mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2026-10-29 01:10:49 +00:00
Auto-Update: 2025-08-04T18:00:12.546885+00:00
This commit is contained in:
1 parent
d4662a697c
commit
e1d852b1ac
43 files changed
+2459
-396
No files matched your search
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2013-10053",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-01T21:15:27.290",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:31.957",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [
|
||||
{
|
||||
@@ -96,6 +96,10 @@
|
||||
{
|
||||
"url": "https://www.vulncheck.com/advisories/zpanel-htpasswd-module-username-command-execution",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://web.archive.org/web/20130617014355/http://forums.zpanelcp.com/showthread.php?27898-Serious-Remote-Execution-Exploit-in-Zpanel-10-0-0-2",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2019-19144",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-01T16:15:37.243",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T17:15:28.047",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -15,7 +15,42 @@
|
||||
"value": "Vulnerabilidad de inyecci\u00f3n de entidad externa XML en dispositivos Quantum DXi6702 2.3.0.3 (11449-53631 Build304) a trav\u00e9s de rest/Users?action=authenticate."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-776"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0004.md",
|
||||
@@ -24,6 +59,10 @@
|
||||
{
|
||||
"url": "https://www.quantum.com/products/disk-basedbackup/dxi6700/index.aspx",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2019-0004.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2020-25412",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2020-09-16T14:15:12.953",
|
||||
"lastModified": "2024-11-21T05:17:57.863",
|
||||
"lastModified": "2025-08-04T17:19:47.523",
|
||||
"vulnStatus": "Modified",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -85,8 +85,8 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:gnuplot_project:gnuplot:5.4.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "413CB382-B003-491E-B6FE-968553A2D21F"
|
||||
"criteria": "cpe:2.3:a:gnuplot:gnuplot:5.4.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "75CD0156-4FA6-4650-8B2A-8A1BD498D264"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-38002",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-04-30T15:15:50.407",
|
||||
"lastModified": "2024-11-21T08:12:40.637",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"lastModified": "2025-08-04T17:47:19.140",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -36,6 +36,26 @@
|
||||
},
|
||||
"exploitabilityScore": 1.6,
|
||||
"impactScore": 3.4
|
||||
},
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
@@ -51,22 +71,53 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:ibm:storage_scale:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "5.1.0.0",
|
||||
"versionEndExcluding": "5.2.0.0",
|
||||
"matchCriteriaId": "F7E0917D-1C6E-412F-9E7B-8884E24622A8"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/260208",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7149699",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/260208",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://www.ibm.com/support/pages/node/7149699",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2023-39327",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-07-13T03:15:09.347",
|
||||
"lastModified": "2024-11-21T08:15:10.033",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:21:53.200",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,22 +51,107 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:uclouvain:openjpeg:1.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A1EF98D2-DE2C-4B4D-BE90-BE22C62444CB"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:uclouvain:openjpeg:2.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "9E345E63-1F5B-4257-A5EC-53360BA2AFEA"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F4CFF558-3C47-480D-A2F0-BABF26042943"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "7F6FB57C-2BC7-487C-96DD-132683AEB35D"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2023-39327",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295812",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2023-39327",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Third Party Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2295812",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Issue Tracking",
|
||||
"Third Party Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-20456",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-07-10T16:15:03.703",
|
||||
"lastModified": "2024-11-21T08:52:40.973",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:44:16.417",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,14 +51,334 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"operator": "AND",
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:o:cisco:ios_xr:24.2.1:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "D64E1C4D-46B0-4A18-B8EE-BEA732CBF1F8"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8011-4g24y4h-i:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "1C422517-1BC8-4BCE-97E8-A2C165C7BB64"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E055F58F-F9FB-4B27-841E-61ECAB5F42B8"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8101-32fh-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "437EBDAF-0633-409C-9EA4-DAD099D553B6"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8101-32h-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "8153C555-9AF4-4793-8F27-B01F1B3D76B9"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8102-28fh-dpu-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F0229018-3C4A-4174-B50F-F352FB1CCF9A"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A3C3DDAC-7D0F-4D1D-9632-F001F2EB5D34"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8102-64h-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2B14EC7C-4916-49C8-B919-E0149A4C44BF"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8111-32eh-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "9E0443E9-9309-4503-9D21-ED5359F87E71"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8122-64eh-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "9911F911-E322-4B0F-B31A-8FDA80D7AE5B"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8122-64ehf-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5FA5968D-7167-4D7D-A055-6F3C8023B496"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8201-24h8fh:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "7A554611-6B1B-482E-AF77-CD032EA7A978"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "528BE0D3-E5ED-4836-B0D8-0C8508C5BDD7"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8201-32fh-o:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "321767C3-BEBB-4A70-A4BF-4EED7E6669D9"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8202-32fh-m:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "17EF50F5-0A9F-4649-BEBB-1F181E27C5B7"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8212-48fh-m:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "59AB5F5A-2346-4F4B-A6ED-1884C5BE9353"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8404:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "540DCD6A-722D-4173-8046-885FEFA23A14"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