From e3341e0363af09eaca0f85f8aa48b7618062161e Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Fri, 7 Nov 2025 09:01:36 +0000 Subject: [PATCH] Auto-Update: 2025-11-07T09:00:11.825366+00:00 --- CVE-2022/CVE-2022-298xx/CVE-2022-29825.json | 4 +-- CVE-2022/CVE-2022-298xx/CVE-2022-29829.json | 4 +-- CVE-2022/CVE-2022-298xx/CVE-2022-29830.json | 4 +-- CVE-2025/CVE-2025-109xx/CVE-2025-10966.json | 33 +++++++++++++++++++++ README.md | 25 ++++++---------- _state.csv | 26 +++++++++------- 6 files changed, 63 insertions(+), 33 deletions(-) create mode 100644 CVE-2025/CVE-2025-109xx/CVE-2025-10966.json diff --git a/CVE-2022/CVE-2022-298xx/CVE-2022-29825.json b/CVE-2022/CVE-2022-298xx/CVE-2022-29825.json index de004cb1b4f..59a65366ec3 100644 --- a/CVE-2022/CVE-2022-298xx/CVE-2022-29825.json +++ b/CVE-2022/CVE-2022-298xx/CVE-2022-29825.json @@ -2,13 +2,13 @@ "id": "CVE-2022-29825", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2022-11-25T00:15:10.000", - "lastModified": "2024-11-21T06:59:45.647", + "lastModified": "2025-11-07T07:15:32.767", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U and GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally." + "value": "Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, and MT Works2 versions from 1.100E to 1.200J allows an unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally." }, { "lang": "es", diff --git a/CVE-2022/CVE-2022-298xx/CVE-2022-29829.json b/CVE-2022/CVE-2022-298xx/CVE-2022-29829.json index 39772d6d8f5..0035e1b463f 100644 --- a/CVE-2022/CVE-2022-298xx/CVE-2022-29829.json +++ b/CVE-2022/CVE-2022-298xx/CVE-2022-29829.json @@ -2,13 +2,13 @@ "id": "CVE-2022-29829", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2022-11-25T00:15:10.297", - "lastModified": "2024-11-21T06:59:46.187", + "lastModified": "2025-11-07T07:15:33.160", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C and Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally." + "value": "Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) versions from 1.122C to 1.290C, Motion Control Setting(GX Works3 related software) versions from 1.035M to 1.042U, and MT Works2 versions from 1.100E to 1.200J allows a remote unauthenticated attacker to disclose sensitive information. As a result, unauthenticated users may view programs and project files or execute programs illegally." }, { "lang": "es", diff --git a/CVE-2022/CVE-2022-298xx/CVE-2022-29830.json b/CVE-2022/CVE-2022-298xx/CVE-2022-29830.json index 0e73a7cdd20..ef91ab9c5b0 100644 --- a/CVE-2022/CVE-2022-298xx/CVE-2022-29830.json +++ b/CVE-2022/CVE-2022-298xx/CVE-2022-29830.json @@ -2,13 +2,13 @@ "id": "CVE-2022-29830", "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp", "published": "2022-11-25T00:15:10.367", - "lastModified": "2024-11-21T06:59:46.313", + "lastModified": "2025-11-07T07:15:33.350", "vulnStatus": "Modified", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Motion