admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 01:30:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-09-25T20:00:11.607224+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-09-25 20:03:56 +00:00
1 parent 0cd8fe74ab
commit e054562514
122 files changed
+6564 -861
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2014/CVE-2014-07xx/CVE-2014-0780.json
+41 -9
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0780",
"sourceIdentifier": "[email protected]",
"published": "2014-04-25T05:12:07.787",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:33.943",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -59,6 +59,29 @@
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -90,7 +113,7 @@
"cisaVulnerabilityName": "InduSoft Web Studio NTWebServer Directory Traversal Vulnerability",
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
@@ -99,6 +122,16 @@
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
@@ -139,13 +172,8 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-107-02",
"source": "[email protected]",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
]
"url": "http://download.indusoft.com/71.2.4/IWS71.2.4.zip",
"source": "[email protected]"
},
{
"url": "http://www.securityfocus.com/bid/67056",
@@ -156,6 +184,10 @@
"VDB Entry"
]
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-107-02",
"source": "[email protected]"
},
{
"url": "https://www.exploit-db.com/exploits/42699/",
"source": "[email protected]",
CVE-2014/CVE-2014-07xx/CVE-2014-0781.json
+42 -8
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0781",
"sourceIdentifier": "[email protected]",
"published": "2014-03-14T10:55:05.817",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:35.110",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"baseScore": 9.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -129,14 +162,11 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "[email protected]",
"tags": [
"US Government Resource"
]
"url": "http://www.securityfocus.com/bid/66130",
"source": "[email protected]"
},
{
"url": "http://www.securityfocus.com/bid/66130",
"url": "http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.",
"source": "[email protected]"
},
{
@@ -146,6 +176,10 @@
"Exploit"
]
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "af854a3a-2127-422b-91ae-364da2661108",
CVE-2014/CVE-2014-07xx/CVE-2014-0782.json
+47 -12
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0782",
"sourceIdentifier": "[email protected]",
"published": "2014-05-16T11:12:00.243",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:35.300",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:C",
"baseScore": 8.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.6,
"impactScore": 8.5,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -269,18 +302,20 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-133-01",
"source": "[email protected]",
"tags": [
"US Government Resource"
]
"url": "http://www.securityfocus.com/bid/66130",
"source": "[email protected]"
},
{
"url": "http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
"url": "http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.",
"source": "[email protected]"
},
{
"url": "https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-133-01",
CVE-2014/CVE-2014-07xx/CVE-2014-0783.json
+42 -9
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0783",
"sourceIdentifier": "[email protected]",
"published": "2014-03-14T10:55:05.850",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:35.480",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:C",
"baseScore": 9.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 8.5,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -129,15 +162,11 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
"url": "http://www.securityfocus.com/bid/66130",
"source": "[email protected]"
},
{
"url": "http://www.securityfocus.com/bid/66111",
"url": "http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.",
"source": "[email protected]"
},
{
@@ -147,6 +176,10 @@
"Exploit"
]
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "af854a3a-2127-422b-91ae-364da2661108",
CVE-2014/CVE-2014-07xx/CVE-2014-0784.json
+43 -13
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0784",
"sourceIdentifier": "[email protected]",
"published": "2014-03-14T10:55:05.863",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:35.647",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:C",
"baseScore": 8.3,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 8.6,
"impactScore": 8.5,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -129,19 +162,12 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
"url": "http://www.securityfocus.com/bid/66130",
"source": "[email protected]"
},
{
"url": "http://www.securityfocus.com/bid/66114",
"source": "[email protected]",
"tags": [
"Exploit"
]
"url": "http://www.yokogawa.com/dcs/security/ysar/dcs-ysar-index-en.htm.",
"source": "[email protected]"
},
{
"url": "https://community.rapid7.com/community/metasploit/blog/2014/03/10/yokogawa-centum-cs3000-vulnerabilities",
@@ -150,6 +176,10 @@
"Exploit"
]
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-070-01a",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-070-01",
"source": "af854a3a-2127-422b-91ae-364da2661108",
CVE-2014/CVE-2014-07xx/CVE-2014-0786.json
+41 -5
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0786",
"sourceIdentifier": "[email protected]",
"published": "2014-05-01T01:56:10.490",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:35.830",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -99,11 +132,10 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01",
"url": "http://www.integraxor.com/blog/category/security/vulnerability-note/",
"source": "[email protected]",
"tags": [
"Patch",
"US Government Resource"
"Vendor Advisory"
]
},
{
@@ -113,6 +145,10 @@
"Vendor Advisory"
]
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-091-01",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-091-01",
"source": "af854a3a-2127-422b-91ae-364da2661108",
CVE-2014/CVE-2014-07xx/CVE-2014-0787.json
+42 -9
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0787",
"sourceIdentifier": "[email protected]",
"published": "2014-04-12T04:37:31.737",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:36.003",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"baseScore": 10.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -79,15 +112,15 @@
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-098-02",
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"US Government Resource"
]
"url": "http://www.securityfocus.com/bid/66709",
"source": "[email protected]"
},
{
"url": "http://www.securityfocus.com/bid/66709",
"url": "http://www.wellintech.com/index.php?option=com_content&view=article&id=56&Itemid=11",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-098-02",
"source": "[email protected]"
},
{
CVE-2014/CVE-2014-07xx/CVE-2014-0789.json
+43 -9
View File
@@ -2,7 +2,7 @@
"id": "CVE-2014-0789",
"sourceIdentifier": "[email protected]",
"published": "2014-04-04T15:09:45.917",
"lastModified": "2025-04-12T10:46:40.837",
"lastModified": "2025-09-25T18:15:36.177",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
@@ -17,6 +17,29 @@
],
"metrics": {
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
},
{
"source": "[email protected]",
"type": "Primary",
@@ -44,8 +67,18 @@
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"source": "[email protected].gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-122"
}
]
},
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -97,13 +130,6 @@
}
],
"references": [
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-093-01",
"source": "[email protected]",
"tags": [
"US Government Resource"
]
},
{
"url": "http://www.schneider-electric.com/corporate/en/support/cybersecurity/viewer-news.page?c_filepath=/templatedata/Content/News/data/en/local/cybersecurity/general_information/2014/03/20140325_vulnerability_disclosure_opc_factory_server.xml",
"source": "[email protected]",
@@ -111,6 +137,14 @@
"Vendor Advisory"
]
},
{
"url": "http://www2.schneider-electric.com/sites/corporate/en/support/cybersecurity/cybersecurity.page",
"source": "[email protected]"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-14-093-01",
"source": "[email protected]"
},
{
"url": "http://ics-cert.us-cert.gov/advisories/ICSA-14-093-01",
"source": "af854a3a-2127-422b-91ae-364da2661108",
CVE-2022/CVE-2022-488xx/CVE-2022-48807.json
+115 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48807",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:05.050",
"lastModified": "2024-11-21T07:34:07.577",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:38:10.873",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,137 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ice: Solucionar error KASAN en el controlador LAG NETDEV_UNREGISTER Actualmente, se llama al mismo controlador tanto para una notificaci\u00f3n de desvinculaci\u00f3n de NETDEV_BONDING_INFO LAG como para una llamada NETDEV_UNREGISTER. Sin embargo, esto est\u00e1 causando un problema, ya que el netdev_notifier_info pasado tiene una estructura diferente seg\u00fan el evento que se pasa. El problema se manifiesta como un seguimiento de llamada de un ERROR: error de pila fuera de los l\u00edmites de KASAN. Solucione este problema creando un controlador espec\u00edfico para NETDEV_UNREGISTER al que solo se le pasan elementos v\u00e1lidos en la estructura netdev_notifier_info para el evento NETDEV_UNREGISTER. Tambi\u00e9n se incluye la eliminaci\u00f3n de un dev_put desequilibrado en peer_netdev y llaves relacionadas."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.14.16",
"versionEndExcluding": "5.15",
"matchCriteriaId": "1109FEBB-0F4F-45E9-A22A-DE9E2AE996E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.1",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "2EFA502F-EC14-4814-87F8-8827873F0378"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*",
"matchCriteriaId": "40D9C0D1-0F32-4A2B-9840-1072F5497540"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/bea1898f65b9b7096cb4e73e97c83b94718f1fa1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f9daedc3ab8f673e3a9374b91a89fbf1174df469",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/faa9bcf700ca1a0d09f92502a6b65d3ce313fb46",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48811.json
+103 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48811",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:05.367",
"lastModified": "2024-11-21T07:34:08.027",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:37:05.513",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,125 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ibmvnic: no liberar napi en __ibmvnic_open() Si __ibmvnic_open() encuentra un error como al configurar el estado del enlace, llama a release_resources() que libera las estructuras de napi innecesariamente. En su lugar, haga que __ibmvnic_open() solo limpie el trabajo que hizo hasta ahora (es decir, deshabilite napi e irqs) y deje el resto a las personas que llaman. Si el llamador de __ibmvnic_open() es ibmvnic_open(), deber\u00eda liberar los recursos inmediatamente. Si la persona que llama es do_reset() o do_hard_reset(), liberar\u00e1 los recursos en el pr\u00f3ximo reinicio. Esto corrige el siguiente fallo que se produjo al ejecutar el comando drmgr varias veces para agregar/eliminar una interfaz vnic: [102056] ibmvnic 30000003 env3: deshabilitar rx_scrq[6] irq [102056] ibmvnic 30000003 env3: deshabilitar rx_scrq[7] irq [102056] ibmvnic 30000003 env3: Se reabastecieron 8 grupos. El kernel intent\u00f3 leer la p\u00e1gina del usuario (10): \u00bfintento de explotaci\u00f3n? (uid: 0) ERROR: Desreferencia del puntero NULL del kernel al leer en 0x00000010 Direcci\u00f3n de instrucci\u00f3n err\u00f3nea: 0xc000000000a3c840 Ups: Acceso al kernel del \u00e1rea defectuosa, firma: 11 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries .. CPU: 9 PID: 102056 Comm: kworker/9:2 Kdump: cargado No contaminado 5.16.0-rc5-autotest-g6441998e2e37 #1 Cola de trabajo: events_long __ibmvnic_reset [ibmvnic] NIP: c000000000a3c840 LR: c0080000029b537. 8 CTR: c000000000a3c820 REGS: c0000000548e37e0 TRAMPA : 0300 No contaminado (5.16.0-rc5-autotest-g6441998e2e37) MSR: 8000000000009033 CR: 28248484 XER: 00000004 CFAR: c0080000029bdd24 DAR: 00000000010 DSISR: 40000000 IRQMASK: 0 GPR00: c0080000029b55d0 c0000000548e3a80 c0000000028f0200 0000000000000000 ... NIP [c000000000a3c840] napi_enable+0x20/0xc0 LR [c0080000029b 5378] __ibmvnic_open+0xf0/0x430 [ibmvnic] Seguimiento de llamadas: [c0000000548e3a80] [0000000000000006] 0x6 (no confiable) [c0000000548e3ab0] [c0080000029b55d0] __ibmvnic_open+0x348/0x430 [ibmvnic] [c0000000548e3b40] [c0080000029bcc28] __ibmvnic_reset+0x500/0xdf0 [ibmvnic] [c0000000548e3c60] [c000000000176228 ] proceso_one_work+0x288/0x570 [c0000000548e3d00] [c000000000176588] hilo_trabajador+0x78/0x660 [c0000000548e3da0] [c0000000001822f0] kthread+0x1c0/0x1d0 [c0000000548e3e10] [c00000000000cf64] ret_from_kernel_thread+0x5c/0x64 Volcado de instrucciones: 7d2948f8 792307e0 4e800020 60000000 3c4c01eb 9e0 f821ffd1 39430010 38a0fff6 e92d1100 f9210028 39200000 f9010020 60420000 e9210020 ---[ final de seguimiento 5f8033b08fd27706 ]---"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.12",