8501-sys-mt:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "18A5A74F-458A-4D51-B487-949E637E58AD"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8608:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "58B8D161-2D5E-4BD8-9518-B2FAB73ADEEE"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8700:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "115B1C4A-A508-4F22-8E15-545AB4301017"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8711-32fh-m:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "D4DF4211-FC4B-4A4A-9154-D64F0B84EEA3"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8712-mod-m:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3432E52B-6914-4DF2-8D7C-C19A435BF542"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "6655851F-58D9-49D9-A56E-8440A7F7BB45"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "9ED06361-5A68-4656-AEA5-240C290594CD"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_1010:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "97D1123D-39F9-4D22-99CE-F28CA57FE191"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_1014:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "F2E3F337-0CF5-456E-B313-DC3ED4BF9D9B"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-12z20g-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "D5494B4B-0BB4-48AE-8B0D-04DE649F9313"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-12z20g-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "B3A0C835-6C98-4AB6-89FF-C27117BB6B12"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-24q2c2dd-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "24550EBB-6FEE-4916-B58A-5FD8E45E962B"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-24q8l2dd-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "AAD71DBE-AE18-49FA-826E-52D87A73F496"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-24z8q2c-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "395F25CD-FDF5-48D7-A048-A6B4F4779EC9"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-28z4c-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2E926BBC-F5C5-4D02-8A62-F1A5DE3C54DA"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-28z4c-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "EFB1323A-C472-4EA1-A969-1D1C10AB0CE8"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-6z14s-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A64FB4E3-4393-4A89-B6FB-E990D33427C5"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-6z18g-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "E2E585D1-F2E7-4CBE-ACA2-6552ACDF492A"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-6z18g-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "44BB03A0-9152-444B-B5CD-70F4CBD53D03"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-acc-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "124CE49C-1C2B-40A5-8F59-7A223766E12F"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-fh-agg:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "3D7DFE35-76BA-4BAE-9C4B-0625DAE573B0"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540-fh-csr-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "1645EAA7-0847-4418-BA9B-FA8E36B59626"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-12z16g-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A83F3D33-0674-4F74-AEA9-BC824D8536F5"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-12z16g-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "784A450D-8DCA-43E5-8044-A9F2363FB006"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-16z4g8q2c-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "92E88ED4-C2AF-407C-A395-3D7806D68758"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-16z4g8q2c-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2DA11E43-F821-45F6-A2DB-E1EBC8BDE68B"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-16z8q2c-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A93F10D9-CF79-4DF2-964C-D423D1C1D993"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-4z14g2q-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A52A23CF-2D33-46CD-9784-D54826F63C71"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-4z14g2q-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "BB9BD2FE-BADB-489F-B832-2EF53F8679E6"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-6z18g-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "42610AAA-9830-44C3-8D1D-2433FCA0541B"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-6z18g-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "31CE816F-858C-421A-99D1-FCD4BB5FAD47"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-8z16g-sys-a:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "2C4A522F-560C-438D-AB68-BF0175C06F78"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-8z16g-sys-d:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "A405E23C-24BC-42C8-99DB-D8E5EFD98261"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_540x-acc-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "871D84C5-71EE-4B82-A48C-A1CC68DA332A"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_57b1-5dse-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "13EEDD1C-25BC-4AFA-AF60-66DE36927528"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_57b1-6d24-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "5CD3B06B-864E-4A35-B0C3-1654390022D2"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_57c1-48q6-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "AD1B4F37-5AAA-4F40-8865-226289CB5CEB"
|
||||
},
|
||||
{
|
||||
"vulnerable": false,
|
||||
"criteria": "cpe:2.3:h:cisco:ncs_57d2-18dd-sys:-:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "976AC38F-5873-41ED-82B6-31C22FCC6BEE"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-secure-boot-quD5g8Ap",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-secure-boot-quD5g8Ap",
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
||||
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-20512",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-10-16T17:15:15.913",
|
||||
"lastModified": "2024-10-18T12:53:04.627",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:02:52.677",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,32 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:cisco:unified_contact_center_management_portal:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "12.6\\(1\\)",
|
||||
"versionEndExcluding": "12.6\\(1\\)_es13",
|
||||
"matchCriteriaId": "68A41104-68FA-4AB0-8A02-1FF76954C1D1"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ccmpdm-rxss-tAX76U3k",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2024-49360",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-11-29T18:15:09.307",
|
||||
"lastModified": "2025-08-01T20:28:39.847",
|
||||
"lastModified": "2025-08-04T17:25:26.540",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -80,14 +80,15 @@
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie:sandboxie:*:*:*:*:*:*:*:*",
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionEndExcluding": "1.14.6",
|
||||
"matchCriteriaId": "57D00916-E8A0-4FB0-962F-DBE4D92DBA88"
|
||||
"matchCriteriaId": "5C8FCC55-2EC4-43C3-80A0-D9D34954585D"
|
||||
},
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie:sandboxie:5.69.6:*:*:*:*:*:*:*",
|
||||
"matchCriteriaId": "36578328-950D-430A-99F5-C801062D9E84"
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:classic:*:*:*",
|
||||
