDB Entry"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,141 @@
|
||||
{
|
||||
"id": "CVE-2025-13275",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T11:15:42.767",
|
||||
"lastModified": "2025-11-17T11:15:42.767",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 4.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
|
||||
"baseScore": 5.8,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "MULTIPLE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "MEDIUM",
|
||||
"exploitabilityScore": 6.4,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-284"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-434"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/mhszed/Report/blob/main/php-business-website%20upload.docx",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332610",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332610",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.690049",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,141 @@
|
||||
{
|
||||
"id": "CVE-2025-13276",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T11:15:46.710",
|
||||
"lastModified": "2025-11-17T11:15:46.710",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
||||
"baseScore": 7.5,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "NONE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 10.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-74"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Nianalb/Report_Online-Banking-System/blob/main/SQL.docx",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332611",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332611",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.690087",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,145 @@
|
||||
{
|
||||
"id": "CVE-2025-13277",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T12:15:44.010",
|
||||
"lastModified": "2025-11-17T12:15:44.010",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.9,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
||||
"baseScore": 7.5,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "NONE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "HIGH",
|
||||
"exploitabilityScore": 10.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-74"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://code-projects.org/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_004",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.332612",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.332612",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.690140",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37841",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:04.837",
|
||||
"lastModified": "2025-11-03T20:18:38.270",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:50:14.970",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,51 +15,201 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pm: cpupower: bench: Evitar la desreferenciaci\u00f3n de valores NULL en caso de fallo de malloc. Si malloc devuelve NULL debido a poca memoria, el puntero 'config' puede ser NULL. Se ha a\u00f1adido una comprobaci\u00f3n para evitar la desreferenciaci\u00f3n de valores NULL."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "5.4.293",
|
||||
"matchCriteriaId": "389EB980-4648-446E-A0DC-5FB0265E0F02"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.237",
|
||||
"matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.181",
|
||||
"matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0e297a02e03dceb2874789ca40bd4e65c5371704",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/208baa3ec9043a664d9acfb8174b332e6b17fb69",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/34a9394794b0f97af6afedc0c9ee2012c24b28ed",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5e38122aa3fd0f9788186e86a677925bfec0b2d1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/79bded9d70142d2a11d931fc029afece471641db",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/87b9f0867c0afa7e892f4b30c36cff6bf2707f85",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/942a4b97fc77516678b1d8af1521ff9a94c13b3e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ceec06f464d5cfc0ba966225f7d50506ceb62242",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8d28fa305b78c5d1073b63f26db265ba8291ae1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37842",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:04.963",
|
||||
"lastModified": "2025-09-09T17:15:43.797",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:49:38.210",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,27 +15,117 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spi: fsl-qspi: usar la funci\u00f3n devm en lugar de eliminar el controlador. El controlador usa las API devm para administrar clk/irq/resources y registrar el controlador spi, pero la funci\u00f3n de eliminaci\u00f3n heredada se llamar\u00e1 primero durante la desconexi\u00f3n del dispositivo y activar\u00e1 el p\u00e1nico del kernel. Se debe omitir la funci\u00f3n de eliminaci\u00f3n y usar devm_add_action_or_reset() para limpiar el controlador y asegurar la secuencia de liberaci\u00f3n. Se activa el p\u00e1nico del kernel en i.MX8MQ mediante echo 30bb0000.spi >/sys/bus/platform/drivers/fsl-quadspi/unbind."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-noinfo"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.2",
|
||||
"versionEndExcluding": "6.6.105",
|
||||
"matchCriteriaId": "FFCAC8A9-E253-4F04-98F7-26A8EB5B9317"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.36",
|
||||
"matchCriteriaId": "2BD88DEC-018F-4F40-8E29-A2CA89813EBA"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/40369bfe717e96e26650eeecfa5a6363563df6e4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/439688dbe82baa10d4430dc3252bb5ef1183a171",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/50ae352c1848cab408fb4f7d7f50c71f818bbdbf",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f68b27d82a749117d9c7d7f33fa53f46373e38e2",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f9bfb3a5f6f616f3eb7665c8ff3bcb9760ae33c8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37843",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.077",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:49:24.540",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,103 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: pciehp: Evitar comprobaciones innecesarias de reemplazo de dispositivo. La desconexi\u00f3n en caliente de puertos PCI hotplug anidados sufre una condici\u00f3n de ejecuci\u00f3n persistente que puede provocar un bloqueo: un puerto hotplug principal adquiere pci_lock_rescan_remove() y espera a que pciehp se desvincule de un puerto hotplug secundario. Mientras tanto, ese puerto hotplug secundario tambi\u00e9n intenta adquirir pci_lock_rescan_remove() para eliminar sus propios secundarios. El bloqueo solo ocurre si el principal adquiere pci_lock_rescan_remove() primero, no si el secundario lo adquiere primero. A lo largo de los a\u00f1os se han propuesto y descartado varias soluciones alternativas para evitar el problema, por ejemplo: https://lore.kernel.org/r/4c882e25194ba8282b78fe963fec8faae7cf23eb.1529173804.git.lukas@wunner.de/ Se est\u00e1 trabajando en una soluci\u00f3n adecuada, pero requiere m\u00e1s tiempo, ya que no es trivial y es necesariamente intrusiva. La reciente confirmaci\u00f3n 9d573d19547b (\"PCI: pciehp: Detectar reemplazo de dispositivo durante la suspensi\u00f3n del sistema\") provoca una mayor frecuencia del bloqueo al eliminar m\u00e1s de un dispositivo Thunderbolt durante la suspensi\u00f3n del sistema. Esta confirmaci\u00f3n buscaba detectar el reemplazo del dispositivo, pero tambi\u00e9n se activ\u00f3 al eliminarlo. Es imposible diferenciar con precisi\u00f3n entre reemplazo y eliminaci\u00f3n, ya que pci_get_dsn() devuelve 0 tanto si el dispositivo se elimin\u00f3 como si se reemplaz\u00f3 por uno sin n\u00famero de serie del dispositivo. Evite la ocurrencia m\u00e1s frecuente del interbloqueo comprobando si el puerto hotplug se elimin\u00f3 en caliente. De ser as\u00ed, no tiene sentido comprobar si su dispositivo secundario se reemplaz\u00f3. Esto funciona porque la llamada de retorno ->resume_noirq() se invoca de arriba a abajo para toda la jerarqu\u00eda: un puerto hotplug principal que detecta el reemplazo (o la eliminaci\u00f3n) de un dispositivo marca todos los secundarios como eliminados mediante pci_dev_set_disconnected() y un puerto hotplug secundario puede entonces detectar con fiabilidad su eliminaci\u00f3n."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-667"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.11",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0d0bbd01f7c0ac7d1be9f85aaf2cd0baec34655f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7535d10a2c61baeff493300070cf04d9ddda216b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e3260237aaadc9799107ccb940c6688195c4518d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e4a1d7defbc2d806540720a5adebe24ec3488683",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37844",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.190",
|
||||
"lastModified": "2025-11-03T20:18:38.387",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:49:02.350",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,47 +15,188 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cifs: evitar la desreferencia de puntero nulo en la llamada a dbg. cifs_server_dbg() implica que el servidor no es nulo, por lo que se mueve la llamada bajo condici\u00f3n para evitar la desreferencia de puntero nulo. Encontrada por el Centro de Verificaci\u00f3n de Linux (linuxtesting.org) con SVACE."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.6.7",
|
||||
"versionEndExcluding": "5.10.237",
|
||||
"matchCriteriaId": "DE8918E9-DA45-4659-A947-68CAA6785A78"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.181",
|
||||
"matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/20048e658652e731f5cadf4a695925e570ca0ff9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/6c14ee6af8f1f188b668afd6d003f7516a507b08",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/864ba5c651b03830f36f0906c21af05b15c1aaa6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9c9000cb91b986eb7f75835340c67857ab97c09b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b2a1833e1c63e2585867ebeaf4dd41494dcede4b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b4885bd5935bb26f0a414ad55679a372e53f9b9b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ba3ce6c60cd5db258687dfeba9fc608f5e7cadf3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e0717385f5c51e290c2cd2ad4699a778316b5132",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37845",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.307",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:48:18.933",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,113 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tracing: fprobe events: Fix possible UAF on modules. La confirmaci\u00f3n ac91052f0ae5 (\"tracing: tprobe-events: Fix leakage of module refcount\") traslad\u00f3 try_module_get() de __find_tracepoint_module_cb() al llamador de find_tracepoint(), pero esto introdujo un posible UAF porque el m\u00f3dulo puede descargarse antes que try_module_get(). En este caso, el objeto del m\u00f3dulo tambi\u00e9n deber\u00eda liberarse. Por lo tanto, try_module_get() no solo falla, sino que puede acceder al objeto liberado. Para evitarlo, vuelva a intentar try_module_get() en __find_tracepoint_module_cb()."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.12.21",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "7AD01D25-A815-4E20-8715-FB2B50EE7FC2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13.9",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "A992E5FB-2832-43F3-BCBF-5AE81D7E5BD7"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14.1",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "4E7F0901-3C1F-4954-B0AB-4531CB0C37DD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.14:-:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "7DE421BA-0600-4401-A175-73CAB6A6FB4E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/626f01f4d26e8cf92e69c1df53036153c8e98a20",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/868df4eb784c3ccc7e4340a9ea993cbbedca167e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a27d2de2472b1cc7d582ab405d1d5832a80481de",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dd941507a9486252d6fcf11814387666792020f3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37846",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.430",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:54:50.310",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,103 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: mops: No desreferenciar el registro src para una operaci\u00f3n set. El registro fuente no se utiliza para SET* y leerlo puede resultar en un error de acceso a la matriz UBSAN fuera de los l\u00edmites, espec\u00edficamente cuando la excepci\u00f3n MOPS se toma de una secuencia SET* con XZR (reg 31) como origen. Arquitect\u00f3nicamente, este es el \u00fanico caso donde un campo src/dst/size en el ESR puede reportarse como 31. Antes de 2de451a329cf662b, el c\u00f3digo en do_el0_mops() era benigno ya que el uso de pt_regs_read_reg() imped\u00eda el acceso fuera de los l\u00edmites."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
|
||||
"baseScore": 7.1,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.2
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-125"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/43267d934eacff6c70e15545d804ebbcab8a0bf5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5f6022a74147675124b781fdc056b291850e7786",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a13bfa4fe0d6949cea14718df2d1fe84c38cd113",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/eec737e17e5567e08148550a7f1d94d495b9fb17",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37847",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.537",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:54:40.887",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,108 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrige el bloqueo en ivpu_ms_cleanup(). Se corrige el bloqueo en ivpu_ms_cleanup() impidiendo la reanudaci\u00f3n en tiempo de ejecuci\u00f3n tras adquirir file_priv->ms_lock. Durante un fallo en la reanudaci\u00f3n en tiempo de ejecuci\u00f3n, se ejecuta un arranque en fr\u00edo que llama a ivpu_ms_cleanup_all(). Esta funci\u00f3n llama a ivpu_ms_cleanup(), que adquiere file_priv->ms_lock y provoca el bloqueo."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-667"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.11",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37848",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.650",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:54:28.873",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,108 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrigen los interbloqueos relacionados con el mantenimiento preventivo en las IOCTL de MS. Se impide la reanudaci\u00f3n/suspensi\u00f3n en tiempo de ejecuci\u00f3n mientras las IOCTL de MS est\u00e1n en curso. Una suspensi\u00f3n fallida llamar\u00e1 a ivpu_ms_cleanup(), que intentar\u00e1 adquirir file_priv->ms_lock, que ya est\u00e1 en poder de las IOCTL."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-667"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.11",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/84547128526441b45c3c241419dececf20c30104",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/afada73000bef7c79a22f0d7e93fac414eeff19e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c3d9fc2f2746b52e9f820a13c53b4418bec04b48",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/d893da85e06edf54737bb80648bb58ba8fd56d9f",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37849",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.760",
