From d4e8869a6016c4c3174ae61ad185aa63dbef4ac9 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 17 Nov 2025 13:04:03 +0000 Subject: [PATCH] Auto-Update: 2025-11-17T13:00:13.244490+00:00 --- CVE-2022/CVE-2022-499xx/CVE-2022-49956.json | 157 +++++++++++++-- CVE-2024/CVE-2024-119xx/CVE-2024-11919.json | 47 ++++- CVE-2024/CVE-2024-119xx/CVE-2024-11920.json | 47 ++++- CVE-2024/CVE-2024-131xx/CVE-2024-13178.json | 57 +++++- CVE-2024/CVE-2024-139xx/CVE-2024-13983.json | 47 ++++- CVE-2024/CVE-2024-488xx/CVE-2024-48829.json | 27 ++- CVE-2024/CVE-2024-70xx/CVE-2024-7017.json | 57 +++++- CVE-2024/CVE-2024-70xx/CVE-2024-7021.json | 46 ++++- CVE-2024/CVE-2024-91xx/CVE-2024-9126.json | 46 ++++- CVE-2025/CVE-2025-116xx/CVE-2025-11681.json | 78 ++++++++ CVE-2025/CVE-2025-119xx/CVE-2025-11942.json | 80 +++++++- CVE-2025/CVE-2025-119xx/CVE-2025-11943.json | 80 +++++++- CVE-2025/CVE-2025-128xx/CVE-2025-12855.json | 76 +++++++- CVE-2025/CVE-2025-128xx/CVE-2025-12856.json | 76 +++++++- CVE-2025/CVE-2025-128xx/CVE-2025-12857.json | 72 ++++++- CVE-2025/CVE-2025-129xx/CVE-2025-12913.json | 72 ++++++- CVE-2025/CVE-2025-129xx/CVE-2025-12932.json | 83 +++++++- CVE-2025/CVE-2025-129xx/CVE-2025-12933.json | 83 +++++++- CVE-2025/CVE-2025-129xx/CVE-2025-12938.json | 78 +++++++- CVE-2025/CVE-2025-129xx/CVE-2025-12939.json | 88 ++++++++- CVE-2025/CVE-2025-130xx/CVE-2025-13012.json | 55 +++++- CVE-2025/CVE-2025-130xx/CVE-2025-13013.json | 55 +++++- CVE-2025/CVE-2025-130xx/CVE-2025-13014.json | 55 +++++- CVE-2025/CVE-2025-130xx/CVE-2025-13015.json | 55 +++++- CVE-2025/CVE-2025-130xx/CVE-2025-13016.json | 55 +++++- CVE-2025/CVE-2025-130xx/CVE-2025-13017.json | 43 ++++- CVE-2025/CVE-2025-130xx/CVE-2025-13018.json | 43 ++++- CVE-2025/CVE-2025-130xx/CVE-2025-13019.json | 43 ++++- CVE-2025/CVE-2025-130xx/CVE-2025-13020.json | 43 ++++- CVE-2025/CVE-2025-130xx/CVE-2025-13021.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13022.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13023.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13024.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13025.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13026.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13027.json | 32 +++- CVE-2025/CVE-2025-130xx/CVE-2025-13057.json | 88 ++++++++- CVE-2025/CVE-2025-130xx/CVE-2025-13059.json | 88 ++++++++- CVE-2025/CVE-2025-130xx/CVE-2025-13060.json | 86 ++++++++- CVE-2025/CVE-2025-130xx/CVE-2025-13061.json | 88 ++++++++- CVE-2025/CVE-2025-130xx/CVE-2025-13097.json | 80 +++++++- CVE-2025/CVE-2025-131xx/CVE-2025-13102.json | 45 ++++- CVE-2025/CVE-2025-131xx/CVE-2025-13107.json | 56 +++++- CVE-2025/CVE-2025-131xx/CVE-2025-13119.json | 81 +++++++- CVE-2025/CVE-2025-131xx/CVE-2025-13122.json | 77 +++++++- CVE-2025/CVE-2025-131xx/CVE-2025-13169.json | 76 +++++++- CVE-2025/CVE-2025-131xx/CVE-2025-13170.json | 73 ++++++- CVE-2025/CVE-2025-132xx/CVE-2025-13275.json | 141 ++++++++++++++ CVE-2025/CVE-2025-132xx/CVE-2025-13276.json | 141 ++++++++++++++ CVE-2025/CVE-2025-132xx/CVE-2025-13277.json | 145 ++++++++++++++ CVE-2025/CVE-2025-378xx/CVE-2025-37841.json | 178 +++++++++++++++-- CVE-2025/CVE-2025-378xx/CVE-2025-37842.json | 106 ++++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37843.json | 94 ++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37844.json | 167 ++++++++++++++-- CVE-2025/CVE-2025-378xx/CVE-2025-37845.json | 104 +++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37846.json | 94 ++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37847.json | 99 +++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37848.json | 99 +++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37849.json | 137 +++++++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37850.json | 184 ++++++++++++++++-- CVE-2025/CVE-2025-378xx/CVE-2025-37851.json | 179 ++++++++++++++++-- CVE-2025/CVE-2025-378xx/CVE-2025-37852.json | 137 +++++++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37853.json | 106 ++++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37854.json | 138 +++++++++++++- CVE-2025/CVE-2025-378xx/CVE-2025-37855.json | 70 ++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37941.json | 94 ++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37942.json | 93 ++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37943.json | 106 ++++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37944.json | 106 ++++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37945.json | 106 ++++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37946.json | 107 ++++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37950.json | 95 +++++++++- CVE-2025/CVE-2025-379xx/CVE-2025-37952.json | 119 +++++++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38008.json | 124 +++++++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38010.json | 124 +++++++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38011.json | 112 ++++++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38012.json | 112 ++++++++++- CVE-2025/CVE-2025-380xx/CVE-2025-38013.json | 124 +++++++++++- CVE-2025/CVE-2025-408xx/CVE-2025-40834.json | 100 ++++++++++ CVE-2025/CVE-2025-409xx/CVE-2025-40936.json | 100 ++++++++++ CVE-2025/CVE-2025-463xx/CVE-2025-46362.json | 48 ++++- CVE-2025/CVE-2025-463xx/CVE-2025-46367.json | 28 ++- CVE-2025/CVE-2025-463xx/CVE-2025-46368.json | 48 ++++- CVE-2025/CVE-2025-463xx/CVE-2025-46369.json | 28 ++- CVE-2025/CVE-2025-463xx/CVE-2025-46370.json | 48 ++++- CVE-2025/CVE-2025-464xx/CVE-2025-46427.json | 27 ++- CVE-2025/CVE-2025-464xx/CVE-2025-46428.json | 27 ++- CVE-2025/CVE-2025-567xx/CVE-2025-56799.json | 33 +++- CVE-2025/CVE-2025-568xx/CVE-2025-56800.json | 33 +++- CVE-2025/CVE-2025-568xx/CVE-2025-56801.json | 33 +++- CVE-2025/CVE-2025-605xx/CVE-2025-60500.json | 28 ++- CVE-2025/CVE-2025-606xx/CVE-2025-60697.json | 54 +++++- CVE-2025/CVE-2025-606xx/CVE-2025-60698.json | 54 +++++- CVE-2025/CVE-2025-607xx/CVE-2025-60700.json | 54 +++++- CVE-2025/CVE-2025-607xx/CVE-2025-60701.json | 54 +++++- CVE-2025/CVE-2025-94xx/CVE-2025-9479.json | 55 +++++- README.md | 48 +++-- _state.csv | 200 ++++++++++---------- 98 files changed, 7075 insertions(+), 672 deletions(-) create mode 100644 CVE-2025/CVE-2025-116xx/CVE-2025-11681.json create mode 100644 CVE-2025/CVE-2025-132xx/CVE-2025-13275.json create mode 100644 CVE-2025/CVE-2025-132xx/CVE-2025-13276.json create mode 100644 CVE-2025/CVE-2025-132xx/CVE-2025-13277.json create mode 100644 CVE-2025/CVE-2025-408xx/CVE-2025-40834.json create mode 100644 CVE-2025/CVE-2025-409xx/CVE-2025-40936.json diff --git a/CVE-2022/CVE-2022-499xx/CVE-2022-49956.json b/CVE-2022/CVE-2022-499xx/CVE-2022-49956.json index e20568a3640..c0513e80a2c 100644 --- a/CVE-2022/CVE-2022-499xx/CVE-2022-49956.json +++ b/CVE-2022/CVE-2022-499xx/CVE-2022-49956.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49956", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T11:15:22.773", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:55:48.467", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,174 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: staging: rtl8712: se corrige el error \"use after free\". Las devoluciones de llamada _Read/Write_MACREG son nulas, por lo que las funciones read/write_macreg_hdl() solo liberan el puntero \"pcmd\". Esto genera un error \"use after free\". Elim\u00ednelas." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.37", + "versionEndExcluding": "4.9.328", + "matchCriteriaId": "9AC39563-8D49-42F4-952A-04264AAB2EF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.293", + "matchCriteriaId": "5D9B742D-912D-4E0C-A42F-367086FDEA88" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.258", + "matchCriteriaId": "253D30F5-3734-4663-883A-288786D3B66E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.213", + "matchCriteriaId": "4C373116-9E23-44BA-A6B7-87C8BF5C3B85" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.142", + "matchCriteriaId": "D44AD643-5591-432E-BD41-C2C737F54AC0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.66", + "matchCriteriaId": "52AE7E2B-7BE3-4B8A-89CC-AB62434899A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "5.19.8", + "matchCriteriaId": "7FEC7656-4CE2-424C-8830-EDB160E701C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E8BD11A3-8643-49B6-BADE-5029A0117325" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc2:*:*:*:*:*:*", + "matchCriteriaId": "5F0AD220-F6A9-4012-8636-155F1B841FAD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.0:rc3:*:*:*:*:*:*", + "matchCriteriaId": "A46498B3-78E1-4623-AAE1-94D29A42BE4E" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-119xx/CVE-2024-11919.json b/CVE-2024/CVE-2024-119xx/CVE-2024-11919.json index 6cd421e2116..cbcc3f3622c 100644 --- a/CVE-2024/CVE-2024-119xx/CVE-2024-11919.json +++ b/CVE-2024/CVE-2024-119xx/CVE-2024-11919.json @@ -2,8 +2,8 @@ "id": "CVE-2024-11919", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:54.183", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:25:42.943", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,53 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "129.0.6668.58", + "matchCriteriaId": "1C2C3CE1-E8FB-4A05-B400-973CE069B66C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_17.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/352516283", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-119xx/CVE-2024-11920.json b/CVE-2024/CVE-2024-119xx/CVE-2024-11920.json index 91b883c8f4c..db6a959883b 100644 --- a/CVE-2024/CVE-2024-119xx/CVE-2024-11920.json +++ b/CVE-2024/CVE-2024-119xx/CVE-2024-11920.json @@ -2,8 +2,8 @@ "id": "CVE-2024-11920", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.100", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:25:29.400", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,53 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "130.0.6723.92", + "matchCriteriaId": "5DBDBA83-6E17-4AAC-BDD1-CAF0C29E271A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_29.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/371840056", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-131xx/CVE-2024-13178.json b/CVE-2024/CVE-2024-131xx/CVE-2024-13178.json index 404c3196566..42412858680 100644 --- a/CVE-2024/CVE-2024-131xx/CVE-2024-13178.json +++ b/CVE-2024/CVE-2024-131xx/CVE-2024-13178.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13178", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.220", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:25:13.680", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,63 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "128.0.6613.84", + "matchCriteriaId": "DAE0C7AB-1D61-4449-BC82-915B019F311F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/40068607", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-139xx/CVE-2024-13983.json b/CVE-2024/CVE-2024-139xx/CVE-2024-13983.json index 7a6e59b6816..6cfd3244a00 100644 --- a/CVE-2024/CVE-2024-139xx/CVE-2024-13983.json +++ b/CVE-2024/CVE-2024-139xx/CVE-2024-13983.json @@ -2,8 +2,8 @@ "id": "CVE-2024-13983", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.380", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:24:59.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,53 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "136.0.7103.59", + "matchCriteriaId": "D17DB57F-A41C-4EED-A254-FC88BF42FBB6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/379818904", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-488xx/CVE-2024-48829.json b/CVE-2024/CVE-2024-488xx/CVE-2024-48829.json index a9868a421b4..fb41d7cc5fe 100644 --- a/CVE-2024/CVE-2024-488xx/CVE-2024-48829.json +++ b/CVE-2024/CVE-2024-488xx/CVE-2024-48829.json @@ -2,8 +2,8 @@ "id": "CVE-2024-48829", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-12T20:15:34.917", - "lastModified": "2025-11-14T16:42:30.503", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:33:50.973", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.6.1.0", + "matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-70xx/CVE-2024-7017.json b/CVE-2024/CVE-2024-70xx/CVE-2024-7017.json index 3c4192c8ee3..dada88ae3cb 100644 --- a/CVE-2024/CVE-2024-70xx/CVE-2024-7017.json +++ b/CVE-2024/CVE-2024-70xx/CVE-2024-7017.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7017", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.520", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:24:41.543", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,63 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "126.0.6478.182", + "matchCriteriaId": "26C1F2B0-2FAA-47FE-A54B-29F3332447DE" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/338248595", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-70xx/CVE-2024-7021.json b/CVE-2024/CVE-2024-70xx/CVE-2024-7021.json index 646ac1d520b..a896de85d19 100644 --- a/CVE-2024/CVE-2024-70xx/CVE-2024-7021.json +++ b/CVE-2024/CVE-2024-70xx/CVE-2024-7021.json @@ -2,8 +2,8 @@ "id": "CVE-2024-7021", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.650", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:24:30.807", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,52 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "124.0.6367.60", + "matchCriteriaId": "AFB90495-B48B-4020-A2CC-51D77CABEB72" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/40064701", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking", + "Permissions Required" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-91xx/CVE-2024-9126.json b/CVE-2024/CVE-2024-91xx/CVE-2024-9126.json index d418571c341..474e7dac424 100644 --- a/CVE-2024/CVE-2024-91xx/CVE-2024-9126.json +++ b/CVE-2024/CVE-2024-91xx/CVE-2024-9126.json @@ -2,8 +2,8 @@ "id": "CVE-2024-9126", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:55.770", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:24:10.707", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,52 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "127.0.6533.88", + "matchCriteriaId": "28DEAEAE-DAA0-4685-A757-54B3D794B182" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop_30.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/349653218", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-116xx/CVE-2025-11681.json b/CVE-2025/CVE-2025-116xx/CVE-2025-11681.json new file mode 100644 index 00000000000..861c65488fa --- /dev/null +++ b/CVE-2025/CVE-2025-116xx/CVE-2025-11681.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-11681", + "sourceIdentifier": "security@m-files.com", + "published": "2025-11-17T12:15:43.250", + "lastModified": "2025-11-17T12:15:43.250", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Denial-of-service condition in M-Files Server versions before 25.11.15392.1 allows an authenticated user to cause the MFserver process to crash." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@m-files.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@m-files.com", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-400" + } + ] + } + ], + "references": [ + { + "url": "https://product.m-files.com/security-advisories/cve-2025-11681/", + "source": "security@m-files.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11942.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11942.json index 88a96a47c61..544d54b0f96 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11942.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11942.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11942", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-19T16:15:36.443", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:45:11.827", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,22 +140,68 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:70mai:x200_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-10-10", + "matchCriteriaId": "92AA7E65-AF30-4F7D-A1DC-89B1EE16146F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:70mai:x200:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F01430C4-0D39-4493-9CEA-7E44EFD0520B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/geo-chen/70mai/blob/main/README.md#finding-9-bypass-device-pairing-of-70mai-dashcam-omni-x200", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.329021", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.329021", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.672520", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-119xx/CVE-2025-11943.json b/CVE-2025/CVE-2025-119xx/CVE-2025-11943.json index 696720a9aa4..2913eba25f5 100644 --- a/CVE-2025/CVE-2025-119xx/CVE-2025-11943.json +++ b/CVE-2025/CVE-2025-119xx/CVE-2025-11943.json @@ -2,8 +2,8 @@ "id": "CVE-2025-11943", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-19T20:15:36.083", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:45:50.343", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -116,22 +136,68 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:70mai:x200_firmware:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2025-10-10", + "matchCriteriaId": "92AA7E65-AF30-4F7D-A1DC-89B1EE16146F" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:70mai:x200:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F01430C4-0D39-4493-9CEA-7E44EFD0520B" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/geo-chen/70mai/blob/main/README.md#finding-10-exposed-root-password-via-unauthenticated-http-server", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.329022", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.329022", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.672521", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json index f043a25bf6e..6103ae7c29d 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12855.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12855", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-07T14:15:49.167", - "lastModified": "2025-11-12T16:20:22.257", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:43:55.817", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,30 +140,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/newsletterdel-sql-injection/report.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331501", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331501", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.679743", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/newsletterdel-sql-injection/report.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12856.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12856.json index 874635f09df..1c924fdba51 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12856.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12856.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12856", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-07T14:15:49.420", - "lastModified": "2025-11-12T16:20:22.257", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:43:41.087", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,30 +140,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/reservation-sql-injection/report.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331502", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331502", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.679744", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/reservation-sql-injection/report.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-128xx/CVE-2025-12857.json b/CVE-2025/CVE-2025-128xx/CVE-2025-12857.json index 970e3b50dc6..ed81a309002 100644 --- a/CVE-2025/CVE-2025-128xx/CVE-2025-12857.json +++ b/CVE-2025/CVE-2025-128xx/CVE-2025-12857.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12857", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-07T14:15:49.680", - "lastModified": "2025-11-12T16:20:22.257", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:43:22.537", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,26 +140,62 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/AmengDream/CVE/blob/main/Responsive_Hotel_Site/roombook-sql-injection/report.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331503", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331503", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.679745", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12913.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12913.json index 6a75ddd880a..0e962be0428 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12913.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12913.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12913", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-08T20:15:34.580", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:42:54.190", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,26 +140,62 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:responsive_hotel_site:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BEEBA52B-991B-4FF9-AE6A-14E21F1F7E50" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/HoyaAm/cve-hoya/blob/main/report.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.331631", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331631", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.681061", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json index 006731ab87e..10309be8adf 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12932.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12932", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T05:15:43.897", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:42:33.317", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 1.2, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "42CE41EF-8BBD-48C2-871E-5FE729477690" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/puppytgyh/-CVE/issues/7", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.331652", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331652", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682272", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json index 4d03eef0ce3..3547824ad01 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12933.