"versionEndExcluding": "5.69.6",
|
||||
"matchCriteriaId": "20BE7C41-AC57-41A3-9499-1A62BF72269C"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -99,8 +100,9 @@
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-4chj-3c28-gvmp",
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory",
|
||||
"Exploit"
|
||||
"Mitigation"
|
||||
]
|
||||
}
|
||||
]
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2024-52597",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2024-11-20T14:15:17.967",
|
||||
"lastModified": "2024-11-21T13:57:24.187",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T16:57:38.327",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -55,14 +55,39 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:2fauth:2fauth:*:*:*:*:*:*:*:*",
|
||||
"versionEndExcluding": "5.4.1",
|
||||
"matchCriteriaId": "93DA0184-91A8-4FB3-ACD4-FA9D13D271FF"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/Bubka/2FAuth/commit/93c508e118f483f3c93ac36e1f91face95af642d",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Bubka/2FAuth/security/advisories/GHSA-q5p4-6q4v-gqg3",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
{
|
||||
"id": "CVE-2025-38739",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T16:15:33.080",
|
||||
"lastModified": "2025-08-04T16:15:33.080",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 2.7
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-522"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.dell.com/support/kbdoc/en-us/000349489/dsa-2025-302",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-44139",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-01T16:15:41.070",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T17:15:29.333",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -15,7 +15,42 @@
|
||||
"value": "Emlog Pro V2.5.7 es vulnerable a la carga sin restricciones de archivos con tipos peligrosos a trav\u00e9s de /emlog/admin/plugin.php?action=upload_zip"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.2,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-434"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "http://emlog.com",
|
||||
@@ -24,6 +59,10 @@
|
||||
{
|
||||
"url": "https://gist.github.com/babapihai/b56121e0b2694e2be22571057d05298e",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://gist.github.com/babapihai/b56121e0b2694e2be22571057d05298e",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,13 +2,13 @@
|
||||
"id": "CVE-2025-44643",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T15:15:32.197",
|
||||
"lastModified": "2025-08-04T15:15:32.197",
|
||||
"lastModified": "2025-08-04T16:15:33.243",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Certain Draytek products are affected by Insecure Permissions. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the secret field in the FreeRadius-related clients.conf configuration file sets a hardcoded weak password, posing a security risk."
|
||||
"value": "Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44954",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:29.507",
|
||||
"lastModified": "2025-08-04T17:15:29.507",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 9.0,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1394"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44954",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44955",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T16:15:33.417",
|
||||
"lastModified": "2025-08-04T16:15:33.417",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 8.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.0,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-259"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44955",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44957",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:29.730",
|
||||
"lastModified": "2025-08-04T17:15:29.730",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 8.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-288"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44957",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44958",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:29.890",
|
||||
"lastModified": "2025-08-04T17:15:29.890",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 0.8,
|
||||
"impactScore": 4.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-257"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44958",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44960",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.050",
|
||||
"lastModified": "2025-08-04T17:15:30.050",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 8.5,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-78"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44960",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44961",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.210",
|
||||
"lastModified": "2025-08-04T17:15:30.210",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 9.9,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-78"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44961",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44962",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.367",
|
||||
"lastModified": "2025-08-04T17:15:30.367",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
|
||||
"baseScore": 5.0,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.1,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-24"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44962",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
{
|
||||
"id": "CVE-2025-44963",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.540",
|
||||
"lastModified": "2025-08-04T17:15:30.540",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
|
||||
"baseScore": 9.0,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "CHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 2.2,
|
||||
"impactScore": 6.0
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-321"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://claroty.com/team82/disclosure-dashboard/cve-2025-44963",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://kb.cert.org/vuls/id/613753",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://webresources.commscope.com/download/assets/FAQ+Security+Advisory%3A+ID+20250710/225f44ac3bd311f095821adcaa92e24e",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46713",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-05-22T13:15:57.650",
|
||||
"lastModified": "2025-05-23T15:55:02.040",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:23:32.917",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,33 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionStartIncluding": "0.1",
|
||||
"versionEndExcluding": "1.15.12",
|
||||
"matchCriteriaId": "A49D20EB-C81C-4342-96DF-2D0EDE06D2B5"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-5g85-6p6v-r479",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory",
|
||||
"Exploit"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46714",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-05-22T13:15:57.913",
|
||||
"lastModified": "2025-05-23T15:55:02.040",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:24:44.340",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,33 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionStartIncluding": "1.3.0",
|
