From d9578a6b38f2aaa013836d9be1144a894e52436c Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Mon, 10 Nov 2025 23:04:07 +0000 Subject: [PATCH] Auto-Update: 2025-11-10T23:00:11.918694+00:00 --- CVE-2022/CVE-2022-498xx/CVE-2022-49833.json | 90 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49834.json | 161 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49835.json | 161 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49836.json | 143 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49838.json | 114 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49841.json | 143 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49847.json | 90 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49849.json | 102 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49851.json | 161 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49858.json | 90 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49859.json | 102 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49868.json | 102 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49870.json | 162 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49872.json | 174 ++++- CVE-2022/CVE-2022-498xx/CVE-2022-49877.json | 133 +++- CVE-2022/CVE-2022-498xx/CVE-2022-49879.json | 120 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49882.json | 85 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49883.json | 85 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49884.json | 85 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49886.json | 85 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49893.json | 85 ++- CVE-2022/CVE-2022-498xx/CVE-2022-49898.json | 97 ++- CVE-2022/CVE-2022-499xx/CVE-2022-49900.json | 109 ++- CVE-2025/CVE-2025-109xx/CVE-2025-10966.json | 27 +- CVE-2025/CVE-2025-124xx/CVE-2025-12429.json | 27 +- CVE-2025/CVE-2025-124xx/CVE-2025-12432.json | 29 +- CVE-2025/CVE-2025-124xx/CVE-2025-12433.json | 27 +- CVE-2025/CVE-2025-124xx/CVE-2025-12434.json | 29 +- CVE-2025/CVE-2025-124xx/CVE-2025-12435.json | 43 +- CVE-2025/CVE-2025-124xx/CVE-2025-12436.json | 39 +- CVE-2025/CVE-2025-124xx/CVE-2025-12438.json | 29 +- CVE-2025/CVE-2025-124xx/CVE-2025-12439.json | 27 +- CVE-2025/CVE-2025-124xx/CVE-2025-12440.json | 39 +- CVE-2025/CVE-2025-124xx/CVE-2025-12441.json | 29 +- CVE-2025/CVE-2025-124xx/CVE-2025-12443.json | 29 +- CVE-2025/CVE-2025-124xx/CVE-2025-12444.json | 39 +- CVE-2025/CVE-2025-124xx/CVE-2025-12446.json | 39 +- CVE-2025/CVE-2025-127xx/CVE-2025-12725.json | 29 +- CVE-2025/CVE-2025-127xx/CVE-2025-12726.json | 39 +- CVE-2025/CVE-2025-127xx/CVE-2025-12728.json | 39 +- CVE-2025/CVE-2025-127xx/CVE-2025-12729.json | 39 +- CVE-2025/CVE-2025-129xx/CVE-2025-12930.json | 10 +- CVE-2025/CVE-2025-279xx/CVE-2025-27917.json | 34 +- CVE-2025/CVE-2025-379xx/CVE-2025-37920.json | 109 ++- CVE-2025/CVE-2025-379xx/CVE-2025-37921.json | 147 +++- CVE-2025/CVE-2025-379xx/CVE-2025-37922.json | 114 ++- CVE-2025/CVE-2025-480xx/CVE-2025-48055.json | 56 ++ CVE-2025/CVE-2025-480xx/CVE-2025-48065.json | 56 ++ CVE-2025/CVE-2025-488xx/CVE-2025-48878.json | 56 ++ CVE-2025/CVE-2025-491xx/CVE-2025-49145.json | 56 ++ CVE-2025/CVE-2025-557xx/CVE-2025-55752.json | 10 +- CVE-2025/CVE-2025-622xx/CVE-2025-62254.json | 760 ++++++++++++++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62256.json | 785 +++++++++++++++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62257.json | 91 ++- CVE-2025/CVE-2025-622xx/CVE-2025-62258.json | 280 ++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62260.json | 280 ++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62261.json | 275 ++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62262.json | 260 ++++++- CVE-2025/CVE-2025-622xx/CVE-2025-62263.json | 260 ++++++- CVE-2025/CVE-2025-627xx/CVE-2025-62780.json | 60 ++ CVE-2025/CVE-2025-632xx/CVE-2025-63296.json | 25 + CVE-2025/CVE-2025-633xx/CVE-2025-63397.json | 33 + CVE-2025/CVE-2025-634xx/CVE-2025-63420.json | 4 +- CVE-2025/CVE-2025-636xx/CVE-2025-63617.json | 25 + CVE-2025/CVE-2025-641xx/CVE-2025-64167.json | 56 ++ CVE-2025/CVE-2025-641xx/CVE-2025-64181.json | 98 +++ CVE-2025/CVE-2025-641xx/CVE-2025-64182.json | 82 ++ CVE-2025/CVE-2025-641xx/CVE-2025-64183.json | 82 ++ CVE-2025/CVE-2025-644xx/CVE-2025-64484.json | 72 ++ CVE-2025/CVE-2025-645xx/CVE-2025-64501.json | 60 ++ CVE-2025/CVE-2025-645xx/CVE-2025-64502.json | 86 +++ CVE-2025/CVE-2025-645xx/CVE-2025-64504.json | 76 ++ CVE-2025/CVE-2025-645xx/CVE-2025-64507.json | 86 +++ CVE-2025/CVE-2025-645xx/CVE-2025-64508.json | 84 +++ CVE-2025/CVE-2025-645xx/CVE-2025-64509.json | 56 ++ CVE-2025/CVE-2025-645xx/CVE-2025-64512.json | 64 ++ CVE-2025/CVE-2025-645xx/CVE-2025-64513.json | 90 +++ CVE-2025/CVE-2025-645xx/CVE-2025-64518.json | 72 ++ README.md | 107 ++- _state.csv | 350 +++++---- 80 files changed, 8106 insertions(+), 478 deletions(-) create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48055.json create mode 100644 CVE-2025/CVE-2025-480xx/CVE-2025-48065.json create mode 100644 CVE-2025/CVE-2025-488xx/CVE-2025-48878.json create mode 100644 CVE-2025/CVE-2025-491xx/CVE-2025-49145.json create mode 100644 CVE-2025/CVE-2025-627xx/CVE-2025-62780.json create mode 100644 CVE-2025/CVE-2025-632xx/CVE-2025-63296.json create mode 100644 CVE-2025/CVE-2025-633xx/CVE-2025-63397.json create mode 100644 CVE-2025/CVE-2025-636xx/CVE-2025-63617.json create mode 100644 CVE-2025/CVE-2025-641xx/CVE-2025-64167.json create mode 100644 CVE-2025/CVE-2025-641xx/CVE-2025-64181.json create mode 100644 CVE-2025/CVE-2025-641xx/CVE-2025-64182.json create mode 100644 CVE-2025/CVE-2025-641xx/CVE-2025-64183.json create mode 100644 CVE-2025/CVE-2025-644xx/CVE-2025-64484.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64501.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64502.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64504.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64507.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64508.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64509.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64512.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64513.json create mode 100644 CVE-2025/CVE-2025-645xx/CVE-2025-64518.json diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49833.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49833.json index b0b6452379e..4bb9d9909ba 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49833.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49833.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49833", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.780", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:13:04.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,95 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: zoned: clonar informaci\u00f3n de dispositivo zonificado al clonar un dispositivo. Al clonar un btrfs_device, no se clona la estructura btrfs_zoned_device_info asociada al dispositivo en el caso de un sistema de archivos zonificado. Posteriormente, esto provoca una desreferencia de puntero nulo al acceder a zone_info del dispositivo, por ejemplo, al activar una zona. Esto fue descubierto por el caso de prueba btrfs/161 de fstests." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "2B2D7CE8-B82B-4708-B31D-3A52B06A5630" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/21e61ec6d0bb786818490e926aa9aeb4de95ad0d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad88cabcec942c033f980cd1e28d56ecdaf5f3b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49834.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49834.json index 91bf0a2f9f0..d9ee6a8d477 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49834.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49834.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49834", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.873", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:12:47.570", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,178 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: nilfs2: corrige el error de use-after-free de ns_writer al volver a montar Si un sistema de archivos nilfs2 se degrada a solo lectura debido a la corrupci\u00f3n de metadatos en el disco y se vuelve a montar en modo de lectura/escritura, o si se realiza un remontaje de solo lectura de emergencia, se puede desconectar un escritor de registros y sincronizar el sistema de archivos al mismo tiempo. En estos casos, el use-after-free del escritor de registros (en adelante nilfs->ns_writer) puede ocurrir como se muestra en el siguiente escenario: Tarea1 Tarea2 -------------------------------- ---------------------------------- nilfs_construct_segment nilfs_segctor_sync init_wait init_waitqueue_entry add_wait_queue schedule nilfs_remount (caso de remontaje de R/W) nilfs_attach_log_writer nilfs_detach_log_writer nilfs_segctor_destroy kfree finish_wait _raw_spin_lock_irqsave __raw_spin_lock_irqsave do_raw_spin_lock debug_spin_lock_before <-- use-after-free Mientras la Tarea1 est\u00e1 en reposo, nilfs->ns_writer es liberado por la Tarea2. Despu\u00e9s de que la Tarea1 se despierta, la Tarea1 accede a nilfs->ns_writer que ya est\u00e1 liberado. Este diagrama de escenario se basa en la publicaci\u00f3n de Shigeru Yoshida [1]. Este parche corrige el problema al no desvincular nilfs->ns_writer al volver a montar, lo que evita que se produzca esta ejecuci\u00f3n UAF. Adem\u00e1s de este cambio, este parche tambi\u00e9n inserta algunas comprobaciones de solo lectura necesarias con la instancia de superbloque, donde solo se usaba el puntero ns_writer para comprobar si el sistema de archivos era de solo lectura." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "65416FEB-3A76-4DA9-A96A-1479EC77AFB6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "424802D2-E9E7-48A9-AD6F-DF2227B3D83A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "A5C69A12-68E2-400E-9A5A-375A673C8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "172AC75C-0949-4468-9C58-64E2893EF0CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/39a3ed68270b079c6b874d4e4727a512b9b4882c", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4feedde5486c07ea79787839153a71ca71329c7d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8cccf05fe857a18ee26e20d11a8455a73ffd4efd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9b162e81045266a2d5b44df9dffdf05c54de9cca", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/afbd1188382a75f6cfe22c0b68533f7f9664f182", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b152300d5a1ba4258dacf9916bff20e6a8c7603b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b2fbf10040216ef5ee270773755fc2f5da65b749", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b4736ab5542112fe0a40f140a0a0b072954f34da", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49835.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49835.json index 59571ee8f9b..1d05e7b1237 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49835.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49835.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49835", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:06.980", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:12:55.587", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,178 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: hda: se corrige una posible fuga de memoria en 'add_widget_node'. 'kobject_add' podr\u00eda asignar memoria a 'kobject->name' cuando devuelve un error. En esta funci\u00f3n, si la llamada a 'kobject_add' falla, no se libera kobject. Por lo tanto, se llama a 'kobject_put' para reciclar recursos." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "65416FEB-3A76-4DA9-A96A-1479EC77AFB6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "424802D2-E9E7-48A9-AD6F-DF2227B3D83A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "A5C69A12-68E2-400E-9A5A-375A673C8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "172AC75C-0949-4468-9C58-64E2893EF0CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/02dea987ec1cac712c78e75d224ceb9bb73519ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3a79f9568de08657fcdbc41d6fc4c0ca145a7a2b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/455d99bd6baf19688048b6d42d9fa74eae27f93b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7140d7aaf93da6a665b454f91bb4dc6b1de218bd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/90b7d055e2b5f39429f9a9e3815b48a48530ef28", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9a5523f72bd2b0d66eef3d58810c6eb7b5ffc143", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/b688a3ec235222d9a84e43a48a6f31acb95baf2d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bb0ac8d5e541224f599bc8e8f31a313faa4bf7b7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49836.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49836.json index 355dd81febc..8fd378055fa 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49836.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49836.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49836", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:07.087", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:13:15.993", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,156 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: siox: Se corrige una posible fuga de memoria en siox_device_add(). Si device_register() devuelve un error en siox_device_add(), se debe liberar el nombre asignado por dev_set_name(). Como se indica en el comentario de device_register(), se debe usar put_device() para liberar la referencia en la ruta de error. Para solucionar esto, se debe llamar a put_device(); de esta manera, se puede liberar el nombre en kobject_cleanup() y sdevice se libera en siox_device_release(); config\u00farelo como nulo en la ruta de error." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.16", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "0EB4A88B-8032-4846-8973-0666BAC089F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a5da069603ecc3d7aa09167450235462adaa295", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5d03c2911c529ea4d6ebfec53425f1091e8d402b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/6e63153db50059fb78b8a8447b132664887d24e3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a4b5423f88a17a36550ae8c16c46779b1ee42f4b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d9c31e728843259209fb530c59995e4fe262699f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f9fe7ba4ea5b24ffdf8e125f660aca3ba4a147fb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49838.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49838.json index 9faaee54d11..b6bc16c21ba 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49838.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49838.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49838", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:07.290", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:13:37.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: sctp: borrar out_curr si se eliminan todos los fragmentos del mensaje actual. Zhen Chen inform\u00f3 de un fallo: corrupci\u00f3n de list_del, ffffa035ddf01c18->next es NULL ADVERTENCIA: CPU: 1 PID: 250682 en lib/list_debug.c:49 __list_del_entry_valid+0x59/0xe0 RIP: 0010:__list_del_entry_valid+0x59/0xe0 Rastreo de llamadas: sctp_sched_dequeue_common+0x17/0x70 [sctp] sctp_sched_fcfs_dequeue+0x37/0x50 [sctp] sctp_outq_flush_data+0x85/0x360 [sctp] sctp_outq_uncork+0x77/0xa0 [sctp] sctp_cmd_interpreter.constprop.0+0x164/0x1450 [sctp] sctp_side_effects+0x37/0xe0 [sctp] sctp_do_sm+0xd0/0x230 [sctp] sctp_primitive_SEND+0x2f/0x40 [sctp] sctp_sendmsg_to_asoc+0x3fa/0x5c0 [sctp] sctp_sendmsg+0x3d5/0x440 [sctp] sock_sendmsg+0x5b/0x70 y en sctp_sched_fcfs_dequeue() quit\u00f3 de la cola un fragmento del flujo out_curr outq mientras este outq estaba vac\u00edo. Normalmente, stream->out_curr debe establecerse en NULL una vez que se hayan desencolado todos los fragmentos del mensaje actual, como se puede ver en sctp_sched_dequeue_done(). Sin embargo, en sctp_prsctp_prune_unsent(), dado que no es una desencola adecuada, no se llama a sctp_sched_dequeue_done() para realizar esto. Este parche soluciona este problema simplemente estableciendo out_curr en NULL cuando se desencola el \u00faltimo fragmento del mensaje actual del flujo out_curr en sctp_prsctp_prune_unsent()." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "FD21D167-0ED1-4E15-9045-D5398B716044" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.81", + "matchCriteriaId": "899FBA32-27B2-4660-BC94-C43ED4349EB5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/2ea600b598dd3e061854dd4dd5b4c815397dfcea", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2f201ae14ae0f91dbf1cffea7bb1e29e81d4d108", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3eff34e01062ec08fbb45ce2baaaa644550be821", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e27458b18b35caee4b27b37a4a9c503b93cae5cc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49841.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49841.json index 4ebbeae2030..009c611133e 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49841.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49841.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49841", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:07.600", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:14:12.010", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,156 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: serial: imx: Agregar el gancho .thaw_noirq faltante. La siguiente advertencia se ve con una instancia UART que no es de consola cuando el sistema hiberna. [ 37.371969] ------------[ cortar aqu\u00ed ]------------ [ 37.376599] uart3_root_clk ya est\u00e1 deshabilitado [ 37.380810] ADVERTENCIA: CPU: 0 PID: 296 en drivers/clk/clk.c:952 clk_core_disable+0xa4/0xb0 ... [ 37.506986] Rastreo de llamadas: [ 37.509432] clk_core_disable+0xa4/0xb0 [ 37.513270] clk_disable+0x34/0x50 [ 37.516672] imx_uart_thaw+0x38/0x5c [ 37.520250] platform_pm_thaw+0x30/0x6c [ 37.524089] dpm_run_callback.constprop.0+0x3c/0xd4 [ 37.528972] device_resume+0x7c/0x160 [ 37.532633] dpm_resume+0xe8/0x230 [ 37.536036] hibernation_snapshot+0x288/0x430 [ 37.540397] hibernate+0x10c/0x2e0 [ 37.543798] state_store+0xc4/0xd0 [ 37.547203] kobj_attr_store+0x1c/0x30 [ 37.550953] sysfs_kf_write+0x48/0x60 [ 37.554619] kernfs_fop_write_iter+0x118/0x1ac [ 37.559063] new_sync_write+0xe8/0x184 [ 37.562812] vfs_write+0x230/0x290 [ 37.566214] ksys_write+0x68/0xf4 [ 37.569529] __arm64_sys_write+0x20/0x2c [ 37.573452] invoke_syscall.constprop.0+0x50/0xf0 [ 37.578156] do_el0_svc+0x11c/0x150 [ 37.581648] el0_svc+0x30/0x140 [ 37.584792] el0t_64_sync_handler+0xe8/0xf0 [ 37.588976] el0t_64_sync+0x1a0/0x1a4 [ 37.592639] ---[ end trace 56e22eec54676d75 ] Al hibernar, el n\u00facleo pm llama a los ganchos relacionados en secuencia como: .freeze .freeze_noirq .thaw_noirq .thaw Si el gancho .thaw_noirq est\u00e1 ausente, el reloj se deshabilitar\u00e1 en una llamada desequilibrada que genera la advertencia anterior. imx_uart_freeze() clk_prepare_enable() imx_uart_suspend_noirq() clk_disable() imx_uart_thaw clk_disable_unprepare() Agregar el gancho .thaw_noirq faltante como imx_uart_resume_noirq() corregir\u00e1 la secuencia de llamada como se muestra a continuaci\u00f3n y, por lo tanto, solucionar\u00e1 la advertencia. imx_uart_freeze() clk_prepare_enable() imx_uart_suspend_noirq() clk_disable() imx_uart_resume_noirq() clk_enable() imx_uart_thaw clk_disable_unprepare()" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.16", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "0EB4A88B-8032-4846-8973-0666BAC089F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.156", + "matchCriteriaId": "E2152F3D-E6D3-405D-B0BE-911B8B6E2EE6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.80", + "matchCriteriaId": "51BBEF3B-79F5-4D4C-ADBA-F34DA0E2465C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.10", + "matchCriteriaId": "64F9ADD1-3ADB-4D66-A00F-4A83010B05F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc5:*:*:*:*:*:*", + "matchCriteriaId": "35B26BE4-43A6-4A36-A7F6-5B3F572D9186" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a3160f4ffc70ee4bfa1521f698dace06e6091fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4561d8008a467cb05ac632a215391d6b787f40aa", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/476b09e07bd519ec7ba5941a6a6f9a02256dbb21", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ae22294e213a402a70fa1731538367d1b758ffe7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e3f9d87d6f0732827c443bd1474df21c2fad704b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/e401312ca6e180ee1bd65f6a766e99dd40aa95e7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49847.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49847.json index 7634b0f429d..df3d84f2ac7 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49847.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49847.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49847", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:08.223", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:14:36.097", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,95 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: ethernet: ti: am65-cpsw: Se corrige el error de segmentaci\u00f3n en la descarga del m\u00f3dulo. Mueve la llamada am65_cpsw_nuss_phylink_cleanup() despu\u00e9s de am65_cpsw_nuss_cleanup_ndev() para que phylink siga siendo v\u00e1lido para evitar el siguiente error de segmentaci\u00f3n en la eliminaci\u00f3n del m\u00f3dulo cuando el primer enlace esclavo est\u00e1 activo. [ 31.652944] No se puede manejar la solicitud de paginaci\u00f3n del n\u00facleo en la direcci\u00f3n virtual 00040008000005f4 [ 31.684627] Informaci\u00f3n de aborto de memoria: [ 31.687446] ESR = 0x0000000096000004 [ 31.704614] EC = 0x25: DABT (EL actual), IL = 32 bits [ 31.720663] SET = 0, FnV = 0 [ 31.723729] EA = 0, S1PTW = 0 [ 31.740617] FSC = 0x04: error de traducci\u00f3n de nivel 0 [ 31.756624] Informaci\u00f3n de aborto de datos: [ 31.759508] ISV = 0, ISS = 0x00000004 [ 31.776705] CM = 0, WnR = 0 [ 31.779695] [00040008000005f4] direcci\u00f3n entre los rangos de direcciones del usuario y del n\u00facleo [ 31.808644] Error interno: Oops: 0000000096000004 [#1] PREEMPT SMP [ 31.814928] Modules linked in: wlcore_sdio wl18xx wlcore mac80211 libarc4 cfg80211 rfkill crct10dif_ce phy_gmii_sel ti_am65_cpsw_nuss(-) sch_fq_codel ipv6 [ 31.828776] CPU: 0 PID: 1026 Comm: modprobe Not tainted 6.1.0-rc2-00012-gfabfcf7dafdb-dirty #160 [ 31.837547] Hardware name: Texas Instruments AM625 (DT) [ 31.842760] pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 31.849709] pc : phy_stop+0x18/0xf8 [ 31.853202] lr : phylink_stop+0x38/0xf8 [ 31.857031] sp : ffff80000a0839f0 [ 31.860335] x29: ffff80000a0839f0 x28: ffff000000de1c80 x27: 0000000000000000 [ 31.867462] x26: 0000000000000000 x25: 0000000000000000 x24: ffff80000a083b98 [ 31.874589] x23: 0000000000000800 x22: 0000000000000001 x21: ffff000001bfba90 [ 31.881715] x20: ffff0000015ee000 x19: 0004000800000200 x18: 0000000000000000 [ 31.888842] x17: ffff800076c45000 x16: ffff800008004000 x15: 000058e39660b106 [ 31.895969] x14: 0000000000000144 x13: 0000000000000144 x12: 0000000000000000 [ 31.903095] x11: 000000000000275f x10: 00000000000009e0 x9 : ffff80000a0837d0 [ 31.910222] x8 : ffff000000de26c0 x7 : ffff00007fbd6540 x6 : ffff00007fbd64c0 [ 31.917349] x5 : ffff00007fbd0b10 x4 : ffff00007fbd0b10 x3 : ffff00007fbd3920 [ 31.924476] x2 : d0a07fcff8b8d500 x1 : 0000000000000000 x0 : 0004000800000200 [ 31.931603] Call trace: [ 31.934042] phy_stop+0x18/0xf8 [ 31.937177] phylink_stop+0x38/0xf8 [ 31.940657] am65_cpsw_nuss_ndo_slave_stop+0x28/0x1e0 [ti_am65_cpsw_nuss] [ 31.947452] __dev_close_many+0xa4/0x140 [ 31.951371] dev_close_many+0x84/0x128 [ 31.955115] unregister_netdevice_many+0x130/0x6d0 [ 31.959897] unregister_netdevice_queue+0x94/0xd8 [ 31.964591] unregister_netdev+0x24/0x38 [ 31.968504] am65_cpsw_nuss_cleanup_ndev.isra.0+0x48/0x70 [ti_am65_cpsw_nuss] [ 31.975637] am65_cpsw_nuss_remove+0x58/0xf8 [ti_am65_cpsw_nuss] " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "34B91B82-8C2A-471B-8203-B4B337323E51" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/1a0c016a4831ea29be09bbc8162d4a2a0690b4b8", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/442fd1bfe599bc54d118775e9e1a4fe913e4b369", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49849.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49849.json index 32b4e08066a..b89df094051 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49849.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49849.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49849", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:08.450", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:02:50.920", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,109 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: correcci\u00f3n de coincidencia incorrecta en dev_args_match_device syzkaller encontr\u00f3 una aserci\u00f3n fallida: assertion failed: (args->devid != (u64)-1) || args->missing, en fs/btrfs/volumes.c:6921 Esto puede activarse cuando configuramos devid en (u64)-1 mediante ioctl. En este caso, se omitir\u00e1 la coincidencia de devid y la coincidencia de dispositivo puede tener \u00e9xito incorrectamente. El parche 562d7b1512f7 introdujo esta funci\u00f3n que se utiliza para hacer coincidir dispositivos. Esta funci\u00f3n contiene dos escenarios de coincidencia; podemos distinguirlos comprobando el valor de args->missing en lugar de comprobar si args->devid y args->uuid son los valores predeterminados." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.54", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "9AEAA12F-493B-4007-9A86-9989DAE460CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0fca385d6ebc3cabb20f67bcf8a71f1448bdc001", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bc6c127c377010f136360552ebf91c2723081c1b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/c9fe4719c662e0af17eea723cf345e37719fd3c9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49851.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49851.json index 95735bbfdc1..34c1656adf8 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49851.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49851.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49851", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:08.680", - "lastModified": "2025-05-02T13:53:20.943", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:02:56.937", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,170 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: riscv: correcci\u00f3n de la configuraci\u00f3n de memoria reservada Actualmente, RISC-V configura la memoria reservada utilizando la copia \"temprana\" del \u00e1rbol de dispositivos. Como resultado, al intentar obtener una regi\u00f3n de memoria reservada usando of_reserved_mem_lookup(), el puntero a las regiones de memoria reservadas usa la direcci\u00f3n anterior a la memoria virtual, lo que causa un p\u00e1nico del kernel al intentar usar el nombre del b\u00fafer: Unable to handle kernel paging request at virtual address 00000000401c31ac Oops [#1] M\u00f3dulos vinculados: CPU: 0 PID: 0 Comm: swapper Not tainted 6.0.0-rc1-00001-g0d9d6953d834 #1 Nombre del hardware: Microchip PolarFire-SoC Icicle Kit (DT) epc : string+0x4a/0xea ra : vsnprintf+0x1e4/0x336 epc : ffffffff80335ea0 ra : ffffffff80338936 sp : ffffffff81203be0 gp: ffffffff812e0a98 tp: ffffffff8120de40 t0: 0000000000000000 t1: ffffffff81203e28 t2: 7265736572203a46 s0: ffffffff81203c20 s1: ffffffff81203e28 a0: ffffffff81203d22 a1: 0000000000000000 a2: ffffffff81203d08 a3: 0000000081203d21 a4: ffffffffffffffff a5: 00000000401c31ac a6 : ffff0a00ffffff04 a7 : ffffffffffffffff s2 : ffffffff81203d08 s3 : ffffffff81203d00 s4 : 0000000000000008 s5 : ffffffff000000ff s6 : 0000000000ffffff s7 : 00000000ffffff00 s8 : ffffffff80d9821a s9 : ffffffff81203d22 s10: 000000000000002 s11: ffffffff80d9821c t3 : ffffffff812f3617 t4: ffffffff812f3617 t5: ffffffff812f3618 t6: ffffffff81203d08 estado: 0000000200000100 direcci\u00f3n incorrecta: 00000000401c31ac causa: 000000000000000d [] vsnprintf+0x1e4/0x336 [] vprintk_store+0xf6/0x344 [] vprintk_emit+0x56/0x192 [] vprintk_default+0x16/0x1e [] vprintk+0x72/0x80 [] _printk+0x36/0x50 [] print_reserved_mem+0x1c/0x24 [] paging_init+0x528/0x5bc [] setup_arch+0xd0/0x592 [] start_kernel+0x82/0x73c early_init_fdt_scan_reserved_mem() no toma argumentos ya que opera en initial_boot_params, que se completa con early_init_dt_verify(). En RISC-V, early_init_dt_verify() se llama dos veces: una directamente, en setup_arch() si CONFIG_BUILTIN_DTB no est\u00e1 habilitado, y otra indirectamente, en una fase muy temprana del proceso de arranque, mediante parse_dtb() al llamar a early_init_dt_scan_nodes(). Esta primera llamada utiliza dtb_early_va para establecer initial_boot_params, que no se puede utilizar posteriormente en el proceso de arranque cuando se llama a early_init_fdt_scan_reserved_mem(). En arm64, por ejemplo, la llamada correspondiente a early_init_dt_scan_nodes() utiliza direcciones fixmap y no sufre el mismo problema. Desplace early_init_fdt_scan_reserved_mem() m\u00e1s adelante en la secuencia de arranque, despu\u00e9s de la llamada directa a early_init_dt_verify() en setup_arch() para que los nombres utilicen las direcciones de memoria virtual correctas. Lo anterior supuso que CONFIG_BUILTIN_DTB no estaba configurado, pero deber\u00eda funcionar igualmente en el caso en que lo est\u00e9: unflatted_and_copy_device_tree() tambi\u00e9n actualiza initial_boot_params." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3.8", + "versionEndExcluding": "5.4", + "matchCriteriaId": "427ABFB4-D713-4023-A92C-151DC0A30CCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.1", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "66D4AEE6-9821-4CD6-AB4D-DF78352338CF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:-:*:*:*:*:*:*", + "matchCriteriaId": "4D70AB13-37BE-4BD3-A652-10191F1642E4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc2:*:*:*:*:*:*", + "matchCriteriaId": "DCF307A4-6CF2-43FA-94E5-2EBB1033634B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc3:*:*:*:*:*:*", + "matchCriteriaId": "72D64137-DAA7-40C0-8BAD-9DBCB285BC00" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc4:*:*:*:*:*:*", + "matchCriteriaId": "81C1EF68-9FF9-416E-AFED-59088978150A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc5:*:*:*:*:*:*", + "matchCriteriaId": "F0E28D41-AC78-413B-AA08-FB73CAFFC58C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc6:*:*:*:*:*:*", + "matchCriteriaId": "EEDE6F28-7530-476B-A838-83E5B2D2A2DD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc7:*:*:*:*:*:*", + "matchCriteriaId": "7BB18ED4-6619-467C-870F-7671261DBEF2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.4:rc8:*:*:*:*:*:*", + "matchCriteriaId": "D980DAA0-07F8-4C47-B178-0BDDDA234A06" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/50e63dd8ed92045eb70a72d7ec725488320fb68b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/518e49f0590de66555503aabe199ba8d3f2e24ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/93598deb101540c4f9e7de15099ea8255b965fc2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/94ab8f88feb75e3b1486102c0c9c550f37d9d137", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49858.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49858.json index 875c93ae1d1..75eb616672a 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49858.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49858.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49858", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:09.410", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:03:21.900", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,95 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: octeontx2-pf: Se corrige la comprobaci\u00f3n del umbral de SQE. La forma actual de comprobar el recuento de SQE disponibles, basada en el recuento de SQB actualizado por hardware, podr\u00eda provocar que el controlador env\u00ede un SQE incluso antes de que se procese en NAPI el CQE del SQE previamente transmitido en el mismo \u00edndice, lo que resulta en la p\u00e9rdida de punteros SKB y, por lo tanto, una fuga. Se soluciona esto comprobando un \u00edndice de consumidor que se actualiza una vez procesado el CQE." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.6", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "CE27853D-39C2-4B1E-8A20-34EF9FE13B95" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/015e3c0a3b16193aab23beefe4719484b9984c2d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/f0dfc4c88ef39be0ba736aa0ce6119263fc19aeb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49859.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49859.json index b4637487d2f..580f0a67b85 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49859.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49859.