"versionEndExcluding": "5.15.27",
"matchCriteriaId": "EE357FC9-84EB-4644-8FFE-463B5F2D4983"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/61772b0908c640d0309c40f7d41d062ca4e979fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/960dfaf3b578dd23af012590e809ae2d58ba1827",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e08cb9056fb2564d1f6bad789bdf79ab09bf2f81",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/61772b0908c640d0309c40f7d41d062ca4e979fa",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/960dfaf3b578dd23af012590e809ae2d58ba1827",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e08cb9056fb2564d1f6bad789bdf79ab09bf2f81",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48821.json
+133 -13
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48821",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:06.010",
"lastModified": "2024-11-21T07:34:09.053",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:36:51.900",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,167 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: fastrpc: evitar doble fput() en copia de usuario fallida. Si la copia al \u00e1rea de usuario falla para FASTRPC_IOCTL_ALLOC_DMA_BUFF ioctl(), no debemos asumir que 'buf->dmabuf' aun es v\u00e1lido. De hecho, dma_buf_fd() llam\u00f3 a fd_install() antes, es decir, \"consumi\u00f3\" una referencia, dej\u00e1ndonos sin ninguna. Por lo tanto, llamar a dma_buf_put() colocar\u00e1 una referencia que ya no poseemos, lo que conducir\u00e1 a una entrada v\u00e1lida en la tabla de descripci\u00f3n de archivos para un objeto 'archivo' ya publicado que es un use-after-free directo. Simplemente evite llamar a dma_buf_put() y conf\u00ede en el c\u00f3digo de salida del proceso para realizar la limpieza necesaria, si es necesario, es decir, si el descriptor del archivo a\u00fan es v\u00e1lido."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.1",
"versionEndExcluding": "5.4.180",
"matchCriteriaId": "CDDF7C0A-34BC-4EE5-972C-04626CA8CFF2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.101",
"matchCriteriaId": "A154171E-A3B9-42BE-9E97-C9B0EA43FC54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/46963e2e0629cb31c96b1d47ddd89dc3d8990b34",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4e6fd2b5fcf8e7119305a6042bd92e7f2b9ed215",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/76f85c307ef9f10aa2cef1b1d5ee654c1f3345fc",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a5ce7ee5fcc07583159f54ab4af5164de00148f5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e4382d0a39f9a1e260d62fdc079ddae5293c037d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/46963e2e0629cb31c96b1d47ddd89dc3d8990b34",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/4e6fd2b5fcf8e7119305a6042bd92e7f2b9ed215",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/76f85c307ef9f10aa2cef1b1d5ee654c1f3345fc",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a5ce7ee5fcc07583159f54ab4af5164de00148f5",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e4382d0a39f9a1e260d62fdc079ddae5293c037d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48823.json
+123 -13
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48823",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:06.147",
"lastModified": "2024-11-21T07:34:09.303",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:36:26.000",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,47 +15,157 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: scsi: qedf: se solucion\u00f3 el problema de recuento cuando se recibe el logotipo durante TMF. Se observ\u00f3 un seguimiento de llamada de tarea colgada durante el procesamiento del logotipo. [ 974.309060] [0000:00:00.0]:[qedf_eh_device_reset:868]: 1:0:2:0: RESET LUN emitido... [ 974.309065] [0000:00:00.0]:[qedf_initiate_tmf:2422]: tm_flags 0x10 sc_cmd 00000000c16b930f op = 0x2a target_id = 0x2 lun=0 [ 974.309178] [0000:00:00.0]:[qedf_initiate_tmf:2431]: portid=016900 tm_flags =LUN RESET [ 974.309222 [0000] :00:00.0]:[qedf_initiate_tmf:2438 ]: orig io_req = 00000000ec78df8f xid = 0x180 ref_cnt = 1. [ 974.309625] host1: informe 016900: Solicitud de logotipo recibida mientras estaba en estado Listo [ 974.309627] host1: informe 016900: Eliminar puerto [ 974.309642] host1: Informe 016900: evento de trabajo 3 [ 974.309644] host1: informe 016900: devoluci\u00f3n de llamada lld ev 3 [ 974.313243] [0000:61:00.2]:[qedf_execute_tmf:2383]:1: fcport se est\u00e1 cargando, no ejecutando descarga. [ 974.313295] [0000:61:00.2]:[qedf_execute_tmf:2400]:1: comando de gesti\u00f3n de tarea exitoso... [ 984.031088] INFORMACI\u00d3N: tarea jbd2/dm-15-8:7645 bloqueada durante m\u00e1s de 120 segundos. [ 984.031136] No contaminado 4.18.0-305.el8.x86_64 #1 [ 984.031166] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" desactiva este mensaje. [ 984.031209] jbd2/dm-15-8 D 0 7645 2 0x80004080 [ 984.031212] Seguimiento de llamadas: [ 984.031222] __schedule+0x2c4/0x700 [ 984.031230] ? unfreeze_partials.isra.83+0x16e/0x1a0 [984.031233]? bit_wait_timeout+0x90/0x90 [ 984.031235] programaci\u00f3n+0x38/0xa0 [ 984.031238] io_schedule+0x12/0x40 [ 984.031240] bit_wait_io+0xd/0x50 [ 984.031243] 80 [984.031248] ? free_buffer_head+0x21/0x50 [ 984.031251] out_of_line_wait_on_bit+0x91/0xb0 [ 984.031257] ? init_wait_var_entry+0x50/0x50 [ 984.031268] jbd2_journal_commit_transaction+0x112e/0x19f0 [jbd2] [ 984.031280] kjournald2+0xbd/0x270 [jbd2] [ 984.031284] ? terminar_esperar+0x80/0x80 [984.031291]? commit_timeout+0x10/0x10 [jbd2] [ 984.031294] kthread+0x116/0x130 [ 984.031300] ? kthread_flush_work_fn+0x10/0x10 [ 984.031305] ret_from_fork+0x1f/0x40 Hubo un problema de recuento de referencias cuando se recibe el logotipo durante TMF. Esto lleva a que una de las E/S se cuelgue con el controlador. Arreglar el recuento de \u00e1rbitros."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.11",
"versionEndExcluding": "5.4.180",
"matchCriteriaId": "055587F4-5F25-40FC-872A-8199352DB7A8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.101",
"matchCriteriaId": "A154171E-A3B9-42BE-9E97-C9B0EA43FC54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/5239ab63f17cee643bd4bf6addfedebaa7d4f41e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6be8eaad75ca73131e2a697f0270dc8ee73814a8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7cc32ff0cd6c44a3c26de5faecfe8b5546198fad",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7fcbed38503bb34c6e6538b6a9482d1c6bead1e8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/87f187e5265bc8e3b38faef8b9db864cdd61dde7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5239ab63f17cee643bd4bf6addfedebaa7d4f41e",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/6be8eaad75ca73131e2a697f0270dc8ee73814a8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7cc32ff0cd6c44a3c26de5faecfe8b5546198fad",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7fcbed38503bb34c6e6538b6a9482d1c6bead1e8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/87f187e5265bc8e3b38faef8b9db864cdd61dde7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48827.json
+117 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48827",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:06.420",
"lastModified": "2024-11-21T07:34:09.767",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:32:15.117",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,145 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: NFSD: corrige el comportamiento de READ cerca de OFFSET_MAX Dan Aloni informa: > Debido a El commit 8cfb9015280d (\"NFS: siempre proporcione buffers alineados a > las capas de lectura RPC\") en el cliente, una lectura de 0xfff est\u00e1 alineada con el tama\u00f1o del servidor de 0x1000. > > Como resultado, en una prueba donde el servidor tiene un archivo de tama\u00f1o > 0x7ffffffffffffffff, y el cliente intenta leer desde el desplazamiento > 0x7ffffffffffffff000, la lectura causa que loff_t se desborde en el servidor > y devuelve un c\u00f3digo NFS de EINVAL a el cliente. Como resultado, el cliente reintenta indefinidamente la solicitud. El cliente NFS de Linux no maneja NFS?ERR_INVAL, aunque todas las especificaciones de NFS permiten a los servidores devolver ese c\u00f3digo de estado para una READ. En lugar de NFS?ERR_INVAL, haga que las solicitudes READ fuera de rango se realicen correctamente y devuelvan un resultado breve. Establezca el indicador EOF en el resultado para evitar que el cliente vuelva a intentar la solicitud READ. Este comportamiento parece ser coherente con los servidores Solaris NFS. Tenga en cuenta que NFSv3 y NFSv4 utilizan valores de compensaci\u00f3n u64 en el cable. Estos deben convertirse a loff_t internamente antes de su uso; una conversi\u00f3n de tipo impl\u00edcita no es adecuada para este prop\u00f3sito. De lo contrario, las comprobaciones de VFS con sb->s_maxbytes no funcionan correctamente."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.220",
"matchCriteriaId": "F1473515-78F6-495D-8E82-C2CBAEE048BF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/0cb4d23ae08c48f6bf3c29a8e5c4a74b8388b960",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1726a39b0879acfb490b22dca643f26f4f907da9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/44502aca8e02ab32d6b0eb52e006a5ec9402719b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c6eff5c4277146a78b4fb8c9b668dd64542c41b0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/0cb4d23ae08c48f6bf3c29a8e5c4a74b8388b960",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/1726a39b0879acfb490b22dca643f26f4f907da9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/44502aca8e02ab32d6b0eb52e006a5ec9402719b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c6eff5c4277146a78b4fb8c9b668dd64542c41b0",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48828.json
+128 -12
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48828",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:06.477",
"lastModified": "2025-06-27T11:15:22.540",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:31:42.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,43 +15,159 @@
