admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 02:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-01T05:00:10.693373+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-01 05:04:03 +00:00
1 parent 6037af3c18
commit ece292eec4
8 files changed
+601 -206
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2025/CVE-2025-130xx/CVE-2025-13046.json
+5 -93
View File
@@ -2,103 +2,15 @@
"id": "CVE-2025-13046",
"sourceIdentifier": "[email protected]",
"published": "2025-11-12T08:15:42.170",
"lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T04:16:05.133",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
"value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html",
"source": "[email protected]"
},
{
"url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html",
"source": "[email protected]"
}
]
"metrics": {},
"references": []
}
CVE-2025/CVE-2025-130xx/CVE-2025-13047.json
+5 -93
View File
@@ -2,103 +2,15 @@
"id": "CVE-2025-13047",
"sourceIdentifier": "[email protected]",
"published": "2025-11-12T08:15:42.433",
"lastModified": "2025-11-12T16:19:12.850",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-12-01T04:16:05.307",
"vulnStatus": "Rejected",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents."
"value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html",
"source": "[email protected]"
},
{
"url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html",
"source": "[email protected]"
}
]
"metrics": {},
"references": []
}
CVE-2025/CVE-2025-138xx/CVE-2025-13802.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-13802",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T03:15:46.140",
"lastModified": "2025-12-01T03:15:46.140",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected_date causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/dream357/report/blob/main/restaurant-website-report.docx",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.333812",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333812",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.691839",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13803.json
+137
View File
@@ -0,0 +1,137 @@
{
"id": "CVE-2025-13803",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T03:15:46.390",
"lastModified": "2025-12-01T03:15:46.390",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-644"
}
]
}
],
"references": [
{
"url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/mediacrush.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.333813",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333813",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.691857",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13804.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-13804",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T04:16:05.393",
"lastModified": "2025-12-01T04:16:05.393",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md",
"source": "[email protected]"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.333814",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333814",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692050",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13805.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-13805",
"sourceIdentifier": "[email protected]",
"published": "2025-12-01T04:16:05.643",
"lastModified": "2025-12-01T04:16:05.643",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been made available to the public and could be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
"baseScore": 2.6,
"accessVector": "NETWORK",
"accessComplexity": "HIGH",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 4.9,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-20"
},
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md",
"source": "[email protected]"
},
{
"url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md#vulnerability-details-and-poc",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.333815",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.333815",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.692053",
"source": "[email protected]"
}
]
}
README.md
+10 -11
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-01T03:00:11.423158+00:00
2025-12-01T05:00:10.693373+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-01T02:15:45.677000+00:00
2025-12-01T04:16:05.643000+00:00
```
### Last Data Feed Release
@@ -33,26 +33,25 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
319640
319644
```
### CVEs added in the last Commit
Recently added CVEs: `5`
Recently added CVEs: `4`
- [CVE-2025-13797](CVE-2025/CVE-2025-137xx/CVE-2025-13797.json) (`2025-12-01T01:16:00.147`)
- [CVE-2025-13798](CVE-2025/CVE-2025-137xx/CVE-2025-13798.json) (`2025-12-01T01:16:00.383`)
- [CVE-2025-13799](CVE-2025/CVE-2025-137xx/CVE-2025-13799.json) (`2025-12-01T01:16:00.620`)