|
||||
"lastModified": "2025-11-03T20:18:38.493",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:54:15.827",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,35 +15,152 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: arm64: Desactivaci\u00f3n de vGIC al crear una vCPU fallida. Si kvm_arch_vcpu_create() no comparte la p\u00e1gina de vCPU con el hipervisor, propagamos el error a ioctl, pero dejamos los datos de vCPU de vGIC inicializados. Cabe destacar que esto solo filtra la memoria correspondiente cuando se destruye la vCPU, sino que tambi\u00e9n puede provocar un uso despu\u00e9s de la liberaci\u00f3n si el dispositivo redistribuidor intenta acceder a la vCPU. Agregue la limpieza faltante a kvm_arch_vcpu_create() para garantizar que las estructuras de vCPU de vGIC se destruyan en caso de error."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "29C64220-D258-41B3-A931-B8C3456115E5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/07476e0d932afc53c05468076393ac35d0b4999e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2480326eba8ae9ccc5e4c3c2dc8d407db68e3c52",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/250f25367b58d8c65a1b060a2dda037eea09a672",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/5085e02362b9948f82fceca979b8f8e12acb1cc5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c322789613407647a05ff5c451a7bf545fb34e73",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f1e9087abaeedec9bf2894a282ee4f0d8383f299",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37850",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:05.887",
|
||||
"lastModified": "2025-11-03T20:18:38.590",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:53:47.893",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,51 +15,207 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pwm: mediatek: Evitar la divisi\u00f3n por cero en pwm_mediatek_config(). Con CONFIG_COMPILE_TEST y !CONFIG_HAVE_CLK, pwm_mediatek_config() presenta una divisi\u00f3n por cero en la siguiente l\u00ednea: do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm])); debido a que la versi\u00f3n !CONFIG_HAVE_CLK de clk_get_rate() devuelve cero. Se supone que se trata de un problema te\u00f3rico: COMPILE_TEST anula la dependencia de RALINK, que seleccionar\u00eda COMMON_CLK. En cualquier caso, es recomendable comprobar el error expl\u00edcitamente para evitar la divisi\u00f3n por cero. Corrige la siguiente advertencia: drivers/pwm/pwm-mediatek.o: advertencia: objtool: .text: final inesperado de secci\u00f3n [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-369"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "4.12",
|
||||
"versionEndExcluding": "5.4.293",
|
||||
"matchCriteriaId": "28901DC7-F3CA-49FA-934F-39F1394927F6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.237",
|
||||
"matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.181",
|
||||
"matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/4cb15042b5f3ec0474e91cf379120cc597625dbb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7ca59947b5fcf94e7ea4029d1bd0f7c41500a161",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8b9f60725d74b72c238e4437c957d0217746b506",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8ddbec73ea2598d8414e8f7103241b55cf877010",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c343856ff2689ce0afef823592732fc178ef4aac",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e1206d8e1651c9f62e5640b69b14d925b1a0a00a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f3e9cf266c2c103cf071e15d7a17e2c699fff3c5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37851",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:06.003",
|
||||
"lastModified": "2025-11-03T20:18:38.690",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:52:55.803",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,51 +15,202 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fbdev: omapfb: A\u00f1adir comprobaci\u00f3n del valor \"plane\". La funci\u00f3n dispc_ovl_setup no est\u00e1 dise\u00f1ada para funcionar con el valor OMAP_DSS_WB del par\u00e1metro de enumeraci\u00f3n \"plane\". Este valor se inicializa en dss_init_overlays y, en el estado actual del c\u00f3digo, no puede tomar este valor, por lo que no supone un problema real. Para fines de codificaci\u00f3n defensiva, no ser\u00eda superfluo comprobar el valor del par\u00e1metro, ya que algunas funciones en la pila de llamadas procesan este valor correctamente y otras no. Por ejemplo, en dispc_ovl_setup_global_alpha, puede provocar un desbordamiento de b\u00fafer. A\u00f1adir comprobaci\u00f3n para este valor. Encontrado por el Centro de Verificaci\u00f3n de Linux (linuxtesting.org) con la herramienta de an\u00e1lisis est\u00e1tico SVACE."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-674"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "2.6.33",
|
||||
"versionEndExcluding": "5.4.293",
|
||||
"matchCriteriaId": "27FB98F5-D1A3-4A4D-8488-F5009EF8ACD5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.5",
|
||||
"versionEndExcluding": "5.10.237",
|
||||
"matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.11",
|
||||
"versionEndExcluding": "5.15.181",
|
||||
"matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.16",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/09dbf22fd68c2f1a81ab89670ffa1ec3033436c4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3e411827f31db7f938a30a3c7a7599839401ec30",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/4efd8ef5e40f2c7a4a91a5a9f03140bfa827da89",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/52eafaa56f8f6d6a0cdff9282b25b4acbde34edc",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/660a53a0694d1f3789802509fe729dd4656fc5e0",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9b0a41589ee70529b20e1e0108d03f10c649bdc4",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a570efb4d877adbf3db2dc95487f2ba6bfdd148a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/cdf41d72e8b015d9ea68f5a1c0a79624e7c312aa",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fda15c5b96b883d62fb2d84a3a1422aa87717897",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37852",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:06.133",
|
||||
"lastModified": "2025-11-03T20:18:38.787",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:52:14.693",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,35 +15,152 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: manejo de errores de amdgpu_cgs_create_device() en amd_powerplay_create(). Se ha a\u00f1adido el manejo de errores para propagar los fallos de amdgpu_cgs_create_device() al llamador. Cuando amdgpu_cgs_create_device() falla, se libera hwmgr y se devuelve -ENOMEM para evitar la desreferencia de punteros nulos. [v1]->[v2]: Se ha cambiado el c\u00f3digo de error de -EINVAL a -ENOMEM. Se ha liberado hwmgr."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "29C64220-D258-41B3-A931-B8C3456115E5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1435e895d4fc967d64e9f5bf81e992ac32f5ac76",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/22ea19cc089013b55c240134dbb2797700ff5a6a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/55ef52c30c3e747f145a64de96192e37a8fed670",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b784734811438f11533e2fb9e0deb327844bdb56",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dc4380f34613eaae997b3ed263bd1cb3d0fd0075",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f8693e1bae9c08233a2f535c3f412e157df32b33",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37853",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:06.257",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:51:46.010",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,27 +15,117 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: debugfs hang_hws omite la GPU con MES. La prueba de reinicio de GPU con HWS utiliza debugfs hang_hws. En MES, esto bloquea el kernel con acceso a puntero nulo porque dqm->packet_mgr no est\u00e1 configurado para la ruta MES. Se omite la GPU con MES por ahora. La interfaz debugfs de MES hang_hws ser\u00e1 compatible m\u00e1s adelante."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "3.19",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "51032A8B-FD1A-4B07-B6A0-B977A54BC974"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1a322b330dc0b775d1d7a84e55c752d9451bfe7d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/24b9e0e2e6147314c22d821f0542c4dd9a320c40",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a36f8d544522a19ef06ed9e84667d154dcb6be52",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f84c57906f0fd2185e557d2552b20aa8430a4677",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fe9d0061c413f8fb8c529b18b592b04170850ded",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37854",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:06.367",
|
||||
"lastModified": "2025-11-03T20:18:38.880",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:51:35.040",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,35 +15,153 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: Se soluciona el problema de bloqueo del reinicio en modo 1. Si el programador de hardware se bloquea y se usa el reinicio en modo 1 para recuperar la GPU, KFD indica al espacio de usuario que cancele los procesos. Tras la salida del proceso, las colas de usuario siguen usando la GPU para acceder a la memoria del sistema antes de que se restablezca el hardware mientras el trabajador de limpieza de KFD libera memoria del sistema y VRAM. Existe un error de ejecuci\u00f3n de use-after-free en el que KFD asigna y reutiliza la memoria del sistema liberada, y la cola de usuario escribe en la misma memoria del sistema para corromper la estructura de datos y provocar el bloqueo del controlador. Para solucionar esta carrera, el trabajador de limpieza de KFD finaliza las colas de usuario, luego vac\u00eda reset_domain wq para esperar a que se complete cualquier reinicio en curso de la GPU y, a continuaci\u00f3n, libera los BO pendientes. "
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.18",
|
||||
"versionEndExcluding": "6.1.135",
|
||||
"matchCriteriaId": "A0EC2B6B-FB7D-41D6-8B68-C30B83522362"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.2",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/57c9dabda80ac167de8cd71231baae37cc2f442d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/6f30a847432cae84c7428e9b684b3e3fa49b2391",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/89af6b39f028c130d4362f57042927f005423e6a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9c4bcdf4068aae3e17e31c144300be405cfa03ff",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/f0b4440cdc1807bb6ec3dce0d6de81170803569b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Mailing List"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37855",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-09T07:16:06.487",
|
||||
"lastModified": "2025-05-12T17:32:52.810",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:51:05.050",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,15 +15,75 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Posible desreferencia de puntero nulo [POR QU\u00c9] En algunas situaciones, dc->res_pool puede ser nulo. [C\u00d3MO] Compruebe si el puntero es nulo antes de desreferenciarlo."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c87d202692de34ee71d1fd4679a549a29095658a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/dc2de1ac7145f882f3c03d2d6f84583ae7e35d41",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37941",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:31.883",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:58:01.557",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,103 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: c\u00f3decs: wcd937x: se corrige una posible p\u00e9rdida de memoria en wcd937x_soc_codec_probe(). Cuando fallan snd_soc_dapm_new_controls() o snd_soc_dapm_add_routes(), wcd937x_soc_codec_probe() regresa sin liberar 'wcd937x->clsh_info', que est\u00e1 asignado por wcd_clsh_ctrl_alloc. Se ha a\u00f1adido wcd_clsh_ctrl_free() para evitar posibles p\u00e9rdidas de memoria."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.11",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3e330acf4efd63876d673c046cd073a1d4ed57a8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/aafb5325aca3e806b3ea3707402189263473d257",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b573e04116fd33b9143fa276bbab2f0afad0a1ae",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37942",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:32.000",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:54.147",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,102 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: pidff: Aseg\u00farese de obtener el grupo antes de comprobar SIMULTANEOUS_MAX. Como se\u00f1al\u00f3 Anssi hace unos 20 a\u00f1os, el informe del grupo a veces presenta errores. Esto funcionaba correctamente en muchos dispositivos, pero causaba errores en VRS DirectForce PRO. En este caso, nos aseguramos de que el informe del grupo se vuelva a obtener antes de intentar acceder a cualquiera de sus campos. El bucle While se sustituy\u00f3 por un bucle For y las condiciones de salida se reubicaron para reducir la posibilidad de crear un bucle infinito."