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49859", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:09.510", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:03:32.930", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,109 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: lapbether: se corrige el problema de un c\u00f3digo de operaci\u00f3n no v\u00e1lido en lapbeth_open(). Si lapb_register() falla al iniciar el dispositivo lapb por primera vez, NAPI no se desactiva. Por lo tanto, el problema de c\u00f3digo de operaci\u00f3n no v\u00e1lido se reporta al iniciar el dispositivo lapb por segunda vez. La informaci\u00f3n de la pila es la siguiente: [ 1958.311422][T11356] kernel BUG at net/core/dev.c:6442! [ 1958.312206][T11356] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1958.315979][T11356] RIP: 0010:napi_enable+0x16a/0x1f0 [ 1958.332310][T11356] Call Trace: [ 1958.332817][T11356] [ 1958.336135][T11356] lapbeth_open+0x18/0x90 [ 1958.337446][T11356] __dev_open+0x258/0x490 [ 1958.341672][T11356] __dev_change_flags+0x4d4/0x6a0 [ 1958.345325][T11356] dev_change_flags+0x93/0x160 [ 1958.346027][T11356] devinet_ioctl+0x1276/0x1bf0 [ 1958.346738][T11356] inet_ioctl+0x1c8/0x2d0 [ 1958.349638][T11356] sock_ioctl+0x5d1/0x750 [ 1958.356059][T11356] __x64_sys_ioctl+0x3ec/0x1790 [ 1958.365594][T11356] do_syscall_64+0x35/0x80 [ 1958.366239][T11356] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1958.377381][T11356] " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.13", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "C4D3BF0B-6F05-4CEA-9F6B-216E5C81EC0B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/3faf7e14ec0c3462c2d747fa6793b8645d1391df", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/4689bd3a1b23a1bd917899e63b81bca2ccdfab45", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ed4940050a7ce7fc2ccd51db580ef1ade64290b1", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49868.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49868.json index a55556117ca..3332fbbc3e8 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49868.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49868.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49868", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:11.733", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:03:54.340", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,109 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: phy: ralink: mt7621-pci: a\u00f1adir centinela a la tabla de peculiaridades. Con la correcci\u00f3n de la variable mt7621 soc_dev_attr para registrar el SOC como dispositivo, el kernel experimentar\u00e1 un error en soc_device_match_attr. Esta prueba de peculiaridades se introdujo en el controlador de pruebas en el commit 9445ccb3714c (\"staging: mt7621-pci-phy: a\u00f1adir peculiaridades para la revisi\u00f3n 'E2' mediante 'soc_device_attribute'\"). El controlador de pruebas se elimin\u00f3 y se volvi\u00f3 a a\u00f1adir posteriormente en el commit d87da32372a0 (\"phy: ralink: A\u00f1adir controlador PHY para MT7621 PCIe PHY\") para el kernel 5.11." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/500bcd3a99eae84412067c3b9e7ffba1c66e6383", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/819b885cd886c193782891c4f51bbcab3de119a4", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d539cfd1202d66c2dcea383f1d96835ae72d5809", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49870.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49870.json index 4d7abf31ab1..426f315d41e 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49870.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49870.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49870", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:11.937", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:04:41.933", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,179 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: capacidades: corregir comportamiento indefinido en el cambio de bits para CAP_TO_MASK El cambio de un valor con signo de 32 bits por 31 bits no est\u00e1 definido, por lo que se cambia el bit significativo a sin signo. El seguimiento de llamadas de advertencia de UBSAN como se muestra a continuaci\u00f3n: UBSAN: desplazamiento fuera de los l\u00edmites en security/commoncap.c:1252:2 El desplazamiento a la izquierda de 1 por 31 lugares no se puede representar en el tipo 'int' Seguimiento de llamadas: dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c cap_task_prctl+0x561/0x6f0 security_task_prctl+0x5a/0xb0 __x64_sys_prctl+0x61/0x8f0 do_syscall_64+0x58/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.6.25", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "B8DDF7B0-3D4C-4B98-A8D2-4DABFD3DECD5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.10", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "424802D2-E9E7-48A9-AD6F-DF2227B3D83A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.15", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "A5C69A12-68E2-400E-9A5A-375A673C8402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.20", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "94D21814-3051-4860-AB06-C7880A3D4933" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "172AC75C-0949-4468-9C58-64E2893EF0CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/151dc8087b5609e53b069c068e3f3ee100efa586", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/27bdb134c043ff32c459d98f16550d0ffa0b3c34", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/46653972e3ea64f79e7f8ae3aa41a4d3fdb70a13", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5661f111a1616ac105ec8cec81bff99b60f847ac", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5b79fa628e2ab789e629a83cd211ef9b4c1a593e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65b0bc7a0690861812ade523d19f82688ab819dc", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/dbaab08c8677d598244d21afb7818e44e1c5d826", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fcbd2b336834bd24e1d9454ad5737856470c10d7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49872.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49872.json index a3aab59f96e..6b7e402c332 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49872.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49872.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49872", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:12.133", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:05:09.157", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,39 +15,191 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: gso: correcci\u00f3n del p\u00e1nico en frag_list con tipos de asignaci\u00f3n de encabezado mixtos. Desde el commit 3dcbdb134f32 (\"net: gso: correcci\u00f3n del error skb_segment al dividir gso_size de un skb alterado con frag_list de encabezado lineal\"), se permite cambiar gso_size de un paquete GRO. Sin embargo, esta confirmaci\u00f3n asume que basta con comprobar el primer miembro de list_skb; es decir, si alguno de los miembros de list_skb tiene un encabezado distinto de head_frag, el primero tambi\u00e9n lo tendr\u00e1. Resulta que esta suposici\u00f3n no se cumple. Hemos observado que se ha alcanzado BUG_ON en skb_segment cuando los skbs de frag_list ten\u00edan un head_frag distinto con el controlador vmxnet3. Esto se debe a que __netdev_alloc_skb y __napi_alloc_skb pueden devolver un skb con respaldo de p\u00e1gina o asignado a km, seg\u00fan el tama\u00f1o solicitado. Como resultado, el \u00faltimo skb peque\u00f1o en el paquete GRO puede ser asignado a km. Hay tres ubicaciones diferentes donde esto puede ser corregido: (1) Podr\u00edamos revisar head_frag en GRO y no permitir que GROing skbs con diferente head_frag. Sin embargo, eso llevar\u00eda a una regresi\u00f3n del rendimiento en rutas de avance normales con gso_size sin modificar, donde !head_frag en el \u00faltimo paquete no es un problema. (2) Establecer un indicador en bpf_skb_net_grow y bpf_skb_net_shrink que indique que NETIF_F_SG no es deseable. Esto requerir\u00eda consumir un poco en sk_buff. Adem\u00e1s, ese indicador puede ser desactivado cuando todos los skbs en la frag_list est\u00e1n en retroceso de p\u00e1gina. Para mantener un buen rendimiento, bpf_skb_net_grow/shrink tendr\u00eda que recorrer la frag_list. (3) Recorrer la frag_list en skb_segment al determinar si NETIF_F_SG debe ser borrado. Esto, por supuesto, ralentiza el proceso. Este parche implementa (3). Para limitar el impacto en el rendimiento de skb_segment, la lista solo se recorre para skb con SKB_GSO_DODGY configurado y gso_size modificado. Por lo tanto, las rutas normales no la alcanzar\u00e1n. Podr\u00edamos revisar solo el \u00faltimo skb, pero como necesitamos recorrer la lista completa de todos modos, mejor optemos por lo seguro." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.9.194", + "versionEndExcluding": "4.9.334", + "matchCriteriaId": "47450E0E-ED1A-40BF-B3F0-A650B44B7177" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.14.145", + "versionEndExcluding": "4.14.300", + "matchCriteriaId": "EF348574-3408-4E7D-A536-CA5AE1B1C878" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.19.74", + "versionEndExcluding": "4.19.267", + "matchCriteriaId": "B160D189-8C27-4250-BE6F-FB0AE08A3C83" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2.16", + "versionEndExcluding": "5.3", + "matchCriteriaId": "80972733-27F6-4503-8FB4-9B50F584F1CA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.3.1", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "005BCD37-6F9A-4404-BE41-D35E07D6045C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "172AC75C-0949-4468-9C58-64E2893EF0CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "39DC45D8-E30E-4F4A-9332-393B7BCF6900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "C3F26709-7D49-4AF0-8145-46CCF4E8E2AD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:5.3:-:*:*:*:*:*:*", + "matchCriteriaId": "D036D76E-AC69-4382-B4C1-8EDA1ABB2941" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0a9f56e525ea871d3950b90076912f5c7494f00f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/50868de7dc4e7f0fcadd6029f32bf4387c102ee6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5876b7f249a1ecbbcc8e35072c3828d6526d1c3a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/598d9e30927b15731e83797fbd700ecf399f42dd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/65ad047fd83502447269fda8fd26c99077a9af47", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9e4b7a99a03aefd37ba7bb1f022c8efab5019165", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ad25a115f50800c6847e0d841c5c7992a9f7c1b3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bd5362e58721e4d0d1a37796593bd6e51536ce7a", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49877.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49877.json index fa6c29756eb..961c864b731 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49877.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49877.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49877", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:12.653", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:05:50.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,144 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf, sockmap: corrige la advertencia sk->sk_forward_alloc de sk_stream_kill_queues Al ejecutar las pruebas autom\u00e1ticas `test_sockmap`, aparece la siguiente advertencia: ADVERTENCIA: CPU: 2 PID: 197 en net/core/stream.c:205 sk_stream_kill_queues+0xd3/0xf0 Seguimiento de llamadas: inet_csk_destroy_sock+0x55/0x110 tcp_rcv_state_process+0xd28/0x1380 ? tcp_v4_do_rcv+0x77/0x2c0 tcp_v4_do_rcv+0x77/0x2c0 __release_sock+0x106/0x130 __tcp_close+0x1a7/0x4e0 tcp_close+0x20/0x70 inet_release+0x3c/0x80 __sock_release+0x3a/0xb0 sock_close+0x14/0x20 __fput+0xa3/0x260 task_work_run+0x59/0xb0 exit_to_user_mode_prepare+0x1b3/0x1c0 syscall_exit_to_user_mode+0x19/0x50 do_syscall_64+0x48/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae El caso ra\u00edz est\u00e1 en el commit 84472b436e76 (\"bpf, sockmap: Arreglar m\u00e1s archivos no cargados mientras msg tiene more_data\"), donde utilic\u00e9 msg->sg.size para reemplazar tosend, lo que caus\u00f3 fallas: if (msg->apply_bytes && msg->apply_bytes < tosend) tosend = psock->apply_bytes;" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4.189", + "versionEndExcluding": "5.4.225", + "matchCriteriaId": "4ADF6FB5-602A-4872-B55D-F9122D1D9260" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.10.110", + "versionEndExcluding": "5.10.155", + "matchCriteriaId": "DACD9290-F694-48EC-AFCB-DD75FEA46D93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.15.33", + "versionEndExcluding": "5.15.79", + "matchCriteriaId": "AEFAEE94-B60B-46E7-9F05-CFA1C8A6DCB8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16.19", + "versionEndExcluding": "5.17", + "matchCriteriaId": "D4ED89FC-18EE-445F-8FE2-A2B6A5F9BB13" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17.2", + "versionEndExcluding": "6.0.9", + "matchCriteriaId": "8FD72C28-3B96-4150-B2B6-01C33CFFE955" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc4:*:*:*:*:*:*", + "matchCriteriaId": "1C6E00FE-5FB9-4D20-A1A1-5A32128F9B76" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/14e8bc3bf7bd6af64d7538a0684c8238d96cdfd7", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/8ec95b94716a1e4d126edc3fb2bc426a717e2dba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/95adbd2ac8de82e43fd6b347e7e1b47f74dc1abb", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/cc21dc48a78cc9e5af9a4d039cd456446a6e73ff", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d975bec1eaeb52341acc9273db79ddb078220399", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49879.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49879.json index deeaa3e9fb1..63a9c03cc62 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49879.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49879.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49879", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:12.857", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:20:07.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,27 +15,131 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: correcci\u00f3n de BUG_ON() cuando la entrada de directorio tiene un rec_len no v\u00e1lido El campo rec_len en la entrada de directorio debe ser un m\u00faltiplo de 4. Una imagen de sistema de archivos da\u00f1ada se puede usar para generar un BUG() en ext4_rec_len_to_disk(), llamado desde make_indexed_dir(). ------------[ cortar aqu\u00ed ]------------ \u00a1ERROR del kernel en fs/ext4/ext4.h:2413! ... RIP: 0010:make_indexed_dir+0x53f/0x5f0 ... Rastreo de llamadas: ? add_dirent_to_buf+0x1b2/0x200 ext4_add_entry+0x36e/0x480 ext4_add_nondir+0x2b/0xc0 ext4_create+0x163/0x200 path_openat+0x635/0xe90 do_filp_open+0xb4/0x160 ? __create_object.isra.0+0x1de/0x3b0 ? _raw_spin_unlock+0x12/0x30 do_sys_openat2+0x91/0x150 __x64_sys_open+0x6c/0xa0 do_syscall_64+0x3c/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 La soluci\u00f3n simplemente agrega una llamada a ext4_check_dir_entry() para validar la entrada del directorio, devolviendo -EFSCORRUPTED si la entrada no es v\u00e1lida." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-617" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.4.224", + "matchCriteriaId": "1A06F3FB-68BF-4D02-8B97-06AB86DC13A7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.5", + "versionEndExcluding": "5.10.154", + "matchCriteriaId": "475D097C-AB5A-4CF5-899F-413077854ABD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.78", + "matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/156451a67b93986fb07c274ef6995ff40766c5ad", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/17a0bc9bd697f75cfdf9b378d5eb2d7409c91340", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2fa24d0274fbf913b56ee31f15bc01168669d909", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/999cff2b6ce3b45c08abf793bf55534777421327", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ce1ee2c8827fb6493e91acbd50f664cf2a972c3d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49882.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49882.json index 36ccfa0875b..c9cfa50bfad 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49882.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49882.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49882", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:13.183", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:19:56.590", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: Rechazar intentos de consumir o actualizar gfn_to_pfn_cache inactivo. Rechazar kvm_gpc_check() y kvm_gpc_refresh() si la cach\u00e9 est\u00e1 inactiva. No verificar el indicador de activo durante la actualizaci\u00f3n es particularmente grave, ya que KVM puede terminar con una cach\u00e9 v\u00e1lida inactiva, lo que puede provocar diversos errores de use-after-free, como consumir un puntero de kernel nulo o perder una invalidaci\u00f3n de mmu_notifier debido a que la cach\u00e9 no est\u00e1 en la lista de gfns para invalidar. Tenga en cuenta que \"active\" debe establecerse solo si la cach\u00e9 est\u00e1 en la lista de cach\u00e9s, es decir, es accesible mediante eventos mmu_notifier. Si se produce un evento mmu_notifier relevante mientras la cach\u00e9 est\u00e1 activa, pero no est\u00e1 en la lista, KVM no adquirir\u00e1 el bloqueo de la cach\u00e9 y, por lo tanto, no serializar\u00e1 el evento mmu_notifier con usuarios activos ni con kvm_gpc_refresh(). Una competencia entre KVM_XEN_ATTR_TYPE_SHARED_INFO y KVM_XEN_HVM_EVTCHN_SEND puede explotarse para activar el error. 1. Desactivar cach\u00e9 shinfo: kvm_xen_hvm_set_attr caso KVM_XEN_ATTR_TYPE_SHARED_INFO kvm_gpc_deactivate kvm_gpc_unmap gpc->valid = falso gpc->khva = NULL gpc->active = falso Resultado: activo = falso, v\u00e1lido = falso 2. Causar actualizaci\u00f3n de cach\u00e9: kvm_arch_vm_ioctl caso KVM_XEN_HVM_EVTCHN_SEND kvm_xen_hvm_evtchn_send kvm_xen_set_evtchn kvm_xen_set_evtchn_fast kvm_gpc_check devolver -EWOULDBLOCK porque !gpc->valid kvm_xen_set_evtchn_fast devolver -EWOULDBLOCK kvm_gpc_refresh hva_to_pfn_retry gpc->valid = verdadero gpc->khva = no NULL Resultado: activo = falso, v\u00e1lido = verdadero 3. Competencia ioctl KVM_XEN_HVM_EVTCHN_SEND contra ioctl KVM_XEN_ATTR_TYPE_SHARED_INFO: kvm_arch_vm_ioctl caso KVM_XEN_HVM_EVTCHN_SEND kvm_xen_hvm_evtchn_send kvm_xen_set_evtchn kvm_xen_set_evtchn_fast read_lock gpc->lock kvm_xen_hvm_set_attr caso KVM_XEN_ATTR_TYPE_SHARED_INFO mutex_lock kvm->lock kvm_xen_shared_info_init kvm_gpc_activate gpc->khva = NULL kvm_gpc_check [ La comprobaci\u00f3n pasa porque gpc->valid sigue siendo cierto, aunque gpc->khva ya sea NULL. ] shinfo = gpc->khva pending_bits = shinfo->evtchn_pending CRASH: test_and_set_bit(..., pending_bits)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "C7CE8283-1C20-4F40-8BE6-BCF33C4080B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/bfa9672f8fc9eb118124bab61899d2dd497f95ba", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/ecbcf030b45666ad11bc98565e71dfbcb7be4393", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49883.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49883.json index cc03246f50a..23ff9d76a4b 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49883.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49883.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49883", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:13.287", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:19:47.970", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: x86: smm: el n\u00famero de GPR en la imagen SMRAM depende del formato de la imagen. En un host de 64 bits, si el invitado no tiene X86_FEATURE_LM, KVM acceder\u00e1 a 16 GPRS en la imagen SMRAM de 32 bits, lo que provocar\u00e1 un acceso a la RAM fuera de los l\u00edmites. En un host de 32 bits, rsm_load_state_64/enter_smm_save_state_64 se compila, por lo que no se puede producir un desbordamiento de acceso." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.2 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "2AE8E086-9C21-4A47-A505-C5DBF09AAA5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/696db303e54f7352623d9f640e6c51d8fa9d5588", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a7ebfbea0f52550d7cdf12c38f3f5eaa7b2b6494", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49884.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49884.json index 96c93ea7cca..34a985c553d 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49884.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49884.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49884", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:13.387", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:19:27.007", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: KVM: Inicializar bloqueos de gfn_to_pfn_cache en un asistente dedicado. Trasladar la inicializaci\u00f3n del bloqueo de gfn_to_pfn_cache a otro asistente y llamar al nuevo asistente durante la creaci\u00f3n de la m\u00e1quina virtual o la vCPU. Es posible que se produzcan condiciones de competencia debido a la capacidad de kvm_gfn_to_pfn_cache_init() de reinicializar los bloqueos de la cach\u00e9. Por ejemplo: una competencia entre ioctl(KVM_XEN_HVM_EVTCHN_SEND) y kvm_gfn_to_pfn_cache_init() provoca un bloqueo de gpc de shinfo da\u00f1ado. (hilo 1) | (hilo 2) | kvm_xen_set_evtchn_fast | read_lock_irqsave(&gpc->lock, ...) | | kvm_gfn_to_pfn_cache_init | rwlock_init(&gpc->lock) read_unlock_irqrestore(&gpc->lock, ...) | Renombra \"cache_init\" y \"cache_destroy\" como activate+deactivate para evitar que la cach\u00e9 se destruya o libere. Ten en cuenta que hay m\u00e1s ejecuciones en el nuevo nombre kvm_gpc_activate() que se abordar\u00e1n por separado. [sean: se indica que se trata de una correcci\u00f3n de error]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.17", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "C7CE8283-1C20-4F40-8BE6-BCF33C4080B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/52491a38b2c2411f3f0229dc6ad610349c704a41", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/61242001d6c9c253df7645dab090842d8da08764", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49886.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49886.json index 7cbd190d1f4..0397745901c 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49886.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49886.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49886", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:13.590", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:19:04.303", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: x86/tdx: P\u00e1nico en configuraciones incorrectas que generan #VE al acceder a memoria \"privada\". Toda la memoria normal del kernel es \"memoria privada TDX\". Esto incluye todo, desde las pilas del kernel hasta el texto del kernel. Gestionar excepciones en accesos arbitrarios a la memoria del kernel es pr\u00e1cticamente imposible, ya que pueden ocurrir en lugares muy peligrosos, como la entrada/salida del kernel. Sin embargo, el hardware TDX, en teor\u00eda, puede generar una excepci\u00f3n de virtualizaci\u00f3n (#VE) en cualquier acceso a memoria privada. Sin embargo, no es tan grave como parece. TDX se puede configurar para que nunca genere estas excepciones en memoria privada con un \"atributo TD\" llamado ATTR_SEPT_VE_DISABLE. El invitado no tiene forma de *configurar* este atributo, pero puede comprobarlo. Aseg\u00farese de que ATTR_SEPT_VE_DISABLE est\u00e9 configurado en el arranque inicial. Si no est\u00e1 configurado, utilice panic(). No hay una forma sensata de que Linux se ejecute con este atributo sin configurar, por lo que es apropiado usar panic(). Hay una peque\u00f1a ventana durante el arranque antes de la comprobaci\u00f3n donde el kernel tiene un controlador de #VE temprano. Sin embargo, este controlador solo sirve para la E/S de puerto y tambi\u00e9n se pondr\u00e1 en p\u00e1nico() en cuanto detecte cualquier otro #VE, como uno generado por un acceso a memoria privada. [dhansen: Reescribir el registro de cambios y reorganizar con el nuevo tdx_parse_tdinfo(). A\u00f1adir la prueba de Kirill porque hice cambios desde que escribi\u00f3 esto.]" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.19", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "8CC4D01B-B8FE-4E0D-BF17-7D7BDBB0D502" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/373e715e31bf4e0f129befe87613a278fac228d3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/895c168c8f78079f21ad50fead7593ffa352f795", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49893.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49893.json index 80a4a57a9ab..8efe9ab76ef 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49893.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49893.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49893", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:14.317", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:18:45.070", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,15 +15,90 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cxl/region: Se corrige la fuga de cxl_region y se limpian los objetivos al eliminar una regi\u00f3n. Al eliminar una regi\u00f3n, todos los objetivos previamente asignados a ella contienen referencias a ella. Para eliminar esas referencias, desvincula todos los objetivos durante la ejecuci\u00f3n de unregister_region(). De lo contrario, el objeto de regi\u00f3n se filtrar\u00e1, ya que el espacio de usuario ha perdido la capacidad de desvincular objetivos una vez que se desmantela el sistema operativo de la regi\u00f3n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-401" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.0", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "2AE8E086-9C21-4A47-A505-C5DBF09AAA5A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/0d9e734018d70cecf79e2e4c6082167160a0f13f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/45d9fb4b758b9d602ee7776eb6754b0349946aad", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-498xx/CVE-2022-49898.json b/CVE-2022/CVE-2022-498xx/CVE-2022-49898.json index b52a1178ff0..daa21229a20 100644 --- a/CVE-2022/CVE-2022-498xx/CVE-2022-49898.json +++ b/CVE-2022/CVE-2022-498xx/CVE-2022-49898.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49898", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:14.850", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:18:38.083", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,104 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: btrfs: se corrige el mal manejo del registro de mod de \u00e1rbol de nodos reasignados \u00a1Hemos estado viendo el siguiente ERROR de p\u00e1nico en el kernel de producci\u00f3n en fs/btrfs/tree-mod-log.c:677! c\u00f3digo de operaci\u00f3n no v\u00e1lido: 0000 [#1] SMP RIP: 0010:tree_mod_log_rewind+0x1b4/0x200 RSP: 0000:ffffc9002c02f890 EFLAGS: 00010293 RAX: 0000000000000003 RBX: ffff8882b448c700 RCX: 0000000000000000 RDX: 0000000000008000 RSI: 00000000000000a7 RDI: ffff88877d831c00 RBP: 0000000000000002 R08: 000000000000009f R09: 00000000000000000 R10: 0000000000000000 R11: 00000000000100c40 R12: 000000000000001 R13: ffff8886c26d6a00 R14: ffff88829f5424f8 R15: ffff88877d831a00 FS: 00007fee1d80c780(0000) GS:ffff8890400c0000(0000) knlGS:000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee1963a020 CR3: 0000000434f33002 CR4: 00000000007706e0 DR0: 00000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Rastreo de llamadas: btrfs_get_old_root+0x12b/0x420 btrfs_search_old_slot+0x64/0x2f0 ? tree_mod_log_oldest_root+0x3d/0xf0 resolve_indirect_ref+0xfd/0x660 ? ulist_alloc+0x31/0x60 ? kmem_cache_alloc_trace+0x114/0x2c0 find_parent_nodes+0x97a/0x17e0 ? ulist_alloc+0x30/0x60 btrfs_find_all_roots_safe+0x97/0x150 iterate_extent_inodes+0x154/0x370 ? btrfs_search_path_in_tree+0x240/0x240 iterate_inodes_from_logical+0x98/0xd0 ? btrfs_search_path_in_tree+0x240/0x240 btrfs_ioctl_logical_to_ino+0xd9/0x180 btrfs_ioctl+0xe2/0x2ec0 ? __mod_memcg_lruvec_state+0x3d/0x280 ? do_sys_openat2+0x6d/0x140 ? kretprobe_dispatcher+0x47/0x70 ? kretprobe_rethook_handler+0x38/0x50 ? rethook_trampoline_handler+0x82/0x140 ? arch_rethook_trampoline_callback+0x3b/0x50 ? kmem_cache_free+0xfb/0x270 ? do_sys_openat2+0xd5/0x140 __x64_sys_ioctl+0x71/0xb0 do_syscall_64+0x2d/0x40 Which is this code in tree_mod_log_rewind() switch (tm->op) { case BTRFS_MOD_LOG_KEY_REMOVE_WHILE_FREEING: BUG_ON(tm->slot < n); Esto ocurre porque reproducimos los nodos en el orden en que sucedieron, y cuando hacemos un REPLACE registraremos un REMOVE_WHILE_FREEING para cada ranura, comenzando en 0. 'n' aqu\u00ed es el n\u00famero de elementos en este bloque, que en este caso era 1, pero ten\u00edamos 2 operaciones REMOVE_WHILE_FREEING. La causa ra\u00edz real de esto fue que est\u00e1bamos reproduciendo operaciones para un bloque que no deber\u00eda haberse reproducido. Considere la siguiente secuencia de eventos: 1. Tenemos una ra\u00edz ya modificada y ejecutamos btrfs_get_tree_mod_seq(). 2. Comenzamos a eliminar elementos de esta ra\u00edz, activando KEY_REPLACE para sus ranuras secundarias. 3. Eliminamos uno de los dos hijos a los que apunta este nodo ra\u00edz, lo que activa la promoci\u00f3n del hijo restante y libera este nodo. 4. Modificamos una nueva ra\u00edz y reasignamos el nodo anterior al nodo ra\u00edz de esta otra ra\u00edz. El registro de mod del \u00e1rbol se parece a esto l\u00f3gico 0 op KEY_REPLACE (ranura 1) seq 2 l\u00f3gico 0 op KEY_REMOVE (ranura 1) seq 3 l\u00f3gico 0 op KEY_REMOVE_WHILE_FREEING (ranura 0) seq 4 l\u00f3gico 4096 op LOG_ROOT_REPLACE (antiguo l\u00f3gico 0) seq 5 l\u00f3gico 8192 op KEY_REMOVE_WHILE_FREEING (ranura 1) seq 6 l\u00f3gico 8192 op KEY_REMOVE_WHILE_FREEING (ranura 0) seq 7 l\u00f3gico 0 op LOG_ROOT_REPLACE (antiguo l\u00f3gico 8192) seq 8 >A partir de aqu\u00ed el error se activa con los siguientes pasos 1. Llama a btrfs_get_old_root() en new_root. 2. Llamamos a tree_mod_log_oldest_root(btrfs_root_node(new_root)), que actualmente tiene un valor l\u00f3gico 0. 3. tree_mod_log_oldest_root() llama a tree_mod_log_search_oldest(), que nos proporciona la secuencia KEY_REPLACE 2. Dado que no es un LOG_ROOT_REPLACE, creemos err\u00f3neamente que no tenemos una ra\u00edz antigua, ya que esperamos que el cambio m\u00e1s reciente sea un LOG_ROOT_REPLACE. 4. En tree_mod_log_oldest_root(), no tenemos un LOG_ROOT_REPLACE, por lo que no establecemos old_root; simplemente usamos nuestra e ---truncated---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.5", + "versionEndExcluding": "5.15.78", + "matchCriteriaId": "4C73951A-B6C8-46B9-A364-74BD9EE479CB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/007058eb8292efc4c88f921752194b83269da085", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/52b2b65c9eb56fd829dda323786db828627ff7e6", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/968b71583130b6104c9f33ba60446d598e327a8b", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-499xx/CVE-2022-49900.json b/CVE-2022/CVE-2022-499xx/CVE-2022-49900.json index bcfbbb65680..6707e65ba60 100644 --- a/CVE-2022/CVE-2022-499xx/CVE-2022-49900.json +++ b/CVE-2022/CVE-2022-499xx/CVE-2022-49900.json @@ -2,8 +2,8 @@ "id": "CVE-2022-49900", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-01T15:16:15.060", - "lastModified": "2025-05-02T13:52:51.693", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:18:09.390", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,118 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: i2c: piix4: Adaptador de correcci\u00f3n que no se eliminar\u00e1 en piix4_remove() En piix4_probe(), el adaptador piix4 se registrar\u00e1 en: piix4_probe() piix4_add_adapters_sb800() / piix4_add_adapter() i2c_add_adapter() En funci\u00f3n del tipo de dispositivo sondeado, se llamar\u00e1 a piix4_add_adapters_sb800() o a un solo piix4_add_adapter(). Para el primer caso, piix4_adapter_count se establece como el n\u00famero de adaptadores, mientras que para otro caso no se establece y se mantiene predeterminado *cero*. Cuando se elimina piix4, piix4_remove() elimina los adaptadores agregados en piix4_probe(), bas\u00e1ndose en el valor de piix4_adapter_count. Dado que el conteo es cero en el caso de un solo adaptador, este no se eliminar\u00e1 y se filtrar\u00e1n las fuentes asignadas, como el cliente y el dispositivo i2c. Estas fuentes a\u00fan pueden ser accedidas por i2c o el bus, lo que puede causar problemas. Un caso que se reproduce f\u00e1cilmente es que si se registra un nuevo adaptador, i2c obtendr\u00e1 el adaptador filtrado e intentar\u00e1 llamar a smbus_algorithm, que ya se hab\u00eda liberado: Activado por: rmmod i2c_piix4 y modprobe max31730 ERROR: no se puede controlar el error de p\u00e1gina para la direcci\u00f3n: ffffffffc053d860 #PF: acceso de lectura del supervisor en modo kernel #PF: error_code(0x0000) - p\u00e1gina no presente Oops: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 3752 Comm: modprobe Tainted: G Nombre del hardware: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:i2c_default_probe (drivers/i2c/i2c-core-base.c:2259) i2c_core RSP: 0018:ffff888107477710 EFLAGS: 00000246 ... i2c_detect (controladores/i2c/i2c-core-base.c:2302) i2c_core __process_new_driver (controladores/i2c/i2c-core-base.c:1336) i2c_core bus_for_each_dev (controladores/base/bus.c:301) i2c_for_each_dev (controladores/i2c/i2c-core-base.c:1823) i2c_core i2c_register_driver (controladores/i2c/i2c-core-base.c:1861) i2c_core do_one_initcall (init/main.c:1296) do_init_module (kernel/module/main.c:2455) ... ---[ fin del seguimiento 0000000000000000 ]--- Solucione este problema configurando correctamente piix4_adapter_count como 1 para el adaptador \u00fanico de modo que se pueda quitar normalmente." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.4", + "versionEndExcluding": "5.10.154", + "matchCriteriaId": "0910F02E-5A73-45B6-9ABC-05EABA85090A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.11", + "versionEndExcluding": "5.15.78", + "matchCriteriaId": "AB8B27B9-B41B-42D5-AE67-0A89A8A8EEB1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.16", + "versionEndExcluding": "6.0.8", + "matchCriteriaId": "EC9A754E-625D-42F3-87A7-960D643E2867" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc1:*:*:*:*:*:*", + "matchCriteriaId": "E7E331DA-1FB0-4DEC-91AC-7DA69D461C11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc2:*:*:*:*:*:*", + "matchCriteriaId": "17F0B248-42CF-4AE6-A469-BB1BAE7F4705" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.1:rc3:*:*:*:*:*:*", + "matchCriteriaId": "E2422816-0C14-4B5E-A1E6-A9D776E5C49B" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/569bea74c94d37785682b11bab76f557520477cd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/bfd5e62f9a7ee214661cb6f143a3b40ccc63317f", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/d78ccdce662e88f41e87e90cf2bee63c1715d2a5", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/fe51636fffc8108c7c4da6aa393010e786530ad9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json index 59e2ee51631..c37fe8f7d58 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10966", "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", "published": "2025-11-07T08:15:39.617", - "lastModified": "2025-11-07T08:15:39.617", + "lastModified": "2025-11-10T21:15:35.357", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "references": [ { "url": "https://curl.se/docs/CVE-2025-10966.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json index f1a95aeb7d3..31de5bbfc4f 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12429.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12429", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:36.660", - "lastModified": "2025-11-10T20:15:36.660", + "lastModified": "2025-11-10T21:15:36.600", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json index ff85373d51c..9ac967b665f 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12432.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12432", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:37.750", - "lastModified": "2025-11-10T20:15:37.750", + "lastModified": "2025-11-10T21:15:36.743", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json index 0b2ead9e2b6..dff345a7e9a 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12433.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12433", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:37.910", - "lastModified": "2025-11-10T20:15:37.910", + "lastModified": "2025-11-10T22:15:33.660", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json index 346a3f85206..63c63c36e37 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12434.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12434", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.017", - "lastModified": "2025-11-10T20:15:38.017", + "lastModified": "2025-11-10T21:15:36.960", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json index cd0fa4edf02..22e0029935d 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12435.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12435", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.150", - "lastModified": "2025-11-10T20:15:38.150", + "lastModified": "2025-11-10T21:15:37.120", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,46 @@ "value": "Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-285" + }, + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json index 3f01daeea32..b3128b1aa05 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12436.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12436", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.260", - "lastModified": "2025-11-10T20:15:38.260", + "lastModified": "2025-11-10T21:15:37.297", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json index 178a8fbaaee..a5641ba870c 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12438.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12438", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.513", - "lastModified": "2025-11-10T20:15:38.513", + "lastModified": "2025-11-10T21:15:37.527", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json index 70e3ec28e0a..f16e8ba8964 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12439.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12439", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.647", - "lastModified": "2025-11-10T20:15:38.647", + "lastModified": "2025-11-10T21:15:37.740", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json index 26a7e22616f..50a4c99e976 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12440.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12440", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.757", - "lastModified": "2025-11-10T20:15:38.757", + "lastModified": "2025-11-10T21:15:37.980", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json index bdd96b910ef..3b7da74ff33 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12441.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12441", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:38.867", - "lastModified": "2025-11-10T20:15:38.867", + "lastModified": "2025-11-10T22:15:33.853", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json index 010acc7d5a2..791a2648fb6 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12443.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12443", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.000", - "lastModified": "2025-11-10T20:15:39.000", + "lastModified": "2025-11-10T22:15:34.090", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json index 2a993547ef4..6bed74e7d2e 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12444.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12444", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.143", - "lastModified": "2025-11-10T20:15:39.143", + "lastModified": "2025-11-10T22:15:34.327", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Incorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-306" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json index 2c844bc74ee..7d114159377 100644 --- a/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12446.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12446", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.363", - "lastModified": "2025-11-10T20:15:39.363", + "lastModified": "2025-11-10T22:15:34.550", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. (Chromium security severity: Low)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html", diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json index ea97919db97..e6ea140b5ec 100644 --- a/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12725.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12725", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.577", - "lastModified": "2025-11-10T20:15:39.577", + "lastModified": "2025-11-10T22:15:34.740", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "weaknesses": [ { "source": "chrome-cve-admin@google.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json index 220c287e80e..cdfd83f8ae8 100644 --- a/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12726.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12726", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.707", - "lastModified": "2025-11-10T20:15:39.707", + "lastModified": "2025-11-10T21:15:38.247", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.6, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json index a78abb7b5cf..3b6a9dde2a8 100644 --- a/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12728.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12728", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:39.967", - "lastModified": "2025-11-10T20:15:39.967", + "lastModified": "2025-11-10T22:15:34.967", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", diff --git a/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json b/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json index 8f0ef8084d8..d1396032530 100644 --- a/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json +++ b/CVE-2025/CVE-2025-127xx/CVE-2025-12729.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12729", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-11-10T20:15:40.080", - "lastModified": "2025-11-10T20:15:40.080", + "lastModified": "2025-11-10T21:15:38.390", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 4.2, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-451" + } + ] + } + ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html", diff --git a/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json index fc4bf527cb9..e8cae977022 100644 --- a/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json +++ b/CVE-2025/CVE-2025-129xx/CVE-2025-12930.json @@ -2,7 +2,7 @@ "id": "CVE-2025-12930", "sourceIdentifier": "cna@vuldb.com", "published": "2025-11-10T04:15:42.127", - "lastModified": "2025-11-10T04:15:42.127", + "lastModified": "2025-11-10T22:15:35.267", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -107,7 +107,7 @@ "weaknesses": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -140,6 +140,10 @@ { "url": "https://www.sourcecodester.com/", "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/puppytgyh/-CVE/issues/1", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-279xx/CVE-2025-27917.json b/CVE-2025/CVE-2025-279xx/CVE-2025-27917.json index 8051304faba..92a56cb9fb9 100644 --- a/CVE-2025/CVE-2025-279xx/CVE-2025-27917.json +++ b/CVE-2025/CVE-2025-279xx/CVE-2025-27917.json @@ -2,8 +2,8 @@ "id": "CVE-2025-27917", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-06T18:15:40.637", - "lastModified": "2025-11-07T18:07:25.993", - "vulnStatus": "Analyzed", + "lastModified": "2025-11-10T21:15:38.650", + "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.6 + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -45,6 +65,16 @@ "value": "CWE-476" } ] + }, + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] } ], "configurations": [ diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37920.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37920.json index a4ab8d3e163..caead9b3e83 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37920.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37920.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37920", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.603", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T21:11:09.640", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,19 +15,116 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: xsk: Corrige la condici\u00f3n de ejecuci\u00f3n en la ruta RX gen\u00e9rica AF_XDP Mueve rx_lock de xsk_socket a xsk_buff_pool. Corrige la sincronizaci\u00f3n para el modo umem compartido en la ruta RX gen\u00e9rica donde varios sockets comparten un solo xsk_buff_pool. La cola RX es exclusiva de xsk_socket, mientras que la cola FILL se puede compartir entre varios sockets. Esto podr\u00eda resultar en una condici\u00f3n de ejecuci\u00f3n donde dos n\u00facleos de CPU acceden a la ruta RX de dos sockets diferentes que comparten el mismo umem. Protege ambas colas adquiriendo spinlock en xsk_buff_pool compartido. La contenci\u00f3n de bloqueos se puede minimizar en el futuro mediante alg\u00fan b\u00fafer FQ por subproceso. Es seguro y necesario mover spin_lock_bh(rx_lock) despu\u00e9s de xsk_rcv_check(): * xs->pool y spinlock_init se sincronizan mediante barreras de memoria xsk_bind() -> xsk_is_bound(). * xsk_rcv_check() puede devolver verdadero al ejecutar xsk_release() o xsk_unbind_dev(); sin embargo, esto no causar\u00e1 ejecuci\u00f3ns de datos ni condiciones de ejecuci\u00f3n. xsk_unbind_dev() elimina el socket xdp de todos los mapas y espera a que se completen todas las operaciones de recepci\u00f3n pendientes. Los paquetes en la ruta de recepci\u00f3n se completar\u00e1n correctamente o se descartar\u00e1n." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "HIGH", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.0, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-362" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.1.20", + "versionEndExcluding": "5.2", + "matchCriteriaId": "EC3742A3-C6ED-4C21-A58F-884ACEC9E36C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.2.3", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "33E3E81F-85A5-424B-8962-674C4672FE7E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/65d3c570614b892257dc58a1b202908242ecf8fd", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/75a240a3e8abf17b9e00b0ef0492b1bbaa932251", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/a1356ac7749cafc4e27aa62c0c4604b5dca4983e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37921.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37921.json index b016bcae605..188b86e8919 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37921.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37921.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37921", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.713", - "lastModified": "2025-11-03T20:18:41.630", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T21:09:57.033", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,31 +15,160 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vxlan: vnifilter: Se corrige la eliminaci\u00f3n desbloqueada de la entrada FDB predeterminada. Cuando se elimina una VNI de un dispositivo VXLAN en modo 'vnifilter', la entrada FDB asociada al control remoto predeterminado (si se configur\u00f3 uno) se elimina sin mantener el bloqueo hash. Esto es incorrecto y generar\u00e1 una advertencia [1] generada por la anotaci\u00f3n lockdep, a\u00f1adida por el commit ebe642067455 (\"vxlan: Crear envoltorios para la b\u00fasqueda FDB\"). Reproductor: # ip link add vx0 up type vxlan dstport 4789 external vnifilter local 192.0.2.1 # bridge vni add vni 10010 remote 198.51.100.1 dev vx0 # bridge vni del vni 10010 dev vx0 Se corrige adquiriendo el bloqueo hash antes de la eliminaci\u00f3n y liber\u00e1ndolo despu\u00e9s. Culpe a el commit original que introdujo el problema en lugar de a la que lo expuso. [1] ADVERTENCIA: CPU: 3 PID: 392 en drivers/net/vxlan/vxlan_core.c:417 vxlan_find_mac+0x17f/0x1a0 [...] RIP: 0010:vxlan_find_mac+0x17f/0x1a0 [...] Rastreo de llamadas: __vxlan_fdb_delete+0xbe/0x560 vxlan_vni_delete_group+0x2ba/0x940 vxlan_vni_del.isra.0+0x15f/0x580 vxlan_process_vni_filter+0x38b/0x7b0 vxlan_vnifilter_process+0x3bb/0x510 rtnetlink_rcv_msg+0x2f7/0xb70 netlink_rcv_skb+0x131/0x360 netlink_unicast+0x426/0x710 netlink_sendmsg+0x75a/0xc20 __sock_sendmsg+0xc1/0x150 ____sys_sendmsg+0x5aa/0x7b0 ___sys_sendmsg+0xfc/0x180 __sys_sendmsg+0x121/0x1b0 do_syscall_64+0xbb/0x1d0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 " } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "NVD-CWE-noinfo" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "5.18", + "versionEndExcluding": "6.1.138", + "matchCriteriaId": "945A1B5D-9E16-488D-96CC-27B5994A3A7F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.2", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "2BE1DB09-2D62-4C63-AF19-947300669741" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/087a9eb9e5978e3ba362e1163691e41097e8ca20", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/2d4a121296aa3940d2df9906f955c2b6b4e38bc3", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/3576e9a80b6c4381b01ce0cbaa07f5e92d4492ed", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/470206205588559e60035fceb5f256640cb45f99", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/5cb9e07f84e527974b12e82e2549fa6c0cc6eef0", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-379xx/CVE-2025-37922.json b/CVE-2025/CVE-2025-379xx/CVE-2025-37922.json index 0fb8b53d268..64f7d5b36f6 100644 --- a/CVE-2025/CVE-2025-379xx/CVE-2025-37922.json +++ b/CVE-2025/CVE-2025-379xx/CVE-2025-37922.json @@ -2,8 +2,8 @@ "id": "CVE-2025-37922", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-05-20T16:15:28.827", - "lastModified": "2025-05-21T20:25:16.407", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-10T21:03:24.220", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -15,23 +15,123 @@ "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: book3s64/radix : Alinear la direcci\u00f3n de inicio de la secci\u00f3n vmemmap a PAGE_SIZE Un altmap de vmemmap es una regi\u00f3n proporcionada por el dispositivo que se utiliza para proporcionar almacenamiento de respaldo para p\u00e1ginas de estructura. Para cada espacio de nombres, el altmap debe pertenecer a ese mismo espacio de nombres. Si los espacios de nombres se crean sin alinear, existe la posibilidad de que la direcci\u00f3n de inicio de la secci\u00f3n vmemmap tambi\u00e9n est\u00e9 desalineada. Si la direcci\u00f3n de inicio de la secci\u00f3n vmemmap no est\u00e1 alineada, la p\u00e1gina altmap asignada desde el espacio de nombres actual tambi\u00e9n podr\u00eda ser utilizada por el espacio de nombres anterior. Durante la operaci\u00f3n de liberaci\u00f3n, dado que el altmap se comparte entre dos espacios de nombres, el espacio de nombres anterior puede detectar que la p\u00e1gina no pertenece a su altmap y asumir incorrectamente que la p\u00e1gina es una p\u00e1gina normal. Entonces intenta liberar la p\u00e1gina normal, lo que provoca un fallo del kernel. El kernel intent\u00f3 leer la p\u00e1gina del usuario (18): \u00bfintento de explotaci\u00f3n? (uid: 0) ERROR: Desreferencia de puntero NULL del kernel en lectura en 0x00000018 Direcci\u00f3n de instrucci\u00f3n con errores: 0xc000000000530c7c Oops: Acceso del kernel al \u00e1rea incorrecta, sig: 11 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries CPU: 32 PID: 2104 Comm: ndctl Kdump: cargado Contaminado: GW NIP: c000000000530c7c LR: c000000000530e00 CTR: 0000000000007ffe REGS: c000000015e57040 TRAP: 0300 Contaminado: GW MSR: 800000000280b033 CR: 84482404 CFAR: c000000000530dfc DAR: 00000000000000018 DSISR: 40000000 IRQMASK: 0 GPR00: c000000000530e00 c000000015e572e0 c000000002c5cb00 c00c000101008040 GPR04: 00000000000000000 0000000000000007 0000000000000001 0000000000000001f GPR08: 0000000000000005 0000000000000000 0000000000000018 0000000000002000 GPR12: c0000000001d2fb0 c0000060de6b0080 0000000000000000 c0000060dbf90020 GPR16: c00c000101008000 0000000000000001 000000000000000 c000000125b20f00 GPR20: 0000000000000001 0000000000000000 ffffffffffffffff c00c000101007fff GPR24: 0000000000000001 0000000000000000 0000000000000000 0000000000000000 GPR28: 0000000004040201 000000000000001 000000000000000 c00c000101008040 NIP [c000000000530c7c] m\u00e1scara_obtener_indicadores_pfnblock+0x7c/0xd0 LR [c000000000530e00] free_unref_page_prepare+0x130/0x4f0 Rastreo de llamadas: free_unref_page+0x50/0x1e0 free_reserved_page+0x40/0x68 free_vmemmap_pages+0x98/0xe0 remove_pte_table+0x164/0x1e8 remove_pmd_table+0x204/0x2c8 remove_pud_table+0x1c4/0x288 remove_pagetable+0x1c8/0x310 vmemmap_free+0x24/0x50 section_deactivate+0x28c/0x2a0 __remove_pages+0x84/0x110 arch_remove_memory+0x38/0x60 Otro problema es que si no hay un altmap, se asignar\u00e1 una p\u00e1gina vmemmap del tama\u00f1o de PMD desde la RAM, independientemente de la alineaci\u00f3n de la direcci\u00f3n de inicio de la secci\u00f3n. Si la direcci\u00f3n de inicio de la secci\u00f3n no est\u00e1 alineada con el tama\u00f1o de PMD, se activar\u00e1 un error VM_BUG_ON al configurar la p\u00e1gina de tama\u00f1o PMD en la tabla de p\u00e1ginas. En esta revisi\u00f3n, estamos alineando la direcci\u00f3n de inicio de vmemmap de la secci\u00f3n con PAGE_SIZE. Despu\u00e9s de la alineaci\u00f3n, la direcci\u00f3n de inicio no formar\u00e1 parte del espacio de nombres actual y se asignar\u00e1 una p\u00e1gina normal para la asignaci\u00f3n de vmemmap de la secci\u00f3n actual. Para las secciones restantes, se asignar\u00e1n mapas alternativos. Durante la operaci\u00f3n de liberaci\u00f3n, la p\u00e1gina normal se liberar\u00e1 correctamente. De la misma manera, se asignar\u00e1 una p\u00e1gina vmemmap PMD_SIZE solo si la direcci\u00f3n de inicio de la secci\u00f3n est\u00e1 alineada con PMD_SIZE; de lo contrario, se recurrir\u00e1 a una asignaci\u00f3n de vmemmap de tama\u00f1o PAGE. Sin esta revisi\u00f3n ===================== Inicio de NS1 Inicio de NS2 _________________________________________________________ | NS1 | NS2 | --------------------------------------------------------- | Altmap| Altmap | .....|Altmap| Altmap | ........... | NS1 | NS1 ---truncado---" } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-476" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.6", + "versionEndExcluding": "6.6.90", + "matchCriteriaId": "391F5581-3B83-445C-A49A-D27F71214D1B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.7", + "versionEndExcluding": "6.12.28", + "matchCriteriaId": "5082CE19-0F3D-4521-AB3E-810D8255F500" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "6.13", + "versionEndExcluding": "6.14.6", + "matchCriteriaId": "19E5095E-5950-43EA-8E78-FC860855293F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*", + "matchCriteriaId": "8D465631-2980-487A-8E65-40AE2B9F8ED1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*", + "matchCriteriaId": "4C9D071F-B28E-46EC-AC61-22B913390211" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*", + "matchCriteriaId": "13FC0DDE-E513-465E-9E81-515702D49B74" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*", + "matchCriteriaId": "8C7B5B0E-4EEB-48F5-B4CF-0935A7633845" + } + ] + } + ] + } + ], "references": [ { "url": "https://git.kernel.org/stable/c/400be767deaf31a073c6d14c5d151ae5ac2a60e2", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/7f5476d80f2cb364701cd1fa138a14b241ca99e9", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9a8d4d7072d4df108479b1adc4b0840e96f6f61d", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] }, { "url": "https://git.kernel.org/stable/c/9cf7e13fecbab0894f6986fc6986ab2eba8de52e", - "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67" + "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", + "tags": [ + "Patch" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48055.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48055.json new file mode 100644 index 00000000000..61008a87aca --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48055.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48055", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T21:15:38.907", + "lastModified": "2025-11-10T21:15:38.907", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. In versions prior to 3.2.2, when displaying content in a browse brick in the user portal, a cross-site scripting attack can occur. This is fixed in versions 3.2.2 and 3.3.0." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-684h-f39j-5gq8", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-480xx/CVE-2025-48065.json b/CVE-2025/CVE-2025-480xx/CVE-2025-48065.json new file mode 100644 index 00000000000..9ce1cb7a039 --- /dev/null +++ b/CVE-2025/CVE-2025-480xx/CVE-2025-48065.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48065", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T21:15:39.103", + "lastModified": "2025-11-10T21:15:39.103", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when a field with an error contains malicious content. Versions 2.7.13 and 3.2.2 protect rendered HTML content." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-292c-hgcf-2g22", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-488xx/CVE-2025-48878.json b/CVE-2025/CVE-2025-488xx/CVE-2025-48878.json new file mode 100644 index 00000000000..d2a02594dbd --- /dev/null +++ b/CVE-2025/CVE-2025-488xx/CVE-2025-48878.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-48878", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T21:15:39.263", + "lastModified": "2025-11-10T21:15:39.263", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user (e.g. with Service desk agent profile) to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-rj75-7cgw-4556", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-491xx/CVE-2025-49145.json b/CVE-2025/CVE-2025-491xx/CVE-2025-49145.json new file mode 100644 index 00000000000..2e4d2313a47 --- /dev/null +++ b/CVE-2025/CVE-2025-491xx/CVE-2025-49145.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-49145", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:35.760", + "lastModified": "2025-11-10T22:15:35.760", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, a user that has enough rights to create webhooks (mostly administrators) can drop the database. This is fixed in iTop 2.7.13 and 3.2.2 by verifying callback signature." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.3, + "impactScore": 5.8 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-55q8-mfxr-pq4j", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-557xx/CVE-2025-55752.json b/CVE-2025/CVE-2025-557xx/CVE-2025-55752.json index 41086c8a3b0..9f64d34bf41 100644 --- a/CVE-2025/CVE-2025-557xx/CVE-2025-55752.json +++ b/CVE-2025/CVE-2025-557xx/CVE-2025-55752.json @@ -2,7 +2,7 @@ "id": "CVE-2025-55752", "sourceIdentifier": "security@apache.org", "published": "2025-10-27T18:15:42.283", - "lastModified": "2025-11-04T22:16:31.213", + "lastModified": "2025-11-10T22:15:35.940", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -55,6 +55,14 @@ { "url": "http://www.openwall.com/lists/oss-security/2025/10/27/4", "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.vicarius.io/vsociety/posts/cve-2025-55752-detect-apache-tomcat-vulnerability", + "source": "af854a3a-2127-422b-91ae-364da2661108" + }, + { + "url": "https://www.vicarius.io/vsociety/posts/cve-2025-55752-mitigate-apache-tomcat-vulnerability", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62254.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62254.json index 609303a1a9c..1738c6d4ff0 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62254.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62254.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62254", "sourceIdentifier": "security@liferay.com", "published": "2025-10-23T23:15:37.700", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T22:14:11.877", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,742 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:-:*:*:*:*:*:*", + "matchCriteriaId": "6F6A98ED-E694-4F39-95D0-C152BD1EC115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2CD6861A-D546-462F-8B22-FA76A4AF8A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "324BB977-5AAC-4367-98FC-605FF4997B3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2BBA40AC-4619-434B-90CF-4D29A1CA6D86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "135BED68-C2EC-4EE7-9138-91E0EE3608EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:-:*:*:*:*:*:*", + "matchCriteriaId": "96E84DBC-C740-4E23-8D1D-83C8AE49813E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*", + "matchCriteriaId": "8B1B2384-764F-43CC-8206-36DCBE9DDCBF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*", + "matchCriteriaId": "C7B02106-D5EA-4A59-A959-CCE2AC8F55BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*", + "matchCriteriaId": "80204464-5DC5-4A52-B844-C833A96E6BD4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*", + "matchCriteriaId": "6F8A5D02-0B45-4DA9-ACD8-42C1BFF62827" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*", + "matchCriteriaId": "38DA7C99-AC2C-4B9A-B611-4697159E1D79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*", + "matchCriteriaId": "F264AD07-D105-4F00-8920-6D8146E4FA63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*", + "matchCriteriaId": "C929CF16-4725-492A-872B-0928FE388FC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*", + "matchCriteriaId": "1B8750A1-E481-48D4-84F4-97D1ABE15B46" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*", + "matchCriteriaId": "454F8410-D9AC-481E-841C-60F0DF2CC25E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*", + "matchCriteriaId": "D1A442EE-460F-4823-B9EF-4421050F0847" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*", + "matchCriteriaId": "608B205D-0B79-4D1C-B2C1-64C31DB1896E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*", + "matchCriteriaId": "10B863B8-201D-494C-8175-168820996174" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*", + "matchCriteriaId": "4427DC78-E80C-4057-A295-B0731437A99E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*", + "matchCriteriaId": "22B6B8C1-1FF3-41BC-9576-16193AE20CC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*", + "matchCriteriaId": "DDA17F24-1A7E-4BEB-9C98-41761A2A36A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*", + "matchCriteriaId": "3B062851-CE6B-44F4-8222-422EC9872EC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*", + "matchCriteriaId": "D4687FDA-0078-4E89-ADD8-7EDDA68261A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*", + "matchCriteriaId": "7EA29B09-CC24-4063-96A5-96AA08C0886D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*", + "matchCriteriaId": "331FC246-D3E9-4711-B305-BE51BF743CF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*", + "matchCriteriaId": "A5823BC0-8C11-4C31-9E99-3C9D82918E2A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*", + "matchCriteriaId": "E2E6CB66-1AE1-4626-8070-64C250ED8363" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*", + "matchCriteriaId": "B63449AA-6831-4290-B1FA-0BB806820402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*", + "matchCriteriaId": "CBF766CE-CBB8-472A-BAF0-BD39A7BCB4DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*", + "matchCriteriaId": "B3B169F6-B8B8-4612-AD7D-F75CC6A9297B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*", + "matchCriteriaId": "12D46756-D26D-4877-ACE8-1C2721908428" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*", + "matchCriteriaId": "5403DCEF-20C2-4568-8DF1-30804F522915" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*", + "matchCriteriaId": "90E39742-90BE-4DEB-AB78-F9B8F7333F9A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*", + "matchCriteriaId": "9D07DB20-9DCF-4C05-99D2-F6B37A082C14" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*", + "matchCriteriaId": "341D1157-8118-4BD3-A902-36E90E066706" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*", + "matchCriteriaId": "1AB71307-7EAA-436A-9CBC-5A94F034FB48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*", + "matchCriteriaId": "9446B3A5-6647-416C-92AF-7B6E0E929765" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*", + "matchCriteriaId": "06386C7A-CAA1-4FC4-9182-5A66342FB903" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*", + "matchCriteriaId": "8C84B701-B9A1-43D0-AF0C-30EDBD24CF90" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*", + "matchCriteriaId": "182FAA46-D9FB-4170-B305-BAD0DF6E5DE9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*", + "matchCriteriaId": "BA9AF651-D118-4437-B400-531B26BF6801" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*", + "matchCriteriaId": "2B256485-E289-4092-B45B-835DE12625B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*", + "matchCriteriaId": "119B54BD-75F4-46A4-A57D-16CFF4E12CEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*", + "matchCriteriaId": "A3382E2D-A414-40A1-A330-619859756A36" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*", + "matchCriteriaId": "2E07B750-55B6-4DB6-B02B-216C2F5505A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*", + "matchCriteriaId": "B921E670-480F-4793-A636-3855A1654908" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*", + "matchCriteriaId": "62AE52FE-FB7F-4339-BDDE-E5AD235BBC58" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*", + "matchCriteriaId": "C99508DB-19E9-4832-AB38-57C61C7D68BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*", + "matchCriteriaId": "67F50AF8-7B0E-4D01-9EB2-C6625E9DACB6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*", + "matchCriteriaId": "131E4E65-D997-47F1-8CB8-15CE6A60AB1D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*", + "matchCriteriaId": "DF1BB9E6-D690-4C12-AEF0-4BD712869CBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*", + "matchCriteriaId": "CCD1DEA0-8823-4780-B5EE-C1A2BB3C6B4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*", + "matchCriteriaId": "94AC684E-3C5F-4859-B6EB-42C478F9DD11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*", + "matchCriteriaId": "DC6FF5AB-B6E4-45D9-854B-29DEC200DA4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*", + "matchCriteriaId": "9855E3CB-925E-4623-A776-59422AB2FC6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*", + "matchCriteriaId": "01C3B7BE-1F9B-4EDA-990C-A4022CB85612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*", + "matchCriteriaId": "65CF766C-626D-4F8C-BDBF-F0C5404DD545" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*", + "matchCriteriaId": "720EF24C-9A36-405B-A380-6114C150B376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*", + "matchCriteriaId": "44479EF5-40BD-43A2-AD0F-CE1660222AB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*", + "matchCriteriaId": "B8E0BD92-0F77-481E-8167-F81755E00703" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*", + "matchCriteriaId": "2BDB885E-814A-4CA8-A81C-1DB35989089B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*", + "matchCriteriaId": "653A0452-070F-4312-B94A-F5BCB01B9BDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*", + "matchCriteriaId": "B73DA1AE-C62F-4E62-AA98-5697656825F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*", + "matchCriteriaId": "D49DEE85-4DDB-4EF4-9F4D-11E7C1364055" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*", + "matchCriteriaId": "365F28B6-DBF2-45BB-A06D-DD80CFBAD7BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update63:*:*:*:*:*:*", + "matchCriteriaId": "5FDAD47C-C2DA-4533-AA58-DD6EC09A580A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update64:*:*:*:*:*:*", + "matchCriteriaId": "5F81F36F-B20F-48B3-A1F2-3D319A34176B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update65:*:*:*:*:*:*", + "matchCriteriaId": "754329CD-30B7-4410-A371-56A7C261B61B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update66:*:*:*:*:*:*", + "matchCriteriaId": "C9445405-6B94-4DD1-BA94-B600AA316BB7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update67:*:*:*:*:*:*", + "matchCriteriaId": "960F3F22-9CC8-4655-9B09-777E5A5A1239" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update68:*:*:*:*:*:*", + "matchCriteriaId": "D2B77C89-7F33-47A0-B6BF-473366033BEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update69:*:*:*:*:*:*", + "matchCriteriaId": "8183B9D5-1C4D-4D30-BD85-13850FF34CB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*", + "matchCriteriaId": "15B67345-D0AF-4BFD-A62D-870F75306A4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update70:*:*:*:*:*:*", + "matchCriteriaId": "1675366A-2388-4F7E-B423-D39BC7D3D38D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update71:*:*:*:*:*:*", + "matchCriteriaId": "B93C3CF2-4F45-4F6C-AB6D-F9ABDA7C4DA8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update72:*:*:*:*:*:*", + "matchCriteriaId": "34A6A6A0-9307-4F5D-9605-1F786D1CD62A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update73:*:*:*:*:*:*", + "matchCriteriaId": "6B994132-7103-4132-9D90-11CA264FEDE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update74:*:*:*:*:*:*", + "matchCriteriaId": "A1958E04-AB8A-4B0E-AB45-B810CAED2EEF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update75:*:*:*:*:*:*", + "matchCriteriaId": "BB5558B0-6714-4B3A-B287-1943517A975A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update76:*:*:*:*:*:*", + "matchCriteriaId": "7E325115-EEBC-41F4-8606-45270DA40B98" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update77:*:*:*:*:*:*", + "matchCriteriaId": "848B2C72-447D-46E2-A5A7-43CF3764E578" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update78:*:*:*:*:*:*", + "matchCriteriaId": "26A0AF15-52A9-46FD-8157-359141332EAF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update79:*:*:*:*:*:*", + "matchCriteriaId": "63D63872-C1D0-444F-BCC7-A514F323C256" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*", + "matchCriteriaId": "DE1F4262-A054-48CC-BF1D-AA77A94FFFE4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update80:*:*:*:*:*:*", + "matchCriteriaId": "9D9FA9AD-39D3-412A-B794-E1B29EEEEC4A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update81:*:*:*:*:*:*", + "matchCriteriaId": "294D8A56-A797-433C-A06E-106B2179151A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update82:*:*:*:*:*:*", + "matchCriteriaId": "824D88D9-4645-4CAD-8CAB-30F27DD388C4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update83:*:*:*:*:*:*", + "matchCriteriaId": "F6E8C952-B455-46E4-AC3D-D38CAF189F60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update84:*:*:*:*:*:*", + "matchCriteriaId": "CD77C0EE-AC79-4443-A502-C1E02F806911" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update85:*:*:*:*:*:*", + "matchCriteriaId": "648EB53C-7A90-4DA6-BF1C-B5336CDE30C7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update86:*:*:*:*:*:*", + "matchCriteriaId": "39835EF7-8E93-4695-973D-6E9B76C67372" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update87:*:*:*:*:*:*", + "matchCriteriaId": "2A05FB86-332B-44E3-93CB-82465A38976E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update88:*:*:*:*:*:*", + "matchCriteriaId": "7C754823-899C-4EEF-ACB7-E1551FA88B25" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update89:*:*:*:*:*:*", + "matchCriteriaId": "493D4C18-DEE2-4040-9C13-3A9AB2CE47BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*", + "matchCriteriaId": "D176CECA-2821-49EA-86EC-1184C133C0A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update90:*:*:*:*:*:*", + "matchCriteriaId": "8F17DD75-E63B-4E4C-B136-D43F17B389EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update91:*:*:*:*:*:*", + "matchCriteriaId": "62EE759A-78AD-40D6-8C5B-10403A8A4A89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update92:*:*:*:*:*:*", + "matchCriteriaId": "865ABA1F-CA99-4602-B325-F81C9778855C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.5:*:*:*:*:*:*:*", + "matchCriteriaId": "62432289-E1DC-4013-85C7-6B77299A910F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "B5CE3202-2723-44A6-B63F-061138287FDA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.1:*:*:*:*:*:*:*", + "matchCriteriaId": "A27A8480-7EE1-4265-9117-D6C234ACAC5F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.2:*:*:*:*:*:*:*", + "matchCriteriaId": "94425688-725E-41DC-B2D3-14F2A7163AD6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndIncluding": "7.4.3.111", + "matchCriteriaId": "0BFCEA12-0F2E-48D8-A2F0-ADC8949A203B" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62254", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62256.