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12933", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T06:15:34.133", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:42:20.207", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,28 +138,75 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "42CE41EF-8BBD-48C2-871E-5FE729477690" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/puppytgyh/-CVE/issues/8", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.331653", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331653", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682276", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12938.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12938.json index b9df3f45eeb..b3c0303ebf0 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12938.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12938.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12938", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T12:15:47.020", - "lastModified": "2025-11-12T16:19:59.103", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:41:57.123", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,68 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:projectworlds:online_admission_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "2454BEDC-553B-4192-A2AE-48CEEA8B71E8" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/juzidddd/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.331662", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331662", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682313", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12939.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12939.json index be62cc2a6f6..dd2997dce5a 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12939.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12939.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12939", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T13:15:44.713", - "lastModified": "2025-11-14T19:15:57.257", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:41:39.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,84 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:janobe:interview_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "765F8425-3BE1-4C95-A372-B03A323B3C5C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/puppytgyh/-CVE/issues/10", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.331663", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.331663", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682314", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/puppytgyh/-CVE/issues/10", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13012.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13012.json index 371c6505939..9d318cff670 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13012.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13012.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13012", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.253", - "lastModified": "2025-11-13T16:15:49.603", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:39:49.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "115.30.0", + "matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionStartIncluding": "140.0", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991458", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-89/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13013.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13013.json index c1773a3e936..319f9f1c443 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13013.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13013.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13013", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.367", - "lastModified": "2025-11-13T16:15:49.770", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:39:40.203", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "115.30.0", + "matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionStartIncluding": "140.0", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1991945", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-89/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13014.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13014.json index 3b998fa9971..1219c6f74e0 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13014.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13014.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13014", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.473", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:39:29.170", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "115.30.0", + "matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionStartIncluding": "140.0", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994241", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-89/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13015.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13015.json index 015362d9195..5c250961029 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13015.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13015.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13015", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.573", - "lastModified": "2025-11-13T16:15:49.927", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:39:17.383", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,65 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "115.30.0", + "matchCriteriaId": "6A363BA6-4A06-4794-B7DF-59B1624097BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionStartIncluding": "140.0", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "E7561CC5-C090-4099-A311-1A0E304111FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994164", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-89/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13016.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13016.json index d8384a7bc35..b2ddaa720b8 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13016.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13016.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13016", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.677", - "lastModified": "2025-11-13T16:15:50.083", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:38:52.407", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -35,18 +35,63 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992130", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13017.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13017.json index 846e9f6cadc..99e2ca7b92c 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13017.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13017.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13017", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.793", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:38:44.923", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1980904", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13018.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13018.json index 7bdd133b96d..56bbbfbb199 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13018.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13018.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13018", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:38.900", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:38:28.200", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984940", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13019.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13019.json index 38b9bd1c439..74551240db7 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13019.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13019.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13019", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.000", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:38:16.037", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988412", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13020.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13020.json index 5abd58e8a86..a47e7b025ca 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13020.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13020.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13020", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.097", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:38:00.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "140.5.0", + "matchCriteriaId": "D77916A6-B8C6-475D-8D77-D5D3AA1E1F43" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1995686", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-88/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13021.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13021.json index 3273270e691..a96a7d8df81 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13021.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13021.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13021", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.193", - "lastModified": "2025-11-13T16:15:50.227", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:37:50.063", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1986431", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13022.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13022.json index d7bc97828f0..ef64226e28a 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13022.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13022.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13022", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.287", - "lastModified": "2025-11-13T16:15:50.383", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:37:38.103", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1988488", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13023.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13023.json index cb2c79f4196..42195bbc0f7 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13023.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13023.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13023", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.403", - "lastModified": "2025-11-13T16:15:50.533", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:37:29.513", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992032", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13024.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13024.json index 42c16af9853..332ad6aae57 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13024.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13024.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13024", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.510", - "lastModified": "2025-11-13T16:15:50.683", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:37:21.517", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992902", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13025.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13025.json index 9405e2b6d1d..f7d82637f48 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13025.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13025.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13025", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.613", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:37:12.383", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994022", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13026.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13026.json index 3079526c39c..bb14371de75 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13026.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13026.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13026", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.713", - "lastModified": "2025-11-12T16:19:34.210", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:36:55.850", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1994441", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Permissions Required" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13027.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13027.json index 77970b9f420..2326bcaa45a 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13027.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13027.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13027", "sourceIdentifier": "security@mozilla.org", "published": "2025-11-11T16:15:39.820", - "lastModified": "2025-11-12T22:15:43.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:36:27.433", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "145.0", + "matchCriteriaId": "445D5AED-0882-46FE-A5F1-B7148B923221" + } + ] + } + ] + } + ], "references": [ { "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1987237%2C1990079%2C1991715%2C1994994", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://www.mozilla.org/security/advisories/mfsa2025-87/", - "source": "security@mozilla.org" + "source": "security@mozilla.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13057.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13057.json index 13d44115d4d..597be341694 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13057.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13057.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13057", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-12T19:15:35.607", - "lastModified": "2025-11-14T16:42:30.503", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:34:13.523", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,84 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:campcodes:school_fees_payment_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "450DC6BC-1A28-40FC-987F-4AA647D910F5" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/QingqingOK/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.332184", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332184", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682367", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.campcodes.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/QingqingOK/CVE/issues/1", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13059.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13059.json index 572bd5873d1..382d1335b25 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13059.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13059.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13059", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-12T20:15:39.170", - "lastModified": "2025-11-14T18:15:44.860", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:33:23.140", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,84 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oretnom23:alumni_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "D7D6E2A9-DEF6-4636-BC2D-36085C47930C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/CaseyW33/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://vuldb.com/?ctiid.332186", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332186", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682548", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/CaseyW33/CVE/issues/1", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13060.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13060.json index 7cb1d00dd62..49df4da4e7e 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13060.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13060.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13060", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-12T20:15:39.357", - "lastModified": "2025-11-14T18:15:45.413", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:32:35.167", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,82 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:oretnom23:survey_application_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BC838E1E-FAEC-4100-8364-41B7D342A010" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.332187", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332187", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682565", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/Survey%20Application%20System%202%20.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13061.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13061.json index 28606012192..5189039b9de 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13061.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13061.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13061", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-12T21:15:48.763", - "lastModified": "2025-11-14T17:15:59.597", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:31:25.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,32 +138,84 @@ "value": "CWE-434" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:angeljudesuarez:online_voting_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "89B24FA5-BBF1-4283-B2B2-8F1A365BD78C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/yihaofuweng/cve/issues/55", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] }, { "url": "https://itsourcecode.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://vuldb.com/?ctiid.332188", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332188", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.682587", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/yihaofuweng/cve/issues/55", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13097.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13097.json index 1e892fdc9d5..4669f4679c4 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13097.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13097.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13097", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:56.443", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:23:36.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,86 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "136.0.7103.59", + "matchCriteriaId": "D17DB57F-A41C-4EED-A254-FC88BF42FBB6" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "136.0.7103.48", + "matchCriteriaId": "BE27FC5D-F829-489D-B54E-07E00B2E5997" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/402791076", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13102.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13102.json index c41d2d7c4b0..4c38c43329f 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13102.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13102.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13102", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:56.563", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:18:45.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,51 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "134.0.6998.35", + "matchCriteriaId": "CCEA13AF-B0C2-4D3A-A4DA-60C02F7FC46D" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/351564774", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13107.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13107.json index c197fbc7927..b645bc877c5 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13107.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13107.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13107", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:56.687", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:18:25.437", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,62 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "140.0.7339.80", + "matchCriteriaId": "614C3A2A-11F8-45CE-BEF0-9033AD4AE057" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Release Notes", + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/429440615", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13119.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13119.json index f6f834b480e..ecbf41ffd32 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13119.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13119.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13119", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T15:15:50.857", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:30:52.537", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -118,28 +138,75 @@ "value": "CWE-862" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:simple_e-banking_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "DED1A614-568F-49D9-A364-A8ECC0E6B07C" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.332324", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332324", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.683335", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13122.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13122.json index 5cd3d208ede..d33b057dd71 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13122.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13122.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13122", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-13T18:15:50.110", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:30:18.140", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -118,24 +138,67 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:pamzey:patients_waiting_area_queue_management_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "69FC38AE-BCD1-4A41-B2E0-CE3DEE703691" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.332350", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332350", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.683789", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://www.sourcecodester.com/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13169.