"value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: NFSD: corrija el desbordamiento insuficiente de ia_size iattr::ia_size es un loff_t, que es un tipo de 64 bits firmado. NFSv3 y NFSv4 definen el tama\u00f1o del archivo como un tipo de 64 bits sin firmar. Por lo tanto, existe un rango de valores de tama\u00f1o de archivo v\u00e1lidos que un cliente NFS puede enviar y que ya es mayor de lo que Linux puede manejar. Actualmente, decode_fattr4() vuelca un valor u64 completo en ia_size. Si ese valor resulta ser mayor que S64_MAX, entonces ia_size tiene un desbordamiento insuficiente. Tambi\u00e9n estoy a punto de arreglar el comportamiento de NFSv3, as\u00ed que detectemos el desbordamiento en la ruta del c\u00f3digo com\u00fan: nfsd_setattr()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-191"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.295",
"matchCriteriaId": "BA4BF151-0908-4C15-9931-A867361FC272"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.5",
"versionEndExcluding": "5.10.220",
"matchCriteriaId": "5816E2E8-2D39-42FC-B69B-20248BF7FBEF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/38d02ba22e43b6fc7d291cf724bc6e3b7be6626b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8e0ecaf7a7e57b30284d6b3289cc436100fadc48",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d2211e6e34d0755f35e2f8c22d81999fa81cfc71",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/da22ca1ad548429d7822011c54cfe210718e0aa7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e6faac3f58c7c4176b66f63def17a34232a17b0e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/38d02ba22e43b6fc7d291cf724bc6e3b7be6626b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/8e0ecaf7a7e57b30284d6b3289cc436100fadc48",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/da22ca1ad548429d7822011c54cfe210718e0aa7",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/e6faac3f58c7c4176b66f63def17a34232a17b0e",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2022/CVE-2022-488xx/CVE-2022-48830.json
+118 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2022-48830",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-16T12:15:06.613",
"lastModified": "2024-11-21T07:34:10.103",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:22:00.600",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,146 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: isotp: corrige una posible ejecuci\u00f3n de recepci\u00f3n de tramas CAN en isotp_rcv() Al recibir una trama CAN, la l\u00f3gica del c\u00f3digo actual no considera la recepci\u00f3n simult\u00e1nea de procesos que no aparecen en el uso en el mundo real. Ziyang Xuan escribe: El siguiente problema syz es uno de los escenarios. so->rx.len es cambiado por isotp_rcv_ff() durante isotp_rcv_cf(), so->rx.len es igual a 0 antes de alloc_skb() y es igual a 4096 despu\u00e9s de alloc_skb(). Eso activar\u00e1 skb_over_panic() en skb_put(). ==================================================== ===== CPU: 1 PID: 19 Comm: ksoftirqd/1 No contaminado 5.16.0-rc8-syzkaller #0 RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:113 Seguimiento de llamadas: skb_over_panic net/core/skbuff.c:118 [en l\u00ednea] skb_put.cold+0x24/0x24 net/core/skbuff.c:1990 isotp_rcv_cf net/can/isotp.c:570 [en l\u00ednea] isotp_rcv+0xa38/0x1e30 net/ can/isotp.c:668 entregar net/can/af_can.c:574 [en l\u00ednea] can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635 can_receive+0x31d/0x580 net/can/af_can.c:665 can_rcv+ 0x120/0x1c0 net/can/af_can.c:696 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579 Por lo tanto, nos aseguramos de que los cambios de estado y las estructuras de datos mantenga la coherencia en el momento de recepci\u00f3n de la trama CAN agregando un spin_lock en isotp_rcv(). Esto soluciona el problema informado por syzkaller pero no afecta el funcionamiento en el mundo real."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10",
"versionEndExcluding": "5.10.101",
"matchCriteriaId": "576AFC93-F877-43B1-9500-6CF510FDE4D0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.24",
"matchCriteriaId": "866451F0-299E-416C-B0B8-AE6B33E62CCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "5.16.10",
"matchCriteriaId": "679523BA-1392-404B-AB85-F5A5408B1ECC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*",
"matchCriteriaId": "7BD5F8D9-54FA-4CB0-B4F0-CB0471FDDB2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*",
"matchCriteriaId": "E6E34B23-78B4-4516-9BD8-61B33F4AC49A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*",
"matchCriteriaId": "C030FA3D-03F4-4FB9-9DBF-D08E5CAC51AA"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/5b068f33bc8acfcfd5ea7992a2dafb30d89bad30",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7b53d2204ce79b27a878074a77d64f40ec21dbca",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c759040c1dd03954f650f147ae7175476d51314",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f90cc68f9f4b5d8585ad5d0a206a9d37ac299ef3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/5b068f33bc8acfcfd5ea7992a2dafb30d89bad30",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7b53d2204ce79b27a878074a77d64f40ec21dbca",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/7c759040c1dd03954f650f147ae7175476d51314",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/f90cc68f9f4b5d8585ad5d0a206a9d37ac299ef3",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2023/CVE-2023-38xx/CVE-2023-3891.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-3891",
"sourceIdentifier": "[email protected]",
"published": "2023-09-15T03:15:08.803",
"lastModified": "2024-11-21T08:18:18.213",
"lastModified": "2025-09-25T18:15:36.460",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -107,6 +107,10 @@
"Third Party Advisory"
]
},
{
"url": "https://github.com/lapce/lapce/releases/tag/v0.3.0",
"source": "[email protected]"
},
{
"url": "https://lapce.dev",
"source": "[email protected]",
CVE-2024/CVE-2024-128xx/CVE-2024-12847.json
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-12847",
"sourceIdentifier": "[email protected]",
"published": "2025-01-10T20:15:30.150",
"lastModified": "2025-01-10T20:15:30.150",
"lastModified": "2025-09-25T19:15:40.653",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -46,7 +46,11 @@
"description": [
{
"lang": "en",
"value": "CWE-288"
"value": "CWE-78"
},
{
"lang": "en",
"value": "CWE-306"
}
]
}
CVE-2024/CVE-2024-128xx/CVE-2024-12856.json
+6 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-12856",
"sourceIdentifier": "[email protected]",
"published": "2024-12-27T16:15:23.403",
"lastModified": "2025-09-19T19:04:56.827",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-25T19:15:41.487",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -47,6 +47,10 @@
{
"lang": "en",
"value": "CWE-78"
},
{
"lang": "en",
"value": "CWE-1392"
}
]
}
CVE-2024/CVE-2024-231xx/CVE-2024-23198.json
+97 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-23198",
"sourceIdentifier": "[email protected]",
"published": "2024-11-13T21:15:10.733",
"lastModified": "2024-11-15T14:00:09.720",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:25:21.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -95,10 +95,104 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*",
"versionEndExcluding": "23.40.0",
"matchCriteriaId": "F856E421-A54D-46C6-AC04-1DF74AC490C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:intel:proset\\/wireless_wifi:*:*:*:*:*:*:*:*",
"versionEndExcluding": "23.40.0",
"matchCriteriaId": "456CE50E-5E56-4B61-9792-D85F6747D9C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:killer_wi-fi_6_ax1650:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7E239C04-1D6B-4305-9340-BFEC3E54E19A"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:killer_wi-fi_6e_ax1675:-:*:*:*:*:*:*:*",
"matchCriteriaId": "35F09C95-25BD-440A-AD79-8510E54F8DD9"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:killer_wi-fi_6e_ax1690:-:*:*:*:*:*:*:*",
"matchCriteriaId": "95537444-5F18-49E1-91D4-AB24B29DF4FF"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:killer_wi-fi_7_be1750:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AB267163-2871-4963-81A5-9197B2172526"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_6_ax200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9D653F9C-5B2E-400F-8F50-BFE466F08F0E"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A0433774-9479-4A01-B697-1379AEA223C9"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:*",
"matchCriteriaId": "54323008-43E6-4A85-BB92-F2EF6ED8E57C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C90E6127-7D01-49CE-96EF-9F4CB5891373"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ADE89FD4-8B08-430E-976A-068DBF47F5F7"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wi-fi_7_be200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD602E23-9F96-4783-8B79-1267C7DAA65C"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wireless-ac_9260:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4900842A-56C4-4F09-BBD4-080EC7CEBF33"
},
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C7A5DD09-188E-4772-BBFD-3DCC776F4D55"
}
]
}
]
}
],
"references": [
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01108.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-409xx/CVE-2024-40998.json
+87 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-40998",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-12T13:15:20.857",
"lastModified": "2024-11-21T09:32:02.043",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:43:21.163",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,31 +15,109 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: ext4: arreglar ratelimit_state no inicializado->bloquear acceso en __ext4_fill_super() En la siguiente concurrencia accederemos al rs->lock no inicializado: ext4_fill_super ext4_register_sysfs // sysfs registrado msg_ratelimit_interval_ms // Otros procesos modificar rs->interval a // distinto de cero a trav\u00e9s de msg_ratelimit_interval_ms ext4_orphan_cleanup ext4_msg(sb, KERN_INFO, \"Errores en el sistema de archivos, \" __ext4_msg ___ratelimit(&(EXT4_SB(sb)->s_msg_ratelimit_state) if (!rs->interval) // hacer nada si el intervalo es 0 devuelve 1; ->s_msg_ratelimit_state , 5 * HZ, 10); raw_spin_lock_init(&rs->lock); // inicia rs->lock aqu\u00ed y obtiene el siguiente dump_stack: ==================== ===================================== INFORMACI\u00d3N: intentando registrar una clave no est\u00e1tica. El c\u00f3digo est\u00e1 bien pero necesita una anotaci\u00f3n de bloqueo, \u00bfo tal vez no inicializ\u00f3 este objeto antes de usarlo? apagando el validador de correcci\u00f3n de bloqueo. CPU: 12 PID: 753 Comunicaciones: montaje contaminado: GE 6.7.0-rc6-next-20231222 #504 [...] Seguimiento de llamadas: dump_stack_lvl+0xc5/0x170 dump_stack+0x18/0x30 Register_lock_class+0x740/0x7c0 __lock_acquire+0x69/ 0x13a0 lock_acquire+0x120/0x450 _raw_spin_trylock+0x98/0xd0 ___ratelimit+0xf6/0x220 __ext4_msg+0x7f/0x160 [ext4] ext4_orphan_cleanup+0x665/0x740 [ext4] 0x2b10 [ext4] text4_fill_super+0x14d/0x360 [ext4] [. ..] ================================================= ========== Normalmente el intervalo es 0 hasta que se inicializa s_msg_ratelimit_state, por lo que ___ratelimit() no hace nada. Pero el registro de sysfs precede a la inicializaci\u00f3n de rs->lock, por lo que es posible cambiar rs->interval a un valor distinto de cero a trav\u00e9s de la interfaz msg_ratelimit_interval_ms de sysfs mientras rs->lock no est\u00e1 inicializado, y luego una llamada a ext4_msg desencadena el problema al accediendo a un rs->lock no inicializado. Por lo tanto, registre sysfs despu\u00e9s de que se completen todas las inicializaciones para evitar este tipo de problemas."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-908"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.36",
"matchCriteriaId": "97F8F699-7041-44A4-9087-0E1FFC0543C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.9.7",
"matchCriteriaId": "0A047AF2-94AC-4A3A-B32D-6AB930D8EF1C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/23afcd52af06880c6c913a0ad99022b8937b575c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/645267906944a9aeec9d5c56ee24a9096a288798",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b4b4fda34e535756f9e774fb2d09c4537b7dfd1c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/23afcd52af06880c6c913a0ad99022b8937b575c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/645267906944a9aeec9d5c56ee24a9096a288798",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b4b4fda34e535756f9e774fb2d09c4537b7dfd1c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2024/CVE-2024-410xx/CVE-2024-41003.json