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-835"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "C87CF81F-5426-4E15-8A61-B8F0E6046484"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1f650dcec32d22deb1d6db12300a2b98483099a9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/211861869766a7bb7c72158aee0140ec67e182a7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/344d903be8b5c0733ed0f4bc5be34b4a26d905c8",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a6f5d30a5c7713238c5c65c98ad95dacb73688d5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37943",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:32.133",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:46.727",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,27 +15,117 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: Se ha corregido el acceso no v\u00e1lido a datos en ath12k_dp_rx_h_undecap_nwifi. En ciertos casos, el hardware podr\u00eda proporcionar paquetes con una longitud superior a la longitud m\u00e1xima del encabezado Wi-Fi nativo. Esto puede provocar el acceso y la modificaci\u00f3n de campos del encabezado dentro de la funci\u00f3n ath12k_dp_rx_h_undecap_nwifi para el tipo de decap DP_RX_DECAP_TYPE_NATIVE_WIFI, lo que podr\u00eda provocar acceso no v\u00e1lido a datos y corrupci\u00f3n de memoria. Se ha a\u00f1adido una comprobaci\u00f3n de seguridad antes de procesar el SKB para evitar el acceso no v\u00e1lido a datos en la funci\u00f3n Wi-Fi nativa undecap para el tipo de decap DP_RX_DECAP_TYPE_NATIVE_WIFI. Probado en: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-787"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.3",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "E490AC3E-4FCB-404E-B82F-0DE1390D06A2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/3abe15e756481c45f6acba3d476cb3ca4afc3b61",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/50be1fb76556e80af9f5da80f28168b6c71bce58",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/6ee653194ddb83674913fd2727b8ecfae0597ade",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/7f1d986da5c6abb75ffe4d0d325fc9b341c41a1c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9a0dddfb30f120db3851627935851d262e4e7acb",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37944",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:32.310",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:39.790",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,27 +15,117 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: Se corrige la obtenci\u00f3n de entrada no v\u00e1lida en ath12k_dp_mon_srng_process Actualmente, ath12k_dp_mon_srng_process usa ath12k_hal_srng_src_get_next_entry para obtener la siguiente entrada del anillo de destino. Esto es incorrecto porque ath12k_hal_srng_src_get_next_entry est\u00e1 dise\u00f1ado para anillos de origen, no de destino. Esto conduce a la obtenci\u00f3n de entradas no v\u00e1lidas, lo que puede causar corrupci\u00f3n de datos o bloqueos debido al acceso a ubicaciones de memoria incorrectas. Esto sucede porque el anillo de origen y el anillo de destino tienen diferentes mecanismos de manejo y el uso de la funci\u00f3n incorrecta da como resultado una aritm\u00e9tica de punteros y una gesti\u00f3n del anillo incorrectas. Para solucionar este problema, reemplace la llamada a ath12k_hal_srng_src_get_next_entry por ath12k_hal_srng_dst_get_next_entry en ath12k_dp_mon_srng_process. Esto garantiza que se utilice la funci\u00f3n correcta para obtener entradas del anillo de destino, evitando accesos no v\u00e1lidos a la memoria. Probado en: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1. Probado en: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-787"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.3",
|
||||
"versionEndExcluding": "6.6.88",
|
||||
"matchCriteriaId": "E490AC3E-4FCB-404E-B82F-0DE1390D06A2"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.25",
|
||||
"matchCriteriaId": "8E59EE65-FA6B-4AE4-8125-26135E28BF35"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.4",
|
||||
"matchCriteriaId": "5722F93B-F696-460E-B30C-6757CB22FAB4"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/298f0aea5cb32b5038f991f5db201a0fcbb9a31b",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/2c512f2eadabb1e80816116894ffaf7d802a944e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/63fdc4509bcf483e79548de6bc08bf3c8e504bb3",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ab7edf42ce800eb34d2f73dd7271b826661a06a5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b6a3b2b2cead103089d3bb7a57d8209bdfa5399d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37945",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:32.453",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:32.553",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,115 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: phy: permite que las operaciones PM del bus MDIO inicien o detengan la m\u00e1quina de estados para PHY controlada por phylink DSA tiene 2 tipos de controladores: 1. Los que llaman a dsa_switch_suspend() y dsa_switch_resume() desde las operaciones PM de su dispositivo: qca8k-8xxx, bcm_sf2, microchip ksz 2. Los que no lo hacen: todos los dem\u00e1s. Los m\u00e9todos anteriores deber\u00edan ser opcionales. Para el tipo 1, dsa_switch_suspend() llama a dsa_user_suspend() -> phylink_stop() y dsa_switch_resume() llama a dsa_user_resume() -> phylink_start(). Estos parecen buenos candidatos para establecer mac_managed_pm = true porque esa es esencialmente su definici\u00f3n [1], pero ese no parece ser el mayor problema por ahora y no es en lo que se centra este cambio. Hablando estrictamente sobre la segunda categor\u00eda de controladores DSA (que no tienen PM administrado por MAC, lo que significa que para sus PHYs conectados, mdio_bus_phy_suspend() y mdio_bus_phy_resume() deben ejecutarse por completo), he notado que se activa la siguiente advertencia de mdio_bus_phy_resume(): WARN_ON(phydev->state != PHY_HALTED && phydev->state != PHY_READY && phydev->state != PHY_UP); porque la m\u00e1quina de estados PHY est\u00e1 en ejecuci\u00f3n. Se est\u00e1 ejecutando como resultado de un dsa_user_open() -> ... -> phylink_start() -> phy_start() previo iniciado por el usuario. El mdio_bus_phy_suspend() anterior deber\u00eda haber llamado a phy_stop_machine(), pero no lo hizo. Por eso, el PHY est\u00e1 en estado PHY_NOLINK cuando se ejecuta mdio_bus_phy_resume(). mdio_bus_phy_suspend() no llam\u00f3 a phy_stop_machine() porque, para phylink, el puntero a la funci\u00f3n phydev->adjust_link es NULL. Esto parece ser un tecnicismo introducido por el commit fddd91016d16 (\"phylib: correcci\u00f3n del reinicio de la m\u00e1quina de estados PAL al reanudar\"). Esta confirmaci\u00f3n se escribi\u00f3 antes de que existiera phylink y su objetivo era evitar fallos con controladores de consumidor que no utilizan la m\u00e1quina de estados PHY; phylink siempre lo hace al usar una PHY. Sin embargo, phylink no se ha desarrollado hist\u00f3ricamente con la suspensi\u00f3n/reanudaci\u00f3n en mente, y aparentemente no se ha probado demasiado en ese escenario, lo que ha permitido que este error pase desapercibido durante tanto tiempo. Adem\u00e1s, antes de WARN_ON(), probablemente habr\u00eda sido invisible. De hecho, este problema no se limita a los controladores DSA de tipo 2 (seg\u00fan la clasificaci\u00f3n ad hoc anterior), sino que se puede extrapolar a cualquier controlador MAC con phylink y operaciones de PM PHY gestionadas por bus MDIO. DSA es justo donde se report\u00f3 el problema. Suponiendo que mac_managed_pm est\u00e9 configurado correctamente, una b\u00fasqueda r\u00e1pida indica que los siguientes controladores podr\u00edan estar afectados: $ grep -Zlr PHYLINK_NETDEV drivers/ | xargs -0 grep -L mac_managed_pm drivers/net/ethernet/atheros/ag71xx.c drivers/net/ethernet/microchip/sparx5/sparx5_main.c drivers/net/ethernet/microchip/lan966x/lan966x_main.c drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c drivers/net/ethernet/freescale/dpaa/dpaa_eth.c drivers/net/ethernet/freescale/ucc_geth.c drivers/net/ethernet/freescale/enetc/enetc_pf_common.c drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c drivers/net/ethernet/marvell/mvneta.c Haga que las condiciones existentes dependan de que el dispositivo PHY tenga una implementaci\u00f3n de phydev->phy_link_change() igual al phy_link_change() predeterminado proporcionado por phylib. De lo contrario, sabemos impl\u00edcitamente que phydev cuenta con la funci\u00f3n de devoluci\u00f3n de llamada phylink_phy_change() proporcionada por phylink, y cuando se usa phylink, la m\u00e1quina de estados PHY siempre debe detenerse/iniciar en la ruta de suspensi\u00f3n/reinicio. El c\u00f3digo est\u00e1 estructurado de tal manera que, si phydev->phy_link_change() no est\u00e1 presente, es cuesti\u00f3n de tiempo hasta que el kernel se bloquee; no es necesario complicar a\u00fan m\u00e1s la prueba. Por lo tanto, si el PM no se gestiona, se trunca."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.15.63",
|
||||
"versionEndExcluding": "5.16",
|
||||
"matchCriteriaId": "60ACBB16-9DB7-4B68-AF39-342F3BA4775E"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.19.4",
|
||||
"versionEndExcluding": "6.12.24",
|
||||
"matchCriteriaId": "19B43B93-E0E7-4ECC-8C5E-D416AEFBC1D6"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.13.12",
|
||||
"matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.3",
|
||||
"matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/54e5d00a8de6c13f6c01a94ed48025e882cd15f7",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a6ed6f8ec81b8ca7100dcd9e62bdbc0dff1b2259",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/bd4037d51d3f6667636a1383e78e48a5b7b60755",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fc75ea20ffb452652f0d4033f38fe88d7cfdae35",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37946",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:32.577",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:23.847",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,19 +15,114 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/pci: Se ha corregido un error pci_dev_put() duplicado en disabled_slot() cuando un PF tiene VFs secundarios. Con el commit bcb5d6c76903 (\"s390/pci: introducir un bloqueo para sincronizar el estado de zpci_dev\"), el c\u00f3digo para ignorar el apagado de un PF con VFs secundarios se cambi\u00f3 de un retorno directo a un goto a la secci\u00f3n de desbloqueo y pci_dev_put(). Sin embargo, el cambio dej\u00f3 intacto el pci_dev_put() existente, lo que result\u00f3 en un doble put. Esto puede provocar un use after free si la estructura pci_dev se libera en un estado inesperado. Se soluciona eliminando el pci_dev_put() adicional."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.9",
|
||||
"versionEndExcluding": "6.12.29",
|
||||
"matchCriteriaId": "6AC194F3-971C-45A9-A58B-1814A375C621"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.7",
|
||||
"matchCriteriaId": "5715A6F5-A34A-4B27-8A64-82825E963995"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/05a2538f2b48500cf4e8a0a0ce76623cc5bafcf1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/957529baef142d95e0d1b1bea786675bd47dbe53",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/c488f8b53e156d6dcc0514ef0afa3a33376b8f9e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37950",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:33.107",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:15.860",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,15 +15,100 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: Se corrige el p\u00e1nico en la asignaci\u00f3n fallida de foilio, commit 7e119cff9d0a (\"ocfs2: convertir w_pages a w_folios\") y commit 9a5e08652dc4b (\"ocfs2: usar un array de folios en lugar de un array de p\u00e1ginas\"). Se guarda -ENOMEM en el array de folios tras un fallo de asignaci\u00f3n y se llama al c\u00f3digo de liberaci\u00f3n del array de folios. Este c\u00f3digo espera punteros de folio v\u00e1lidos o NULL. Encontrar -ENOMEM provocar\u00e1 un p\u00e1nico. Se corrige anulando la entrada de folio con error."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-476"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.14",
|
||||
"versionEndExcluding": "6.14.7",
|
||||
"matchCriteriaId": "1A5B4961-384D-4769-BF75-B020B67832ED"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/31d4cd4eb2f8d9b87ebfa6a5e443a59e3b3d7b8c",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/80d18f060d5bdf2c5eb3d1d00dcb744d6a879222",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-37952",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-05-20T16:15:33.353",
|
||||
"lastModified": "2025-05-21T20:24:58.133",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:57:06.880",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,128 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: Correcci\u00f3n de UAF en __close_file_table_ids. Es posible un use-after-free si un hilo destruye el archivo mediante __ksmbd_close_fd mientras otro hilo mantiene una referencia a \u00e9l. Las comprobaciones existentes en fp->refcount no son suficientes para evitarlo. La correcci\u00f3n aplica ft->lock a la secci\u00f3n que elimina el archivo de la tabla de archivos. Esto impide que dos hilos adquieran el mismo puntero de archivo mediante __close_file_table_ids, as\u00ed como otras funciones que recuperan un archivo del IDR y que ya utilizan este mismo bloqueo."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-416"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.15",
|
||||
"versionEndExcluding": "6.6.91",
|
||||
"matchCriteriaId": "A0BB0418-DE28-49B6-BEE6-5D5AA1D70BCF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.29",
|
||||
"matchCriteriaId": "7215ABCF-8EB1-46CD-8872-8BCE4890E579"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.7",
|
||||
"matchCriteriaId": "5715A6F5-A34A-4B27-8A64-82825E963995"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/16727e442568a46d9cca69fe2595896de86e120d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/36991c1ccde2d5a521577c448ffe07fcccfe104d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/9e9841e232b51171ddf3bc4ee517d5d28dc8cad6",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fec1f9e9a650e8e7011330a085c77e7bf2a08ea9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-38008",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T10:15:32.037",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:56:52.697",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,133 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/page_alloc: arregla la condici\u00f3n de ejecuci\u00f3n en el manejo de memoria no aceptada El asignador de p\u00e1ginas rastrea el n\u00famero de zonas que tienen memoria no aceptada usando static_branch_enc/dec() y usa esa rama est\u00e1tica en rutas activas para determinar si necesita lidiar con memoria no aceptada. Borislav y Thomas se\u00f1alaron que el rastreo es acelerado: las operaciones en static_branch no se serializan contra la adici\u00f3n/eliminaci\u00f3n de p\u00e1ginas no aceptadas a/desde la zona. Las comprobaciones de cordura dentro de la maquinaria static_branch lo detectan: ADVERTENCIA: CPU: 0 PID: 10 en kernel/jump_label.c:276 __static_key_slow_dec_cpuslocked+0x8e/0xa0 El comentario alrededor de WARN() explica el problema: /* * Sin embargo, advierte sobre el caso '-1'; ya que eso significa que un * decremento es concurrente con un primer incremento (0->1). Es decir, * se est\u00e1 intentando deshabilitar algo que a\u00fan no estaba completamente habilitado. Esto sugiere un problema de ordenamiento del usuario. */ El efecto de esta optimizaci\u00f3n de static_branch solo es visible en microbenchmark. En lugar de a\u00f1adir m\u00e1s complejidad, elim\u00ednenla por completo."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 4.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.0,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-362"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.5",