Control Setting(GX Works3 related software) versions from 1.000A and later allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a result, unauthenticated attackers may obtain information about project files illegally." + "value": "Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Setting(GX Works3 related software) versions from 1.000A to 1.065T allows a remote unauthenticated attacker to disclose or tamper with sensitive information. As a result, unauthenticated attackers may obtain information about project files illegally." }, { "lang": "es", diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json new file mode 100644 index 00000000000..59e2ee51631 --- /dev/null +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10966.json @@ -0,0 +1,33 @@ +{ + "id": "CVE-2025-10966", + "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", + "published": "2025-11-07T08:15:39.617", + "lastModified": "2025-11-07T08:15:39.617", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "curl's code for managing SSH connections when SFTP was done using the wolfSSH\npowered backend was flawed and missed host verification mechanisms.\n\nThis prevents curl from detecting MITM attackers and more." + } + ], + "metrics": {}, + "references": [ + { + "url": "https://curl.se/docs/CVE-2025-10966.html", + "source": "2499f714-1537-4658-8207-48ae4bb9eae9" + }, + { + "url": "https://curl.se/docs/CVE-2025-10966.json", + "source": "2499f714-1537-4658-8207-48ae4bb9eae9" + }, + { + "url": "https://hackerone.com/reports/3355218", + "source": "2499f714-1537-4658-8207-48ae4bb9eae9" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/05/2", + "source": "af854a3a-2127-422b-91ae-364da2661108" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 7761ca409d7..eb5d4c4e28b 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-07T07:00:12.315154+00:00 +2025-11-07T09:00:11.825366+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-07T06:15:33.850000+00:00 +2025-11-07T08:15:39.617000+00:00 ``` ### Last Data Feed Release @@ -33,30 +33,23 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -113753 +113757 ``` ### CVEs added in the last Commit -Recently added CVEs: `11` +Recently added CVEs: `1` -- [CVE-2025-12352](CVE-2025/CVE-2025-123xx/CVE-2025-12352.json) (`2025-11-07T05:15:57.163`) -- [CVE-2025-12520](CVE-2025/CVE-2025-125xx/CVE-2025-12520.json) (`2025-11-07T06:15:33.013`) -- [CVE-2025-12527](CVE-2025/CVE-2025-125xx/CVE-2025-12527.json) (`2025-11-07T06:15:33.283`) -- [CVE-2025-4519](CVE-2025/CVE-2025-45xx/CVE-2025-4519.json) (`2025-11-07T05:16:04.227`) -- [CVE-2025-4522](CVE-2025/CVE-2025-45xx/CVE-2025-4522.json) (`2025-11-07T05:16:04.443`) -- [CVE-2025-64329](CVE-2025/CVE-2025-643xx/CVE-2025-64329.json) (`2025-11-07T05:16:08.017`) -- [CVE-2025-64336](CVE-2025/CVE-2025-643xx/CVE-2025-64336.json) (`2