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13169.json index c523fbeb3f5..ce5ca77cec6 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13169.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13169.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13169", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-14T16:15:53.480", - "lastModified": "2025-11-14T17:16:00.407", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:17:57.580", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,30 +140,70 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BB45381F-7BBB-408B-98AA-D931AC3C779B" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/hanshi-798/CVE/blob/main/tmp72/report.md", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.332457", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332457", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.684616", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/hanshi-798/CVE/blob/main/tmp72/report.md", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13170.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13170.json index b68669f04e9..19ea015139e 100644 --- a/CVE-2025/CVE-2025-131xx/CVE-2025-13170.json +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13170.json @@ -2,8 +2,8 @@ "id": "CVE-2025-13170", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-14T16:15:53.737", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:18:14.443", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -120,26 +140,63 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:fabian:simple_online_hotel_reservation_system:1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "BB45381F-7BBB-408B-98AA-D931AC3C779B" + } + ] + } + ] + } + ], "references": [ { "url": "https://code-projects.org/", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Product" + ] }, { "url": "https://github.com/pfdlyy/CVE/issues/1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.332458", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.332458", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.684617", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13275.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13275.json new file mode 100644 index 00000000000..eb371c7ca68 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13275.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13275", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T11:15:42.767", + "lastModified": "2025-11-17T11:15:42.767", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This affects an unknown part of the file /admin/about.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P", + "baseScore": 5.8, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "MULTIPLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 6.4, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + }, + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/mhszed/Report/blob/main/php-business-website%20upload.docx", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332610", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332610", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.690049", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13276.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13276.json new file mode 100644 index 00000000000..151ca01e594 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13276.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13276", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T11:15:46.710", + "lastModified": "2025-11-17T11:15:46.710", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in g33kyrash Online-Banking-System up to 12dbfa690e5af649fb72d2e5d3674e88d6743455. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument Username results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Nianalb/Report_Online-Banking-System/blob/main/SQL.docx", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332611", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332611", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.690087", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13277.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13277.json new file mode 100644 index 00000000000..b6f3d17322f --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13277.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13277", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T12:15:44.010", + "lastModified": "2025-11-17T12:15:44.010", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://code-projects.org/", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/daojian1/Nero-Social-Networking-Site-V1.0_004", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332612", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332612", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.690140", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37841.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37841.json index f9a923b8c5d..a85dc0066be 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37841.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37841.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37841", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:04.837", - "lastModified": "2025-11-03T20:18:38.270", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:50:14.970", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,51 +15,201 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pm: cpupower: bench: Evitar la desreferenciaci\u00f3n de valores NULL en caso de fallo de malloc. Si malloc devuelve NULL debido a poca memoria, el puntero 'config' puede ser NULL. Se ha a\u00f1adido una comprobaci\u00f3n para evitar la desreferenciaci\u00f3n de valores NULL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.4.293", + "matchCriteriaId": "389EB980-4648-446E-A0DC-5FB0265E0F02" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.237", + "matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.181", + "matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0e297a02e03dceb2874789ca40bd4e65c5371704", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/208baa3ec9043a664d9acfb8174b332e6b17fb69", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/34a9394794b0f97af6afedc0c9ee2012c24b28ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5e38122aa3fd0f9788186e86a677925bfec0b2d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/79bded9d70142d2a11d931fc029afece471641db", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/87b9f0867c0afa7e892f4b30c36cff6bf2707f85", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/942a4b97fc77516678b1d8af1521ff9a94c13b3e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ceec06f464d5cfc0ba966225f7d50506ceb62242", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8d28fa305b78c5d1073b63f26db265ba8291ae1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37842.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37842.json index d108c318c8a..b30ed28b85d 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37842.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37842.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37842", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:04.963", - "lastModified": "2025-09-09T17:15:43.797", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:49:38.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: spi: fsl-qspi: usar la funci\u00f3n devm en lugar de eliminar el controlador. El controlador usa las API devm para administrar clk/irq/resources y registrar el controlador spi, pero la funci\u00f3n de eliminaci\u00f3n heredada se llamar\u00e1 primero durante la desconexi\u00f3n del dispositivo y activar\u00e1 el p\u00e1nico del kernel. Se debe omitir la funci\u00f3n de eliminaci\u00f3n y usar devm_add_action_or_reset() para limpiar el controlador y asegurar la secuencia de liberaci\u00f3n. Se activa el p\u00e1nico del kernel en i.MX8MQ mediante echo 30bb0000.spi >/sys/bus/platform/drivers/fsl-quadspi/unbind." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2", + "versionEndExcluding": "6.6.105", + "matchCriteriaId": "FFCAC8A9-E253-4F04-98F7-26A8EB5B9317" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.36", + "matchCriteriaId": "2BD88DEC-018F-4F40-8E29-A2CA89813EBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/40369bfe717e96e26650eeecfa5a6363563df6e4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/439688dbe82baa10d4430dc3252bb5ef1183a171", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50ae352c1848cab408fb4f7d7f50c71f818bbdbf", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f68b27d82a749117d9c7d7f33fa53f46373e38e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9bfb3a5f6f616f3eb7665c8ff3bcb9760ae33c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37843.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37843.json index 5f47581d397..fa48f80e77c 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37843.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37843.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37843", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.077", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:49:24.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: PCI: pciehp: Evitar comprobaciones innecesarias de reemplazo de dispositivo. La desconexi\u00f3n en caliente de puertos PCI hotplug anidados sufre una condici\u00f3n de ejecuci\u00f3n persistente que puede provocar un bloqueo: un puerto hotplug principal adquiere pci_lock_rescan_remove() y espera a que pciehp se desvincule de un puerto hotplug secundario. Mientras tanto, ese puerto hotplug secundario tambi\u00e9n intenta adquirir pci_lock_rescan_remove() para eliminar sus propios secundarios. El bloqueo solo ocurre si el principal adquiere pci_lock_rescan_remove() primero, no si el secundario lo adquiere primero. A lo largo de los a\u00f1os se han propuesto y descartado varias soluciones alternativas para evitar el problema, por ejemplo: https://lore.kernel.org/r/4c882e25194ba8282b78fe963fec8faae7cf23eb.1529173804.git.lukas@wunner.de/ Se est\u00e1 trabajando en una soluci\u00f3n adecuada, pero requiere m\u00e1s tiempo, ya que no es trivial y es necesariamente intrusiva. La reciente confirmaci\u00f3n 9d573d19547b (\"PCI: pciehp: Detectar reemplazo de dispositivo durante la suspensi\u00f3n del sistema\") provoca una mayor frecuencia del bloqueo al eliminar m\u00e1s de un dispositivo Thunderbolt durante la suspensi\u00f3n del sistema. Esta confirmaci\u00f3n buscaba detectar el reemplazo del dispositivo, pero tambi\u00e9n se activ\u00f3 al eliminarlo. Es imposible diferenciar con precisi\u00f3n entre reemplazo y eliminaci\u00f3n, ya que pci_get_dsn() devuelve 0 tanto si el dispositivo se elimin\u00f3 como si se reemplaz\u00f3 por uno sin n\u00famero de serie del dispositivo. Evite la ocurrencia m\u00e1s frecuente del interbloqueo comprobando si el puerto hotplug se elimin\u00f3 en caliente. De ser as\u00ed, no tiene sentido comprobar si su dispositivo secundario se reemplaz\u00f3. Esto funciona porque la llamada de retorno ->resume_noirq() se invoca de arriba a abajo para toda la jerarqu\u00eda: un puerto hotplug principal que detecta el reemplazo (o la eliminaci\u00f3n) de un dispositivo marca todos los secundarios como eliminados mediante pci_dev_set_disconnected() y un puerto hotplug secundario puede entonces detectar con fiabilidad su eliminaci\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0d0bbd01f7c0ac7d1be9f85aaf2cd0baec34655f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7535d10a2c61baeff493300070cf04d9ddda216b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3260237aaadc9799107ccb940c6688195c4518d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e4a1d7defbc2d806540720a5adebe24ec3488683", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37844.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37844.json index fed7cb14820..5e1af567b37 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37844.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37844.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37844", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.190", - "lastModified": "2025-11-03T20:18:38.387", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:49:02.350", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,47 +15,188 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cifs: evitar la desreferencia de puntero nulo en la llamada a dbg. cifs_server_dbg() implica que el servidor no es nulo, por lo que se mueve la llamada bajo condici\u00f3n para evitar la desreferencia de puntero nulo. Encontrada por el Centro de Verificaci\u00f3n de Linux (linuxtesting.org) con SVACE." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6.7", + "versionEndExcluding": "5.10.237", + "matchCriteriaId": "DE8918E9-DA45-4659-A947-68CAA6785A78" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.181", + "matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/20048e658652e731f5cadf4a695925e570ca0ff9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6c14ee6af8f1f188b668afd6d003f7516a507b08", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/864ba5c651b03830f36f0906c21af05b15c1aaa6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c9000cb91b986eb7f75835340c67857ab97c09b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2a1833e1c63e2585867ebeaf4dd41494dcede4b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4885bd5935bb26f0a414ad55679a372e53f9b9b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba3ce6c60cd5db258687dfeba9fc608f5e7cadf3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e0717385f5c51e290c2cd2ad4699a778316b5132", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37845.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37845.json index 2f02a123121..a94ec6c503b 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37845.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37845.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37845", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.307", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:48:18.933", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,113 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: tracing: fprobe events: Fix possible UAF on modules. La confirmaci\u00f3n ac91052f0ae5 (\"tracing: tprobe-events: Fix leakage of module refcount\") traslad\u00f3 try_module_get() de __find_tracepoint_module_cb() al llamador de find_tracepoint(), pero esto introdujo un posible UAF porque el m\u00f3dulo puede descargarse antes que try_module_get(). En este caso, el objeto del m\u00f3dulo tambi\u00e9n deber\u00eda liberarse. Por lo tanto, try_module_get() no solo falla, sino que puede acceder al objeto liberado. Para evitarlo, vuelva a intentar try_module_get() en __find_tracepoint_module_cb()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12.21", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "7AD01D25-A815-4E20-8715-FB2B50EE7FC2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13.9", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "A992E5FB-2832-43F3-BCBF-5AE81D7E5BD7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14.1", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "4E7F0901-3C1F-4954-B0AB-4531CB0C37DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.14:-:*:*:*:*:*:*", + "matchCriteriaId": "7DE421BA-0600-4401-A175-73CAB6A6FB4E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/626f01f4d26e8cf92e69c1df53036153c8e98a20", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/868df4eb784c3ccc7e4340a9ea993cbbedca167e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a27d2de2472b1cc7d582ab405d1d5832a80481de", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dd941507a9486252d6fcf11814387666792020f3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37846.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37846.json index 57407088e90..79287b399fa 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37846.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37846.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37846", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.430", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:54:50.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: arm64: mops: No desreferenciar el registro src para una operaci\u00f3n set. El registro fuente no se utiliza para SET* y leerlo puede resultar en un error de acceso a la matriz UBSAN fuera de los l\u00edmites, espec\u00edficamente cuando la excepci\u00f3n MOPS se toma de una secuencia SET* con XZR (reg 31) como origen. Arquitect\u00f3nicamente, este es el \u00fanico caso donde un campo src/dst/size en el ESR puede reportarse como 31. Antes de 2de451a329cf662b, el c\u00f3digo en do_el0_mops() era benigno ya que el uso de pt_regs_read_reg() imped\u00eda el acceso fuera de los l\u00edmites." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/43267d934eacff6c70e15545d804ebbcab8a0bf5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5f6022a74147675124b781fdc056b291850e7786", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a13bfa4fe0d6949cea14718df2d1fe84c38cd113", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/eec737e17e5567e08148550a7f1d94d495b9fb17", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37847.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37847.json index 1374ec10a8a..5854bd2ee6b 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37847.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37847.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37847", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.537", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:54:40.887", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrige el bloqueo en ivpu_ms_cleanup(). Se corrige el bloqueo en ivpu_ms_cleanup() impidiendo la reanudaci\u00f3n en tiempo de ejecuci\u00f3n tras adquirir file_priv->ms_lock. Durante un fallo en la reanudaci\u00f3n en tiempo de ejecuci\u00f3n, se ejecuta un arranque en fr\u00edo que llama a ivpu_ms_cleanup_all(). Esta funci\u00f3n llama a ivpu_ms_cleanup(), que adquiere file_priv->ms_lock y provoca el bloqueo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/019634f27a16796eab749e8107dae32099945f29", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7d12a7d43c7bab9097ba466581d8db702e7908dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9a6f56762d23a1f3af15e67901493c927caaf882", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f996ecc789b5dbaaf38b6ec0a1917821789cbd9c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37848.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37848.json index b6612c4b8a2..7e304fef48a 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37848.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37848.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37848", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.650", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:54:28.873", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,108 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: accel/ivpu: Se corrigen los interbloqueos relacionados con el mantenimiento preventivo en las IOCTL de MS. Se impide la reanudaci\u00f3n/suspensi\u00f3n en tiempo de ejecuci\u00f3n mientras las IOCTL de MS est\u00e1n en curso. Una suspensi\u00f3n fallida llamar\u00e1 a ivpu_ms_cleanup(), que intentar\u00e1 adquirir file_priv->ms_lock, que ya est\u00e1 en poder de las IOCTL." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-667" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/84547128526441b45c3c241419dececf20c30104", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/afada73000bef7c79a22f0d7e93fac414eeff19e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c3d9fc2f2746b52e9f820a13c53b4418bec04b48", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d893da85e06edf54737bb80648bb58ba8fd56d9f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37849.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37849.json index f5bb9484d1a..cde6c6c6f69 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37849.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37849.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37849", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.760", - "lastModified": "2025-11-03T20:18:38.493", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:54:15.827", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,152 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: arm64: Desactivaci\u00f3n de vGIC al crear una vCPU fallida. Si kvm_arch_vcpu_create() no comparte la p\u00e1gina de vCPU con el hipervisor, propagamos el error a ioctl, pero dejamos los datos de vCPU de vGIC inicializados. Cabe destacar que esto solo filtra la memoria correspondiente cuando se destruye la vCPU, sino que tambi\u00e9n puede provocar un uso despu\u00e9s de la liberaci\u00f3n si el dispositivo redistribuidor intenta acceder a la vCPU. Agregue la limpieza faltante a kvm_arch_vcpu_create() para garantizar que las estructuras de vCPU de vGIC se destruyan en caso de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "29C64220-D258-41B3-A931-B8C3456115E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07476e0d932afc53c05468076393ac35d0b4999e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2480326eba8ae9ccc5e4c3c2dc8d407db68e3c52", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/250f25367b58d8c65a1b060a2dda037eea09a672", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5085e02362b9948f82fceca979b8f8e12acb1cc5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c322789613407647a05ff5c451a7bf545fb34e73", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f1e9087abaeedec9bf2894a282ee4f0d8383f299", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37850.