+93 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-41003",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-12T13:15:21.180",
"lastModified": "2024-11-21T09:32:02.683",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:39:57.427",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,23 +15,109 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: bpf: Fix reg_set_min_max corrupci\u00f3n de fake_reg Juan inform\u00f3 que despu\u00e9s de hacer algunos cambios al buzzer [0] e implementar una nueva estrategia de fuzzing guiada por cobertura, notaron lo siguiente en una de las sondas : [...] 13: (79) r6 = *(u64 *)(r0 +0) ; R0=map_value(ks=4,vs=8) R6_w=escalar() 14: (b7) r0 = 0 ; R0_w=0 15: (b4) w0 = -1 ; R0_w=0xffffffff 16: (74) w0 >>= 1 ; R0_w=0x7ffffffff 17: (5c) w6 &= w0 ; R0_w=0x7fffffff R6_w=escalar(smin=smin32=0,smax=umax=umax32=0x7fffffff,var_off=(0x0; 0x7fffffff)) 18: (44) w6 |= 2 ; R6_w=scalar(smin=umin=smin32=umin32=2,smax=umax=umax32=0x7fffffff,var_off=(0x2; 0x7ffffffd)) 19: (56) if w6 != 0x7ffffffd goto pc+1 VIOLACI\u00d3N DE INVARIANTES REG (true_reg2) : violaci\u00f3n de l\u00edmites de rango u64=[0x7fffffff, 0x7ffffffd] s64=[0x7fffffff, 0x7ffffffd] u32=[0x7fffffff, 0x7ffffffd] s32=[0x7fffffff, 0x7ffffffd] var_off=(0x7fffffff, 0x0) INVARIANTES DEL REG (false_reg1): violaci\u00f3n de los l\u00edmites de rango u64 =[0x7fffffff, 0x7ffffffd] s64=[0x7fffffff, 0x7ffffffd] u32=[0x7fffffff, 0x7ffffffd] s32=[0x7fffffff, 0x7ffffffd] var_off=(0x7fffffff, 0x0) VIOLACI\u00d3N DE INVARIANTES REG (false_reg2): st tnum no est\u00e1 sincronizado con los l\u00edmites de rango u64 =[0x0, 0xffffffffffffffff] s64=[0x80000000000000000, 0x7ffffffffffffff] u32=[0x0, 0xffffffff] s32=[0x80000000, 0x7ffffff] var_off=(0x7ffffffff, 0x0) 19: 6_w=0x7fffffff 20: (95) salida del 19 al 21: R0=0x7fffffff R6=escalar(smin=umin=smin32=umin32=2,smax=umax=smax32=umax32=0x7ffffffe,var_off=(0x2; 0x7ffffffd)) R7=map_ptr(ks=4,vs=8) R9=ctx () R10=fp0 fp-24=map_ptr(ks=4,vs=8) fp-40=mmmmmmmm 21: R0=0x7fffffff R6=escalar(smin=umin=smin32=umin32=2,smax=umax=smax32=umax32 =0x7ffffffe,var_off=(0x2; 0x7ffffffd)) R7=map_ptr(ks=4,vs=8) R9=ctx() R10=fp0 fp-24=map_ptr(ks=4,vs=8) fp-40=mmmmmmmm 21: (14) w6 -= 2147483632; R6_w=scalar(smin=umin=umin32=2,smax=umax=0xffffffff,smin32=0x80000012,smax32=14,var_off=(0x2; 0xfffffffd)) 22: (76) si w6 s>= 0xe goto pc+1; R6_w=scalar(smin=umin=umin32=2,smax=umax=0xffffffff,smin32=0x80000012,smax32=13,var_off=(0x2; 0xfffffffd)) 23: (95) salida de 22 a 24: R0=0x7fffffff R6_w= 14 R7=map_ptr(ks=4,vs=8) R9=ctx() R10=fp0 fp-24=map_ptr(ks=4,vs=8) fp-40=mmmmmmmm 24: R0=0x7ffffffff R6_w=14 R7= map_ptr(ks=4,vs=8) R9=ctx() R10=fp0 fp-24=map_ptr(ks=4,vs=8) fp-40=mmmmmmmm 24: (14) w6 -= 14 ; R6_w=0 [...] Lo que se puede ver aqu\u00ed es una violaci\u00f3n de invariante de registro en la l\u00ednea 19. Despu\u00e9s del binario o en la l\u00ednea 18, el verificador sabe que el bit 2 est\u00e1 establecido pero no sabe nada sobre el resto del contenido que fue cargado desde un valor de mapa, es decir, el rango es [2,0x7fffffff] con var_off=(0x2; 0x7ffffffd). Cuando en la l\u00ednea 19 el verificador analiza la rama, divide los estados de registro en reg_set_min_max() en los registros de la rama verdadera (true_reg1, true_reg2) y los registros de la rama falsa (false_reg1, false_reg2). Dado que la prueba es w6! = 0x7ffffffd, src_reg es una constante conocida. Internamente, el verificador crea un registro \"falso\" inicializado como escalar al valor de 0x7ffffffd y luego lo pasa a reg_set_min_max(). Ahora, para la l\u00ednea 19, es matem\u00e1ticamente imposible tomar la rama falsa de este programa, sin embargo, el verificador la analiza. Es imposible porque el segundo bit de r6 se establecer\u00e1 debido a la operaci\u00f3n anterior o y la constante en la condici\u00f3n tiene ese bit sin configurar (hex(fd) == binario(1111 1101). Cuando el verificador analiza por primera vez el valor falso/ca\u00edda -a trav\u00e9s de la rama, calcular\u00e1 una intersecci\u00f3n entre el var_off de r6 y la constante. Esto se debe a que el verificador crea un registro \"falso\" inicializado con el valor de la constante. El resultado de la intersecci\u00f3n luego refina ambos registros en regs_refine_cond_op(): [...] t = tnum_intersect(tnum_subreg(reg1->var_off), tnum_subreg(reg2->var_off));"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.8",
"versionEndExcluding": "6.9.7",
"matchCriteriaId": "62FCD844-AA0C-433E-AE93-5B8BEFF587A0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*",
"matchCriteriaId": "2EBB4392-5FA6-4DA9-9772-8F9C750109FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*",
"matchCriteriaId": "331C2F14-12C7-45D5-893D-8C52EE38EA10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3173713D-909A-4DD3-9DD4-1E171EB057EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*",
"matchCriteriaId": "79F18AFA-40F7-43F0-BA30-7BDB65F918B9"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/41e8ab428a9964df378fa45760a660208712145b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92424801261d1564a0bb759da3cf3ccd69fdf5a2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/41e8ab428a9964df378fa45760a660208712145b",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/92424801261d1564a0bb759da3cf3ccd69fdf5a2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2024/CVE-2024-410xx/CVE-2024-41005.json
+132 -15
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-41005",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-12T13:15:21.310",
"lastModified": "2024-11-21T09:32:02.930",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:38:37.303",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,55 +15,172 @@
"value": "En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: netpoll: Corrige condici\u00f3n de ejecuci\u00f3n en netpoll_owner_active KCSAN detect\u00f3 una condici\u00f3n de ejecuci\u00f3n en netpoll: ERROR: KCSAN: data-race en net_rx_action / netpoll_send_skb escribe (marcado) en 0xffff8881164168b0 de 4 bytes por interrupci\u00f3n en CPU 10: net_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822) le\u00eddo en 0xffff8881164168b0 de 4 bytes por tarea 1 en la CPU 2 : netpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393) netpoll_send_udp (net/core/netpoll.c:?) valor cambiado: 0x0000000a -> 0xffffffff Esto sucede porque netpoll_owner_active() necesita verificar si la CPU actual es la propietaria del bloqueo, tocando napi->poll_owner de forma no at\u00f3mica. El campo ->poll_owner contiene la CPU actual que mantiene el bloqueo. Utilice una lectura at\u00f3mica para comprobar si el propietario de la encuesta es la CPU actual."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.221",
"matchCriteriaId": "C6FAA8A5-3F50-4B9F-9EEA-8430F59C03AB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.11",
"versionEndExcluding": "5.15.162",
"matchCriteriaId": "10A39ACC-3005-40E8-875C-98A372D1FFD5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.96",
"matchCriteriaId": "61E887B4-732A-40D2-9983-CC6F281EBFB7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.36",
"matchCriteriaId": "E1046C95-860A-45B0-B718-2B29F65BFF10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.9.7",
"matchCriteriaId": "0A047AF2-94AC-4A3A-B32D-6AB930D8EF1C"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3f1a155950a1685ffd0fd7175b3f671da8771f3d",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/43c0ca793a18578a0f5b305dd77fcf7ed99f1265",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/96826b16ef9c6568d31a1f6ceaa266411a46e46c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a130e7da73ae93afdb4659842267eec734ffbd57",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c2e6a872bde9912f1a7579639c5ca3adf1003916",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/efd29cd9c7b8369dfc7bcb34637e6bf1a188aa8e",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2024/CVE-2024-410xx/CVE-2024-41051.json
+138 -11
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-41051",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2024-07-29T15:15:13.327",
"lastModified": "2024-11-21T09:32:08.613",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T19:49:59.627",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,39 +15,166 @@
"value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cachefiles: espere a que finalice ondemand_object_worker al soltar el objeto Al poner en cola ondemand_object_worker() para volver a abrir el objeto, cachefiles_object no est\u00e1 fijado. El objeto cachefiles_object se puede liberar cuando la solicitud de lectura pendiente se completa intencionalmente y se desmontan los erofs relacionados. Si ondemand_object_worker() se ejecuta despu\u00e9s de liberar el objeto, incurrir\u00e1 en un problema de use after free como se muestra a continuaci\u00f3n. proceso A procesos B proceso C proceso D cachefiles_ondemand_send_req() // env\u00eda una solicitud de lectura X // espera a que se complete // cierra ondemand fd cachefiles_ondemand_fd_release() // establece el objeto como CERRAR cachefiles_ondemand_daemon_read() // establece el objeto como REAPERTURA queue_work(fscache_wq , &info->ondemand_work) // cerrar /dev/cachefiles cachefiles_daemon_release cachefiles_flush_reqs complete(&req->done) // leer la solicitud X est\u00e1 completa // desmontar el erofs fs cachefiles_put_object() // el objeto ser\u00e1 liberado cachefiles_ondemand_deinit_obj_info() kmem_cache_free(object ) // tanto la informaci\u00f3n como el objeto se liberan ondemand_object_worker() Cuando se suelta un objeto, ya no es necesario volver a abrirlo, as\u00ed que use cancel_work_sync() para cancelar o espere a que finalice ondemand_object_worker()."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.95",
"versionEndExcluding": "6.1.100",
"matchCriteriaId": "9660509A-A7A9-4DF8-9C10-10EB2BE6B935"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.6.35",
"versionEndExcluding": "6.6.41",
"matchCriteriaId": "18E36DFA-0FEF-4794-B395-77264588DD12"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.8",
"versionEndExcluding": "6.9.10",
"matchCriteriaId": "6FAC1A24-181A-4DB7-801D-4BDF1B4E4116"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*",
"matchCriteriaId": "2EBB4392-5FA6-4DA9-9772-8F9C750109FA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*",
"matchCriteriaId": "331C2F14-12C7-45D5-893D-8C52EE38EA10"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*",
"matchCriteriaId": "3173713D-909A-4DD3-9DD4-1E171EB057EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*",
"matchCriteriaId": "79F18AFA-40F7-43F0-BA30-7BDB65F918B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*",
"matchCriteriaId": "BD973AA4-A789-49BD-8D57-B2846935D3C7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc6:*:*:*:*:*:*",
"matchCriteriaId": "8F3E9E0C-AC3E-4967-AF80-6483E8AB0078"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:6.10:rc7:*:*:*:*:*:*",
"matchCriteriaId": "11AF4CB9-F697-4EA4-8903-8F9417EFDA8E"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/12e009d60852f7bce0afc373ca0b320f14150418",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b26525b2183632f16a3a4108fe6a4bfa8afac6ed",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d3179bae72b1b5e555ba839d6d9f40a350a4d78a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ec9289369259d982e735a71437e32e6b4035290c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/12e009d60852f7bce0afc373ca0b320f14150418",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/b26525b2183632f16a3a4108fe6a4bfa8afac6ed",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/d3179bae72b1b5e555ba839d6d9f40a350a4d78a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/ec9289369259d982e735a71437e32e6b4035290c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