025-11-07T05:16:08.807`) -- [CVE-2025-64338](CVE-2025/CVE-2025-643xx/CVE-2025-64338.json) (`2025-11-07T05:16:10.167`) -- [CVE-2025-64339](CVE-2025/CVE-2025-643xx/CVE-2025-64339.json) (`2025-11-07T06:15:33.477`) -- [CVE-2025-64343](CVE-2025/CVE-2025-643xx/CVE-2025-64343.json) (`2025-11-07T06:15:33.673`) -- [CVE-2025-64346](CVE-2025/CVE-2025-643xx/CVE-2025-64346.json) (`2025-11-07T06:15:33.850`) +- [CVE-2025-10966](CVE-2025/CVE-2025-109xx/CVE-2025-10966.json) (`2025-11-07T08:15:39.617`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `3` +- [CVE-2022-29825](CVE-2022/CVE-2022-298xx/CVE-2022-29825.json) (`2025-11-07T07:15:32.767`) +- [CVE-2022-29829](CVE-2022/CVE-2022-298xx/CVE-2022-29829.json) (`2025-11-07T07:15:33.160`) +- [CVE-2022-29830](CVE-2022/CVE-2022-298xx/CVE-2022-29830.json) (`2025-11-07T07:15:33.350`) ## Download and Usage diff --git a/_state.csv b/_state.csv index de0a94fa28e..c837b060d9e 100644 --- a/_state.csv +++ b/_state.csv @@ -106485,6 +106485,9 @@ CVE-2022-29023,0,0,2af5859dc71189fc753f9c346c5463cbf1b850512d77b1ee790d0614b886b CVE-2022-29081,0,0,45778d1aeb692068210866aecb43ca96fb1b4536ec881041d4a2a6e38412f436,2025-11-06T22:24:29.790000 CVE-2022-29303,0,0,34001da1162ec60ac62e4aead62770f3ec945b4373b677fe371cc24c916bea16,2025-11-03T15:43:43.360000 CVE-2022-29499,0,0,dc8a4570ce528f5f1abc089d8b7bc21548f4a0ab14038e9e37c77fa29db38763,2025-11-03T17:39:18.517000 +CVE-2022-29825,0,1,6e214b419477c6c1e3abccd0c957899013b9ea6d40fa2f762ac809045f67b00b,2025-11-07T07:15:32.767000 +CVE-2022-29829,0,1,6b9feb43ef334561656cf585f0ca0b720ede2595a64fe78d482001f37254b92f,2025-11-07T07:15:33.160000 +CVE-2022-29830,0,1,4da83cc9837819c890c75fc423f0801528d5188eed6eda5b45b6eb13719457c0,2025-11-07T07:15:33.350000 CVE-2022-29970,0,0,454543d25722a0d42e230e61534fbc49fa9beb69dca7e227cdcf3c5e8100c3de,2025-11-04T16:15:49.367000 CVE-2022-30333,0,0,cb95b9c34992d3950f2abbea334d6961b7676c6b8bd7f203a5297aec99026bdc,2025-11-03T16:20:12.860000 CVE-2022-30552,0,0,0e28067febcfa744e01342afe388038222c8062b13746bd8beb9df77d9a25b14,2025-11-03T20:15:54.237000 @@ -110429,6 +110432,7 @@ CVE-2025-10924,0,0,63d9b3ba5331937113bca99faf9e4c0a0d004a79f594c50a201697da6729c CVE-2025-10925,0,0,b42d4c36874cb1f425be3ff0b2c073b801fbab5bb1ee5b870b5ace3c7b1179ed,2025-11-04T13:14:01.757000 CVE-2025-10934,0,0,4b019042e3c9bce43c9ad5c429cbb2d54039455926e6570e0a952388238e5823,2025-11-04T13:12:43.120000 CVE-2025-10955,0,0,584225cd798fa68ef124e5fe21a9a6caf54480d21004e9198fd5c20bcc39502c,2025-11-06T19:45:09.883000 +CVE-2025-10966,1,1,92c0516a22357148b63e251408d10aa4acaf3012a9d4f0da004bf81257c69f0f,2025-11-07T08:15:39.617000 CVE-2025-1097,0,0,5680e85d18ec5605fb88a2924264a43c54978cedd997e744589d4016687bf829,2025-11-03T21:18:52.093000 CVE-2025-1098,0,0,0ecfae677f996d8c5821e8dbcd60de24300eac5289bd8151b98959d9aecc8269,2025-11-03T21:18:52.230000 