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37850.json index 07fb2521c39..1e6895b1f88 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37850.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37850.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37850", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:05.887", - "lastModified": "2025-11-03T20:18:38.590", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:53:47.893", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,51 +15,207 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: pwm: mediatek: Evitar la divisi\u00f3n por cero en pwm_mediatek_config(). Con CONFIG_COMPILE_TEST y !CONFIG_HAVE_CLK, pwm_mediatek_config() presenta una divisi\u00f3n por cero en la siguiente l\u00ednea: do_div(resolution, clk_get_rate(pc->clk_pwms[pwm->hwpwm])); debido a que la versi\u00f3n !CONFIG_HAVE_CLK de clk_get_rate() devuelve cero. Se supone que se trata de un problema te\u00f3rico: COMPILE_TEST anula la dependencia de RALINK, que seleccionar\u00eda COMMON_CLK. En cualquier caso, es recomendable comprobar el error expl\u00edcitamente para evitar la divisi\u00f3n por cero. Corrige la siguiente advertencia: drivers/pwm/pwm-mediatek.o: advertencia: objtool: .text: final inesperado de secci\u00f3n [ukleinek: s/CONFIG_CLK/CONFIG_HAVE_CLK/]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-369" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.12", + "versionEndExcluding": "5.4.293", + "matchCriteriaId": "28901DC7-F3CA-49FA-934F-39F1394927F6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.237", + "matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.181", + "matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/4cb15042b5f3ec0474e91cf379120cc597625dbb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/77fb96dbe350e8a5ae4965ff9f6e7049f3966a6b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7ca59947b5fcf94e7ea4029d1bd0f7c41500a161", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8b9f60725d74b72c238e4437c957d0217746b506", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ddbec73ea2598d8414e8f7103241b55cf877010", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c343856ff2689ce0afef823592732fc178ef4aac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e1206d8e1651c9f62e5640b69b14d925b1a0a00a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3cf0c38d3ce754ad63005102fcfeb0b7ff3290b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f3e9cf266c2c103cf071e15d7a17e2c699fff3c5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37851.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37851.json index 4d5df83ef17..eb365d0113b 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37851.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37851.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37851", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:06.003", - "lastModified": "2025-11-03T20:18:38.690", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:52:55.803", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,51 +15,202 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: fbdev: omapfb: A\u00f1adir comprobaci\u00f3n del valor \"plane\". La funci\u00f3n dispc_ovl_setup no est\u00e1 dise\u00f1ada para funcionar con el valor OMAP_DSS_WB del par\u00e1metro de enumeraci\u00f3n \"plane\". Este valor se inicializa en dss_init_overlays y, en el estado actual del c\u00f3digo, no puede tomar este valor, por lo que no supone un problema real. Para fines de codificaci\u00f3n defensiva, no ser\u00eda superfluo comprobar el valor del par\u00e1metro, ya que algunas funciones en la pila de llamadas procesan este valor correctamente y otras no. Por ejemplo, en dispc_ovl_setup_global_alpha, puede provocar un desbordamiento de b\u00fafer. A\u00f1adir comprobaci\u00f3n para este valor. Encontrado por el Centro de Verificaci\u00f3n de Linux (linuxtesting.org) con la herramienta de an\u00e1lisis est\u00e1tico SVACE." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-674" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.33", + "versionEndExcluding": "5.4.293", + "matchCriteriaId": "27FB98F5-D1A3-4A4D-8488-F5009EF8ACD5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.237", + "matchCriteriaId": "0710B81E-E2FA-4E15-8F68-D297EBB4D50D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.181", + "matchCriteriaId": "12331C9E-F601-4EFC-899E-369F98DCC70B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "5B9ACE29-7445-4B6F-B761-6367C005E275" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/09dbf22fd68c2f1a81ab89670ffa1ec3033436c4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3e411827f31db7f938a30a3c7a7599839401ec30", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4efd8ef5e40f2c7a4a91a5a9f03140bfa827da89", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52eafaa56f8f6d6a0cdff9282b25b4acbde34edc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/660a53a0694d1f3789802509fe729dd4656fc5e0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b0a41589ee70529b20e1e0108d03f10c649bdc4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a570efb4d877adbf3db2dc95487f2ba6bfdd148a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cdf41d72e8b015d9ea68f5a1c0a79624e7c312aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fda15c5b96b883d62fb2d84a3a1422aa87717897", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37852.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37852.json index 9696725f25e..841277350a7 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37852.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37852.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37852", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:06.133", - "lastModified": "2025-11-03T20:18:38.787", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:52:14.693", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,152 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: manejo de errores de amdgpu_cgs_create_device() en amd_powerplay_create(). Se ha a\u00f1adido el manejo de errores para propagar los fallos de amdgpu_cgs_create_device() al llamador. Cuando amdgpu_cgs_create_device() falla, se libera hwmgr y se devuelve -ENOMEM para evitar la desreferencia de punteros nulos. [v1]->[v2]: Se ha cambiado el c\u00f3digo de error de -EINVAL a -ENOMEM. Se ha liberado hwmgr." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "29C64220-D258-41B3-A931-B8C3456115E5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1435e895d4fc967d64e9f5bf81e992ac32f5ac76", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/22ea19cc089013b55c240134dbb2797700ff5a6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/55ef52c30c3e747f145a64de96192e37a8fed670", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b784734811438f11533e2fb9e0deb327844bdb56", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc4380f34613eaae997b3ed263bd1cb3d0fd0075", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f8693e1bae9c08233a2f535c3f412e157df32b33", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37853.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37853.json index bf44166068d..bda270f5310 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37853.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37853.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37853", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:06.257", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:51:46.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: debugfs hang_hws omite la GPU con MES. La prueba de reinicio de GPU con HWS utiliza debugfs hang_hws. En MES, esto bloquea el kernel con acceso a puntero nulo porque dqm->packet_mgr no est\u00e1 configurado para la ruta MES. Se omite la GPU con MES por ahora. La interfaz debugfs de MES hang_hws ser\u00e1 compatible m\u00e1s adelante." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.19", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "51032A8B-FD1A-4B07-B6A0-B977A54BC974" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a322b330dc0b775d1d7a84e55c752d9451bfe7d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/24b9e0e2e6147314c22d821f0542c4dd9a320c40", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a36f8d544522a19ef06ed9e84667d154dcb6be52", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f84c57906f0fd2185e557d2552b20aa8430a4677", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe9d0061c413f8fb8c529b18b592b04170850ded", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37854.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37854.json index 35d3782e75d..af23bac63a9 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37854.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37854.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37854", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:06.367", - "lastModified": "2025-11-03T20:18:38.880", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:51:35.040", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,35 +15,153 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdkfd: Se soluciona el problema de bloqueo del reinicio en modo 1. Si el programador de hardware se bloquea y se usa el reinicio en modo 1 para recuperar la GPU, KFD indica al espacio de usuario que cancele los procesos. Tras la salida del proceso, las colas de usuario siguen usando la GPU para acceder a la memoria del sistema antes de que se restablezca el hardware mientras el trabajador de limpieza de KFD libera memoria del sistema y VRAM. Existe un error de ejecuci\u00f3n de use-after-free en el que KFD asigna y reutiliza la memoria del sistema liberada, y la cola de usuario escribe en la misma memoria del sistema para corromper la estructura de datos y provocar el bloqueo del controlador. Para solucionar esta carrera, el trabajador de limpieza de KFD finaliza las colas de usuario, luego vac\u00eda reset_domain wq para esperar a que se complete cualquier reinicio en curso de la GPU y, a continuaci\u00f3n, libera los BO pendientes. " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.1.135", + "matchCriteriaId": "A0EC2B6B-FB7D-41D6-8B68-C30B83522362" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "6E5947E5-45E3-462A-829B-382B3B1C61BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/57c9dabda80ac167de8cd71231baae37cc2f442d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6f30a847432cae84c7428e9b684b3e3fa49b2391", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/89af6b39f028c130d4362f57042927f005423e6a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9c4bcdf4068aae3e17e31c144300be405cfa03ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0b4440cdc1807bb6ec3dce0d6de81170803569b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ffd37d7d44d7e0b6e769d4fe6590e327f8cc3951", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-378xx/CVE-2025-37855.json b/CVE-2025/CVE-2025-378xx/CVE-2025-37855.json index 166527cb157..8610183e37f 100644 --- a/CVE-2025/CVE-2025-378xx/CVE-2025-37855.json +++ b/CVE-2025/CVE-2025-378xx/CVE-2025-37855.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37855", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-09T07:16:06.487", - "lastModified": "2025-05-12T17:32:52.810", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:51:05.050", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,75 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/display: Posible desreferencia de puntero nulo [POR QU\u00c9] En algunas situaciones, dc->res_pool puede ser nulo. [C\u00d3MO] Compruebe si el puntero es nulo antes de desreferenciarlo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/c87d202692de34ee71d1fd4679a549a29095658a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dc2de1ac7145f882f3c03d2d6f84583ae7e35d41", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37941.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37941.json index a0a95893670..829468c83eb 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37941.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37941.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37941", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:31.883", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:58:01.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,103 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: c\u00f3decs: wcd937x: se corrige una posible p\u00e9rdida de memoria en wcd937x_soc_codec_probe(). Cuando fallan snd_soc_dapm_new_controls() o snd_soc_dapm_add_routes(), wcd937x_soc_codec_probe() regresa sin liberar 'wcd937x->clsh_info', que est\u00e1 asignado por wcd_clsh_ctrl_alloc. Se ha a\u00f1adido wcd_clsh_ctrl_free() para evitar posibles p\u00e9rdidas de memoria." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.11", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "4984066B-B1BF-482D-B569-B93EC91B55F2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3e330acf4efd63876d673c046cd073a1d4ed57a8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/aafb5325aca3e806b3ea3707402189263473d257", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b573e04116fd33b9143fa276bbab2f0afad0a1ae", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37942.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37942.json index bb5387a06bd..129e27be524 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37942.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37942.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37942", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:32.000", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:54.147", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,102 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: HID: pidff: Aseg\u00farese de obtener el grupo antes de comprobar SIMULTANEOUS_MAX. Como se\u00f1al\u00f3 Anssi hace unos 20 a\u00f1os, el informe del grupo a veces presenta errores. Esto funcionaba correctamente en muchos dispositivos, pero causaba errores en VRS DirectForce PRO. En este caso, nos aseguramos de que el informe del grupo se vuelva a obtener antes de intentar acceder a cualquiera de sus campos. El bucle While se sustituy\u00f3 por un bucle For y las condiciones de salida se reubicaron para reducir la posibilidad de crear un bucle infinito." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-835" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "C87CF81F-5426-4E15-8A61-B8F0E6046484" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1f650dcec32d22deb1d6db12300a2b98483099a9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/211861869766a7bb7c72158aee0140ec67e182a7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/344d903be8b5c0733ed0f4bc5be34b4a26d905c8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6f5d30a5c7713238c5c65c98ad95dacb73688d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37943.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37943.json index 35418264c14..807b2e27e84 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37943.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37943.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37943", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:32.133", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:46.727", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: Se ha corregido el acceso no v\u00e1lido a datos en ath12k_dp_rx_h_undecap_nwifi. En ciertos casos, el hardware podr\u00eda proporcionar paquetes con una longitud superior a la longitud m\u00e1xima del encabezado Wi-Fi nativo. Esto puede provocar el acceso y la modificaci\u00f3n de campos del encabezado dentro de la funci\u00f3n ath12k_dp_rx_h_undecap_nwifi para el tipo de decap DP_RX_DECAP_TYPE_NATIVE_WIFI, lo que podr\u00eda provocar acceso no v\u00e1lido a datos y corrupci\u00f3n de memoria. Se ha a\u00f1adido una comprobaci\u00f3n de seguridad antes de procesar el SKB para evitar el acceso no v\u00e1lido a datos en la funci\u00f3n Wi-Fi nativa undecap para el tipo de decap DP_RX_DECAP_TYPE_NATIVE_WIFI. Probado en: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "E490AC3E-4FCB-404E-B82F-0DE1390D06A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "1D35A8A8-F3EC-45E6-AD37-1F154B27529D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3abe15e756481c45f6acba3d476cb3ca4afc3b61", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50be1fb76556e80af9f5da80f28168b6c71bce58", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6ee653194ddb83674913fd2727b8ecfae0597ade", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f1d986da5c6abb75ffe4d0d325fc9b341c41a1c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9a0dddfb30f120db3851627935851d262e4e7acb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37944.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37944.json index 81ae345783d..f7cea7d7771 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37944.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37944.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37944", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:32.310", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:39.790", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,117 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: Se corrige la obtenci\u00f3n de entrada no v\u00e1lida en ath12k_dp_mon_srng_process Actualmente, ath12k_dp_mon_srng_process usa ath12k_hal_srng_src_get_next_entry para obtener la siguiente entrada del anillo de destino. Esto es incorrecto porque ath12k_hal_srng_src_get_next_entry est\u00e1 dise\u00f1ado para anillos de origen, no de destino. Esto conduce a la obtenci\u00f3n de entradas no v\u00e1lidas, lo que puede causar corrupci\u00f3n de datos o bloqueos debido al acceso a ubicaciones de memoria incorrectas. Esto sucede porque el anillo de origen y el anillo de destino tienen diferentes mecanismos de manejo y el uso de la funci\u00f3n incorrecta da como resultado una aritm\u00e9tica de punteros y una gesti\u00f3n del anillo incorrectas. Para solucionar este problema, reemplace la llamada a ath12k_hal_srng_src_get_next_entry por ath12k_hal_srng_dst_get_next_entry en ath12k_dp_mon_srng_process. Esto garantiza que se utilice la funci\u00f3n correcta para obtener entradas del anillo de destino, evitando accesos no v\u00e1lidos a la memoria. Probado en: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1. Probado en: WCN7850 hw2.0 WLAN.HMT.1.0.c5-00481-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.88", + "matchCriteriaId": "E490AC3E-4FCB-404E-B82F-0DE1390D06A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.25", + "matchCriteriaId": "8E59EE65-FA6B-4AE4-8125-26135E28BF35" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.4", + "matchCriteriaId": "5722F93B-F696-460E-B30C-6757CB22FAB4" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/298f0aea5cb32b5038f991f5db201a0fcbb9a31b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2c512f2eadabb1e80816116894ffaf7d802a944e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/63fdc4509bcf483e79548de6bc08bf3c8e504bb3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ab7edf42ce800eb34d2f73dd7271b826661a06a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b6a3b2b2cead103089d3bb7a57d8209bdfa5399d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37945.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37945.json index 5b3adeb9366..d7ed1e03a66 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37945.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37945.