|
||||
"versionEndExcluding": "6.6.92",
|
||||
"matchCriteriaId": "D0DDEC71-DA9A-4DD8-9AE4-E164CFC5E573"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.30",
|
||||
"matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.8",
|
||||
"matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/71dda1cb10702dc2859f00eb789b0502de2176a9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/74953f93f47a45296cc2a3fd04e2a3202ff3fa53",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/98fdd2f612e949c652693f6df00442c81037776d",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fefc075182275057ce607effaa3daa9e6e3bdc73",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-38010",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T10:15:32.283",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:56:38.940",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,133 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: tegra: xusb: utilizar una m\u00e1scara de bits para el seguimiento del estado de energ\u00eda del panel UTMI. La implementaci\u00f3n actual utiliza bias_pad_enable como un recuento de referencia para administrar el panel de polarizaci\u00f3n compartido para todos los PHY UTMI. Sin embargo, durante la suspensi\u00f3n del sistema con dispositivos USB conectados, varias solicitudes de apagado del panel UTMI resultan en una discrepancia en el recuento de referencia, lo que a su vez produce advertencias como: [ 237.762967] ADVERTENCIA: CPU: 10 PID: 1618 en tegra186_utmi_pad_power_down+0x160/0x170 [ 237.763103] Rastreo de llamadas: [ 237.763104] tegra186_utmi_pad_power_down+0x160/0x170 [ 237.763107] tegra186_utmi_phy_power_off+0x10/0x30 [ 237.763110] phy_power_off+0x48/0x100 [ 237.763113] tegra_xusb_enter_elpg+0x204/0x500 [ 237.763119] tegra_xusb_suspend+0x48/0x140 [ 237.763122] platform_pm_suspend+0x2c/0xb0 [ 237.763125] dpm_run_callback.isra.0+0x20/0xa0 [ 237.763127] __device_suspend+0x118/0x330 [ 237.763129] dpm_suspend+0x10c/0x1f0 [ 237.763130] dpm_suspend_start+0x88/0xb0 [ 237.763132] suspend_devices_and_enter+0x120/0x500 [ 237.763135] pm_suspend+0x1ec/0x270 La causa ra\u00edz se remonta a los cambios de apagado din\u00e1mico introducidos en el commit a30951d31b25 (\"xhci: tegra: USB2 pad power controls\"), donde el pad UTMI se apagaba sin verificar su estado actual. Este comportamiento desequilibrado provoc\u00f3 discrepancias en el recuento de referencias. Para rectificar este problema, este parche reemplaza el contador de referencia \u00fanico con una m\u00e1scara de bits, renombrada como utmi_pad_enabled. Cada bit en la m\u00e1scara corresponde a uno de los cuatro PHY USB2, lo que nos permite rastrear el estado de habilitaci\u00f3n de cada pad individualmente. Con este cambio: - El pad de polarizaci\u00f3n se enciende solo cuando la m\u00e1scara est\u00e1 despejada. - Cada pad UTMI se enciende o apaga seg\u00fan su bit correspondiente en la m\u00e1scara, lo que evita operaciones redundantes. El estado general de energ\u00eda del pad de polarizaci\u00f3n compartido se mantiene correctamente durante los ciclos de suspensi\u00f3n/reinicio. El mutex utilizado para evitar condiciones de ejecuci\u00f3n durante las operaciones de activaci\u00f3n/desactivaci\u00f3n del pad UTMI se ha trasladado de las funciones tegra186_utmi_bias_pad_power_on/off a las funciones principales tegra186_utmi_pad_power_on/down. Este cambio garantiza que no se produzcan condiciones de ejecuci\u00f3n al actualizar la m\u00e1scara de bits."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "NVD-CWE-Other"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.3",
|
||||
"versionEndExcluding": "6.6.92",
|
||||
"matchCriteriaId": "08A59284-A681-4E4B-B672-B36A8BD6A9EF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.30",
|
||||
"matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.8",
|
||||
"matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/1db527f0cb8f677adadd4e28e5bc77aaf5d4e4c9",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/628bec9ed68a2204184fc8230a2609075b08666e",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/b47158fb42959c417ff2662075c0d46fb783d5d1",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/ba25131b3c1ceec303839b2462586d7673788197",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-38011",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T10:15:32.417",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:56:18.870",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,19 +15,119 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: csa unmap usa un bloqueo ininterrumpible. Tras salir del proceso para desasignar csa y liberar la m\u00e1quina virtual de la GPU, si se acepta la se\u00f1al y se interrumpe la espera para obtener el bloqueo de la m\u00e1quina virtual y se retorna, se produce una fuga de memoria y un seguimiento inverso inferior a la advertencia. Cambiar al uso de un bloqueo de espera ininterrumpible soluciona el problema. ADVERTENCIA: CPU: 69 PID: 167800 en amd/amdgpu/amdgpu_kms.c:1525 amdgpu_driver_postclose_kms+0x294/0x2a0 [amdgpu] Seguimiento de llamadas: drm_file_free.part.0+0x1da/0x230 [drm] drm_close_helper.isra.0+0x65/0x70 [drm] drm_release+0x6a/0x120 [drm] amdgpu_drm_release+0x51/0x60 [amdgpu] __fput+0x9f/0x280 ____fput+0xe/0x20 task_work_run+0x67/0xa0 do_exit+0x217/0x3c0 do_group_exit+0x3b/0xb0 get_signal+0x14a/0x8d0 arch_do_signal_or_restart+0xde/0x100 exit_to_user_mode_loop+0xc1/0x1a0 exit_to_user_mode_prepare+0xf4/0x100 syscall_exit_to_user_mode+0x17/0x40 do_syscall_64+0x69/0xc0 (seleccionado de el commit 7dbbfb3c171a6f63b01165958629c9c26abf38ab)"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-401"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.6",
|
||||
"versionEndExcluding": "6.12.30",
|
||||
"matchCriteriaId": "9D220B6C-D22A-4648-BD64-B5FEE59A4253"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.8",
|
||||
"matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/8d71c3231b33e24a911b8f2d8c3a17ee40aa32d5",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a0fa7873f2f869087b1e7793f7fac3713a1e3afe",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/a1adc8d9a0d219d4e88672c30dbc9ea960d73136",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-38012",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T10:15:32.560",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:56:07.253",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,19 +15,119 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sched_ext: bpf_iter_scx_dsq_new() siempre debe inicializar el iterador. Los programas BPF pueden llamar a next() y destroy() en iteradores BPF incluso despu\u00e9s de que new() devuelva un valor de error (p. ej., la macro bpf_for_each() ignora los errores devueltos por new()). bpf_iter_scx_dsq_new() podr\u00eda dejar el iterador sin inicializar despu\u00e9s de un error, lo que provoca que bpf_iter_scx_dsq_next() desreferencia datos innecesarios. Aseg\u00farese de que bpf_iter_scx_dsq_new() siempre borre $kit->dsq para que next() y destroy() se conviertan en noops."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-908"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.12",
|
||||
"versionEndExcluding": "6.12.30",
|
||||
"matchCriteriaId": "F3FBF2D7-2AEE-456E-97E5-22E9926488AF"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.8",
|
||||
"matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/0102989af4c334d1d98b2a0fd4d61a5152e39b72",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/255dd31bfc4a67a19b1fc2cd130a50284dadfe3a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/428dc9fc0873989d73918d4a9cc22745b7bbc799",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-38013",
|
||||
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"published": "2025-06-18T10:15:32.797",
|
||||
"lastModified": "2025-06-18T13:46:52.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:55:54.260",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -15,23 +15,133 @@
|
||||
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: Establecer n_channels tras asignar la estructura cfg80211_scan_request. Aseg\u00farese de que n_channels est\u00e9 establecido tras asignar el miembro de la estructura cfg80211_registered_device::int_scan_req. Observada con syzkaller: UBSAN: array-index-out-of-bounds en net/mac80211/scan.c:1208:5. El \u00edndice 0 est\u00e1 fuera de rango para el tipo 'struct ieee80211_channel *[] __counted_by(n_channels)' (tambi\u00e9n conocido como 'struct ieee80211_channel *[]'). Esto no se detect\u00f3 en las conversiones iniciales porque no se localiz\u00f3 la asignaci\u00f3n, probablemente debido a que \"sizeof(void *)\" no coincide con el tipo de matriz \"channels\"."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-129"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.6",
|
||||
"versionEndExcluding": "6.6.92",
|
||||
"matchCriteriaId": "DD48BDEE-6AA0-4F17-A06E-5A175D24D3D8"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.7",
|
||||
"versionEndExcluding": "6.12.30",
|
||||
"matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.13",
|
||||
"versionEndExcluding": "6.14.8",
|
||||
"matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/07c737d9ab02c07b562aefcca16aa95077368e24",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/82bbe02b2500ef0a62053fe2eb84773fe31c5a0a",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/e3192e999a0d05ea0ba2c59c09afaf0b8ee70b81",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://git.kernel.org/stable/c/fde33ab3c052a302ee8a0b739094b88ceae4dd67",
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
|
||||
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,100 @@
|
||||
{
|
||||
"id": "CVE-2025-40834",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T12:15:44.290",
|
||||
"lastModified": "2025-11-17T12:15:44.290",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "ACTIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 5.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.1,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-79"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-190588.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,100 @@
|
||||
{
|
||||
"id": "CVE-2025-40936",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-17T12:15:44.493",
|
||||
"lastModified": "2025-11-17T12:15:44.493",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)"
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 7.3,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "PASSIVE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "NOT_DEFINED",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "REQUIRED",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-125"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://cert-portal.siemens.com/productcert/html/ssa-241605.html",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46362",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T20:15:49.507",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:28:15.610",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -32,6 +32,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 4.7
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -47,10 +67,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.10.15.0",
|
||||
"matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46367",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T20:15:49.713",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:28:03.680",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.10.15.0",
|
||||
"matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46368",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T20:15:49.893",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:27:18.617",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -32,6 +32,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 4.7
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -47,10 +67,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.10.15.0",
|
||||
"matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46369",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T20:15:50.080",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:26:51.163",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.10.15.0",
|
||||
"matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46370",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T20:15:50.263",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:26:13.463",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -32,6 +32,26 @@
|
||||
},
|
||||
"exploitabilityScore": 0.8,
|
||||
"impactScore": 2.5
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -47,10 +67,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "6.0",
|
||||
"versionEndExcluding": "6.10.15.0",
|
||||
"matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46427",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T20:15:42.810",
|
||||
"lastModified": "2025-11-14T16:42:30.503",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:32:13.890",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.6.1.0",
|
||||
"matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46428",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-12T20:15:42.953",
|
||||
"lastModified": "2025-11-14T16:42:30.503",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:32:02.347",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,31 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "10.6.1.0",
|
||||
"matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-56799",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-21T19:21:22.663",
|
||||
"lastModified": "2025-10-22T14:15:50.863",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:46:33.180",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [
|
||||
{
|
||||
"sourceIdentifier": "[email protected]",
|
||||
@@ -54,14 +54,39 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*",
|
||||
"matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/shinyColumn/CVE-2025-56799",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://shinycolumn.notion.site/reolink-command-injection",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-56800",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-21T19:21:22.780",
|
||||
"lastModified": "2025-10-22T14:15:51.080",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:46:26.313",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [
|
||||
{
|
||||
"sourceIdentifier": "[email protected]",
|
||||
@@ -54,14 +54,39 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*",
|
||||
"matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/shinyColumn/CVE-2025-56800",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://shinycolumn.notion.site/reolink-auth-bypass",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-56801",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-21T19:21:22.897",