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62256.json index 8bee758af33..995071d2041 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62256.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62256.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62256", "sourceIdentifier": "security@liferay.com", "published": "2025-10-23T14:15:42.980", - "lastModified": "2025-10-27T13:20:33.350", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T22:14:32.160", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,767 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:-:*:*:*:*:*:*", + "matchCriteriaId": "6F6A98ED-E694-4F39-95D0-C152BD1EC115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2CD6861A-D546-462F-8B22-FA76A4AF8A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "324BB977-5AAC-4367-98FC-605FF4997B3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2BBA40AC-4619-434B-90CF-4D29A1CA6D86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "135BED68-C2EC-4EE7-9138-91E0EE3608EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:-:*:*:*:*:*:*", + "matchCriteriaId": "96E84DBC-C740-4E23-8D1D-83C8AE49813E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*", + "matchCriteriaId": "8B1B2384-764F-43CC-8206-36DCBE9DDCBF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*", + "matchCriteriaId": "C7B02106-D5EA-4A59-A959-CCE2AC8F55BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*", + "matchCriteriaId": "80204464-5DC5-4A52-B844-C833A96E6BD4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*", + "matchCriteriaId": "6F8A5D02-0B45-4DA9-ACD8-42C1BFF62827" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*", + "matchCriteriaId": "38DA7C99-AC2C-4B9A-B611-4697159E1D79" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*", + "matchCriteriaId": "F264AD07-D105-4F00-8920-6D8146E4FA63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*", + "matchCriteriaId": "C929CF16-4725-492A-872B-0928FE388FC9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*", + "matchCriteriaId": "1B8750A1-E481-48D4-84F4-97D1ABE15B46" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*", + "matchCriteriaId": "454F8410-D9AC-481E-841C-60F0DF2CC25E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*", + "matchCriteriaId": "D1A442EE-460F-4823-B9EF-4421050F0847" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*", + "matchCriteriaId": "608B205D-0B79-4D1C-B2C1-64C31DB1896E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*", + "matchCriteriaId": "10B863B8-201D-494C-8175-168820996174" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*", + "matchCriteriaId": "4427DC78-E80C-4057-A295-B0731437A99E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*", + "matchCriteriaId": "22B6B8C1-1FF3-41BC-9576-16193AE20CC7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*", + "matchCriteriaId": "DDA17F24-1A7E-4BEB-9C98-41761A2A36A2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*", + "matchCriteriaId": "3B062851-CE6B-44F4-8222-422EC9872EC3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*", + "matchCriteriaId": "D4687FDA-0078-4E89-ADD8-7EDDA68261A4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*", + "matchCriteriaId": "7EA29B09-CC24-4063-96A5-96AA08C0886D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*", + "matchCriteriaId": "331FC246-D3E9-4711-B305-BE51BF743CF7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*", + "matchCriteriaId": "A5823BC0-8C11-4C31-9E99-3C9D82918E2A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*", + "matchCriteriaId": "E2E6CB66-1AE1-4626-8070-64C250ED8363" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*", + "matchCriteriaId": "B63449AA-6831-4290-B1FA-0BB806820402" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*", + "matchCriteriaId": "CBF766CE-CBB8-472A-BAF0-BD39A7BCB4DE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*", + "matchCriteriaId": "B3B169F6-B8B8-4612-AD7D-F75CC6A9297B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*", + "matchCriteriaId": "12D46756-D26D-4877-ACE8-1C2721908428" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*", + "matchCriteriaId": "5403DCEF-20C2-4568-8DF1-30804F522915" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*", + "matchCriteriaId": "90E39742-90BE-4DEB-AB78-F9B8F7333F9A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*", + "matchCriteriaId": "9D07DB20-9DCF-4C05-99D2-F6B37A082C14" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*", + "matchCriteriaId": "341D1157-8118-4BD3-A902-36E90E066706" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*", + "matchCriteriaId": "1AB71307-7EAA-436A-9CBC-5A94F034FB48" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*", + "matchCriteriaId": "9446B3A5-6647-416C-92AF-7B6E0E929765" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*", + "matchCriteriaId": "06386C7A-CAA1-4FC4-9182-5A66342FB903" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*", + "matchCriteriaId": "8C84B701-B9A1-43D0-AF0C-30EDBD24CF90" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*", + "matchCriteriaId": "182FAA46-D9FB-4170-B305-BAD0DF6E5DE9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*", + "matchCriteriaId": "BA9AF651-D118-4437-B400-531B26BF6801" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*", + "matchCriteriaId": "2B256485-E289-4092-B45B-835DE12625B9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*", + "matchCriteriaId": "119B54BD-75F4-46A4-A57D-16CFF4E12CEB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*", + "matchCriteriaId": "A3382E2D-A414-40A1-A330-619859756A36" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*", + "matchCriteriaId": "2E07B750-55B6-4DB6-B02B-216C2F5505A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*", + "matchCriteriaId": "B921E670-480F-4793-A636-3855A1654908" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*", + "matchCriteriaId": "62AE52FE-FB7F-4339-BDDE-E5AD235BBC58" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*", + "matchCriteriaId": "C99508DB-19E9-4832-AB38-57C61C7D68BC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*", + "matchCriteriaId": "67F50AF8-7B0E-4D01-9EB2-C6625E9DACB6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*", + "matchCriteriaId": "131E4E65-D997-47F1-8CB8-15CE6A60AB1D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*", + "matchCriteriaId": "DF1BB9E6-D690-4C12-AEF0-4BD712869CBA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*", + "matchCriteriaId": "CCD1DEA0-8823-4780-B5EE-C1A2BB3C6B4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*", + "matchCriteriaId": "94AC684E-3C5F-4859-B6EB-42C478F9DD11" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*", + "matchCriteriaId": "DC6FF5AB-B6E4-45D9-854B-29DEC200DA4D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*", + "matchCriteriaId": "9855E3CB-925E-4623-A776-59422AB2FC6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*", + "matchCriteriaId": "01C3B7BE-1F9B-4EDA-990C-A4022CB85612" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*", + "matchCriteriaId": "65CF766C-626D-4F8C-BDBF-F0C5404DD545" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*", + "matchCriteriaId": "720EF24C-9A36-405B-A380-6114C150B376" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*", + "matchCriteriaId": "44479EF5-40BD-43A2-AD0F-CE1660222AB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*", + "matchCriteriaId": "B8E0BD92-0F77-481E-8167-F81755E00703" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*", + "matchCriteriaId": "2BDB885E-814A-4CA8-A81C-1DB35989089B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*", + "matchCriteriaId": "653A0452-070F-4312-B94A-F5BCB01B9BDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*", + "matchCriteriaId": "B73DA1AE-C62F-4E62-AA98-5697656825F9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*", + "matchCriteriaId": "D49DEE85-4DDB-4EF4-9F4D-11E7C1364055" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*", + "matchCriteriaId": "365F28B6-DBF2-45BB-A06D-DD80CFBAD7BD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update63:*:*:*:*:*:*", + "matchCriteriaId": "5FDAD47C-C2DA-4533-AA58-DD6EC09A580A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update64:*:*:*:*:*:*", + "matchCriteriaId": "5F81F36F-B20F-48B3-A1F2-3D319A34176B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update65:*:*:*:*:*:*", + "matchCriteriaId": "754329CD-30B7-4410-A371-56A7C261B61B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update66:*:*:*:*:*:*", + "matchCriteriaId": "C9445405-6B94-4DD1-BA94-B600AA316BB7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update67:*:*:*:*:*:*", + "matchCriteriaId": "960F3F22-9CC8-4655-9B09-777E5A5A1239" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update68:*:*:*:*:*:*", + "matchCriteriaId": "D2B77C89-7F33-47A0-B6BF-473366033BEA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update69:*:*:*:*:*:*", + "matchCriteriaId": "8183B9D5-1C4D-4D30-BD85-13850FF34CB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*", + "matchCriteriaId": "15B67345-D0AF-4BFD-A62D-870F75306A4F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update70:*:*:*:*:*:*", + "matchCriteriaId": "1675366A-2388-4F7E-B423-D39BC7D3D38D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update71:*:*:*:*:*:*", + "matchCriteriaId": "B93C3CF2-4F45-4F6C-AB6D-F9ABDA7C4DA8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update72:*:*:*:*:*:*", + "matchCriteriaId": "34A6A6A0-9307-4F5D-9605-1F786D1CD62A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update73:*:*:*:*:*:*", + "matchCriteriaId": "6B994132-7103-4132-9D90-11CA264FEDE3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update74:*:*:*:*:*:*", + "matchCriteriaId": "A1958E04-AB8A-4B0E-AB45-B810CAED2EEF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update75:*:*:*:*:*:*", + "matchCriteriaId": "BB5558B0-6714-4B3A-B287-1943517A975A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update76:*:*:*:*:*:*", + "matchCriteriaId": "7E325115-EEBC-41F4-8606-45270DA40B98" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update77:*:*:*:*:*:*", + "matchCriteriaId": "848B2C72-447D-46E2-A5A7-43CF3764E578" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update78:*:*:*:*:*:*", + "matchCriteriaId": "26A0AF15-52A9-46FD-8157-359141332EAF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update79:*:*:*:*:*:*", + "matchCriteriaId": "63D63872-C1D0-444F-BCC7-A514F323C256" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*", + "matchCriteriaId": "DE1F4262-A054-48CC-BF1D-AA77A94FFFE4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update80:*:*:*:*:*:*", + "matchCriteriaId": "9D9FA9AD-39D3-412A-B794-E1B29EEEEC4A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update81:*:*:*:*:*:*", + "matchCriteriaId": "294D8A56-A797-433C-A06E-106B2179151A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update82:*:*:*:*:*:*", + "matchCriteriaId": "824D88D9-4645-4CAD-8CAB-30F27DD388C4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update83:*:*:*:*:*:*", + "matchCriteriaId": "F6E8C952-B455-46E4-AC3D-D38CAF189F60" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update84:*:*:*:*:*:*", + "matchCriteriaId": "CD77C0EE-AC79-4443-A502-C1E02F806911" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update85:*:*:*:*:*:*", + "matchCriteriaId": "648EB53C-7A90-4DA6-BF1C-B5336CDE30C7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update86:*:*:*:*:*:*", + "matchCriteriaId": "39835EF7-8E93-4695-973D-6E9B76C67372" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update87:*:*:*:*:*:*", + "matchCriteriaId": "2A05FB86-332B-44E3-93CB-82465A38976E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update88:*:*:*:*:*:*", + "matchCriteriaId": "7C754823-899C-4EEF-ACB7-E1551FA88B25" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update89:*:*:*:*:*:*", + "matchCriteriaId": "493D4C18-DEE2-4040-9C13-3A9AB2CE47BF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*", + "matchCriteriaId": "D176CECA-2821-49EA-86EC-1184C133C0A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update90:*:*:*:*:*:*", + "matchCriteriaId": "8F17DD75-E63B-4E4C-B136-D43F17B389EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update91:*:*:*:*:*:*", + "matchCriteriaId": "62EE759A-78AD-40D6-8C5B-10403A8A4A89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:update92:*:*:*:*:*:*", + "matchCriteriaId": "865ABA1F-CA99-4602-B325-F81C9778855C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.5:*:*:*:*:*:*:*", + "matchCriteriaId": "62432289-E1DC-4013-85C7-6B77299A910F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.6:*:*:*:*:*:*:*", + "matchCriteriaId": "0912EEFE-DC56-43F6-AE0E-A4E2A033F3C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.7:*:*:*:*:*:*:*", + "matchCriteriaId": "9398F679-5F47-4DF2-AA91-4A21126675C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "B5CE3202-2723-44A6-B63F-061138287FDA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.1:*:*:*:*:*:*:*", + "matchCriteriaId": "A27A8480-7EE1-4265-9117-D6C234ACAC5F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.2:*:*:*:*:*:*:*", + "matchCriteriaId": "94425688-725E-41DC-B2D3-14F2A7163AD6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.3:*:*:*:*:*:*:*", + "matchCriteriaId": "623CA096-BDBB-4F59-B734-07FB405800CE" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.4:*:*:*:*:*:*:*", + "matchCriteriaId": "30B27CBE-14BA-4EBB-8B74-91DD1228A1F5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.5:*:*:*:*:*:*:*", + "matchCriteriaId": "81EDBB1C-9EBB-4FAD-ADAC-B5A890BB3F50" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.3.110", + "matchCriteriaId": "2AC6B06A-A636-473A-9E51-1B2363C5866F" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62256", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62257.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62257.json index 750fc596b96..b0c68ea7cd0 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62257.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62257.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62257", "sourceIdentifier": "security@liferay.com", "published": "2025-10-30T00:15:34.907", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:37:25.233", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,10 +91,73 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*", + "versionEndIncluding": "7.4", + "matchCriteriaId": "5F7BCC0B-5F36-4E6B-AABE-61B88E9A99D8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.0:*:*:*:*:*:*:*", + "matchCriteriaId": "B7B3A5E2-23CE-45A8-BD01-77024EB9F9A9" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q4.0:*:*:*:*:*:*:*", + "matchCriteriaId": "B5CE3202-2723-44A6-B63F-061138287FDA" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2024.q1.1:*:*:*:*:*:*:*", + "matchCriteriaId": "84E1655E-87BB-4490-8F65-EE8686546DF6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2024.q1.2:*:*:*:*:*:*:*", + "matchCriteriaId": "93A7FEFE-C60F-42E8-82BA-30015A4D476D" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2024.q1.3:*:*:*:*:*:*:*", + "matchCriteriaId": "FFA76949-2A0E-4786-968D-46CEEC4DC97C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2024.q1.4:*:*:*:*:*:*:*", + "matchCriteriaId": "3FF38EA6-313C-4008-AC47-EA17F7F82D80" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2024.q1.5:*:*:*:*:*:*:*", + "matchCriteriaId": "B9516741-5C31-41AB-B53E-9E42A145AF89" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.3.120", + "matchCriteriaId": "1451AFB7-E0CC-40E1-9A92-0F7EC0AFA72F" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62257", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62258.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62258.json index d664f079d1c..07115cd6e7d 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62258.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62258.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62258", "sourceIdentifier": "security@liferay.com", "published": "2025-10-27T23:15:38.520", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:39:01.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,262 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:-:*:*:*:*:*:*", + "matchCriteriaId": "6F6A98ED-E694-4F39-95D0-C152BD1EC115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2CD6861A-D546-462F-8B22-FA76A4AF8A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "324BB977-5AAC-4367-98FC-605FF4997B3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2BBA40AC-4619-434B-90CF-4D29A1CA6D86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "135BED68-C2EC-4EE7-9138-91E0EE3608EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", + "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.3.108", + "matchCriteriaId": "D23EB185-798C-4F89-8AAA-6D229BCD8BA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62258", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62260.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62260.json index b559fba65f1..3946b84bb49 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62260.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62260.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62260", "sourceIdentifier": "security@liferay.com", "published": "2025-10-27T22:15:41.590", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:56:20.490", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,262 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:-:*:*:*:*:*:*", + "matchCriteriaId": "6F6A98ED-E694-4F39-95D0-C152BD1EC115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2CD6861A-D546-462F-8B22-FA76A4AF8A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "324BB977-5AAC-4367-98FC-605FF4997B3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2BBA40AC-4619-434B-90CF-4D29A1CA6D86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "135BED68-C2EC-4EE7-9138-91E0EE3608EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", + "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.4.0", + "versionEndExcluding": "7.4.3.99", + "matchCriteriaId": "244E76D8-4B8B-47B2-9E86-FD9FCAFA4F8B" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62260", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62261.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62261.json index 7ec75ae4d78..981e701f942 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62261.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62261.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62261", "sourceIdentifier": "security@liferay.com", "published": "2025-10-27T22:15:41.733", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T21:49:33.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,257 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:-:*:*:*:*:*:*", + "matchCriteriaId": "6F6A98ED-E694-4F39-95D0-C152BD1EC115" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2CD6861A-D546-462F-8B22-FA76A4AF8A9C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:fix_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "324BB977-5AAC-4367-98FC-605FF4997B3F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_1:*:*:*:*:*:*", + "matchCriteriaId": "2BBA40AC-4619-434B-90CF-4D29A1CA6D86" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_2:*:*:*:*:*:*", + "matchCriteriaId": "135BED68-C2EC-4EE7-9138-91E0EE3608EB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", + "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.0", + "versionEndExcluding": "7.4.3.100", + "matchCriteriaId": "CD3B6473-71B9-4456-AF7C-74B854B8E569" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62261", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62262.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62262.json index 5f74f8bcb30..a5357f9f259 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62262.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62262.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62262", "sourceIdentifier": "security@liferay.com", "published": "2025-10-27T21:15:37.577", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T22:03:58.983", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.4, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -69,10 +91,242 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update36:*:*:*:*:*:*", + "matchCriteriaId": "E7FBF515-C800-41F3-9A0E-E850BE09FA93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", + "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.0.0", + "versionEndExcluding": "7.4.3.98", + "matchCriteriaId": "B435B49D-071A-41A4-B535-831B7BFA9089" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62263", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Not Applicable" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-622xx/CVE-2025-62263.json b/CVE-2025/CVE-2025-622xx/CVE-2025-62263.json index 6fa2d60e8ac..ac523858aa0 100644 --- a/CVE-2025/CVE-2025-622xx/CVE-2025-62263.json +++ b/CVE-2025/CVE-2025-622xx/CVE-2025-62263.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62263", "sourceIdentifier": "security@liferay.com", "published": "2025-10-27T20:15:54.603", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-10T22:05:08.880", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 5.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -69,10 +91,242 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", + "matchCriteriaId": "728DF154-F19F-454C-87CA-1E755107F2A6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", + "matchCriteriaId": "35F42314-AC3F-45B6-8BF8-49811E5F2FAB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", + "matchCriteriaId": "AA984F92-4C6C-4049-A731-96F587B51E75" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", + "matchCriteriaId": "CADDF499-DDC4-4CEE-B512-404EA2024FCB" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", + "matchCriteriaId": "9EC64246-1039-4009-B9BD-7828FA0FA1C5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", + "matchCriteriaId": "D9F352AE-AE22-4A84-94B6-6621D7E0BC59" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", + "matchCriteriaId": "3E84D881-6D47-48FD-B743-9D531F5F7D5C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", + "matchCriteriaId": "1F8A9DEC-2C27-4EBB-B684-8EBDB374CFCC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", + "matchCriteriaId": "C3E7B777-8026-4C8F-9353-B5504873E0F8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", + "matchCriteriaId": "2207FEE5-2537-4C6E-AC9C-EC53DBF3C57E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", + "matchCriteriaId": "087A2B43-07CE-4B3D-B879-449631DDA8D7" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", + "matchCriteriaId": "019CED83-6277-434C-839C-6C4E0C45FB1A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", + "matchCriteriaId": "0ABA624F-C90B-4EAF-91E3-FCEA6997D889" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", + "matchCriteriaId": "6C533124-74E6-4312-9AF7-6496DE2A5152" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", + "matchCriteriaId": "8DDA248D-5F00-4FC1-B857-A7942BAA1F3E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", + "matchCriteriaId": "6C6BA174-69D4-43FC-9395-1B6306A44CDC" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", + "matchCriteriaId": "A465C229-D3FB-43E9-87BE-119BEE9110F0" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", + "matchCriteriaId": "32E98546-CE96-4BB8-A11C-F7E850C155F3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", + "matchCriteriaId": "DD43C626-F2F2-43BA-85AA-6ADAE8A6D11F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", + "matchCriteriaId": "5C72C0E0-7D0B-4E8F-A109-7BB5DCA1C8D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", + "matchCriteriaId": "7E796B04-FF54-4C02-979C-87E137A76F63" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", + "matchCriteriaId": "07C3D771-5E1B-46C4-AAF8-F425377582D2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", + "matchCriteriaId": "B08F95DC-BE49-4717-B959-2BE8BD131953" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", + "matchCriteriaId": "88483D15-5860-42D7-BBF4-7EAE22C885DF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", + "matchCriteriaId": "E915FBC2-9BF7-4A99-B201-1F176D743494" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", + "matchCriteriaId": "E44E02C2-6F83-4525-BF9D-E82CE9A9880E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", + "matchCriteriaId": "660F37C6-61E6-4C34-8A7E-99C7DBEB8319" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", + "matchCriteriaId": "5AD8D0D3-31AC-41E5-A780-5D5B18BF6991" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", + "matchCriteriaId": "02D4C998-77F5-4428-A7B9-F7D909E23E92" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", + "matchCriteriaId": "C6984AC8-461D-488F-A911-7BF1D12B44A5" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update36:*:*:*:*:*:*", + "matchCriteriaId": "E7FBF515-C800-41F3-9A0E-E850BE09FA93" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", + "matchCriteriaId": "AD408C73-7D78-4EB1-AA2C-F4A6D4DC980B" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", + "matchCriteriaId": "513F3229-7C31-44EB-88F6-E564BE725853" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", + "matchCriteriaId": "76B9CD05-A10E-439C-9FDE-EA88EC3AF2C6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", + "matchCriteriaId": "A7D2D415-36AA-41B2-8FD9-21A98CDFE1EF" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", + "matchCriteriaId": "124F2D2E-F8E7-4EDE-A98B-DD72FB43DF20" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", + "matchCriteriaId": "0DEE5985-289E-4138-B7C0-1E471BA7A1FD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*", + "matchCriteriaId": "8E19E344-92B4-4B46-BD89-25EC7191972C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", + "matchCriteriaId": "1EF6451A-2A5D-4222-A1C6-113AA4B8D4E6" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", + "matchCriteriaId": "9D6CE430-3C95-4855-BA44-E2E136D1FEB2" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", + "matchCriteriaId": "44FEB149-C792-493D-B055-568FFC96298A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", + "matchCriteriaId": "B050DD73-71B6-46CD-A35B-7ACB53BE6C6A" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*", + "versionStartIncluding": "7.3.7", + "versionEndExcluding": "7.4.3.104", + "matchCriteriaId": "1F6EA1A6-6ACC-4E9A-8E4F-6A616BCCA97B" + } + ] + } + ] + } + ], "references": [ { "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62263", - "source": "security@liferay.com" + "source": "security@liferay.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62780.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62780.json new file mode 100644 index 00000000000..28c663616ff --- /dev/null +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62780.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-62780", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:36.200", + "lastModified": "2025-11-10T22:15:36.200", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "changedetection.io is a free open source web page change detection tool. A Stored Cross Site Scripting is present in changedetection.io Watch update API in versions prior to 0.50.34 due to insufficient security checks. Two scenarios are possible. In the first, an attacker can insert a new watch with an arbitrary URL which really points to a web page. Once the HTML content is retrieved, the attacker updates the URL with a JavaScript payload. In the second, an attacker substitutes the URL in an existing watch with a new URL that is in reality a JavaScript payload. When the user clicks on *Preview* and then on the malicious link, the JavaScript malicious code is executed. Version 0.50.34 fixes the issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", + "baseScore": 3.5, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 2.5 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4c3j-3h7v-22q9", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/dgtlmoon/changedetection.io/security/advisories/GHSA-4c3j-3h7v-22q9", + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-632xx/CVE-2025-63296.json b/CVE-2025/CVE-2025-632xx/CVE-2025-63296.json new file mode 100644 index 00000000000..7f2bd5cd200 --- /dev/null +++ b/CVE-2025/CVE-2025-632xx/CVE-2025-63296.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63296", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T21:15:39.593", + "lastModified": "2025-11-10T21:15:39.593", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/t4e-3/082cdd0b7ee6b650c7aaae97fd4e016c", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/t4e-3/CVE-2025-63296", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-633xx/CVE-2025-63397.json b/CVE-2025/CVE-2025-633xx/CVE-2025-63397.json new file mode 100644 index 00000000000..cc4377f7c0a --- /dev/null +++ b/CVE-2025/CVE-2025-633xx/CVE-2025-63397.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-63397", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T22:15:36.390", + "lastModified": "2025-11-10T22:15:36.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code during broadcasting/type conversion." + } + ], + "metrics": {}, + "references": [ + { + "url": "http://oneflow.com", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Daisy2ang", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Oneflow-Inc/oneflow", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/Oneflow-Inc/oneflow/issues/10666", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-634xx/CVE-2025-63420.json b/CVE-2025/CVE-2025-634xx/CVE-2025-63420.json index 34fe83a4812..baf398c4d14 100644 --- a/CVE-2025/CVE-2025-634xx/CVE-2025-63420.json +++ b/CVE-2025/CVE-2025-634xx/CVE-2025-63420.json @@ -2,13 +2,13 @@ "id": "CVE-2025-63420", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-07T22:15:39.343", - "lastModified": "2025-11-10T15:15:37.617", + "lastModified": "2025-11-10T22:15:36.557", "vulnStatus": "Received", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "A stored cross-site scripting (XSS) vulnerability in the CrushFTP 11.3.7_50 Admin Panel (Reports / 'Who Created Folder') allows authenticated attackers with permissions to create folders to inject malicious HTML/JavaScript." + "value": "CrushFTP11 before 11.3.7_57 is vulnerable to stored HTML injection in the CrushFTP Admin Panel (Reports / \"Who Created Folder\"), enabling persistent HTML execution in admin sessions." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-636xx/CVE-2025-63617.json b/CVE-2025/CVE-2025-636xx/CVE-2025-63617.json new file mode 100644 index 00000000000..1bc6dc751bf --- /dev/null +++ b/CVE-2025/CVE-2025-636xx/CVE-2025-63617.json @@ -0,0 +1,25 @@ +{ + "id": "CVE-2025-63617", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-10T21:15:39.743", + "lastModified": "2025-11-10T21:15:39.743", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://gist.github.com/ChangeYourWay/8651679a2155269bccf520fcb34fc661", + "source": "cve@mitre.org" + }, + { + "url": "https://github.com/ChangeYourWay/post/blob/main/ktg-mes.md", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64167.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64167.json new file mode 100644 index 00000000000..b410950de70 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64167.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-64167", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:36.753", + "lastModified": "2025-11-10T22:15:36.753", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Combodo iTop is a web based IT service management tool. Versions prior to 2.7.13 and 3.2.2 are vulnerable to a cross-site scripting attack (leading to JS execution) when editing the URL parameter. Versions 2.7.13 and 3.2.2 don't use export.php, which was deprecated. They use export-v2.php instead." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N", + "baseScore": 7.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 4.2 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Combodo/iTop/security/advisories/GHSA-pr7w-2cr9-5h38", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64181.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64181.json new file mode 100644 index 00000000000..84d194bf2ba --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64181.json @@ -0,0 +1,98 @@ +{ + "id": "CVE-2025-64181", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:36.933", + "lastModified": "2025-11-10T22:15:36.933", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while fuzzing `openexr_exrcheck_fuzzer`, Valgrind reports a conditional branch depending on uninitialized data inside `generic_unpack`. This indicates a use of uninitialized memory. The issue can result in undefined behavior and/or a potential crash/denial of service. Versions 3.3.6 and 3.4.3 fix the issue." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 2.0, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-457" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-3h9h-qfvw-98hq", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/user-attachments/files/23024726/archive0.zip", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/user-attachments/files/23024736/archive1.zip", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/user-attachments/files/23024740/archive2.zip", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/user-attachments/files/23024744/archive3.zip", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/user-attachments/files/23024746/archive4.zip", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64182.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64182.json new file mode 100644 index 00000000000..c73489c2b8c --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64182.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-64182", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:37.120", + "lastModified": "2025-11-10T22:15:37.120", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, a memory safety bug in the legacy OpenEXR Python adapter (the deprecated OpenEXR.InputFile wrapper) allow crashes and likely code execution when opening attacker-controlled EXR files or when passing crafted Python objects. Integer overflow and unchecked allocation in InputFile.channel() and InputFile.channels() can lead to heap overflow (32 bit) or a NULL deref (64 bit). Versions 3.2.5, 3.3.6, and 3.4.3 contain a patch for the issue." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-120" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/AcademySoftwareFoundation/openexr/blob/b3a19903db0672c63055023aa788e592b16ec3c5/src/wrappers/python/PyOpenEXR_old.cpp#L528-L536", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vh63-9mqx-wmjr", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64183.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64183.json new file mode 100644 index 00000000000..a6cf9774799 --- /dev/null +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64183.json @@ -0,0 +1,82 @@ +{ + "id": "CVE-2025-64183", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:37.323", + "lastModified": "2025-11-10T22:15:37.323", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there is a use-after-free in PyObject_StealAttrString of pyOpenEXR_old.cpp. The legacy adapter defines PyObject_StealAttrString that calls PyObject_GetAttrString to obtain a new reference, immediately decrefs it, and returns the pointer. Callers then pass this dangling pointer to APIs like PyLong_AsLong/PyFloat_AsDouble, resulting in a use-after-free. This is invoked in multiple places (e.g., reading PixelType.v, Box2i, V2f, etc.) Versions 3.2.5, 3.3.6, and 3.4.3 fix the issue." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/AcademySoftwareFoundation/openexr/blob/b3a19903db0672c63055023aa788e592b16ec3c5/src/wrappers/python/PyOpenEXR_old.cpp#L109-L115", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-57cw-j6vp-2p9m", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-644xx/CVE-2025-64484.json b/CVE-2025/CVE-2025-644xx/CVE-2025-64484.json new file mode 100644 index 00000000000..c97f213bc1b --- /dev/null +++ b/CVE-2025/CVE-2025-644xx/CVE-2025-64484.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-64484", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:37.490", + "lastModified": "2025-11-10T22:15:37.490", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OAuth2-Proxy is an open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. In versions prior to 7.13.0, all deployments of OAuth2 Proxy in front of applications that normalize underscores to dashes in HTTP headers (e.g., WSGI-based frameworks such as Django, Flask, FastAPI, and PHP applications). Authenticated users can inject underscore variants of X-Forwarded-* headers that bypass the proxy\u2019s filtering logic, potentially escalating privileges in the upstream app. OAuth2 Proxy authentication/authorization itself is not compromised. The problem has been patched with v7.13.0. By default all specified headers will now be normalized, meaning that both capitalization and the use of underscores (_) versus dashes (-) will be ignored when matching headers to be stripped. For example, both `X-Forwarded-For` and `X_Forwarded-for` will now be treated as equivalent and stripped away. For those who have a rational that requires keeping a similar looking header and not stripping it, the maintainers introduced a new configuration field for Headers managed through the AlphaConfig called `InsecureSkipHeaderNormalization`. As a workaround, ensure filtering and processing logic in upstream services don't treat underscores and hyphens in Headers the same way." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", + "baseScore": 8.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-644" + } + ] + } + ], + "references": [ + { + "url": "https://datatracker.ietf.org/doc/html/rfc2616#section-4.2", + "source": "security-advisories@github.com" + }, + { + "url": "https://datatracker.ietf.org/doc/html/rfc822#section-3.2", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-vjrc-mh2v-45x6", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.security.telekom.com/2020/05/smuggling-http-headers-through-reverse-proxies.html", + "source": "security-advisories@github.com" + }, + { + "url": "https://www.uptimia.com/questions/why-are-http-headers-with-underscores-dropped-by-nginx", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64501.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64501.json new file mode 100644 index 00000000000..3e01ffc9577 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64501.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-64501", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:37.683", + "lastModified": "2025-11-10T22:15:37.683", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "ProsemirrorToHtml is a JSON converter which takes ProseMirror-compatible JSON and outputs HTML. In versions 0.2.0 and below, the `prosemirror_to_html` gem is vulnerable to Cross-Site Scripting (XSS) attacks through malicious HTML attribute values. While tag content is properly escaped, attribute values are not, allowing attackers to inject arbitrary JavaScript code. Applications that use `prosemirror_to_html` to convert ProseMirror documents to HTML, user-generated ProseMirror content, and end users viewing the rendered HTML output are all at risk of attack. This issue is fixed in version 0.2.1." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", + "baseScore": 7.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.3, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/etaminstudio/prosemirror_to_html/commit/4d59f94f550bcabeec30d298791bbdd883298ad8", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/etaminstudio/prosemirror_to_html/security/advisories/GHSA-52c5-vh7f-26fx", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64502.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64502.json new file mode 100644 index 00000000000..6e7bfcb48e2 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64502.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-64502", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:37.870", + "lastModified": "2025-11-10T22:15:37.870", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB `explain()` method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0-alpha.5, Parse Server permits any client to execute explain queries without requiring the master key. This exposes database schema structure and field names, index configurations and query optimization details, query execution statistics and performance metrics, and potential attack vectors for database performance exploitation. In version 8.5.0-alpha.5, a new `databaseOptions.allowPublicExplain` configuration option has been introduced that allows to restrict `explain` queries to the master key. The option defaults to `true` for now to avoid a breaking change in production systems that depends on public `explain` availability. In addition, a security warning is logged when the option is not explicitly set, or set to `true`. In a future major release of Parse Server, the default will change to `false`. As a workaround, implement middleware to block explain queries from non-master-key requests, or monitor and alert on explain query usage in production environments." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-201" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/parse-community/parse-server/commit/4456b02280c2d8dd58b7250e9e67f1a8647b3452", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/parse-community/parse-server/pull/9890", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/parse-community/parse-server/security/advisories/GHSA-7cx5-254x-cgrq", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64504.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64504.json new file mode 100644 index 00000000000..39d6c45b994 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64504.json @@ -0,0 +1,76 @@ +{ + "id": "CVE-2025-64504", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:39.273", + "lastModified": "2025-11-10T22:15:39.273", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user\u2011controlled orgId and used it in authorization checks. As a result, any authenticated user on the same Langfuse instance could enumerate names and email addresses of users in another organization if they knew the target organization\u2019s ID. Disclosure is limited to names and email addresses of members/invitees. No customer data such as traces, prompts, or evaluations is exposed or accessible. For Langfuse Cloud, the maintainers ran a thorough investigation of access logs of the last 30 days and could not find any evidence that this vulnerability was exploited. For most self-hosting deployments, the attack surface is significantly reduced given an SSO provider is configured and email/password sign-up is disabled. In these cases, only users who authenticate via the Enterprise SSO IdP (e.g. Okta) would be able to exploit this vulnerability to access the member list, i.e. internal users getting access to a list of other internal users. In order to exploit the vulnerability, the actor must have a valid Langfuse user account within the same instance, know the target orgId, and use the request made to the API that powers the frontend membership tables, including their project/user authentication token, while changing the orgId to the target organization. Langfuse Cloud (EU, US, HIPAA) were affected until fix deployment on November 1, 2025. The maintainers reviewed the Langfuse Cloud access logs from the past 30 days and found no evidence that this vulnerability was exploited. Self-Hosted versions which contain patches include v2.95.11 for major version 2 and v3.124.1 for major version 3. There are no known workarounds. Upgrading is required to fully mitigate this issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N", + "baseScore": 5.0, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-202" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/langfuse/langfuse/commit/67990ebfdcf0f0c32a6710efa7ddbda073812ab4", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langfuse/langfuse/commit/6c2529049a4c962928c435984c81a547a497e3e5", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langfuse/langfuse/releases/tag/v2.70.0", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langfuse/langfuse/releases/tag/v2.95.11", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langfuse/langfuse/releases/tag/v3.124.1", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/langfuse/langfuse/security/advisories/GHSA-94hf-6gqq-pj69", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64507.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64507.json new file mode 100644 index 00000000000..cbccaf3f6a3 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64507.json @@ -0,0 +1,86 @@ +{ + "id": "CVE-2025-64507", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:39.460", + "lastModified": "2025-11-10T22:15:39.460", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Incus is a system container and virtual machine manager. An issue in versions prior to 6.0.6 and 6.19.0 affects any Incus user in an environment where an unprivileged user may have root access to a container with an attached custom storage volume that has the `security.shifted` property set to `true` as well as access to the host as an unprivileged user. The most common case for this would be systems using `incus-user` with the less privileged `incus` group to provide unprivileged users with an isolated restricted access to Incus. Such users may be able to create a custom storage volume with the necessary property (depending on kernel and filesystem support) and can then write a setuid binary from within the container which can be executed as an unprivileged user on the host to gain root privileges. A patch for this issue is expected in versions 6.0.6 and 6.19.0. As a workaround, permissions can be manually restricted until a patched version of Incus is deployed." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-269" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lxc/incus/issues/2641", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/lxc/incus/pull/2642", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/lxc/incus/security/advisories/GHSA-56mx-8g9f-5crf", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64508.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64508.json new file mode 100644 index 00000000000..8fce99bb05a --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64508.json @@ -0,0 +1,84 @@ +{ + "id": "CVE-2025-64508", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:39.640", + "lastModified": "2025-11-10T22:15:39.640", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli \"bombs\" (highly compressed brotli streams, such as many zeros) can be sent to the server. Since the server will attempt to decompress these streams before applying various maximums, this can lead to exhaustion of the available memory and thus a Denial of Service. This can be done if the `DSN` is known, which it is in many common setups (JavaScript, Mobile Apps). The issue is patched in Bugsink version `2.0.5`. The vulnerability is similar to, but distinct from, another brotli-related problem in Bugsink, GHSA-rrx3-2x4g-mq2h/CVE-2025-64509." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bugsink/bugsink/commit/3f65544aab3ad5303d97009136640de97b0676a5", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/bugsink/bugsink/pull/266", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/bugsink/bugsink/security/advisories/GHSA-fc2v-vcwj-269v", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/google/brotli/commit/67d78bc41db1a0d03f2e763497748f2f69946627", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/google/brotli/issues/1327", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/google/brotli/issues/1375", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/google/brotli/pull/1234", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/google/brotli/releases/tag/v1.2.0", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64509.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64509.json new file mode 100644 index 00000000000..d8f99aae3f6 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64509.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-64509", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:39.873", + "lastModified": "2025-11-10T22:15:39.873", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive CPU time in decompression, leading to denial of service. This can be done if the DSN is known, which it is in many common setups (JavaScript, Mobile Apps). The issue is patched in Bugsink 2.0.6. The vulnerability is similar to, but distinct from, another brotli-related problem in Bugsink, GHSA-fc2v-vcwj-269v/CVE-2025-64508." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/bugsink/bugsink/security/advisories/GHSA-rrx3-2x4g-mq2h", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64512.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64512.json new file mode 100644 index 00000000000..c586239ac4b --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64512.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-64512", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:40.067", + "lastModified": "2025-11-10T22:15:40.067", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documents. Prior to version 20251107, pdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The `CMapDB._load_data()` function in pdfminer.six uses `pickle.loads()` to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in the `cmap/` directory, but a malicious PDF can specify an alternative directory and filename as long as the filename ends in `.pickle.gz`. A malicious, zipped pickle file can then contain code which will automatically execute when the PDF is processed. Version 20251107 fixes the issue." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 6.0 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/pdfminer/pdfminer.six/commit/b808ee05dd7f0c8ea8ec34bdf394d40e63501086", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/pdfminer/pdfminer.six/releases/tag/20251107", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64513.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64513.json new file mode 100644 index 00000000000..4dc4ba35910 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64513.json @@ -0,0 +1,90 @@ +{ + "id": "CVE-2025-64513", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:40.270", + "lastModified": "2025-11-10T22:15:40.270", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 9.3, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "HIGH", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-287" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/milvus-io/milvus/pull/45379", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/milvus-io/milvus/pull/45383", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/milvus-io/milvus/pull/45391", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-645xx/CVE-2025-64518.json b/CVE-2025/CVE-2025-645xx/CVE-2025-64518.json new file mode 100644 index 00000000000..ffe54b7fa45 --- /dev/null +++ b/CVE-2025/CVE-2025-645xx/CVE-2025-64518.json @@ -0,0 +1,72 @@ +{ + "id": "CVE-2025-64518", + "sourceIdentifier": "security-advisories@github.com", + "published": "2025-11-10T22:15:40.497", + "lastModified": "2025-11-10T22:15:40.497", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML `Validator` used by cyclonedx-core-java was not configured securely, making the library vulnerable to XML External Entity (XXE) injection. The fix for GHSA-683x-4444-jxh8 / CVE-2024-38374 was incomplete in that it only fixed parsing of XML BOMs, but not validation. The vulnerability has been fixed in cyclonedx-core-java version 11.0.1. As a workaround, applications can reject XML documents before handing them to cyclonedx-core-java for validation. This may be an option if incoming CycloneDX BOMs are known to be in JSON format." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security-advisories@github.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "security-advisories@github.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-611" + } + ] + } + ], + "references": [ + { + "url": "https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html#schemafactory", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-core-java/commit/162aa594f347b3f612fe0a45071693c3cd398ce9", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-core-java/commit/af0ec75c93c03f93733a070c5132554490af5314", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-core-java/pull/737", + "source": "security-advisories@github.com" + }, + { + "url": "https://github.com/CycloneDX/cyclonedx-core-java/security/advisories/GHSA-6fhj-vr9j-g45r", + "source": "security-advisories@github.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index b92bf1261f6..4ada39d41f2 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-10T21:00:11.547594+00:00 +2025-11-10T23:00:11.918694+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-10T20:58:25.520000+00:00 +2025-11-10T22:15:40.497000+00:00 ``` ### Last Data Feed Release @@ -33,69 +33,66 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -317505 +317527 ``` ### CVEs added in the last Commit -Recently added CVEs: `34` +Recently added CVEs: `22` -- [CVE-2025-12437](CVE-2025/CVE-2025-124xx/CVE-2025-12437.json) (`2025-11-10T20:15:38.377`) -- [CVE-2025-12438](CVE-2025/CVE-2025-124xx/CVE-2025-12438.json) (`2025-11-10T20:15:38.513`) -- [CVE-2025-12439](CVE-2025/CVE-2025-124xx/CVE-2025-12439.json) (`2025-11-10T20:15:38.647`) -- [CVE-2025-12440](CVE-2025/CVE-2025-124xx/CVE-2025-12440.json) (`2025-11-10T20:15:38.757`) -- [CVE-2025-12441](CVE-2025/CVE-2025-124xx/CVE-2025-12441.json) (`2025-11-10T20:15:38.867`) -- [CVE-2025-12443](CVE-2025/CVE-2025-124xx/CVE-2025-12443.json) (`2025-11-10T20:15:39.000`) -- [CVE-2025-12444](CVE-2025/CVE-2025-124xx/CVE-2025-12444.json) (`2025-11-10T20:15:39.143`) -- [CVE-2025-12445](CVE-2025/CVE-2025-124xx/CVE-2025-12445.json) (`2025-11-10T20:15:39.260`) -- [CVE-2025-12446](CVE-2025/CVE-2025-124xx/CVE-2025-12446.json) (`2025-11-10T20:15:39.363`) -- [CVE-2025-12447](CVE-2025/CVE-2025-124xx/CVE-2025-12447.json) (`2025-11-10T20:15:39.473`) -- [CVE-2025-12725](CVE-2025/CVE-2025-127xx/CVE-2025-12725.json) (`2025-11-10T20:15:39.577`) -- [CVE-2025-12726](CVE-2025/CVE-2025-127xx/CVE-2025-12726.json) (`2025-11-10T20:15:39.707`) -- [CVE-2025-12727](CVE-2025/CVE-2025-127xx/CVE-2025-12727.json) (`2025-11-10T20:15:39.833`) -- [CVE-2025-12728](CVE-2025/CVE-2025-127xx/CVE-2025-12728.json) (`2025-11-10T20:15:39.967`) -- [CVE-2025-12729](CVE-2025/CVE-2025-127xx/CVE-2025-12729.json) (`2025-11-10T20:15:40.080`) -- [CVE-2025-33150](CVE-2025/CVE-2025-331xx/CVE-2025-33150.json) (`2025-11-10T20:15:40.960`) -- [CVE-2025-43723](CVE-2025/CVE-2025-437xx/CVE-2025-43723.json) (`2025-11-10T19:15:56.880`) -- [CVE-2025-47286](CVE-2025/CVE-2025-472xx/CVE-2025-47286.json) (`2025-11-10T19:15:57.043`) -- [CVE-2025-47773](CVE-2025/CVE-2025-477xx/CVE-2025-47773.json) (`2025-11-10T19:15:57.207`) -- [CVE-2025-47932](CVE-2025/CVE-2025-479xx/CVE-2025-47932.json) (`2025-11-10T20:15:42.363`) -- [CVE-2025-56503](CVE-2025/CVE-2025-565xx/CVE-2025-56503.json) (`2025-11-10T20:15:47.990`) -- [CVE-2025-60876](CVE-2025/CVE-2025-608xx/CVE-2025-60876.json) (`2025-11-10T20:15:48.683`) -- [CVE-2025-63149](CVE-2025/CVE-2025-631xx/CVE-2025-63149.json) (`2025-11-10T20:15:48.863`) -- [CVE-2025-63288](CVE-2025/CVE-2025-632xx/CVE-2025-63288.json) (`2025-11-10T19:15:57.490`) -- [CVE-2025-63384](CVE-2025/CVE-2025-633xx/CVE-2025-63384.json) (`2025-11-10T20:15:49.013`) +- [CVE-2025-48055](CVE-2025/CVE-2025-480xx/CVE-2025-48055.json) (`2025-11-10T21:15:38.907`) +- [CVE-2025-48065](CVE-2025/CVE-2025-480xx/CVE-2025-48065.json) (`2025-11-10T21:15:39.103`) +- [CVE-2025-48878](CVE-2025/CVE-2025-488xx/CVE-2025-48878.json) (`2025-11-10T21:15:39.263`) +- [CVE-2025-49145](CVE-2025/CVE-2025-491xx/CVE-2025-49145.json) (`2025-11-10T22:15:35.760`) +- [CVE-2025-62780](CVE-2025/CVE-2025-627xx/CVE-2025-62780.json) (`2025-11-10T22:15:36.200`) +- [CVE-2025-63296](CVE-2025/CVE-2025-632xx/CVE-2025-63296.json) (`2025-11-10T21:15:39.593`) +- [CVE-2025-63397](CVE-2025/CVE-2025-633xx/CVE-2025-63397.json) (`2025-11-10T22:15:36.390`) +- [CVE-2025-63617](CVE-2025/CVE-2025-636xx/CVE-2025-63617.json) (`2025-11-10T21:15:39.743`) +- [CVE-2025-64167](CVE-2025/CVE-2025-641xx/CVE-2025-64167.json) (`2025-11-10T22:15:36.753`) +- [CVE-2025-64181](CVE-2025/CVE-2025-641xx/CVE-2025-64181.json) (`2025-11-10T22:15:36.933`) +- [CVE-2025-64182](CVE-2025/CVE-2025-641xx/CVE-2025-64182.json) (`2025-11-10T22:15:37.120`) +- [CVE-2025-64183](CVE-2025/CVE-2025-641xx/CVE-2025-64183.json) (`2025-11-10T22:15:37.323`) +- [CVE-2025-64484](CVE-2025/CVE-2025-644xx/CVE-2025-64484.json) (`2025-11-10T22:15:37.490`) +- [CVE-2025-64501](CVE-2025/CVE-2025-645xx/CVE-2025-64501.json) (`2025-11-10T22:15:37.683`) +- [CVE-2025-64502](CVE-2025/CVE-2025-645xx/CVE-2025-64502.json) (`2025-11-10T22:15:37.870`) +- [CVE-2025-64504](CVE-2025/CVE-2025-645xx/CVE-2025-64504.json) (`2025-11-10T22:15:39.273`) +- [CVE-2025-64507](CVE-2025/CVE-2025-645xx/CVE-2025-64507.json) (`2025-11-10T22:15:39.460`) +- [CVE-2025-64508](CVE-2025/CVE-2025-645xx/CVE-2025-64508.json) (`2025-11-10T22:15:39.640`) +- [CVE-2025-64509](CVE-2025/CVE-2025-645xx/CVE-2025-64509.json) (`2025-11-10T22:15:39.873`) +- [CVE-2025-64512](CVE-2025/CVE-2025-645xx/CVE-2025-64512.json) (`2025-11-10T22:15:40.067`) +- [CVE-2025-64513](CVE-2025/CVE-2025-645xx/CVE-2025-64513.json) (`2025-11-10T22:15:40.270`) +- [CVE-2025-64518](CVE-2025/CVE-2025-645xx/CVE-2025-64518.json) (`2025-11-10T22:15:40.497`) ### CVEs modified in the last Commit -Recently modified CVEs: `91` +Recently modified CVEs: `56` -- [CVE-2025-53324](CVE-2025/CVE-2025-533xx/CVE-2025-53324.json) (`2025-11-10T20:15:47.197`) -- [CVE-2025-53349](CVE-2025/CVE-2025-533xx/CVE-2025-53349.json) (`2025-11-10T20:15:47.437`) -- [CVE-2025-53574](CVE-2025/CVE-2025-535xx/CVE-2025-53574.json) (`2025-11-10T20:15:47.660`) -- [CVE-2025-53586](CVE-2025/CVE-2025-535xx/CVE-2025-53586.json) (`2025-11-10T20:15:47.827`) -- [CVE-2025-5400](CVE-2025/CVE-2025-54xx/CVE-2025-5400.json) (`2025-11-10T20:15:07.957`) -- [CVE-2025-5401](CVE-2025/CVE-2025-54xx/CVE-2025-5401.json) (`2025-11-10T20:13:09.790`) -- [CVE-2025-5402](CVE-2025/CVE-2025-54xx/CVE-2025-5402.json) (`2025-11-10T20:11:11.940`) -- [CVE-2025-5403](CVE-2025/CVE-2025-54xx/CVE-2025-5403.json) (`2025-11-10T20:07:40.007`) -- [CVE-2025-5404](CVE-2025/CVE-2025-54xx/CVE-2025-5404.json) (`2025-11-10T20:06:32.143`) -- [CVE-2025-5405](CVE-2025/CVE-2025-54xx/CVE-2025-5405.json) (`2025-11-10T20:04:10.697`) -- [CVE-2025-5406](CVE-2025/CVE-2025-54xx/CVE-2025-5406.json) (`2025-11-10T20:43:07.087`) -- [CVE-2025-5407](CVE-2025/CVE-2025-54xx/CVE-2025-5407.json) (`2025-11-10T20:40:57.120`) -- [CVE-2025-5803](CVE-2025/CVE-2025-58xx/CVE-2025-5803.json) (`2025-11-10T20:15:48.473`) -- [CVE-2025-58595](CVE-2025/CVE-2025-585xx/CVE-2025-58595.json) (`2025-11-10T20:15:48.183`) -- [CVE-2025-62423](CVE-2025/CVE-2025-624xx/CVE-2025-62423.json) (`2025-11-10T19:58:10.237`) -- [CVE-2025-62424](CVE-2025/CVE-2025-624xx/CVE-2025-62424.json) (`2025-11-10T19:58:14.303`) -- [CVE-2025-62429](CVE-2025/CVE-2025-624xx/CVE-2025-62429.json) (`2025-11-10T19:58:23.353`) -- [CVE-2025-62430](CVE-2025/CVE-2025-624xx/CVE-2025-62430.json) (`2025-11-10T19:58:19.593`) -- [CVE-2025-62715](CVE-2025/CVE-2025-627xx/CVE-2025-62715.json) (`2025-11-10T19:58:06.520`) -- [CVE-2025-62719](CVE-2025/CVE-2025-627xx/CVE-2025-62719.json) (`2025-11-10T19:57:35.260`) -- [CVE-2025-62720](CVE-2025/CVE-2025-627xx/CVE-2025-62720.json) (`2025-11-10T19:57:02.250`) -- [CVE-2025-62721](CVE-2025/CVE-2025-627xx/CVE-2025-62721.json) (`2025-11-10T19:56:06.980`) -- [CVE-2025-63455](CVE-2025/CVE-2025-634xx/CVE-2025-63455.json) (`2025-11-10T19:15:57.640`) -- [CVE-2025-63785](CVE-2025/CVE-2025-637xx/CVE-2025-63785.json) (`2025-11-10T20:15:49.180`) -- [CVE-2025-64107](CVE-2025/CVE-2025-641xx/CVE-2025-64107.json) (`2025-11-10T19:54:02.790`) +- [CVE-2025-12439](CVE-2025/CVE-2025-124xx/CVE-2025-12439.json) (`2025-11-10T21:15:37.740`) +- [CVE-2025-12440](CVE-2025/CVE-2025-124xx/CVE-2025-12440.json) (`2025-11-10T21:15:37.980`) +- [CVE-2025-12441](CVE-2025/CVE-2025-124xx/CVE-2025-12441.json) (`2025-11-10T22:15:33.853`) +- [CVE-2025-12443](CVE-2025/CVE-2025-124xx/CVE-2025-12443.json) (`2025-11-10T22:15:34.090`) +- [CVE-2025-12444](CVE-2025/CVE-2025-124xx/CVE-2025-12444.json) (`2025-11-10T22:15:34.327`) +- [CVE-2025-12446](CVE-2025/CVE-2025-124xx/CVE-2025-12446.json) (`2025-11-10T22:15:34.550`) +- [CVE-2025-12725](CVE-2025/CVE-2025-127xx/CVE-2025-12725.json) (`2025-11-10T22:15:34.740`) +- [CVE-2025-12726](CVE-2025/CVE-2025-127xx/CVE-2025-12726.json) (`2025-11-10T21:15:38.247`) +- [CVE-2025-12728](CVE-2025/CVE-2025-127xx/CVE-2025-12728.json) (`2025-11-10T22:15:34.967`) +- [CVE-2025-12729](CVE-2025/CVE-2025-127xx/CVE-2025-12729.json) (`2025-11-10T21:15:38.390`) +- [CVE-2025-12930](CVE-2025/CVE-2025-129xx/CVE-2025-12930.json) (`2025-11-10T22:15:35.267`) +- [CVE-2025-27917](CVE-2025/CVE-2025-279xx/CVE-2025-27917.json) (`2025-11-10T21:15:38.650`) +- [CVE-2025-37920](CVE-2025/CVE-2025-379xx/CVE-2025-37920.json) (`2025-11-10T21:11:09.640`) +- [CVE-2025-37921](CVE-2025/CVE-2025-379xx/CVE-2025-37921.json) (`2025-11-10T21:09:57.033`) +- [CVE-2025-37922](CVE-2025/CVE-2025-379xx/CVE-2025-37922.json) (`2025-11-10T21:03:24.220`) +- [CVE-2025-55752](CVE-2025/CVE-2025-557xx/CVE-2025-55752.json) (`2025-11-10T22:15:35.940`) +- [CVE-2025-62254](CVE-2025/CVE-2025-622xx/CVE-2025-62254.json) (`2025-11-10T22:14:11.877`) +- [CVE-2025-62256](CVE-2025/CVE-2025-622xx/CVE-2025-62256.json) (`2025-11-10T22:14:32.160`) +- [CVE-2025-62257](CVE-2025/CVE-2025-622xx/CVE-2025-62257.json) (`2025-11-10T21:37:25.233`) +- [CVE-2025-62258](CVE-2025/CVE-2025-622xx/CVE-2025-62258.json) (`2025-11-10T21:39:01.403`) +- [CVE-2025-62260](CVE-2025/CVE-2025-622xx/CVE-2025-62260.json) (`2025-11-10T21:56:20.490`) +- [CVE-2025-62261](CVE-2025/CVE-2025-622xx/CVE-2025-62261.json) (`2025-11-10T21:49:33.880`) +- [CVE-2025-62262](CVE-2025/CVE-2025-622xx/CVE-2025-62262.json) (`2025-11-10T22:03:58.983`) +- [CVE-2025-62263](CVE-2025/CVE-2025-622xx/CVE-2025-62263.json) (`2025-11-10T22:05:08.880`) +- [CVE-2025-63420](CVE-2025/CVE-2025-634xx/CVE-2025-63420.json) (`2025-11-10T22:15:36.557`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 983c7624a6b..3eba356216c 100644 --- a/_state.csv +++ b/_state.csv @@ -167042,8 +167042,8 @@ CVE-2021-20018,0,0,d0bbfa5a404bcd376b168a5a44fd585c3821223dfd8ef054682c1200cc04f CVE-2021-20019,0,0,4a1ee3e78cc6ec55376aaa3539fc9e69e05f7279eda40958a7fd5be74754de53,2024-11-21T05:45:47.597000 CVE-2021-2002,0,0,f81d4e198ed607669e35b2fcf34388c7cbea1317b5509943dbd156c60a15ebd6,2024-11-21T06:02:09.217000 CVE-2021-20020,0,0,06b8d82ae838202570441cb019399630ef1f11daf63d0d7606763ab84cfbddee,2024-11-21T05:45:47.723000 -CVE-2021-20021,0,1,ad79875752390f9d57192fc84bcea8dadc3d993adb928fd785fd5834863129d3,2025-11-10T19:04:58.607000 -CVE-2021-20022,0,1,64fb50a2a9288c710e419d5340cf9ba8fd4211c0c503c7d7497bd53d867feebb,2025-11-10T19:07:07.287000 +CVE-2021-20021,0,0,ad79875752390f9d57192fc84bcea8dadc3d993adb928fd785fd5834863129d3,2025-11-10T19:04:58.607000 +CVE-2021-20022,0,0,64fb50a2a9288c710e419d5340cf9ba8fd4211c0c503c7d7497bd53d867feebb,2025-11-10T19:07:07.287000 CVE-2021-20023,0,0,62341dad5fac7947fa86e27897749dc691ea801bcf3a0c0996054636fc30199c,2025-10-22T00:17:19.077000 CVE-2021-20024,0,0,ed3768e12e4f14c754a691b9f1a8d63c0ba5d9e615ceab7a5079097a78da5889,2024-11-21T05:45:48.230000 CVE-2021-20025,0,0,a557c524f3d0620495311f58e53d5b6d2a34e4771a645ab67df4e0312ad32324,2024-11-21T05:45:48.370000 @@ -214686,48 +214686,48 @@ CVE-2022-49814,0,0,147aea580102baebf34439f3899350b860a7b9d44dd89bfd115ec0bd15a6e CVE-2022-49815,0,0,58322723586210066c80df6d0d6d00ca08e739774aeddba8b43c8ef1a7d98022,2025-11-07T18:50:07.070000 CVE-2022-49816,0,0,49ad3b8054f86e86650c01d46ca22bf791af5833625cf9576d234fe2f59041a2,2025-05-02T06:15:47.253000 CVE-2022-49817,0,0,3932a6e9a266dcfcd250c96a6d02f8ec60bf5334bc2ef462b08385646ca2d3ad,2025-11-07T18:43:37.180000 -CVE-2022-49818,0,1,6470e1e5d94ceabc79addf7866844058c0d73f4c4926757a9d011fdd7a0f74a9,2025-11-10T20:58:25.520000 -CVE-2022-49819,0,1,4b11d06f75f1d168e54f08f6c78f050b33fb2fb18be6bf2ed4ce64cf5820479c,2025-11-10T20:57:06.550000 -CVE-2022-49820,0,1,d04a3612761d41d8f4788a8151144e1781c4c06a70782dbb02ad6ff15c26ec6f,2025-11-10T20:45:23.667000 -CVE-2022-49821,0,1,d9e2eee4b283e2ceabbacb06f3807c7e84fc9b536a58553068b6eed04d5e7c0c,2025-11-10T20:17:09.993000 -CVE-2022-49822,0,1,5875206923f55f130a090547e7289a1b72c92cd1b64a3bafb380a126b4e340c3,2025-11-10T20:17:02.400000 -CVE-2022-49823,0,1,8e943ef40c33eb8aad744a8bf0b60d03ddd7cf3ca04925c463f6e555614387f0,2025-11-10T20:16:57.870000 -CVE-2022-49824,0,1,811967fbb9ebc65bccc8662e6067816787162beec7e8529b879c5ae372bda721,2025-11-10T20:16:47.063000 -CVE-2022-49825,0,1,55ee7ed930a5877be540ae6b468f29310c65a32e05a7d16c5d2f51e664f738f9,2025-11-10T20:16:31.057000 -CVE-2022-49826,0,1,f97059d60361642207eea0846ae913338c1f8d6a8376a22393316779cfbecd7a,2025-11-10T20:15:47.177000 -CVE-2022-49827,0,1,7a4d69bcc5cfc2b35d1c1afdb8ec7f40f889343b30302244e451f3090f7320ad,2025-11-10T20:15:36.423000 -CVE-2022-49828,0,1,dd60fc97d5c48a10c06a1f4958de7fb1458514d9fdaeabd2614adfc9fe5c8024,2025-11-10T20:10:01.750000 -CVE-2022-49829,0,1,c7b3e05c0a5f46860441f1c46d8a002b76035c3992a9e0249e9b36b7c0e5ef26,2025-11-10T20:07:23.567000 -CVE-2022-49830,0,1,7ebca27a4f60318c543487010fee653bd6097def86ff035c718714cdca5c61a6,2025-11-10T19:58:04.560000 -CVE-2022-49831,0,1,240986cb6b7134d51b1504569170b354c43798a596ffa81d3fc48fdcbc1904b7,2025-11-10T19:57:59.030000 -CVE-2022-49832,0,1,472d50fca4cc9a3e866eefce93a2395436d442317423df7b00c4e383619ff473,2025-11-10T19:57:51.190000 -CVE-2022-49833,0,0,e9c413a140794bb2f4daf7c9fa492459985436b7d0d23d3c48031da2b074ba95,2025-05-02T13:53:20.943000 -CVE-2022-49834,0,0,cf2737f26ced1c36b7a4492400d5b65707895dfd16c53133baab139c6b2db49c,2025-05-02T13:53:20.943000 -CVE-2022-49835,0,0,d7417414d8a971dada5b5c796e41aa5773bb51e28477a9ba320dc37e77e4cce8,2025-05-02T13:53:20.943000 -CVE-2022-49836,0,0,e860e7283ecfd66961f966f527e7367a78915b8a4b48cb9b8b3f5f068ccabb98,2025-05-02T13:53:20.943000 +CVE-2022-49818,0,0,6470e1e5d94ceabc79addf7866844058c0d73f4c4926757a9d011fdd7a0f74a9,2025-11-10T20:58:25.520000 +CVE-2022-49819,0,0,4b11d06f75f1d168e54f08f6c78f050b33fb2fb18be6bf2ed4ce64cf5820479c,2025-11-10T20:57:06.550000 +CVE-2022-49820,0,0,d04a3612761d41d8f4788a8151144e1781c4c06a70782dbb02ad6ff15c26ec6f,2025-11-10T20:45:23.667000 +CVE-2022-49821,0,0,d9e2eee4b283e2ceabbacb06f3807c7e84fc9b536a58553068b6eed04d5e7c0c,2025-11-10T20:17:09.993000 +CVE-2022-49822,0,0,5875206923f55f130a090547e7289a1b72c92cd1b64a3bafb380a126b4e340c3,2025-11-10T20:17:02.400000 +CVE-2022-49823,0,0,8e943ef40c33eb8aad744a8bf0b60d03ddd7cf3ca04925c463f6e555614387f0,2025-11-10T20:16:57.870000 +CVE-2022-49824,0,0,811967fbb9ebc65bccc8662e6067816787162beec7e8529b879c5ae372bda721,2025-11-10T20:16:47.063000 +CVE-2022-49825,0,0,55ee7ed930a5877be540ae6b468f29310c65a32e05a7d16c5d2f51e664f738f9,2025-11-10T20:16:31.057000 +CVE-2022-49826,0,0,f97059d60361642207eea0846ae913338c1f8d6a8376a22393316779cfbecd7a,2025-11-10T20:15:47.177000 +CVE-2022-49827,0,0,7a4d69bcc5cfc2b35d1c1afdb8ec7f40f889343b30302244e451f3090f7320ad,2025-11-10T20:15:36.423000 +CVE-2022-49828,0,0,dd60fc97d5c48a10c06a1f4958de7fb1458514d9fdaeabd2614adfc9fe5c8024,2025-11-10T20:10:01.750000 +CVE-2022-49829,0,0,c7b3e05c0a5f46860441f1c46d8a002b76035c3992a9e0249e9b36b7c0e5ef26,2025-11-10T20:07:23.567000 +CVE-2022-49830,0,0,7ebca27a4f60318c543487010fee653bd6097def86ff035c718714cdca5c61a6,2025-11-10T19:58:04.560000 +CVE-2022-49831,0,0,240986cb6b7134d51b1504569170b354c43798a596ffa81d3fc48fdcbc1904b7,2025-11-10T19:57:59.030000 +CVE-2022-49832,0,0,472d50fca4cc9a3e866eefce93a2395436d442317423df7b00c4e383619ff473,2025-11-10T19:57:51.190000 +CVE-2022-49833,0,1,eb531ca95e712845efeceb6359d562f54516d94d85a8d49f9572a3c83eae8142,2025-11-10T21:13:04.667000 +CVE-2022-49834,0,1,347dc2ea80119a9e812f441efbb92c1f796c11874140009e0ff2e6f9d56aec60,2025-11-10T21:12:47.570000 +CVE-2022-49835,0,1,a5383f928d995865d4143983328445408b1c559b11826983e36f1e3fffe9004c,2025-11-10T21:12:55.587000 +CVE-2022-49836,0,1,018582fa4e82702642f071a508e38702dcf046b8cf9c2805e0fe80cfdba8a9f0,2025-11-10T21:13:15.993000 CVE-2022-49837,0,0,354f9363486ef31ad7975c0356b7df8c9c8dd8edf9906853f4f77d3bb904271d,2025-10-01T17:15:32.903000 -CVE-2022-49838,0,0,03024bdc6b23b6db92215dacf14a0a4cfd81ea7c1419c9f181b326fa8cadb6ed,2025-05-02T13:53:20.943000 +CVE-2022-49838,0,1,f208595163ea62054223119b5be321389affe4a27d14fec2d00e331817922084,2025-11-10T21:13:37.233000 CVE-2022-49839,0,0,115e77e172e9593d728f38698aea9b41d4be213be2b67f731beefa40bb55b3a6,2025-10-01T17:15:33.123000 CVE-2022-49840,0,0,ae4ab2624a3a1fe079dd2592bb71b2fe048c224844a6038f292303f14d214f6a,2025-10-01T17:15:33.337000 -CVE-2022-49841,0,0,9169198e24da19ab203717f171b6e75a05590743895227532ab89d898c47bb32,2025-05-02T13:53:20.943000 +CVE-2022-49841,0,1,3122a1aa96118c5c7774a4e38a2d4457d8c6e75fa429eb12e9516a6dd72c7a48,2025-11-10T21:14:12.010000 CVE-2022-49842,0,0,9bf9748354542bec4e6697b313a76e555b40d286164dd4a19b17ffc43e48fdc3,2025-10-01T17:15:33.537000 CVE-2022-49843,0,0,3b68148d61cbc68ca156a8a4d786f1ddfca11c378885c26fa9286b653498c2e4,2025-05-08T11:15:50.790000 CVE-2022-49844,0,0,57c19fa75fe17c08e8c0a6d5b47712063b3260bb2f083a0c073948e055437037,2025-10-01T17:15:33.747000 CVE-2022-49845,0,0,c58d2b715d41d40ad1af40e8ad0671c11587df6d3a6f791ec1c3c6aecb3cfe8f,2025-10-01T17:15:34 CVE-2022-49846,0,0,8d07e38c1a16875b643f0114d5dd7ce27838b2aa805c4193b21dbf568283347e,2025-10-01T17:15:34.217000 -CVE-2022-49847,0,0,966f1d8759ff5d18042bef2bd209ee42180e6dc1e96711599a5afed44ed8ae96,2025-05-02T13:53:20.943000 +CVE-2022-49847,0,1,17760558b49e52576cc7c70cb2b8a20788befb464a7bf0ad064c7ec027d8fb06,2025-11-10T21:14:36.097000 CVE-2022-49848,0,0,b19fb6b7a7d9a94f66a0e8f833422ed27161f9037100ad67edf18c214d54f49d,2025-10-01T17:15:34.430000 -CVE-2022-49849,0,0,1a0c6335362c85a44f9a792ab160af3386346e3ba20f59aa7c129699f5df1351,2025-05-02T13:53:20.943000 +CVE-2022-49849,0,1,cf84a9ae7b93ed171a189d2fc116317796ec3ac7f8ebbdf428597a7184e7a607,2025-11-10T21:02:50.920000 CVE-2022-49850,0,0,35b103175df7efcecc17a65ff31610259ccf12c1e69bc7265cf1b250a5eda605,2025-10-01T17:15:34.637000 -CVE-2022-49851,0,0,af30847e814dee3eae82c85789128ea500a585f18ef477082f6a9cf5927b5ac8,2025-05-02T13:53:20.943000 +CVE-2022-49851,0,1,d9d05c0d1dc59dbeec348e9e60bb5e911e81860a40a2ce4b8df63c3ac4391e26,2025-11-10T21:02:56.937000 CVE-2022-49852,0,0,b4b8962eaeb49fcbb1169678f335e4ca0b0bb0737ba085d81bd89f4a864e2615,2025-05-02T13:53:20.943000 CVE-2022-49853,0,0,df31ca7a5981656b78b4fcfefd644306da51d74ffb3f19f8bf894a188c672386,2025-10-01T17:15:34.840000 CVE-2022-49854,0,0,bad817fa84fc30cf347bb14ba852e3f0e269dee7317f8b3ad2adfa637ea752c7,2025-10-01T17:15:35.040000 CVE-2022-49855,0,0,b16aa6bbe4396fc226e6f46e9636ab007204168075d00e60a9a7d601211f0112,2025-10-01T17:15:35.260000 CVE-2022-49856,0,0,0c06594f66e9efd2cb2cd4fd9ef39a0436f32c0ffd5572971e08dd3514cc3e09,2025-05-08T11:15:51.407000 CVE-2022-49857,0,0,d2ed240402e7bd952eba981f649c671ae4a83a8ba178795b7d9153a45f14a598,2025-10-01T17:15:35.493000 -CVE-2022-49858,0,0,b6c714f3e5b3b8f5a6f685999b68bd23aed68301e0263a1c20c70ba207db9fd8,2025-05-02T13:52:51.693000 -CVE-2022-49859,0,0,de0c555a86df6fb15d1c65669775f47d40fbcbcf054ab4708d8e58ee33b2db0c,2025-05-02T13:52:51.693000 +CVE-2022-49858,0,1,a8a2d942fc4a1c04498235ddfad22bfaa4c2256319e6a00c3c692af0e340cd4f,2025-11-10T21:03:21.900000 +CVE-2022-49859,0,1,29c19b1f1b1a529d9bbc86409c672dbf3e2a2be90d1dc11b3e86b108223b0b49,2025-11-10T21:03:32.930000 CVE-2022-49860,0,0,4cae326075b3e31fbd1742831b2ebf9d6c4b856974926bc2bea420948587b42d,2025-10-01T16:15:46.937000 CVE-2022-49861,0,0,0c6ca35e9b7a6f061bd3630de78040df7d9020f426007d09b1877424ffbdf1e5,2025-10-01T16:15:47.143000 CVE-2022-49862,0,0,575eac5a010c716858c74ff63d58084b8682135c7cbe946a3055905936672354,2025-10-01T17:15:35.690000 @@ -214736,39 +214736,39 @@ CVE-2022-49864,0,0,275482053d88d4d99281c19a0bf24fa8d0d22bba049b213fa2fae446f28f5 CVE-2022-49865,0,0,0a21212261776e0a7327212cb3bb93f0001312fb51fd1c0fddfd45974f22d50f,2025-05-02T13:52:51.693000 CVE-2022-49866,0,0,433ac0d2f8c86fb8b1aa5c6e998438104bd8ba5e7edf8603127da7c3a91c3129,2025-10-01T16:15:47.530000 CVE-2022-49867,0,0,31e1c3347ba0569948fc7752ce4ee3750640a9bd14068e48efeeac0e3c0eb7c5,2025-10-01T16:15:47.740000 -CVE-2022-49868,0,0,b5923715b394978d7e10d253097fbcc85c15191509530fcbdcb94bda41e4be45,2025-05-02T13:52:51.693000 +CVE-2022-49868,0,1,ee5c0ce9e296c52bec0fc052a77bec0426a7ece5cc6134f7defa5d9ff306475b,2025-11-10T21:03:54.340000 CVE-2022-49869,0,0,6ed9c3d268d707104d271198ec43f35c0e8d6b4c649792fc32f36fce1b4693cf,2025-10-01T16:15:47.937000 -CVE-2022-49870,0,0,1b17ce652972f3f1bd0a30c2f149c2c4b7d5b0602ed2050cc2fa0aa3d4bc5586,2025-05-02T13:52:51.693000 +CVE-2022-49870,0,1,db0c0f5b5d9b4ddb10e5a2e5438cb68292942127972a20713f9833605a16d927,2025-11-10T21:04:41.933000 CVE-2022-49871,0,0,2efb703a86a6c877f4ecb8c6249f5d6008dc8d74e295b3a5210d43bee3801529,2025-10-01T16:15:48.310000 -CVE-2022-49872,0,0,2c2f7f4b1d885f9bf10ee26fca51a87bd64cfdd016043eb8c5f8828607378efb,2025-05-02T13:52:51.693000 +CVE-2022-49872,0,1,f27abbc74b23ace58960b47912604b8a357d67f9bb2b56d1a589a53364a59c5f,2025-11-10T21:05:09.157000 CVE-2022-49873,0,0,34313dd4b1e7dc55dd6abcd74ccbde2f8d35be6c16182c3e29db65368a773cbc,2025-10-01T16:15:48.520000 CVE-2022-49874,0,0,ef0216e30e37ba3763af5b56ab6387801f143525faf8a5ec4943e1c0642b1942,2025-10-01T16:15:48.780000 CVE-2022-49875,0,0,dbce388586859e57da0ff2b254d5cd1fe8b6cf1b3d60add0cbbfdb84d3ac78ea,2025-10-01T16:15:48.990000 CVE-2022-49876,0,0,45560a22a52861026b5baa27444998c23972db6ed9ee7573d1aada3e2780a232,2025-10-01T16:15:49.183000 -CVE-2022-49877,0,0,deaacc909238b44f44ed4360352266d7bf863c0443e6c022db52e0f31ca27352,2025-05-02T13:52:51.693000 +CVE-2022-49877,0,1,1fb70e93464480f867ff3bb3c2fd5abdde928cb258a94d62ccd8a8a3c6c7a67a,2025-11-10T21:05:50.070000 CVE-2022-49878,0,0,0931660005e040a456ae0c8c977561bcb1d3157ad8abd2d2109b6811e74c1d7d,2025-10-01T16:15:49.413000 -CVE-2022-49879,0,0,ed2fe2394b6ef0af2bddde5616e47fe40d7ff33713103820542ebb63260ddde0,2025-05-02T13:52:51.693000 +CVE-2022-49879,0,1,97d5e5aee89812ffff2c911676fd494f9aa4298f0c5a916b935d880d6ff7bf1f,2025-11-10T21:20:07.757000 CVE-2022-49880,0,0,d84089e9b3e434538cd9fcc139fb87a7ee2cd632da5073ef43e07a12f0ed8b24,2025-10-01T17:15:36.097000 CVE-2022-49881,0,0,dce714443a3797184294948939ce5e0c2b67149915890b68f6a5abbe7a097a2b,2025-10-01T17:15:36.307000 -CVE-2022-49882,0,0,e2b736b2b92c65cbf542ceac6e4a9f3840eb46e9ff576a5b61ce943f4666a8ca,2025-05-02T13:52:51.693000 -CVE-2022-49883,0,0,00ebaf43a2bf0c92787360990ab0fac11b24a3135ec2caa2504a3a10a4c8da75,2025-05-02T13:52:51.693000 -CVE-2022-49884,0,0,a97ef3f27c4898cd4990e8957599d72984a42d7bc1b11005425ef9a6a7eb88c2,2025-05-02T13:52:51.693000 +CVE-2022-49882,0,1,739586d8eb1b3ce58b41d40c9b8d2c3fee8d54aae3526c187893eaf6103270bc,2025-11-10T21:19:56.590000 +CVE-2022-49883,0,1,89602ae4c3146648a8486b05e3230bf5824798b389f7cd94fb8120bb1c8fe39f,2025-11-10T21:19:47.970000 +CVE-2022-49884,0,1,c638c4d5d5043f1fb22b34b486b941bc7bb21517d4a9c1c31546d89205738832,2025-11-10T21:19:27.007000 CVE-2022-49885,0,0,de035dc9c61b419872ee56e31e2f8e8220df76cbb447bc3b5c259685cb651bcc,2025-10-01T17:15:36.550000 -CVE-2022-49886,0,0,eccdde356205973eb534b472832c7e6c265a972177e2400364c848b67e7f0366,2025-05-02T13:52:51.693000 +CVE-2022-49886,0,1,b78410ee3f82cf8bc0cd7af2b69ae9205af961ae4d4346c2326e90e6d98c68dc,2025-11-10T21:19:04.303000 CVE-2022-49887,0,0,ce76b9ce1cd8b6d06ce391cc0d337af6a8700f7be76c6daf7a472ab1100b6dbd,2025-10-01T17:15:36.760000 CVE-2022-49888,0,0,8b865bbd3461988a46720f9e9659d00709cd33e38fe14bbdbd277f0cd3cfc6eb,2025-05-07T13:20:08.403000 CVE-2022-49889,0,0,9c7813d62b4ffb9a4ee43e9383a11460e5f8898262f18b22bf26e429bbed059d,2025-10-01T17:15:36.950000 CVE-2022-49890,0,0,e94f355041ef6de9edd945dd4511fd384d4a45435716a6087823b7b13a3bf513,2025-10-01T17:15:37.153000 CVE-2022-49891,0,0,e8c70688ab160cc4987692b39e2451aeba03f22e2cd5089b95f0099fe05f76d0,2025-10-01T16:15:49.610000 CVE-2022-49892,0,0,cc4861636a18c883e51d8e22ad31319a2bfa6f093052900bacee0f148e8a7f77,2025-05-07T13:19:41.120000 -CVE-2022-49893,0,0,4fe5532514fc6ae50572878f0a90305909a992d84ab2042fb5762cbe4c725d4e,2025-05-02T13:52:51.693000 +CVE-2022-49893,0,1,9897359a87fd76e2022b36ff7c17b20b21e929af2db76ac40068dc0a7f652e12,2025-11-10T21:18:45.070000 CVE-2022-49894,0,0,189a51f3354a782dadb77ea5389847b10b07be1e56d445867bbc1cd05e14d132,2025-10-01T16:15:49.797000 CVE-2022-49895,0,0,cb5e4712d2c7fc744f4c5f1a2bea4f653fe5a05c094c1654aaadd9567375a135,2025-10-01T16:15:49.993000 CVE-2022-49896,0,0,1f91f3d4b49251331d70d47cf4692902992f83ef09f6029abca9b382ac4fac4c,2025-10-01T16:15:50.177000 CVE-2022-49897,0,0,4040f1af82c44c367eb9bf159c6dbb344da8f211ee73986c09b034a35bfa3fe4,2025-05-08T11:15:51.677000 -CVE-2022-49898,0,0,6a8b76349810262e96fa4294e9c9d35acad7a9841111debd3a8a30375590f954,2025-05-02T13:52:51.693000 +CVE-2022-49898,0,1,48d7bf54852776dfc195a1670602366c4ee6c69c65f6d9f08a2d946fa9a50149,2025-11-10T21:18:38.083000 CVE-2022-49899,0,0,f820727f0171f72c2eee88cfd585a540c3948d7ecadac0f0a0491554341d21a3,2025-10-01T16:15:50.350000 -CVE-2022-49900,0,0,401a3d4d93fd5a0832ea65ee4169646da7fe69a8f6caed910f02e7c5f9595f66,2025-05-02T13:52:51.693000 +CVE-2022-49900,0,1,67e6dffa38dc96e131c74a8e15ba0ed44a2a2355e3b7ca511b0f98202645f396,2025-11-10T21:18:09.390000 CVE-2022-49901,0,0,59ae31ffdc973c20a7d64386cff9f926e4c7f14952443a096003fd6f0b89a648,2025-10-01T21:15:41.587000 CVE-2022-49902,0,0,2e53d0663d412c1d966872c3397b4bba71715537ed8ef51665fbd63068c5021a,2025-10-01T15:15:33.447000 CVE-2022-49903,0,0,d6b42d75b757f2a5661a5ae91110cdfe18078d2320aa2035ce353fdd99d829a4,2025-05-02T13:52:51.693000 @@ -280693,7 +280693,7 @@ CVE-2024-58266,0,0,4f761f2a88fa77c373ceebfdd5314c674a2acbd7b13253200bca69419616a CVE-2024-58267,0,0,11fb5730599d5d307851725ee1026f75a8bb9b288218666e4c902bb58e8a640c,2025-10-02T19:11:46.753000 CVE-2024-58269,0,0,c9acd61b0494274aaf5de585bb4c2f516eae78df0ed23a8db0fb65573a934c69,2025-10-30T15:03:13.440000 CVE-2024-5827,0,0,d83af7fe62780bf2edbbd2aba17ac7e2a79e5ee41ca69db7d52abbfcd5f3d7bd,2025-10-15T13:15:48.180000 -CVE-2024-58272,0,1,ad9e34da4f5ede2f3d57ec11fb19b5e56f2f6086225f8637ef2e063bd8614f85,2025-11-10T19:15:45.723000 +CVE-2024-58272,0,0,ad9e34da4f5ede2f3d57ec11fb19b5e56f2f6086225f8637ef2e063bd8614f85,2025-11-10T19:15:45.723000 CVE-2024-58273,0,0,9ce0fbf1239ef4727b2d7255116d5570a6bb417b4584ae4c57d7f234a6ce1871,2025-11-06T16:34:35.273000 CVE-2024-58274,0,0,8756d3ed1488978bf9f10ba59e528fe68f91d7534fbcc0b5a5a2bd161ed3da4d,2025-10-22T21:12:48.953000 CVE-2024-5828,0,0,73069a2f9dbd005f637a8c432d288f4c861c4d147da919c5c71f3de2432e48cd,2025-01-08T21:25:28.967000 @@ -286354,7 +286354,7 @@ CVE-2025-10962,0,0,0ee1fb8311804e575857d346b6f482cc0675d3d579ed6e64340695df0984b CVE-2025-10963,0,0,d5eda8d9212920b253cfbd940187d38c62086ade7354768c9cc55bfda0590a85,2025-10-07T20:51:10.763000 CVE-2025-10964,0,0,86c29855894a9fc15bb8204e13505d3d83bb1ec5bb15d4f71745213327fa3e5d,2025-10-07T20:50:51.430000 CVE-2025-10965,0,0,2814b458e436e74a89669d25949553666f0c68396f5dccf4485d29426e857050,2025-09-26T18:15:33.630000 -CVE-2025-10966,0,0,92c0516a22357148b63e251408d10aa4acaf3012a9d4f0da004bf81257c69f0f,2025-11-07T08:15:39.617000 +CVE-2025-10966,0,1,824b07b56e7982e0fe8f2311300c9047a2e1b75427c0f0e53634f3457e73bb16,2025-11-10T21:15:35.357000 CVE-2025-10967,0,0,9fedce84ceef3e23183ea1433f866511227fe892af9c0f96dc91e404f2b8f307,2025-09-26T18:15:33.760000 CVE-2025-10968,0,0,3e2cc58714b203b0c8699e4b69903ec7942e079c60f5685254bbbcc81236a0ea,2025-11-07T13:15:38.397000 CVE-2025-1097,0,0,5680e85d18ec5605fb88a2924264a43c54978cedd997e744589d4016687bf829,2025-11-03T21:18:52.093000 @@ -286986,7 +286986,7 @@ CVE-2025-11680,0,0,b2321c5f6524e9275218cd1a86c19c0061b764a2b5cfd019d226562a457ad CVE-2025-11682,0,0,0e7fb35f6aabdb0ff5ae67f61a8707127178ee52a21670d6bef2406c9f4a9b62,2025-10-27T13:19:49.063000 CVE-2025-11683,0,0,562b6ddecd757d974a3cd06cb4a91e1cbf3407e06c1b215f13523df3f6204a17,2025-10-16T15:28:59.610000 CVE-2025-1169,0,0,ad57e3ebca9d9361258028a4f6880b5b420e9bfeb30e11c1ec67cc7b58af0c9a,2025-03-03T17:16:44.157000 -CVE-2025-11690,0,1,0e211a22ea1fa584cba5ffb6b4f683ba121d94b1b0cfb9a6995230da4a24996c,2025-11-10T19:15:55.950000 +CVE-2025-11690,0,0,0e211a22ea1fa584cba5ffb6b4f683ba121d94b1b0cfb9a6995230da4a24996c,2025-11-10T19:15:55.950000 CVE-2025-11691,0,0,fb3d89b9e088f40d5583a4d7c5821f9bc9c45aa4004b40ac06dde7f840863bfc,2025-10-21T19:31:25.450000 CVE-2025-11692,0,0,d983eb93c5a3af1433b7b6f50c46f599d27f0f147bdef67465a5cae53f7e1186,2025-10-16T15:28:59.610000 CVE-2025-11695,0,0,5b6d3c74b1fa4c70dccd540be10208be8c9e6eaf68857025b2a174a57e96c370,2025-10-14T19:36:29.240000 @@ -287460,27 +287460,27 @@ CVE-2025-12422,0,0,c197f0fdb3e6b11f38ef90be4db88b71f39618450fda8bfc8f97063dbbe72 CVE-2025-12423,0,0,04a15ea262d7c2854c3c856f4a7f1a5f874bc79c8e1c595fa69c870dc5f849ac,2025-11-07T14:52:25.637000 CVE-2025-12424,0,0,613cb5b6f521f743a1b8f2c197dbda50cc1c23974cf9bce65db85ece67adf490,2025-11-07T14:45:20.907000 CVE-2025-12425,0,0,43aaac0b175aaa195986cd5a730bc223ba21fabd755ab85853fa015b598f9b6a,2025-11-07T14:41:22.743000 -CVE-2025-12428,1,1,b69862f7519d05ec2e52da7d43f9427b7abaf38fd9024a4529cdbdeaea312a48,2025-11-10T20:15:35.947000 -CVE-2025-12429,1,1,636fde722f663b486b4c288c9e5a55cafb2c8ea6f8fba0f6a5313d9853a71991,2025-11-10T20:15:36.660000 +CVE-2025-12428,0,0,b69862f7519d05ec2e52da7d43f9427b7abaf38fd9024a4529cdbdeaea312a48,2025-11-10T20:15:35.947000 +CVE-2025-12429,0,1,9c823a6052335694d6617c03473820d5f7939bbec6869115022fcc4a478a116a,2025-11-10T21:15:36.600000 CVE-2025-1243,0,0,b36908327b1b41fa664c4a39c71934592fd1d75bcc40ba67f7d64ed64955da7e,2025-02-12T01:15:09.073000 -CVE-2025-12430,1,1,ec89d3600319f63cff3dfaa830f08478fbb4cee2a31b1d2e46d295bc8596a2a0,2025-11-10T20:15:37.530000 -CVE-2025-12431,1,1,1c1878997924a2cc8777ea0505916e0429d905a798b2a260eacd8b5873790b24,2025-11-10T20:15:37.647000 -CVE-2025-12432,1,1,2ba902ec1f2d2c2afe8cc81db25a822ce53c33d328d0455c13fba943c964ee21,2025-11-10T20:15:37.750000 -CVE-2025-12433,1,1,e0b85a3185c3da535ebc98d3e87de2849c43958af266b67b419e2f83a9cefe76,2025-11-10T20:15:37.910000 -CVE-2025-12434,1,1,e8cc600689196e8a5eac896879fcd0f57ee4fe011c5fa82f704b8e2ccb453b98,2025-11-10T20:15:38.017000 -CVE-2025-12435,1,1,f95e0cb092ac147cbc1c6f2e693959927b0daf587a7cb1c67325e1267492daf2,2025-11-10T20:15:38.150000 -CVE-2025-12436,1,1,00b62acfb3dd4a6a7edf43286b9b05a085b392ac38f35277aca89b91a05617f0,2025-11-10T20:15:38.260000 -CVE-2025-12437,1,1,fcd402cd9fb4fb5e1b55c9a7efa170ea2da23bf9131c30c2fd4b255cc6a1ebab,2025-11-10T20:15:38.377000 -CVE-2025-12438,1,1,bb4b2b6722c1e642f64436476a261bfeb700b24f21eb4a92f12b80386d7704da,2025-11-10T20:15:38.513000 -CVE-2025-12439,1,1,628d7b21cb87044e5718511d6cca6e64553a00caee5e2c7fefe9980b36d243ab,2025-11-10T20:15:38.647000 +CVE-2025-12430,0,0,ec89d3600319f63cff3dfaa830f08478fbb4cee2a31b1d2e46d295bc8596a2a0,2025-11-10T20:15:37.530000 +CVE-2025-12431,0,0,1c1878997924a2cc8777ea0505916e0429d905a798b2a260eacd8b5873790b24,2025-11-10T20:15:37.647000 +CVE-2025-12432,0,1,fcd1bb74199c98c1da2534b35cc25547c13ae123918130d4ba281ecb074f8f7c,2025-11-10T21:15:36.743000 +CVE-2025-12433,0,1,c651919f68d400d9bc18f506ef05a3fba52312659892b4045bb979e8403fcd08,2025-11-10T22:15:33.660000 +CVE-2025-12434,0,1,1b4341b5cf57672f06cf35d6f025406edb2f34a96164b1159936cfb4a57d0f9e,2025-11-10T21:15:36.960000 +CVE-2025-12435,0,1,fe50ea3ab73d38fadfe753cfa932598ae00609f822c27f30b6aba5ffc475c6fe,2025-11-10T21:15:37.120000 +CVE-2025-12436,0,1,cde927006481d43f905c61f5343e5d390de033889e977837ae4e2363a22434e0,2025-11-10T21:15:37.297000 +CVE-2025-12437,0,0,fcd402cd9fb4fb5e1b55c9a7efa170ea2da23bf9131c30c2fd4b255cc6a1ebab,2025-11-10T20:15:38.377000 +CVE-2025-12438,0,1,5c2716668a3809ff369634f7ad00cf0d4440b18f252a97564a90d88f9219419e,2025-11-10T21:15:37.527000 +CVE-2025-12439,0,1,c2238f4af456ea35b28e4734d513153d1dc954ae49156edd1b14031947758273,2025-11-10T21:15:37.740000 CVE-2025-1244,0,0,511fd9716249718f9e2af8c639e9da9d69840e0db63e4ab656a288d391609d08,2025-11-03T21:18:52.620000 -CVE-2025-12440,1,1,1823a52a99c7b465bc934aa824f76400d739e6a53422b4278e7babe874524b42,2025-11-10T20:15:38.757000 -CVE-2025-12441,1,1,9bf97426a177f233c433d7c45218640af6c53410846e447cec8f00403ecbf292,2025-11-10T20:15:38.867000 -CVE-2025-12443,1,1,84ca76f9899c9c60a2596b0d9e342999e6589533ea7f98653d9d9d26e95613dd,2025-11-10T20:15:39 -CVE-2025-12444,1,1,1bbd161d8149f79ac05ac8c58ad39f68a0f0f4affeb6f8fdd65d45c52276f78d,2025-11-10T20:15:39.143000 -CVE-2025-12445,1,1,9f3188cf4aed6798ccf66cf40b24beab63eba685218db715e5764dd504ba0163,2025-11-10T20:15:39.260000 -CVE-2025-12446,1,1,c00fe79489e075f82b54cb8f11271d5cae1bf5c5798fbebed16bf80db1d39bf9,2025-11-10T20:15:39.363000 -CVE-2025-12447,1,1,c200aa754b33a945c46d82c9a1d3644bd12f706a6b6ef9ea1ac7f3cad3db58ef,2025-11-10T20:15:39.473000 +CVE-2025-12440,0,1,0178744bbe52961d04db752b5550d90074eb34d8eeec44bb289151f0b30c4b88,2025-11-10T21:15:37.980000 +CVE-2025-12441,0,1,9c9e69e66590232f8bc3a200b8b4e42cee098ee65c63ab100a8030881f999d78,2025-11-10T22:15:33.853000 +CVE-2025-12443,0,1,8849d0a00df6fd6f8e5cda870830a308e37ecf821a911472c417e46cc7423cd1,2025-11-10T22:15:34.090000 +CVE-2025-12444,0,1,08f354695283554cacc8bc0270dbfa950553ae512642d679c9c65d27a6cd4836,2025-11-10T22:15:34.327000 +CVE-2025-12445,0,0,9f3188cf4aed6798ccf66cf40b24beab63eba685218db715e5764dd504ba0163,2025-11-10T20:15:39.260000 +CVE-2025-12446,0,1,0ca6dbcbe53e050c0092aae5da60dda0957453ae9e7c98ecd615b62719d3bd11,2025-11-10T22:15:34.550000 +CVE-2025-12447,0,0,c200aa754b33a945c46d82c9a1d3644bd12f706a6b6ef9ea1ac7f3cad3db58ef,2025-11-10T20:15:39.473000 CVE-2025-1245,0,0,02f6531ee412acf536871fa74be895340813b85f3805e0a3e6f8a053107da143,2025-05-16T14:42:18.700000 CVE-2025-12450,0,0,894ab03c4320afdedbcada5e6e824017e26940bf12bc6b312fe54343f81abc90,2025-10-30T15:03:13.440000 CVE-2025-12452,0,0,6ea268cff271e13f387b1be76ffd534dfb3563554cec29c13cc965ba6f9f97fb,2025-11-04T15:40:45.533000 @@ -287595,11 +287595,11 @@ CVE-2025-1269,0,0,3d8990f3f321bb84afc5ce31cc37206b4dfeae7b9639d4320eceb6f39d26cf CVE-2025-12695,0,0,6e4e9ad294f548ef2ed154c0d88f2be1a56cf411abe463333277e2dde487c4ba,2025-11-04T15:40:45.533000 CVE-2025-1270,0,0,a0fba4bca59afda304bf8335640266a3acf6a1624640bee675db51d94e9fc436,2025-02-13T13:15:09.273000 CVE-2025-1271,0,0,0359319eae8a142a0720b34e58c3d3808902c47ddd06a524c0e8a18f2f2f366a,2025-02-13T13:15:09.433000 -CVE-2025-12725,1,1,437e97d222f7e48e93685140aaeeef46e39ac72c19377c871195f20f9170fb4c,2025-11-10T20:15:39.577000 -CVE-2025-12726,1,1,058556bc877682d2796d7534cc35149c4edaaea33cb64876ba1b150a98cd8701,2025-11-10T20:15:39.707000 -CVE-2025-12727,1,1,be13c0cf41090d5c6218266b475d7c8ee3f8fbad018f45a4f155b09d9361eaa6,2025-11-10T20:15:39.833000 -CVE-2025-12728,1,1,2ee877d0d5ada4bea408efe0e7ef8f81415795e20094aaf738087cfda59077d5,2025-11-10T20:15:39.967000 -CVE-2025-12729,1,1,ad913f82103905385882b796350dfb945915524f2c5bafdc112973da6a51a28f,2025-11-10T20:15:40.080000 +CVE-2025-12725,0,1,dab5ab5596f33260692579419823d2f426b99d9b971d04a6f4d61dfa11284bb7,2025-11-10T22:15:34.740000 +CVE-2025-12726,0,1,d76d24d033e66bd6e8f6e160b255b610cab5c943bbd6ee567dfc773f1fe3bfe7,2025-11-10T21:15:38.247000 +CVE-2025-12727,0,0,be13c0cf41090d5c6218266b475d7c8ee3f8fbad018f45a4f155b09d9361eaa6,2025-11-10T20:15:39.833000 +CVE-2025-12728,0,1,3c2be3290a93688fab028c8f1b54aeb9fe5939fe89fc2d8faa1a6230fc65a1f1,2025-11-10T22:15:34.967000 +CVE-2025-12729,0,1,884f48f1c4ee0204186440363ccf829eee119f016ee9061aad7d6f6d256efb9c,2025-11-10T21:15:38.390000 CVE-2025-1273,0,0,a53ca368fd1241998b0718bab24221bda830537b090b6087ccbff111a94c4582,2025-08-19T13:15:38.577000 CVE-2025-12735,0,0,8887e78958415b7bf6c14302f06726575e91114d0daf98d9d9f9ef8ab41ee6a5,2025-11-10T14:15:42.750000 CVE-2025-1274,0,0,5e5cfd476c5408f888f5b2f1a929101dbb2bd5e4199efa0bbbf5f7b5bb7dd7ed,2025-08-19T13:15:39.467000 @@ -287607,7 +287607,7 @@ CVE-2025-12745,0,0,98d6e6a936cfb7cbdefe188b4d47f3ebc52d27fa109ac61e902bd54f45f48 CVE-2025-1275,0,0,37ac9eafc83f367a9b020f98459eacda940bbbebedd7c265613d3a0c3d38bd1c,2025-08-19T13:15:39.617000 CVE-2025-1276,0,0,9ace6df18ea9c238bdc49945f9f1b6bd59ebc30733c8496bd06ca73e7765640f,2025-08-19T13:15:39.800000 CVE-2025-1277,0,0,57685abd09dc1885cc11ccf07a9b385f71df04f25ba617ba6e9e34c573194718,2025-08-19T13:15:40.063000 -CVE-2025-12779,0,1,e58721a4356c4457ba22dcd171af16333addd4d4c04075750244792d79a2dda8,2025-11-10T19:15:56.127000 +CVE-2025-12779,0,0,e58721a4356c4457ba22dcd171af16333addd4d4c04075750244792d79a2dda8,2025-11-10T19:15:56.127000 CVE-2025-1278,0,0,d92b07150326c8969aa5397e1bb50e32afc76c0c2192dd156776f73dc055eb12,2025-08-08T18:32:48.323000 CVE-2025-12789,0,0,c657ab39209f892875643469446090d521427a48631a9b4be35dead962e78e88,2025-11-07T00:15:53.117000 CVE-2025-1279,0,0,81b425d3af391d6b47292396dd129cbf7aa0312666c7090cda5b04e25a332e30,2025-04-29T13:52:28.490000 @@ -287673,7 +287673,7 @@ CVE-2025-12927,0,0,097194a9fde99dd55ee694a942963d1333017cff51da1c47c9c5899322716 CVE-2025-12928,0,0,9873d3569f83223f08a7834270f371e977ac327196b2fc6b1750e6d2574a012d,2025-11-10T04:15:41.750000 CVE-2025-12929,0,0,8affa7d5ed8a125bb20b5c2842cb6f4a1c757f1974826ebbf07ae080969f1708,2025-11-10T15:15:36.903000 CVE-2025-1293,0,0,60a11b51b89461cf0f7c120de5ab3c93294ee5f6a5e19d6ba8d0bb06e8828d44,2025-02-20T01:15:09.950000 -CVE-2025-12930,0,0,134bfb784f2379a25f942fa7baa35adacc5badc1bd23bf064eae13ea2a4b7eb3,2025-11-10T04:15:42.127000 +CVE-2025-12930,0,1,dc774f25ebcdcce384e391d9a93956c00f08dfe8af86009f1de8c10fe6cb748d,2025-11-10T22:15:35.267000 CVE-2025-12931,0,0,1684ab8feab3ae7d25a16ad397d52e399cc0f67b37b5073e4244ad47cb30ac58,2025-11-10T05:15:43.513000 CVE-2025-12932,0,0,7745e8178332b73b592e930acd6b336d89e0899cf250418069cada7a45c5d4f2,2025-11-10T05:15:43.897000 CVE-2025-12933,0,0,2761a2fb0363d391026d3fb9ef0510dd4dac51a4b8b45f8689d67f77ba2b0f74,2025-11-10T06:15:34.133000 @@ -287682,7 +287682,7 @@ CVE-2025-12939,0,0,6a51857e1342c9fc25fa26434940a41ae40289a5530d73b51c963f9736e63 CVE-2025-1294,0,0,317f751c6485feb4da46c6295b8f3e53d93730bcfd66bf27931c6b8efadc9c2c,2025-04-29T13:52:28.490000 CVE-2025-1295,0,0,2a4bc8a9e306b7d7cae49d0fff6161acb070f2799f35d70bd6c6546c6dbde442,2025-02-27T06:15:21.990000 CVE-2025-1296,0,0,d95bfd9a7f0753e22aec4081e35e5f3d5b17ed2789c524a1845821d0907a79ad,2025-03-10T18:15:30.237000 -CVE-2025-12967,0,1,51e50db834406eb4f5ce83166f8c22b4e96b7948b67a08da630d288b7f734049,2025-11-10T19:15:56.320000 +CVE-2025-12967,0,0,51e50db834406eb4f5ce83166f8c22b4e96b7948b67a08da630d288b7f734049,2025-11-10T19:15:56.320000 CVE-2025-1297,0,0,78515bdaa2af0e7a9c64065f59df89a4063ec0cd41bf5cb9d6ac47f9b8659894,2025-07-05T23:15:24.687000 CVE-2025-1298,0,0,6d4aedba34a1b42dd7b6cbe281c33d4bfa87f549f0e4974dbe3a1a66067b8d82,2025-09-05T07:15:33.710000 CVE-2025-1299,0,0,05ad5803bebc6b17851a9b0bf8285bd6d3e063e6e9aad7d7dfb7cfe06c333fcf,2025-07-28T13:23:04.953000 @@ -289034,7 +289034,7 @@ CVE-2025-21039,0,0,825c978ac5bfad98598812ed86cb955b3194672567c9b19e4a7b155c65e37 CVE-2025-2104,0,0,a7380b662ef6f9b3cc024de0a2e69f475947f9323e5b71fc953b0a1f9a49f2a9,2025-05-26T02:13:09.153000 CVE-2025-21040,0,0,a90f672c8f95adb36c595680ce576ce3638dd8ad075391167efbc044393db46b,2025-09-05T16:43:58.663000 CVE-2025-21041,0,0,59ad10c3f1f18d7dc2dd235a7358acebba862398fa8e970943f9c335a9cf11f6,2025-09-19T20:13:14.480000 -CVE-2025-21042,0,1,8886c87c417329f2facbfa73785a1cc429d4c8d2f5f0d26b6b8939d6d69deb29,2025-11-10T19:15:56.463000 +CVE-2025-21042,0,0,8886c87c417329f2facbfa73785a1cc429d4c8d2f5f0d26b6b8939d6d69deb29,2025-11-10T19:15:56.463000 CVE-2025-21043,0,0,8f9d1e0ebf15e05006b6eb0f4f50ace455eb1620b8812cd95dcb04fac4ce4c6c,2025-10-30T15:36:12.360000 CVE-2025-21044,0,0,037aa7d372ca428d17c4d3cef6c2bd6d2985475fbb8ebe5e1ae18188b906a929,2025-10-23T12:43:38.350000 CVE-2025-21045,0,0,fff159406dd61ffb7069a67787553a0a3b4c4840d25660f79816f7912037704d,2025-10-14T19:37:28.107000 @@ -295117,8 +295117,8 @@ CVE-2025-27912,0,0,12b22661e6d403c9b49dd6cac77505d1ceaab24fecf87c382dbf02a76fb37 CVE-2025-27913,0,0,485fe06bc425120126a2274ee10ae796cc1723ddd3b39b8ce670ae2e45be546c,2025-06-19T00:14:38.870000 CVE-2025-27914,0,0,f279e908e73009eab2977a1f24fd2dfdc09b80866f9164398ffd96fb6fa013f7,2025-04-02T20:38:06.430000 CVE-2025-27915,0,0,3159e9e41fb27225c578acc825f293ddb0c37773757c5d90e4c891d50235440c,2025-11-04T16:45:11.053000 -CVE-2025-27916,0,1,0231d7d81bdb5e4a02351debcc61c11d757145d7461f3c656b1be6125e4bc0ef,2025-11-10T20:15:40.190000 -CVE-2025-27917,0,0,2a654aedafa7b0f240612ad21ab746ee097b1f6ddb8efb992afe9d5ed8ee82f8,2025-11-07T18:07:25.993000 +CVE-2025-27916,0,0,0231d7d81bdb5e4a02351debcc61c11d757145d7461f3c656b1be6125e4bc0ef,2025-11-10T20:15:40.190000 +CVE-2025-27917,0,1,065c7cd9fe1b2775c896fba40dbabe431e4cd7c4552ada3cbe8d72e83204f16a,2025-11-10T21:15:38.650000 CVE-2025-27918,0,0,a1bf732fd920483c97e5c07f9fdaac856f148b0314024af534d8587e6f8d469e,2025-11-07T18:08:34.190000 CVE-2025-27919,0,0,66a72adcd040f2d1d8f81bd0cad5e0127c2608b8eab98b118e75097087110ea7,2025-11-07T18:09:28.823000 CVE-2025-27920,0,0,c1184b0060a6e49a26751d6cfd03ff28f7cd584a54a2793ef4b48a9b623f4c40,2025-11-05T19:28:43.010000 @@ -296989,7 +296989,7 @@ CVE-2025-31025,0,0,053527fbe27001f119a974095c520ba6e0ed6e07579def4bdb1aa3af43612 CVE-2025-31026,0,0,254b219c6491f5a7e38a4af9c5c74d846ca2f862f1957eae5acb00be5bfdce97,2025-04-09T20:02:41.860000 CVE-2025-31027,0,0,f30ea6fb52fa2dda5750b4591b97e847198dcd2345c994fdef1b0b243473e3c3,2025-06-06T22:26:49.867000 CVE-2025-31028,0,0,ebad35846cd78b12d03c51b6b71e44d0624e34aa5a05101e27fce9486d87ebd4,2025-04-11T15:39:52.920000 -CVE-2025-31029,0,1,b91ddbf62213f183b72705e25edf6c2971f54c03c5d501ed36cc5c262c79f56e,2025-11-10T20:15:40.613000 +CVE-2025-31029,0,0,b91ddbf62213f183b72705e25edf6c2971f54c03c5d501ed36cc5c262c79f56e,2025-11-10T20:15:40.613000 CVE-2025-3103,0,0,8ad41fc7f92d09e819a22a1c00386b847f612c955790b39a589fac01d444d3a9,2025-04-21T14:23:45.950000 CVE-2025-31030,0,0,67e0e597fce025a476fc384187950e06000f99caed271d5d9f39f632a8519f5a,2025-04-17T20:21:05.203000 CVE-2025-31031,0,0,151d32b9da3d458fb821a908a76d8bafa5c8bbe7678b62350f41abb290ba4283,2025-03-28T18:11:40.180000 @@ -298072,7 +298072,7 @@ CVE-2025-32219,0,0,5178f7d1f0eec6d329438940fcca9e62e3cbae62e09bfd6e58598ad17b1ab CVE-2025-3222,0,0,08f41de787a1171192196111923ea08a7c8e0ae13339b675fea6a92ffc93d9b9,2025-11-07T17:15:47.500000 CVE-2025-32220,0,0,6a8d953495545d6a3024a980335c9c91078fb8670ddb08d912ce57fb8d6e5730,2025-04-11T13:07:18.387000 CVE-2025-32221,0,0,3480dbea2226a3c5390f9d7933e70062ae4de8472c178284af5d5ea756bd1165,2025-04-11T15:39:52.920000 -CVE-2025-32222,0,1,7e1332f018fa0dbc690304404a6302e28e66ca7f5fc2687e85d4ea325234acbe,2025-11-10T20:15:40.783000 +CVE-2025-32222,0,0,7e1332f018fa0dbc690304404a6302e28e66ca7f5fc2687e85d4ea325234acbe,2025-11-10T20:15:40.783000 CVE-2025-32224,0,0,2a22e5a202cb393a4d0a88c4ce7915edac0f86a32523706c76aa16c52c05dd11,2025-04-07T14:18:15.560000 CVE-2025-32225,0,0,e570d346446b004046154e47288bc751a893917eee92c67786b6e64bb03b83f4,2025-04-07T14:18:15.560000 CVE-2025-32226,0,0,fd49be414cd0aeeecaa3b2ea597d82d78d354e36f0d40bc62f460ac8afa0ce63,2025-04-07T14:18:15.560000 @@ -298917,7 +298917,7 @@ CVE-2025-33138,0,0,f3d1012b42eac58fa1f42c87b8a1dc935860a508ecaa92c1dd820b8badddd CVE-2025-3314,0,0,b0e48e6a3f8b9661934730a17a6390ace506ff9a0ff428767c25879bd6d8d360,2025-05-14T21:02:19.217000 CVE-2025-33142,0,0,464849bc5f5ad80f8ebaf3eacd9e7ac74ca41b17967da99ef88e620efef75272,2025-08-18T18:05:01.200000 CVE-2025-3315,0,0,1f847c098518c83189dbeef46d9312e1f2d8310d8f0e759ad841eee668fc10bc,2025-05-14T21:02:31.867000 -CVE-2025-33150,1,1,b3ca126cbc21e45f12ecf04e37dd378c2b71037d5ee6a909ca0991fc9b91dd18,2025-11-10T20:15:40.960000 +CVE-2025-33150,0,0,b3ca126cbc21e45f12ecf04e37dd378c2b71037d5ee6a909ca0991fc9b91dd18,2025-11-10T20:15:40.960000 CVE-2025-3316,0,0,3e88a15102379c98d458fd3db7b2ca0fb380819b90213305e7a63c89acf48439,2025-05-07T16:45:57.510000 CVE-2025-3317,0,0,84bed38c4aad4d99a9bce86e0f0e19796582a61c410c9b717a7aa8eff77aaffd,2025-11-04T18:56:18.017000 CVE-2025-33176,0,0,7842dad454e2280475318a1f7afdf61a9ea2e1d6c16d08f09d80467ccd4b95b0,2025-11-06T19:45:30.990000 @@ -300130,18 +300130,18 @@ CVE-2025-37917,0,0,0465a1bab36d813e7da22df245d73c123d5f680d68e2bd641a98f3b0f1f09 CVE-2025-37918,0,0,937aed34bff4bcb28dc86b54e04bf817bbf919db2c89ad3b053208051abda914,2025-05-21T20:25:16.407000 CVE-2025-37919,0,0,764c6fce04a516d8c4b307da417b2e63599b182a271e9e7eefa5b01c78246970,2025-05-21T20:25:16.407000 CVE-2025-3792,0,0,b63fb0df7f8a732a92eefb61e717bd5287b245f6f6fdefecee0b8a1f1aaa853b,2025-07-15T20:06:10.953000 -CVE-2025-37920,0,0,a19f8821aca92b84382f5f4fb63ec9413e20e91027ee4cd1955d1c0190b975e9,2025-05-21T20:25:16.407000 -CVE-2025-37921,0,0,6bbd87937cc949b0516558b814845ae55b4b670f4e0cdfe867b829f6ecfe1a8f,2025-11-03T20:18:41.630000 -CVE-2025-37922,0,0,fb17d6cf8e006373c474fcbd58ce4b484035afa4114963a8b9328f38a4e170ba,2025-05-21T20:25:16.407000 -CVE-2025-37923,0,1,b9490316abdce7d250e1a85266d63483d8e29daafc6e52860a375d26b1d70b97,2025-11-10T20:58:04.547000 -CVE-2025-37924,0,1,3bc7a2856584eaf02658ab54c9b79596e3e0c015dc6dff0762a2bc32ce35f386,2025-11-10T20:48:10.663000 +CVE-2025-37920,0,1,461b14141ae08dad8cadc091d5bbeccf7cc1e240bb52e5bafb19cd76ddb1fd80,2025-11-10T21:11:09.640000 +CVE-2025-37921,0,1,511ba49aa7204d226c6c6734c8b9f49aa503a88a39374ceb25501687d4c5c6c2,2025-11-10T21:09:57.033000 +CVE-2025-37922,0,1,f3c6f0cc31090e63f869c6db15fd8378bc7c3ca8450156c9ea6a91c4dd375fe5,2025-11-10T21:03:24.220000 +CVE-2025-37923,0,0,b9490316abdce7d250e1a85266d63483d8e29daafc6e52860a375d26b1d70b97,2025-11-10T20:58:04.547000 +CVE-2025-37924,0,0,3bc7a2856584eaf02658ab54c9b79596e3e0c015dc6dff0762a2bc32ce35f386,2025-11-10T20:48:10.663000 CVE-2025-37925,0,0,a3b2e653ef24f5019b686bb841e139e1102a89ebb55cb87ceb95f340fad3d3f8,2025-11-03T18:15:55.617000 -CVE-2025-37926,0,1,9c54d5cc369e812a92c06ef738fa589bbbc4b070566263351b26bba5e3c93dd2,2025-11-10T20:33:25.630000 -CVE-2025-37927,0,1,30a77b26c170a596701cf0e67724e1c6e6ca9629d81e0a2b0e75849b4570046b,2025-11-10T20:33:13.267000 -CVE-2025-37928,0,1,bb9f01d7bb4e66867341a626aae20cdf062159af6546a97ebb9a806eaee710e1,2025-11-10T20:32:41.360000 -CVE-2025-37929,0,1,222194e37a66624fa21d3c5e7bbecf322b3435e7ab7ec4727040d2202705a136,2025-11-10T20:24:46.587000 +CVE-2025-37926,0,0,9c54d5cc369e812a92c06ef738fa589bbbc4b070566263351b26bba5e3c93dd2,2025-11-10T20:33:25.630000 +CVE-2025-37927,0,0,30a77b26c170a596701cf0e67724e1c6e6ca9629d81e0a2b0e75849b4570046b,2025-11-10T20:33:13.267000 +CVE-2025-37928,0,0,bb9f01d7bb4e66867341a626aae20cdf062159af6546a97ebb9a806eaee710e1,2025-11-10T20:32:41.360000 +CVE-2025-37929,0,0,222194e37a66624fa21d3c5e7bbecf322b3435e7ab7ec4727040d2202705a136,2025-11-10T20:24:46.587000 CVE-2025-3793,0,0,3fbdfdae3ba2312385d1e55e1013c3bba14ef84080933b19af3e5f161d0c534e,2025-04-29T13:52:47.470000 -CVE-2025-37930,0,1,2f3fe0e65f900cd0f6197c33b18b372e4350437d97ba06c4a6801037a16d807e,2025-11-10T20:16:11.453000 +CVE-2025-37930,0,0,2f3fe0e65f900cd0f6197c33b18b372e4350437d97ba06c4a6801037a16d807e,2025-11-10T20:16:11.453000 CVE-2025-37931,0,0,e5b361a8a776dd4cceba25694dd9c1c7b084c6ef2f8209bd6471e3719d193174,2025-11-03T18:15:56 CVE-2025-37932,0,0,01ef76e1526d1f16c65290d5bd5a57beff080fad20d034d27c3c12c48ff0996d,2025-11-03T20:18:42.323000 CVE-2025-37933,0,0,0037f071010caedc2b8388e04a0e9494442d1c3624edc4d6fa053aebbd14388c,2025-05-21T20:25:16.407000 @@ -301229,12 +301229,12 @@ CVE-2025-3946,0,0,f25888450f97f732cb3ccd050a0b4825a5bdde5d35078aeb557091be14a207 CVE-2025-39460,0,0,daa7eee74b7c44131647afb89bb4a87c32036e4f43153a2a18b1f8adcb8785ef,2025-05-21T20:25:16.407000 CVE-2025-39461,0,0,f635ffdb93b7397c1ad6e4e3202e0bc90a8a3dff74e27b4b58a81c4198b21206,2025-04-17T20:21:05.203000 CVE-2025-39462,0,0,fe257446c6d06c76fba7e96bf7c08f5838631e37383326b4dbb2b21aef6a5308,2025-04-17T20:21:05.203000 -CVE-2025-39463,0,1,7e3a29f53764761849999cbe6c58a8f41a09d17f6f93a66830c10e5c6135300c,2025-11-10T20:15:41.150000 +CVE-2025-39463,0,0,7e3a29f53764761849999cbe6c58a8f41a09d17f6f93a66830c10e5c6135300c,2025-11-10T20:15:41.150000 CVE-2025-39464,0,0,5021866073b4c31242c9a7ae18259b29ce378a9b068ae11c4d8f90f0f33dfcad,2025-04-17T20:21:05.203000 -CVE-2025-39465,0,1,4006520207be37c759baf300d521d676685ce413b1ffa2276f4e6426da60f47c,2025-11-10T20:15:41.360000 -CVE-2025-39466,0,1,9c4627a479cb4b273c1792d4086184ef9dfb7317e4b7813998d75a478f5a84de,2025-11-10T20:15:41.530000 -CVE-2025-39467,0,1,db322709d187129f4f44209c0670feb68e91811ea07c53e4fc69d6c6d73d9974,2025-11-10T20:15:41.693000 -CVE-2025-39468,0,1,134c40e8dca591bc29d651934b33289412a986424f7be9308fbc417037361b1d,2025-11-10T20:15:41.860000 +CVE-2025-39465,0,0,4006520207be37c759baf300d521d676685ce413b1ffa2276f4e6426da60f47c,2025-11-10T20:15:41.360000 +CVE-2025-39466,0,0,9c4627a479cb4b273c1792d4086184ef9dfb7317e4b7813998d75a478f5a84de,2025-11-10T20:15:41.530000 +CVE-2025-39467,0,0,db322709d187129f4f44209c0670feb68e91811ea07c53e4fc69d6c6d73d9974,2025-11-10T20:15:41.693000 +CVE-2025-39468,0,0,134c40e8dca591bc29d651934b33289412a986424f7be9308fbc417037361b1d,2025-11-10T20:15:41.860000 CVE-2025-39469,0,0,e18849e95e863d0389b13542e78fc7e5370e06514982d8ca59d2eba138210f3f,2025-04-21T14:23:45.950000 CVE-2025-3947,0,0,d86d3fbacc9e44b1ba561e80077b535bf9a13cce4d3a6a00c418a158f5419c08,2025-07-15T13:14:49.980000 CVE-2025-39470,0,0,e010fc0801cd6bb4936cb1b65898bdce69bac41af3bf33793e9451cff50a9a80,2025-04-21T14:23:45.950000 @@ -303150,7 +303150,7 @@ CVE-2025-43718,0,0,ac01e4a018feec31919cd9db89fac4223708be2fc99bd6186a4b4a49191ad CVE-2025-4372,0,0,b8ec8f55704f5a97bc8b4802f0ca1d30b86b81d661e4e9e6ccf4b9c1a8e6e6c4,2025-05-28T20:00:04.843000 CVE-2025-43720,0,0,8dd09db2614df9d778bb3cc5579e629c5daf282527286448b09bc37deafda296,2025-08-07T18:16:03.187000 CVE-2025-43722,0,0,14e08009e1241ec4af6afc9c0b6151f23630ef0041be58992da32d75244320bb,2025-10-09T18:29:23.237000 -CVE-2025-43723,1,1,f266141798ad5575c3e456a85bd991902ca9ed9503add0942ece9b6a4ba19eed,2025-11-10T19:15:56.880000 +CVE-2025-43723,0,0,f266141798ad5575c3e456a85bd991902ca9ed9503add0942ece9b6a4ba19eed,2025-11-10T19:15:56.880000 CVE-2025-43724,0,0,9afc57c220c4303a72bc75d79c139b57bb846778e5f2ba9217f3d01dc39ae3e3,2025-10-31T14:13:39.693000 CVE-2025-43725,0,0,71701507ab33a6cfc75f87c66ca90201c2e279f342d9a54ddb997709c60a8ec1,2025-11-04T15:26:42.623000 CVE-2025-43726,0,0,d017770f1dc0cf0cc67985aaf000ec399f0ff0ed6738301983cea60832297640,2025-11-04T15:37:09.027000 @@ -303465,7 +303465,7 @@ CVE-2025-44141,0,0,1b640fec5b67675dd6c48e39ace9ed93416eeec7d96ebdef4175bdaef84aa CVE-2025-44148,0,0,440749a71814d76edeed70dd30fc58f3e0b75eaee931968ee8c88b7d1e24e11d,2025-06-09T18:04:33.580000 CVE-2025-4415,0,0,ad03eddf6945a3abd185a8d960097016d4b62ffbf34756b693345e56021597e6,2025-06-25T15:23:59.237000 CVE-2025-4416,0,0,77b944c5bde5d5a629537074a2e3b19545d7385595eb25f86194c533d8abd6d3,2025-06-25T14:35:56.230000 -CVE-2025-44163,0,1,d516b839bac50462ff0096f5f509c98b942c08faff20f67b83a62f3a7b69e53d,2025-11-10T20:38:28.663000 +CVE-2025-44163,0,0,d516b839bac50462ff0096f5f509c98b942c08faff20f67b83a62f3a7b69e53d,2025-11-10T20:38:28.663000 CVE-2025-4417,0,0,bc62e46078e8192920dbaf1b9b76f02565222568b177611f95eaef56f98ccc29,2025-06-16T12:32:18.840000 CVE-2025-44172,0,0,c78f9d9932a5093f6fd2dd92edb0ece1c73f28734d84b3772f8246b249ade2e9,2025-06-03T15:55:33.757000 CVE-2025-44175,0,0,5b6789f40968dc5ea2171c87d80e31a88f2e561b1b44c9c7141157b74ccbf57c,2025-06-13T13:39:01.420000 @@ -304890,7 +304890,7 @@ CVE-2025-47282,0,0,24f9d049533e8042e2e3afad5d987705c25738e1fc0afb5740ae55f69b013 CVE-2025-47283,0,0,af85e98483f5f1c8302a5e01b2f703378d71f37e5e705536a079adb6c4ce9c30,2025-09-04T18:37:55.813000 CVE-2025-47284,0,0,81e88263d11e786f740b0b45c6ade444dd13cb9112a266a36633f8310241bb8c,2025-09-04T18:38:28.530000 CVE-2025-47285,0,0,a4b322cfa16ac0198aad5626c2233334a81e0c8124806adefa631e6ad6b3d8e6,2025-05-16T14:43:26.160000 -CVE-2025-47286,1,1,aaf55b82ba0f05b3eadb27765b6ee22401d9ac831d5ea19aae1dec878bc3c8c5,2025-11-10T19:15:57.043000 +CVE-2025-47286,0,0,aaf55b82ba0f05b3eadb27765b6ee22401d9ac831d5ea19aae1dec878bc3c8c5,2025-11-10T19:15:57.043000 CVE-2025-47287,0,0,4a03b7a85e9f4f1ae469c2f4edaad7e40d35a7308b2c4cacf7afd6a1813a45c3,2025-05-29T06:15:23.090000 CVE-2025-47288,0,0,6240d445f51e80c803629b9dc8b3ffd9c4606efb6ef121520c5379fe5f8a49d8,2025-05-30T16:31:03.107000 CVE-2025-47289,0,0,21262127c679cd8748d54b62f2e53659b097cc1c7c81693ae8e24c5b40a305e5,2025-07-08T17:09:14.273000 @@ -305124,7 +305124,7 @@ CVE-2025-47584,0,0,489ae1510d87f586956cebc3bf291dfa93a8716f80b6857fbb8edd79cbd23 CVE-2025-47585,0,0,470423a4100954df6f7551bcae69cda4785956e4c4ab28eb9b63a1e872aebd11,2025-06-04T14:54:33.783000 CVE-2025-47586,0,0,34a027a7c7247248d89f1a878e3c24a97cb83762b56c55719898b2574fbd669a,2025-06-06T14:06:58.193000 CVE-2025-47587,0,0,c69129af37bc8e41d28b40b1a600e9f976cf3e139ddd0ff0333903f8e74cc56f,2025-05-08T14:39:09.683000 -CVE-2025-47588,0,1,862f85cffa02de9534345f3aa78de89777d5dfa798553cf9bb4ed6b4340a0089,2025-11-10T20:15:42.140000 +CVE-2025-47588,0,0,862f85cffa02de9534345f3aa78de89777d5dfa798553cf9bb4ed6b4340a0089,2025-11-10T20:15:42.140000 CVE-2025-47589,0,0,d77c0dcf400db13a9ebaf0299e125dc013f6c4414d58c98a50eaa87722aba073,2025-05-08T14:39:09.683000 CVE-2025-4759,0,0,692e47a0363707f39adcc4448402c52b3a812a567b6a3e05960dde7e6e1d11d0,2025-06-03T15:57:29.763000 CVE-2025-47590,0,0,9243ec7a75311c877a33618cc4768d246e40102b3880a9643865812318c9e620,2025-05-08T14:39:09.683000 @@ -305299,7 +305299,7 @@ CVE-2025-47769,0,0,191a2625db99bf988b4216f9a0393389195e7a62dd877407382043a09941c CVE-2025-4777,0,0,c0dc4eae42d0a5bf818cb2ada8342af24186ecc6019dc19abb8a3d472e9b301f,2025-05-21T14:31:24.410000 CVE-2025-47770,0,0,2c7f1062a80967c1f6432862f70e4d464db4eee082af6f48036a63ff6fe40b3c,2025-05-10T03:15:24.870000 CVE-2025-47771,0,0,23c2983f3220646fa4d3f6588f6e42b0a9a0fca4d3a793e13cf1ed60386d63b6,2025-06-23T20:16:40.143000 -CVE-2025-47773,1,1,861c369e9df294157c26012cf3f684c601b53fd4d4962ee47eba7d40517f8440,2025-11-10T19:15:57.207000 +CVE-2025-47773,0,0,861c369e9df294157c26012cf3f684c601b53fd4d4962ee47eba7d40517f8440,2025-11-10T19:15:57.207000 CVE-2025-47774,0,0,6b1fb7f6eb1a6e80bb22b1fbffd29dcff8043e23a498d4697f7ac9cb0d4a0014,2025-05-16T14:43:26.160000 CVE-2025-47775,0,0,98b178624c536547b3f6ef7efecd7b28808749004fdcd81bf5bb6967732074e6,2025-07-11T16:15:04.160000 CVE-2025-47776,0,0,97332d4a77a7ca733821292aadb916b7d2c69ef74662a331b8d1020b74efaa39,2025-11-10T17:59:50.593000 @@ -305412,7 +305412,7 @@ CVE-2025-47929,0,0,7fc15c7af26adf36cdf89018fb748ea0cea6a0ed56d6cabffa736dce44604 CVE-2025-4793,0,0,ec69064861ba117d418880947f64b864bae8e19e90fef5ea47c2be77c9ecb787,2025-05-21T21:00:12.357000 CVE-2025-47930,0,0,c00cedf459d0dda6f37b4d034ba79072c81b9f8b000bdcf6a07eee3c23d88c58,2025-08-27T02:26:59.770000 CVE-2025-47931,0,0,2ba961b15398b05238bce593e14441b257d624d47fec2eb2b7b4debf34411048,2025-05-28T13:19:14.460000 -CVE-2025-47932,1,1,d3eaf06cc0fec2f570546528c566b1b3f0977a01049aab44fd26d89c2b51ce04,2025-11-10T20:15:42.363000 +CVE-2025-47932,0,0,d3eaf06cc0fec2f570546528c566b1b3f0977a01049aab44fd26d89c2b51ce04,2025-11-10T20:15:42.363000 CVE-2025-47933,0,0,ed29c17573d4cf044fe69ff430bceed1847a54230672f08ab114e75ff4b5bb99,2025-08-27T02:28:01.647000 CVE-2025-47934,0,0,8438c1a5883ecd980df510f4404f64469627266e683abcc00b1872291e43b364,2025-05-21T20:25:16.407000 CVE-2025-47935,0,0,406b48db633b3cd8d2acd0e043f41be378de6269ff41278863cebb17c9ea9998,2025-05-21T20:25:16.407000 @@ -305520,6 +305520,7 @@ CVE-2025-48050,0,0,fb11876c739186b17efdda0f201617f2ba38492e858d291ddb8ff8349bb73 CVE-2025-48051,0,0,8f16e73c77a658ac4a8bc87a031408f43bd1de0b114924200d2574b9dd6d151d,2025-06-12T13:08:45.057000 CVE-2025-48053,0,0,a138435551adbc93a5ce14daae6414d1a32d6d143254fb4b97e10d83aaf47a4d,2025-09-25T20:27:48.183000 CVE-2025-48054,0,0,619ab1f87d286d2d8cec942751a3a0672c0ee415c655aa7e7fd196e00f07880e,2025-05-28T15:01:30.720000 +CVE-2025-48055,1,1,598df4472aec580c0db53381053f163f4a72bdb653695a5ea9d378c3794d94e4,2025-11-10T21:15:38.907000 CVE-2025-48056,0,0,a8d32136bfa1274c5c1a44ad4e0fd36b6417f9ac8904498885d9d904c4b52165,2025-05-21T20:24:58.133000 CVE-2025-48057,0,0,a191ca594fce2043575d294ad9a27f048e1246820e66b4cf94f49035f8bda852,2025-05-28T15:01:30.720000 CVE-2025-48058,0,0,dc919fb4453880701513e4118a5ee3cf7580d07125b52fd07e552b4bc7e7b063,2025-06-23T20:16:40.143000 @@ -305530,6 +305531,7 @@ CVE-2025-48061,0,0,9623adaa4a2a12419dc1960402eeb7cda483dd4973982b2b4588eefcc7c2d CVE-2025-48062,0,0,eaf45f3837f0f8ebdb3f4a311d2ed619f3be5ad532a844edd0ac84ad9d88c051,2025-09-26T13:05:09.517000 CVE-2025-48063,0,0,4fa6f9417d6fca0da649d8fedead45400d54235d3ee688ca801803723b14f1b1,2025-06-20T17:38:28.517000 CVE-2025-48064,0,0,f30f6abfc706c8ec009b8e1646b8ce7a94ad294f1fc91f47ca51b619773ad0e0,2025-05-21T20:24:58.133000 +CVE-2025-48065,1,1,d2a32920d867e9f8c13db64ac2ccd2f7ca42c0596a6e26e71f60add1a28efba8,2025-11-10T21:15:39.103000 CVE-2025-48066,0,0,faea31f6567e989a0ef973c3f26a498ca723f84a2b80d40e0205222fbd185beb,2025-05-30T01:18:41.410000 CVE-2025-48067,0,0,690cd8f95222751ac3c6a93cde79720fcfd17527b5122c2866972151e29eb43c,2025-08-12T13:44:39.947000 CVE-2025-48068,0,0,94892c7ca39f0689286536e35376041387c54d2dc8305a3b84d63484abb5530a,2025-09-10T15:17:38.677000 @@ -305542,19 +305544,19 @@ CVE-2025-48073,0,0,0be6249cab38be3aa07bbf33bc8fff2eaf114884a9c1884c6593dc5463853 CVE-2025-48074,0,0,cb44dc896fb72cb43d0d40952c0ee554b0121df7578027673cf1ce0d8f49b6b3,2025-08-13T19:18:13.987000 CVE-2025-48075,0,0,ceded26a477da7bdd3b4705aea0a4689aac5d500ae2c2acb800b2c72db0780d6,2025-05-30T01:18:13.397000 CVE-2025-48076,0,0,77e30a4e9d5165f7df3a9f4830d293b1f9fb918a983df9142ff9d90161417784,2025-11-10T18:14:15.173000 -CVE-2025-48077,0,1,036c0352a101f2de992a6d84e652c0def9d7d38dcdc41e235074446bcb5d6e64,2025-11-10T20:15:42.543000 -CVE-2025-48078,0,1,72bb00837edb58bfbb9aa93bdafe5388eabaa17bb34112abce9583a6df13ac73,2025-11-10T20:15:42.707000 +CVE-2025-48077,0,0,036c0352a101f2de992a6d84e652c0def9d7d38dcdc41e235074446bcb5d6e64,2025-11-10T20:15:42.543000 +CVE-2025-48078,0,0,72bb00837edb58bfbb9aa93bdafe5388eabaa17bb34112abce9583a6df13ac73,2025-11-10T20:15:42.707000 CVE-2025-48079,0,0,6a9c124abc87a320bc8b30f57c16bd051b25830658cd2d770da8f936d77bfc2d,2025-05-19T13:35:50.497000 CVE-2025-4808,0,0,754834e2a19df62069bc2414c3d233aae38d368529ec96cc4bed4babf3116dd2,2025-05-21T20:59:50.423000 CVE-2025-48080,0,0,3ac40a2ee2ffbe53ef86e322d55a6c979dec23087ec5d5ea5075b108588d8314,2025-05-19T13:35:50.497000 CVE-2025-48081,0,0,d598843cce99fb3ba59feef62b8c03461488076cb1fe3ce111b0e97d03039932,2025-08-29T16:24:09.860000 CVE-2025-48082,0,0,7f97480df82979930d00b48a4244ebf3dd09184a722162a5464bb5f7ad82ed80,2025-10-23T16:15:38.237000 -CVE-2025-48083,0,1,d6b5c98ae6e11ad42cba8d951acc8a8151648a09e4d44ff17b01b42dc41ef0a9,2025-11-10T20:15:42.873000 -CVE-2025-48085,0,1,bde9b9bf6975b33ab23828b2ea8d0e2dc7bfd6e96138d5931e375445f352468f,2025-11-10T20:15:43.040000 -CVE-2025-48086,0,1,9ad1f805533488e0d38ee10f98223e2ff05a93b18e9401ee8cc4875bfec48215,2025-11-10T20:15:43.203000 +CVE-2025-48083,0,0,d6b5c98ae6e11ad42cba8d951acc8a8151648a09e4d44ff17b01b42dc41ef0a9,2025-11-10T20:15:42.873000 +CVE-2025-48085,0,0,bde9b9bf6975b33ab23828b2ea8d0e2dc7bfd6e96138d5931e375445f352468f,2025-11-10T20:15:43.040000 +CVE-2025-48086,0,0,9ad1f805533488e0d38ee10f98223e2ff05a93b18e9401ee8cc4875bfec48215,2025-11-10T20:15:43.203000 CVE-2025-48087,0,0,5e76862a7a8913d6d5622a0610ff7a597d6bb8c548e9d4fd3fb582a97db2ce17,2025-10-21T19:31:50.020000 CVE-2025-48088,0,0,57217f01ba9161445c29d4b99dba8b588a2190f5a7eb3fd80709219cc4596b3a,2025-10-27T13:19:49.063000 -CVE-2025-48089,0,1,4a0f5f6cf548e442dd4450a29996c75f9a29ab23701a5acbf026c9a4062363ef,2025-11-10T20:15:43.440000 +CVE-2025-48089,0,0,4a0f5f6cf548e442dd4450a29996c75f9a29ab23701a5acbf026c9a4062363ef,2025-11-10T20:15:43.440000 CVE-2025-4809,0,0,e3f6cc20f5a1533fd1b852392735aed9d9901924729604ad889c6054553c7632,2025-05-24T01:11:08.893000 CVE-2025-48090,0,0,e013e95651285df2635a4b3532549458089b0ac3fda46e3f6b6ca6236028106b,2025-11-06T19:45:09.883000 CVE-2025-48091,0,0,b25a8ad0324224ad90cddccfd47514b37d4dc8c9ad47b3177a93a69a4366c99e,2025-10-23T16:15:40.763000 @@ -305731,7 +305733,7 @@ CVE-2025-48287,0,0,457e03c5ca5cd01ca6195830150b857435cd04a977813a943ae502727478c CVE-2025-48288,0,0,93f3c65d308bcc630b2ef72da05f626c3e49fdc0d230bb58746b42609b0eff66,2025-05-21T20:25:33.823000 CVE-2025-48289,0,0,16bcdb7b42c03600264ef06d9bd128539d92ebd7f3bff05c52ffead302903d4c,2025-05-23T15:54:42.643000 CVE-2025-4829,0,0,cd49ff83fc9a4be47cf39c809b43ca057e0aefb2515505ab28678e1be115c4d1,2025-05-23T15:51:37.080000 -CVE-2025-48290,0,1,4f80bf93e198d6b95b15213b843beea287ccce521d79dacdd3c7f59f450624f8,2025-11-10T20:15:43.620000 +CVE-2025-48290,0,0,4f80bf93e198d6b95b15213b843beea287ccce521d79dacdd3c7f59f450624f8,2025-11-10T20:15:43.620000 CVE-2025-48291,0,0,8440d18d3433f45c0ed2b89d24649c4f7ab43bf66a4e605911308fb93020830c,2025-07-16T14:58:59.837000 CVE-2025-48292,0,0,9c085b4750f647db01b66be8d03639a5aa6a0c1f2f3e142a149c80f277fcbb7b,2025-05-23T15:54:42.643000 CVE-2025-48293,0,0,2302f757195d0b4af66394052a6be102a72485573acdf27fc9d64fb7421c2f5f,2025-08-14T13:11:53.633000 @@ -305775,7 +305777,7 @@ CVE-2025-48327,0,0,0425e50de8c888b7b425de69e35f9ef9c7e5e2962c6c0af084c10dc710997 CVE-2025-48328,0,0,17048bb7a62026f8a508465a37dd897b445dbfd7430f4937f92fd8ab7c1e379a,2025-06-06T14:06:58.193000 CVE-2025-48329,0,0,0cc07453c466449db0eb2f0279eb9cf0939be49d6e9012c00dd75c095e62d25f,2025-06-06T14:06:58.193000 CVE-2025-4833,0,0,524b74208b998ac185cb2f32a80e77b8ca0d39465baae0b1b3d7710a8e9aad50,2025-05-23T15:50:46.407000 -CVE-2025-48330,0,1,971180226f8b329577e30540fc8e5e46817d22bc66a0d0e6eedb13088b674d32,2025-11-10T20:15:43.790000 +CVE-2025-48330,0,0,971180226f8b329577e30540fc8e5e46817d22bc66a0d0e6eedb13088b674d32,2025-11-10T20:15:43.790000 CVE-2025-48331,0,0,2e293173c8bdd95f274569d90c4fc672d4dd2c84b398ba10c7c764970ea66904,2025-05-30T16:31:03.107000 CVE-2025-48332,0,0,c0e692941cb37d3cafec299169b22ad7674b53cd04a7ab9e6a67b63f2c425a6b,2025-08-14T13:11:53.633000 CVE-2025-48333,0,0,14afbc2fd3d43d5bfcfb29845b81499619ff07de315506d457b3d59f56b1ce41,2025-06-17T20:50:23.507000 @@ -306107,6 +306109,7 @@ CVE-2025-48874,0,0,38c8a7a9f9e4de254c475a3cc2adb8109dfa7e2eed584004a3cf9ab32d38a CVE-2025-48875,0,0,029be7ab6273a4455b3ac7b9bf6f732c1f5c1649e6f1271a40adecc61bf80bab,2025-06-04T19:54:12.937000 CVE-2025-48876,0,0,140df3334a4b984a5d2e2e07bdf5daecbac40f4ede88367ff507b132b90ca7f6,2025-09-03T16:15:39.637000 CVE-2025-48877,0,0,879f439198a12ee09cf28025007e394d77c96c1be4ea4ff6557e786b3f7fd3fe,2025-09-25T20:27:42.407000 +CVE-2025-48878,1,1,c3824ae6d5eab0f4b7e754564770df1645b737bec1a83b01c630d45f4c0c1de2,2025-11-10T21:15:39.263000 CVE-2025-48879,0,0,c03fc9d47c91ca691a6671df9c0c051049c7f52d241d4348428392eb2b93e8d4,2025-08-12T13:32:55.493000 CVE-2025-4888,0,0,6310b8fff197a575079561816e1f76f1ad70f7608de3ca85411d4b87b2143843,2025-05-28T15:27:22.353000 CVE-2025-48880,0,0,e3f8b2cdd2d7e01ae05621a292349f1663c3a39c76f38840987aaac340e5533a,2025-06-04T18:32:36.090000 @@ -306316,6 +306319,7 @@ CVE-2025-49141,0,0,9c8f33401ca809dc37afd1aefb4b71d904119c4dcfa4544a8a906ca0cc0b1 CVE-2025-49142,0,0,3b6aff888023b8f99cbf10d63baa3ce74ca3d3811b0ef80e93aeebc680f581eb,2025-08-21T22:36:18.030000 CVE-2025-49143,0,0,a2cfa0ea57226387d43a22a6a07451325c170dcbeaf5a89c9daccdaddff4ab4e,2025-08-21T22:34:19.990000 CVE-2025-49144,0,0,5129cc190a0c5c159b371725b05ca922bb327f23e1bd0ab7bc8d6be9300179e9,2025-10-23T14:15:35.980000 +CVE-2025-49145,1,1,b37cb657861765fcd0ca69c208f4539580949a46b12bdbd0981e24a129d3446e,2025-11-10T22:15:35.760000 CVE-2025-49146,0,0,6e20a3ad8fada1ce71970614193a92629fcac049053bf2afbd37bf2444dd3e39,2025-10-06T19:29:58.977000 CVE-2025-49147,0,0,89f099eff9c41dafa9d2eb3009054d47e178fe5210f020ad9069b6880b514eae,2025-09-22T13:53:38.260000 CVE-2025-49148,0,0,c3b7fb08d13ff41d0698bee1d7c392e956316a8e5553d1877a2eed546fcf4c94,2025-06-12T16:06:20.180000 @@ -306515,20 +306519,20 @@ CVE-2025-49382,0,0,ba711fba3cf03833b256388968f1cd2292d8fb714919845dc6365d3d48388 CVE-2025-49383,0,0,f026006408fc938ce1d39c10dbd609a5257db677d62635bf813b3e04c3ca55d4,2025-08-29T16:24:29.730000 CVE-2025-49384,0,0,d1df0d0e2d35eeedd3bba8a918c9da1b9aae1c28af38e48d390d1463711d28c8,2025-08-26T19:39:32.237000 CVE-2025-49385,0,0,f6d6ddb7091a891fc9ff4eee7659b0bf68f30a0869302b80d07aeb0c7f62867c,2025-08-26T19:39:54.587000 -CVE-2025-49386,0,1,1fd898551645b1427ccff85f7fea623600324097bdcdceb0a8c071ccd0e66c33,2025-11-10T20:15:43.950000 +CVE-2025-49386,0,0,1fd898551645b1427ccff85f7fea623600324097bdcdceb0a8c071ccd0e66c33,2025-11-10T20:15:43.950000 CVE-2025-49387,0,0,e7862cd61f85e68983c9d1b8dde5d8b09a5214686273b8682f0057a575c2c4aa,2025-08-29T16:24:29.730000 CVE-2025-49388,0,0,f483abddeefaa873c5238b608de512de386fb6e978ad1dbfb910de783a1388cc,2025-08-29T16:24:29.730000 CVE-2025-49389,0,0,9f710b5677a0ae67a499ee3b0106e4a61ce5acf494ff8e062647615579208c30,2025-08-20T14:39:07.860000 CVE-2025-4939,0,0,5ec31620a920403386badd8ed8c9ad70156a6e4853cf1462dcd01754dc60b7d3,2025-05-28T01:32:20.263000 -CVE-2025-49390,0,1,765859a753226abd129d1d832465025bec2682f8eddcf5bae45187f31e387bc5,2025-11-10T20:15:44.123000 +CVE-2025-49390,0,0,765859a753226abd129d1d832465025bec2682f8eddcf5bae45187f31e387bc5,2025-11-10T20:15:44.123000 CVE-2025-49391,0,0,dcc791dc8d47c9d5cc953698cb098dbcc5aa7c999e6d142461e80fc137575a09,2025-08-20T14:39:07.860000 CVE-2025-49392,0,0,d2b77780c967ed876f47d9cea71ad52054dec973099347875aec89eeb0295c5d,2025-08-20T14:39:07.860000 -CVE-2025-49393,0,1,921bb012bc12e05333c379bf0d4dc0740b87e82c1880a05a0a40c1ec7d1f63af,2025-11-10T20:15:44.320000 -CVE-2025-49394,0,1,620edae8e9334941d009082a6cf22173e47a25e103f0e91d6f375b7ec85379a0,2025-11-10T20:15:44.487000 +CVE-2025-49393,0,0,921bb012bc12e05333c379bf0d4dc0740b87e82c1880a05a0a40c1ec7d1f63af,2025-11-10T20:15:44.320000 +CVE-2025-49394,0,0,620edae8e9334941d009082a6cf22173e47a25e103f0e91d6f375b7ec85379a0,2025-11-10T20:15:44.487000 CVE-2025-49395,0,0,9a8fdd4f04b83e60834ec8b57eede9d1cea7c91e6ef0e5a13d7258aae54631ad,2025-08-20T14:39:07.860000 CVE-2025-49396,0,0,851c69125dec076c6f28d8ff3a6b228e0bea828de4a2528df3830655a04398c0,2025-08-20T14:39:07.860000 CVE-2025-49397,0,0,dc1b16288c08a5f0a25b313517a6772a5dc2075549a7acc8273d400d0484096e,2025-08-20T14:39:07.860000 -CVE-2025-49398,0,1,f15469950f41386e20f713240c1f032e40e5395a9a50a60d326f9fe23a913cc0,2025-11-10T20:15:44.657000 +CVE-2025-49398,0,0,f15469950f41386e20f713240c1f032e40e5395a9a50a60d326f9fe23a913cc0,2025-11-10T20:15:44.657000 CVE-2025-49399,0,0,d6ae942c6bdda9eccf8b15e7cc4b142ec2a4b6d12f9ab880f0f085a8b6ca804a,2025-08-20T14:39:07.860000 CVE-2025-4940,0,0,260d8b62a32cfda7d1f9cdbe4bba3d30912c7644fed6c87e919fb1700ed93983,2025-06-12T16:24:13.067000 CVE-2025-49400,0,0,9503e1efe649a2e56eea8d37f20ddeb92238af689fb4c30f67553afccf154423,2025-08-20T14:39:07.860000 @@ -306952,15 +306956,15 @@ CVE-2025-49897,0,0,06013f0afb38d7d869641b4019efaa098a3b290ebb5afe81fd5b1b0d51c4a CVE-2025-49898,0,0,0d59e72852f7060dc53c1f10bed2707a81314e0790eaafcc6c875011dc356269,2025-08-18T20:16:28.750000 CVE-2025-49899,0,0,1bc30ac553bd73da4ed915e0c943dbfc8f39152a45f7e47857675843a78e2c72,2025-10-22T21:15:39.010000 CVE-2025-4990,0,0,11128ad236ff0bbb6407ba12ca704aae39e79d15ca91d8e93c05e36bda39beb6,2025-05-30T16:31:03.107000 -CVE-2025-49900,0,1,f203ad57c634597aa4ef94311c692c46777a9cb32c034fef7d953869cd3c9d8c,2025-11-10T20:15:44.827000 +CVE-2025-49900,0,0,f203ad57c634597aa4ef94311c692c46777a9cb32c034fef7d953869cd3c9d8c,2025-11-10T20:15:44.827000 CVE-2025-49901,0,0,b30a53fc79083c6a1e251ba8d3717df54605098b2224a3ad4b71a7179b7227d3,2025-10-23T16:15:44.680000 CVE-2025-49903,0,0,de222dee6b8d9b1d4b44b8358b36438ebf73f384e679764db53d48e9b45d69cd,2025-10-22T21:15:39.330000 -CVE-2025-49904,0,1,5a92bbe814c08fd8a5a8f824f39dc5b060917afdbd2089af055f691870361eca,2025-11-10T20:15:44.993000 -CVE-2025-49905,0,1,bbc700ca40a9b3e245094866748aa295d57d84d9559b94c87ffbc68ce9665cd2,2025-11-10T20:15:45.157000 +CVE-2025-49904,0,0,5a92bbe814c08fd8a5a8f824f39dc5b060917afdbd2089af055f691870361eca,2025-11-10T20:15:44.993000 +CVE-2025-49905,0,0,bbc700ca40a9b3e245094866748aa295d57d84d9559b94c87ffbc68ce9665cd2,2025-11-10T20:15:45.157000 CVE-2025-49906,0,0,3b1d0fd57a22ef0b6d519435a9b586379149296ad6a9b124b5c5088aee18020e,2025-10-22T21:15:39.487000 CVE-2025-49907,0,0,a4c51adba33a29aab566fc005a207f5fa10cf1ed13d8d2622318a5357f45bc50,2025-10-23T16:15:45.083000 CVE-2025-49908,0,0,38dfbf5d7f3fbe1df714db8b6ba91dec63dbd6f76860213f2ec50fe234058468,2025-10-23T16:15:45.323000 -CVE-2025-49909,0,1,99019c5244600fc410238ed4781ab1f07399d4d6632cac824d5415802dde08a8,2025-11-10T20:15:45.323000 +CVE-2025-49909,0,0,99019c5244600fc410238ed4781ab1f07399d4d6632cac824d5415802dde08a8,2025-11-10T20:15:45.323000 CVE-2025-4991,0,0,67056c54ed0af796c00b82147df15690931ae5839b2ce0ae3dfbe8c6af0dc82c,2025-05-30T16:31:03.107000 CVE-2025-49910,0,0,eec4c94b7520cb174db98bbd04f1082a104bcadfbbbf41cfbc1fee3f4285d668,2025-10-23T14:15:36.243000 CVE-2025-49911,0,0,31e1c429bcf3584ca542fcb128623f635bb98dbd53690e01f69cd7a56f3a95d7,2025-10-23T14:15:36.420000 @@ -308022,7 +308026,7 @@ CVE-2025-5276,0,0,39d67915dab7ad2300f3ccd3a288fcee1075e32b914c45ad140eb6b7725be5 CVE-2025-52760,0,0,ec711af0ebf1e2a864b21cb44a213ddbdb63f5f9357d11a42dcbe6dcb3db7c92,2025-10-23T14:15:37.390000 CVE-2025-52761,0,0,4b0a010e44a268a67fed78436c091ab5d2c24e5f0be8ffacabb261aa03f78839,2025-08-29T16:24:29.730000 CVE-2025-52763,0,0,27c203cc82adff8bd6936b622eaa5ede9b5d0f9a14caf410343939e170996f62,2025-10-23T16:16:39.837000 -CVE-2025-52764,0,1,6af889bcde75420532f5a09c83c367b4563596952b1aa85f1846924709aa20fc,2025-11-10T20:15:45.493000 +CVE-2025-52764,0,0,6af889bcde75420532f5a09c83c367b4563596952b1aa85f1846924709aa20fc,2025-11-10T20:15:45.493000 CVE-2025-52765,0,0,70d426fd8a0770d7edb0f36d6962cb3a0db49a22685dee04566831b5637ef197,2025-08-15T13:12:51.217000 CVE-2025-52767,0,0,7eb6861faa67269905b177c4251c7bec3bae86933db08db9dded5b81764a7864,2025-08-15T13:12:51.217000 CVE-2025-52769,0,0,987df366583b2d3ab228f163cfaee1dc68272ea315388e0a114d0b03b739f615,2025-08-15T13:12:51.217000 @@ -308030,7 +308034,7 @@ CVE-2025-5277,0,0,ba5aa3a145e9e2e34ac18c63e7fe60e94ac49ba4d7121cc0bc36eebe3309ab CVE-2025-52770,0,0,27685bb004e951b0be1141b4b725bccba39b622acc00df1c00cdaf26830db3d8,2025-10-23T17:15:37.233000 CVE-2025-52771,0,0,56676278d220a8e272a8745c0ff32550768a705a5cf5a11c7530acf34bc0ba22,2025-08-15T13:12:51.217000 CVE-2025-52772,0,0,deb02b2d983c296f8b89a2559d4d4f189f1c6c676131c9feadcc246a08a5cc14,2025-06-23T20:16:40.143000 -CVE-2025-52773,0,1,2efa303f097a154d837e681b740900892988a15740015b46dfe49c0a1b280eba,2025-11-10T20:15:45.667000 +CVE-2025-52773,0,0,2efa303f097a154d837e681b740900892988a15740015b46dfe49c0a1b280eba,2025-11-10T20:15:45.667000 CVE-2025-52774,0,0,de771a5b10a99171a6970cc2eda061e856ddfde2b5144a0771c7c0ff4baad63d,2025-06-30T18:38:48.477000 CVE-2025-52775,0,0,103773d6395ae4ff9706d98a362a5f3193a12350cf62784cb61fa1ab9d96c820,2025-08-14T13:11:53.633000 CVE-2025-52776,0,0,ad7e38af0b950ab5836b78d30e80fdbef510447bf84a91f6a5a8d7084a2dd2d9,2025-07-08T16:18:53.607000 @@ -308436,7 +308440,7 @@ CVE-2025-53210,0,0,105ec1f588b31259e5af6ebf5e4879607e5a7e18b0772bd4fbebfdd08b2ef CVE-2025-53211,0,0,2abef6a3dfa316373b80998aadb9b980ebc2dc6ea27961810065342330691763,2025-06-30T18:38:48.477000 CVE-2025-53212,0,0,7d630b0913e6d5e598428f6335e6a271dd777eee1bbb325dc70c4841a3ba0a8c,2025-08-20T14:39:07.860000 CVE-2025-53213,0,0,07d1848f7042801f840a452e4e14d70c274be5c9e80192aa1a7bcd67cf26874b,2025-08-20T14:39:07.860000 -CVE-2025-53214,0,1,681671e35f0c448204c06193ac2e0a7f90b36cc1e9d62b4bd39e3dc60bbb38cb,2025-11-10T20:15:45.830000 +CVE-2025-53214,0,0,681671e35f0c448204c06193ac2e0a7f90b36cc1e9d62b4bd39e3dc60bbb38cb,2025-11-10T20:15:45.830000 CVE-2025-53215,0,0,6a37bb82a9adebc0875cf7808733b6eb557f5126a4c5ed35622e223b26a4f909,2025-08-29T16:24:29.730000 CVE-2025-53216,0,0,48e44f06601beb44b64990f3ae0afc04c1b07d8134f6813479fe5e15a2c85bea,2025-08-29T16:24:29.730000 CVE-2025-53218,0,0,f217e54b9aafd35f9a7ecb10ba0beb31ab637a2705400df3562ad8a4f646cec9,2025-10-23T18:16:05.730000 @@ -308456,21 +308460,21 @@ CVE-2025-53232,0,0,65b1dd253b164807ca0e1c33dd70040b52143a6ea886d3e2e3b5a440ce707 CVE-2025-53234,0,0,ff8e8f99459e43aec9cb48403b14d5cbdcbcd4a0e9d22a84d784417743572b67,2025-10-23T17:15:37.673000 CVE-2025-53236,0,0,54a9c0661b4ba0247f36de036d28262478d707dc927f6fc64afa9a3f2b299506,2025-10-23T17:15:37.817000 CVE-2025-53238,0,0,e746de9d776c96b13ef5b635ea990705dab83d1ac456e8f07d43b127d9dd59a3,2025-10-23T17:15:37.950000 -CVE-2025-53239,0,1,36031854b63d5b77597bbdba3331a1d8f8e3cdd8ac6349339601318abecf9a4e,2025-11-10T20:15:46.003000 +CVE-2025-53239,0,0,36031854b63d5b77597bbdba3331a1d8f8e3cdd8ac6349339601318abecf9a4e,2025-11-10T20:15:46.003000 CVE-2025-5324,0,0,78e349d2bd14065297b1365314e2e0d4a2b731776a4275b89f97d27f39ee4fa3,2025-05-30T16:31:03.107000 CVE-2025-53241,0,0,4b488834e9f18b86b9ace08ad76550386594777f2816edbfa71fb7a54121538a,2025-08-15T13:12:51.217000 -CVE-2025-53242,0,1,09278df8ae5ecb8e11265dfa8659fed4f0f4a5d2811f9d346f9d72fac7b4a2d4,2025-11-10T20:15:46.173000 +CVE-2025-53242,0,0,09278df8ae5ecb8e11265dfa8659fed4f0f4a5d2811f9d346f9d72fac7b4a2d4,2025-11-10T20:15:46.173000 CVE-2025-53243,0,0,3323bf1900e2c7782bcaf983d8ab8c968c9c9275b1576421603b8f812f7769f0,2025-08-29T16:24:29.730000 CVE-2025-53244,0,0,2670605d87af5e78ce357e7dc8526c4f83bffa69de0dd27728db15fd40cdf666,2025-08-29T16:24:29.730000 -CVE-2025-53245,0,1,b02ad0961ff108c8b4f7114cc07fad309c8efdae873a8feb0b5a407483aa0bb5,2025-11-10T20:15:46.367000 -CVE-2025-53246,0,1,165323a896c13ef37713c0d050e56bf39298806c1d4345e56be8d98ca61541ea,2025-11-10T20:15:46.533000 +CVE-2025-53245,0,0,b02ad0961ff108c8b4f7114cc07fad309c8efdae873a8feb0b5a407483aa0bb5,2025-11-10T20:15:46.367000 +CVE-2025-53246,0,0,165323a896c13ef37713c0d050e56bf39298806c1d4345e56be8d98ca61541ea,2025-11-10T20:15:46.533000 CVE-2025-53247,0,0,73e73411ae70187a89fdaaa2f88e54f4542123520db0f4b8da0cc6fe27e0705f,2025-08-29T16:24:29.730000 CVE-2025-53248,0,0,a7848287d7f86137bd8e8832bdeae4c09599d3d20ef602ff94c5d928024591d4,2025-08-29T16:24:29.730000 CVE-2025-53249,0,0,fb6b579a1ec24058e25feb53b005a1c6ba0fafd40fdf3bbe0da3f32b340c6714,2025-08-15T13:12:51.217000 CVE-2025-5325,0,0,6dbc529267f2d8766dc07f82e7196a04e14d44ce526685a18c867c4a8ea7717a,2025-10-03T13:55:58.700000 CVE-2025-53250,0,0,5ea4d50bd474e88f359b864ffaf270154b4b63c56f8cf72138c2e622f8c50938,2025-08-29T16:24:29.730000 CVE-2025-53251,0,0,7e0dd3971e6ab57ae03154d0a93c521c346a4308ea00c62947d936e365f2d97e,2025-08-22T18:09:17.710000 -CVE-2025-53252,0,1,d27a47e1d48b26bb6dc3d2ee7290a8c34fb7163945161f65e758f108b4b2b272,2025-11-10T20:15:46.697000 +CVE-2025-53252,0,0,d27a47e1d48b26bb6dc3d2ee7290a8c34fb7163945161f65e758f108b4b2b272,2025-11-10T20:15:46.697000 CVE-2025-53253,0,0,214e24e64f3a68a364c0361453a4da1d0055b4e89b2079e94acddb30e59f02c0,2025-06-30T18:38:48.477000 CVE-2025-53254,0,0,8d56ffe402bb76b24185845decdc59779e8802d356487d5334398779a07bb1d1,2025-06-30T18:38:48.477000 CVE-2025-53255,0,0,ec730ac042e0abf9b2a31b64f28be2cdcae6a879850b6d271183060760548fc2,2025-06-30T18:38:48.477000 @@ -308507,7 +308511,7 @@ CVE-2025-53282,0,0,d8709923615b9079f12cbf816fa0a7ec068f7a16c7eadfc7e6b87703ad543 CVE-2025-53283,0,0,c0bfa53a8e38fa89adf8485695d7e0564d4fffde1133032012da49b7ae8096f7,2025-11-07T15:15:40.727000 CVE-2025-53284,0,0,100dd3767b47205087efe33ee516e9edbe4b0739fb0bf493fecedb78894095ed,2025-06-30T18:38:48.477000 CVE-2025-53285,0,0,ab4cb47fec42ae9f07388efe188ac6b88e8d212fecf67904bc41c1810bcf566c,2025-06-30T18:38:48.477000 -CVE-2025-53286,0,1,935047cb9a83eb043da6533d38670f2fbd84ebc293a57fc7fa55c5f33120db73,2025-11-10T20:15:46.860000 +CVE-2025-53286,0,0,935047cb9a83eb043da6533d38670f2fbd84ebc293a57fc7fa55c5f33120db73,2025-11-10T20:15:46.860000 CVE-2025-53287,0,0,536b182f5b9c173a6da6f82fb2b465a7681c3af5a33541dfcc251fa6aea124ff,2025-06-30T18:38:48.477000 CVE-2025-53288,0,0,b53f28a243c621c536954162fb98cb20a7c2d578e12685cbb4612ffb48beae9a,2025-06-30T18:38:48.477000 CVE-2025-53289,0,0,aba868d8523579518e0af2ccc8dbc5b832cd461464ae04ee12e30fb894035202,2025-08-29T16:24:29.730000 @@ -308538,7 +308542,7 @@ CVE-2025-53312,0,0,3a5170d7f8c5d539e292f2a73d4bf6ad12016ba13599c410c1c2ab91fbd3c CVE-2025-53313,0,0,7e76de46c5da42582fe2eeb1f17a75c59aec23b3dd44de11a264a94e410b6a42,2025-06-30T18:38:48.477000 CVE-2025-53314,0,0,549a135e32065a263d308ebbe2d5fe243e29ba980b3cc74379ec19d5497f76d8,2025-06-30T18:38:48.477000 CVE-2025-53315,0,0,d000dd9a9259240095676775c3f45f3b9c3c3e6cb257e222fcb2cc6354386169,2025-06-30T18:38:48.477000 -CVE-2025-53316,0,1,f85bd0534875607df67d36551de5b6b28414cc1d071fb1973fbcd639337be798,2025-11-10T20:15:47.027000 +CVE-2025-53316,0,0,f85bd0534875607df67d36551de5b6b28414cc1d071fb1973fbcd639337be798,2025-11-10T20:15:47.027000 CVE-2025-53317,0,0,442eadf984bd04b5e5ddaf3230df91e027af8911e980d034cfef7daf2e247ce3,2025-06-30T18:38:48.477000 CVE-2025-53318,0,0,17691f621f2850d26af6254631a003d93275a620dedfb0430944d5a30e6c9842,2025-06-30T18:38:48.477000 CVE-2025-53319,0,0,4a869410f06716b59743408a9bdc0cb7684f5d1348ab66fd8c5bc7d713b50d2a,2025-08-20T14:39:07.860000 @@ -308547,7 +308551,7 @@ CVE-2025-53320,0,0,cde29a29486c9167f8a56481ff12f7849c0e5d0c65ac5c29006d68783c347 CVE-2025-53321,0,0,1a958bbb0309b2cd6e35c5e45afcc79ef758c432a5330d382910ccfc287fc797,2025-06-30T18:38:48.477000 CVE-2025-53322,0,0,3af89947669bdce2e880d598d6a9d06679b35f7054696bfee5e6014d0c1f6084,2025-06-30T18:38:48.477000 CVE-2025-53323,0,0,c4bb0bce8eaeeae0db595028fd06fce5fb3a56400cef98de937a1c28dbf5b0b6,2025-06-30T18:38:48.477000 -CVE-2025-53324,0,1,8302a8fc6ebc50080be17af380c1330cb4adcf30b646e6d89c5e8fd26c974eed,2025-11-10T20:15:47.197000 +CVE-2025-53324,0,0,8302a8fc6ebc50080be17af380c1330cb4adcf30b646e6d89c5e8fd26c974eed,2025-11-10T20:15:47.197000 CVE-2025-53325,0,0,8e3e8e26e4dbd5c8412e01ff791fe5a4fb9f0769d9c65e9c6d332a118a91ffa1,2025-06-30T18:38:48.477000 CVE-2025-53326,0,0,1f020947c1a419f6a487ffc0d5d1177671534ab43a707df81a65c69b62d70384,2025-08-29T16:24:29.730000 CVE-2025-53327,0,0,71efca1e67fedd0f62622f35091acee6852d8d1a47c1510c3872a11834b47c9f,2025-06-30T18:38:48.477000 @@ -308569,7 +308573,7 @@ CVE-2025-53342,0,0,375c88545a6926542ffcae7264f8202499d04d1c9aacbda00a80b349bcd15 CVE-2025-53343,0,0,e96562afdeeb373e1cfb8f00d2141f32dec2761098e10230dfaf9026a4b1bbe4,2025-08-15T13:12:51.217000 CVE-2025-53347,0,0,2bca1f3fe1d2e77d74927047b2b9fbeb7b192a3386aa577d0d0bfb43513a6dd4,2025-08-15T13:12:51.217000 CVE-2025-53348,0,0,d4fe714c911fa075f3c7d18dcea167e0dec0bb03f2ca20d0a12b1a1b22548de6,2025-09-11T17:14:36.413000 -CVE-2025-53349,0,1,a8281a078da536e53970767fe42a72e6e19a1dcda777d9afd25c4ebbd666158e,2025-11-10T20:15:47.437000 +CVE-2025-53349,0,0,a8281a078da536e53970767fe42a72e6e19a1dcda777d9afd25c4ebbd666158e,2025-11-10T20:15:47.437000 CVE-2025-5335,0,0,ac23836a336f6543872e1a0155b1cafdab35c5a72752926e0759c62e88e98c82,2025-08-19T14:15:41.633000 CVE-2025-53350,0,0,35f0dd796e8b91d493966a1d11ddfe045aafae86c4a781df94fec9a453033c4e,2025-10-23T16:16:40.070000 CVE-2025-53351,0,0,190cbbd0d07687434d9366d2798d0948432a07dc4c53a9aa103f3b087228da60,2025-10-23T16:16:40.300000 @@ -308763,7 +308767,7 @@ CVE-2025-53570,0,0,db537830bf9e54f0d74acabb53148c3a024a3f339be01d597e7c38625bfb8 CVE-2025-53571,0,0,ee45d1ff02ec46564d54d247060d434d6d7006c27454dfc54440a1d0317d1337,2025-09-05T17:47:10.303000 CVE-2025-53572,0,0,4e8e988358042705bac850d834241809b1b63fd143dfffa419efa90da9ef7792,2025-08-29T16:24:29.730000 CVE-2025-53573,0,0,5c8bfe5c720d7714d75f802870779366b35c6a3a680410ca2ba02515e9410b02,2025-11-07T14:15:50.227000 -CVE-2025-53574,0,1,3250dfbf2d14060a70360586a75fece5fcbdcfe86d0c7526b00635c712f56ca8,2025-11-10T20:15:47.660000 +CVE-2025-53574,0,0,3250dfbf2d14060a70360586a75fece5fcbdcfe86d0c7526b00635c712f56ca8,2025-11-10T20:15:47.660000 CVE-2025-53575,0,0,0afb28da46a431fa307ba84f45043d8751862e9b2a87bea42ff6ad918a1db8eb,2025-08-15T13:12:51.217000 CVE-2025-53576,0,0,105453ef94c6838779e5873319de0f573f5a8fb01d58d20ed0f9a7ddee0b8c31,2025-08-29T16:24:29.730000 CVE-2025-53577,0,0,cf8bbf8681cbf05a80d56ef471ae5be5234163dfe62594671b3f30381d33de23,2025-08-20T14:39:07.860000 @@ -308776,7 +308780,7 @@ CVE-2025-53582,0,0,06453f0a1662a498038522138e84c569d25df319eb5da700f3303111ae980 CVE-2025-53583,0,0,735636d4829f475dc8d542010f490976198d5bff550c622aade31633df728ecd,2025-08-29T16:24:29.730000 CVE-2025-53584,0,0,70a3baea7101a113597c4a2e521e40dff94e56f160f3f6195330a7b6535a68ea,2025-08-29T16:24:29.730000 CVE-2025-53585,0,0,a2aab937690aa0e3dfd4173da7dfca2a3a25eb05e7e00d93617912457fd3438d,2025-11-07T20:15:37.630000 -CVE-2025-53586,0,1,55f60d0d60f62927ba333bcb4e5b41827b141c7fce7a06944f56f3a524552070,2025-11-10T20:15:47.827000 +CVE-2025-53586,0,0,55f60d0d60f62927ba333bcb4e5b41827b141c7fce7a06944f56f3a524552070,2025-11-10T20:15:47.827000 CVE-2025-53587,0,0,ff0a92b3d189e2f9758dad1160962251d39ec4b13a3e4d6d6ea642f3c19d4a71,2025-08-15T13:12:51.217000 CVE-2025-53588,0,0,94ea25729a8fad0db06755a8fb8776466b610f5ed9a3e3b236edcc381cbf2e97,2025-08-29T16:24:29.730000 CVE-2025-5359,0,0,fbaee83932976cabc2c375b7182ecd49a378426f554e3965400f3dd72ff93c16,2025-06-10T15:14:30.460000 @@ -309136,12 +309140,12 @@ CVE-2025-53995,0,0,212f6954726c5e2aa7e123505a1b2088e970eae87e010b12424a6bcde80ce CVE-2025-53996,0,0,32af0d56dd551c04dbc783a01d34a91d223bae18667bb17189b6ab095e33024d,2025-07-16T14:58:59.837000 CVE-2025-53997,0,0,df91d0d0349b5737b98d2705bff3769283d3596ffbebad69d6043561ff4edeb1,2025-07-16T14:58:59.837000 CVE-2025-53998,0,0,522792b310014a35fb9069634b3f1f452a908451f00ee0a8199636f1662b9705,2025-08-20T14:39:07.860000 -CVE-2025-5400,0,1,9b5efce7a75f84a039c951b37c19cb80ae2bb5b9049ae8ed9320a918a948dd4f,2025-11-10T20:15:07.957000 +CVE-2025-5400,0,0,9b5efce7a75f84a039c951b37c19cb80ae2bb5b9049ae8ed9320a918a948dd4f,2025-11-10T20:15:07.957000 CVE-2025-54006,0,0,ec64d09b55f8319c5202e187cca6133691e69d923b2015ab1035c4b4abea6b37,2025-07-16T14:58:59.837000 CVE-2025-54007,0,0,722c873b50d97dc690e84bb226ef491cea7aa535e931d60a9427f5c74e29050f,2025-08-20T14:39:07.860000 CVE-2025-54008,0,0,08cb1178a6d7bdef61f88f929c361e5c09d581494f0edc29ec13c09ea489b8a1,2025-08-20T14:39:07.860000 CVE-2025-54009,0,0,a24dc2394ce4a48667f91c31b49ecce32fba8392c530d81b89ce3d373c968ae5,2025-07-16T14:58:59.837000 -CVE-2025-5401,0,1,32573dacf3d35ecc2ea06e5a39d3cab1336c0d80cc1674fef4953f84474a5bb3,2025-11-10T20:13:09.790000 +CVE-2025-5401,0,0,32573dacf3d35ecc2ea06e5a39d3cab1336c0d80cc1674fef4953f84474a5bb3,2025-11-10T20:13:09.790000 CVE-2025-54010,0,0,ff6abc0d59fafc9b8e5098e196c6ef21d7917c0851cfce71d47708332ad0a16f,2025-07-16T14:58:59.837000 CVE-2025-54011,0,0,eaa3c6fa558299aff2725abdc0370e1abdc6b760c96359d0b79f4d6d79a9306f,2025-07-16T14:58:59.837000 CVE-2025-54012,0,0,0a462c9f507a09010eded373075e9e8a3c5b238c493c9895b30e6b086df89d7a,2025-08-20T14:39:07.860000 @@ -309152,7 +309156,7 @@ CVE-2025-54016,0,0,9f011928501846aea3e9377646ea99a4d5da8522801842b6d3505cac0f5c0 CVE-2025-54017,0,0,9bcba61712b135ffb0ed43961fb82acbcb2a32b91bbba23920512a0647202e0d,2025-08-20T14:39:07.860000 CVE-2025-54018,0,0,dd045c7b62bb677f8a61c9fb8c0a8624d03695b02f2539809e055da681c28c0a,2025-07-16T14:58:59.837000 CVE-2025-54019,0,0,e6aad1cf7ad4366380061e735c5a10aa1eca30e16b1bae5e82c7750fffb20b10,2025-08-20T14:39:07.860000 -CVE-2025-5402,0,1,850b1218972b9134ff5e521d4a4c658f339802e4bf3171cc2f7f3bcc6509b267,2025-11-10T20:11:11.940000 +CVE-2025-5402,0,0,850b1218972b9134ff5e521d4a4c658f339802e4bf3171cc2f7f3bcc6509b267,2025-11-10T20:11:11.940000 CVE-2025-54020,0,0,5bdcb670e1f0b80b1e490d62b09f3037178882fde1d81594ff64cd6470926d1f,2025-07-16T14:58:59.837000 CVE-2025-54021,0,0,5132b34c2211b400068ef9d784ef41a115431b116750b3b2de96ad0770882887,2025-08-20T14:39:07.860000 CVE-2025-54022,0,0,efbce81dfb6b3c26cf2dbd04f279de62b967b294831882df1fdb2d05a56242a7,2025-07-16T14:58:59.837000 @@ -309163,7 +309167,7 @@ CVE-2025-54026,0,0,957d00de626936f1c93ab9407798503a211d5dbe42b04ca2ad0977c9ce580 CVE-2025-54027,0,0,a108eb730d514fc5021b458b668817ca5f0a247e2d53267fd531dbfa5a4b89f3,2025-08-20T14:39:07.860000 CVE-2025-54028,0,0,3ebaddb182502c46390e9cbc40a762c945936e28f7e6fa3cd70c1be25db32264,2025-08-20T14:39:07.860000 CVE-2025-54029,0,0,14b352c5ade6cd8629595ff64673b7d8b1a6769756607cef73cd563d833389c6,2025-08-29T16:24:29.730000 -CVE-2025-5403,0,1,61f891239984b8c25036c1fa348c3ba22183c122d13d64a4864b2308fc38390a,2025-11-10T20:07:40.007000 +CVE-2025-5403,0,0,61f891239984b8c25036c1fa348c3ba22183c122d13d64a4864b2308fc38390a,2025-11-10T20:07:40.007000 CVE-2025-54030,0,0,32d82ddff97589076583a387b1d02056619b6938f9d44748b0d44f3cd78f22b6,2025-07-16T14:58:59.837000 CVE-2025-54031,0,0,8fbb063350858fb4b084cd0bf0422910582c5e7b158016e7a15b5cae959fd580,2025-08-20T14:39:07.860000 CVE-2025-54032,0,0,4cd4a87f9a643b31bac3d440e2401870e489fe9b968f7b0e9ae5e49a2176198c,2025-08-20T14:39:07.860000 @@ -309174,7 +309178,7 @@ CVE-2025-54036,0,0,4932b84aa6fd5a597bb85df0b7ee10a7b4bbd8ef6163ed4710cf6beb7707e CVE-2025-54037,0,0,eeccbd876f9664418941c82e9dfdf70b64ccdd7f9e7d5ddb14a69c551b23de60,2025-07-16T14:58:59.837000 CVE-2025-54038,0,0,70bfb5bd0b10d22bc41ae296a87d0fb8cd47dd578fc699b14fc5b72dad169a67,2025-07-16T14:58:59.837000 CVE-2025-54039,0,0,4ae55fc0a5b75db1f4fa3c961025b92d1c6c04f58a718ea26d466169ee8ab503,2025-07-16T14:58:59.837000 -CVE-2025-5404,0,1,f70222825d2be826c279897ed43cd41ddf1a4082c582aaafaadf43cca21df0fd,2025-11-10T20:06:32.143000 +CVE-2025-5404,0,0,f70222825d2be826c279897ed43cd41ddf1a4082c582aaafaadf43cca21df0fd,2025-11-10T20:06:32.143000 CVE-2025-54040,0,0,96c39e6fe2e1f3f620ade873d7e16ef8b95e6dda73192194b115204c1063f4dc,2025-08-20T14:39:07.860000 CVE-2025-54041,0,0,b25576e7c5b7a2866a739abb7efb23847ee0acfdc6a5fb87c37ced436f96924d,2025-07-16T14:58:59.837000 CVE-2025-54042,0,0,1db909e0b15cd7d7976175cf4e659e23901d2da541bc8ecc965c8c00902dc94e,2025-07-16T14:58:59.837000 @@ -309184,7 +309188,7 @@ CVE-2025-54046,0,0,d10cd4a62c495733bd91a21e94be84d4bb0568f0c1c013feacdb8b6efc29a CVE-2025-54047,0,0,3ae364d16913ef3e08d7c9b8826511752104590e7b2d6dc390617611e7828174,2025-07-16T14:58:59.837000 CVE-2025-54048,0,0,96bd3909dd7cd1416c99e5fa98f00154b2264d97ed4e07a615afe3310a666abe,2025-08-20T14:39:07.860000 CVE-2025-54049,0,0,1167d8aa4d3788b6bf0243e2f1f0a20921f66456cfcfad14bdaa8f83c6f6e81e,2025-08-20T14:39:07.860000 -CVE-2025-5405,0,1,77118d1392c418d554f0a1a6bde466b033119477e1f0a26fb93be2f8bd9ea77d,2025-11-10T20:04:10.697000 +CVE-2025-5405,0,0,77118d1392c418d554f0a1a6bde466b033119477e1f0a26fb93be2f8bd9ea77d,2025-11-10T20:04:10.697000 CVE-2025-54050,0,0,b37058656076c6703e3ed77d30104b61027ec43efcf19d805ff03af1a2169b04,2025-08-11T19:18:27.353000 CVE-2025-54051,0,0,fc66e178f8a004756cf424dac600246286c1666555d9aa403355fdd1de2394bb,2025-07-16T14:58:59.837000 CVE-2025-54052,0,0,aea2ca2f524db5f236ea923306cacd7728ec6123d7aeb8dd62bd62eb640da87b,2025-08-20T14:39:07.860000 @@ -309194,7 +309198,7 @@ CVE-2025-54055,0,0,47384fbb326a4a0000a75f3776efb052f4e07d4a72d80c10f2b26b455b745 CVE-2025-54056,0,0,ab5ae4acbb7d3cbab42b0598214f8fbdfd6a34b1f29cb0e3f3c6cd69a05eafc8,2025-08-20T14:39:07.860000 CVE-2025-54058,0,0,54551bc905d08b35a9b59ff13f5d0f99cd06faa4c1f52db375d128cc426401f4,2025-07-30T19:57:36.920000 CVE-2025-54059,0,0,e7521325b784a60b8cf1ab44bee4a9338b70e573bec3931de470ea881a7e4eaa,2025-07-22T13:06:27.983000 -CVE-2025-5406,0,1,509a344dc50e4611e2c15df30ada69259995c2180af6d40ea08b78d9fd22fed5,2025-11-10T20:43:07.087000 +CVE-2025-5406,0,0,509a344dc50e4611e2c15df30ada69259995c2180af6d40ea08b78d9fd22fed5,2025-11-10T20:43:07.087000 CVE-2025-54060,0,0,52091c9e401b531a85b01bcf2514310439afaba233d5e2a73187a8ae564c5811,2025-07-30T19:57:48.837000 CVE-2025-54061,0,0,3c879c5cc1b97d4cd7138fefaee2251beb8a8980ce3be362fbfdaf16d9f61607,2025-07-30T19:57:59.433000 CVE-2025-54062,0,0,1321d67073edbb0869b8d8b7d06b79687f116a0c6d8f7cf766577f712dd801af,2025-07-30T19:58:29.140000 @@ -309202,7 +309206,7 @@ CVE-2025-54063,0,0,35d38500b39670c78dba4aa1120a84cfed2d557ee6fb67f5827e5705f419e CVE-2025-54064,0,0,e9a83d0f3a778c8f1c00100306d78a5872efac55852c9cec8e1c534ce5db8ae9,2025-07-17T21:15:50.197000 CVE-2025-54066,0,0,38ca277636d85af2ff1b4a29f626f3aa593ece79371a1471291e5b33d7f49982,2025-07-17T21:15:50.197000 CVE-2025-54068,0,0,042d2ff99fa72f4a7401374163ce46798a91b85e263ebaa39c417fe47163e6c1,2025-08-27T14:36:24.613000 -CVE-2025-5407,0,1,838886aafb781f1a9cbe1025ad57b8da63954c7a7ade34b8284921a967ef9e9f,2025-11-10T20:40:57.120000 +CVE-2025-5407,0,0,838886aafb781f1a9cbe1025ad57b8da63954c7a7ade34b8284921a967ef9e9f,2025-11-10T20:40:57.120000 CVE-2025-54070,0,0,06d964c92691346b61960e0da18167c2de8c6d74567cf02bfb206c2e189a3038,2025-07-17T21:15:50.197000 CVE-2025-54071,0,0,71693da9276922686c225d217dd2ee5dd7c649a8413a7e8cf01e95c27d7be420,2025-07-22T13:05:40.573000 CVE-2025-54072,0,0,6e0bfcd8cc3dc1cd2773a0d9b95ffbfcfad287e8f2ea34646506c6fb7242271c,2025-10-09T15:59:25.873000 @@ -310466,7 +310470,7 @@ CVE-2025-55748,0,0,70ed25c38b854033b335629a41cd8379fd34a23b732a303413cfcee8fb0c5 CVE-2025-5575,0,0,81a126dfb6ccad488366b77c36606cd2156f744efbd821f36b71a3dcd92de139,2025-06-05T14:07:21.913000 CVE-2025-55750,0,0,c7f71132a361ef7a2f532acf5ac74140aa021bcd0394f2b25fa15eb64da50a99,2025-08-29T16:24:29.730000 CVE-2025-55751,0,0,ef0af972860c9f59fb78952103082e0a696acedc5d99a1c6eea16c8506f9fef4,2025-08-22T18:09:17.710000 -CVE-2025-55752,0,0,6f56ac96a308cbca5047a492c62d8975fb5007517393c4e3aff258d632440f12,2025-11-04T22:16:31.213000 +CVE-2025-55752,0,1,e7b4b4472b9327837e9a8a1482646d40f8ed983b851876477620223883efb96f,2025-11-10T22:15:35.940000 CVE-2025-55754,0,0,4e567b1f922a7a9692611cea34d9765dabd19ef300a558f1209d92d9a27ead06,2025-11-04T22:16:31.360000 CVE-2025-55757,0,0,b1a1cf27c02827b3a920334f3292487bda16c989b18f9a2a15072800fb1a3de4,2025-10-27T16:15:41.097000 CVE-2025-55758,0,0,322d8152062877bbe83c0bf12459cf63fdafe1ad71207ae3493f4a6cf102837b,2025-10-30T15:05:32.197000 @@ -310647,7 +310651,7 @@ CVE-2025-5648,0,0,8d8a946a9691d84bd632207adec092a07f5e621bdddce363a223111a1e12ac CVE-2025-5649,0,0,8d1f3267e39f86a1983625a80d2b4086de30c2bb535ef4e2d4852137479dd55a,2025-06-10T15:05:56.120000 CVE-2025-56498,0,0,174f73636877cc0f6583ac98d876f9097aecf0c506b0a033d10885e6ff6a5cc9,2025-09-09T15:58:46.043000 CVE-2025-5650,0,0,c41210387d1002531a8860804a9f5e98813d1f3f1969221163975f35d5b4da41,2025-06-10T15:05:23.553000 -CVE-2025-56503,1,1,c2d637b3dd602575e6ebb667bc134086556afa3a77ab2dfa13c3c6c947eacaa0,2025-11-10T20:15:47.990000 +CVE-2025-56503,0,0,c2d637b3dd602575e6ebb667bc134086556afa3a77ab2dfa13c3c6c947eacaa0,2025-11-10T20:15:47.990000 CVE-2025-5651,0,0,f99e51780416a06de1bb6158138e45a2fd946eb9bd56bfba7816f6881196e6ac,2025-06-10T15:05:12.920000 CVE-2025-56513,0,0,6a976a01f4257bfa909a6b270fdd9f7e03ab41d364cb2650d351d9bd14e302fc,2025-10-15T18:39:09.800000 CVE-2025-56514,0,0,4482f71c1d8ca23c138073d6af7feb89ed548879dfeab98abda9787d645099c0,2025-10-21T20:20:49.560000 @@ -311263,7 +311267,7 @@ CVE-2025-58026,0,0,eaae68668eaceefc96d49c43709d3e6adb6517c0d439293301f124c2515ca CVE-2025-58027,0,0,01380d7c5fb97c4f7d99517f90cdeb0c077940f221d9d705a0bd731897b8242a,2025-09-22T21:22:16.313000 CVE-2025-58028,0,0,46e5b3baa4bee4e289869e805e5ed2fb684bbc0a3eeb634daa79ef4388ebb97c,2025-09-22T21:22:16.313000 CVE-2025-58029,0,0,fefceddfee04c6a5a2e05e17767396fed14c20987cf51917545d3abddc42c6ec,2025-09-22T21:22:16.313000 -CVE-2025-5803,0,1,2564faf513224ca1605625d9b50cdbda1a1ccaa502a030f86cea9cb8b4621ad3,2025-11-10T20:15:48.473000 +CVE-2025-5803,0,0,2564faf513224ca1605625d9b50cdbda1a1ccaa502a030f86cea9cb8b4621ad3,2025-11-10T20:15:48.473000 CVE-2025-58030,0,0,4e43f682673d1202c22c350c09836764e20e374a3d0f7626c8a804f30e7b5719,2025-09-22T21:22:16.313000 CVE-2025-58031,0,0,67df86bb8b1e73abbb936d2a0fd8982c15627697fa43f2321684dc1dc549a391,2025-09-22T21:22:16.313000 CVE-2025-58032,0,0,87d4be683cea8a7de9a4025f14f6161d1ce5e80d1af2365516e9f502cf2b4c9b,2025-09-22T21:22:16.313000 @@ -311629,7 +311633,7 @@ CVE-2025-58591,0,0,c7b327df89fc426fc2fb061294aa660f0c8fce457aee85f00c712b1199349 CVE-2025-58592,0,0,85647be0031f02b764c65afaa6403a256c1f286f4a0d089005060f628bc487a3,2025-11-07T16:15:41.563000 CVE-2025-58593,0,0,7fd21f870b8d85cd58cbacc29c055f4e4501c021afd801d4f47c2e584f0a4641,2025-09-04T15:35:29.497000 CVE-2025-58594,0,0,7a00f437ce3601f0dbd1082607d5b64d0bfcc50563ef4a53bb75166200d1f3c8,2025-09-04T15:35:29.497000 -CVE-2025-58595,0,1,490e8cf03a6d23e9bf3e9e58be6e68ee5f2a4898e7b529a223cdb813b268d00f,2025-11-10T20:15:48.183000 +CVE-2025-58595,0,0,490e8cf03a6d23e9bf3e9e58be6e68ee5f2a4898e7b529a223cdb813b268d00f,2025-11-10T20:15:48.183000 CVE-2025-58596,0,0,7fddd7520be88b8087d73734a7fa0a9723047d67d35d2c28473c7959336468db,2025-09-04T15:35:29.497000 CVE-2025-58597,0,0,c7dcb4085da666272db4e450881b59d5d2c94f8e4060a2f851daf1c76af9dee5,2025-09-04T15:35:29.497000 CVE-2025-58598,0,0,9f935fa1381dffd5e8baa08c35124cf92b9f9ee4277151a64117aebdbab24f6b,2025-09-04T15:35:29.497000 @@ -313003,7 +313007,7 @@ CVE-2025-6086,0,0,5fe71f700a5db4748b73456874508af7453c8bbdad176612b1ae063647fd5c CVE-2025-60868,0,0,95c982ab8e0ca0ccdd9d37ac2822154aa0502eb90eeb5b85347e23681b37639d,2025-10-14T19:36:59.730000 CVE-2025-60869,0,0,6bb062dac2b21d6c5e284aac0762e9c8194360c08da47b11b998d9dfdd14651e,2025-10-14T19:36:59.730000 CVE-2025-6087,0,0,262762a2ff1171ba22253082b0473c34c801e87448d83e2fa6cced2838216eff,2025-08-06T17:21:28.460000 -CVE-2025-60876,1,1,e06c573cbb2a747df5c292401b83834014c0efd51a699473babec4133630dac8,2025-11-10T20:15:48.683000 +CVE-2025-60876,0,0,e06c573cbb2a747df5c292401b83834014c0efd51a699473babec4133630dac8,2025-11-10T20:15:48.683000 CVE-2025-6088,0,0,bb74840d06f1a9455cb83ff770796b02c67af5ccbacb4a09b6d7acf1a9109e18,2025-10-16T16:00:19.400000 CVE-2025-60880,0,0,11a04089e12bc9c16769a9631f11aa42edc9038938eac08379d53b2400af748c,2025-10-17T17:15:48.497000 CVE-2025-6089,0,0,aa83c2709521312e3401dbda2e76aa38d9a30d639029a9e31a096547472bfbf3,2025-06-16T12:32:18.840000 @@ -313556,17 +313560,17 @@ CVE-2025-62250,0,0,95a2def9bc560065fa42355e0e9ff8d9eed8398fd446e9d07db6ad446bbfc CVE-2025-62251,0,0,90e08995ce3221391ccdd3d14d698630a934360b75a107afe042fc3d71a85153,2025-10-14T19:36:29.240000 CVE-2025-62252,0,0,04817bdf79e145115c28834b5e3568064b3473eadb2a0853fc89a9808b7d9599,2025-10-14T19:36:29.240000 CVE-2025-62253,0,0,d281e3dfe3a1c4a5eb2af93b7dd9ddf71dd57d6f451885a84f2897923cad7284,2025-10-30T15:05:32.197000 -CVE-2025-62254,0,0,a8d68a6e55c6ef218b5ec4dc1f1e311176befa60e2818aefceb7f92bcf3822ad,2025-10-27T13:20:15.637000 +CVE-2025-62254,0,1,f9d89e50052e3691790b4c5d10cf59cabad35eaac8445f9dd0a2b8a4d5f30651,2025-11-10T22:14:11.877000 CVE-2025-62255,0,0,993a232f39c2818ed9121a7dc3ed186b3662059ede0866fa6ff76d50a01c824c,2025-10-27T13:20:15.637000 -CVE-2025-62256,0,0,dc16b3762875e0d797f575bf0b28e1b4c8f0e0fd081495d4d00f48cbe45720b8,2025-10-27T13:20:33.350000 -CVE-2025-62257,0,0,ee0f9cc010695662130c0d17522393a9e452577ed0912f135c521a64f0d808a9,2025-10-30T15:03:13.440000 -CVE-2025-62258,0,0,fe4a964f9692d6fc495a354dd144bfb887920cfde252862848b1d3dd31c1959a,2025-10-30T15:05:32.197000 +CVE-2025-62256,0,1,07ffe7840d8b40c3796f79dfd022171c934d30585b63057910a1504d21133cce,2025-11-10T22:14:32.160000 +CVE-2025-62257,0,1,2d655fd44757be4f48ef31ff4df3d2f050c9e13c0cd47d0c47b47d73cc80b34e,2025-11-10T21:37:25.233000 +CVE-2025-62258,0,1,bb6958c87d4040b40bc08bdc69134b30a36e81d3078493c3ed8769e2dc85332e,2025-11-10T21:39:01.403000 CVE-2025-62259,0,0,a74ed9f44e055e933b7b44f62a4b2f02372f6f9bf4a07caab5bcb37c9fb1c19c,2025-10-30T15:05:32.197000 CVE-2025-6226,0,0,5c9c07b628b62ef0dd5964f30e3b3bedacec71b450f741e00db79b427d07acb0,2025-10-02T19:49:18.610000 -CVE-2025-62260,0,0,be3dcd7fef441b15d3eda9485767800287b9f7d757a18c4a1ffe9278c551d938,2025-10-30T15:05:32.197000 -CVE-2025-62261,0,0,db6e061bc27ec8ce0213a9585befe77090ef553ca3a4e1fe899e910a1918de4a,2025-10-30T15:05:32.197000 -CVE-2025-62262,0,0,e047b37e4f0ec0197ad38d2e65622fab26b0e0c736cfe8a3b08876dbd288da4b,2025-10-30T15:05:32.197000 -CVE-2025-62263,0,0,7900aa8393f90ac6ee08ab311e345987d9b177e62d1409218fae6b2398265f02,2025-10-30T15:05:32.197000 +CVE-2025-62260,0,1,b12da58f2906181872d203b6934a982bf3358fc8bb60f63e6ecc5c5882d34e94,2025-11-10T21:56:20.490000 +CVE-2025-62261,0,1,a2e33857f09cc904f31e78c37d2fa120ba28a06247e1c5d87f173869e4bcbaef,2025-11-10T21:49:33.880000 +CVE-2025-62262,0,1,d78c5f1c2a440bb66d3b56ffb45120875b28d0c6b4efe70601c8b3a86e67f56a,2025-11-10T22:03:58.983000 +CVE-2025-62263,0,1,dcfdaeab351cd5e7cb9d64169d705b33d675e6c9234d5edb0587a8fddd9a0490,2025-11-10T22:05:08.880000 CVE-2025-62264,0,0,f3b9ece32d07d78d714fde4c078cc6e814602aebb0e77508d740c23652e8eaae,2025-11-10T17:11:02.387000 CVE-2025-62265,0,0,a6cf76784c1d64b690dcef32c2c4f088ff889d29549400a8a6240c7319e57ed5,2025-11-04T15:41:56.843000 CVE-2025-62266,0,0,47eda55f48e575f69761a1cda293f532c1e7c0447f166a5fbe05d32612b9232b,2025-11-04T15:41:56.843000 @@ -313652,13 +313656,13 @@ CVE-2025-6242,0,0,23cc3372da6ad0e16da005088a5ec5b8d1124ccbf6891a21f5eb2b496a1791 CVE-2025-62420,0,0,bb83252eb95753c75234ebec2ce3d202cf3f493d90ae7585c7a2fdf35bbcd8ff,2025-10-24T15:56:16.570000 CVE-2025-62421,0,0,c1ef3253ca4a071299f8fde496318c01fc808de36440e05fdef965c5ba8840a5,2025-10-24T13:10:14.197000 CVE-2025-62422,0,0,fb3f97e74e694737922fe04babd6df1bad4accf05608c419eae307dd3eb982f1,2025-10-24T13:14:29.553000 -CVE-2025-62423,0,1,1edafb32f8622294c14c9d4c57958dfea072063cc69c9d1809406fe73358c2ad,2025-11-10T19:58:10.237000 -CVE-2025-62424,0,1,b82aaf49f4155db4242d15e1f73e9514990409ffdcd81b2fb0a7a28374d6167c,2025-11-10T19:58:14.303000 +CVE-2025-62423,0,0,1edafb32f8622294c14c9d4c57958dfea072063cc69c9d1809406fe73358c2ad,2025-11-10T19:58:10.237000 +CVE-2025-62424,0,0,b82aaf49f4155db4242d15e1f73e9514990409ffdcd81b2fb0a7a28374d6167c,2025-11-10T19:58:14.303000 CVE-2025-62425,0,0,bb6661eb1b05f413d1dd27f981c4d2a56e2731e1b3e4fd1cd99a727a4ba6dfef,2025-10-21T19:31:50.020000 CVE-2025-62427,0,0,78fa18bbe1dfccc4c110b3a7b5ce39c6000c5c285fa1a07b54ac037d179ba958,2025-10-21T19:31:50.020000 CVE-2025-62428,0,0,eaca2b80d06a24fac6aba46bad80909fad5fd211d5902f6916f81d2d995ef550,2025-10-21T19:31:50.020000 -CVE-2025-62429,0,1,54e46dfcf95375a6811e799f0a9e3cc562de8e3a69893ccf13fe20c5b03adb13,2025-11-10T19:58:23.353000 -CVE-2025-62430,0,1,c1644d7357e0797ec21cf78d79c252cb890eb562bcdddb90f03b5b8161f58c1e,2025-11-10T19:58:19.593000 +CVE-2025-62429,0,0,54e46dfcf95375a6811e799f0a9e3cc562de8e3a69893ccf13fe20c5b03adb13,2025-11-10T19:58:23.353000 +CVE-2025-62430,0,0,c1644d7357e0797ec21cf78d79c252cb890eb562bcdddb90f03b5b8161f58c1e,2025-11-10T19:58:19.593000 CVE-2025-6244,0,0,964622be99b8929ae714b5f1186a8bb5aa1dacdc93d9c545b15c83bc6ba93e76,2025-07-09T13:52:15.010000 CVE-2025-62440,0,0,4405d1c7b0b35d30fee189ef455777fef0dc3145ab6a662798835ab1d8b2978a,2025-10-15T03:15:33.580000 CVE-2025-62441,0,0,d93a3e30058a3f57946b1280892a394d1ca1e2b35501fc7a3bc4d4f486722cf2,2025-10-15T03:15:33.667000 @@ -313828,13 +313832,13 @@ CVE-2025-62711,0,0,3283f27a68ad04be55c9994d4a606e5a98401b10f409851fdb06b8020c274 CVE-2025-62712,0,0,cb041bf24928f60177bf70a93f0d4c62fb1dd79d92fabf1e72f064c662b3bc21,2025-11-04T15:41:56.843000 CVE-2025-62713,0,0,c9c6a7a8eb81ad65ab9bf88692a8073ab8d787b190ed5675b573bde3d35fc028,2025-10-27T13:20:15.637000 CVE-2025-62714,0,0,3f040d1c9d2b009a5bc77a4f4892f25c55175194f87f67cd9a061fbe3c4967fe,2025-10-27T13:20:15.637000 -CVE-2025-62715,0,1,b27a16d07e23480d78c8802a84e9392bfa2f3e0870b554663e50d1552a533162,2025-11-10T19:58:06.520000 +CVE-2025-62715,0,0,b27a16d07e23480d78c8802a84e9392bfa2f3e0870b554663e50d1552a533162,2025-11-10T19:58:06.520000 CVE-2025-62716,0,0,44959b4e6c5ebf75cb6a621fe29493726d6a963d190a8824e5423d37d1fe4aea,2025-10-27T13:20:15.637000 CVE-2025-62717,0,0,b48a408634b4308bcf5480ca6e32425ce8c4de7a70e0127fd562bf7fc32e3b87,2025-10-28T14:15:50.700000 -CVE-2025-62719,0,1,7547d93ac0b43fe04437deab29535ac0b98bcd94c8c5516fddaef251632971ac,2025-11-10T19:57:35.260000 +CVE-2025-62719,0,0,7547d93ac0b43fe04437deab29535ac0b98bcd94c8c5516fddaef251632971ac,2025-11-10T19:57:35.260000 CVE-2025-6272,0,0,69aacf1933584e6c697bffc9f4ef45990c895ad88679eb28f0e65dbaf6d7a0d5,2025-07-02T19:04:23.387000 -CVE-2025-62720,0,1,227f86b148c70ca6ed944000b36f95e8c36f505c91108c32ab53b03cad624f0e,2025-11-10T19:57:02.250000 -CVE-2025-62721,0,1,1f3f58212cadb8c4fd8e1296e48d4fc1e14fc14594320ea65f0868cf474f31b9,2025-11-10T19:56:06.980000 +CVE-2025-62720,0,0,227f86b148c70ca6ed944000b36f95e8c36f505c91108c32ab53b03cad624f0e,2025-11-10T19:57:02.250000 +CVE-2025-62721,0,0,1f3f58212cadb8c4fd8e1296e48d4fc1e14fc14594320ea65f0868cf474f31b9,2025-11-10T19:56:06.980000 CVE-2025-62722,0,0,8b7c86967cac4114c555af7e5806c7b8f3dd79a27bd8571c1decc169d3971197,2025-11-06T19:45:30.990000 CVE-2025-62723,0,0,8d90a8cfdd65404903e7ca0790b1f97750194f96f3f654679ab2c34f58612a6c,2025-10-31T19:31:48.540000 CVE-2025-62725,0,0,20ee35d109619b84e168a6ca94288ade1ffd79591c081462c3c919f854ce0283,2025-10-30T15:05:32.197000 @@ -313856,6 +313860,7 @@ CVE-2025-62777,0,0,7511c9f5a0a2d50f6c4827f5f15adf807c7fccbf781197726d51960ef1160 CVE-2025-62778,0,0,645dbd44fa653c9fc93f70ff1b29beb95a1f677c1f2cd63dbde556aafff80c6e,2025-11-03T18:40:23.610000 CVE-2025-62779,0,0,0a27d3e974763971cdc9bacc4d0221c52b9fb87ae2e42e86810bca01b342907d,2025-11-03T18:38:26.690000 CVE-2025-6278,0,0,44923e7b2795e6a195297e1518f85b85079ab11dddd7b8e2ddb5d199fab37ee5,2025-07-08T16:38:18.260000 +CVE-2025-62780,1,1,eae083f13e1b61d14c652688844102b5ba49e87baac58e7217e122fa97d208f9,2025-11-10T22:15:36.200000 CVE-2025-62781,0,0,261c22e8bb8cdaa9d234d1161583fac11f2f9c7f6b999511b3c4370a4d5bbbc8,2025-11-04T18:37:22.687000 CVE-2025-62782,0,0,cdec24206633c56eecac9ec5e89501eaf96f965861c883f0816e8836be716862,2025-11-04T13:23:24.003000 CVE-2025-62783,0,0,af6335ba768bdccadd591c88f96a3fd1bf7498ad7a7e900a6f0e7b1b3d0c66ba,2025-11-03T20:40:10.527000 @@ -314035,7 +314040,7 @@ CVE-2025-6312,0,0,210e77acd00f4d5c5ac264d4527c00270ea33d075866358ed7d260dcf54d1b CVE-2025-6313,0,0,1562d4a1d7af34d5663a11ccca3c18498c794bf589f4002eb9f8648b22c4c20d,2025-07-11T15:51:05.223000 CVE-2025-6314,0,0,85263aadad702e79e29fb879ab737e30de52ac79d67682e5f45540c096d4466e,2025-07-11T15:51:18.450000 CVE-2025-63147,0,0,fc599b72ec65b02b70d9538bdd69e52c51e96251cca4f657423f93c8c820c28b,2025-11-10T17:15:34.637000 -CVE-2025-63149,1,1,bc68135f23aedec55a3e3c4e59cb21f3fcd10c751277892b30e6cbee6f897ae4,2025-11-10T20:15:48.863000 +CVE-2025-63149,0,0,bc68135f23aedec55a3e3c4e59cb21f3fcd10c751277892b30e6cbee6f897ae4,2025-11-10T20:15:48.863000 CVE-2025-6315,0,0,af65062d3a83820b00b6d86c3f2fcfd8c6f95503b5307720deb757d1fce33557,2025-06-26T21:10:39.227000 CVE-2025-63152,0,0,4b52dfa376457c4770558890e552990cdc7f53dd8216500d11da6bfb672b6dc5,2025-11-10T16:15:45.043000 CVE-2025-63153,0,0,ac071315738e5ea705491432de46183719f267c2f66e46e7c40c3ace4d4b69a4,2025-11-10T16:15:45.253000 @@ -314052,10 +314057,11 @@ CVE-2025-63248,0,0,a90a1aa279b743a232025cfaefdd22c8e8f25922acb5116f9391db1f458d6 CVE-2025-6325,0,0,f3c972f98a1c23aa683cb26d2d0dff7867ebb136a7db2835d1261ce78a5fa92e,2025-11-06T19:45:09.883000 CVE-2025-6327,0,0,df731aaaf2c4a0f0577c0682af0477569805323f5d687d61f51e8a8d0230caca,2025-11-06T19:45:09.883000 CVE-2025-6328,0,0,63de09c1b6d4168f841e3ee35db39bcbc388058f6d7e6132f1ca750dac04ea71,2025-07-11T15:52:09.140000 -CVE-2025-63288,1,1,1ec768edecae92f2127b33b48e1eb59b2c19a1b6f7b2481355e4a9343e7c2565,2025-11-10T19:15:57.490000 +CVE-2025-63288,0,0,1ec768edecae92f2127b33b48e1eb59b2c19a1b6f7b2481355e4a9343e7c2565,2025-11-10T19:15:57.490000 CVE-2025-6329,0,0,a7011e5bc2b5e58711262f4b75aef2100fd96b5a3e212f68f2e8d88a24c40180,2025-07-18T12:40:46.277000 CVE-2025-63293,0,0,724c690d70f53f02d2da601a7b432dad356c029359de5fef4cb54a0ca78b9356,2025-11-04T15:41:31.450000 CVE-2025-63294,0,0,fce41f2cf55433fdc31167bfb0253f28f3a40e1f06401427f9b7d59e2a49acc8,2025-11-06T19:45:30.990000 +CVE-2025-63296,1,1,25ded556b880dfd116fa0ed73569e5a349bcbaaf42f54d6292a959dd9fa904ef,2025-11-10T21:15:39.593000 CVE-2025-63298,0,0,7caee551158887b024101f903267b75bffd383426fe96ed3e2d66a6886bb1548,2025-11-06T13:47:37.963000 CVE-2025-6330,0,0,533f8688fa05d700cc76636e59e86bc0eb723f7b595a46351852e77368267ff9,2025-06-26T18:48:43.913000 CVE-2025-63307,0,0,6c44c08904d782d4a70a5a7cb02de5fd71e2dcd2328f94f8308ce378d4706690,2025-11-06T20:15:50.693000 @@ -314068,15 +314074,16 @@ CVE-2025-6335,0,0,5b8214517b4e2328705628c07c57cad7dcf339f56383ed25d7611a220d052c CVE-2025-6336,0,0,c2ae3339f7f556d7f8479109d39981c789e75e2a76c15e57531c64e864f48049,2025-06-26T18:28:59.800000 CVE-2025-6337,0,0,20ffa5ad97e2fb5de859648c4c2bd5cf249ca44b435fa5f7c3de6344b086ac2d,2025-08-01T22:18:15.433000 CVE-2025-6338,0,0,d5c800ed34d59ce85516e9843ed463eb9c8b7acbef325ec9a754b0076681afc3,2025-10-16T15:28:59.610000 -CVE-2025-63384,1,1,0a1a479854caec7786797912f47ec0d5c7052f0ddeaa938ec3ebcb344c80f8c3,2025-11-10T20:15:49.013000 +CVE-2025-63384,0,0,0a1a479854caec7786797912f47ec0d5c7052f0ddeaa938ec3ebcb344c80f8c3,2025-11-10T20:15:49.013000 CVE-2025-6339,0,0,d659745c6a334711cbc431df03386a2313fb48b99d869c823cc1ffa19c8751b4,2025-10-31T20:12:25.937000 +CVE-2025-63397,1,1,f16df8de41e8997360afcd0d14400b9b2654594a1e9aa94d4dcb8fd32ceb79b6,2025-11-10T22:15:36.390000 CVE-2025-6340,0,0,dacb53e17fd0fb578d899283d6d11eb80ece027ae37caccbd0442a6f52974b5a,2025-06-26T18:16:01.950000 CVE-2025-6341,0,0,6eb97d536857f3ed3053b28a0b496ad883570be814c5c64c307e1ec4c95a4991,2025-06-26T17:31:18.840000 CVE-2025-63416,0,0,ba7225059e837de49bcd6e9ed6738f6482279d8469c500d4be2b6830c5a4e212,2025-11-07T19:47:41.363000 CVE-2025-63417,0,0,f6d0383c7b34ec0d4869cd1ca40ea1fa35486e57e41fdb06ad72060adf588685,2025-11-07T19:46:48.183000 CVE-2025-63418,0,0,3b4b44b7e9b8d10f775c368a1db60d3c52a2790e724e8e719d57dd1b9aaee567,2025-11-07T19:45:54.290000 CVE-2025-6342,0,0,6934fab8f5de2e37566c0bd37708ff4b41608b68048fce7936eae8dbc964dbfb,2025-06-26T15:43:29.243000 -CVE-2025-63420,0,0,fe95e8ebe617720457d899e5df426a48d11c5af7cdb9915eaf2f694d8f6886ca,2025-11-10T15:15:37.617000 +CVE-2025-63420,0,1,5214cfbde8486d4aefbcfa3dc3bdcbf5149d6a5e97008dfa13bc879bf847c1e5,2025-11-10T22:15:36.557000 CVE-2025-63422,0,0,5dc4403573b793e342aad436e2e1492ef48f8fb88a0453331b934e4f06e67ab2,2025-11-04T15:41:56.843000 CVE-2025-63423,0,0,72f1540463d67cca79af3c2f0aba08945146e901238c9795833252ea0e391977,2025-11-04T15:41:56.843000 CVE-2025-6343,0,0,486d933b030c79ce931ba483ff730af554d03b5f6333e6a7ea67c21e98e6807a,2025-06-26T15:41:01.887000 @@ -314094,7 +314101,7 @@ CVE-2025-63451,0,0,fc2a89c12d73e97c4b8244bd211574e2deb0bcdebaacf6b096d5ed76fc385 CVE-2025-63452,0,0,80ded5c011c7a189fcedf63a17752b52f65cab539bc6401b41c6b9639db17f63,2025-11-07T20:46:42.993000 CVE-2025-63453,0,0,65ec3e84ec1dc3b14d1173db053c7edab368bd7f128d99b325e5406feccba198,2025-11-07T20:46:33.640000 CVE-2025-63454,0,0,fc308e95fe2714524e00bb0c486e8ee71dc646551e54a5bac6342bef541ec9b7,2025-11-05T17:29:08.600000 -CVE-2025-63455,0,1,9b58203648ef9bbba4d4428d0a075590672cdc8790e50f6c34b66f622c0336a3,2025-11-10T19:15:57.640000 +CVE-2025-63455,0,0,9b58203648ef9bbba4d4428d0a075590672cdc8790e50f6c34b66f622c0336a3,2025-11-10T19:15:57.640000 CVE-2025-63456,0,0,7aca755ac5ce5aa1cffb2ce44a95c355d96289a64e892c7cd216353c9724c3a4,2025-11-10T17:15:34.957000 CVE-2025-63457,0,0,d5310080a56b2f0a1b15d55ba59d07a1acbc50d3952f5813b19ca96ecf2071fc,2025-11-10T17:15:35.100000 CVE-2025-63458,0,0,c47f4a636e88405048a40f1d3b801588601d316481054e42e8373f492503f4e4,2025-11-05T17:28:58.980000 @@ -314138,6 +314145,7 @@ CVE-2025-6360,0,0,cd47aa26c5ecbd48de29b33b9fb52e4ccfc785bed014ddf3d7b77089b3be30 CVE-2025-63601,0,0,a9aaad4c2ec16e08f794ee422b03c50a32421538037da46f9529c32a824db980,2025-11-10T17:15:35.603000 CVE-2025-63608,0,0,e958e593af9bc02b3d721e38f2c301060cffaf6161eaba950bb44aeacf054795,2025-10-30T15:15:44.690000 CVE-2025-6361,0,0,69dfed4b6ee28f48f4584674801cbba5191a06ac465e39fa526b231064a630aa,2025-06-26T15:33:24.173000 +CVE-2025-63617,1,1,8bff3b940f57f3a8126395c48872cae4c836f3ae6c0ea4ac047ab9ce7ebb41f5,2025-11-10T21:15:39.743000 CVE-2025-6362,0,0,ed837364dd32376dc1cfdf8d173bec48f29c4e974fad65f0c43a106ea3f3894b,2025-06-26T15:30:56.573000 CVE-2025-63622,0,0,e7330fde3c1785920f20a1bef5d00328fe6a554fc277c370dea6273484d710dc,2025-11-03T18:35:04.287000 CVE-2025-6363,0,0,a2092da75c1239a931ef4653704a6e5fd116fd3da1a6a5dbab6e327924c9b517,2025-07-02T18:56:45.850000 @@ -314176,7 +314184,7 @@ CVE-2025-6377,0,0,ba3054fbb65a50a5d08a5d5b714d5d1e90e671230206993f7c04c49b605588 CVE-2025-6378,0,0,c9f832cbc4a58e4712b3be36fa473dbfb776e558d71ae65da6d05b8879aaf667,2025-07-07T17:15:44.053000 CVE-2025-63783,0,0,69f74fd0edfecb70b04b179f6826c5aca1d9ba2798403fefaa9152fa27a8848f,2025-11-07T16:15:42.943000 CVE-2025-63784,0,0,ee3390aeb81d17f96f1a0b5e38ea9bbe2a6ca24e934c4b8b6937095606924520,2025-11-07T17:15:47.777000 -CVE-2025-63785,0,1,a12babbfbbd9d789fe23a5f6696cf097af25aaf0729bfa58f40388221e38c513,2025-11-10T20:15:49.180000 +CVE-2025-63785,0,0,a12babbfbbd9d789fe23a5f6696cf097af25aaf0729bfa58f40388221e38c513,2025-11-10T20:15:49.180000 CVE-2025-6379,0,0,a573d0789f74e2940a233e26e5770bd43ee83276728b28e7918a6f6c0e9e28bc,2025-07-07T15:24:31.510000 CVE-2025-6380,0,0,8038af934fb98ec6cb1fd37b6f439a7d7ffbe43ae5c1a00c7e81bd72f09813f4,2025-07-25T15:29:19.837000 CVE-2025-6381,0,0,bcb772a2599dc7010241cc7bbab88371a6f4c6ca137948aff05aab6ef1ed3e85,2025-07-07T15:24:28.070000 @@ -314219,7 +314227,7 @@ CVE-2025-64102,0,0,1df615ed6c683b39edf58757662a22a34822d3a0ae651fd328b5e3a4ca9e8 CVE-2025-64103,0,0,cb99e58dd580d5243efc8885d5b88c24de593adde2cd983bd7dda52d2ec3ace5,2025-11-04T13:17:27.277000 CVE-2025-64104,0,0,76e01e5ec2741e99868382ab244e157ae3e008ce3739ce1f1370b3ec045df2a1,2025-10-30T16:15:36.777000 CVE-2025-64106,0,0,8d0d0da341c8b442027d8166520640f24b9a05dc2fdad57a4aa861464de70c83,2025-11-07T17:48:28.413000 -CVE-2025-64107,0,1,0f28aab7fde5f8417937b9bb449169c337c894bdba79c5ad3b84a3886b43ea42,2025-11-10T19:54:02.790000 +CVE-2025-64107,0,0,0f28aab7fde5f8417937b9bb449169c337c894bdba79c5ad3b84a3886b43ea42,2025-11-10T19:54:02.790000 CVE-2025-64108,0,0,72347f86b202e01bb8b02e7e4022ed10e87ecb41d6313ed68752e79828f97619,2025-11-10T18:38:51.153000 CVE-2025-64109,0,0,e6bc5c7b9f00a4995c67f05b3ffe7fbd006d3f6d0e51b75e8fb6bf15c9ef462b,2025-11-06T19:45:30.990000 CVE-2025-6411,0,0,0e09e6bd75e65ae7b58d0e0820c1abe7bd7d437f8f8a3059af1dd0350f51a6eb,2025-06-24T14:51:00.910000 @@ -314262,6 +314270,7 @@ CVE-2025-64161,0,0,140d8709e100cd4125e4053eff57cc915875363cb3033bb321fc102b74b77 CVE-2025-64162,0,0,7aa3c1bc9862cbf9d76d980061ecf999b965ea04dcb95f5a867d3a45a67464ef,2025-10-29T04:16:05.683000 CVE-2025-64163,0,0,b034c510b54e36983b615169edbf896fe9565f6f3ed592009ec4cd7bc173202d,2025-11-07T18:06:36.263000 CVE-2025-64164,0,0,fd01bf8722bec50a4a6012d7fd462ebfa5a8db33dceccb7aad63b8f807bb7046,2025-11-07T18:06:49.890000 +CVE-2025-64167,1,1,81c8bfaf6331c78111895100dcee4bebd32fced240abf986cf18d38c292ee57c,2025-11-10T22:15:36.753000 CVE-2025-64168,0,0,7e6d90f563cbc72997293038a67d217af43f5ab0bcb30c8f024d048ef4250467,2025-11-04T15:41:31.450000 CVE-2025-6417,0,0,5fc9eb7d4ff925279bc28755909d00f7292cf787d506364151545ca582306f41,2025-06-24T14:41:39.197000 CVE-2025-64171,0,0,a742f3e362936694511343a0ff9a37bb44a723deda944529ccf218f4164e60e0,2025-11-06T19:45:09.883000 @@ -314273,6 +314282,9 @@ CVE-2025-64178,0,0,b3311f51dd6f7485b90b0b4bc1f46de7bf8fff9d2d902f0f76cb7082016ad CVE-2025-64179,0,0,4d74a20cf7e19a400640fd673208a8e27bee82b08c3278c1b3cf144f01ab0365,2025-11-06T22:15:44.463000 CVE-2025-6418,0,0,467930084b2995640103e80484946461d030e9474f7e698d0adcc4a7d0d356d9,2025-10-23T20:06:00.793000 CVE-2025-64180,0,0,7c429863a747d7837a5679472b1b5df0fe97dc5f78cc7c57952a27b250968965,2025-11-07T04:15:46.800000 +CVE-2025-64181,1,1,f76a60e00e75059e0ee63952cfd1e631ff76630b620d5f540d32aead3c4636ff,2025-11-10T22:15:36.933000 +CVE-2025-64182,1,1,30176a1b35344dec15708360f1baa23d12ba17ddd34a7c4e4fc982e7091e5129,2025-11-10T22:15:37.120000 +CVE-2025-64183,1,1,4689bc8315415189467816a6bdfcfad7463807b6eb747e36ded04dba90aff041,2025-11-10T22:15:37.323000 CVE-2025-64184,0,0,cc2d99787823a35b7b6385dc8e3e6899ef5ee515ba6488dce960e651d976ea58,2025-11-07T04:15:46.947000 CVE-2025-64187,0,0,ea906a854381e1f88759c0a97a64d4ec2ec4c7a9d47db5c3c1920b19ed393f90,2025-11-07T04:15:47.100000 CVE-2025-6419,0,0,e0f79cc69c3b952ad883b4cedc0662567b41e25afc0f850c7a45f799e90ccca8,2025-10-23T20:06:00.793000 @@ -314413,6 +314425,7 @@ CVE-2025-64479,0,0,0e0374f47c472f2a07e1a48c6ec183e365554a3108344f20f1c8ece18fc43 CVE-2025-6448,0,0,64f85601ab20cc82fb748ad97697230d4235245171017cafeb464e252ba9bff2,2025-10-23T20:06:00.793000 CVE-2025-64480,0,0,2ad1395ea309fada3c74c312a96612a75d1b59df646706a36d7ec23f7e8d8106,2025-11-06T04:15:33.177000 CVE-2025-64481,0,0,94aa01c36bc9f4e6b86815c3eea9c66e754bf209b42f23b2b9ea1c95cdfab470,2025-11-07T21:15:42.010000 +CVE-2025-64484,1,1,c6ff3f26c31e4d9e2ff62cd5bf85c19144a08251a37bebddc91ee8c4576e2844,2025-11-10T22:15:37.490000 CVE-2025-64485,0,0,cea2db1182b8891937a008dad1fc9681e8268ce4ec1a5008d4cacd1f0661a16f,2025-11-08T00:15:36.023000 CVE-2025-64486,0,0,b54d1baf1861138dd3d49a8b655e57bc42e7c81924806bbfb2b7a6786d4ebf74,2025-11-08T00:15:36.170000 CVE-2025-64488,0,0,a05396e45b9d456c9021851bc9e5c4e2e8d2f958ccb822120e6527ae89a570b4,2025-11-08T00:15:36.313000 @@ -314426,7 +314439,16 @@ CVE-2025-64494,0,0,75d888ed413c400c16deeae8fa1eb031750f7ddae7e0c03db664eec41ac32 CVE-2025-64495,0,0,923516664ce7713699a8ad89d8a73654e836ff0705c39ee543e3837755492de5,2025-11-08T02:15:35.250000 CVE-2025-64496,0,0,c7a2f2decbebe67316ed94f459bd19e4d3009fa8f35223aea85c02ea7ebcc007,2025-11-08T02:15:35.443000 CVE-2025-6450,0,0,7116c7146f3edc8e676d31c70a4892a281b7805e114a1fd8d85fd192282150f5,2025-10-23T20:06:00.793000 +CVE-2025-64501,1,1,d0cf1eb22c6df71a33fa412dc476596e2dbb4980f899231789d16bc3c2826794,2025-11-10T22:15:37.683000 +CVE-2025-64502,1,1,afbaf2ba37c9a62ddff154df813d1326497a0d142852f926bee67678c44b7001,2025-11-10T22:15:37.870000 +CVE-2025-64504,1,1,21da5d22c1a361530ef2e2ceed56922bd956e0d58801770a04af901b4091dfad,2025-11-10T22:15:39.273000 +CVE-2025-64507,1,1,2759bb28e09b36ac523745ed87b9a0ee2390849f1261ff29b8ab05e5477d2234,2025-11-10T22:15:39.460000 +CVE-2025-64508,1,1,e034200d3c9b9b618cf48c39116cf7f05328956f9ea4f8432d162f09c1f6cc60,2025-11-10T22:15:39.640000 +CVE-2025-64509,1,1,af053002d5d1553991c9ac11055c50f3f3f93d1a29f8ec8e8d8a46e09ca9a259,2025-11-10T22:15:39.873000 CVE-2025-6451,0,0,162dfc485be6ca55857229be75d149bc38483963a4257e9cc9bbd68d0b7a876e,2025-10-23T20:06:00.793000 +CVE-2025-64512,1,1,60bcfd126d995f3a590f89c6a7b61243a014c50dee64b78be3d5e75a6a800b89,2025-11-10T22:15:40.067000 +CVE-2025-64513,1,1,1394417f3f6dc5175200ad9c0e04e9e44e7a93d35f3708716bd25635a4491686,2025-11-10T22:15:40.270000 +CVE-2025-64518,1,1,b806766ea270d65834b0512a940e0c21badeeff37597e4687bf93b34c3d522b5,2025-11-10T22:15:40.497000 CVE-2025-6452,0,0,083940287f0c582bcbbebe584d67638d9b0c0f407a2a8fc444d58915e8359f7f,2025-06-27T17:01:21.663000 CVE-2025-6453,0,0,16c9c319d685cd7dc97f325776dd293b3af99f0eec1e18e5100177f7ae0bf3a4,2025-09-04T15:47:46.967000 CVE-2025-6454,0,0,37b49b8354ca8d75970481c6a786c2a7dbcc7f419ffabe40aafac58cac84747d,2025-09-20T02:56:00.287000