||||
"versionEndExcluding": "1.15.12",
|
||||
"matchCriteriaId": "489CD850-434B-43D0-80AF-6F75FC65B3AB"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-c5h5-54gp-xh4q",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46715",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-05-22T17:15:24.400",
|
||||
"lastModified": "2025-05-23T15:55:02.040",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:25:44.107",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,33 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionStartIncluding": "1.3.0",
|
||||
"versionEndExcluding": "1.15.12",
|
||||
"matchCriteriaId": "489CD850-434B-43D0-80AF-6F75FC65B3AB"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-67p9-6h73-ff7x",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Exploit",
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-46716",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-05-22T17:15:24.560",
|
||||
"lastModified": "2025-05-23T15:55:02.040",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:26:34.820",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -51,10 +51,33 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionStartIncluding": "1.3.0",
|
||||
"versionEndExcluding": "1.15.12",
|
||||
"matchCriteriaId": "489CD850-434B-43D0-80AF-6F75FC65B3AB"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-3984-r877-q7xp",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory",
|
||||
"Exploit"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"id": "CVE-2025-50420",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.700",
|
||||
"lastModified": "2025-08-04T17:15:30.700",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS)."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "http://freedesktop.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "http://poppler.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Landw-hub/CVE-2025-50420",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
{
|
||||
"id": "CVE-2025-50422",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.813",
|
||||
"lastModified": "2025-08-04T17:15:30.813",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An issue was discovered in freedesktop poppler v25.04.0. The heap memory containing PDF stream objects is not cleared upon program exit, allowing attackers to obtain sensitive PDF content via a memory dump."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "http://freedesktop.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "http://poppler.com",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Landw-hub/CVE-2025-50422",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-51534",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:30.927",
|
||||
"lastModified": "2025-08-04T17:15:30.927",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.sec4you-pentest.com/schwachstelle/openatlas-stored-nested-xss-delete-button/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.sec4you-pentest.com/schwachstellen/",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
{
|
||||
"id": "CVE-2025-51535",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:31.037",
|
||||
"lastModified": "2025-08-04T17:15:31.037",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.sec4you-pentest.com/schwachstelle/openatlas-unbeschraenkte-sql-konsole-im-admin-ui/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://www.sec4you-pentest.com/schwachstellen/",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-51536",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T15:15:32.410",
|
||||
"lastModified": "2025-08-04T15:15:32.410",
|
||||
"lastModified": "2025-08-04T16:15:33.697",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -11,7 +11,46 @@
|
||||
"value": "Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 9.8,
|
||||
"baseSeverity": "CRITICAL",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-798"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-1392"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.sec4you-pentest.com/schwachstelle/openatlas-standard-adminkonto-mit-hartcodiertem-passwort/",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-52327",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-01T16:15:41.903",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T17:15:31.140",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -15,7 +15,42 @@
|
||||
"value": "La vulnerabilidad de inyecci\u00f3n SQL en Restaurant Order System 1.0 permite a un atacante local obtener informaci\u00f3n confidencial a trav\u00e9s del archivo payment.php"
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-89"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "http://restaurant.com",
|
||||
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-52361",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-01T16:15:42.053",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T17:15:31.300",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -15,7 +15,42 @@
|
||||
"value": "Los permisos inseguros en el script /etc/init.d/lighttpd en el firmware v0.0.16 Build 2023-03-13 de AK-Nord USB-Server-LXL permiten que un usuario con privilegios bajos autenticado localmente ejecute comandos arbitrarios con privilegios de root mediante la edici\u00f3n de este script que se ejecuta con privilegios de root en cualquier interacci\u00f3n y en cada arranque del sistema."
|
||||
}
|
||||
],
|
||||
"metrics": {},
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
|
||||
"baseScore": 7.8,
|
||||
"baseSeverity": "HIGH",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "HIGH",
|
||||
"availabilityImpact": "HIGH"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 5.9
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-276"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://seclists.org/fulldisclosure/2025/Jul/20",
|
||||
|
||||
@@ -2,8 +2,8 @@
|
||||
"id": "CVE-2025-54422",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-07-29T13:15:27.823",
|
||||
"lastModified": "2025-07-29T14:15:37.307",
|
||||
"vulnStatus": "Undergoing Analysis",
|
||||
"lastModified": "2025-08-04T17:30:08.827",
|
||||
"vulnStatus": "Analyzed",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
@@ -59,6 +59,28 @@
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.8,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
@@ -85,22 +107,52 @@
|
||||
]
|
||||
}
|
||||
],
|
||||
"configurations": [
|
||||
{
|
||||
"nodes": [
|
||||
{
|
||||
"operator": "OR",
|
||||
"negate": false,
|
||||
"cpeMatch": [
|
||||
{
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:sandboxie-plus:sandboxie:*:*:*:*:plus:*:*:*",
|
||||
"versionEndExcluding": "1.16.2",
|
||||
"matchCriteriaId": "8EBFA567-2E4B-429B-A81C-6914E20D61FC"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/commit/d107d5743880da28e782c1771b5246b2a512989a",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Patch"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.16.2",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Release Notes"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-jp7r-vgv9-43p7",
|
||||
"source": "[email protected]"
|
||||
"source": "[email protected]",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-jp7r-vgv9-43p7",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"tags": [
|
||||