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37945", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:32.453", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:32.553", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,115 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: phy: permite que las operaciones PM del bus MDIO inicien o detengan la m\u00e1quina de estados para PHY controlada por phylink DSA tiene 2 tipos de controladores: 1. Los que llaman a dsa_switch_suspend() y dsa_switch_resume() desde las operaciones PM de su dispositivo: qca8k-8xxx, bcm_sf2, microchip ksz 2. Los que no lo hacen: todos los dem\u00e1s. Los m\u00e9todos anteriores deber\u00edan ser opcionales. Para el tipo 1, dsa_switch_suspend() llama a dsa_user_suspend() -> phylink_stop() y dsa_switch_resume() llama a dsa_user_resume() -> phylink_start(). Estos parecen buenos candidatos para establecer mac_managed_pm = true porque esa es esencialmente su definici\u00f3n [1], pero ese no parece ser el mayor problema por ahora y no es en lo que se centra este cambio. Hablando estrictamente sobre la segunda categor\u00eda de controladores DSA (que no tienen PM administrado por MAC, lo que significa que para sus PHYs conectados, mdio_bus_phy_suspend() y mdio_bus_phy_resume() deben ejecutarse por completo), he notado que se activa la siguiente advertencia de mdio_bus_phy_resume(): WARN_ON(phydev->state != PHY_HALTED && phydev->state != PHY_READY && phydev->state != PHY_UP); porque la m\u00e1quina de estados PHY est\u00e1 en ejecuci\u00f3n. Se est\u00e1 ejecutando como resultado de un dsa_user_open() -> ... -> phylink_start() -> phy_start() previo iniciado por el usuario. El mdio_bus_phy_suspend() anterior deber\u00eda haber llamado a phy_stop_machine(), pero no lo hizo. Por eso, el PHY est\u00e1 en estado PHY_NOLINK cuando se ejecuta mdio_bus_phy_resume(). mdio_bus_phy_suspend() no llam\u00f3 a phy_stop_machine() porque, para phylink, el puntero a la funci\u00f3n phydev->adjust_link es NULL. Esto parece ser un tecnicismo introducido por el commit fddd91016d16 (\"phylib: correcci\u00f3n del reinicio de la m\u00e1quina de estados PAL al reanudar\"). Esta confirmaci\u00f3n se escribi\u00f3 antes de que existiera phylink y su objetivo era evitar fallos con controladores de consumidor que no utilizan la m\u00e1quina de estados PHY; phylink siempre lo hace al usar una PHY. Sin embargo, phylink no se ha desarrollado hist\u00f3ricamente con la suspensi\u00f3n/reanudaci\u00f3n en mente, y aparentemente no se ha probado demasiado en ese escenario, lo que ha permitido que este error pase desapercibido durante tanto tiempo. Adem\u00e1s, antes de WARN_ON(), probablemente habr\u00eda sido invisible. De hecho, este problema no se limita a los controladores DSA de tipo 2 (seg\u00fan la clasificaci\u00f3n ad hoc anterior), sino que se puede extrapolar a cualquier controlador MAC con phylink y operaciones de PM PHY gestionadas por bus MDIO. DSA es justo donde se report\u00f3 el problema. Suponiendo que mac_managed_pm est\u00e9 configurado correctamente, una b\u00fasqueda r\u00e1pida indica que los siguientes controladores podr\u00edan estar afectados: $ grep -Zlr PHYLINK_NETDEV drivers/ | xargs -0 grep -L mac_managed_pm drivers/net/ethernet/atheros/ag71xx.c drivers/net/ethernet/microchip/sparx5/sparx5_main.c drivers/net/ethernet/microchip/lan966x/lan966x_main.c drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.c drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c drivers/net/ethernet/freescale/dpaa/dpaa_eth.c drivers/net/ethernet/freescale/ucc_geth.c drivers/net/ethernet/freescale/enetc/enetc_pf_common.c drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c drivers/net/ethernet/marvell/mvneta.c Haga que las condiciones existentes dependan de que el dispositivo PHY tenga una implementaci\u00f3n de phydev->phy_link_change() igual al phy_link_change() predeterminado proporcionado por phylib. De lo contrario, sabemos impl\u00edcitamente que phydev cuenta con la funci\u00f3n de devoluci\u00f3n de llamada phylink_phy_change() proporcionada por phylink, y cuando se usa phylink, la m\u00e1quina de estados PHY siempre debe detenerse/iniciar en la ruta de suspensi\u00f3n/reinicio. El c\u00f3digo est\u00e1 estructurado de tal manera que, si phydev->phy_link_change() no est\u00e1 presente, es cuesti\u00f3n de tiempo hasta que el kernel se bloquee; no es necesario complicar a\u00fan m\u00e1s la prueba. Por lo tanto, si el PM no se gestiona, se trunca." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.63", + "versionEndExcluding": "5.16", + "matchCriteriaId": "60ACBB16-9DB7-4B68-AF39-342F3BA4775E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19.4", + "versionEndExcluding": "6.12.24", + "matchCriteriaId": "19B43B93-E0E7-4ECC-8C5E-D416AEFBC1D6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.13.12", + "matchCriteriaId": "4A475784-BF3B-4514-81EE-49C8522FB24A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.3", + "matchCriteriaId": "483E2E15-2135-4EC6-AB64-16282C5EF704" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/54e5d00a8de6c13f6c01a94ed48025e882cd15f7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a6ed6f8ec81b8ca7100dcd9e62bdbc0dff1b2259", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd4037d51d3f6667636a1383e78e48a5b7b60755", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fc75ea20ffb452652f0d4033f38fe88d7cfdae35", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37946.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37946.json index e95230b507e..9d43964e257 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37946.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37946.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37946", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:32.577", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:23.847", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,114 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/pci: Se ha corregido un error pci_dev_put() duplicado en disabled_slot() cuando un PF tiene VFs secundarios. Con el commit bcb5d6c76903 (\"s390/pci: introducir un bloqueo para sincronizar el estado de zpci_dev\"), el c\u00f3digo para ignorar el apagado de un PF con VFs secundarios se cambi\u00f3 de un retorno directo a un goto a la secci\u00f3n de desbloqueo y pci_dev_put(). Sin embargo, el cambio dej\u00f3 intacto el pci_dev_put() existente, lo que result\u00f3 en un doble put. Esto puede provocar un use after free si la estructura pci_dev se libera en un estado inesperado. Se soluciona eliminando el pci_dev_put() adicional." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.9", + "versionEndExcluding": "6.12.29", + "matchCriteriaId": "6AC194F3-971C-45A9-A58B-1814A375C621" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.7", + "matchCriteriaId": "5715A6F5-A34A-4B27-8A64-82825E963995" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/05a2538f2b48500cf4e8a0a0ce76623cc5bafcf1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/957529baef142d95e0d1b1bea786675bd47dbe53", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c488f8b53e156d6dcc0514ef0afa3a33376b8f9e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37950.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37950.json index 69106bb01f4..93e724ff69b 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37950.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37950.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37950", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:33.107", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:15.860", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,100 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ocfs2: Se corrige el p\u00e1nico en la asignaci\u00f3n fallida de foilio, commit 7e119cff9d0a (\"ocfs2: convertir w_pages a w_folios\") y commit 9a5e08652dc4b (\"ocfs2: usar un array de folios en lugar de un array de p\u00e1ginas\"). Se guarda -ENOMEM en el array de folios tras un fallo de asignaci\u00f3n y se llama al c\u00f3digo de liberaci\u00f3n del array de folios. Este c\u00f3digo espera punteros de folio v\u00e1lidos o NULL. Encontrar -ENOMEM provocar\u00e1 un p\u00e1nico. Se corrige anulando la entrada de folio con error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.14", + "versionEndExcluding": "6.14.7", + "matchCriteriaId": "1A5B4961-384D-4769-BF75-B020B67832ED" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/31d4cd4eb2f8d9b87ebfa6a5e443a59e3b3d7b8c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/80d18f060d5bdf2c5eb3d1d00dcb744d6a879222", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37952.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37952.json index c68265d617c..3e53212bc90 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37952.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37952.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37952", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:33.353", - "lastModified": "2025-05-21T20:24:58.133", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:57:06.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,128 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: Correcci\u00f3n de UAF en __close_file_table_ids. Es posible un use-after-free si un hilo destruye el archivo mediante __ksmbd_close_fd mientras otro hilo mantiene una referencia a \u00e9l. Las comprobaciones existentes en fp->refcount no son suficientes para evitarlo. La correcci\u00f3n aplica ft->lock a la secci\u00f3n que elimina el archivo de la tabla de archivos. Esto impide que dos hilos adquieran el mismo puntero de archivo mediante __close_file_table_ids, as\u00ed como otras funciones que recuperan un archivo del IDR y que ya utilizan este mismo bloqueo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15", + "versionEndExcluding": "6.6.91", + "matchCriteriaId": "A0BB0418-DE28-49B6-BEE6-5D5AA1D70BCF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.29", + "matchCriteriaId": "7215ABCF-8EB1-46CD-8872-8BCE4890E579" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.7", + "matchCriteriaId": "5715A6F5-A34A-4B27-8A64-82825E963995" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/16727e442568a46d9cca69fe2595896de86e120d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/36991c1ccde2d5a521577c448ffe07fcccfe104d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e9841e232b51171ddf3bc4ee517d5d28dc8cad6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fec1f9e9a650e8e7011330a085c77e7bf2a08ea9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38008.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38008.json index 9e1d8486fb9..fef881ecfc0 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38008.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38008.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38008", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T10:15:32.037", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:56:52.697", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mm/page_alloc: arregla la condici\u00f3n de ejecuci\u00f3n en el manejo de memoria no aceptada El asignador de p\u00e1ginas rastrea el n\u00famero de zonas que tienen memoria no aceptada usando static_branch_enc/dec() y usa esa rama est\u00e1tica en rutas activas para determinar si necesita lidiar con memoria no aceptada. Borislav y Thomas se\u00f1alaron que el rastreo es acelerado: las operaciones en static_branch no se serializan contra la adici\u00f3n/eliminaci\u00f3n de p\u00e1ginas no aceptadas a/desde la zona. Las comprobaciones de cordura dentro de la maquinaria static_branch lo detectan: ADVERTENCIA: CPU: 0 PID: 10 en kernel/jump_label.c:276 __static_key_slow_dec_cpuslocked+0x8e/0xa0 El comentario alrededor de WARN() explica el problema: /* * Sin embargo, advierte sobre el caso '-1'; ya que eso significa que un * decremento es concurrente con un primer incremento (0->1). Es decir, * se est\u00e1 intentando deshabilitar algo que a\u00fan no estaba completamente habilitado. Esto sugiere un problema de ordenamiento del usuario. */ El efecto de esta optimizaci\u00f3n de static_branch solo es visible en microbenchmark. En lugar de a\u00f1adir m\u00e1s complejidad, elim\u00ednenla por completo." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.5", + "versionEndExcluding": "6.6.92", + "matchCriteriaId": "D0DDEC71-DA9A-4DD8-9AE4-E164CFC5E573" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.30", + "matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.8", + "matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/71dda1cb10702dc2859f00eb789b0502de2176a9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/74953f93f47a45296cc2a3fd04e2a3202ff3fa53", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/98fdd2f612e949c652693f6df00442c81037776d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fefc075182275057ce607effaa3daa9e6e3bdc73", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38010.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38010.json index 41a1fddcc6c..49f16b251b6 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38010.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38010.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38010", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T10:15:32.283", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:56:38.940", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: tegra: xusb: utilizar una m\u00e1scara de bits para el seguimiento del estado de energ\u00eda del panel UTMI. La implementaci\u00f3n actual utiliza bias_pad_enable como un recuento de referencia para administrar el panel de polarizaci\u00f3n compartido para todos los PHY UTMI. Sin embargo, durante la suspensi\u00f3n del sistema con dispositivos USB conectados, varias solicitudes de apagado del panel UTMI resultan en una discrepancia en el recuento de referencia, lo que a su vez produce advertencias como: [ 237.762967] ADVERTENCIA: CPU: 10 PID: 1618 en tegra186_utmi_pad_power_down+0x160/0x170 [ 237.763103] Rastreo de llamadas: [ 237.763104] tegra186_utmi_pad_power_down+0x160/0x170 [ 237.763107] tegra186_utmi_phy_power_off+0x10/0x30 [ 237.763110] phy_power_off+0x48/0x100 [ 237.763113] tegra_xusb_enter_elpg+0x204/0x500 [ 237.763119] tegra_xusb_suspend+0x48/0x140 [ 237.763122] platform_pm_suspend+0x2c/0xb0 [ 237.763125] dpm_run_callback.isra.0+0x20/0xa0 [ 237.763127] __device_suspend+0x118/0x330 [ 237.763129] dpm_suspend+0x10c/0x1f0 [ 237.763130] dpm_suspend_start+0x88/0xb0 [ 237.763132] suspend_devices_and_enter+0x120/0x500 [ 237.763135] pm_suspend+0x1ec/0x270 La causa ra\u00edz se remonta a los cambios de apagado din\u00e1mico introducidos en el commit a30951d31b25 (\"xhci: tegra: USB2 pad power controls\"), donde el pad UTMI se apagaba sin verificar su estado actual. Este comportamiento desequilibrado provoc\u00f3 discrepancias en el recuento de referencias. Para rectificar este problema, este parche reemplaza el contador de referencia \u00fanico con una m\u00e1scara de bits, renombrada como utmi_pad_enabled. Cada bit en la m\u00e1scara corresponde a uno de los cuatro PHY USB2, lo que nos permite rastrear el estado de habilitaci\u00f3n de cada pad individualmente. Con este cambio: - El pad de polarizaci\u00f3n se enciende solo cuando la m\u00e1scara est\u00e1 despejada. - Cada pad UTMI se enciende o apaga seg\u00fan su bit correspondiente en la m\u00e1scara, lo que evita operaciones redundantes. El estado general de energ\u00eda del pad de polarizaci\u00f3n compartido se mantiene correctamente durante los ciclos de suspensi\u00f3n/reinicio. El mutex utilizado para evitar condiciones de ejecuci\u00f3n durante las operaciones de activaci\u00f3n/desactivaci\u00f3n del pad UTMI se ha trasladado de las funciones tegra186_utmi_bias_pad_power_on/off a las funciones principales tegra186_utmi_pad_power_on/down. Este cambio garantiza que no se produzcan condiciones de ejecuci\u00f3n al actualizar la m\u00e1scara de bits." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-Other" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.3", + "versionEndExcluding": "6.6.92", + "matchCriteriaId": "08A59284-A681-4E4B-B672-B36A8BD6A9EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.30", + "matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.8", + "matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1db527f0cb8f677adadd4e28e5bc77aaf5d4e4c9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/628bec9ed68a2204184fc8230a2609075b08666e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b47158fb42959c417ff2662075c0d46fb783d5d1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ba25131b3c1ceec303839b2462586d7673788197", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38011.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38011.json index b9b518eb97b..aae786978fc 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38011.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38011.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38011", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T10:15:32.417", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:56:18.870", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amdgpu: csa unmap usa un bloqueo ininterrumpible. Tras salir del proceso para desasignar csa y liberar la m\u00e1quina virtual de la GPU, si se acepta la se\u00f1al y se interrumpe la espera para obtener el bloqueo de la m\u00e1quina virtual y se retorna, se produce una fuga de memoria y un seguimiento inverso inferior a la advertencia. Cambiar al uso de un bloqueo de espera ininterrumpible soluciona el problema. ADVERTENCIA: CPU: 69 PID: 167800 en amd/amdgpu/amdgpu_kms.c:1525 amdgpu_driver_postclose_kms+0x294/0x2a0 [amdgpu] Seguimiento de llamadas: drm_file_free.part.0+0x1da/0x230 [drm] drm_close_helper.isra.0+0x65/0x70 [drm] drm_release+0x6a/0x120 [drm] amdgpu_drm_release+0x51/0x60 [amdgpu] __fput+0x9f/0x280 ____fput+0xe/0x20 task_work_run+0x67/0xa0 do_exit+0x217/0x3c0 do_group_exit+0x3b/0xb0 get_signal+0x14a/0x8d0 arch_do_signal_or_restart+0xde/0x100 exit_to_user_mode_loop+0xc1/0x1a0 exit_to_user_mode_prepare+0xf4/0x100 syscall_exit_to_user_mode+0x17/0x40 do_syscall_64+0x69/0xc0 (seleccionado de el commit 7dbbfb3c171a6f63b01165958629c9c26abf38ab)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.12.30", + "matchCriteriaId": "9D220B6C-D22A-4648-BD64-B5FEE59A4253" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.8", + "matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/8d71c3231b33e24a911b8f2d8c3a17ee40aa32d5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a0fa7873f2f869087b1e7793f7fac3713a1e3afe", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a1adc8d9a0d219d4e88672c30dbc9ea960d73136", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38012.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38012.json index 5c1c2d18f08..2b7fedc8a29 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38012.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38012.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38012", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T10:15:32.560", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:56:07.253", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,119 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sched_ext: bpf_iter_scx_dsq_new() siempre debe inicializar el iterador. Los programas BPF pueden llamar a next() y destroy() en iteradores BPF incluso despu\u00e9s de que new() devuelva un valor de error (p. ej., la macro bpf_for_each() ignora los errores devueltos por new()). bpf_iter_scx_dsq_new() podr\u00eda dejar el iterador sin inicializar despu\u00e9s de un error, lo que provoca que bpf_iter_scx_dsq_next() desreferencia datos innecesarios. Aseg\u00farese de que bpf_iter_scx_dsq_new() siempre borre $kit->dsq para que next() y destroy() se conviertan en noops." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-908" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.12", + "versionEndExcluding": "6.12.30", + "matchCriteriaId": "F3FBF2D7-2AEE-456E-97E5-22E9926488AF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.8", + "matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0102989af4c334d1d98b2a0fd4d61a5152e39b72", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/255dd31bfc4a67a19b1fc2cd130a50284dadfe3a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/428dc9fc0873989d73918d4a9cc22745b7bbc799", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-380xx/CVE-2025-38013.json b/CVE-2025/CVE-2025-380xx/CVE-2025-38013.json index 2017808a2fe..511a5392a63 100644 --- a/CVE-2025/CVE-2025-380xx/CVE-2025-38013.json +++ b/CVE-2025/CVE-2025-380xx/CVE-2025-38013.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38013", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-06-18T10:15:32.797", - "lastModified": "2025-06-18T13:46:52.973", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:55:54.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,133 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: Establecer n_channels tras asignar la estructura cfg80211_scan_request. Aseg\u00farese de que n_channels est\u00e9 establecido tras asignar el miembro de la estructura cfg80211_registered_device::int_scan_req. Observada con syzkaller: UBSAN: array-index-out-of-bounds en net/mac80211/scan.c:1208:5. El \u00edndice 0 est\u00e1 fuera de rango para el tipo 'struct ieee80211_channel *[] __counted_by(n_channels)' (tambi\u00e9n conocido como 'struct ieee80211_channel *[]'). Esto no se detect\u00f3 en las conversiones iniciales porque no se localiz\u00f3 la asignaci\u00f3n, probablemente debido a que \"sizeof(void *)\" no coincide con el tipo de matriz \"channels\"." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-129" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.92", + "matchCriteriaId": "DD48BDEE-6AA0-4F17-A06E-5A175D24D3D8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.30", + "matchCriteriaId": "8F43EF2E-9448-4BCA-99D9-DAEAEB7523C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.8", + "matchCriteriaId": "D4458049-AD51-4F1B-BAB9-C32B53A54DE1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*", + "matchCriteriaId": "2D240580-3048-49B2-9E27-F115A9DF8224" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*", + "matchCriteriaId": "90320558-E553-4EF5-8A0B-0F5D20113BD2" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/07c737d9ab02c07b562aefcca16aa95077368e24", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/82bbe02b2500ef0a62053fe2eb84773fe31c5a0a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3192e999a0d05ea0ba2c59c09afaf0b8ee70b81", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fde33ab3c052a302ee8a0b739094b88ceae4dd67", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-408xx/CVE-2025-40834.json b/CVE-2025/CVE-2025-408xx/CVE-2025-40834.json new file mode 100644 index 00000000000..b271f4530d6 --- /dev/null +++ b/CVE-2025/CVE-2025-408xx/CVE-2025-40834.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40834", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-17T12:15:44.290", + "lastModified": "2025-11-17T12:15:44.290", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in Mendix RichText (All versions >= V4.0.0 < V4.6.1). Affected widget does not properly neutralize the input. This could allow an attacker to execute cross-site scripting attacks." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "ACTIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.7, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.1, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-190588.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-409xx/CVE-2025-40936.json b/CVE-2025/CVE-2025-409xx/CVE-2025-40936.json new file mode 100644 index 00000000000..fb46528aa3c --- /dev/null +++ b/CVE-2025/CVE-2025-409xx/CVE-2025-40936.json @@ -0,0 +1,100 @@ +{ + "id": "CVE-2025-40936", + "sourceIdentifier": "productcert@siemens.com", + "published": "2025-11-17T12:15:44.493", + "lastModified": "2025-11-17T12:15:44.493", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)" + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "productcert@siemens.