|
||||
"lastModified": "2025-10-22T14:15:51.277",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:46:15.277",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [
|
||||
{
|
||||
"sourceIdentifier": "[email protected]",
|
||||
@@ -54,14 +54,39 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*",
|
||||
"matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/shinyColumn/CVE-2025-56801",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://shinycolumn.notion.site/reolink-aes-iv",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-60500",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-21T17:15:40.047",
|
||||
"lastModified": "2025-10-21T19:31:25.450",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:46:55.307",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,10 +47,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:qdocs:smart_school:7.1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "73D99BC7-4DF7-4C42-AD64-6850F2C04794"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/H4zaz/CVE-2025-60500",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Mitigation",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-60697",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T18:15:53.753",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:29:07.143",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,64 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/4.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Broken Link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60697.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/en/security-bulletin/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-60698",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T18:15:53.880",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:28:54.113",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,64 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/2.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Broken Link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60698.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/en/security-bulletin/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-60700",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T18:15:54.010",
|
||||
"lastModified": "2025-11-14T17:16:12.173",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:28:40.547",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,64 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/3.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Broken Link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60700.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/en/security-bulletin/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-60701",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-13T18:15:54.137",
|
||||
"lastModified": "2025-11-14T17:16:13.770",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:28:31.610",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,22 +47,64 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/1.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Broken Link"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60701.md",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Product"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.dlink.com/en/security-bulletin/",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-9479",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-11-14T03:15:57.017",
|
||||
"lastModified": "2025-11-14T16:42:03.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-11-17T12:18:37.257",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -47,14 +47,61 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "133.0.6943.141",
|
||||
"matchCriteriaId": "4F5127C9-14A1-4F23-8292-04F0846EEB99"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://issues.chromium.org/issues/390743124",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Issue Tracking"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-11-17T11:00:11.772753+00:00
|
||||
2025-11-17T13:00:13.244490+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-11-17T10:15:59.227000+00:00
|
||||
2025-11-17T12:58:01.557000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,26 +33,50 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
318422
|
||||
318428
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `4`
|
||||
Recently added CVEs: `6`
|
||||
|
||||
- [CVE-2025-13271](CVE-2025/CVE-2025-132xx/CVE-2025-13271.json) (`2025-11-17T09:15:42.733`)
|
||||
- [CVE-2025-13272](CVE-2025/CVE-2025-132xx/CVE-2025-13272.json) (`2025-11-17T09:15:44.157`)
|
||||
- [CVE-2025-13273](CVE-2025/CVE-2025-132xx/CVE-2025-13273.json) (`2025-11-17T10:15:57.770`)
|
||||
- [CVE-2025-13274](CVE-2025/CVE-2025-132xx/CVE-2025-13274.json) (`2025-11-17T10:15:59.000`)
|
||||
- [CVE-2025-11681](CVE-2025/CVE-2025-116xx/CVE-2025-11681.json) (`2025-11-17T12:15:43.250`)
|
||||
- [CVE-2025-13275](CVE-2025/CVE-2025-132xx/CVE-2025-13275.json) (`2025-11-17T11:15:42.767`)
|
||||
- [CVE-2025-13276](CVE-2025/CVE-2025-132xx/CVE-2025-13276.json) (`2025-11-17T11:15:46.710`)
|
||||
- [CVE-2025-13277](CVE-2025/CVE-2025-132xx/CVE-2025-13277.json) (`2025-11-17T12:15:44.010`)
|
||||
- [CVE-2025-40834](CVE-2025/CVE-2025-408xx/CVE-2025-40834.json) (`2025-11-17T12:15:44.290`)
|
||||
- [CVE-2025-40936](CVE-2025/CVE-2025-409xx/CVE-2025-40936.json) (`2025-11-17T12:15:44.493`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `3`
|
||||
Recently modified CVEs: `90`
|
||||
|
||||
- [CVE-2025-43079](CVE-2025/CVE-2025-430xx/CVE-2025-43079.json) (`2025-11-17T10:15:59.227`)
|
||||
- [CVE-2025-59088](CVE-2025/CVE-2025-590xx/CVE-2025-59088.json) (`2025-11-17T09:15:44.420`)
|
||||
- [CVE-2025-59089](CVE-2025/CVE-2025-590xx/CVE-2025-59089.json) (`2025-11-17T09:15:44.610`)
|
||||
- [CVE-2025-37945](CVE-2025/CVE-2025-379xx/CVE-2025-37945.json) (`2025-11-17T12:57:32.553`)
|
||||
- [CVE-2025-37946](CVE-2025/CVE-2025-379xx/CVE-2025-37946.json) (`2025-11-17T12:57:23.847`)
|
||||
- [CVE-2025-37950](CVE-2025/CVE-2025-379xx/CVE-2025-37950.json) (`2025-11-17T12:57:15.860`)
|
||||
- [CVE-2025-37952](CVE-2025/CVE-2025-379xx/CVE-2025-37952.json) (`2025-11-17T12:57:06.880`)
|
||||
- [CVE-2025-38008](CVE-2025/CVE-2025-380xx/CVE-2025-38008.json) (`2025-11-17T12:56:52.697`)
|
||||
- [CVE-2025-38010](CVE-2025/CVE-2025-380xx/CVE-2025-38010.json) (`2025-11-17T12:56:38.940`)
|
||||
- [CVE-2025-38011](CVE-2025/CVE-2025-380xx/CVE-2025-38011.json) (`2025-11-17T12:56:18.870`)
|
||||
- [CVE-2025-38012](CVE-2025/CVE-2025-380xx/CVE-2025-38012.json) (`2025-11-17T12:56:07.253`)
|
||||
- [CVE-2025-38013](CVE-2025/CVE-2025-380xx/CVE-2025-38013.json) (`2025-11-17T12:55:54.260`)
|
||||
- [CVE-2025-46362](CVE-2025/CVE-2025-463xx/CVE-2025-46362.json) (`2025-11-17T12:28:15.610`)
|
||||
- [CVE-2025-46367](CVE-2025/CVE-2025-463xx/CVE-2025-46367.json) (`2025-11-17T12:28:03.680`)
|
||||
- [CVE-2025-46368](CVE-2025/CVE-2025-463xx/CVE-2025-46368.json) (`2025-11-17T12:27:18.617`)
|
||||
- [CVE-2025-46369](CVE-2025/CVE-2025-463xx/CVE-2025-46369.json) (`2025-11-17T12:26:51.163`)
|
||||
- [CVE-2025-46370](CVE-2025/CVE-2025-463xx/CVE-2025-46370.json) (`2025-11-17T12:26:13.463`)
|
||||
- [CVE-2025-46427](CVE-2025/CVE-2025-464xx/CVE-2025-46427.json) (`2025-11-17T12:32:13.890`)
|
||||
- [CVE-2025-46428](CVE-2025/CVE-2025-464xx/CVE-2025-46428.json) (`2025-11-17T12:32:02.347`)
|
||||
- [CVE-2025-56799](CVE-2025/CVE-2025-567xx/CVE-2025-56799.json) (`2025-11-17T12:46:33.180`)
|
||||
- [CVE-2025-56800](CVE-2025/CVE-2025-568xx/CVE-2025-56800.json) (`2025-11-17T12:46:26.313`)
|
||||
- [CVE-2025-56801](CVE-2025/CVE-2025-568xx/CVE-2025-56801.json) (`2025-11-17T12:46:15.277`)
|
||||
- [CVE-2025-60500](CVE-2025/CVE-2025-605xx/CVE-2025-60500.json) (`2025-11-17T12:46:55.307`)
|
||||
- [CVE-2025-60697](CVE-2025/CVE-2025-606xx/CVE-2025-60697.json) (`2025-11-17T12:29:07.143`)
|
||||
- [CVE-2025-60698](CVE-2025/CVE-2025-606xx/CVE-2025-60698.json) (`2025-11-17T12:28:54.113`)
|
||||
- [CVE-2025-60700](CVE-2025/CVE-2025-607xx/CVE-2025-60700.json) (`2025-11-17T12:28:40.547`)
|
||||
- [CVE-2025-60701](CVE-2025/CVE-2025-607xx/CVE-2025-60701.json) (`2025-11-17T12:28:31.610`)
|
||||
- [CVE-2025-9479](CVE-2025/CVE-2025-94xx/CVE-2025-9479.json) (`2025-11-17T12:18:37.257`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+103
-97
@@ -214845,7 +214845,7 @@ CVE-2022-49952,0,0,645d95f48896f19454bd38d120743716854f3bea8be64fedbb98b35ebcbeb
|
||||
CVE-2022-49953,0,0,a32dfb8662c6930df31cd371fd20d03aa2ba41e05c73eaefcf772dbbdebb1a82,2025-11-14T18:59:05.683000
|
||||
CVE-2022-49954,0,0,d204d2c53ae7754416d95cb45f296ab164bcf64afb8efbac52a53e0080a6dd36,2025-11-14T18:59:26.417000
|
||||
CVE-2022-49955,0,0,2d4292440f75c90c4bc915f2896bb0570ad89c8e7d7d594379540e47a2df08ce,2025-11-14T18:59:35.720000
|
||||
CVE-2022-49956,0,0,571702b6cfbf676b931a38683446db946bb20a4f2b02143914af9bcdea3081ad,2025-06-18T13:46:52.973000
|
||||
CVE-2022-49956,0,1,12d0778914f3cebb44083ad61fab7c72671d38a37c1a6d2d3907cdc06e4c33b9,2025-11-17T12:55:48.467000
|
||||
CVE-2022-49957,0,0,206471faf09dcc7ca415f01d265eac9a49e08d0bdcd98a6412200cb5cb648755,2025-11-14T18:10:23.750000
|
||||
CVE-2022-49958,0,0,edd26aa0dbe67934801dc485362c0195d8ac4638561f610976bcd18b76eb7f86,2025-11-14T18:10:11.703000
|
||||
CVE-2022-49959,0,0,2b7151d63f874501d084e62a52fcb8fac9cab79fe95c2a9aaa37c2900da0efe5,2025-11-14T18:09:58.837000
|
||||
@@ -248898,9 +248898,9 @@ CVE-2024-11915,0,0,28ea0a161b7eefe74ada087940b67270e2ec51b6fcf1def4945f57e6c8ae6
|
||||
CVE-2024-11916,0,0,772212fec6b655643f1c957d90058c2fa42ec3e452d3898107b79ded42b35191,2025-04-14T12:27:30.293000
|
||||
CVE-2024-11917,0,0,e697af5b80d6688add57711199b4a5be4d363649b07e7f985e7354aaa1e4b559,2025-06-17T19:15:25.933000
|
||||
CVE-2024-11918,0,0,f7031582b21494aaa2ccab4dd4ab92d52bf9f67c1445d9fb72b363b717cfc06b,2024-11-28T06:15:08.347000
|
||||
CVE-2024-11919,0,0,db1ccd56c029a5f007959a9d396af72586f76676678dcec53730c76821a726d7,2025-11-14T16:42:03.187000
|
||||
CVE-2024-11919,0,1,5891faa3b87e44072bf0cc20edf721193e03ea8d69ccce7524ab3c4482fb692c,2025-11-17T12:25:42.943000
|
||||
CVE-2024-1192,0,0,5063d16699b3db058d0f99170ded601d82fcfc6f39ec66d01e8a7cebfd42903d,2025-01-08T14:35:22.633000
|
||||
CVE-2024-11920,0,0,82e7e840d958f9e2d50bb9d9008aefe0fa22e99f4d27d5312b3d2848518a04a3,2025-11-14T16:42:03.187000
|
||||
CVE-2024-11920,0,1,dd2588248c7abd808c744fad382a0725b66b5a3bfe58c76a8a12f472621ef9d1,2025-11-17T12:25:29.400000
|
||||
CVE-2024-11921,0,0,d63b29fddecef51d339ce26b6b175c16662ec5f052faff9a1e606d509d7f12a6,2025-05-14T14:43:26.667000
|
||||
CVE-2024-11922,0,0,f2ab677a0f285cc0bd5544648c141f12561efe16fa05a74e611a032264f36582,2025-05-10T00:55:57.800000
|
||||
CVE-2024-11923,0,0,4d6a80e3f288fbe3ed1bd4a1feabd18394fd01e27066d6fff1deb3858322387f,2025-01-18T00:15:25.823000
|
||||
@@ -250220,7 +250220,7 @@ CVE-2024-13174,0,0,714ddb7b2f232728b9348c9a517112a7eb820d21d85a1ef9c54c4d4ea21a7
|
||||
CVE-2024-13175,0,0,5f36d8be8f4a31c1342cc2573ed5974d5b6034a191069d7ee579dea9b00e2089,2025-07-22T13:06:27.983000
|
||||
CVE-2024-13176,0,0,48402a6d78212278f13e43e4bf0562c39378692e3e8b2ec9a45e1a990ab81976,2025-11-03T20:16:08.203000
|
||||
CVE-2024-13177,0,0,58b2bc8daf353816e32d362a723ad479f6f16dbbbb5269d8af0a5f0e77561192,2025-04-15T18:39:27.967000
|
||||
CVE-2024-13178,0,0,93191df437c1a2bb4303f1a7869fd8c8167ba3d2239d5ef9fa1cbc2192f3d338,2025-11-14T16:42:03.187000
|
||||
CVE-2024-13178,0,1,1922b274d885b99df6eb6b0630492a660d4fe1433d125c028cdbe68d976d4982,2025-11-17T12:25:13.680000
|
||||
CVE-2024-13179,0,0,9d2a982b824c67bbacd2e3f4856194d80faa53a9ffb503fdbd054d373079f25f,2025-01-16T21:01:38.177000
|
||||
CVE-2024-1318,0,0,8468ceebf6c6c9f41014d2f5941b790bd61167061813191d7b8edcc4ba43bbca,2024-12-31T16:56:50.763000
|
||||
CVE-2024-13180,0,0,d8eed302f18bf4ce52a1f3c3aecacb18daed8ee47876692255a4c4adf22e5203,2025-01-16T21:01:52.650000
|
||||
@@ -251068,7 +251068,7 @@ CVE-2024-1398,0,0,9645ba9f8586ede4d8e9304631788266d0cde74989f61af36e6ddca7859998
|
||||
CVE-2024-13980,0,0,38c35298c38ae45341bc425be3540e832ba512ba3ad69b951597be721fd3de81,2025-08-29T16:24:09.860000
|
||||
CVE-2024-13981,0,0,f2b312fa5d75fa20aeac79aa124931e13c233777fa63267f98093e2c3170953c,2025-08-29T16:24:09.860000
|
||||
CVE-2024-13982,0,0,7a714196f337e6370b21bcf0aee2cd73d6dc986eaa247998bf10588effc53cab,2025-08-29T16:24:09.860000
|
||||
CVE-2024-13983,0,0,5aa3701b72d4cbde8512db9fea985fb0eda384c10f3690dd41c912c4143c2f00,2025-11-14T16:42:03.187000
|
||||
CVE-2024-13983,0,1,13060de0c8f4585f5bef92afdfbee3a70b6f4041c813f0811cf5d041f9cf340f,2025-11-17T12:24:59.757000
|
||||
CVE-2024-13984,0,0,757a025a38a9ffad0c75ae108442da1bcbb4641bf7301b29e0f7051f41c0b9db,2025-08-29T16:24:09.860000
|
||||
CVE-2024-13985,0,0,365370dc7d4f04787dffab31d444b817e4cf29fd95d741f9c3dc55002147c822,2025-08-29T16:24:09.860000
|
||||
CVE-2024-13986,0,0,9c21b5a3427884afd420e35ba3406834e96073f9785493d1e2caa7feba5e3d39,2025-11-04T23:15:33.787000
|
||||
@@ -274038,7 +274038,7 @@ CVE-2024-48825,0,0,ab1a99bd861163f7408d15d580b43382540b10b1ee2468dd0be1ab11f71c2
|
||||
CVE-2024-48826,0,0,98549302f2e56108c7370cc097f96237c01a98aadb40625859a37b9be6178797,2025-03-17T14:41:08.920000
|
||||
CVE-2024-48827,0,0,4f555f9f4338d5e15253fe5e147d46e6ab742e732bd658d5163d02319586cc64,2025-09-29T17:28:17.693000
|
||||
CVE-2024-48828,0,0,2f6537ef91eafd129f36056e40ef732d9d91afa617ce6a2536480f70d6f7a2a0,2025-07-14T20:30:51.963000
|
||||
CVE-2024-48829,0,0,ad895a85220519c386cacbed424be657c09818a81a2b60c371e588dda5a4eceb,2025-11-14T16:42:30.503000
|
||||
CVE-2024-48829,0,1,3740043efb18a764364a8eb0e5e2f3b426bac241e3c9354e117da22ec33ee9bb,2025-11-17T12:33:50.973000
|
||||
CVE-2024-4883,0,0,3222a4b5de828494b65ffe71a3476e5194064057a0c910f17c0414c5fa2f7db8,2024-11-21T09:43:47.157000
|
||||
CVE-2024-48830,0,0,f6e5f19b6d87ad65fa789fbf450f68b0f1f93ada6992c4265bd57b1b44ea2694,2025-07-14T20:29:41.420000
|
||||
CVE-2024-48831,0,0,00eebc854e9b156c5b6a6820d72f28fab54fc24d8a54761f01a1344fc11c26c8,2025-07-14T20:27:03
|
||||
@@ -281891,11 +281891,11 @@ CVE-2024-7013,0,0,fda92e94524c5fdb675c080a05843f1821b747032d3c867378b19c5cd5d7a8
|
||||
CVE-2024-7014,0,0,270a665b6b71feecad9e9b90e127d30aee10ccfe3a9660836af32443015bbd64,2024-11-21T09:50:45.550000
|
||||
CVE-2024-7015,0,0,ed7049cc4b48755115d67cd64cc41ee0374a54ccac42e15a48bc373c903420e3,2025-10-14T13:15:36.243000
|
||||
CVE-2024-7016,0,0,7cad38da75bffdc7d80251a62f79dc9a823c160edf672b290cd3a25307502424,2025-09-12T07:15:34.340000
|
||||
CVE-2024-7017,0,0,410fae7617cb22d6631f6d2d0d3572b539fae2aeb3e34131ca65c5160eb55a64,2025-11-14T16:42:03.187000
|
||||
CVE-2024-7017,0,1,bfceae3f68cdec3ccf935b7a36198446740322c0117f4c0cb5a5d6ccaefa1aaf,2025-11-17T12:24:41.543000
|
||||
CVE-2024-7018,0,0,fb485fbc237ee4e46769004d827f7c45d45cfce46fbd3424a7954aff5836017f,2025-01-02T17:32:20.160000
|
||||
CVE-2024-7019,0,0,396beef4690e7d5d0d5350f56449d169b7c08ec0c1daaea13c25e725556494f0,2025-01-02T17:31:56.323000
|
||||
CVE-2024-7020,0,0,5a1355f5c1623c13682541eed4e1c11d298b24b5970efe63eafa41c645e860b1,2025-01-02T16:49:43.797000
|
||||