}
]
}
CVE-2024/CVE-2024-43xx/CVE-2024-4350.json
+2 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-4350",
"sourceIdentifier": "ff5b8ace-8b95-4078-9743-eac1ca5451de",
"published": "2024-08-12T13:38:36.460",
"lastModified": "2025-01-17T22:15:28.360",
"lastModified": "2025-09-25T19:15:41.670",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -90,7 +90,7 @@
"description": [
{
"lang": "en",
"value": "CWE-20"
"value": "CWE-79"
}
]
},
CVE-2024/CVE-2024-61xx/CVE-2024-6127.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-6127",
"sourceIdentifier": "[email protected]",
"published": "2024-06-27T20:15:23.093",
"lastModified": "2024-11-21T09:49:01.177",
"lastModified": "2025-09-25T19:15:41.863",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -47,6 +47,10 @@
{
"lang": "en",
"value": "CWE-22"
},
{
"lang": "en",
"value": "CWE-434"
}
]
}
CVE-2024/CVE-2024-73xx/CVE-2024-7314.json
+3 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-7314",
"sourceIdentifier": "[email protected]",
"published": "2024-08-02T17:16:41.400",
"lastModified": "2024-09-17T15:45:01.970",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-25T19:15:42.040",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -66,7 +66,7 @@
"description": [
{
"lang": "en",
"value": "CWE-280"
"value": "CWE-288"
}
]
},
CVE-2024/CVE-2024-73xx/CVE-2024-7394.json
+2 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-7394",
"sourceIdentifier": "ff5b8ace-8b95-4078-9743-eac1ca5451de",
"published": "2024-08-08T17:15:20.023",
"lastModified": "2025-01-21T00:15:25.357",
"lastModified": "2025-09-25T19:15:42.220",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -90,7 +90,7 @@
"description": [
{
"lang": "en",
"value": "CWE-20"
"value": "CWE-79"
}
]
},
CVE-2024/CVE-2024-85xx/CVE-2024-8517.json
+7 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8517",
"sourceIdentifier": "[email protected]",
"published": "2024-09-06T16:15:03.793",
"lastModified": "2024-09-18T18:05:03.553",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-25T19:15:42.373",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -66,7 +66,11 @@
"description": [
{
"lang": "en",
"value": "CWE-646"
"value": "CWE-73"
},
{
"lang": "en",
"value": "CWE-78"
}
]
},
CVE-2024/CVE-2024-89xx/CVE-2024-8956.json
+3 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8956",
"sourceIdentifier": "[email protected]",
"published": "2024-09-17T20:15:07.287",
"lastModified": "2025-09-09T14:09:28.000",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-25T19:15:42.553",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -70,7 +70,7 @@
"description": [
{
"lang": "en",
"value": "CWE-287"
"value": "CWE-306"
}
]
},
CVE-2025/CVE-2025-105xx/CVE-2025-10540.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-10540",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-09-25T14:15:42.203",
"lastModified": "2025-09-25T14:15:42.203",
"lastModified": "2025-09-25T19:15:42.747",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
CVE-2025/CVE-2025-105xx/CVE-2025-10541.json
+29 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-10541",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-09-25T15:16:09.270",
"lastModified": "2025-09-25T15:16:09.270",
"lastModified": "2025-09-25T19:15:42.917",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\\sysupdate\\ directory during startup. Because any local user can create and write to this directory, an attacker can place malicious DLLs or executables in it. Upon service restart, the files are moved to the application\u2019s installation path and executed with SYSTEM privileges, leading to privilege escalation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
@@ -28,6 +51,10 @@
{
"url": "https://r.sec-consult.com/imonitor",
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
},
{
"url": "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-105xx/CVE-2025-10542.json
+29 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-10542",
"sourceIdentifier": "551230f0-3615-47bd-b7cc-93e92e730bbf",
"published": "2025-09-25T15:16:09.487",
"lastModified": "2025-09-25T15:16:09.487",
"lastModified": "2025-09-25T19:15:43.077",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client\u2019s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf",
@@ -28,6 +51,10 @@
{
"url": "https://r.sec-consult.com/imonitor",
"source": "551230f0-3615-47bd-b7cc-93e92e730bbf"
},
{
"url": "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10780.json
+80 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10780",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T04:15:48.357",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:58:28.677",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -118,32 +138,84 @@
"value": "CWE-89"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:codeastro:simple_pharmacy_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E881A486-CD71-43FF-B6DD-5DE535FA796C"
}
]
}
]
}
],
"references": [
{
"url": "https://codeastro.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/yihaofuweng/cve/issues/26",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325136",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325136",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653704",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/yihaofuweng/cve/issues/26",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10785.json
+76 -10
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10785",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T06:15:35.040",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:22:45.970",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,34 +140,80 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:grocery_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CBEC9992-D56F-4AA8-9DBB-55996A41F263"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/zzb1388/cve/issues/84",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://github.com/zzb1388/cve/issues/89",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325141",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325141",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653784",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653786",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10786.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10786",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T07:15:40.520",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:22:07.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:grocery_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CBEC9992-D56F-4AA8-9DBB-55996A41F263"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/zzb1388/cve/issues/83",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325142",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325142",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653785",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10788.json
+68 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10788",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T08:15:34.100",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:21:49.740",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fabian:online_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A239DB3D-0C8F-46E2-BF53-5EE5BA3DBC9D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/peri0d/my_cve/blob/main/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteroominventory.php-sql-injection.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325145",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325145",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653877",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/peri0d/my_cve/blob/main/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteroominventory.php-sql-injection.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10789.json
+68 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10789",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T08:15:34.310",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:19:29.810",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fabian:online_hotel_reservation_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A239DB3D-0C8F-46E2-BF53-5EE5BA3DBC9D"
}
]
}
]
}
],
"references": [
{
"url": "https://gold-textbook-8ff.notion.site/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteslide-php-sql-injection-26d85e97f353807585d7e600b31d339e",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325146",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325146",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653881",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://gold-textbook-8ff.notion.site/Online-Hotel-Reservation-System-In-PHP-With-Source-Code-deleteslide-php-sql-injection-26d85e97f353807585d7e600b31d339e",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10790.json
+70 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10790",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T09:15:37.153",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:19:05.383",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,72 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oretnom23:simple_forum\\/discussion_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "67DE0C76-FB08-45C9-A3B1-315B46E77E84"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/qcycop0101-hash/CVE/issues/26",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325147",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325147",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.653991",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/qcycop0101-hash/CVE/issues/26",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10791.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10791",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T09:15:37.423",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:17:53.663",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fabian:online_bidding_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "41FE5C5F-8DE9-41F0-B9AA-29EBE2BC199C"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/K1nakoo/cve/blob/main/26/report.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325148",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325148",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654046",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10793.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10793",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T10:15:36.563",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:17:27.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fabianros:e-commerce_website:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FDE3B6CB-3D17-47F4-B7AC-3BDB090B5AFB"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/K1nakoo/cve/blob/main/31/report.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325150",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325150",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654058",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10794.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10794",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T11:15:34.060",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:16:53.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:car_rental_project:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "86D61DCE-27EB-4AFB-BDF1-2BC1C44F721D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/tddgns/cve/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://phpgurukul.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://vuldb.com/?ctiid.325151",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325151",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654067",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10795.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10795",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T11:15:34.787",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:16:38.177",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:fabian:online_bidding_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "41FE5C5F-8DE9-41F0-B9AA-29EBE2BC199C"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/jackhong1236/cve_0/blob/main/12/tmp25/report.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325152",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325152",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654077",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10796.json