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "productcert@siemens.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "references": [ + { + "url": "https://cert-portal.siemens.com/productcert/html/ssa-241605.html", + "source": "productcert@siemens.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46362.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46362.json index efe3dfcc528..79e030ba863 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46362.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46362.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46362", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-13T20:15:49.507", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:28:15.610", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -47,10 +67,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.10.15.0", + "matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46367.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46367.json index e6996215a42..1b00c618d8b 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46367.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46367.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46367", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-13T20:15:49.713", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:28:03.680", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.10.15.0", + "matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46368.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46368.json index ce8dcbd9e06..b8844b62559 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46368.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46368.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46368", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-13T20:15:49.893", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:27:18.617", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -47,10 +67,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.10.15.0", + "matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46369.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46369.json index d8ea4cb529a..76716887a18 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46369.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46369.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46369", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-13T20:15:50.080", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:26:51.163", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.10.15.0", + "matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-463xx/CVE-2025-46370.json b/CVE-2025/CVE-2025-463xx/CVE-2025-46370.json index e64be9f1213..ab6a62b5145 100644 --- a/CVE-2025/CVE-2025-463xx/CVE-2025-46370.json +++ b/CVE-2025/CVE-2025-463xx/CVE-2025-46370.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46370", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-13T20:15:50.263", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:26:13.463", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 2.5 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -47,10 +67,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:alienware_command_center:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.10.15.0", + "matchCriteriaId": "B4F88A51-8AAC-456E-9817-C159C81ACC20" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000379467/dsa-2025-392", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46427.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46427.json index 9a3ab517403..98f815e3fa7 100644 --- a/CVE-2025/CVE-2025-464xx/CVE-2025-46427.json +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46427.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46427", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-12T20:15:42.810", - "lastModified": "2025-11-14T16:42:30.503", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:32:13.890", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.6.1.0", + "matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46428.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46428.json index 6060ec22231..f877608d618 100644 --- a/CVE-2025/CVE-2025-464xx/CVE-2025-46428.json +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46428.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46428", "sourceIdentifier": "security_alert@emc.com", "published": "2025-11-12T20:15:42.953", - "lastModified": "2025-11-14T16:42:30.503", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:32:02.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*", + "versionEndExcluding": "10.6.1.0", + "matchCriteriaId": "1F75B21C-7B8B-4EA7-8D09-2AB14584AB52" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json b/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json index df1e4a83f7f..eeb3810149d 100644 --- a/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json +++ b/CVE-2025/CVE-2025-567xx/CVE-2025-56799.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56799", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.663", - "lastModified": "2025-10-22T14:15:50.863", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:46:33.180", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -54,14 +54,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*", + "matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/shinyColumn/CVE-2025-56799", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://shinycolumn.notion.site/reolink-command-injection", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json b/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json index 57cde250dba..a9e38356789 100644 --- a/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json +++ b/CVE-2025/CVE-2025-568xx/CVE-2025-56800.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56800", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.780", - "lastModified": "2025-10-22T14:15:51.080", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:46:26.313", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -54,14 +54,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*", + "matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/shinyColumn/CVE-2025-56800", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://shinycolumn.notion.site/reolink-auth-bypass", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json b/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json index 87b6945a9ff..aa25e363ddd 100644 --- a/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json +++ b/CVE-2025/CVE-2025-568xx/CVE-2025-56801.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56801", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T19:21:22.897", - "lastModified": "2025-10-22T14:15:51.277", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:46:15.277", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -54,14 +54,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:reolink:reolink:8.18.12:*:*:*:desktop:*:*:*", + "matchCriteriaId": "30EFCAEB-546D-449F-A08D-360DFF9CE745" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/shinyColumn/CVE-2025-56801", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://shinycolumn.notion.site/reolink-aes-iv", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-605xx/CVE-2025-60500.json b/CVE-2025/CVE-2025-605xx/CVE-2025-60500.json index 58aee24ed91..67dbf54a4fd 100644 --- a/CVE-2025/CVE-2025-605xx/CVE-2025-60500.json +++ b/CVE-2025/CVE-2025-605xx/CVE-2025-60500.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60500", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-21T17:15:40.047", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:46:55.307", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,32 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:qdocs:smart_school:7.1.0:*:*:*:*:*:*:*", + "matchCriteriaId": "73D99BC7-4DF7-4C42-AD64-6850F2C04794" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/H4zaz/CVE-2025-60500", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60697.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60697.json index ea2af534334..a2caec65e05 100644 --- a/CVE-2025/CVE-2025-606xx/CVE-2025-60697.json +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60697.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60697", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T18:15:53.753", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:29:07.143", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*", + "matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/4.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60697.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-606xx/CVE-2025-60698.json b/CVE-2025/CVE-2025-606xx/CVE-2025-60698.json index 61b6dac9baf..551695ca87d 100644 --- a/CVE-2025/CVE-2025-606xx/CVE-2025-60698.json +++ b/CVE-2025/CVE-2025-606xx/CVE-2025-60698.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60698", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T18:15:53.880", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:28:54.113", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*", + "matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/2.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60698.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60700.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60700.json index 4c906cafcc4..9979fe73316 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60700.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60700.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60700", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T18:15:54.010", - "lastModified": "2025-11-14T17:16:12.173", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:28:40.547", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*", + "matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/3.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60700.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-607xx/CVE-2025-60701.json b/CVE-2025/CVE-2025-607xx/CVE-2025-60701.json index 42d8ac8668c..f243df13bd9 100644 --- a/CVE-2025/CVE-2025-607xx/CVE-2025-60701.json +++ b/CVE-2025/CVE-2025-607xx/CVE-2025-60701.json @@ -2,8 +2,8 @@ "id": "CVE-2025-60701", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-13T18:15:54.137", - "lastModified": "2025-11-14T17:16:13.770", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:28:31.610", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,22 +47,64 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:dlink:dir-882_firmware:1.02b02:*:*:*:*:*:*:*", + "matchCriteriaId": "5D969AE6-54B1-4A8C-8A2D-8C8B0C3EF9B2" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:dlink:dir-882:a1:*:*:*:*:*:*:*", + "matchCriteriaId": "90575122-CE47-42E5-BCE3-6444599B16B3" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/1.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Broken Link" + ] }, { "url": "https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-882/CVE-2025-60701.md", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://www.dlink.com", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://www.dlink.com/en/security-bulletin/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-94xx/CVE-2025-9479.json b/CVE-2025/CVE-2025-94xx/CVE-2025-9479.json index 0eed0dcc83c..6abc3a49a03 100644 --- a/CVE-2025/CVE-2025-94xx/CVE-2025-9479.json +++ b/CVE-2025/CVE-2025-94xx/CVE-2025-9479.json @@ -2,8 +2,8 @@ "id": "CVE-2025-9479", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-14T03:15:57.017", - "lastModified": "2025-11-14T16:42:03.187", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-17T12:18:37.257", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,61 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", + "versionEndExcluding": "133.0.6943.141", + "matchCriteriaId": "4F5127C9-14A1-4F23-8292-04F0846EEB99" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", + "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", + "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1" + }, + { + "vulnerable": false, + "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA" + } + ] + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://issues.chromium.org/issues/390743124", - "source": "chrome-cve-admin@google.com" + "source": "chrome-cve-admin@google.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/README.md b/README.md index 8a88ac8238d..2f60bcfc152 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-17T11:00:11.772753+00:00 +2025-11-17T13:00:13.244490+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-17T10:15:59.227000+00:00 +2025-11-17T12:58:01.557000+00:00 ``` ### Last Data Feed Release @@ -33,26 +33,50 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318422 +318428 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `6` -- [CVE-2025-13271](CVE-2025/CVE-2025-132xx/CVE-2025-13271.json) (`2025-11-17T09:15:42.733`) -- [CVE-2025-13272](CVE-2025/CVE-2025-132xx/CVE-2025-13272.json) (`2025-11-17T09:15:44.157`) -- [CVE-2025-13273](CVE-2025/CVE-2025-132xx/CVE-2025-13273.json) (`2025-11-17T10:15:57.770`) -- [CVE-2025-13274](CVE-2025/CVE-2025-132xx/CVE-2025-13274.json) (`2025-11-17T10:15:59.000`) +- [CVE-2025-11681](CVE-2025/CVE-2025-116xx/CVE-2025-11681.json) (`2025-11-17T12:15:43.250`) +- [CVE-2025-13275](CVE-2025/CVE-2025-132xx/CVE-2025-13275.json) (`2025-11-17T11:15:42.767`) +- [CVE-2025-13276](CVE-2025/CVE-2025-132xx/CVE-2025-13276.json) (`2025-11-17T11:15:46.710`) +- [CVE-2025-13277](CVE-2025/CVE-2025-132xx/CVE-2025-13277.json) (`2025-11-17T12:15:44.010`) +- [CVE-2025-40834](CVE-2025/CVE-2025-408xx/CVE-2025-40834.json) (`2025-11-17T12:15:44.290`) +- [CVE-2025-40936](CVE-2025/CVE-2025-409xx/CVE-2025-40936.json) (`2025-11-17T12:15:44.493`) ### CVEs modified in the last Commit -Recently modified CVEs: `3` +Recently modified CVEs: `90` -- [CVE-2025-43079](CVE-2025/CVE-2025-430xx/CVE-2025-43079.json) (`2025-11-17T10:15:59.227`) -- [CVE-2025-59088](CVE-2025/CVE-2025-590xx/CVE-2025-59088.json) (`2025-11-17T09:15:44.420`) -- [CVE-2025-59089](CVE-2025/CVE-2025-590xx/CVE-2025-59089.json) (`2025-11-17T09:15:44.610`) +- [CVE-2025-37945](CVE-2025/CVE-2025-379xx/CVE-2025-37945.json) (`2025-11-17T12:57:32.553`) +- [CVE-2025-37946](CVE-2025/CVE-2025-379xx/CVE-2025-37946.json) (`2025-11-17T12:57:23.847`) +- [CVE-2025-37950](CVE-2025/CVE-2025-379xx/CVE-2025-37950.json) (`2025-11-17T12:57:15.860`) +- [CVE-2025-37952](CVE-2025/CVE-2025-379xx/CVE-2025-37952.json) (`2025-11-17T12:57:06.880`) +- [CVE-2025-38008](CVE-2025/CVE-2025-380xx/CVE-2025-38008.json) (`2025-11-17T12:56:52.697`) +- [CVE-2025-38010](CVE-2025/CVE-2025-380xx/CVE-2025-38010.json) (`2025-11-17T12:56:38.940`) +- [CVE-2025-38011](CVE-2025/CVE-2025-380xx/CVE-2025-38011.json) (`2025-11-17T12:56:18.870`) +- [CVE-2025-38012](CVE-2025/CVE-2025-380xx/CVE-2025-38012.json) (`2025-11-17T12:56:07.253`) +- [CVE-2025-38013](CVE-2025/CVE-2025-380xx/CVE-2025-38013.json) (`2025-11-17T12:55:54.260`) +- [CVE-2025-46362](CVE-2025/CVE-2025-463xx/CVE-2025-46362.json) (`2025-11-17T12:28:15.610`) +- [CVE-2025-46367](CVE-2025/CVE-2025-463xx/CVE-2025-46367.json) (`2025-11-17T12:28:03.680`) +- [CVE-2025-46368](CVE-2025/CVE-2025-463xx/CVE-2025-46368.json) (`2025-11-17T12:27:18.617`) +- [CVE-2025-46369](CVE-2025/CVE-2025-463xx/CVE-2025-46369.json) (`2025-11-17T12:26:51.163`) +- [CVE-2025-46370](CVE-2025/CVE-2025-463xx/CVE-2025-46370.json) (`2025-11-17T12:26:13.463`) +- [CVE-2025-46427](CVE-2025/CVE-2025-464xx/CVE-2025-46427.json) (`2025-11-17T12:32:13.890`) +- [CVE-2025-46428](CVE-2025/CVE-2025-464xx/CVE-2025-46428.json) (`2025-11-17T12:32:02.347`) +- [CVE-2025-56799](CVE-2025/CVE-2025-567xx/CVE-2025-56799.json) (`2025-11-17T12:46:33.180`) +- [CVE-2025-56800](CVE-2025/CVE-2025-568xx/CVE-2025-56800.json) (`2025-11-17T12:46:26.313`) +- [CVE-2025-56801](CVE-2025/CVE-2025-568xx/CVE-2025-56801.json) (`2025-11-17T12:46:15.277`) +- [CVE-2025-60500](CVE-2025/CVE-2025-605xx/CVE-2025-60500.json) (`2025-11-17T12:46:55.307`) +- [CVE-2025-60697](CVE-2025/CVE-2025-606xx/CVE-2025-60697.json) (`2025-11-17T12:29:07.143`) +- [CVE-2025-60698](CVE-2025/CVE-2025-606xx/CVE-2025-60698.json) (`2025-11-17T12:28:54.113`) +- [CVE-2025-60700](CVE-2025/CVE-2025-607xx/CVE-2025-60700.json) (`2025-11-17T12:28:40.547`) +- [CVE-2025-60701](CVE-2025/CVE-2025-607xx/CVE-2025-60701.json) (`2025-11-17T12:28:31.610`) +- [CVE-2025-9479](CVE-2025/CVE-2025-94xx/CVE-2025-9479.json) (`2025-11-17T12:18:37.257`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 0437eb301d3..c7c202c243b 100644 --- a/_state.csv +++ b/_state.csv @@ -214845,7 +214845,7 @@ CVE-2022-49952,0,0,645d95f48896f19454bd38d120743716854f3bea8be64fedbb98b35ebcbeb CVE-2022-49953,0,0,a32dfb8662c6930df31cd371fd20d03aa2ba41e05c73eaefcf772dbbdebb1a82,2025-11-14T18:59:05.683000 CVE-2022-49954,0,0,d204d2c53ae7754416d95cb45f296ab164bcf64afb8efbac52a53e0080a6dd36,2025-11-14T18:59:26.417000 CVE-2022-49955,0,0,2d4292440f75c90c4bc915f2896bb0570ad89c8e7d7d594379540e47a2df08ce,2025-11-14T18:59:35.720000 -CVE-2022-49956,0,0,571702b6cfbf676b931a38683446db946bb20a4f2b02143914af9bcdea3081ad,2025-06-18T13:46:52.973000 +CVE-2022-49956,0,1,12d0778914f3cebb44083ad61fab7c72671d38a37c1a6d2d3907cdc06e4c33b9,2025-11-17T12:55:48.467000 CVE-2022-49957,0,0,206471faf09dcc7ca415f01d265eac9a49e08d0bdcd98a6412200cb5cb648755,2025-11-14T18:10:23.750000 CVE-2022-49958,0,0,edd26aa0dbe67934801dc485362c0195d8ac4638561f610976bcd18b76eb7f86,2025-11-14T18:10:11.703000 CVE-2022-49959,0,0,2b7151d63f874501d084e62a52fcb8fac9cab79fe95c2a9aaa37c2900da0efe5,2025-11-14T18:09:58.837000 @@ -248898,9 +248898,9 @@ CVE-2024-11915,0,0,28ea0a161b7eefe74ada087940b67270e2ec51b6fcf1def4945f57e6c8ae6 CVE-2024-11916,0,0,772212fec6b655643f1c957d90058c2fa42ec3e452d3898107b79ded42b35191,2025-04-14T12:27:30.293000 CVE-2024-11917,0,0,e697af5b80d6688add57711199b4a5be4d363649b07e7f985e7354aaa1e4b559,2025-06-17T19:15:25.933000 CVE-2024-11918,0,0,f7031582b21494aaa2ccab4dd4ab92d52bf9f67c1445d9fb72b363b717cfc06b,2024-11-28T06:15:08.347000 -CVE-2024-11919,0,0,db1ccd56c029a5f007959a9d396af72586f76676678dcec53730c76821a726d7,2025-11-14T16:42:03.187000 +CVE-2024-11919,0,1,5891faa3b87e44072bf0cc20edf721193e03ea8d69ccce7524ab3c4482fb692c,2025-11-17T12:25:42.943000 CVE-2024-1192,0,0,5063d16699b3db058d0f99170ded601d82fcfc6f39ec66d01e8a7cebfd42903d,2025-01-08T14:35:22.633000 -CVE-2024-11920,0,0,82e7e840d958f9e2d50bb9d9008aefe0fa22e99f4d27d5312b3d2848518a04a3,2025-11-14T16:42:03.187000 +CVE-2024-11920,0,1,dd2588248c7abd808c744fad382a0725b66b5a3bfe58c76a8a12f472621ef9d1,2025-11-17T12:25:29.400000 CVE-2024-11921,0,0,d63b29fddecef51d339ce26b6b175c16662ec5f052faff9a1e606d509d7f12a6,2025-05-14T14:43:26.667000 CVE-2024-11922,0,0,f2ab677a0f285cc0bd5544648c141f12561efe16fa05a74e611a032264f36582,2025-05-10T00:55:57.800000 CVE-2024-11923,0,0,4d6a80e3f288fbe3ed1bd4a1feabd18394fd01e27066d6fff1deb3858322387f,2025-01-18T00:15:25.823000 @@ -250220,7 +250220,7 @@ CVE-2024-13174,0,0,714ddb7b2f232728b9348c9a517112a7eb820d21d85a1ef9c54c4d4ea21a7 CVE-2024-13175,0,0,5f36d8be8f4a31c1342cc2573ed5974d5b6034a191069d7ee579dea9b00e2089,2025-07-22T13:06:27.983000 CVE-2024-13176,0,0,48402a6d78212278f13e43e4bf0562c39378692e3e8b2ec9a45e1a990ab81976,2025-11-03T20:16:08.203000 CVE-2024-13177,0,0,58b2bc8daf353816e32d362a723ad479f6f16dbbbb5269d8af0a5f0e77561192,2025-04-15T18:39:27.967000 -CVE-2024-13178,0,0,93191df437c1a2bb4303f1a7869fd8c8167ba3d2239d5ef9fa1cbc2192f3d338,2025-11-14T16:42:03.187000 +CVE-2024-13178,0,1,1922b274d885b99df6eb6b0630492a660d4fe1433d125c028cdbe68d976d4982,2025-11-17T12:25:13.680000 CVE-2024-13179,0,0,9d2a982b824c67bbacd2e3f4856194d80faa53a9ffb503fdbd054d373079f25f,2025-01-16T21:01:38.177000 CVE-2024-1318,0,0,8468ceebf6c6c9f41014d2f5941b790bd61167061813191d7b8edcc4ba43bbca,2024-12-31T16:56:50.763000 CVE-2024-13180,0,0,d8eed302f18bf4ce52a1f3c3aecacb18daed8ee47876692255a4c4adf22e5203,2025-01-16T21:01:52.650000 @@ -251068,7 +251068,7 @@ CVE-2024-1398,0,0,9645ba9f8586ede4d8e9304631788266d0cde74989f61af36e6ddca7859998 CVE-2024-13980,0,0,38c35298c38ae45341bc425be3540e832ba512ba3ad69b951597be721fd3de81,2025-08-29T16:24:09.860000 CVE-2024-13981,0,0,f2b312fa5d75fa20aeac79aa124931e13c233777fa63267f98093e2c3170953c,2025-08-29T16:24:09.860000 CVE-2024-13982,0,0,7a714196f337e6370b21bcf0aee2cd73d6dc986eaa247998bf10588effc53cab,2025-08-29T16:24:09.860000 -CVE-2024-13983,0,0,5aa3701b72d4cbde8512db9fea985fb0eda384c10f3690dd41c912c4143c2f00,2025-11-14T16:42:03.187000 +CVE-2024-13983,0,1,13060de0c8f4585f5bef92afdfbee3a70b6f4041c813f0811cf5d041f9cf340f,2025-11-17T12:24:59.757000 CVE-2024-13984,0,0,757a025a38a9ffad0c75ae108442da1bcbb4641bf7301b29e0f7051f41c0b9db,2025-08-29T16:24:09.860000 CVE-2024-13985,0,0,365370dc7d4f04787dffab31d444b817e4cf29fd95d741f9c3dc55002147c822,2025-08-29T16:24:09.860000 CVE-2024-13986,0,0,9c21b5a3427884afd420e35ba3406834e96073f9785493d1e2caa7feba5e3d39,2025-11-04T23:15:33.787000 @@ -274038,7 +274038,7 @@ CVE-2024-48825,0,0,ab1a99bd861163f7408d15d580b43382540b10b1ee2468dd0be1ab11f71c2 CVE-2024-48826,0,0,98549302f2e56108c7370cc097f96237c01a98aadb40625859a37b9be6178797,2025-03-17T14:41:08.920000 CVE-2024-48827,0,0,4f555f9f4338d5e15253fe5e147d46e6ab742e732bd658d5163d02319586cc64,2025-09-29T17:28:17.693000 CVE-2024-48828,0,0,2f6537ef91eafd129f36056e40ef732d9d91afa617ce6a2536480f70d6f7a2a0,2025-07-14T20:30:51.963000 -CVE-2024-48829,0,0,ad895a85220519c386cacbed424be657c09818a81a2b60c371e588dda5a4eceb,2025-11-14T16:42:30.503000 +CVE-2024-48829,0,1,3740043efb18a764364a8eb0e5e2f3b426bac241e3c9354e117da22ec33ee9bb,2025-11-17T12:33:50.973000 CVE-2024-4883,0,0,3222a4b5de828494b65ffe71a3476e5194064057a0c910f17c0414c5fa2f7db8,2024-11-21T09:43:47.157000 CVE-2024-48830,0,0,f6e5f19b6d87ad65fa789fbf450f68b0f1f93ada6992c4265bd57b1b44ea2694,2025-07-14T20:29:41.420000 