"Vendor Advisory"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-54782",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-02T00:15:25.953",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:33.970",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -64,7 +64,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -101,6 +101,10 @@
|
||||
{
|
||||
"url": "https://socket.dev/blog/nestjs-rce-vuln",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-54796",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-02T00:15:26.550",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:34.217",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -42,7 +42,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -71,6 +71,10 @@
|
||||
{
|
||||
"url": "https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-54955",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-03T00:15:25.633",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:34.340",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -42,7 +42,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -71,6 +71,10 @@
|
||||
{
|
||||
"url": "https://github.com/Stolichnayer/OpenNebula-Account-Takeover",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/Stolichnayer/OpenNebula-Account-Takeover",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,60 @@
|
||||
{
|
||||
"id": "CVE-2025-5988",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T16:15:34.560",
|
||||
"lastModified": "2025-08-04T16:15:34.560",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A flaw was found in the Ansible aap-gateway. Cross-site request forgery (CSRF) origin checking is not done on requests from the gateway to external components, such as the controller, hub, and eda."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "HIGH",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "HIGH",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 1.6,
|
||||
"impactScore": 3.6
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-352"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://access.redhat.com/security/cve/CVE-2025-5988",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2371644",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-8468",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-02T15:15:26.753",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:35.097",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -63,7 +63,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -111,7 +111,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -144,6 +144,10 @@
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.625787",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/wllovemy/cve/issues/13",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -2,7 +2,7 @@
|
||||
"id": "CVE-2025-8469",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-02T17:15:26.477",
|
||||
"lastModified": "2025-08-04T15:06:15.833",
|
||||
"lastModified": "2025-08-04T16:15:35.237",
|
||||
"vulnStatus": "Awaiting Analysis",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
@@ -59,7 +59,7 @@
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
|
||||
@@ -107,7 +107,7 @@
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
@@ -140,6 +140,10 @@
|
||||
{
|
||||
"url": "https://www.sourcecodester.com/",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/K1nakoo/tmp01/blob/main/tmp01.md",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,137 @@
|
||||
{
|
||||
"id": "CVE-2025-8516",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T16:15:35.373",
|
||||
"lastModified": "2025-08-04T16:15:35.373",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition up to 8.2. It has been classified as problematic. Affected is the function BaseServiceFactory.getFileUploadService.deleteFileAction of the file K3Cloud\\BBCMallSite\\WEB-INF\\lib\\Kingdee.K3.O2O.Base.WebApp.jar!\\kingdee\\k3\\o2o\\base\\webapp\\action\\FileUploadAction.class of the component IIS-K3CloudMiniApp. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor recommends as a short-term measure to \"[t]emporarily disable external network access to the Kingdee Cloud Galaxy Retail System or set up an IP whitelist for access control.\" The long-term remediation will be: \"Install the security patch provided by the Starry Sky system, with the specific solutions being: i) Adding authentication to the vulnerable CMKAppWebHandler.ashx interface; ii) Removing the file reading function.\""
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.5,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "NONE",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"exploitabilityScore": 3.9,
|
||||
"impactScore": 1.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
|
||||
"baseScore": 5.0,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "NONE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "NONE",
|
||||
"availabilityImpact": "NONE"
|
||||
},
|
||||
"baseSeverity": "MEDIUM",
|
||||
"exploitabilityScore": 10.0,
|
||||
"impactScore": 2.9,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-22"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.318642",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.318642",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.573678",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://wx.mail.qq.com/s?k=hk3Fixc6Z1cKMI9rge",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,157 @@
|
||||
{
|
||||
"id": "CVE-2025-8517",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T16:15:35.577",
|
||||
"lastModified": "2025-08-04T17:15:31.710",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in givanz Vvveb 1.0.6.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to session fixiation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.7 is able to address this issue. The patch is named d4b1e030066417b77d15b4ac505eed5ae7bf2c5e. It is recommended to upgrade the affected component."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 6.3,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 2.8,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
|
||||
"baseScore": 6.5,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "SINGLE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "MEDIUM",
|
||||
"exploitabilityScore": 8.0,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-384"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/commit/d4b1e030066417b77d15b4ac505eed5ae7bf2c5e",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/issues/312",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/issues/312#issuecomment-2977995664",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/releases/tag/1.0.7",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/helloandrewpaul/Session-Fixation-in-Vvveb-CMS-v1.0.6.1",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.318643",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.318643",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.623135",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/issues/312",
|
||||
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
{
|
||||
"id": "CVE-2025-8518",
|
||||
"sourceIdentifier": "[email protected]",
|
||||
"published": "2025-08-04T17:15:31.870",
|
||||
"lastModified": "2025-08-04T17:15:31.870",
|
||||
"vulnStatus": "Received",
|
||||
"cveTags": [],
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.6 is able to address this issue. The name of the patch is f684f3e374d04db715730fc4796e102f5ebcacb2. It is recommended to upgrade the affected component."
