mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-28 01:20:49 +00:00
Auto-Update: 2025-12-04T09:00:12.937897+00:00
This commit is contained in:
cad-safe-bot committed
1 parent
76e0cd760a
commit
e11ec7b079
7 files changed
+153
-17
No files matched your search
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-12782",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-04T07:16:13.883",
|
||||
"lastModified": "2025-12-04T07:16:13.883",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Beaver Builder \u2013 WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable() function. This makes it possible for authenticated attackers, with contributor level access and above, to disable the Beaver Builder layout on arbitrary posts and pages, causing content integrity issues and layout disruption on those pages."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
|
||||
"baseScore": 4.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://plugins.trac.wordpress.org/changeset/3406987/beaver-builder-lite-version",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/710ed734-ca98-4ab3-82d5-359e683ee062?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-12826",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-12-04T07:16:14.920",
|
||||
"lastModified": "2025-12-04T07:16:14.920",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0. This is due to the plugin not verifying that a user has the required capability to perform actions in the \"cptui_process_post_type\" function. This makes it possible for authenticated attackers, with subscriber level access and above, to add, edit, or delete custom post types in limited situations."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
|
||||
"baseScore": 4.8,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "NONE",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 2.5
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-862"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/WebDevStudios/custom-post-type-ui/commit/215779a5ac0c624f0dcf875e87305b4898d5bcf9",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/90d203b1-9426-4eff-b566-02c8a1c6adfa?source=cve",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-62229",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-30T06:15:45.300",
|
||||
"lastModified": "2025-12-03T16:15:58.280",
|
||||
"lastModified": "2025-12-04T08:16:00.207",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -148,6 +148,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22667",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22729",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-62229",
|
||||
"source": "[email protected]"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-62230",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-30T06:15:45.593",
|
||||
"lastModified": "2025-12-03T16:15:58.470",
|
||||
"lastModified": "2025-12-04T08:16:01.583",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -148,6 +148,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22667",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22729",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-62230",
|
||||
"source": "[email protected]"
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-62231",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-10-30T05:15:39.120",
|
||||
"lastModified": "2025-12-03T16:15:58.647",
|
||||
"lastModified": "2025-12-04T08:16:01.817",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -148,6 +148,10 @@
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22667",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/errata/RHSA-2025:22729",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-62231",
|
||||
"source": "[email protected]"
|
||||
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-12-04T07:00:12.706174+00:00
|
||||
2025-12-04T09:00:12.937897+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-12-04T06:15:47.797000+00:00