CVE-2024-7021,0,0,7df2017b62ba245859c7303bc0da88487c14bfc2580805720f857c95c974b8c1,2025-11-14T16:42:03.187000
|
||||
CVE-2024-7021,0,1,ab391e494f591b3a2722426c4490c295ff0e3e201d969560656cc6ae91a34bb6,2025-11-17T12:24:30.807000
|
||||
CVE-2024-7022,0,0,97cef42d6d4cc9f341b0c299285d3ef1d39840892e68987c42e86450b9d4507c,2025-01-02T17:11:48.523000
|
||||
CVE-2024-7023,0,0,ad2975e43813b3e5e6eab5a488f2f14f65ef6bf3fdb3557576a6e66a8141f997,2025-01-02T16:53:18.803000
|
||||
CVE-2024-7024,0,0,a0465e322d3e843cdfa9ab7ee19c20548cddec446d6fd18a991b6ebf7a116861,2025-01-02T16:54:16.893000
|
||||
@@ -283903,7 +283903,7 @@ CVE-2024-9122,0,0,3487687e1aeaa14de3f41c8f004eeb595af43f29d050b6b0bcce6370290564
|
||||
CVE-2024-9123,0,0,2d59c5c1f584252d03e5c46fb9cfbd2032475b4808a0deb6f42d2e10fce20e66,2025-01-02T16:36:56.757000
|
||||
CVE-2024-9124,0,0,cd69d463959840719b35b1ea0c52fd4d9f5768fb8108c42fcac176196205aed0,2025-09-22T18:34:28.750000
|
||||
CVE-2024-9125,0,0,a2eaedda1b49b18236ac116998a1e45e7b5806e5e010d7ded75c88431dba6b9c,2024-10-01T14:00:52.460000
|
||||
CVE-2024-9126,0,0,c40bd03fa27f8d86b6a1560c96114f5d001ad45f80707076869d06366644b610,2025-11-14T16:42:03.187000
|
||||
CVE-2024-9126,0,1,9fda76f77377e3e6ce0f60679ea4090df6ca424f1a5f37c5be071b991887ff19,2025-11-17T12:24:10.707000
|
||||
CVE-2024-9127,0,0,c4d446b51c8121a98d4ccca3ceb1928972a1ed1ad9117dcb67e2e1c732384bbf,2024-10-01T14:09:26.017000
|
||||
CVE-2024-9129,0,0,cc2446e5c104123fa250677672977d18384ff16cf5c1d3cf6c3720101bcfb9b4,2024-10-23T15:12:34.673000
|
||||
CVE-2024-9130,0,0,7a17b6638601749177c95ede13421fc94f6381d99406730dd48ab1718340effd,2024-10-04T17:18:59.130000
|
||||
@@ -287064,6 +287064,7 @@ CVE-2025-11678,0,0,da608f708b3f5d39db2dc3d8bcf0f83167c6fcc9293801159eb6dde8b2dd7
|
||||
CVE-2025-11679,0,0,a5a009a1f7372061e87c62563152799972f8b88f7ecce322ba1233363a1a06da,2025-10-21T19:31:25.450000
|
||||
CVE-2025-1168,0,0,1ea1d5bc4e270d6254a19bce9b3bd16dbcb0aa6cfa50f52ef9530ed2236d40f5,2025-03-03T17:20:31.693000
|
||||
CVE-2025-11680,0,0,b2321c5f6524e9275218cd1a86c19c0061b764a2b5cfd019d226562a457ad82e,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11681,1,1,94325477754dde8da9ae75980e76c3ee67f62489fd95a55693f301697a6ceaa9,2025-11-17T12:15:43.250000
|
||||
CVE-2025-11682,0,0,0e7fb35f6aabdb0ff5ae67f61a8707127178ee52a21670d6bef2406c9f4a9b62,2025-10-27T13:19:49.063000
|
||||
CVE-2025-11683,0,0,562b6ddecd757d974a3cd06cb4a91e1cbf3407e06c1b215f13523df3f6204a17,2025-10-16T15:28:59.610000
|
||||
CVE-2025-1169,0,0,ad57e3ebca9d9361258028a4f6880b5b420e9bfeb30e11c1ec67cc7b58af0c9a,2025-03-03T17:16:44.157000
|
||||
@@ -287251,8 +287252,8 @@ CVE-2025-11939,0,0,92b6a4e091fbc961880a0a0e6981239d776a40e9d4f1498715ff720b0bb90
|
||||
CVE-2025-1194,0,0,cfc123b4d06e1541b17452e14c717457ccca99ce28567c2bf076df46d680302f,2025-08-01T21:56:15.790000
|
||||
CVE-2025-11940,0,0,30268f1716d45907737fa11bd29f4a2f6644625ea2b67888f588e4dc9a2c256e,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11941,0,0,95f18dc59d9c30f74db1e4d29363c9edfe4ce1ae2a084ff913b3bc274a5cd501,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11942,0,0,f5050f76245a0747be104aa509620c8f5014ed877592c1e99ecce48f95428a57,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11943,0,0,73653b9f9a71b6c2f4258537666606d31371020755554c3c03075b166de8b2bb,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11942,0,1,7e9566f7fbecdd7e01cfa188d43ce856a70d1b6349bed292a4aa04b6d5f811f2,2025-11-17T12:45:11.827000
|
||||
CVE-2025-11943,0,1,eed4675b3b80b28af222599e5a579678f49509c712f57cfcdea07b03f3ecc1f5,2025-11-17T12:45:50.343000
|
||||
CVE-2025-11944,0,0,ee35f071825256beb4684790ac24c34e49ee45b753e65bf9e9dfa1b0c1b8a496,2025-10-23T20:06:21.947000
|
||||
CVE-2025-11945,0,0,04b1a33ac9c2b817c64224fb5229d14570193c8801f098ddfa7644bb58786bfe,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11946,0,0,2ab0170c1456fd783772478133eb85f753aea1deb4c3f6d69a171880e55cd3f4,2025-11-07T01:25:30.760000
|
||||
@@ -287818,9 +287819,9 @@ CVE-2025-12849,0,0,a089b60c8b337ddc9ef52819f3e613fa4e055740fbeb37d4f7daea0112da6
|
||||
CVE-2025-1285,0,0,3182990c1bc942ab8f686c8030ea96842badd7c599b496272a03f16c99f15c97,2025-03-14T05:15:41.977000
|
||||
CVE-2025-12853,0,0,3da4812ded871535155fc4b26ce159a40ade1254f05c47c19b5b5a9bd6e68291,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12854,0,0,d262b6914cc6de0e1c6caa359b8a991e80bd15730f71198dcff1fbec51a852d9,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12855,0,0,be7406d651420869a094a0ca5f7f117a4ef6c3f46e5f503e2600d817158c1ef2,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12856,0,0,1043ba13a438661101c59c3510cbb4b4b4a3d8263b21c3065e53a6bfa29c8e49,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12857,0,0,f9f97f9d46011d2dc0632cccd3897ea9ed9277cef91d0d0822a80e39b5a3ff4f,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12855,0,1,30df6a956ee62de1312c986404aee18c6528b4faf44e48a2de355062dea45721,2025-11-17T12:43:55.817000
|
||||
CVE-2025-12856,0,1,5c66808ad32e867b6d4b8e3f6fac859abeed62fb00aaac7efcb8e368f680e66a,2025-11-17T12:43:41.087000
|
||||
CVE-2025-12857,0,1,62aaea96bea0f61a8e5b57c2620c011846c9360e6a3c5a17f6b58db3d8aaade3,2025-11-17T12:43:22.537000
|
||||
CVE-2025-12858,0,0,32edbb001f23714badb24b380ba6186a1c9ec2ca1ad8f543d00f39f45f596fb1,2025-11-07T18:15:35.910000
|
||||
CVE-2025-12859,0,0,086a1302330002901de02b7b04cbc5631695605eec4b76e6e2b46b2630a3c07a,2025-11-12T16:20:22.257000
|
||||
CVE-2025-1286,0,0,40bbeef96d95140e49bd4454f594373e42828e919694fd2421136359798adaf3,2025-06-12T16:37:11.290000
|
||||
@@ -287861,7 +287862,7 @@ CVE-2025-12909,0,0,90055f5a25dfdd1404e9471634f6f58937e116afa75791cd043793f90b46d
|
||||
CVE-2025-1291,0,0,8a62a97f45d265e09336f40212a9e842d191a55f47481ae3892da3a9dec0674e,2025-03-01T09:15:09.710000
|
||||
CVE-2025-12910,0,0,fd2747953beb3116a3e2a76ee93ab0154f69c6fee1e14f99e811df020813baa3,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12911,0,0,338d3a1c3ed09b494ba0a7face5c7364f29b1284f00441150af8f238ef16e265,2025-11-12T16:20:22.257000
|
||||
CVE-2025-12913,0,0,ade7f379870246ab9c6a6e4fa29a89eb79f3c8964ed9a4a15cf61819b669753d,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12913,0,1,3dc4ce0f78b69d6f3a2ee1bd8083733eea078cc1fea37d4c9f655c2bfcb578bc,2025-11-17T12:42:54.190000
|
||||
CVE-2025-12914,0,0,7cf94b1df78a5b856c588eb787765a75b5343e1c73a3293730a458efe246dfad,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12915,0,0,7549bd0d2098ef505e635674cf9114e0a7ed1f327cd2394f717c8c266e943945,2025-11-14T18:20:17.173000
|
||||
CVE-2025-12916,0,0,be40698b9ed092d0755d5036cc446baf6aa4ddba596190cdcce2b33f5f40453b,2025-11-13T16:15:49.330000
|
||||
@@ -287882,10 +287883,10 @@ CVE-2025-12929,0,0,ca0d1ef6d939ceeb44a38957300a133cc608cffcc8a0bd322f8864463e5cd
|
||||
CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000
|
||||
CVE-2025-12930,0,0,27abeadb38fc8959bec5b7a597619055f7804da0028f6b341a329f93f63b057b,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12931,0,0,a2e653aea649bf7ef34735b9458a2e350f9de273587602452ae10e364832bc18,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12932,0,0,f16a92baea650e13db4a6d7e7c793c82490172651dbd4c81a3a9a486064db431,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12933,0,0,496288799fc6c3134b1c3ffc11e9d7ea2d7cb05f91096fb97195beff0ffaea3a,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12938,0,0,b3814382294e67e507aa1ec262246fcbc600e525730979b4e765f33f2cc2a6c3,2025-11-12T16:19:59.103000
|
||||
CVE-2025-12939,0,0,5d24e369a443e642c70c500cc7f81daf5958ed4ec48d246c12f14ada1b3f4560,2025-11-14T19:15:57.257000
|
||||
CVE-2025-12932,0,1,e603d9bc10fddbc01c4f5674c4ab1f2d39c8461d2c91bb8d10193c505c600f27,2025-11-17T12:42:33.317000
|
||||
CVE-2025-12933,0,1,64aa276681d2d5fe0da66f392e04d849d24740c70c3ca96e4e8e8d7c5e5139c5,2025-11-17T12:42:20.207000
|
||||
CVE-2025-12938,0,1,b3ec357a58765948d0f1da26cd5c97f59c60c2d3549d01260b6476a680b58dee,2025-11-17T12:41:57.123000
|
||||
CVE-2025-12939,0,1,51b0385b03723509d74b8eb0194b8a892250ce2a8d9687630013704c686b08d5,2025-11-17T12:41:39.120000
|
||||
CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000
|
||||
CVE-2025-12940,0,0,e7a83fe6c86ad0ba0414cb7e7cbed44be96627a4afb20886bee631dbd57fa787,2025-11-12T16:19:34.210000
|
||||
CVE-2025-12942,0,0,7654cbef88af68ac8517d7c6036691eac1b339a911397963662009a08a062a2a,2025-11-12T16:19:34.210000
|
||||
@@ -287903,23 +287904,23 @@ CVE-2025-1299,0,0,05ad5803bebc6b17851a9b0bf8285bd6d3e063e6e9aad7d7dfb7cfe06c333f
|
||||
CVE-2025-12998,0,0,f3fb06fa9653aba1e764961f6e183b92926d1d490811825111e397e962eeef3a,2025-11-12T16:19:12.850000
|
||||
CVE-2025-1300,0,0,2e9e1d2e469024f43a6eb15e12f1773ee35786b336ee8b88da59578559ba2189,2025-11-14T15:29:28.110000
|
||||
CVE-2025-1301,0,0,d7faba0f900312629252c10b0ff69e7ad4067abfd474abf12d63d55853a93aef,2025-09-12T08:15:44.563000
|
||||
CVE-2025-13012,0,0,f600ccde346a3099a2f2c340a7161d0d258ad40bed279c9f911a286a8ebec7ef,2025-11-13T16:15:49.603000
|
||||
CVE-2025-13013,0,0,00eab60439b066ace4905d857f51ea3285fc3c03a81f57de10ec6f4afbf75d2f,2025-11-13T16:15:49.770000
|
||||
CVE-2025-13014,0,0,9ace3e864fe2975ea15431ca256c1ccab5a0eaa7c2f43f7b3d2200558d26c6e8,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13015,0,0,2a771f4bf08e653a68f7f1f576d47a236cec857e766dce5c865eed061c648ffa,2025-11-13T16:15:49.927000
|
||||
CVE-2025-13016,0,0,c025b286d11d97b7e575e5e351b12d32dbf336d3e193c57e8c62268724536b35,2025-11-13T16:15:50.083000
|
||||
CVE-2025-13017,0,0,7c78e307d06bbe9f76efb3339b97046cff80c60cb0bff70565de35b9b3c5e216,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13018,0,0,4ad85f38966c34e94774ea97563aa359e6145e5facc8d670cebe6941dc1a5150,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13019,0,0,4ed4f77084c3bebe3062472820b8f93a3f7c00a6b11f772e5f0189886974ecff,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13012,0,1,2f7e945dc10d630c2bcefc5bbbee5391990547c6c83085fbdcc2a8c66c995c7d,2025-11-17T12:39:49.590000
|
||||
CVE-2025-13013,0,1,bc4ded1827ef31d24bf616c9eb961e2219c28bc53111dff1a3777fd5d0a4389c,2025-11-17T12:39:40.203000
|
||||
CVE-2025-13014,0,1,a8bf00caadba76fb99c659e784c6122556853b89b3c04ad730e8cbf5c64915ef,2025-11-17T12:39:29.170000
|
||||
CVE-2025-13015,0,1,50f27e69302040a542dcdef1cfcaad52b4471aba1e70610306fe1121b9bc0dff,2025-11-17T12:39:17.383000
|
||||
CVE-2025-13016,0,1,c97798da7e30c9aab36621b1046cdbcbd5a73ee0bfffcd4927f501169fbdc375,2025-11-17T12:38:52.407000
|
||||
CVE-2025-13017,0,1,8f2761d6c778db2a083c8d93131d3c8aa91b41faa0430289b76e34627af3e897,2025-11-17T12:38:44.923000
|
||||
CVE-2025-13018,0,1,7472a24f39d9d60ffc4574d823448d52306508c2213a0bfba4f2dbf74df0bbfa,2025-11-17T12:38:28.200000
|
||||
CVE-2025-13019,0,1,905001941118b2118f2f4fbe1a62cf3433368913fa1204b6b17918723cd7d482,2025-11-17T12:38:16.037000
|
||||
CVE-2025-1302,0,0,4c600c674f22378513ee28ce145975f04e5b0e89605ff80d937b77394d750b70,2025-02-15T05:15:11.683000
|
||||
CVE-2025-13020,0,0,2c2107a185481fa929a8818edecfa0348d0424c359c22158c1b2cbd714227e48,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13021,0,0,82c503fbe1f8f642f98d5ac4903c1b3a6c54a6297370dc5076cf7acbf9a8a3d9,2025-11-13T16:15:50.227000
|
||||
CVE-2025-13022,0,0,429107634601d745bce8e91f47895e82777df30345d4f8131976c483b4c9199f,2025-11-13T16:15:50.383000
|
||||
CVE-2025-13023,0,0,daed16a922709125edb82834dec9b0a57949f20a59d970e7c202bc5d92cabafb,2025-11-13T16:15:50.533000
|
||||
CVE-2025-13024,0,0,fb8822e15a4c93a8f7924797acd52f31e047c1af9f00f1c6852893bab5a15891,2025-11-13T16:15:50.683000
|
||||
CVE-2025-13025,0,0,80750db45f76e2ad182d13b32f920b0c4e7265cb4fcb05933e4bfc72645c458b,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13026,0,0,fd4fa73a65038ad6846878fb743f9aa4e7f31c51e0cf83e9578daf4321660bbd,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13027,0,0,b14dca55354bbd571a5633f868c8d36cec849ca58a37c6a391480723c6093bed,2025-11-12T22:15:43.810000
|
||||
CVE-2025-13020,0,1,1e1dea5d22c2a817e9927b2a02db7f5db3e3647e233cfac3b6600860be7608d4,2025-11-17T12:38:00.403000
|
||||
CVE-2025-13021,0,1,e0778b5fa5ae357968861e7d5662bd995379a3d02028f1fa7c39445e0df1c14b,2025-11-17T12:37:50.063000
|
||||
CVE-2025-13022,0,1,690848823755d330f70dd5f5773971f57e812cec1178c7166be6f9ebe688173f,2025-11-17T12:37:38.103000
|
||||
CVE-2025-13023,0,1,313e1be1d6ec6bfd9b383e07d821e6077174453d8fc2d7e72f033a422d831c36,2025-11-17T12:37:29.513000
|
||||
CVE-2025-13024,0,1,6f4309877e66148d4379eb56211554eae2f4ab02396b1ebc0240fc91a50bc931,2025-11-17T12:37:21.517000
|
||||
CVE-2025-13025,0,1,eb15edb9751dd909293c1673771248932eccf3cfe55e6d2fe134a15285faf9cd,2025-11-17T12:37:12.383000
|
||||
CVE-2025-13026,0,1,c59454abcc613392969f86ac2d98f85b9032d3472f5576f739dbaec9b64f9182,2025-11-17T12:36:55.850000
|
||||
CVE-2025-13027,0,1,f08beabf588266952c5ce0d5052f885fc69ad8c3dd775ec9c7c3c551087dfeca,2025-11-17T12:36:27.433000
|
||||
CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000
|
||||
CVE-2025-13032,0,0,a25ff9b6f1a17299ce0883eb25de73fbd28a5b858666f4ff18a841e1161c1934,2025-11-12T16:19:34.210000
|
||||
CVE-2025-13033,0,0,9a026062400453b2b99148c0aade73145703d3d581138557836deb4ff975c376,2025-11-14T20:15:45.957000
|
||||
@@ -287928,33 +287929,33 @@ CVE-2025-13042,0,0,2f74eaace28243ff2ad124ae4c9ff7279fc75753f0a3b01788015a64272b1
|
||||
CVE-2025-13046,0,0,35fa53b70d1fa47ce7acb93a7c39a45fefe329ad2063438a47ccc97e6f96c494,2025-11-12T16:19:12.850000
|
||||
CVE-2025-13047,0,0,061330915d8fb4e4572e2da14cda6d86fa183d4e0637d7b0aeaad03a24b4d042,2025-11-12T16:19:12.850000
|
||||
CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000
|
||||
CVE-2025-13057,0,0,30a4c7415a533e0c2b9ce971e3f2ce29750dbc8b8209425d1bdd1da40d13dece,2025-11-14T16:42:30.503000
|
||||
CVE-2025-13057,0,1,98014c72182be4c251013c52a5cee095587e14319350f0dbebe8f3349a12faa0,2025-11-17T12:34:13.523000
|
||||
CVE-2025-13058,0,0,88670590f8ba0f732c2449f6bf252985bf5120554f4679631a3eb8ea5143e123,2025-11-14T16:42:30.503000
|
||||
CVE-2025-13059,0,0,eb22cf70675790b1dddfaf919ddf43a34a3482a0860b8fcc2680eaa60ddc4e4e,2025-11-14T18:15:44.860000
|
||||
CVE-2025-13059,0,1,3cc9211c96ba896937a742ba3b53e122d8400bcf8e144909d253eac600654701,2025-11-17T12:33:23.140000
|
||||
CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000
|
||||
CVE-2025-13060,0,0,7c7069c9e9147218d2faa2e37c94b11bd4419a970b0616bd999d7db9ea913743,2025-11-14T18:15:45.413000
|
||||
CVE-2025-13061,0,0,1ed382f452ccc4aae959132b3bb2e7c3c7f278a902c7bf3b710ddc53029521a7,2025-11-14T17:15:59.597000
|
||||
CVE-2025-13060,0,1,72a310f3b82221fd7985613f28f09948690ba9f0191c16c66d3292f6a7d76d68,2025-11-17T12:32:35.167000
|
||||
CVE-2025-13061,0,1,3dae6fe3856612139fc3a77ae84ce221444ed2b477b6fa7a3a76672988ca757b,2025-11-17T12:31:25.667000
|
||||
CVE-2025-13063,0,0,fd99a54039cec8c530ed1111ee3a257dfbb551bd857a40899dbd1b2cfbcbd0b6,2025-11-14T16:42:30.503000
|
||||
CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000
|
||||
CVE-2025-13075,0,0,376ffa93e203220211434268e3970ab924134c1a1982c904251d0bfb52cf3bc0,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13076,0,0,cce7622e4778b071cc6a68c677b2b703ac2a0b2ed9cd5c517531d1ebbe7c2233,2025-11-14T16:42:03.187000
|
||||
CVE-2025-1308,0,0,73e17aeb6de3d57ecba00a18ccc8ae4e9076e7a79f5357613a6cf6f554b00b65,2025-05-21T20:25:16.407000
|
||||