CVE-2024-48831,0,0,00eebc854e9b156c5b6a6820d72f28fab54fc24d8a54761f01a1344fc11c26c8,2025-07-14T20:27:03 @@ -281891,11 +281891,11 @@ CVE-2024-7013,0,0,fda92e94524c5fdb675c080a05843f1821b747032d3c867378b19c5cd5d7a8 CVE-2024-7014,0,0,270a665b6b71feecad9e9b90e127d30aee10ccfe3a9660836af32443015bbd64,2024-11-21T09:50:45.550000 CVE-2024-7015,0,0,ed7049cc4b48755115d67cd64cc41ee0374a54ccac42e15a48bc373c903420e3,2025-10-14T13:15:36.243000 CVE-2024-7016,0,0,7cad38da75bffdc7d80251a62f79dc9a823c160edf672b290cd3a25307502424,2025-09-12T07:15:34.340000 -CVE-2024-7017,0,0,410fae7617cb22d6631f6d2d0d3572b539fae2aeb3e34131ca65c5160eb55a64,2025-11-14T16:42:03.187000 +CVE-2024-7017,0,1,bfceae3f68cdec3ccf935b7a36198446740322c0117f4c0cb5a5d6ccaefa1aaf,2025-11-17T12:24:41.543000 CVE-2024-7018,0,0,fb485fbc237ee4e46769004d827f7c45d45cfce46fbd3424a7954aff5836017f,2025-01-02T17:32:20.160000 CVE-2024-7019,0,0,396beef4690e7d5d0d5350f56449d169b7c08ec0c1daaea13c25e725556494f0,2025-01-02T17:31:56.323000 CVE-2024-7020,0,0,5a1355f5c1623c13682541eed4e1c11d298b24b5970efe63eafa41c645e860b1,2025-01-02T16:49:43.797000 -CVE-2024-7021,0,0,7df2017b62ba245859c7303bc0da88487c14bfc2580805720f857c95c974b8c1,2025-11-14T16:42:03.187000 +CVE-2024-7021,0,1,ab391e494f591b3a2722426c4490c295ff0e3e201d969560656cc6ae91a34bb6,2025-11-17T12:24:30.807000 CVE-2024-7022,0,0,97cef42d6d4cc9f341b0c299285d3ef1d39840892e68987c42e86450b9d4507c,2025-01-02T17:11:48.523000 CVE-2024-7023,0,0,ad2975e43813b3e5e6eab5a488f2f14f65ef6bf3fdb3557576a6e66a8141f997,2025-01-02T16:53:18.803000 CVE-2024-7024,0,0,a0465e322d3e843cdfa9ab7ee19c20548cddec446d6fd18a991b6ebf7a116861,2025-01-02T16:54:16.893000 @@ -283903,7 +283903,7 @@ CVE-2024-9122,0,0,3487687e1aeaa14de3f41c8f004eeb595af43f29d050b6b0bcce6370290564 CVE-2024-9123,0,0,2d59c5c1f584252d03e5c46fb9cfbd2032475b4808a0deb6f42d2e10fce20e66,2025-01-02T16:36:56.757000 CVE-2024-9124,0,0,cd69d463959840719b35b1ea0c52fd4d9f5768fb8108c42fcac176196205aed0,2025-09-22T18:34:28.750000 CVE-2024-9125,0,0,a2eaedda1b49b18236ac116998a1e45e7b5806e5e010d7ded75c88431dba6b9c,2024-10-01T14:00:52.460000 -CVE-2024-9126,0,0,c40bd03fa27f8d86b6a1560c96114f5d001ad45f80707076869d06366644b610,2025-11-14T16:42:03.187000 +CVE-2024-9126,0,1,9fda76f77377e3e6ce0f60679ea4090df6ca424f1a5f37c5be071b991887ff19,2025-11-17T12:24:10.707000 CVE-2024-9127,0,0,c4d446b51c8121a98d4ccca3ceb1928972a1ed1ad9117dcb67e2e1c732384bbf,2024-10-01T14:09:26.017000 CVE-2024-9129,0,0,cc2446e5c104123fa250677672977d18384ff16cf5c1d3cf6c3720101bcfb9b4,2024-10-23T15:12:34.673000 CVE-2024-9130,0,0,7a17b6638601749177c95ede13421fc94f6381d99406730dd48ab1718340effd,2024-10-04T17:18:59.130000 @@ -287064,6 +287064,7 @@ CVE-2025-11678,0,0,da608f708b3f5d39db2dc3d8bcf0f83167c6fcc9293801159eb6dde8b2dd7 CVE-2025-11679,0,0,a5a009a1f7372061e87c62563152799972f8b88f7ecce322ba1233363a1a06da,2025-10-21T19:31:25.450000 CVE-2025-1168,0,0,1ea1d5bc4e270d6254a19bce9b3bd16dbcb0aa6cfa50f52ef9530ed2236d40f5,2025-03-03T17:20:31.693000 CVE-2025-11680,0,0,b2321c5f6524e9275218cd1a86c19c0061b764a2b5cfd019d226562a457ad82e,2025-10-21T19:31:25.450000 +CVE-2025-11681,1,1,94325477754dde8da9ae75980e76c3ee67f62489fd95a55693f301697a6ceaa9,2025-11-17T12:15:43.250000 CVE-2025-11682,0,0,0e7fb35f6aabdb0ff5ae67f61a8707127178ee52a21670d6bef2406c9f4a9b62,2025-10-27T13:19:49.063000 CVE-2025-11683,0,0,562b6ddecd757d974a3cd06cb4a91e1cbf3407e06c1b215f13523df3f6204a17,2025-10-16T15:28:59.610000 CVE-2025-1169,0,0,ad57e3ebca9d9361258028a4f6880b5b420e9bfeb30e11c1ec67cc7b58af0c9a,2025-03-03T17:16:44.157000 @@ -287251,8 +287252,8 @@ CVE-2025-11939,0,0,92b6a4e091fbc961880a0a0e6981239d776a40e9d4f1498715ff720b0bb90 CVE-2025-1194,0,0,cfc123b4d06e1541b17452e14c717457ccca99ce28567c2bf076df46d680302f,2025-08-01T21:56:15.790000 CVE-2025-11940,0,0,30268f1716d45907737fa11bd29f4a2f6644625ea2b67888f588e4dc9a2c256e,2025-10-21T19:31:25.450000 CVE-2025-11941,0,0,95f18dc59d9c30f74db1e4d29363c9edfe4ce1ae2a084ff913b3bc274a5cd501,2025-10-21T19:31:25.450000 -CVE-2025-11942,0,0,f5050f76245a0747be104aa509620c8f5014ed877592c1e99ecce48f95428a57,2025-10-21T19:31:25.450000 -CVE-2025-11943,0,0,73653b9f9a71b6c2f4258537666606d31371020755554c3c03075b166de8b2bb,2025-10-21T19:31:25.450000 +CVE-2025-11942,0,1,7e9566f7fbecdd7e01cfa188d43ce856a70d1b6349bed292a4aa04b6d5f811f2,2025-11-17T12:45:11.827000 +CVE-2025-11943,0,1,eed4675b3b80b28af222599e5a579678f49509c712f57cfcdea07b03f3ecc1f5,2025-11-17T12:45:50.343000 CVE-2025-11944,0,0,ee35f071825256beb4684790ac24c34e49ee45b753e65bf9e9dfa1b0c1b8a496,2025-10-23T20:06:21.947000 CVE-2025-11945,0,0,04b1a33ac9c2b817c64224fb5229d14570193c8801f098ddfa7644bb58786bfe,2025-10-21T19:31:25.450000 CVE-2025-11946,0,0,2ab0170c1456fd783772478133eb85f753aea1deb4c3f6d69a171880e55cd3f4,2025-11-07T01:25:30.760000 @@ -287818,9 +287819,9 @@ CVE-2025-12849,0,0,a089b60c8b337ddc9ef52819f3e613fa4e055740fbeb37d4f7daea0112da6 CVE-2025-1285,0,0,3182990c1bc942ab8f686c8030ea96842badd7c599b496272a03f16c99f15c97,2025-03-14T05:15:41.977000 CVE-2025-12853,0,0,3da4812ded871535155fc4b26ce159a40ade1254f05c47c19b5b5a9bd6e68291,2025-11-12T16:20:22.257000 CVE-2025-12854,0,0,d262b6914cc6de0e1c6caa359b8a991e80bd15730f71198dcff1fbec51a852d9,2025-11-12T16:20:22.257000 -CVE-2025-12855,0,0,be7406d651420869a094a0ca5f7f117a4ef6c3f46e5f503e2600d817158c1ef2,2025-11-12T16:20:22.257000 -CVE-2025-12856,0,0,1043ba13a438661101c59c3510cbb4b4b4a3d8263b21c3065e53a6bfa29c8e49,2025-11-12T16:20:22.257000 -CVE-2025-12857,0,0,f9f97f9d46011d2dc0632cccd3897ea9ed9277cef91d0d0822a80e39b5a3ff4f,2025-11-12T16:20:22.257000 +CVE-2025-12855,0,1,30df6a956ee62de1312c986404aee18c6528b4faf44e48a2de355062dea45721,2025-11-17T12:43:55.817000 +CVE-2025-12856,0,1,5c66808ad32e867b6d4b8e3f6fac859abeed62fb00aaac7efcb8e368f680e66a,2025-11-17T12:43:41.087000 +CVE-2025-12857,0,1,62aaea96bea0f61a8e5b57c2620c011846c9360e6a3c5a17f6b58db3d8aaade3,2025-11-17T12:43:22.537000 CVE-2025-12858,0,0,32edbb001f23714badb24b380ba6186a1c9ec2ca1ad8f543d00f39f45f596fb1,2025-11-07T18:15:35.910000 CVE-2025-12859,0,0,086a1302330002901de02b7b04cbc5631695605eec4b76e6e2b46b2630a3c07a,2025-11-12T16:20:22.257000 CVE-2025-1286,0,0,40bbeef96d95140e49bd4454f594373e42828e919694fd2421136359798adaf3,2025-06-12T16:37:11.290000 @@ -287861,7 +287862,7 @@ CVE-2025-12909,0,0,90055f5a25dfdd1404e9471634f6f58937e116afa75791cd043793f90b46d CVE-2025-1291,0,0,8a62a97f45d265e09336f40212a9e842d191a55f47481ae3892da3a9dec0674e,2025-03-01T09:15:09.710000 CVE-2025-12910,0,0,fd2747953beb3116a3e2a76ee93ab0154f69c6fee1e14f99e811df020813baa3,2025-11-12T16:20:22.257000 CVE-2025-12911,0,0,338d3a1c3ed09b494ba0a7face5c7364f29b1284f00441150af8f238ef16e265,2025-11-12T16:20:22.257000 -CVE-2025-12913,0,0,ade7f379870246ab9c6a6e4fa29a89eb79f3c8964ed9a4a15cf61819b669753d,2025-11-12T16:19:59.103000 +CVE-2025-12913,0,1,3dc4ce0f78b69d6f3a2ee1bd8083733eea078cc1fea37d4c9f655c2bfcb578bc,2025-11-17T12:42:54.190000 CVE-2025-12914,0,0,7cf94b1df78a5b856c588eb787765a75b5343e1c73a3293730a458efe246dfad,2025-11-12T16:19:59.103000 CVE-2025-12915,0,0,7549bd0d2098ef505e635674cf9114e0a7ed1f327cd2394f717c8c266e943945,2025-11-14T18:20:17.173000 CVE-2025-12916,0,0,be40698b9ed092d0755d5036cc446baf6aa4ddba596190cdcce2b33f5f40453b,2025-11-13T16:15:49.330000 @@ -287882,10 +287883,10 @@ CVE-2025-12929,0,0,ca0d1ef6d939ceeb44a38957300a133cc608cffcc8a0bd322f8864463e5cd CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 CVE-2025-12930,0,0,27abeadb38fc8959bec5b7a597619055f7804da0028f6b341a329f93f63b057b,2025-11-12T16:19:59.103000 CVE-2025-12931,0,0,a2e653aea649bf7ef34735b9458a2e350f9de273587602452ae10e364832bc18,2025-11-12T16:19:59.103000 -CVE-2025-12932,0,0,f16a92baea650e13db4a6d7e7c793c82490172651dbd4c81a3a9a486064db431,2025-11-12T16:19:59.103000 -CVE-2025-12933,0,0,496288799fc6c3134b1c3ffc11e9d7ea2d7cb05f91096fb97195beff0ffaea3a,2025-11-12T16:19:59.103000 -CVE-2025-12938,0,0,b3814382294e67e507aa1ec262246fcbc600e525730979b4e765f33f2cc2a6c3,2025-11-12T16:19:59.103000 -CVE-2025-12939,0,0,5d24e369a443e642c70c500cc7f81daf5958ed4ec48d246c12f14ada1b3f4560,2025-11-14T19:15:57.257000 +CVE-2025-12932,0,1,e603d9bc10fddbc01c4f5674c4ab1f2d39c8461d2c91bb8d10193c505c600f27,2025-11-17T12:42:33.317000 +CVE-2025-12933,0,1,64aa276681d2d5fe0da66f392e04d849d24740c70c3ca96e4e8e8d7c5e5139c5,2025-11-17T12:42:20.207000 +CVE-2025-12938,0,1,b3ec357a58765948d0f1da26cd5c97f59c60c2d3549d01260b6476a680b58dee,2025-11-17T12:41:57.123000 +CVE-2025-12939,0,1,51b0385b03723509d74b8eb0194b8a892250ce2a8d9687630013704c686b08d5,2025-11-17T12:41:39.120000 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-12940,0,0,e7a83fe6c86ad0ba0414cb7e7cbed44be96627a4afb20886bee631dbd57fa787,2025-11-12T16:19:34.210000 CVE-2025-12942,0,0,7654cbef88af68ac8517d7c6036691eac1b339a911397963662009a08a062a2a,2025-11-12T16:19:34.210000 @@ -287903,23 +287904,23 @@ CVE-2025-1299,0,0,05ad5803bebc6b17851a9b0bf8285bd6d3e063e6e9aad7d7dfb7cfe06c333f CVE-2025-12998,0,0,f3fb06fa9653aba1e764961f6e183b92926d1d490811825111e397e962eeef3a,2025-11-12T16:19:12.850000 CVE-2025-1300,0,0,2e9e1d2e469024f43a6eb15e12f1773ee35786b336ee8b88da59578559ba2189,2025-11-14T15:29:28.110000 CVE-2025-1301,0,0,d7faba0f900312629252c10b0ff69e7ad4067abfd474abf12d63d55853a93aef,2025-09-12T08:15:44.563000 -CVE-2025-13012,0,0,f600ccde346a3099a2f2c340a7161d0d258ad40bed279c9f911a286a8ebec7ef,2025-11-13T16:15:49.603000 -CVE-2025-13013,0,0,00eab60439b066ace4905d857f51ea3285fc3c03a81f57de10ec6f4afbf75d2f,2025-11-13T16:15:49.770000 -CVE-2025-13014,0,0,9ace3e864fe2975ea15431ca256c1ccab5a0eaa7c2f43f7b3d2200558d26c6e8,2025-11-12T16:19:34.210000 -CVE-2025-13015,0,0,2a771f4bf08e653a68f7f1f576d47a236cec857e766dce5c865eed061c648ffa,2025-11-13T16:15:49.927000 -CVE-2025-13016,0,0,c025b286d11d97b7e575e5e351b12d32dbf336d3e193c57e8c62268724536b35,2025-11-13T16:15:50.083000 -CVE-2025-13017,0,0,7c78e307d06bbe9f76efb3339b97046cff80c60cb0bff70565de35b9b3c5e216,2025-11-12T16:19:34.210000 -CVE-2025-13018,0,0,4ad85f38966c34e94774ea97563aa359e6145e5facc8d670cebe6941dc1a5150,2025-11-12T16:19:34.210000 -CVE-2025-13019,0,0,4ed4f77084c3bebe3062472820b8f93a3f7c00a6b11f772e5f0189886974ecff,2025-11-12T16:19:34.210000 +CVE-2025-13012,0,1,2f7e945dc10d630c2bcefc5bbbee5391990547c6c83085fbdcc2a8c66c995c7d,2025-11-17T12:39:49.590000 +CVE-2025-13013,0,1,bc4ded1827ef31d24bf616c9eb961e2219c28bc53111dff1a3777fd5d0a4389c,2025-11-17T12:39:40.203000 +CVE-2025-13014,0,1,a8bf00caadba76fb99c659e784c6122556853b89b3c04ad730e8cbf5c64915ef,2025-11-17T12:39:29.170000 +CVE-2025-13015,0,1,50f27e69302040a542dcdef1cfcaad52b4471aba1e70610306fe1121b9bc0dff,2025-11-17T12:39:17.383000 +CVE-2025-13016,0,1,c97798da7e30c9aab36621b1046cdbcbd5a73ee0bfffcd4927f501169fbdc375,2025-11-17T12:38:52.407000 +CVE-2025-13017,0,1,8f2761d6c778db2a083c8d93131d3c8aa91b41faa0430289b76e34627af3e897,2025-11-17T12:38:44.923000 +CVE-2025-13018,0,1,7472a24f39d9d60ffc4574d823448d52306508c2213a0bfba4f2dbf74df0bbfa,2025-11-17T12:38:28.200000 +CVE-2025-13019,0,1,905001941118b2118f2f4fbe1a62cf3433368913fa1204b6b17918723cd7d482,2025-11-17T12:38:16.037000 CVE-2025-1302,0,0,4c600c674f22378513ee28ce145975f04e5b0e89605ff80d937b77394d750b70,2025-02-15T05:15:11.683000 -CVE-2025-13020,0,0,2c2107a185481fa929a8818edecfa0348d0424c359c22158c1b2cbd714227e48,2025-11-12T16:19:34.210000 -CVE-2025-13021,0,0,82c503fbe1f8f642f98d5ac4903c1b3a6c54a6297370dc5076cf7acbf9a8a3d9,2025-11-13T16:15:50.227000 -CVE-2025-13022,0,0,429107634601d745bce8e91f47895e82777df30345d4f8131976c483b4c9199f,2025-11-13T16:15:50.383000 -CVE-2025-13023,0,0,daed16a922709125edb82834dec9b0a57949f20a59d970e7c202bc5d92cabafb,2025-11-13T16:15:50.533000 -CVE-2025-13024,0,0,fb8822e15a4c93a8f7924797acd52f31e047c1af9f00f1c6852893bab5a15891,2025-11-13T16:15:50.683000 -CVE-2025-13025,0,0,80750db45f76e2ad182d13b32f920b0c4e7265cb4fcb05933e4bfc72645c458b,2025-11-12T16:19:34.210000 -CVE-2025-13026,0,0,fd4fa73a65038ad6846878fb743f9aa4e7f31c51e0cf83e9578daf4321660bbd,2025-11-12T16:19:34.210000 -CVE-2025-13027,0,0,b14dca55354bbd571a5633f868c8d36cec849ca58a37c6a391480723c6093bed,2025-11-12T22:15:43.810000 +CVE-2025-13020,0,1,1e1dea5d22c2a817e9927b2a02db7f5db3e3647e233cfac3b6600860be7608d4,2025-11-17T12:38:00.403000 +CVE-2025-13021,0,1,e0778b5fa5ae357968861e7d5662bd995379a3d02028f1fa7c39445e0df1c14b,2025-11-17T12:37:50.063000 +CVE-2025-13022,0,1,690848823755d330f70dd5f5773971f57e812cec1178c7166be6f9ebe688173f,2025-11-17T12:37:38.103000 +CVE-2025-13023,0,1,313e1be1d6ec6bfd9b383e07d821e6077174453d8fc2d7e72f033a422d831c36,2025-11-17T12:37:29.513000 +CVE-2025-13024,0,1,6f4309877e66148d4379eb56211554eae2f4ab02396b1ebc0240fc91a50bc931,2025-11-17T12:37:21.517000 +CVE-2025-13025,0,1,eb15edb9751dd909293c1673771248932eccf3cfe55e6d2fe134a15285faf9cd,2025-11-17T12:37:12.383000 +CVE-2025-13026,0,1,c59454abcc613392969f86ac2d98f85b9032d3472f5576f739dbaec9b64f9182,2025-11-17T12:36:55.850000 +CVE-2025-13027,0,1,f08beabf588266952c5ce0d5052f885fc69ad8c3dd775ec9c7c3c551087dfeca,2025-11-17T12:36:27.433000 CVE-2025-1303,0,0,77f6e0e2e908dd99b19f92d02615f45188adee7d0a527ba2e05ee367340954fa,2025-08-01T01:58:31.323000 CVE-2025-13032,0,0,a25ff9b6f1a17299ce0883eb25de73fbd28a5b858666f4ff18a841e1161c1934,2025-11-12T16:19:34.210000 CVE-2025-13033,0,0,9a026062400453b2b99148c0aade73145703d3d581138557836deb4ff975c376,2025-11-14T20:15:45.957000 @@ -287928,33 +287929,33 @@ CVE-2025-13042,0,0,2f74eaace28243ff2ad124ae4c9ff7279fc75753f0a3b01788015a64272b1 CVE-2025-13046,0,0,35fa53b70d1fa47ce7acb93a7c39a45fefe329ad2063438a47ccc97e6f96c494,2025-11-12T16:19:12.850000 CVE-2025-13047,0,0,061330915d8fb4e4572e2da14cda6d86fa183d4e0637d7b0aeaad03a24b4d042,2025-11-12T16:19:12.850000 CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000 -CVE-2025-13057,0,0,30a4c7415a533e0c2b9ce971e3f2ce29750dbc8b8209425d1bdd1da40d13dece,2025-11-14T16:42:30.503000 +CVE-2025-13057,0,1,98014c72182be4c251013c52a5cee095587e14319350f0dbebe8f3349a12faa0,2025-11-17T12:34:13.523000 CVE-2025-13058,0,0,88670590f8ba0f732c2449f6bf252985bf5120554f4679631a3eb8ea5143e123,2025-11-14T16:42:30.503000 -CVE-2025-13059,0,0,eb22cf70675790b1dddfaf919ddf43a34a3482a0860b8fcc2680eaa60ddc4e4e,2025-11-14T18:15:44.860000 +CVE-2025-13059,0,1,3cc9211c96ba896937a742ba3b53e122d8400bcf8e144909d253eac600654701,2025-11-17T12:33:23.140000 CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d9921890929,2025-03-05T18:45:32.943000 -CVE-2025-13060,0,0,7c7069c9e9147218d2faa2e37c94b11bd4419a970b0616bd999d7db9ea913743,2025-11-14T18:15:45.413000 -CVE-2025-13061,0,0,1ed382f452ccc4aae959132b3bb2e7c3c7f278a902c7bf3b710ddc53029521a7,2025-11-14T17:15:59.597000 +CVE-2025-13060,0,1,72a310f3b82221fd7985613f28f09948690ba9f0191c16c66d3292f6a7d76d68,2025-11-17T12:32:35.167000 +CVE-2025-13061,0,1,3dae6fe3856612139fc3a77ae84ce221444ed2b477b6fa7a3a76672988ca757b,2025-11-17T12:31:25.667000 CVE-2025-13063,0,0,fd99a54039cec8c530ed1111ee3a257dfbb551bd857a40899dbd1b2cfbcbd0b6,2025-11-14T16:42:30.503000 CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000 CVE-2025-13075,0,0,376ffa93e203220211434268e3970ab924134c1a1982c904251d0bfb52cf3bc0,2025-11-14T16:42:03.187000 CVE-2025-13076,0,0,cce7622e4778b071cc6a68c677b2b703ac2a0b2ed9cd5c517531d1ebbe7c2233,2025-11-14T16:42:03.187000 CVE-2025-1308,0,0,73e17aeb6de3d57ecba00a18ccc8ae4e9076e7a79f5357613a6cf6f554b00b65,2025-05-21T20:25:16.407000 CVE-2025-1309,0,0,5d2b17215fed7de1b66f6e9e5fd86a1c64bff76093266d0c2270f4eeb2161dcf,2025-03-07T08:15:42.017000 -CVE-2025-13097,0,0,b7ca648436cdc589639c72ba772f02da5d1f20ccfd085b848b289cdf0127380b,2025-11-14T16:42:03.187000 +CVE-2025-13097,0,1,0a463c7146931e807334c871d0e683f7d8bea2d0ec5ce4001c32f9829ca46e11,2025-11-17T12:23:36.557000 CVE-2025-1310,0,0,25bcf2647b21785e81aee9bf1e14cf3dadc9c18faaee6d001f2b001f0d89e104,2025-03-27T16:45:46.410000 -CVE-2025-13102,0,0,10fdfe62f8f2059b0a946bab1ba701088bb4c2e8cf707a0f808a46e1f83c1089,2025-11-14T16:42:03.187000 -CVE-2025-13107,0,0,d0d13d1cbbc3ef0599e28cda6ff5a0b6d92d3cd599649405cb9a958649694282,2025-11-14T16:42:03.187000 +CVE-2025-13102,0,1,0e47e47942a72e24883bd3215af459f49d2a810eb2bef95e05b56ddc24738fd6,2025-11-17T12:18:45.040000 +CVE-2025-13107,0,1,6dc9045ab686460bd088cd55cc0e6be8908359d288d76c1458f515dbd0fda986,2025-11-17T12:18:25.437000 CVE-2025-1311,0,0,7710d787ca70c6c546450cc6c7a6c27a4be0c39d3b39dd1aa2c960d1ee02ebdf,2025-03-22T07:15:24.433000 CVE-2025-13114,0,0,4e3e1eb0eb9a6e45db3fc16969cfde162699b609de37b56dbe7e94249433b6eb,2025-11-14T16:42:03.187000 CVE-2025-13115,0,0,26a943f901f226d5a4944f2431f45b1d4a0ba3363b20f6ad1b720001e76678c1,2025-11-15T07:15:44.957000 CVE-2025-13116,0,0,ea8f64d7b7d1ecd545022502e9e7e358c183f245dfe2da4fe7e826f9286ccad1,2025-11-15T07:15:45.330000 CVE-2025-13117,0,0,51a4072dcf63cfcdae5c6b6fc5d4cd28bb497b3d7d360b79693750c4cda0052a,2025-11-15T07:15:45.617000 CVE-2025-13118,0,0,0852b80b1bb5c12b1f01406e6d693c1701f9733966c93f75d39621168b7125de,2025-11-15T07:15:45.897000 -CVE-2025-13119,0,0,f968933e9d7b2757f1ec548a87d8cb619e32b7f4637843eb3c2f15e92aec8265,2025-11-14T16:42:03.187000 +CVE-2025-13119,0,1,fb8931ea404b0ea4853fc840c5e029de9bb1436726581728fa278360fd98718d,2025-11-17T12:30:52.537000 CVE-2025-1312,0,0,722f6492fca6972e3871e5d5750f81958bc068d23fe675f5f9ed3d0327ccb7dd,2025-03-27T16:45:27.850000 CVE-2025-13120,0,0,043f4346c38bb5f78a61ef5515aacaac48678dd6d13d72eb4b923fb1eedbb713,2025-11-14T16:42:03.187000 CVE-2025-13121,0,0,5e128d86e6e51899559db613e75ba6c420a96c429acf145062534e727893fea2,2025-11-14T16:42:03.187000 -CVE-2025-13122,0,0,ea59acbc1f3fec455e75d71e8c3006eb34e52816afafff7a71a50edd1dd869ed,2025-11-14T16:42:03.187000 +CVE-2025-13122,0,1,1d4ff5fdc8baaaf10564f67fdbb1e6fa4f6cfb3f5e07bef25fb0a79668b9d3a6,2025-11-17T12:30:18.140000 CVE-2025-13123,0,0,11b25c2f1d301f08115069b17b0d4401e2e2b143d64d0fa29b80c9c2303d4396,2025-11-14T16:42:03.187000 CVE-2025-1313,0,0,1946dbd4399c0b8b04a0259c622d0b0d4a1762b305348c8c1c7599eaeb9b6910,2025-07-15T13:14:49.980000 CVE-2025-13130,0,0,18e517c926f1f7818d65495d73d07588d7763175775f0e557835a555ee7c2019,2025-11-14T16:42:03.187000 @@ -287968,9 +287969,9 @@ CVE-2025-13163,0,0,610e8e9c1fa4cb603c581c526c73583557f9b55ca5c5cf250e98e946ce56d CVE-2025-13164,0,0,d8d6789a8ee8b1949d621234bf63fa7d645f6604b7aace1056b422bd9a60c6ce,2025-11-17T08:16:22.860000 CVE-2025-13165,0,0,09ed4ac76c61663287c86467b8f93a9622beb1d75e659349b29358a741300100,2025-11-17T08:16:23.233000 CVE-2025-13168,0,0,2e7970b035919f06ecad786e62040db4138d08230cd2f840467b8b47514c1579,2025-11-14T17:16:00.220000 -CVE-2025-13169,0,0,a5dc96c8bd86d30bf232fbdd8803d8b95863a779c2f7cf2da75709c512f7fad3,2025-11-14T17:16:00.407000 +CVE-2025-13169,0,1,379385c636090985d3c85986b114ce6f1ca427d2eeae6e8e662ef58ca8d7b1f0,2025-11-17T12:17:57.580000 CVE-2025-1317,0,0,4f2ecbb1517ad7f024c8a72b4e37f40a250e9f9aedba0e53124be3b9cafa8bcc,2025-07-05T23:15:24.760000 -CVE-2025-13170,0,0,99538878ce9ac096e1e6653a6c12c2c7248379c023ee637fdd4d3f146f6e612e,2025-11-14T16:42:03.187000 +CVE-2025-13170,0,1,6840916a52e02762a2f72bc3b77f13a8e6406e8dd5ca5b8e9be9d0a2894d9656,2025-11-17T12:18:14.443000 CVE-2025-13171,0,0,01f9e8ce36722a1c2622821fd563da7d7d0af7838cae9d16b6874e36b58edd01,2025-11-14T18:15:45.590000 CVE-2025-13172,0,0,9b458ff3a5834cb24d646cdadacf062b5436ac4e0cc72d7bee7c4c6aac6e1f69,2025-11-14T18:15:45.843000 CVE-2025-13174,0,0,f00843bd2ba7da8bcd1087ee2014345afd74f85ff09e0afa3614ae4508e76cc1,2025-11-14T19:15:57.533000 @@ -288047,10 +288048,13 @@ CVE-2025-13268,0,0,1549a6d1fca73c09abd176ae8f16d8106106e9a05c5993d0363fd1509d020 CVE-2025-13269,0,0,a6b43d18ef43cddc51e83ddde2730c67c3be3fcc5ea3282045411073accbe687,2025-11-17T08:16:24.387000 CVE-2025-1327,0,0,a00f3a7838ee8cb34a28ac7722d227a8d885a7c055568ff1befbcea8c4c0fd5c,2025-05-06T15:29:09.143000 CVE-2025-13270,0,0,ea5a4270573e8a7a564d8d08b110c49c447b63e5b5290d4f11f7d60e421feda7,2025-11-17T08:16:24.780000 -CVE-2025-13271,1,1,dcecd33696075e33824381e9fa7daf0e8630b308e9ef4ad7642ff3b0b7ab3448,2025-11-17T09:15:42.733000 -CVE-2025-13272,1,1,27be93052fb5a241f742db343636fb7e60db30daea690a8687e120a6b63b93b5,2025-11-17T09:15:44.157000 -CVE-2025-13273,1,1,bd055755c53d00feab51fec00bf841877505fc21d29db5ca34244d0824bdf2ad,2025-11-17T10:15:57.770000 -CVE-2025-13274,1,1,f55bf238026577e71fcbba8b3c1d319fff6313edf7875fac99ef940e166163a2,2025-11-17T10:15:59 +CVE-2025-13271,0,0,dcecd33696075e33824381e9fa7daf0e8630b308e9ef4ad7642ff3b0b7ab3448,2025-11-17T09:15:42.733000 +CVE-2025-13272,0,0,27be93052fb5a241f742db343636fb7e60db30daea690a8687e120a6b63b93b5,2025-11-17T09:15:44.157000 +CVE-2025-13273,0,0,bd055755c53d00feab51fec00bf841877505fc21d29db5ca34244d0824bdf2ad,2025-11-17T10:15:57.770000 +CVE-2025-13274,0,0,f55bf238026577e71fcbba8b3c1d319fff6313edf7875fac99ef940e166163a2,2025-11-17T10:15:59 +CVE-2025-13275,1,1,778791e4bd3102fdda3780b71146290f892c23bb777bebfd966f63c8f29c5f38,2025-11-17T11:15:42.767000 +CVE-2025-13276,1,1,c7d0999167c2f17eaad56030fa15b4c045ef8001dd06f53cd5084104c8d29e73,2025-11-17T11:15:46.710000 +CVE-2025-13277,1,1,0d700898b8929b19c980a620041f0688aacaefe301df283195dea27053166cc8,2025-11-17T12:15:44.010000 CVE-2025-1328,0,0,e2b9ad996048bde72d17ec9a6affa826b875b275e51ef749199b511eae0ab088,2025-02-25T18:03:46.410000 CVE-2025-13282,0,0,8816f151ba917e9d5bbb37cb0129ef1414590df87b7fb78e41fcd2f65f477d45,2025-11-17T04:15:54.543000 CVE-2025-13283,0,0,eced155aee36eefda98569c645a5444ec430e09731b47761af0a487bd33e25c2,2025-11-17T04:15:54.800000 @@ -300476,22 +300480,22 @@ CVE-2025-37837,0,0,a5ecf8624038d5eaf435f4efaf054197f987c106550cc823c866f9c750dd5 CVE-2025-37838,0,0,02ef4c0d325a26093ef8553fd174364f973193293f09ad3abc22b4b03005881a,2025-11-03T20:18:37.903000 CVE-2025-37839,0,0,f8b280d1c78024dd0c49ebba3228ec9b8d58b51936d3dc253ba6c1b0d8b8e655,2025-11-14T19:54:45.870000 CVE-2025-37840,0,0,c48802bdde2ad32059f7f606a6ee02c08d82b6bd69e566f48e39ca06117874c8,2025-11-14T19:35:23.787000 -CVE-2025-37841,0,0,f7513973dc96b9f92910fae87bcfbda57fc4fe494e2c4b091e79f94806e66af0,2025-11-03T20:18:38.270000 -CVE-2025-37842,0,0,1ab57b18a8cab3a9a7222aafc9c7893e96988a6565c6affa4260ac0216bdf653,2025-09-09T17:15:43.797000 -CVE-2025-37843,0,0,c08b0c0d26d673b4a59ac75827717dd146240ddd6e0833185d03f4ef538ea0fb,2025-05-12T17:32:52.810000 -CVE-2025-37844,0,0,671c1c0b6210bd069756961180e80435b5582ee1a760a895634677d2fa69835b,2025-11-03T20:18:38.387000 -CVE-2025-37845,0,0,ac5962d2fe4ddf1682714368250e16a410a589a227624056f220d8f0861d77ff,2025-05-12T17:32:52.810000 -CVE-2025-37846,0,0,cf8f31849f5b9930e14ba54e88a964ea4c7bd35e3cf74a0bfb8b447e70ac3b13,2025-05-12T17:32:52.810000 -CVE-2025-37847,0,0,1c544807b8f28b5e20225a5d1f63853ca5ec3c580c2d889b3e2ed9058b96fba6,2025-05-12T17:32:52.810000 -CVE-2025-37848,0,0,698363199914330280be3ad78acf020795739e108dbb1c9c5b07dfcdd3cab274,2025-05-12T17:32:52.810000 -CVE-2025-37849,0,0,1398d2106882fc7862d441a608d10bd76965fb3295a481da321611fb5ca3138e,2025-11-03T20:18:38.493000 +CVE-2025-37841,0,1,be0b3c11ab0f59ec987650b85e9d49c2d1cae6a45d4c16dd937c4665bbfadd8f,2025-11-17T12:50:14.970000 +CVE-2025-37842,0,1,3fe25931b475ad7f8cb738c3017226565597f7a2b46e439c4c1d53da7aa84909,2025-11-17T12:49:38.210000 +CVE-2025-37843,0,1,fb519b66616237627853715c1696982931cc88c22e123c7a5a136cf37faf8e19,2025-11-17T12:49:24.540000 +CVE-2025-37844,0,1,9c3148605066aefd8b010684c21f63311ebc1b5b7fc4d94683926bb2cbc691b7,2025-11-17T12:49:02.350000 +CVE-2025-37845,0,1,600571a05ae16bac747b026717380b3321ef8b6e4a1f4961c1e887ef40c1ee77,2025-11-17T12:48:18.933000 +CVE-2025-37846,0,1,d11c83493b6fa88112abd76cdd6bc50826864a0635b64bb434f6efb6c7b93fee,2025-11-17T12:54:50.310000 +CVE-2025-37847,0,1,f9720c75306702530d8c1aa4476177a75806684c11741b2a1d26d983d3febe4f,2025-11-17T12:54:40.887000 +CVE-2025-37848,0,1,1de08bef7bb9e26f11dbde05eeb802553b333b922ea33f793dc39816dc7e3b77,2025-11-17T12:54:28.873000 +CVE-2025-37849,0,1,875d1e01e8a8fca644af60ec91dedb6fb94d0166b53209e60fb4a075a6a41d3d,2025-11-17T12:54:15.827000 CVE-2025-3785,0,0,89cc8877db8659f0fd2f872198cd235ff3b7bf51f11623fff443d81a7f025d8f,2025-07-16T15:31:16.890000 -CVE-2025-37850,0,0,8be1dd9af748a90f12dc7cbe6a72d00af0eaa3a4a9c2c521a5e24d5e4bd892be,2025-11-03T20:18:38.590000 -CVE-2025-37851,0,0,8b25bd156a5e2ee0c00ace265b705c4465306c7a90a9481574c43e53572b42c1,2025-11-03T20:18:38.690000 -CVE-2025-37852,0,0,7b0dad3e05c4c8b2b79c15caa87ce8637baab384232c91e629bd07ef93ba859d,2025-11-03T20:18:38.787000 -CVE-2025-37853,0,0,9dfd304daee919df91c2c90d4ca7b0b96bb716263f075dc01b2cd728f1fac594,2025-05-12T17:32:52.810000 -CVE-2025-37854,0,0,ab214e90a027d5dd021921526781d2cdfed313b555c6abbc0dcf6e895aa11881,2025-11-03T20:18:38.880000 -CVE-2025-37855,0,0,fc25bfe4f86be1d0767c66b86aa773f47c5a98b490f176fa54dc68ce1283f010,2025-05-12T17:32:52.810000 +CVE-2025-37850,0,1,e07c492a21b09fa5076aee3bcc512b1ec5aae12563c8a4c3a5a3c2c8e277d0b5,2025-11-17T12:53:47.893000 +CVE-2025-37851,0,1,1890d993ba87e35e50c6e8d73a704fb0e1d5118a80ed42fd2ceec186160a9d1f,2025-11-17T12:52:55.803000 +CVE-2025-37852,0,1,bb11f9a467380a51dcecf45877628b79f9a7f6ef17e3efae4fd5f4aa0cbee604,2025-11-17T12:52:14.693000 +CVE-2025-37853,0,1,44e168a59ac14a5ba94fac39e654e518bd26c6c061491ba58d5d2a7b23500b8c,2025-11-17T12:51:46.010000 +CVE-2025-37854,0,1,9e4df3f1a2b0832e19e5aecf2f27f218978d24736b2a5b798041f93e2d34db1f,2025-11-17T12:51:35.040000 +CVE-2025-37855,0,1,a0cd3be2a3a110f8741cd137455102df585768b4ddc3fe95293480ef39c997d6,2025-11-17T12:51:05.050000 CVE-2025-37856,0,0,d5bf22d128a018464ddf59815183636358940c58769668dafd0a7eb6d34b8a99,2025-11-12T20:08:08.820000 CVE-2025-37857,0,0,35d1efd6e2d15080292c24ea662935f08f55c92ff6d87fff8c5187282dc597da,2025-11-12T20:08:56.363000 CVE-2025-37858,0,0,e32c0175fa625562a77ddb3cb41154b5576a57ada77b7262d7aad9dc501ade2b,2025-11-12T20:09:28.507000 @@ -300586,19 +300590,19 @@ CVE-2025-37938,0,0,4da7182bf9b17ef6a6a94b4d2af5210f9a334c59fb713e41e9051ca42da14 CVE-2025-37939,0,0,8922fc56316877861e38d1867cabe7cf4f4d72e6e7f044d76863ae9f0c31a15d,2025-05-21T20:25:16.407000 CVE-2025-3794,0,0,ccddd2d28b75046591a0874e469cc458433082700136987a6948a83f0e27c261,2025-05-12T17:32:32.760000 CVE-2025-37940,0,0,0c781382e36aa2bea03635f42eaeee40a0eb7aca8f47c143759f3f6a370cf2b2,2025-11-03T20:18:42.727000 -CVE-2025-37941,0,0,2061f6a7e6e87fab83d38483bd88d85d9d1e33f255584a8238521b1edcaf51af,2025-05-21T20:24:58.133000 -CVE-2025-37942,0,0,fe4b5b381120384da377d4560ae304d5fdc74486e236958559d7c3c1f689ae32,2025-05-21T20:24:58.133000 -CVE-2025-37943,0,0,9417365d2f12eeaa4c971fdf3973b3518bbcf0797502fab07492be6cf2a70043,2025-05-21T20:24:58.133000 -CVE-2025-37944,0,0,062d4fb603a2525c5d69f204c362a43dab2f78c4b378be45b4107cd29794a6a7,2025-05-21T20:24:58.133000 -CVE-2025-37945,0,0,ad6df655b0554e05eda7fcfa0f34d547e726f2fd0a27a0cf05cf00e4ad899941,2025-05-21T20:24:58.133000 -CVE-2025-37946,0,0,fc33d37eab48143c67bb25afd69246167d427e638ff97f568328eedba3126ddb,2025-05-21T20:24:58.133000 +CVE-2025-37941,0,1,46367045592735c0027398212148299d370ef744ff68b1b541c1b24b46adde96,2025-11-17T12:58:01.557000 +CVE-2025-37942,0,1,0fc88880cc2e1df1b939744b713ade0bf0abb1eca625035f66da908d57e398b6,2025-11-17T12:57:54.147000 +CVE-2025-37943,0,1,ffc9ac1d49a8865912f896184b592fc8d433e5bdcfaa6f3d70a87a2e4d4e1c3f,2025-11-17T12:57:46.727000 +CVE-2025-37944,0,1,4816c764c6bb01a3d36779a4832cc223428d29f31e15f3c500d87aaa3768fb0e,2025-11-17T12:57:39.790000 +CVE-2025-37945,0,1,5eee2e4b7a5873ed284f9cfa009851b27c2748ec210e096b99d3a89a315b07ed,2025-11-17T12:57:32.553000 +CVE-2025-37946,0,1,2c1ba1c998cb1c21297c5a1bd02210524e59945ed0022fa007d1a43cdb848bc8,2025-11-17T12:57:23.847000 CVE-2025-37947,0,0,43b42457e07adcf8edff0a2adf578084c7ea48f5f28f8a399162bba0b333d6d8,2025-11-03T20:18:42.830000 CVE-2025-37948,0,0,0583b27d76f44a5e9a7d811bbba59e90e566e139b772f9db8eb92925c9ecef87,2025-11-03T20:18:42.970000 CVE-2025-37949,0,0,f3258da186f01d32311acece34e43e553d4d70c1451a6cb5479fdf2c14fc0db5,2025-11-03T20:18:43.063000 CVE-2025-3795,0,0,cfb24d96a08fb1db282b05eac25f26880a35f952bb65bbd68b5a1ac5682f0bd6,2025-06-23T19:49:33.320000 -CVE-2025-37950,0,0,140e53747c4ca560ef56ea2183de957f1f4be81d20471a7ab223825f89750aef,2025-05-21T20:24:58.133000 +CVE-2025-37950,0,1,9863d0f024b02b6df33429bdd1a23d61fe56eda569b638662f9151bb1f4deda3,2025-11-17T12:57:15.860000 CVE-2025-37951,0,0,c76e2a6ab60e274c175cc6b5de303fa9ae77357a54ad666ec6e9e5f69cc63342,2025-11-03T20:18:43.160000 -CVE-2025-37952,0,0,3f27980eaff7d21f92da1427fd6d92b5ddd2da2c2c9125415777536d2b16ec3c,2025-05-21T20:24:58.133000 +CVE-2025-37952,0,1,6744271b01c43bd5f81d7270e8fffdc3f13933a692cc27cc0e0136ec1eb91f24,2025-11-17T12:57:06.880000 CVE-2025-37953,0,0,193d232ad420eaee9362fedb9fc079b19902da525fd6dac9f509788f6a63ff04,2025-11-03T20:18:43.253000 CVE-2025-37954,0,0,9dcc7e582d1adde24e94b99cf40e243a23ac89c4306aae9e8e97797882ffb8a9,2025-11-14T17:03:37.727000 CVE-2025-37955,0,0,67cca2e72d12068226d3325efd300e52629bdb0cbb7648a697117194b7c027a8,2025-11-14T17:03:24.610000 @@ -300659,13 +300663,13 @@ CVE-2025-38004,0,0,75cd399674283dfe148caef6946f2f2f9a4505b44f6cfc6afb28fd70f9036 CVE-2025-38005,0,0,4995e069aa97a8b9bff05f0faf060ba66bf66b5b73ae8ae59de8a98b2d8d3ed6,2025-11-03T20:18:45.550000 CVE-2025-38006,0,0,e6f4efe46d022120e2b9a1543d11ac3a8925a30c326cb6792af2bd6a9bfa6cc3,2025-11-14T16:42:01.430000 CVE-2025-38007,0,0,ac0f2fa15712e943882231a6e87f01886d3620ed06a7f34bf888a37e418d2d74,2025-11-03T20:18:45.650000 -CVE-2025-38008,0,0,751f54e80a1b2a8ed915b955280bc489bb5418534164c8612c59a40f9ab954b3,2025-06-18T13:46:52.973000 +CVE-2025-38008,0,1,a1ab064f7ef931d301cd8c5837d4e87e6ccbd6877411269654d34473b55f6b2b,2025-11-17T12:56:52.697000 CVE-2025-38009,0,0,69b080814149b2230211d6f9c837bde91078b732b22fe352bd26bb507565ebc1,2025-11-03T20:18:45.747000 CVE-2025-3801,0,0,6b6ff942433f61f662faba2077e387c7e727543b5aa46dfc81789b9bc5de9c1b,2025-04-21T14:23:45.950000 -CVE-2025-38010,0,0,1e2a068d95559dd526b8108cc78c54b4c438136e36f5a06a41fa2f8d85dbf0c5,2025-06-18T13:46:52.973000 -CVE-2025-38011,0,0,64e0a89e72b76963674fe8765c49831a42709dc5e3209c1c283f9dd24b6e8e92,2025-06-18T13:46:52.973000 -CVE-2025-38012,0,0,f1f2be1bd14446009a0ae0f26a8a78f4d236fbf33210acfd8b87525cdddfa6c7,2025-06-18T13:46:52.973000 -CVE-2025-38013,0,0,ccc44e14b001cbc894969dc432ac3e51d33763cd9ad4fe03aab9ba5b633e8b5c,2025-06-18T13:46:52.973000 +CVE-2025-38010,0,1,ba06135366b1bbe00fcf2716913935faaad7e92a4cbf70356bc644d663fd3d84,2025-11-17T12:56:38.940000 +CVE-2025-38011,0,1,e9b44c37874438cd266237ec00869a6dc2c883ff14709b3a8542559bed48d812,2025-11-17T12:56:18.870000 +CVE-2025-38012,0,1,05db83569716df2ff4d889d98a0096df65e4ef700332cb8f7f453f6358923a62,2025-11-17T12:56:07.253000 +CVE-2025-38013,0,1,e60e576af5452c5256ec326bc36d8dfc5e013e5a740dd12311236219e541f406,2025-11-17T12:55:54.260000 CVE-2025-38014,0,0,4a9dfc1fc41525afcba638bd1d23c5dbd44b7ea40dab46bf6c2d4c96ba17a90b,2025-11-14T19:02:05.763000 CVE-2025-38015,0,0,1bf873483e062cffc4ca6abf3816347dd6065dc92d4b96932db31fca23bcda47,2025-11-03T20:18:45.843000 CVE-2025-38016,0,0,2efd35b113735b10b1f79443fdaa4af8d5ac64980704e70e576c748562ddd471,2025-11-14T19:01:52.550000 @@ -302668,6 +302672,7 @@ CVE-2025-40817,0,0,19c840f6240be987636a86e7159fc16859daf960498974b12d09fc5fa2ec8 CVE-2025-4082,0,0,2331de0f0f3c2df94cb95fb87100a3873118a459b576d7f13c381d8a639987d0,2025-11-03T20:19:09.950000 CVE-2025-40827,0,0,28b5394b74f4ed6fc4eb56d8b0070fc768e26295844330830b2ae2ac253e2012,2025-11-12T16:19:12.850000 CVE-2025-4083,0,0,3eb9a45c98944b4c06ae68e5242a918f7d431d19edcd8ea88db77a81ab0ce119,2025-11-03T20:19:10.103000 +CVE-2025-40834,1,1,9b37ee1c1c4a5e4d378cf1c43245b6d8e801040823688aefa8e0a467fc1328cf,2025-11-17T12:15:44.290000 CVE-2025-40836,0,0,a5e24286b651f5e773047ff9e95004dcb08947be5243554e8878db1e4b92b65b,2025-10-02T17:59:39.937000 CVE-2025-40837,0,0,094b103832eb8429dc12ede27c4bcbc27a9b16dcb04a4f30ad83c9a3bdbe1d34,2025-10-02T17:59:04.630000 CVE-2025-40838,0,0,b8cf1fafba421207543e86101449c67f8cb4c3ea444bcdb904b83152ff06bccd,2025-10-02T17:58:17.850000 @@ -302710,6 +302715,7 @@ CVE-2025-40929,0,0,ed4048b4b8b61a3eb875301969a7824ac81d8630524e607ad1031c379db99 CVE-2025-4093,0,0,483c3656f6f3758fe23a6eaef73caf2f5169398580135a28dbabb9bde37c55c2,2025-11-03T20:19:10.840000 CVE-2025-40930,0,0,ac7b3f0b2b9f09e8f07e7f9f2431ec38fc482e765ad8356b7f53ff4bdc2d5d9c,2025-11-04T22:16:12.810000 CVE-2025-40933,0,0,75f71a9e4a5a8d790b3512b30c341bf377ae7a600bf3ebabdeb3dd46b5ac229b,2025-09-18T13:43:34.310000 +CVE-2025-40936,1,1,ad06f1e78d23b79fc7f66cb04eefe38bbdd2ace069d5e1f4c3f7ba900ab5d92a,2025-11-17T12:15:44.493000 CVE-2025-4094,0,0,9389e1771cac6e6188e563be99dd04161be542f25f3d0fbc50799f1a765f05af,2025-06-09T20:13:20.070000 CVE-2025-4095,0,0,cae8e1c6358f7e063ff4b8cb5365d4cbb9a8d43b36017ef3b6ccb02f60becbc1,2025-05-02T13:53:40.163000 CVE-2025-4096,0,0,1ae7df9d13281138e5184e1418611854220fd93b516e980bb023c9d2941d8afa,2025-05-28T20:07:18.943000 @@ -303316,7 +303322,7 @@ CVE-2025-4304,0,0,6f1b91465a276129a41d4871b4c0d6efc81ef52ea3bf5203539481683a02fc CVE-2025-4305,0,0,b58ac1af9a831c4de839666746ce16b1183ed9c0a0c34755aad0f80402b5eab4,2025-05-07T14:13:35.980000 CVE-2025-4306,0,0,47922af8efefcd58c9179aa2cf214e6d147a6315a6a644b76d8c7b05770f6f85,2025-05-13T19:21:25.277000 CVE-2025-4307,0,0,968e09c51eefce90b73255eef2ef9cf3254087c66b3b8e32ef5d5e2a02eea504,2025-05-13T19:21:10.793000 -CVE-2025-43079,0,1,ec3b014fd58881683e4492b194ea4b516c87389738b4ad3b10b45620e759273e,2025-11-17T10:15:59.227000 +CVE-2025-43079,0,0,ec3b014fd58881683e4492b194ea4b516c87389738b4ad3b10b45620e759273e,2025-11-17T10:15:59.227000 CVE-2025-4308,0,0,64773d5df5c47df8e574ab96bce10ce5262699f6cf6654bab1833a7a94d6b810,2025-05-13T19:20:51.480000 CVE-2025-4309,0,0,c529fb402aad41bda7512ef22da31e7ef2a24da2d6fcd8aca0ab1ae416949061,2025-05-09T13:37:21.743000 CVE-2025-4310,0,0,a8d911a03bf6b626b015394a304b3822e0dc653949f6cbaa3ff0211b84db0d22,2025-05-13T20:21:51.787000 @@ -304677,16 +304683,16 @@ CVE-2025-46355,0,0,5a064c3f281b9d23670e4671cbb55d7d2442f434945aa8aa1f5e2ef16f08e CVE-2025-46358,0,0,0be29f1609d552944cbdd8572b2fc83c559b739741e7ce400140f44aa3c6635f,2025-07-15T13:14:49.980000 CVE-2025-46359,0,0,1d522ab60ba4223a7555df3abbcfdc0406b0926f9ef6adaa633dffa73b9dcbaa,2025-08-06T16:42:31.303000 CVE-2025-4636,0,0,42769483161d9081ca44d7da54fb93931edabd656065d5921f77e2f9979ff65e,2025-05-30T16:31:03.107000 -CVE-2025-46362,0,0,07c6613cd04ba5fa97383065fb9b6faf57bfcbb89bf26f64108ddbdef1c5dd62,2025-11-14T16:42:03.187000 +CVE-2025-46362,0,1,8f7f27b05b621719fcdfe95be53a6a21951593f65821868776f13435e76e1578,2025-11-17T12:28:15.610000 CVE-2025-46363,0,0,6f4087ade5d2456af748c23f458de09406881630ff1532adfc549ae9fda677a5,2025-11-04T15:41:56.843000 CVE-2025-46364,0,0,0637096761df5c65411a02203a9331c1cef7c718e572436e814573186c5ad259,2025-11-07T17:53:19.650000 CVE-2025-46365,0,0,63fe3d527d3bbca6d773b17ba2f9f2369df3b5ee8c1cbfbf6d844d88a244c267,2025-11-07T17:59:01.870000 CVE-2025-46366,0,0,a2973785aa84a6a0970c519026e58d0487c980229bc3416dbf9d68f898d3021c,2025-11-07T17:59:22.823000 -CVE-2025-46367,0,0,3284efbd10d530ba20827a8a320a3d51bfc63c7e6ed211c07a0641dbf69cd65a,2025-11-14T16:42:03.187000 -CVE-2025-46368,0,0,9468ee1857b43f57540964fe0e854b9fa6e4864fccb6446ac2fe5c115de29e1c,2025-11-14T16:42:03.187000 -CVE-2025-46369,0,0,25b8e62964a5ce7a17588a02ff8f1ddf0d262252d888936a42bac6983da98040,2025-11-14T16:42:03.187000 +CVE-2025-46367,0,1,2be4ec999507cb6d095e608dec2963b17a4a7f64ea1434333f7ba10a44754e2c,2025-11-17T12:28:03.680000 +CVE-2025-46368,0,1,cb2a146753d960b1278b4fba090ce0c35b616e8466e7182cd2da876ba86b0e2c,2025-11-17T12:27:18.617000 +CVE-2025-46369,0,1,f59b0a321dc9fffca2b08fad57c97f674ba2fc7b3a8a312b5f38b8c7c6fdabc4,2025-11-17T12:26:51.163000 CVE-2025-4637,0,0,6a6f5a6b16c4a5dc9c7dfdefe827d1876d1a6cd89fb863be894c5faba3f21b65,2025-05-16T14:43:56.797000 -CVE-2025-46370,0,0,b196c9904347ab7ba0575c0045e17fa4cc09c7d63a84b1976a8bfebdfa610915,2025-11-14T16:42:03.187000 +CVE-2025-46370,0,1,fd69c0b8d2c1f653f8134026fc5c44f729d4aed28c859677d4d80c4fa70fe58b,2025-11-17T12:26:13.463000 CVE-2025-46374,0,0,0df9474f29e53d817d13f584af47eb0c12cf27caea3c45635f75daa159094ef3,2025-04-24T03:15:15.797000 CVE-2025-46375,0,0,c7cadd24d0c0ef6263c2e4f0e993c1b14e1cbac838119ad2f4f42dcfb3b1b113,2025-04-24T03:15:15.867000 CVE-2025-46376,0,0,4a4eb88dda9426fffae031e9cc4c1cb39c01ffb8fef76394b4584f59d8624ab6,2025-04-24T03:15:15.917000 @@ -304738,8 +304744,8 @@ CVE-2025-46422,0,0,c84e0c0dbf8a40359ff717e771cbec6df7cb6e39ab1b01074dc9e9e5eec73 CVE-2025-46423,0,0,ec777a85b7d24f7c42363f0f3e24e3bd878e21711fe95853ffc9fdf1b7fc466d,2025-11-07T01:12:47.610000 CVE-2025-46424,0,0,0c2d4828e2e962da52f3a76ab8b7fc821a93dd0314b9506d87b8bab6562481e8,2025-11-07T17:59:41.710000 CVE-2025-46425,0,0,62fe6b45978c596848f7d1a47bf59cfa769ef7a6d59c1914ebfef2198afa3418,2025-11-04T14:26:41.313000 -CVE-2025-46427,0,0,e128ceb677e682f2148a1e005e36b8379bbe5c016522ef309eb4d8867a5faec2,2025-11-14T16:42:30.503000 -CVE-2025-46428,0,0,bac4938052b90f650e3f483f3c5843e02b907443f91184cb101c75d257451db2,2025-11-14T16:42:30.503000 +CVE-2025-46427,0,1,ee235ea283cfff18d7426ede2992871caed124ba5b9e4bb97adb918be1b0733c,2025-11-17T12:32:13.890000 +CVE-2025-46428,0,1,7187c6b105b0907b860db8d7cab86f4cb67c8aaea9b188356f761853e46d7f7f,2025-11-17T12:32:02.347000 CVE-2025-4643,0,0,9bb4a34ed6aee5c995432e140a2afd85b92aa6c6b1abf40770400126292c49d7,2025-08-29T16:24:29.730000 CVE-2025-46430,0,0,1440894ba1abc7ed304e4902cb2c4938b14906b8b0b1f1ad7e56d944c04beae8,2025-11-12T19:05:22.243000 CVE-2025-46432,0,0,a236013c45619f821bf7946151136e3004fb9398b61130c70d8dc542bb4b2178,2025-05-16T14:51:02.440000 @@ -311327,10 +311333,10 @@ CVE-2025-5677,0,0,364b4a61489a27818eacb60d1e1f6c17d4c2d09e9d81b672d48b3e04da11eb CVE-2025-5678,0,0,38a46c28ab47d4075d68a853baf022d7d7f4fbcb5807bb3d7524af93d22f1b7c,2025-07-17T13:31:56.730000 CVE-2025-5679,0,0,bcb37143583af8e3d2aa317460750c3d95c2b1964b6469460c1abdd2990630c3,2025-11-12T16:47:50.573000 CVE-2025-56795,0,0,4f235428c4f13cab56fead7206e527ce2bd2f1b7f61ea3c6ee9181d03cc1b667,2025-10-16T15:42:33.617000 -CVE-2025-56799,0,0,bb2a78be3ec0c90f55be67120c09b3d143f9f07d828359a4d4acfade8b275fbd,2025-10-22T14:15:50.863000 +CVE-2025-56799,0,1,1c552af2ee51dbfed2c30c69db697661bc0521a8e6da16dcfaa16cff94af3fc6,2025-11-17T12:46:33.180000 CVE-2025-5680,0,0,60e74dce384e9df9ef7e4fed15b7fa36db31d532422ad8630b3c1f972e046f64,2025-11-12T17:07:47.567000 -CVE-2025-56800,0,0,6ba04ee0cd4ea0f43140fd646f44ebc07b306afef806835e61b016c87c6fd72f,2025-10-22T14:15:51.080000 -CVE-2025-56801,0,0,f5ec7fd699009a8d845f70675777a775c46b7e16e0301bb9da667273a14c1edb,2025-10-22T14:15:51.277000 +CVE-2025-56800,0,1,7b8a991b7bd7f3b9f1764069f377f7f3526f03072cb6c1c8dc0e9ed536844382,2025-11-17T12:46:26.313000 +CVE-2025-56801,0,1,7b4099e231efdf92129ccdacf5ea710d40464d34b77b6f92fabb73f8ce5cde2c,2025-11-17T12:46:15.277000 CVE-2025-56802,0,0,617a19faa1c9a024c5ca6443e38936dde3d4e3f2f1d35eb5ba8f32b9f8f2c93c,2025-10-22T14:15:51.480000 CVE-2025-56803,0,0,e204236e38e23de0500b842169e0fc177fb410f193e1aaf81d3d07a4b150df22,2025-09-26T14:02:46.583000 CVE-2025-56807,0,0,56633ac619e48bb371eff8b20a445e80e37bcd6ac708d0d28634e7a1e8a99045,2025-10-16T16:32:12.737000 @@ -312662,8 +312668,8 @@ CVE-2025-59058,0,0,c6438753a2373725f985d3d276092c8f07a478b768de0bcfe60ee3de58828 CVE-2025-5906,0,0,2f5cdcf2b30e524ee9cb93f26097a5ce4b137e574a18d9f4978bab9694e9cdbd,2025-06-13T19:51:57.270000 CVE-2025-5907,0,0,61b0370b0148abdbc066a02dd0ec6b60b30cadf66ae3fb080a88892a459c879e,2025-06-16T17:22:27.860000 CVE-2025-5908,0,0,c3bdac397497f976939b525dc79f8291172dbf44dec99bcb5b91f199e1f0d3dd,2025-06-16T17:21:32.227000 -CVE-2025-59088,0,1,607b3baa0e8f9126029c8a36f6db1d131b9f88833c4d5382567b15eb6b361c04,2025-11-17T09:15:44.420000 -CVE-2025-59089,0,1,4d1de6bbb8d91ed3ea174c22160cec7d962caff97bb8596c81096c8da5c28282,2025-11-17T09:15:44.610000 +CVE-2025-59088,0,0,607b3baa0e8f9126029c8a36f6db1d131b9f88833c4d5382567b15eb6b361c04,2025-11-17T09:15:44.420000 +CVE-2025-59089,0,0,4d1de6bbb8d91ed3ea174c22160cec7d962caff97bb8596c81096c8da5c28282,2025-11-17T09:15:44.610000 CVE-2025-5909,0,0,f82bb01110c9ead7795cebb5ea4e7190d1b79e236ac8da87e1f6c74c57a9946d,2025-06-16T17:14:56.647000 CVE-2025-5910,0,0,df84a90bc6998145e69834ed2e1f65f3a667ceade3e8f265d705351c29298f3e,2025-06-16T17:13:58.870000 CVE-2025-5911,0,0,94c16ab86f5bd868bbe2861c5600211dfebdf0b057e4a91c0d013d85ef19c840,2025-06-16T17:06:20.300000 @@ -313529,7 +313535,7 @@ CVE-2025-60453,0,0,57d1a716a770b56a9e82d0a6ac069478931cd6309c1e9e3c38ea6fc537759 CVE-2025-60454,0,0,6cf4692a4b125d26bcc270487706fddefff075b4fab4b81623755bd03ce21982,2025-10-07T15:09:38.843000 CVE-2025-6046,0,0,eff19aab09235c846a666c221db7d00dce7ee0674b5586b5fd3f227d004712ae,2025-10-07T23:15:33.923000 CVE-2025-6050,0,0,3bcde1a8155a4512306f02b41d8e568aee84c2ab0f4880ff0cc4e34bfadce3fc,2025-07-30T19:09:37.570000 -CVE-2025-60500,0,0,994d70b071f0fcd67b0d8261dfa7f181a85c321289fb83c7d19f24465ba95f5e,2025-10-21T19:31:25.450000 +CVE-2025-60500,0,1,64d1fdc7387624658c0b55d83385ebdf04567f2be73e99c23f04afd883eeeed4,2025-11-17T12:46:55.307000 CVE-2025-60503,0,0,078b3feb98774430b8660c0a63d485d36da0b85f0b75c8f79bc1ca988527876d,2025-11-04T15:41:31.450000 CVE-2025-60506,0,0,205884deca1f2808cae3ed5ec315f63d389f9c10d632a8bade6a53e7af45683a,2025-10-22T15:16:01.020000 CVE-2025-60507,0,0,47a29c114dbcab03b2fd6e441d0b13229c9d4f8448ae99efca5a66767cb9e9be,2025-10-21T19:31:25.450000 @@ -313615,12 +313621,12 @@ CVE-2025-60693,0,0,1171839d8f317fa14dd85939c30f53d7a1ca780072e31b56d3ba58f854609 CVE-2025-60694,0,0,f5b22132d2469c7f7d87454b028216a852b73e7265a5045c9dcabfa60218376e,2025-11-14T16:42:03.187000 CVE-2025-60695,0,0,43b598c15d2a65da72c301ed8f5304f46a00452ac6a4743963d0310631daf6f4,2025-11-14T16:42:03.187000 CVE-2025-60696,0,0,f2b5bd0d7edb11847bbc09e0adcf13a633109ad2ee90f36055235c7927eeb52b,2025-11-14T16:42:03.187000 -CVE-2025-60697,0,0,d8a8954e31be4bf2a865081db930aec04edfe98de5f4a84ec84bdb90f176973f,2025-11-14T16:42:03.187000 -CVE-2025-60698,0,0,ff9b31dce9096e8c45be4df2066c4dee71b0211b4b47a1bb204e26fcdf118b24,2025-11-14T16:42:03.187000 +CVE-2025-60697,0,1,6a47c4ac2334415a32290afbf5661522e68a78d239f3fe64b514cfa687deb4c3,2025-11-17T12:29:07.143000 +CVE-2025-60698,0,1,ab622c3feaa7c8aba55acac5ea29b9d35940a8399e37fa6418dae193cce2f0f2,2025-11-17T12:28:54.113000 CVE-2025-60699,0,0,a2c2323384d477c6902a617cbcf39b6253460fd369da3d695fd787699c5bcc84,2025-11-14T17:16:09.640000 CVE-2025-6070,0,0,c5bf4414dfa4d281aa3a990feec25cc21fddd34f58ddd67c6eaf8ae460160cc5,2025-06-16T12:32:18.840000 -CVE-2025-60700,0,0,51f29c313464ad494d4ce7b10cbb5e7360d53ee6a9c271e3c45b910ca4b37012,2025-11-14T17:16:12.173000 -CVE-2025-60701,0,0,514f55019ecd1258b0919d157bcafccc947a8430ffffc130de137f1601f92319,2025-11-14T17:16:13.770000 +CVE-2025-60700,0,1,d030ffffb84a5d859aef1574a896724df71a4a0cb6765c00237b65a300240c62,2025-11-17T12:28:40.547000 +CVE-2025-60701,0,1,5e54480458675cc55df08f3c70c945cdf735ba24beb97dce3a8b070faf528b1d,2025-11-17T12:28:31.610000 CVE-2025-60702,0,0,46cb06676e2a34501d98e8d8ec78412dda517902c49ade10fecc71146371e7a8,2025-11-14T17:16:14.210000 CVE-2025-60703,0,0,65f45e572898e6e7778e5b292062dd77e826265ebe0014a063873fa5c8005758,2025-11-12T16:19:12.850000 CVE-2025-60704,0,0,dbfdf5d7749175f9c22114c58dd932a17a193f3461c343b403577e596468e0b1,2025-11-12T16:19:12.850000 @@ -317970,7 +317976,7 @@ CVE-2025-9474,0,0,04e5519a4c5523010043101a7345e8cdc9c1778ec00e2494e9238cad5fa163 CVE-2025-9475,0,0,d81bce53b9eafad111576c30a99b748ca4f69d3382e9948270c28dbb4c8d04f3,2025-09-02T18:06:08.630000 CVE-2025-9476,0,0,e2d7890bec1b1972ac0d8d8fed777932960f83d44b4c7d1e2cd5d3046efeabe2,2025-09-02T18:06:17.300000 CVE-2025-9478,0,0,3cd9228b8e196f5139cc969df82a935cdfb3e0f5251e9a67f34e2067398ddfc6,2025-09-02T18:09:31.373000 -CVE-2025-9479,0,0,3e3ef7a05fe92a4ee4d41fe3eb3f66593ce019e0952d3cafb9dbd30b074f18bc,2025-11-14T16:42:03.187000 +CVE-2025-9479,0,1,7c689bea161f457bb5fb719bba05db001a1fec3044b785a25df084a708acb135,2025-11-17T12:18:37.257000 CVE-2025-9481,0,0,5abc38a7cffa98e974b5eb5fd13ac4478c630fd03c1fd1898e2fbae8c05f77e0,2025-09-02T18:08:19.850000 CVE-2025-9482,0,0,535477c30a327cbc48ed81aeb7bb9988b98089411c7e2f74d03e32c736558653,2025-09-02T18:08:10.657000 CVE-2025-9483,0,0,b36c25b1326ef26fd45e2662dcd0a600d01e5bc1394555b1f6b90016808e3954,2025-09-02T18:08:02.610000