+70 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10796",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T12:15:34.287",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:16:10.130",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,72 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2AC27A1-0F47-463F-8151-07773610C389"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/lishuyuan12138/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325153",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325153",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654090",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/lishuyuan12138/CVE/issues/1",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10797.json
+71 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10797",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T13:16:00.770",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:15:53.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,72 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2AC27A1-0F47-463F-8151-07773610C389"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/Waibibabo1239/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325154",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325154",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654091",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://github.com/Waibibabo1239/CVE/issues/1",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10798.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10798",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T13:16:00.970",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:15:31.297",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2AC27A1-0F47-463F-8151-07773610C389"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/598600/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325155",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325155",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654092",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-107xx/CVE-2025-10799.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10799",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T13:16:01.160",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:15:17.383",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2AC27A1-0F47-463F-8151-07773610C389"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/yangzhenyu6/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325156",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Press/Media Coverage",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325156",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654104",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10808.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10808",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T18:15:41.790",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:07.200",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:farm_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F8394C81-D28A-43B4-9A73-1ECE9B552A5B"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/EvnYeung/cve/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325166",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325166",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654382",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10809.json
+70 -9
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10809",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T18:15:41.990",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:26.233",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,71 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:online_learning_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "06440BC7-E941-451C-83B8-0C1E1E5E336C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/luyisi-7/CVE/issues/2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325167",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325167",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654434",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.657034",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10810.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10810",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T19:15:39.713",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:13:55.290",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:online_learning_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "06440BC7-E941-451C-83B8-0C1E1E5E336C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/luyisi-7/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325168",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325168",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654435",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10811.json
+65 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10811",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T19:15:40.430",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:13:43.040",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,63 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:angeljudesuarez:hostel_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "A2AC27A1-0F47-463F-8151-07773610C389"
}
]
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/yihaofuweng/cve/issues/27",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325169",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325169",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654436",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10815.json
+55 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10815",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T21:15:59.380",
"lastModified": "2025-09-22T21:22:16.313",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:07:11.053",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -120,26 +120,74 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:tenda:ac20_firmware:*:*:*:*:*:*:*:*",
"versionEndIncluding": "16.03.08.12",
"matchCriteriaId": "50E492C0-7E5C-4678-B2D7-651FA13A58BE"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:tenda:ac20:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F7CEE4E-8C63-4ED5-9AE1-A1CFEA555E7C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Juana-2u/Tenda-AC20",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Not Applicable"
]
},
{
"url": "https://vuldb.com/?ctiid.325173",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325173",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654460",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10817.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10817",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T22:15:42.857",
"lastModified": "2025-09-24T18:11:34.720",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:09:10.033",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:online_learning_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "06440BC7-E941-451C-83B8-0C1E1E5E336C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/244556089/cve/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325175",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325175",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654545",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10825.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10825",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T01:15:36.707",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:56.910",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D6C611EE-FC14-4E00-94F8-477AFA4BC814"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20view-appointment.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325182",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325182",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654379",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10826.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10826",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T01:15:36.900",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:48.440",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:online_beauty_parlor_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "D6C611EE-FC14-4E00-94F8-477AFA4BC814"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20sales-reports-detail.php.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325183",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325183",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.654384",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10827.json
+61 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10827",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T01:15:37.087",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:40.567",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
@@ -120,22 +140,56 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpjabbers:restaurant_menu_maker:1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B9F8288C-9263-4205-A9F8-0E77A1812804"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/485961590/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325184",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325184",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.655884",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10828.json
+64 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10828",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T02:15:45.190",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:27.253",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,26 +140,62 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B88D324D-B780-4D8D-BE43-829227D2808F"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/para-paradise/webray.com.cn/blob/main/Pet%20Grooming%20Management/SourceCodester%20Pet%20Grooming%20Management%20Software%20edit.php%20sql%20injection%20Vulnerability.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325185",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325185",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.655902",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10829.json
+70 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10829",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T02:15:46.233",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:16.583",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,72 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:computer_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "976C8EBF-F13D-4668-A272-94223CE5FE49"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Michsta/CVE/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325186",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325186",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.655906",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/Michsta/CVE/issues/1",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10830.json