|
||||
}
|
||||
],
|
||||
"metrics": {
|
||||
"cvssMetricV40": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
|
||||
"baseScore": 5.1,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "LOW",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"exploitMaturity": "PROOF_OF_CONCEPT",
|
||||
"confidentialityRequirement": "NOT_DEFINED",
|
||||
"integrityRequirement": "NOT_DEFINED",
|
||||
"availabilityRequirement": "NOT_DEFINED",
|
||||
"modifiedAttackVector": "NOT_DEFINED",
|
||||
"modifiedAttackComplexity": "NOT_DEFINED",
|
||||
"modifiedAttackRequirements": "NOT_DEFINED",
|
||||
"modifiedPrivilegesRequired": "NOT_DEFINED",
|
||||
"modifiedUserInteraction": "NOT_DEFINED",
|
||||
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
|
||||
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
|
||||
"modifiedSubIntegrityImpact": "NOT_DEFINED",
|
||||
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
|
||||
"Safety": "NOT_DEFINED",
|
||||
"Automatable": "NOT_DEFINED",
|
||||
"Recovery": "NOT_DEFINED",
|
||||
"valueDensity": "NOT_DEFINED",
|
||||
"vulnerabilityResponseEffort": "NOT_DEFINED",
|
||||
"providerUrgency": "NOT_DEFINED"
|
||||
}
|
||||
}
|
||||
],
|
||||
"cvssMetricV31": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"cvssData": {
|
||||
"version": "3.1",
|
||||
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
|
||||
"baseScore": 4.7,
|
||||
"baseSeverity": "MEDIUM",
|
||||
"attackVector": "NETWORK",
|
||||
"attackComplexity": "LOW",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"scope": "UNCHANGED",
|
||||
"confidentialityImpact": "LOW",
|
||||
"integrityImpact": "LOW",
|
||||
"availabilityImpact": "LOW"
|
||||
},
|
||||
"exploitabilityScore": 1.2,
|
||||
"impactScore": 3.4
|
||||
}
|
||||
],
|
||||
"cvssMetricV2": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Secondary",
|
||||
"cvssData": {
|
||||
"version": "2.0",
|
||||
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
|
||||
"baseScore": 5.8,
|
||||
"accessVector": "NETWORK",
|
||||
"accessComplexity": "LOW",
|
||||
"authentication": "MULTIPLE",
|
||||
"confidentialityImpact": "PARTIAL",
|
||||
"integrityImpact": "PARTIAL",
|
||||
"availabilityImpact": "PARTIAL"
|
||||
},
|
||||
"baseSeverity": "MEDIUM",
|
||||
"exploitabilityScore": 6.4,
|
||||
"impactScore": 6.4,
|
||||
"acInsufInfo": false,
|
||||
"obtainAllPrivilege": false,
|
||||
"obtainUserPrivilege": false,
|
||||
"obtainOtherPrivilege": false,
|
||||
"userInteractionRequired": false
|
||||
}
|
||||
]
|
||||
},
|
||||
"weaknesses": [
|
||||
{
|
||||
"source": "[email protected]",
|
||||
"type": "Primary",
|
||||
"description": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-74"
|
||||
},
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "CWE-94"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://gist.github.com/0xHamy/f16fb399f8dd3a973acadc18fa07b1cb",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/commit/f684f3e374d04db715730fc4796e102f5ebcacb2",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://github.com/givanz/Vvveb/releases/tag/1.0.6",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://hkohi.ca/vulnerability/8",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?ctiid.318644",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?id.318644",
|
||||
"source": "[email protected]"
|
||||
},
|
||||
{
|
||||
"url": "https://vuldb.com/?submit.624971",
|
||||
"source": "[email protected]"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
|
||||
### Last Repository Update
|
||||
|
||||
```plain
|
||||
2025-08-04T16:00:13.563492+00:00
|
||||
2025-08-04T18:00:12.546885+00:00
|
||||
```
|
||||
|
||||
### Most recent CVE Modification Timestamp synchronized with NVD
|
||||
|
||||
```plain
|
||||
2025-08-04T15:24:02.550000+00:00
|
||||
2025-08-04T17:47:19.140000+00:00
|
||||
```
|
||||
|
||||
### Last Data Feed Release
|
||||
@@ -33,57 +33,60 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
|
||||
### Total Number of included CVEs
|
||||
|
||||
```plain
|
||||
304075
|
||||
304092
|
||||
```
|
||||
|
||||