|
||||
2025-12-04T08:16:01.817000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,22 +33,24 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
320056
|
||||
320058
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `3`
|
||||
Recently added CVEs: `2`
|
||||
|
||||
- [CVE-2025-11379](CVE-2025/CVE-2025-113xx/CVE-2025-11379.json) (`2025-12-04T05:16:19.720`)
|
||||
- [CVE-2025-11727](CVE-2025/CVE-2025-117xx/CVE-2025-11727.json) (`2025-12-04T05:16:23.157`)
|
||||
- [CVE-2025-13513](CVE-2025/CVE-2025-135xx/CVE-2025-13513.json) (`2025-12-04T06:15:47.797`)
|
||||
- [CVE-2025-12782](CVE-2025/CVE-2025-127xx/CVE-2025-12782.json) (`2025-12-04T07:16:13.883`)
|
||||
- [CVE-2025-12826](CVE-2025/CVE-2025-128xx/CVE-2025-12826.json) (`2025-12-04T07:16:14.920`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `0`
|
||||
Recently modified CVEs: `3`
|
||||
|
||||
- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-12-04T08:16:00.207`)
|
||||
- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-12-04T08:16:01.583`)
|
||||
- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-12-04T08:16:01.817`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+8
-6
@@ -286876,7 +286876,7 @@ CVE-2025-11374,0,0,86bed4ece47fbef9a1cd35f59beed03f4e70250c12071b33af205f39205f0
|
||||
CVE-2025-11375,0,0,71e7b79eebbda612ffc961b034a52357acb844afb3b87d1da0e327d75e301c32,2025-10-30T15:05:32.197000
|
||||
CVE-2025-11377,0,0,4689ab6e4ffb0b8c536e9020588877fb5800f9ca63c80dca471bdc43411df849,2025-11-04T15:41:31.450000
|
||||
CVE-2025-11378,0,0,dba04d05ff18be85a6716d3ee59cccbb8c90b2e5a84c800ba7fb54fb474e65c7,2025-10-21T19:31:25.450000
|
||||
CVE-2025-11379,1,1,e00a28202e121634843cc836aff3ee9befdba5731e201c00ad1d99cfed3e4467,2025-12-04T05:16:19.720000
|
||||
CVE-2025-11379,0,0,e00a28202e121634843cc836aff3ee9befdba5731e201c00ad1d99cfed3e4467,2025-12-04T05:16:19.720000
|
||||
CVE-2025-1138,0,0,e0bb09b76126817e62e86de8c7e16c02af53d402cca14426c6c04d4688a5a15e,2025-06-04T20:02:53.623000
|
||||
CVE-2025-11380,0,0,5bb09d133356c99d165f339e9e53f6f9ac3cdeb0ee180c39e9706003ae7a72e9,2025-10-14T19:36:59.730000
|
||||
CVE-2025-11385,0,0,a90cd9187f0a958ca4243aa31a0f20f8b72fe01e90b81f57d24fd0fb4da4b109,2025-10-09T16:46:19.440000
|
||||
@@ -287205,7 +287205,7 @@ CVE-2025-11721,0,0,d279560b0091a819c9c1b8ad9462c522c0467507b94ac6e243625e591c431
|
||||
CVE-2025-11722,0,0,c682998f0922b67ebf70e83b13d14e07b16e9d3a5ed328945317e2b8b422a173,2025-10-16T15:28:59.610000
|
||||
CVE-2025-11724,0,0,e21e22fcbe5b23aebd7f132521524f56247c3b33e9dacbcad753407c1bf246d8,2025-11-04T15:40:45.533000
|
||||
CVE-2025-11726,0,0,45b37ae9cc098293999e21ccc9e43d6e44075455877ffe0fcd93ddceeb19da3a,2025-12-02T17:16:29.163000
|
||||
CVE-2025-11727,1,1,a72c824990adc7f4282cfef837b243bafe40fc8886e160903846d0e7b9fa069e,2025-12-04T05:16:23.157000
|
||||
CVE-2025-11727,0,0,a72c824990adc7f4282cfef837b243bafe40fc8886e160903846d0e7b9fa069e,2025-12-04T05:16:23.157000
|
||||
CVE-2025-11728,0,0,8fba722aeb7df09ba94f4c6b05e3ab14611b86f34ac280dbab7e88626c26f9ca,2025-10-16T15:28:59.610000
|
||||
CVE-2025-1173,0,0,c014f39bea0b52c1c5deea7a23e5dc1d3440c9c8a652c2ab8ff78cf299abdf51,2025-02-28T02:23:20.017000
|
||||
CVE-2025-11731,0,0,5df0c892889d2ebbf0c0509ba41ce22c4b312db5237d2bbf7307be2b511a3e30,2025-10-15T18:15:35.087000
|
||||
@@ -288062,6 +288062,7 @@ CVE-2025-12777,0,0,f8feada33311f482a68af7ddad3d843f74b75a0ffe36c693adcfeb0d6e77c
|
||||
CVE-2025-12778,0,0,b9eca8f3cdcf3eccd2581f620d2dad564172e0744782a6c7f2a491b8b625ccfe,2025-11-21T15:13:59.083000
|
||||
CVE-2025-12779,0,0,e58721a4356c4457ba22dcd171af16333addd4d4c04075750244792d79a2dda8,2025-11-10T19:15:56.127000
|
||||
CVE-2025-1278,0,0,d92b07150326c8969aa5397e1bb50e32afc76c0c2192dd156776f73dc055eb12,2025-08-08T18:32:48.323000
|
||||
CVE-2025-12782,1,1,33fcdeeb49c505454287a7acf96979905c037722834550772bffa58b170192e5,2025-12-04T07:16:13.883000
|
||||