CVE-2025-11007,0,0,1e4fb842967631b06527606b33454c6affa0e13f74a0c90a0c74c4e15b0e90ef,2025-11-04T15:40:45.533000 @@ -110604,7 +110608,7 @@ CVE-2025-12339,0,0,cf2d3c728f1393cfaf5f2b95fc9079961e90265daaf95ff616f7d69c139a3 CVE-2025-12346,0,0,906fdf716739d27a19a27f32dd422d8979c7d84933dbf8da9fe17df0906dc128,2025-11-06T20:05:30.040000 CVE-2025-12347,0,0,286f94a8f678803f688f969b4d1929a2d55bc67cbd20ce084863f81cc14dd225,2025-11-06T20:04:08.223000 CVE-2025-12350,0,0,1c5f1bc7971cd43ed24a0d9e7e0c5e3972407d44215e228a03c19b1125fc44ab,2025-11-04T15:40:45.533000 -CVE-2025-12352,1,1,caa40e73233b7c6b8bf647840bb13824a5e1dd0233134316e306d8e145ff8c6a,2025-11-07T05:15:57.163000 +CVE-2025-12352,0,0,caa40e73233b7c6b8bf647840bb13824a5e1dd0233134316e306d8e145ff8c6a,2025-11-07T05:15:57.163000 CVE-2025-12357,0,0,c71bbe31425e9093bcbcc507fd9e596fd5f13597606b08bf631f1349adc23347,2025-11-04T15:41:31.450000 CVE-2025-12360,0,0,1dd1546dbbdb2732b96ad279424b53c2780d2a3a68266c0e2e7075d0576ff46c,2025-11-06T19:45:09.883000 CVE-2025-12367,0,0,fdc4e13dc4823c4f2ebd516855f0994820a812a71426c0158ba005b28d73e993,2025-11-04T15:41:31.450000 @@ -110650,9 +110654,9 @@ CVE-2025-12509,0,0,d9f2f9b04d4b2ccbcf65abb417ba1bde7356b1444d3c91315fd503033c6d7 CVE-2025-12515,0,0,56624f599c3eac92850b2f871e654b3291a9cd325562eaac08de0fc0c9aaa911,2025-11-04T15:41:56.843000 CVE-2025-12516,0,0,e3b4ba7105f4b6b2f254d80e9380b090423b40932d25aca7be1df8cd92aca187,2025-11-04T15:41:56.843000 CVE-2025-12517,0,0,a163f1f9d6150c33686c805899f36bc7cce6542beddc327f71be8a1a1f6ffa4a,2025-11-04T15:41:56.843000 -CVE-2025-12520,1,1,95c6dc774b8321a6ba1b8a83ddd4a2a446ee1b3099120adc6aeccb8584da4951,2025-11-07T06:15:33.013000 +CVE-2025-12520,0,0,95c6dc774b8321a6ba1b8a83ddd4a2a446ee1b3099120adc6aeccb8584da4951,2025-11-07T06:15:33.013000 CVE-2025-12521,0,0,425d64267a5be9ff14c2acc7da17b0334327e18774f4fdb15d242622b71d0cef,2025-11-04T15:41:31.450000 -CVE-2025-12527,1,1,c65a17115552f2e26cfbd35fdd97f33775b5d5af30066d862cf5e37c9e99ccd6,2025-11-07T06:15:33.283000 +CVE-2025-12527,0,0,c65a17115552f2e26cfbd35fdd97f33775b5d5af30066d862cf5e37c9e99ccd6,2025-11-07T06:15:33.283000 CVE-2025-12531,0,0,4140fbc89bb8f5fb55433481c7015585c867348a4a102182ae8b38fbd2874151,2025-11-05T15:16:17.020000 CVE-2025-12546,0,0,e053a61bce46e09ea18eced2c60fd9d8a445d1a562f0ece9e830f406c57ab314,2025-11-07T01:30:56.277000 CVE-2025-12547,0,0,5daa02618e2dec455cded61beb92c5a781fd09a2485f948a3e7e4cc5feb6bdcc,2025-11-07T01:36:29.650000 @@ -112783,8 +112787,8 @@ CVE-2025-44960,0,0,abdd17d2d7d886a0ba9faa0e832b747828f67f68cf5c704716ed500a98b95 CVE-2025-44961,0,0,d4c78d038ded330fe954ee17082e869acd0830164b7eaf656d74b3f59eec0c85,2025-11-03T20:19:04.147000 CVE-2025-44962,0,0,d802f726b4a38520485c17ddade1d2734ca1a4f9c2969800e076c7bb4ffc5edd,2025-11-03T20:19:04.393000 CVE-2025-44963,0,0,488c9142891e1a944421d614cf97bb116d6e1c5ea8965eb5b5c67cbc1e95dc70,2025-11-03T20:19:04.530000 -CVE-2025-4519,1,1,18b7e28eb2d9dac46430a4748e9441b237c6ce566cb2b269dc9aee194508ec53,2025-11-07T05:16:04.227000 -CVE-2025-4522,1,1,a61cddc7f07e621d4eed28ba1666ea6479104d52d3c4c1ec19587f0dbe57ffa6,2025-11-07T05:16:04.443000 +CVE-2025-4519,0,0,18b7e28eb2d9dac46430a4748e9441b237c6ce566cb2b269dc9aee194508ec53,2025-11-07T05:16:04.227000 +CVE-2025-4522,0,0,a61cddc7f07e621d4eed28ba1666ea6479104d52d3c4c1ec19587f0dbe57ffa6,2025-11-07T05:16:04.443000 CVE-2025-45378,0,0,bb30339f0a2b5a94525e6a05e99bcb2f6cde9fe51b5499ebf1e59b45bfdc0e16,2025-11-06T19:45:30.990000 CVE-2025-45379,0,0,e97ee003014b88dbc175b3c065504e4bc1d871296b0d21920229cde2170a8563,2025-11-06T19:45:30.990000 CVE-2025-45582,0,0,0f32b4bb3bcca246bc2708ccc873f958b089e7ac5cf72a38a6a6a5f316ef6aea,2025-11-02T01:15:32.307000 @@ -113599,12 +113603,12 @@ CVE-2025-64323,0,0,52ee117587aa6be9844dbf5a308550e67abb51e3a4afdcbf32945a799bd70 CVE-2025-64326,0,0,7951ba9d42d2e0b9af282b65229efbb6084d90269ded27c40fa69c133a815c87,2025-11-06T21:15:43.957000 CVE-2025-64327,0,0,f3c1f5a96e1b2b31c39e4e1e4fb21ba36737451c964e74a6d9a3a211dcf520b6,2025-11-06T22:15:44.680000 CVE-2025-64328,0,0,c5e4ecd42278eac880ee209002a85ff4e1c7333636dd2ef8c9a9a26877417da3,2025-11-07T04:15:47.397000 -CVE-2025-64329,1,1,9da9ae26e83fb69ec886658687579c2e110cd09b0646e31cb7c36eccfc6e6143,2025-11-07T05:16:08.017000 -CVE-2025-64336,1,1,a1701db901bf897dd556fcb0aea943955dcd17c956695fd7589bf0d9b8883c87,2025-11-07T05:16:08.807000 -CVE-2025-64338,1,1,e900b0f8f11e03fe33043a4749713e50413d55b166fd598f50881a945a4be6d9,2025-11-07T05:16:10.167000 -CVE-2025-64339,1,1,c82db7428b6e488946a56eb36bbb0fb94fe5704a79bff217cf7eeefe14a6731c,2025-11-07T06:15:33.477000 -CVE-2025-64343,1,1,0a3c35b10a169de0f87cfcf060140c1de2add71b82b75b1a85519384ea43e1a8,2025-11-07T06:15:33.673000 -CVE-2025-64346,1,1,190b76c0a780a802b705a70c7e98c9e411503aca3eedca581b64c19f3bbc74f0,2025-11-07T06:15:33.850000 +CVE-2025-64329,0,0,9da9ae26e83fb69ec886658687579c2e110cd09b0646e31cb7c36eccfc6e6143,2025-11-07T05:16:08.017000 +CVE-2025-64336,0,0,a1701db901bf897dd556fcb0aea943955dcd17c956695fd7589bf0d9b8883c87,2025-11-07T05:16:08.807000 +CVE-2025-64338,0,0,e900b0f8f11e03fe33043a4749713e50413d55b166fd598f50881a945a4be6d9,2025-11-07T05:16:10.167000 +CVE-2025-64339,0,0,c82db7428b6e488946a56eb36bbb0fb94fe5704a79bff217cf7eeefe14a6731c,2025-11-07T06:15:33.477000 +CVE-2025-64343,0,0,0a3c35b10a169de0f87cfcf060140c1de2add71b82b75b1a85519384ea43e1a8,2025-11-07T06:15:33.673000 +CVE-2025-64346,0,0,190b76c0a780a802b705a70c7e98c9e411503aca3eedca581b64c19f3bbc74f0,2025-11-07T06:15:33.850000 CVE-2025-64348,0,0,05927ffc9e67872b7ea8c90138b42856a394118091b03bdb0428b2a74f2fdd01,2025-11-04T15:41:31.450000 CVE-2025-64349,0,0,bb8bf140b9694c6ad1f25743b2768164fdd9968ac194104f7701579dc96ff1eb,2025-11-04T15:41:31.450000 CVE-2025-64350,0,0,a84e093fd0d9aaea79b4f2fa3df74d1ce732db3bb18b326c7e7d4853d8312732,2025-11-04T15:41:31.450000