### CVEs added in the last Commit
|
||||
|
||||
Recently added CVEs: `13`
|
||||
Recently added CVEs: `17`
|
||||
|
||||
- [CVE-2025-26065](CVE-2025/CVE-2025-260xx/CVE-2025-26065.json) (`2025-08-04T15:15:31.067`)
|
||||
- [CVE-2025-30096](CVE-2025/CVE-2025-300xx/CVE-2025-30096.json) (`2025-08-04T15:15:31.397`)
|
||||
- [CVE-2025-30097](CVE-2025/CVE-2025-300xx/CVE-2025-30097.json) (`2025-08-04T15:15:31.560`)
|
||||
- [CVE-2025-30098](CVE-2025/CVE-2025-300xx/CVE-2025-30098.json) (`2025-08-04T15:15:31.723`)
|
||||
- [CVE-2025-30099](CVE-2025/CVE-2025-300xx/CVE-2025-30099.json) (`2025-08-04T15:15:31.887`)
|
||||
- [CVE-2025-36594](CVE-2025/CVE-2025-365xx/CVE-2025-36594.json) (`2025-08-04T15:15:32.040`)
|
||||
- [CVE-2025-36604](CVE-2025/CVE-2025-366xx/CVE-2025-36604.json) (`2025-08-04T14:15:32.507`)
|
||||
- [CVE-2025-36605](CVE-2025/CVE-2025-366xx/CVE-2025-36605.json) (`2025-08-04T14:15:32.703`)
|
||||
- [CVE-2025-36606](CVE-2025/CVE-2025-366xx/CVE-2025-36606.json) (`2025-08-04T14:15:32.850`)
|
||||
- [CVE-2025-36607](CVE-2025/CVE-2025-366xx/CVE-2025-36607.json) (`2025-08-04T14:15:32.997`)
|
||||
- [CVE-2025-44643](CVE-2025/CVE-2025-446xx/CVE-2025-44643.json) (`2025-08-04T15:15:32.197`)
|
||||
- [CVE-2025-51536](CVE-2025/CVE-2025-515xx/CVE-2025-51536.json) (`2025-08-04T15:15:32.410`)
|
||||
- [CVE-2025-8109](CVE-2025/CVE-2025-81xx/CVE-2025-8109.json) (`2025-08-04T14:15:33.627`)
|
||||
- [CVE-2025-38739](CVE-2025/CVE-2025-387xx/CVE-2025-38739.json) (`2025-08-04T16:15:33.080`)
|
||||
- [CVE-2025-44954](CVE-2025/CVE-2025-449xx/CVE-2025-44954.json) (`2025-08-04T17:15:29.507`)
|
||||
- [CVE-2025-44955](CVE-2025/CVE-2025-449xx/CVE-2025-44955.json) (`2025-08-04T16:15:33.417`)
|
||||
- [CVE-2025-44957](CVE-2025/CVE-2025-449xx/CVE-2025-44957.json) (`2025-08-04T17:15:29.730`)
|
||||
- [CVE-2025-44958](CVE-2025/CVE-2025-449xx/CVE-2025-44958.json) (`2025-08-04T17:15:29.890`)
|
||||
- [CVE-2025-44960](CVE-2025/CVE-2025-449xx/CVE-2025-44960.json) (`2025-08-04T17:15:30.050`)
|
||||
- [CVE-2025-44961](CVE-2025/CVE-2025-449xx/CVE-2025-44961.json) (`2025-08-04T17:15:30.210`)
|
||||
- [CVE-2025-44962](CVE-2025/CVE-2025-449xx/CVE-2025-44962.json) (`2025-08-04T17:15:30.367`)
|
||||
- [CVE-2025-44963](CVE-2025/CVE-2025-449xx/CVE-2025-44963.json) (`2025-08-04T17:15:30.540`)
|
||||
- [CVE-2025-50420](CVE-2025/CVE-2025-504xx/CVE-2025-50420.json) (`2025-08-04T17:15:30.700`)
|
||||
- [CVE-2025-50422](CVE-2025/CVE-2025-504xx/CVE-2025-50422.json) (`2025-08-04T17:15:30.813`)
|
||||
- [CVE-2025-51534](CVE-2025/CVE-2025-515xx/CVE-2025-51534.json) (`2025-08-04T17:15:30.927`)
|
||||
- [CVE-2025-51535](CVE-2025/CVE-2025-515xx/CVE-2025-51535.json) (`2025-08-04T17:15:31.037`)
|
||||
- [CVE-2025-5988](CVE-2025/CVE-2025-59xx/CVE-2025-5988.json) (`2025-08-04T16:15:34.560`)
|
||||
- [CVE-2025-8516](CVE-2025/CVE-2025-85xx/CVE-2025-8516.json) (`2025-08-04T16:15:35.373`)
|
||||
- [CVE-2025-8517](CVE-2025/CVE-2025-85xx/CVE-2025-8517.json) (`2025-08-04T16:15:35.577`)
|
||||
- [CVE-2025-8518](CVE-2025/CVE-2025-85xx/CVE-2025-8518.json) (`2025-08-04T17:15:31.870`)
|
||||
|
||||
|
||||
### CVEs modified in the last Commit
|
||||
|
||||
Recently modified CVEs: `253`
|
||||
Recently modified CVEs: `24`
|
||||
|
||||
- [CVE-2025-8477](CVE-2025/CVE-2025-84xx/CVE-2025-8477.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8480](CVE-2025/CVE-2025-84xx/CVE-2025-8480.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8488](CVE-2025/CVE-2025-84xx/CVE-2025-8488.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8493](CVE-2025/CVE-2025-84xx/CVE-2025-8493.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8494](CVE-2025/CVE-2025-84xx/CVE-2025-8494.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8495](CVE-2025/CVE-2025-84xx/CVE-2025-8495.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8496](CVE-2025/CVE-2025-84xx/CVE-2025-8496.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8497](CVE-2025/CVE-2025-84xx/CVE-2025-8497.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8498](CVE-2025/CVE-2025-84xx/CVE-2025-8498.