CVE-2025-12784,0,0,82f104898df6e39c3537b0ac27233578ee0181073651fff1d11eccb5d394553a,2025-11-14T16:42:03.187000
|
||||
CVE-2025-12785,0,0,44c9cc5cafcb1c017527a629d336282d34836e186942dc833db690360a700795,2025-11-14T16:42:03.187000
|
||||
CVE-2025-12787,0,0,45d7e9e077efb511357fbd4b9f0e377e778c459d400acb1083df0e0dfa1639ee,2025-11-12T16:19:34.210000
|
||||
@@ -288082,6 +288083,7 @@ CVE-2025-12819,0,0,e4017a9c5268601e3a04362f479149618dc9ff4d8800580fab1cee3d22318
|
||||
CVE-2025-1282,0,0,09bbe8fbf6ad958ee527dda55af05e43520fd8fabad49e275c5ad8ac54adbc57,2025-03-11T16:08:00.790000
|
||||
CVE-2025-12822,0,0,1252597a6bb073cfc3cf67e4afb3779c0f0826433ba90b076eea7e9e9046af13,2025-11-19T19:14:59.327000
|
||||
CVE-2025-12823,0,0,e9f07f9bb53d86103ceec51174e70d51a0cc7c20fc70421254d6521f2d248fc0,2025-11-18T14:06:29.817000
|
||||
CVE-2025-12826,1,1,8c3f5f26347a04c6643d7df342ed7cf46afcc538033c5b9b68f4c51fe0f2edc9,2025-12-04T07:16:14.920000
|
||||
CVE-2025-12827,0,0,fa3d37d788f9714850eb3549e3b6348d74612f6491ff6ba69219c22ba9dc3d42,2025-11-18T14:06:29.817000
|
||||
CVE-2025-12829,0,0,87018e492721ab499b02eef390d86c56d0bd8ec851674382220e7e9a74b9de72,2025-11-12T16:20:22.257000
|
||||
CVE-2025-1283,0,0,a4d93a77d81ec07731b68bab3e1d00afd05dc0ae7fee050881be213abacce036,2025-04-10T18:55:23.537000
|
||||
@@ -288535,7 +288537,7 @@ CVE-2025-13507,0,0,99f5ab2bb069a8525692a651cce3b73217a6a963440aad59b7612c440e2db
|
||||
CVE-2025-1351,0,0,a6ea9f201c0676b9dbdab8a1dd139acec4a7e76bd59056f751f2c0d7ee3033b4,2025-08-14T00:57:24.720000
|
||||
CVE-2025-13510,0,0,5631d266a19a08fad1ebb1b39310b041ce51dde1cb731f2f2d9696e6a7ab8681,2025-12-02T20:15:49.470000
|
||||
CVE-2025-13511,0,0,b9f745da195477f38fddc989b5c005c59dacb12b726f4fdb397dcff4656ce475,2025-11-24T17:16:03.797000
|
||||
CVE-2025-13513,1,1,b4370632153536729e16582e3b0e86e76681557d72faf6ca722539d0934e7d1e,2025-12-04T06:15:47.797000
|
||||
CVE-2025-13513,0,0,b4370632153536729e16582e3b0e86e76681557d72faf6ca722539d0934e7d1e,2025-12-04T06:15:47.797000
|
||||
CVE-2025-13516,0,0,5e03b807bc08e53fbcc648b97b68791c7b58abf856ec0d7d8ee110a41e9afc2e,2025-12-02T17:16:29.163000
|
||||
CVE-2025-1352,0,0,468e4165c1fbc1f238500ed696137c4d06d5e55cbc9edf2b4912378bc89bb127,2025-11-03T20:34:23.890000
|
||||
CVE-2025-13524,0,0,3b415858b7da69972d1b9f12ff03594172ed4ea72c8a1da037de613b3960c2f4,2025-11-25T22:16:42.557000
|
||||
@@ -315351,9 +315353,9 @@ CVE-2025-62220,0,0,13db24cb242ebeed0c1f4737a706504c9ba1a5992e04dbd74728bd9c8ea2a
|
||||
CVE-2025-62222,0,0,b32955abddda902773d9d62b850849311cb72f231f33ab235a1d71b83f6486a6,2025-11-14T15:47:58.830000
|
||||
CVE-2025-62225,0,0,5e5e30dce2450e8af243865130c21e5e1681c40fd91622536f84becd571ed600,2025-11-06T19:45:30.990000
|
||||
CVE-2025-62228,0,0,2d849b7be3b3eb6cbf0d616a0aa8990f01ac41488cf6fce56d62f35fcd4195ff,2025-12-03T21:48:36.607000
|
||||
CVE-2025-62229,0,0,6d910ec0222a9ff8b4f0941da5a7043b7cc8f99da156813f36c5c05aeda8c64d,2025-12-03T16:15:58.280000
|
||||
CVE-2025-62230,0,0,0d7a873c1880a94733d608f445aa1d553a6d2d51ca5c4dd727dd96ef8066d2c0,2025-12-03T16:15:58.470000
|
||||
CVE-2025-62231,0,0,565b617c6ac49b3a727329a802e7fe4ff8d9d98f253614d830332c84ccfeafd9,2025-12-03T16:15:58.647000
|
||||
CVE-2025-62229,0,1,9258ce7d9737e916cf41c9fd7a82bcfd7d69b998f2bdaa8c872b2e74c24a306c,2025-12-04T08:16:00.207000
|
||||
CVE-2025-62230,0,1,e866d68ac2d74a3971703aea950dc8727f154f5c47a22de8d63bcb23d01d7d04,2025-12-04T08:16:01.583000
|
||||
CVE-2025-62231,0,1,08a19ac4298f222ccd17a1ca7714e7a51d6b1be8e3db69ce1a893e7b489fc896,2025-12-04T08:16:01.817000
|
||||
CVE-2025-62232,0,0,7bbe8ad5bb9f8c5afbfe7cd16ff850ade62800436ec5824e91f788252db0e3dd,2025-11-05T14:44:13.057000
|
||||
CVE-2025-62236,0,0,15a5caffd14cf9ee2af6ac6cf3031f9d0466adcdd94376f42fd22604d4f0e595,2025-10-27T13:20:15.637000
|
||||
CVE-2025-62237,0,0,50afe9cde633923a8104d90291ee98bd713fe21b8178eff2dd59e01bb75e841c,2025-10-14T19:36:59.730000
|
||||
|
||||
|
Can't render this file because it is too large.
|
Reference in new issue
Block a user