CVE-2025-1309,0,0,5d2b17215fed7de1b66f6e9e5fd86a1c64bff76093266d0c2270f4eeb2161dcf,2025-03-07T08:15:42.017000
|
||||
CVE-2025-13097,0,0,b7ca648436cdc589639c72ba772f02da5d1f20ccfd085b848b289cdf0127380b,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13097,0,1,0a463c7146931e807334c871d0e683f7d8bea2d0ec5ce4001c32f9829ca46e11,2025-11-17T12:23:36.557000
|
||||
CVE-2025-1310,0,0,25bcf2647b21785e81aee9bf1e14cf3dadc9c18faaee6d001f2b001f0d89e104,2025-03-27T16:45:46.410000
|
||||
CVE-2025-13102,0,0,10fdfe62f8f2059b0a946bab1ba701088bb4c2e8cf707a0f808a46e1f83c1089,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13107,0,0,d0d13d1cbbc3ef0599e28cda6ff5a0b6d92d3cd599649405cb9a958649694282,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13102,0,1,0e47e47942a72e24883bd3215af459f49d2a810eb2bef95e05b56ddc24738fd6,2025-11-17T12:18:45.040000
|
||||
CVE-2025-13107,0,1,6dc9045ab686460bd088cd55cc0e6be8908359d288d76c1458f515dbd0fda986,2025-11-17T12:18:25.437000
|
||||
CVE-2025-1311,0,0,7710d787ca70c6c546450cc6c7a6c27a4be0c39d3b39dd1aa2c960d1ee02ebdf,2025-03-22T07:15:24.433000
|
||||
CVE-2025-13114,0,0,4e3e1eb0eb9a6e45db3fc16969cfde162699b609de37b56dbe7e94249433b6eb,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13115,0,0,26a943f901f226d5a4944f2431f45b1d4a0ba3363b20f6ad1b720001e76678c1,2025-11-15T07:15:44.957000
|
||||
CVE-2025-13116,0,0,ea8f64d7b7d1ecd545022502e9e7e358c183f245dfe2da4fe7e826f9286ccad1,2025-11-15T07:15:45.330000
|
||||
CVE-2025-13117,0,0,51a4072dcf63cfcdae5c6b6fc5d4cd28bb497b3d7d360b79693750c4cda0052a,2025-11-15T07:15:45.617000
|
||||
CVE-2025-13118,0,0,0852b80b1bb5c12b1f01406e6d693c1701f9733966c93f75d39621168b7125de,2025-11-15T07:15:45.897000
|
||||
CVE-2025-13119,0,0,f968933e9d7b2757f1ec548a87d8cb619e32b7f4637843eb3c2f15e92aec8265,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13119,0,1,fb8931ea404b0ea4853fc840c5e029de9bb1436726581728fa278360fd98718d,2025-11-17T12:30:52.537000
|
||||
CVE-2025-1312,0,0,722f6492fca6972e3871e5d5750f81958bc068d23fe675f5f9ed3d0327ccb7dd,2025-03-27T16:45:27.850000
|
||||
CVE-2025-13120,0,0,043f4346c38bb5f78a61ef5515aacaac48678dd6d13d72eb4b923fb1eedbb713,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13121,0,0,5e128d86e6e51899559db613e75ba6c420a96c429acf145062534e727893fea2,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13122,0,0,ea59acbc1f3fec455e75d71e8c3006eb34e52816afafff7a71a50edd1dd869ed,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13122,0,1,1d4ff5fdc8baaaf10564f67fdbb1e6fa4f6cfb3f5e07bef25fb0a79668b9d3a6,2025-11-17T12:30:18.140000
|
||||
CVE-2025-13123,0,0,11b25c2f1d301f08115069b17b0d4401e2e2b143d64d0fa29b80c9c2303d4396,2025-11-14T16:42:03.187000
|
||||
CVE-2025-1313,0,0,1946dbd4399c0b8b04a0259c622d0b0d4a1762b305348c8c1c7599eaeb9b6910,2025-07-15T13:14:49.980000
|
||||
CVE-2025-13130,0,0,18e517c926f1f7818d65495d73d07588d7763175775f0e557835a555ee7c2019,2025-11-14T16:42:03.187000
|
||||
@@ -287968,9 +287969,9 @@ CVE-2025-13163,0,0,610e8e9c1fa4cb603c581c526c73583557f9b55ca5c5cf250e98e946ce56d
|
||||
CVE-2025-13164,0,0,d8d6789a8ee8b1949d621234bf63fa7d645f6604b7aace1056b422bd9a60c6ce,2025-11-17T08:16:22.860000
|
||||
CVE-2025-13165,0,0,09ed4ac76c61663287c86467b8f93a9622beb1d75e659349b29358a741300100,2025-11-17T08:16:23.233000
|
||||
CVE-2025-13168,0,0,2e7970b035919f06ecad786e62040db4138d08230cd2f840467b8b47514c1579,2025-11-14T17:16:00.220000
|
||||
CVE-2025-13169,0,0,a5dc96c8bd86d30bf232fbdd8803d8b95863a779c2f7cf2da75709c512f7fad3,2025-11-14T17:16:00.407000
|
||||
CVE-2025-13169,0,1,379385c636090985d3c85986b114ce6f1ca427d2eeae6e8e662ef58ca8d7b1f0,2025-11-17T12:17:57.580000
|
||||
CVE-2025-1317,0,0,4f2ecbb1517ad7f024c8a72b4e37f40a250e9f9aedba0e53124be3b9cafa8bcc,2025-07-05T23:15:24.760000
|
||||
CVE-2025-13170,0,0,99538878ce9ac096e1e6653a6c12c2c7248379c023ee637fdd4d3f146f6e612e,2025-11-14T16:42:03.187000
|
||||
CVE-2025-13170,0,1,6840916a52e02762a2f72bc3b77f13a8e6406e8dd5ca5b8e9be9d0a2894d9656,2025-11-17T12:18:14.443000
|
||||
CVE-2025-13171,0,0,01f9e8ce36722a1c2622821fd563da7d7d0af7838cae9d16b6874e36b58edd01,2025-11-14T18:15:45.590000
|
||||
CVE-2025-13172,0,0,9b458ff3a5834cb24d646cdadacf062b5436ac4e0cc72d7bee7c4c6aac6e1f69,2025-11-14T18:15:45.843000
|
||||
CVE-2025-13174,0,0,f00843bd2ba7da8bcd1087ee2014345afd74f85ff09e0afa3614ae4508e76cc1,2025-11-14T19:15:57.533000
|
||||
@@ -288047,10 +288048,13 @@ CVE-2025-13268,0,0,1549a6d1fca73c09abd176ae8f16d8106106e9a05c5993d0363fd1509d020
|
||||
CVE-2025-13269,0,0,a6b43d18ef43cddc51e83ddde2730c67c3be3fcc5ea3282045411073accbe687,2025-11-17T08:16:24.387000
|
||||
CVE-2025-1327,0,0,a00f3a7838ee8cb34a28ac7722d227a8d885a7c055568ff1befbcea8c4c0fd5c,2025-05-06T15:29:09.143000
|
||||
CVE-2025-13270,0,0,ea5a4270573e8a7a564d8d08b110c49c447b63e5b5290d4f11f7d60e421feda7,2025-11-17T08:16:24.780000
|
||||
CVE-2025-13271,1,1,dcecd33696075e33824381e9fa7daf0e8630b308e9ef4ad7642ff3b0b7ab3448,2025-11-17T09:15:42.733000
|
||||
CVE-2025-13272,1,1,27be93052fb5a241f742db343636fb7e60db30daea690a8687e120a6b63b93b5,2025-11-17T09:15:44.157000
|
||||
CVE-2025-13273,1,1,bd055755c53d00feab51fec00bf841877505fc21d29db5ca34244d0824bdf2ad,2025-11-17T10:15:57.770000
|
||||
CVE-2025-13274,1,1,f55bf238026577e71fcbba8b3c1d319fff6313edf7875fac99ef940e166163a2,2025-11-17T10:15:59
|
||||
CVE-2025-13271,0,0,dcecd33696075e33824381e9fa7daf0e8630b308e9ef4ad7642ff3b0b7ab3448,2025-11-17T09:15:42.733000
|
||||
CVE-2025-13272,0,0,27be93052fb5a241f742db343636fb7e60db30daea690a8687e120a6b63b93b5,2025-11-17T09:15:44.157000
|
||||
CVE-2025-13273,0,0,bd055755c53d00feab51fec00bf841877505fc21d29db5ca34244d0824bdf2ad,2025-11-17T10:15:57.770000
|
||||
CVE-2025-13274,0,0,f55bf238026577e71fcbba8b3c1d319fff6313edf7875fac99ef940e166163a2,2025-11-17T10:15:59
|
||||
CVE-2025-13275,1,1,778791e4bd3102fdda3780b71146290f892c23bb777bebfd966f63c8f29c5f38,2025-11-17T11:15:42.767000
|
||||
CVE-2025-13276,1,1,c7d0999167c2f17eaad56030fa15b4c045ef8001dd06f53cd5084104c8d29e73,2025-11-17T11:15:46.710000
|
||||
CVE-2025-13277,1,1,0d700898b8929b19c980a620041f0688aacaefe301df283195dea27053166cc8,2025-11-17T12:15:44.010000
|
||||
CVE-2025-1328,0,0,e2b9ad996048bde72d17ec9a6affa826b875b275e51ef749199b511eae0ab088,2025-02-25T18:03:46.410000
|
||||
CVE-2025-13282,0,0,8816f151ba917e9d5bbb37cb0129ef1414590df87b7fb78e41fcd2f65f477d45,2025-11-17T04:15:54.543000
|
||||
CVE-2025-13283,0,0,eced155aee36eefda98569c645a5444ec430e09731b47761af0a487bd33e25c2,2025-11-17T04:15:54.800000
|
||||
@@ -300476,22 +300480,22 @@ CVE-2025-37837,0,0,a5ecf8624038d5eaf435f4efaf054197f987c106550cc823c866f9c750dd5
|
||||
CVE-2025-37838,0,0,02ef4c0d325a26093ef8553fd174364f973193293f09ad3abc22b4b03005881a,2025-11-03T20:18:37.903000
|
||||
CVE-2025-37839,0,0,f8b280d1c78024dd0c49ebba3228ec9b8d58b51936d3dc253ba6c1b0d8b8e655,2025-11-14T19:54:45.870000
|
||||
CVE-2025-37840,0,0,c48802bdde2ad32059f7f606a6ee02c08d82b6bd69e566f48e39ca06117874c8,2025-11-14T19:35:23.787000
|
||||
CVE-2025-37841,0,0,f7513973dc96b9f92910fae87bcfbda57fc4fe494e2c4b091e79f94806e66af0,2025-11-03T20:18:38.270000
|
||||
CVE-2025-37842,0,0,1ab57b18a8cab3a9a7222aafc9c7893e96988a6565c6affa4260ac0216bdf653,2025-09-09T17:15:43.797000
|
||||
CVE-2025-37843,0,0,c08b0c0d26d673b4a59ac75827717dd146240ddd6e0833185d03f4ef538ea0fb,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37844,0,0,671c1c0b6210bd069756961180e80435b5582ee1a760a895634677d2fa69835b,2025-11-03T20:18:38.387000
|
||||
CVE-2025-37845,0,0,ac5962d2fe4ddf1682714368250e16a410a589a227624056f220d8f0861d77ff,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37846,0,0,cf8f31849f5b9930e14ba54e88a964ea4c7bd35e3cf74a0bfb8b447e70ac3b13,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37847,0,0,1c544807b8f28b5e20225a5d1f63853ca5ec3c580c2d889b3e2ed9058b96fba6,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37848,0,0,698363199914330280be3ad78acf020795739e108dbb1c9c5b07dfcdd3cab274,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37849,0,0,1398d2106882fc7862d441a608d10bd76965fb3295a481da321611fb5ca3138e,2025-11-03T20:18:38.493000
|
||||
CVE-2025-37841,0,1,be0b3c11ab0f59ec987650b85e9d49c2d1cae6a45d4c16dd937c4665bbfadd8f,2025-11-17T12:50:14.970000
|
||||
CVE-2025-37842,0,1,3fe25931b475ad7f8cb738c3017226565597f7a2b46e439c4c1d53da7aa84909,2025-11-17T12:49:38.210000
|
||||
CVE-2025-37843,0,1,fb519b66616237627853715c1696982931cc88c22e123c7a5a136cf37faf8e19,2025-11-17T12:49:24.540000
|
||||
CVE-2025-37844,0,1,9c3148605066aefd8b010684c21f63311ebc1b5b7fc4d94683926bb2cbc691b7,2025-11-17T12:49:02.350000
|
||||
CVE-2025-37845,0,1,600571a05ae16bac747b026717380b3321ef8b6e4a1f4961c1e887ef40c1ee77,2025-11-17T12:48:18.933000
|
||||
CVE-2025-37846,0,1,d11c83493b6fa88112abd76cdd6bc50826864a0635b64bb434f6efb6c7b93fee,2025-11-17T12:54:50.310000
|
||||
CVE-2025-37847,0,1,f9720c75306702530d8c1aa4476177a75806684c11741b2a1d26d983d3febe4f,2025-11-17T12:54:40.887000
|
||||
CVE-2025-37848,0,1,1de08bef7bb9e26f11dbde05eeb802553b333b922ea33f793dc39816dc7e3b77,2025-11-17T12:54:28.873000
|
||||
CVE-2025-37849,0,1,875d1e01e8a8fca644af60ec91dedb6fb94d0166b53209e60fb4a075a6a41d3d,2025-11-17T12:54:15.827000
|
||||
CVE-2025-3785,0,0,89cc8877db8659f0fd2f872198cd235ff3b7bf51f11623fff443d81a7f025d8f,2025-07-16T15:31:16.890000
|
||||
CVE-2025-37850,0,0,8be1dd9af748a90f12dc7cbe6a72d00af0eaa3a4a9c2c521a5e24d5e4bd892be,2025-11-03T20:18:38.590000
|
||||
CVE-2025-37851,0,0,8b25bd156a5e2ee0c00ace265b705c4465306c7a90a9481574c43e53572b42c1,2025-11-03T20:18:38.690000
|
||||
CVE-2025-37852,0,0,7b0dad3e05c4c8b2b79c15caa87ce8637baab384232c91e629bd07ef93ba859d,2025-11-03T20:18:38.787000
|
||||
CVE-2025-37853,0,0,9dfd304daee919df91c2c90d4ca7b0b96bb716263f075dc01b2cd728f1fac594,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37854,0,0,ab214e90a027d5dd021921526781d2cdfed313b555c6abbc0dcf6e895aa11881,2025-11-03T20:18:38.880000
|
||||
CVE-2025-37855,0,0,fc25bfe4f86be1d0767c66b86aa773f47c5a98b490f176fa54dc68ce1283f010,2025-05-12T17:32:52.810000
|
||||
CVE-2025-37850,0,1,e07c492a21b09fa5076aee3bcc512b1ec5aae12563c8a4c3a5a3c2c8e277d0b5,2025-11-17T12:53:47.893000
|
||||
CVE-2025-37851,0,1,1890d993ba87e35e50c6e8d73a704fb0e1d5118a80ed42fd2ceec186160a9d1f,2025-11-17T12:52:55.803000
|
||||
CVE-2025-37852,0,1,bb11f9a467380a51dcecf45877628b79f9a7f6ef17e3efae4fd5f4aa0cbee604,2025-11-17T12:52:14.693000
|
||||
CVE-2025-37853,0,1,44e168a59ac14a5ba94fac39e654e518bd26c6c061491ba58d5d2a7b23500b8c,2025-11-17T12:51:46.010000
|
||||
CVE-2025-37854,0,1,9e4df3f1a2b0832e19e5aecf2f27f218978d24736b2a5b798041f93e2d34db1f,2025-11-17T12:51:35.040000
|
||||
CVE-2025-37855,0,1,a0cd3be2a3a110f8741cd137455102df585768b4ddc3fe95293480ef39c997d6,2025-11-17T12:51:05.050000
|
||||
CVE-2025-37856,0,0,d5bf22d128a018464ddf59815183636358940c58769668dafd0a7eb6d34b8a99,2025-11-12T20:08:08.820000
|
||||
CVE-2025-37857,0,0,35d1efd6e2d15080292c24ea662935f08f55c92ff6d87fff8c5187282dc597da,2025-11-12T20:08:56.363000
|
||||
CVE-2025-37858,0,0,e32c0175fa625562a77ddb3cb41154b5576a57ada77b7262d7aad9dc501ade2b,2025-11-12T20:09:28.507000
|
||||
@@ -300586,19 +300590,19 @@ CVE-2025-37938,0,0,4da7182bf9b17ef6a6a94b4d2af5210f9a334c59fb713e41e9051ca42da14
|
||||
CVE-2025-37939,0,0,8922fc56316877861e38d1867cabe7cf4f4d72e6e7f044d76863ae9f0c31a15d,2025-05-21T20:25:16.407000
|
||||
CVE-2025-3794,0,0,ccddd2d28b75046591a0874e469cc458433082700136987a6948a83f0e27c261,2025-05-12T17:32:32.760000
|
||||
CVE-2025-37940,0,0,0c781382e36aa2bea03635f42eaeee40a0eb7aca8f47c143759f3f6a370cf2b2,2025-11-03T20:18:42.727000
|
||||
CVE-2025-37941,0,0,2061f6a7e6e87fab83d38483bd88d85d9d1e33f255584a8238521b1edcaf51af,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37942,0,0,fe4b5b381120384da377d4560ae304d5fdc74486e236958559d7c3c1f689ae32,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37943,0,0,9417365d2f12eeaa4c971fdf3973b3518bbcf0797502fab07492be6cf2a70043,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37944,0,0,062d4fb603a2525c5d69f204c362a43dab2f78c4b378be45b4107cd29794a6a7,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37945,0,0,ad6df655b0554e05eda7fcfa0f34d547e726f2fd0a27a0cf05cf00e4ad899941,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37946,0,0,fc33d37eab48143c67bb25afd69246167d427e638ff97f568328eedba3126ddb,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37941,0,1,46367045592735c0027398212148299d370ef744ff68b1b541c1b24b46adde96,2025-11-17T12:58:01.557000
|
||||
CVE-2025-37942,0,1,0fc88880cc2e1df1b939744b713ade0bf0abb1eca625035f66da908d57e398b6,2025-11-17T12:57:54.147000
|
||||
CVE-2025-37943,0,1,ffc9ac1d49a8865912f896184b592fc8d433e5bdcfaa6f3d70a87a2e4d4e1c3f,2025-11-17T12:57:46.727000
|
||||
CVE-2025-37944,0,1,4816c764c6bb01a3d36779a4832cc223428d29f31e15f3c500d87aaa3768fb0e,2025-11-17T12:57:39.790000
|
||||
CVE-2025-37945,0,1,5eee2e4b7a5873ed284f9cfa009851b27c2748ec210e096b99d3a89a315b07ed,2025-11-17T12:57:32.553000
|
||||
CVE-2025-37946,0,1,2c1ba1c998cb1c21297c5a1bd02210524e59945ed0022fa007d1a43cdb848bc8,2025-11-17T12:57:23.847000
|
||||
CVE-2025-37947,0,0,43b42457e07adcf8edff0a2adf578084c7ea48f5f28f8a399162bba0b333d6d8,2025-11-03T20:18:42.830000
|
||||
CVE-2025-37948,0,0,0583b27d76f44a5e9a7d811bbba59e90e566e139b772f9db8eb92925c9ecef87,2025-11-03T20:18:42.970000
|
||||
CVE-2025-37949,0,0,f3258da186f01d32311acece34e43e553d4d70c1451a6cb5479fdf2c14fc0db5,2025-11-03T20:18:43.063000
|
||||
CVE-2025-3795,0,0,cfb24d96a08fb1db282b05eac25f26880a35f952bb65bbd68b5a1ac5682f0bd6,2025-06-23T19:49:33.320000
|
||||
CVE-2025-37950,0,0,140e53747c4ca560ef56ea2183de957f1f4be81d20471a7ab223825f89750aef,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37950,0,1,9863d0f024b02b6df33429bdd1a23d61fe56eda569b638662f9151bb1f4deda3,2025-11-17T12:57:15.860000
|
||||
CVE-2025-37951,0,0,c76e2a6ab60e274c175cc6b5de303fa9ae77357a54ad666ec6e9e5f69cc63342,2025-11-03T20:18:43.160000
|
||||
CVE-2025-37952,0,0,3f27980eaff7d21f92da1427fd6d92b5ddd2da2c2c9125415777536d2b16ec3c,2025-05-21T20:24:58.133000
|
||||
CVE-2025-37952,0,1,6744271b01c43bd5f81d7270e8fffdc3f13933a692cc27cc0e0136ec1eb91f24,2025-11-17T12:57:06.880000
|
||||
CVE-2025-37953,0,0,193d232ad420eaee9362fedb9fc079b19902da525fd6dac9f509788f6a63ff04,2025-11-03T20:18:43.253000
|
||||
CVE-2025-37954,0,0,9dcc7e582d1adde24e94b99cf40e243a23ac89c4306aae9e8e97797882ffb8a9,2025-11-14T17:03:37.727000
|
||||
CVE-2025-37955,0,0,67cca2e72d12068226d3325efd300e52629bdb0cbb7648a697117194b7c027a8,2025-11-14T17:03:24.610000
|
||||
@@ -300659,13 +300663,13 @@ CVE-2025-38004,0,0,75cd399674283dfe148caef6946f2f2f9a4505b44f6cfc6afb28fd70f9036
|
||||
CVE-2025-38005,0,0,4995e069aa97a8b9bff05f0faf060ba66bf66b5b73ae8ae59de8a98b2d8d3ed6,2025-11-03T20:18:45.550000
|
||||
CVE-2025-38006,0,0,e6f4efe46d022120e2b9a1543d11ac3a8925a30c326cb6792af2bd6a9bfa6cc3,2025-11-14T16:42:01.430000
|
||||
CVE-2025-38007,0,0,ac0f2fa15712e943882231a6e87f01886d3620ed06a7f34bf888a37e418d2d74,2025-11-03T20:18:45.650000
|
||||
CVE-2025-38008,0,0,751f54e80a1b2a8ed915b955280bc489bb5418534164c8612c59a40f9ab954b3,2025-06-18T13:46:52.973000
|
||||
CVE-2025-38008,0,1,a1ab064f7ef931d301cd8c5837d4e87e6ccbd6877411269654d34473b55f6b2b,2025-11-17T12:56:52.697000
|
||||
CVE-2025-38009,0,0,69b080814149b2230211d6f9c837bde91078b732b22fe352bd26bb507565ebc1,2025-11-03T20:18:45.747000
|
||||