+70 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10830",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T02:15:46.460",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:08:05.517",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,72 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:computer_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "976C8EBF-F13D-4668-A272-94223CE5FE49"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Michsta/CVE/issues/2",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325187",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325187",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.655993",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/Michsta/CVE/issues/2",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10831.json
+69 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10831",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T02:15:46.647",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:07:54.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,71 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:campcodes:computer_sales_and_inventory_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "976C8EBF-F13D-4668-A272-94223CE5FE49"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Michsta/CVE/issues/3",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325188",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://vuldb.com/?id.325188",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.656016",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.campcodes.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/Michsta/CVE/issues/3",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10832.json
+68 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10832",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T02:15:46.833",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:07:41.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,30 +140,70 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mayurik:pet_grooming_management_software:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B88D324D-B780-4D8D-BE43-829227D2808F"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/lalalalalalala555/Pet-grooming-management-v1.0-sql-injection/blob/main/report.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://vuldb.com/?ctiid.325189",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325189",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.656004",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/lalalalalalala555/Pet-grooming-management-v1.0-sql-injection/blob/main/report.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-108xx/CVE-2025-10833.json
+61 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-10833",
"sourceIdentifier": "[email protected]",
"published": "2025-09-23T03:15:35.050",
"lastModified": "2025-09-24T18:11:24.520",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:07:32.070",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
@@ -76,6 +76,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -120,22 +140,56 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:1000projects:bookstore_management_system:1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F0449A3F-C6E8-468B-ABBC-9932801A9EEE"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/xingrenlvke/cve/issues/1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Issue Tracking"
]
},
{
"url": "https://vuldb.com/?ctiid.325190",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?id.325190",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://vuldb.com/?submit.656419",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10958.json
+153
View File
@@ -0,0 +1,153 @@
{
"id": "CVE-2025-10958",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:36.940",
"lastModified": "2025-09-25T18:15:36.940",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. This manipulation of the argument macAddr causes command injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/AddMac.md",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/AddMac.md#poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325826",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325826",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652768",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/AddMac.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/AddMac.md#poc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10959.json
+153
View File
@@ -0,0 +1,153 @@
{
"id": "CVE-2025-10959",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:37.163",
"lastModified": "2025-09-25T18:15:37.163",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmz_flag leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DMZ.md",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DMZ.md#poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325827",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325827",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652769",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DMZ.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DMZ.md#poc",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10960.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10960",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:37.367",
"lastModified": "2025-09-25T18:15:37.367",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DeleteMac.md",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/DeleteMac.md#poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325828",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325828",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652780",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10961.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-10961",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:37.550",
"lastModified": "2025-09-25T18:15:37.550",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to command injection. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:A/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 5.2,
"accessVector": "ADJACENT_NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 5.1,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/Delete_Mac_list.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325829",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325829",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652781",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10962.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10962",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T19:15:43.460",
"lastModified": "2025-09-25T19:15:43.460",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac_5g leads to command injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/SetName.md",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/SetName.md#poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325830",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325830",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652782",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-109xx/CVE-2025-10963.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10963",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T19:15:43.667",
"lastModified": "2025-09-25T19:15:43.667",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"baseScore": 6.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"references": [
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md",
"source": "[email protected]"
},
{
"url": "https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md#poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.325831",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.325831",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.652784",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-13xx/CVE-2025-1398.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1398",
"sourceIdentifier": "[email protected]",
"published": "2025-03-17T15:15:43.243",
"lastModified": "2025-03-31T16:15:22.463",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:25.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,43 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_desktop:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.11.0",
"matchCriteriaId": "654D0A41-6B56-4C02-BCD2-D112E1CA894B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
"matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-15xx/CVE-2025-1558.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-1558",
"sourceIdentifier": "[email protected]",
"published": "2025-03-24T15:15:16.060",
"lastModified": "2025-03-27T16:44:44.143",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:35.460",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.25.1",
"matchCriteriaId": "514C31F2-D40F-4163-B83A-47CEE257D8E2"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-200xx/CVE-2025-20036.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-20036",
"sourceIdentifier": "[email protected]",
"published": "2025-01-15T17:15:18.950",
"lastModified": "2025-01-15T17:15:18.950",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:06.943",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.23.0",
"matchCriteriaId": "D0CB15D9-251D-4872-99D7-27AD709FBF25"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-203xx/CVE-2025-20333.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-20333",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T16:15:32.073",
"lastModified": "2025-09-25T16:15:32.073",
"lastModified": "2025-09-25T18:15:38.020",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -51,6 +51,10 @@
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB",
"source": "[email protected]"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-203xx/CVE-2025-20362.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-20362",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T16:15:32.280",
"lastModified": "2025-09-25T16:15:32.280",
"lastModified": "2025-09-25T18:15:38.167",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
@@ -38,7 +38,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -51,6 +51,10 @@
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW",
"source": "[email protected]"
},
{
"url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-210xx/CVE-2025-21083.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-21083",
"sourceIdentifier": "[email protected]",
"published": "2025-01-15T17:15:19.393",
"lastModified": "2025-01-15T17:15:19.393",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:15.380",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:mattermost_mobile:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.23.0",
"matchCriteriaId": "D0CB15D9-251D-4872-99D7-27AD709FBF25"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-262xx/CVE-2025-26278.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-26278",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T14:15:43.873",
"lastModified": "2025-09-25T14:15:43.873",
"lastModified": "2025-09-25T19:15:44.380",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1321"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/tariqhawis/ad92d5e683f3a5d83e0629955ff42ad7",
CVE-2025/CVE-2025-291xx/CVE-2025-29155.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-29155",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:39.960",
"lastModified": "2025-09-25T18:15:39.960",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint"
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/HouqiyuA/4efd1aac7c7c7ab0cd5db48d62541a74",
"source": "[email protected]"
},
{
"url": "https://github.com/swagger-api/swagger-petstore",
"source": "[email protected]"
},
{
"url": "https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-291xx/CVE-2025-29156.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-29156",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T19:15:44.540",
"lastModified": "2025-09-25T19:15:44.540",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet"
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/HouqiyuA/9d2c3f0ba075d01631aff879546e419c",
"source": "[email protected]"
},
{
"url": "https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml",
"source": "[email protected]"
},
{