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8499](CVE-2025/CVE-2025-84xx/CVE-2025-8499.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8500](CVE-2025/CVE-2025-85xx/CVE-2025-8500.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8501](CVE-2025/CVE-2025-85xx/CVE-2025-8501.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8502](CVE-2025/CVE-2025-85xx/CVE-2025-8502.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8503](CVE-2025/CVE-2025-85xx/CVE-2025-8503.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8504](CVE-2025/CVE-2025-85xx/CVE-2025-8504.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8505](CVE-2025/CVE-2025-85xx/CVE-2025-8505.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8506](CVE-2025/CVE-2025-85xx/CVE-2025-8506.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8507](CVE-2025/CVE-2025-85xx/CVE-2025-8507.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8508](CVE-2025/CVE-2025-85xx/CVE-2025-8508.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8509](CVE-2025/CVE-2025-85xx/CVE-2025-8509.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8510](CVE-2025/CVE-2025-85xx/CVE-2025-8510.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8511](CVE-2025/CVE-2025-85xx/CVE-2025-8511.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8512](CVE-2025/CVE-2025-85xx/CVE-2025-8512.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8513](CVE-2025/CVE-2025-85xx/CVE-2025-8513.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2025-8515](CVE-2025/CVE-2025-85xx/CVE-2025-8515.json) (`2025-08-04T15:06:15.833`)
|
||||
- [CVE-2013-10053](CVE-2013/CVE-2013-100xx/CVE-2013-10053.json) (`2025-08-04T16:15:31.957`)
|
||||
- [CVE-2019-19144](CVE-2019/CVE-2019-191xx/CVE-2019-19144.json) (`2025-08-04T17:15:28.047`)
|
||||
- [CVE-2020-25412](CVE-2020/CVE-2020-254xx/CVE-2020-25412.json) (`2025-08-04T17:19:47.523`)
|
||||
- [CVE-2023-38002](CVE-2023/CVE-2023-380xx/CVE-2023-38002.json) (`2025-08-04T17:47:19.140`)
|
||||
- [CVE-2023-39327](CVE-2023/CVE-2023-393xx/CVE-2023-39327.json) (`2025-08-04T17:21:53.200`)
|
||||
- [CVE-2024-20456](CVE-2024/CVE-2024-204xx/CVE-2024-20456.json) (`2025-08-04T17:44:16.417`)
|
||||
- [CVE-2024-20512](CVE-2024/CVE-2024-205xx/CVE-2024-20512.json) (`2025-08-04T17:02:52.677`)
|
||||
- [CVE-2024-49360](CVE-2024/CVE-2024-493xx/CVE-2024-49360.json) (`2025-08-04T17:25:26.540`)
|
||||
- [CVE-2024-52597](CVE-2024/CVE-2024-525xx/CVE-2024-52597.json) (`2025-08-04T16:57:38.327`)
|
||||
- [CVE-2025-44139](CVE-2025/CVE-2025-441xx/CVE-2025-44139.json) (`2025-08-04T17:15:29.333`)
|
||||
- [CVE-2025-44643](CVE-2025/CVE-2025-446xx/CVE-2025-44643.json) (`2025-08-04T16:15:33.243`)
|
||||
- [CVE-2025-46713](CVE-2025/CVE-2025-467xx/CVE-2025-46713.json) (`2025-08-04T17:23:32.917`)
|
||||
- [CVE-2025-46714](CVE-2025/CVE-2025-467xx/CVE-2025-46714.json) (`2025-08-04T17:24:44.340`)
|
||||
- [CVE-2025-46715](CVE-2025/CVE-2025-467xx/CVE-2025-46715.json) (`2025-08-04T17:25:44.107`)
|
||||
- [CVE-2025-46716](CVE-2025/CVE-2025-467xx/CVE-2025-46716.json) (`2025-08-04T17:26:34.820`)
|
||||
- [CVE-2025-51536](CVE-2025/CVE-2025-515xx/CVE-2025-51536.json) (`2025-08-04T16:15:33.697`)
|
||||
- [CVE-2025-52327](CVE-2025/CVE-2025-523xx/CVE-2025-52327.json) (`2025-08-04T17:15:31.140`)
|
||||
- [CVE-2025-52361](CVE-2025/CVE-2025-523xx/CVE-2025-52361.json) (`2025-08-04T17:15:31.300`)
|
||||
- [CVE-2025-54422](CVE-2025/CVE-2025-544xx/CVE-2025-54422.json) (`2025-08-04T17:30:08.827`)
|
||||
- [CVE-2025-54782](CVE-2025/CVE-2025-547xx/CVE-2025-54782.json) (`2025-08-04T16:15:33.970`)
|
||||
- [CVE-2025-54796](CVE-2025/CVE-2025-547xx/CVE-2025-54796.json) (`2025-08-04T16:15:34.217`)
|
||||
- [CVE-2025-54955](CVE-2025/CVE-2025-549xx/CVE-2025-54955.json) (`2025-08-04T16:15:34.340`)
|
||||
- [CVE-2025-8468](CVE-2025/CVE-2025-84xx/CVE-2025-8468.json) (`2025-08-04T16:15:35.097`)
|
||||
- [CVE-2025-8469](CVE-2025/CVE-2025-84xx/CVE-2025-8469.json) (`2025-08-04T16:15:35.237`)
|
||||
|
||||
|
||||
## Download and Usage
|
||||
|
||||
+295
-278
File diff suppressed because it is too large.
Load diff
Reference in new issue
Block a user