CVE-2025-3801,0,0,6b6ff942433f61f662faba2077e387c7e727543b5aa46dfc81789b9bc5de9c1b,2025-04-21T14:23:45.950000
|
||||
CVE-2025-38010,0,0,1e2a068d95559dd526b8108cc78c54b4c438136e36f5a06a41fa2f8d85dbf0c5,2025-06-18T13:46:52.973000
|
||||
CVE-2025-38011,0,0,64e0a89e72b76963674fe8765c49831a42709dc5e3209c1c283f9dd24b6e8e92,2025-06-18T13:46:52.973000
|
||||
CVE-2025-38012,0,0,f1f2be1bd14446009a0ae0f26a8a78f4d236fbf33210acfd8b87525cdddfa6c7,2025-06-18T13:46:52.973000
|
||||
CVE-2025-38013,0,0,ccc44e14b001cbc894969dc432ac3e51d33763cd9ad4fe03aab9ba5b633e8b5c,2025-06-18T13:46:52.973000
|
||||
CVE-2025-38010,0,1,ba06135366b1bbe00fcf2716913935faaad7e92a4cbf70356bc644d663fd3d84,2025-11-17T12:56:38.940000
|
||||
CVE-2025-38011,0,1,e9b44c37874438cd266237ec00869a6dc2c883ff14709b3a8542559bed48d812,2025-11-17T12:56:18.870000
|
||||
CVE-2025-38012,0,1,05db83569716df2ff4d889d98a0096df65e4ef700332cb8f7f453f6358923a62,2025-11-17T12:56:07.253000
|
||||
CVE-2025-38013,0,1,e60e576af5452c5256ec326bc36d8dfc5e013e5a740dd12311236219e541f406,2025-11-17T12:55:54.260000
|
||||
CVE-2025-38014,0,0,4a9dfc1fc41525afcba638bd1d23c5dbd44b7ea40dab46bf6c2d4c96ba17a90b,2025-11-14T19:02:05.763000
|
||||
CVE-2025-38015,0,0,1bf873483e062cffc4ca6abf3816347dd6065dc92d4b96932db31fca23bcda47,2025-11-03T20:18:45.843000
|
||||
CVE-2025-38016,0,0,2efd35b113735b10b1f79443fdaa4af8d5ac64980704e70e576c748562ddd471,2025-11-14T19:01:52.550000
|
||||
@@ -302668,6 +302672,7 @@ CVE-2025-40817,0,0,19c840f6240be987636a86e7159fc16859daf960498974b12d09fc5fa2ec8
|
||||
CVE-2025-4082,0,0,2331de0f0f3c2df94cb95fb87100a3873118a459b576d7f13c381d8a639987d0,2025-11-03T20:19:09.950000
|
||||
CVE-2025-40827,0,0,28b5394b74f4ed6fc4eb56d8b0070fc768e26295844330830b2ae2ac253e2012,2025-11-12T16:19:12.850000
|
||||
CVE-2025-4083,0,0,3eb9a45c98944b4c06ae68e5242a918f7d431d19edcd8ea88db77a81ab0ce119,2025-11-03T20:19:10.103000
|
||||
CVE-2025-40834,1,1,9b37ee1c1c4a5e4d378cf1c43245b6d8e801040823688aefa8e0a467fc1328cf,2025-11-17T12:15:44.290000
|
||||
CVE-2025-40836,0,0,a5e24286b651f5e773047ff9e95004dcb08947be5243554e8878db1e4b92b65b,2025-10-02T17:59:39.937000
|
||||
CVE-2025-40837,0,0,094b103832eb8429dc12ede27c4bcbc27a9b16dcb04a4f30ad83c9a3bdbe1d34,2025-10-02T17:59:04.630000
|
||||
CVE-2025-40838,0,0,b8cf1fafba421207543e86101449c67f8cb4c3ea444bcdb904b83152ff06bccd,2025-10-02T17:58:17.850000
|
||||
@@ -302710,6 +302715,7 @@ CVE-2025-40929,0,0,ed4048b4b8b61a3eb875301969a7824ac81d8630524e607ad1031c379db99
|
||||
CVE-2025-4093,0,0,483c3656f6f3758fe23a6eaef73caf2f5169398580135a28dbabb9bde37c55c2,2025-11-03T20:19:10.840000
|
||||
CVE-2025-40930,0,0,ac7b3f0b2b9f09e8f07e7f9f2431ec38fc482e765ad8356b7f53ff4bdc2d5d9c,2025-11-04T22:16:12.810000
|
||||
CVE-2025-40933,0,0,75f71a9e4a5a8d790b3512b30c341bf377ae7a600bf3ebabdeb3dd46b5ac229b,2025-09-18T13:43:34.310000
|
||||
CVE-2025-40936,1,1,ad06f1e78d23b79fc7f66cb04eefe38bbdd2ace069d5e1f4c3f7ba900ab5d92a,2025-11-17T12:15:44.493000
|
||||
CVE-2025-4094,0,0,9389e1771cac6e6188e563be99dd04161be542f25f3d0fbc50799f1a765f05af,2025-06-09T20:13:20.070000
|
||||
CVE-2025-4095,0,0,cae8e1c6358f7e063ff4b8cb5365d4cbb9a8d43b36017ef3b6ccb02f60becbc1,2025-05-02T13:53:40.163000
|
||||
CVE-2025-4096,0,0,1ae7df9d13281138e5184e1418611854220fd93b516e980bb023c9d2941d8afa,2025-05-28T20:07:18.943000
|
||||
@@ -303316,7 +303322,7 @@ CVE-2025-4304,0,0,6f1b91465a276129a41d4871b4c0d6efc81ef52ea3bf5203539481683a02fc
|
||||
CVE-2025-4305,0,0,b58ac1af9a831c4de839666746ce16b1183ed9c0a0c34755aad0f80402b5eab4,2025-05-07T14:13:35.980000
|
||||
CVE-2025-4306,0,0,47922af8efefcd58c9179aa2cf214e6d147a6315a6a644b76d8c7b05770f6f85,2025-05-13T19:21:25.277000
|
||||
CVE-2025-4307,0,0,968e09c51eefce90b73255eef2ef9cf3254087c66b3b8e32ef5d5e2a02eea504,2025-05-13T19:21:10.793000
|
||||
CVE-2025-43079,0,1,ec3b014fd58881683e4492b194ea4b516c87389738b4ad3b10b45620e759273e,2025-11-17T10:15:59.227000
|
||||
CVE-2025-43079,0,0,ec3b014fd58881683e4492b194ea4b516c87389738b4ad3b10b45620e759273e,2025-11-17T10:15:59.227000
|
||||
CVE-2025-4308,0,0,64773d5df5c47df8e574ab96bce10ce5262699f6cf6654bab1833a7a94d6b810,2025-05-13T19:20:51.480000
|
||||
CVE-2025-4309,0,0,c529fb402aad41bda7512ef22da31e7ef2a24da2d6fcd8aca0ab1ae416949061,2025-05-09T13:37:21.743000
|
||||
CVE-2025-4310,0,0,a8d911a03bf6b626b015394a304b3822e0dc653949f6cbaa3ff0211b84db0d22,2025-05-13T20:21:51.787000
|
||||
@@ -304677,16 +304683,16 @@ CVE-2025-46355,0,0,5a064c3f281b9d23670e4671cbb55d7d2442f434945aa8aa1f5e2ef16f08e
|
||||
CVE-2025-46358,0,0,0be29f1609d552944cbdd8572b2fc83c559b739741e7ce400140f44aa3c6635f,2025-07-15T13:14:49.980000
|
||||
CVE-2025-46359,0,0,1d522ab60ba4223a7555df3abbcfdc0406b0926f9ef6adaa633dffa73b9dcbaa,2025-08-06T16:42:31.303000
|
||||
CVE-2025-4636,0,0,42769483161d9081ca44d7da54fb93931edabd656065d5921f77e2f9979ff65e,2025-05-30T16:31:03.107000
|
||||
CVE-2025-46362,0,0,07c6613cd04ba5fa97383065fb9b6faf57bfcbb89bf26f64108ddbdef1c5dd62,2025-11-14T16:42:03.187000
|
||||
CVE-2025-46362,0,1,8f7f27b05b621719fcdfe95be53a6a21951593f65821868776f13435e76e1578,2025-11-17T12:28:15.610000
|
||||
CVE-2025-46363,0,0,6f4087ade5d2456af748c23f458de09406881630ff1532adfc549ae9fda677a5,2025-11-04T15:41:56.843000
|
||||
CVE-2025-46364,0,0,0637096761df5c65411a02203a9331c1cef7c718e572436e814573186c5ad259,2025-11-07T17:53:19.650000
|
||||
CVE-2025-46365,0,0,63fe3d527d3bbca6d773b17ba2f9f2369df3b5ee8c1cbfbf6d844d88a244c267,2025-11-07T17:59:01.870000
|
||||
CVE-2025-46366,0,0,a2973785aa84a6a0970c519026e58d0487c980229bc3416dbf9d68f898d3021c,2025-11-07T17:59:22.823000
|
||||
CVE-2025-46367,0,0,3284efbd10d530ba20827a8a320a3d51bfc63c7e6ed211c07a0641dbf69cd65a,2025-11-14T16:42:03.187000
|
||||
CVE-2025-46368,0,0,9468ee1857b43f57540964fe0e854b9fa6e4864fccb6446ac2fe5c115de29e1c,2025-11-14T16:42:03.187000
|
||||
CVE-2025-46369,0,0,25b8e62964a5ce7a17588a02ff8f1ddf0d262252d888936a42bac6983da98040,2025-11-14T16:42:03.187000
|
||||
CVE-2025-46367,0,1,2be4ec999507cb6d095e608dec2963b17a4a7f64ea1434333f7ba10a44754e2c,2025-11-17T12:28:03.680000
|
||||
CVE-2025-46368,0,1,cb2a146753d960b1278b4fba090ce0c35b616e8466e7182cd2da876ba86b0e2c,2025-11-17T12:27:18.617000
|
||||
CVE-2025-46369,0,1,f59b0a321dc9fffca2b08fad57c97f674ba2fc7b3a8a312b5f38b8c7c6fdabc4,2025-11-17T12:26:51.163000
|
||||
CVE-2025-4637,0,0,6a6f5a6b16c4a5dc9c7dfdefe827d1876d1a6cd89fb863be894c5faba3f21b65,2025-05-16T14:43:56.797000
|
||||
CVE-2025-46370,0,0,b196c9904347ab7ba0575c0045e17fa4cc09c7d63a84b1976a8bfebdfa610915,2025-11-14T16:42:03.187000
|
||||
CVE-2025-46370,0,1,fd69c0b8d2c1f653f8134026fc5c44f729d4aed28c859677d4d80c4fa70fe58b,2025-11-17T12:26:13.463000
|
||||
CVE-2025-46374,0,0,0df9474f29e53d817d13f584af47eb0c12cf27caea3c45635f75daa159094ef3,2025-04-24T03:15:15.797000
|
||||
CVE-2025-46375,0,0,c7cadd24d0c0ef6263c2e4f0e993c1b14e1cbac838119ad2f4f42dcfb3b1b113,2025-04-24T03:15:15.867000
|
||||
CVE-2025-46376,0,0,4a4eb88dda9426fffae031e9cc4c1cb39c01ffb8fef76394b4584f59d8624ab6,2025-04-24T03:15:15.917000
|
||||
@@ -304738,8 +304744,8 @@ CVE-2025-46422,0,0,c84e0c0dbf8a40359ff717e771cbec6df7cb6e39ab1b01074dc9e9e5eec73
|
||||
CVE-2025-46423,0,0,ec777a85b7d24f7c42363f0f3e24e3bd878e21711fe95853ffc9fdf1b7fc466d,2025-11-07T01:12:47.610000
|
||||
CVE-2025-46424,0,0,0c2d4828e2e962da52f3a76ab8b7fc821a93dd0314b9506d87b8bab6562481e8,2025-11-07T17:59:41.710000
|
||||
CVE-2025-46425,0,0,62fe6b45978c596848f7d1a47bf59cfa769ef7a6d59c1914ebfef2198afa3418,2025-11-04T14:26:41.313000
|
||||
CVE-2025-46427,0,0,e128ceb677e682f2148a1e005e36b8379bbe5c016522ef309eb4d8867a5faec2,2025-11-14T16:42:30.503000
|
||||
CVE-2025-46428,0,0,bac4938052b90f650e3f483f3c5843e02b907443f91184cb101c75d257451db2,2025-11-14T16:42:30.503000
|
||||
CVE-2025-46427,0,1,ee235ea283cfff18d7426ede2992871caed124ba5b9e4bb97adb918be1b0733c,2025-11-17T12:32:13.890000
|
||||
CVE-2025-46428,0,1,7187c6b105b0907b860db8d7cab86f4cb67c8aaea9b188356f761853e46d7f7f,2025-11-17T12:32:02.347000
|
||||
CVE-2025-4643,0,0,9bb4a34ed6aee5c995432e140a2afd85b92aa6c6b1abf40770400126292c49d7,2025-08-29T16:24:29.730000
|
||||
CVE-2025-46430,0,0,1440894ba1abc7ed304e4902cb2c4938b14906b8b0b1f1ad7e56d944c04beae8,2025-11-12T19:05:22.243000
|
||||
CVE-2025-46432,0,0,a236013c45619f821bf7946151136e3004fb9398b61130c70d8dc542bb4b2178,2025-05-16T14:51:02.440000
|
||||
@@ -311327,10 +311333,10 @@ CVE-2025-5677,0,0,364b4a61489a27818eacb60d1e1f6c17d4c2d09e9d81b672d48b3e04da11eb
|
||||
CVE-2025-5678,0,0,38a46c28ab47d4075d68a853baf022d7d7f4fbcb5807bb3d7524af93d22f1b7c,2025-07-17T13:31:56.730000
|
||||
CVE-2025-5679,0,0,bcb37143583af8e3d2aa317460750c3d95c2b1964b6469460c1abdd2990630c3,2025-11-12T16:47:50.573000
|
||||
CVE-2025-56795,0,0,4f235428c4f13cab56fead7206e527ce2bd2f1b7f61ea3c6ee9181d03cc1b667,2025-10-16T15:42:33.617000
|
||||
CVE-2025-56799,0,0,bb2a78be3ec0c90f55be67120c09b3d143f9f07d828359a4d4acfade8b275fbd,2025-10-22T14:15:50.863000
|
||||
CVE-2025-56799,0,1,1c552af2ee51dbfed2c30c69db697661bc0521a8e6da16dcfaa16cff94af3fc6,2025-11-17T12:46:33.180000
|
||||
CVE-2025-5680,0,0,60e74dce384e9df9ef7e4fed15b7fa36db31d532422ad8630b3c1f972e046f64,2025-11-12T17:07:47.567000
|
||||
CVE-2025-56800,0,0,6ba04ee0cd4ea0f43140fd646f44ebc07b306afef806835e61b016c87c6fd72f,2025-10-22T14:15:51.080000
|
||||
CVE-2025-56801,0,0,f5ec7fd699009a8d845f70675777a775c46b7e16e0301bb9da667273a14c1edb,2025-10-22T14:15:51.277000
|
||||
CVE-2025-56800,0,1,7b8a991b7bd7f3b9f1764069f377f7f3526f03072cb6c1c8dc0e9ed536844382,2025-11-17T12:46:26.313000
|
||||
CVE-2025-56801,0,1,7b4099e231efdf92129ccdacf5ea710d40464d34b77b6f92fabb73f8ce5cde2c,2025-11-17T12:46:15.277000
|
||||
CVE-2025-56802,0,0,617a19faa1c9a024c5ca6443e38936dde3d4e3f2f1d35eb5ba8f32b9f8f2c93c,2025-10-22T14:15:51.480000
|
||||
CVE-2025-56803,0,0,e204236e38e23de0500b842169e0fc177fb410f193e1aaf81d3d07a4b150df22,2025-09-26T14:02:46.583000
|
||||
CVE-2025-56807,0,0,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000
|
||||
@@ -312662,8 +312668,8 @@ CVE-2025-59058,0,0,c6438753a2373725f985d3d276092c8f07a478b768de0bcfe60ee3de58828
|
||||
CVE-2025-5906,0,0,2f5cdcf2b30e524ee9cb93f26097a5ce4b137e574a18d9f4978bab9694e9cdbd,2025-06-13T19:51:57.270000
|
||||
CVE-2025-5907,0,0,61b0370b0148abdbc066a02dd0ec6b60b30cadf66ae3fb080a88892a459c879e,2025-06-16T17:22:27.860000
|
||||
CVE-2025-5908,0,0,c3bdac397497f976939b525dc79f8291172dbf44dec99bcb5b91f199e1f0d3dd,2025-06-16T17:21:32.227000
|
||||
CVE-2025-59088,0,1,607b3baa0e8f9126029c8a36f6db1d131b9f88833c4d5382567b15eb6b361c04,2025-11-17T09:15:44.420000
|
||||
CVE-2025-59089,0,1,4d1de6bbb8d91ed3ea174c22160cec7d962caff97bb8596c81096c8da5c28282,2025-11-17T09:15:44.610000
|
||||
CVE-2025-59088,0,0,607b3baa0e8f9126029c8a36f6db1d131b9f88833c4d5382567b15eb6b361c04,2025-11-17T09:15:44.420000
|
||||
CVE-2025-59089,0,0,4d1de6bbb8d91ed3ea174c22160cec7d962caff97bb8596c81096c8da5c28282,2025-11-17T09:15:44.610000
|
||||
CVE-2025-5909,0,0,f82bb01110c9ead7795cebb5ea4e7190d1b79e236ac8da87e1f6c74c57a9946d,2025-06-16T17:14:56.647000
|
||||
CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f3e,2025-06-16T17:13:58.870000
|
||||
CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000
|
||||
@@ -313529,7 +313535,7 @@ CVE-2025-60453,0,0,57d1a716a770b56a9e82d0a6ac069478931cd6309c1e9e3c38ea6fc537759
|
||||
CVE-2025-60454,0,0,6cf4692a4b125d26bcc270487706fddefff075b4fab4b81623755bd03ce21982,2025-10-07T15:09:38.843000
|
||||
CVE-2025-6046,0,0,eff19aab09235c846a666c221db7d00dce7ee0674b5586b5fd3f227d004712ae,2025-10-07T23:15:33.923000
|
||||
CVE-2025-6050,0,0,3bcde1a8155a4512306f02b41d8e568aee84c2ab0f4880ff0cc4e34bfadce3fc,2025-07-30T19:09:37.570000
|
||||
CVE-2025-60500,0,0,994d70b071f0fcd67b0d8261dfa7f181a85c321289fb83c7d19f24465ba95f5e,2025-10-21T19:31:25.450000
|
||||
CVE-2025-60500,0,1,64d1fdc7387624658c0b55d83385ebdf04567f2be73e99c23f04afd883eeeed4,2025-11-17T12:46:55.307000
|
||||
CVE-2025-60503,0,0,078b3feb98774430b8660c0a63d485d36da0b85f0b75c8f79bc1ca988527876d,2025-11-04T15:41:31.450000
|
||||
CVE-2025-60506,0,0,205884deca1f2808cae3ed5ec315f63d389f9c10d632a8bade6a53e7af45683a,2025-10-22T15:16:01.020000
|
||||
CVE-2025-60507,0,0,47a29c114dbcab03b2fd6e441d0b13229c9d4f8448ae99efca5a66767cb9e9be,2025-10-21T19:31:25.450000
|
||||
@@ -313615,12 +313621,12 @@ CVE-2025-60693,0,0,1171839d8f317fa14dd85939c30f53d7a1ca780072e31b56d3ba58f854609
|
||||
CVE-2025-60694,0,0,f5b22132d2469c7f7d87454b028216a852b73e7265a5045c9dcabfa60218376e,2025-11-14T16:42:03.187000
|
||||
CVE-2025-60695,0,0,43b598c15d2a65da72c301ed8f5304f46a00452ac6a4743963d0310631daf6f4,2025-11-14T16:42:03.187000
|
||||
CVE-2025-60696,0,0,f2b5bd0d7edb11847bbc09e0adcf13a633109ad2ee90f36055235c7927eeb52b,2025-11-14T16:42:03.187000
|
||||
CVE-2025-60697,0,0,d8a8954e31be4bf2a865081db930aec04edfe98de5f4a84ec84bdb90f176973f,2025-11-14T16:42:03.187000
|
||||
CVE-2025-60698,0,0,ff9b31dce9096e8c45be4df2066c4dee71b0211b4b47a1bb204e26fcdf118b24,2025-11-14T16:42:03.187000
|
||||
CVE-2025-60697,0,1,6a47c4ac2334415a32290afbf5661522e68a78d239f3fe64b514cfa687deb4c3,2025-11-17T12:29:07.143000
|
||||
CVE-2025-60698,0,1,ab622c3feaa7c8aba55acac5ea29b9d35940a8399e37fa6418dae193cce2f0f2,2025-11-17T12:28:54.113000
|
||||
CVE-2025-60699,0,0,a2c2323384d477c6902a617cbcf39b6253460fd369da3d695fd787699c5bcc84,2025-11-14T17:16:09.640000
|
||||
CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160cc5,2025-06-16T12:32:18.840000
|
||||
CVE-2025-60700,0,0,51f29c313464ad494d4ce7b10cbb5e7360d53ee6a9c271e3c45b910ca4b37012,2025-11-14T17:16:12.173000
|
||||
CVE-2025-60701,0,0,514f55019ecd1258b0919d157bcafccc947a8430ffffc130de137f1601f92319,2025-11-14T17:16:13.770000
|
||||
CVE-2025-60700,0,1,d030ffffb84a5d859aef1574a896724df71a4a0cb6765c00237b65a300240c62,2025-11-17T12:28:40.547000
|
||||
CVE-2025-60701,0,1,5e54480458675cc55df08f3c70c945cdf735ba24beb97dce3a8b070faf528b1d,2025-11-17T12:28:31.610000
|
||||
CVE-2025-60702,0,0,46cb06676e2a34501d98e8d8ec78412dda517902c49ade10fecc71146371e7a8,2025-11-14T17:16:14.210000
|
||||
CVE-2025-60703,0,0,65f45e572898e6e7778e5b292062dd77e826265ebe0014a063873fa5c8005758,2025-11-12T16:19:12.850000
|
||||
CVE-2025-60704,0,0,dbfdf5d7749175f9c22114c58dd932a17a193f3461c343b403577e596468e0b1,2025-11-12T16:19:12.850000
|
||||
@@ -317970,7 +317976,7 @@ CVE-2025-9474,0,0,04e5519a4c5523010043101a7345e8cdc9c1778ec00e2494e9238cad5fa163
|
||||
CVE-2025-9475,0,0,d81bce53b9eafad111576c30a99b748ca4f69d3382e9948270c28dbb4c8d04f3,2025-09-02T18:06:08.630000
|
||||
CVE-2025-9476,0,0,e2d7890bec1b1972ac0d8d8fed777932960f83d44b4c7d1e2cd5d3046efeabe2,2025-09-02T18:06:17.300000
|
||||
CVE-2025-9478,0,0,3cd9228b8e196f5139cc969df82a935cdfb3e0f5251e9a67f34e2067398ddfc6,2025-09-02T18:09:31.373000
|
||||
CVE-2025-9479,0,0,3e3ef7a05fe92a4ee4d41fe3eb3f66593ce019e0952d3cafb9dbd30b074f18bc,2025-11-14T16:42:03.187000
|
||||
CVE-2025-9479,0,1,7c689bea161f457bb5fb719bba05db001a1fec3044b785a25df084a708acb135,2025-11-17T12:18:37.257000
|
||||
CVE-2025-9481,0,0,5abc38a7cffa98e974b5eb5fd13ac4478c630fd03c1fd1898e2fbae8c05f77e0,2025-09-02T18:08:19.850000
|
||||
CVE-2025-9482,0,0,535477c30a327cbc48ed81aeb7bb9988b98089411c7e2f74d03e32c736558653,2025-09-02T18:08:10.657000
|
||||
CVE-2025-9483,0,0,b36c25b1326ef26fd45e2662dcd0a600d01e5bc1394555b1f6b90016808e3954,2025-09-02T18:08:02.610000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user