"url": "https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2Fswagger-api%2Fswagger-petstore&sa=D&sntz=1&usg=AOvVaw0bPYxOZ-XKNAbTj4h0EOMD",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-291xx/CVE-2025-29157.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-29157",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T19:15:44.667",
"lastModified": "2025-09-25T19:15:44.667",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name (default) and server version"
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/HouqiyuA/3c36f78e8de9f6a3cfb0959477c07443",
"source": "[email protected]"
},
{
"url": "https://github.com/swagger-api/swagger-petstore",
"source": "[email protected]"
},
{
"url": "https://petstore3.swagger.io/#/pet/updatePet",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34227.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-34227",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T17:15:38.467",
"lastModified": "2025-09-25T17:15:38.467",
"lastModified": "2025-09-25T19:15:45.650",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -77,6 +77,10 @@
{
"url": "https://www.nagios.com/products/security/",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/nagios-xi-config-wizard-auth-command-injection",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-440xx/CVE-2025-44001.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-44001",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.467",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:04:50.753",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-440xx/CVE-2025-44004.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-44004",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.623",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:53:07.317",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-461xx/CVE-2025-46148.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46148",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T15:16:12.007",
"lastModified": "2025-09-25T15:16:12.007",
"lastModified": "2025-09-25T19:15:45.800",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
CVE-2025/CVE-2025-461xx/CVE-2025-46149.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46149",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T15:16:12.153",
"lastModified": "2025-09-25T15:16:12.153",
"lastModified": "2025-09-25T19:15:45.960",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
CVE-2025/CVE-2025-461xx/CVE-2025-46150.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46150",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T15:16:12.303",
"lastModified": "2025-09-25T15:16:12.303",
"lastModified": "2025-09-25T19:15:46.133",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"references": [
{
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
CVE-2025/CVE-2025-461xx/CVE-2025-46152.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46152",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T15:16:12.470",
"lastModified": "2025-09-25T15:16:12.470",
"lastModified": "2025-09-25T19:15:46.300",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the \"other\" argument."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
CVE-2025/CVE-2025-461xx/CVE-2025-46153.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-46153",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T15:16:12.603",
"lastModified": "2025-09-25T15:16:12.603",
"lastModified": "2025-09-25T19:15:46.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallback_random=True."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1176"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a",
CVE-2025/CVE-2025-487xx/CVE-2025-48707.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-48707",
"sourceIdentifier": "[email protected]",
"published": "2025-09-25T18:15:42.627",
"lastModified": "2025-09-25T18:15:42.627",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing."
}
],
"metrics": {},
"references": [
{
"url": "https://advisories.stormshield.eu/2025-003/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-487xx/CVE-2025-48731.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48731",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:27.953",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:55:22.210",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-521xx/CVE-2025-52159.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-52159",
"sourceIdentifier": "[email protected]",
"published": "2025-09-19T20:15:39.453",
"lastModified": "2025-09-22T21:23:01.543",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:34:27.353",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*",
"matchCriteriaId": "9DBB8D21-3335-47FC-841F-E3FED00617CF"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/quarter77/PPress-CMS-session-forgery-SSTI-vulnerability-leads-to-remote-command-execution",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-52159%20Details.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-529xx/CVE-2025-52931.json
+3 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52931",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:28.637",
"lastModified": "2025-09-25T17:41:55.073",
"lastModified": "2025-09-25T18:06:35.870",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
@@ -60,9 +60,9 @@
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost*:*:*",
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "E5253832-0EC8-4514-BA53-F31294021533"
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
CVE-2025/CVE-2025-535xx/CVE-2025-53514.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53514",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.473",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:55:36.553",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-538xx/CVE-2025-53857.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53857",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.603",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:55:50.410",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-539xx/CVE-2025-53910.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53910",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.747",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T18:56:23.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-543xx/CVE-2025-54309.json
+11 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54309",
"sourceIdentifier": "[email protected]",
"published": "2025-07-18T19:15:25.353",
"lastModified": "2025-09-25T17:15:38.620",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-25T18:03:51.720",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -113,7 +113,7 @@
"url": "https://www.crushftp.com/crush11wiki/Wiki.jsp?page=CompromiseJuly2025",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
"Vendor Advisory"
]
},
{
@@ -125,11 +125,17 @@
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-54309-detect-crushftp-vulnerability",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-54309-mitigate-crushftp-vulnerability",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-544xx/CVE-2025-54458.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54458",
"sourceIdentifier": "[email protected]",
"published": "2025-08-11T19:15:29.940",
"lastModified": "2025-08-12T14:25:33.177",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:15:04.600",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,10 +51,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mattermost:confluence:*:*:*:*:*:mattermost:*:*",
"versionEndExcluding": "1.5.0",
"matchCriteriaId": "FA975409-AB8C-4894-A040-D7681CE73598"
}
]
}
]
}
],
"references": [
{
"url": "https://mattermost.com/security-updates",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-547xx/CVE-2025-54761.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54761",
"sourceIdentifier": "[email protected]",
"published": "2025-09-19T20:15:39.580",
"lastModified": "2025-09-22T21:23:01.543",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:34:15.797",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -55,14 +55,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*",
"matchCriteriaId": "9DBB8D21-3335-47FC-841F-E3FED00617CF"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-54761%20Details.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/yandaozi/PPress/releases/tag/v0.0.9-beta",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
}
]
}
CVE-2025/CVE-2025-548xx/CVE-2025-54815.json
+28 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-54815",
"sourceIdentifier": "[email protected]",
"published": "2025-09-19T20:15:39.710",
"lastModified": "2025-09-22T21:23:01.543",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:33:57.900",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,38 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:yandaozi:ppress:0.0.9:beta:*:*:*:*:*:*",
"matchCriteriaId": "9DBB8D21-3335-47FC-841F-E3FED00617CF"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/quarter77/PPress-CMS_vulnerability_chain_details/blob/main/CVE-2025-54815%20Details.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/yandaozi/PPress/releases/tag/v0.0.9-beta",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
}
]
}
CVE-2025/CVE-2025-559xx/CVE-2025-55910.json
+25 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55910",
"sourceIdentifier": "[email protected]",
"published": "2025-09-19T16:15:45.780",
"lastModified": "2025-09-22T21:23:01.543",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:34:47.980",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,32 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:cmseasy:cmseasy:*:*:*:*:*:*:*:*",
"versionEndIncluding": "7.7.8.0",
"matchCriteriaId": "8993C936-C7AE-4E84-B3EC-74FC5F19375D"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Y4y17/CVE/blob/main/CMSEasy/Arbitrary%20file%20deletion%20vulnerability.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-559xx/CVE-2025-55911.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55911",
"sourceIdentifier": "[email protected]",
"published": "2025-09-18T15:15:38.083",
"lastModified": "2025-09-19T16:00:27.847",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:40:34.480",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:oxygenz:clipbucket_v5:5.5.2-90:*:*:*:*:*:*:*",
"matchCriteriaId": "D5C0113F-74AA-4132-A7E6-2352E5690F82"
}
]
}
]
}
],
"references": [
{
"url": "https://medium.com/@mukund.s1337/cve-2025-55911-clipbucket-5-5-2-build-90-ssrf-via-upload-actions-file-downloader-php-eb49dc02bd6f",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-560xx/CVE-2025-56074.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-56074",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T14:15:49.867",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:55.033",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:park_ticketing_management_system:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "033F3C02-8BD6-4644-8A6B-D3351806F60C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/baixiaobi/Park/blob/main/foreigner-bwdates-reports-details.php%20SQL%20Injection.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/baixiaobi/Park/blob/main/foreigner-bwdates-reports-details.php%20SQL%20Injection.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-560xx/CVE-2025-56075.json
+24 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-56075",
"sourceIdentifier": "[email protected]",
"published": "2025-09-22T14:15:50.023",
"lastModified": "2025-09-22T21:22:33.590",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-25T19:14:41.880",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,31 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:park_ticketing_management_system:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "033F3C02-8BD6-4644-8A6B-D3351806F60C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/baixiaobi/Park/blob/main/normal-bwdates-reports-details.php%20SQL%20%20Injection.md",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
Loaded 100 of 122 files, more files were not shown because too many files have changed in this diff. Show more