- [CVE-2025-13800](CVE-2025/CVE-2025-138xx/CVE-2025-13800.json) (`2025-12-01T02:15:45.677`)
- [CVE-2025-64772](CVE-2025/CVE-2025-647xx/CVE-2025-64772.json) (`2025-12-01T01:16:00.877`)
- [CVE-2025-13802](CVE-2025/CVE-2025-138xx/CVE-2025-13802.json) (`2025-12-01T03:15:46.140`)
- [CVE-2025-13803](CVE-2025/CVE-2025-138xx/CVE-2025-13803.json) (`2025-12-01T03:15:46.390`)
- [CVE-2025-13804](CVE-2025/CVE-2025-138xx/CVE-2025-13804.json) (`2025-12-01T04:16:05.393`)
- [CVE-2025-13805](CVE-2025/CVE-2025-138xx/CVE-2025-13805.json) (`2025-12-01T04:16:05.643`)
### CVEs modified in the last Commit
Recently modified CVEs: `2`
- [CVE-2025-11411](CVE-2025/CVE-2025-114xx/CVE-2025-11411.json) (`2025-12-01T01:15:59.930`)
- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-12-01T02:00:02.263`)
- [CVE-2025-13046](CVE-2025/CVE-2025-130xx/CVE-2025-13046.json) (`2025-12-01T04:16:05.133`)
- [CVE-2025-13047](CVE-2025/CVE-2025-130xx/CVE-2025-13047.json) (`2025-12-01T04:16:05.307`)
## Download and Usage
_state.csv
+13 -9
View File
@@ -286879,7 +286879,7 @@ CVE-2025-11407,0,0,c25591315b61f604260187dbd5826fa8df8d26ac6a73e19b1028db165e6a5
CVE-2025-11408,0,0,706a29a8555fe33fb530ad30b0dbc158de57b530f453f92dbd17c5a7234a8f16,2025-11-19T20:30:10.900000
CVE-2025-11409,0,0,7acda80d09b0f0e387fa4f4fe6962ee98f08f8b0b783414c036c5d7e0a52d29d,2025-10-09T16:23:28.043000
CVE-2025-11410,0,0,544ce946f7f3d076ad86ea0b62a4569a55c096ae851c0c5a466608860e6ae86a,2025-10-09T16:24:25.223000
CVE-2025-11411,0,1,55bb6102ac0102b8bf8e593d7cbff1f3f7c99486b33cdbeb6f53dc2226a1e705,2025-12-01T01:15:59.930000
CVE-2025-11411,0,0,55bb6102ac0102b8bf8e593d7cbff1f3f7c99486b33cdbeb6f53dc2226a1e705,2025-12-01T01:15:59.930000
CVE-2025-11412,0,0,723261bf6329babb0452f1de3b0b6123e177135fb93ad77fd85244a06a012129,2025-10-14T15:09:07.050000
CVE-2025-11413,0,0,7b7fa89d7b20021aee2d155e0da49c7cfc1740886f2aa670b24b4c993bf4dc6c,2025-10-14T15:24:49.567000
CVE-2025-11414,0,0,94cd3177569fa748b107abf147079f5f522885069fd3215668c73ecf75bea4fe,2025-10-14T15:25:00.127000
@@ -288176,8 +288176,8 @@ CVE-2025-13033,0,0,ff102e369d638a5f2061d0ed97185110c4eba8b3bccac53dc73a50d32e5fc
CVE-2025-13035,0,0,945737ba8318f2bd7ffe3ddce618773577be270b4db21ff88b1acd7a732168b7,2025-11-19T19:14:59.327000
CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000
CVE-2025-13042,0,0,804cb81b6e0d3507e4730737e0bdc92de4d173e744d8cc3eba2e7fbdbbdaf73e,2025-11-25T15:03:24.297000
CVE-2025-13046,0,0,35fa53b70d1fa47ce7acb93a7c39a45fefe329ad2063438a47ccc97e6f96c494,2025-11-12T16:19:12.850000
CVE-2025-13047,0,0,061330915d8fb4e4572e2da14cda6d86fa183d4e0637d7b0aeaad03a24b4d042,2025-11-12T16:19:12.850000
CVE-2025-13046,0,1,915e5843592b810691950bf6094974d69403c9a00f0bc2eceaa0bc72e3bca28e,2025-12-01T04:16:05.133000
CVE-2025-13047,0,1,e633a12dcf98f9479815df9312958fb8598a9b7007f32343d84cd41401c49e76,2025-12-01T04:16:05.307000
CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000
CVE-2025-13051,0,0,b4f61e4d738dbe2d7041a478dd3e011761f3bbf5c095e73cd1c5800dfb903fd6,2025-11-19T19:14:59.327000
CVE-2025-13054,0,0,0b2c463a2040aab34adde4ec71563f7b330bccd296d502256c98dd4c657caf83,2025-11-19T19:14:59.327000
@@ -288577,11 +288577,15 @@ CVE-2025-13792,0,0,6ecc5b52034bc2b5f7d42afe4aa7f89bea7fc06fa355b321797587c418d35
CVE-2025-13793,0,0,3f99f488b65830143a0edb098586a326b5849e3038d993e8fafb7a7aba8db946,2025-11-30T17:15:45.273000
CVE-2025-13795,0,0,eb97294d7f7178c8f3016e50a2ea1b52a0537b823f583bd39ed79fd949cc8839,2025-11-30T23:15:47.107000
CVE-2025-13796,0,0,03006e36ffb176b6b71a9b96fb54c38a56d5bd8d61e9adafb25abf3cbbe04498,2025-12-01T00:15:46.670000
CVE-2025-13797,1,1,fc2cc87c140e852f141dcadc46e871a8c49054f603d699b86f2500c05ff57c8e,2025-12-01T01:16:00.147000
CVE-2025-13798,1,1,6f73b197649d5ba2d1e4590bd8080bcb3b055e6c99ad8bd6b15b79663e336fc3,2025-12-01T01:16:00.383000
CVE-2025-13799,1,1,3c8dca2ce633424741220c81b21315aca19ddf1ea628641bede145b1563dbd21,2025-12-01T01:16:00.620000
CVE-2025-13797,0,0,fc2cc87c140e852f141dcadc46e871a8c49054f603d699b86f2500c05ff57c8e,2025-12-01T01:16:00.147000
CVE-2025-13798,0,0,6f73b197649d5ba2d1e4590bd8080bcb3b055e6c99ad8bd6b15b79663e336fc3,2025-12-01T01:16:00.383000
CVE-2025-13799,0,0,3c8dca2ce633424741220c81b21315aca19ddf1ea628641bede145b1563dbd21,2025-12-01T01:16:00.620000
CVE-2025-1380,0,0,6bd04dd2008ea0079e8919e2e53c4972b6e83c3f4c56a4b8715e29739c2e265b,2025-04-02T19:01:09.913000
CVE-2025-13800,1,1,9f0704f38f88ec96512c3a955681b97129120f040f6f1bb9f60a15cc43c0693c,2025-12-01T02:15:45.677000
CVE-2025-13800,0,0,9f0704f38f88ec96512c3a955681b97129120f040f6f1bb9f60a15cc43c0693c,2025-12-01T02:15:45.677000
CVE-2025-13802,1,1,93a1f5e9cc8fd23d4b3bdd818264614c454a6ae099bfdc392844974caf60e982,2025-12-01T03:15:46.140000
CVE-2025-13803,1,1,d6a041755fce91f94d48965096f987bd328cb24eabdf6d449949d4ae0d33bd05,2025-12-01T03:15:46.390000
CVE-2025-13804,1,1,b1ed6a5497375512df166fcf31b38e7645a10d597722b6f909164e06379865ab,2025-12-01T04:16:05.393000
CVE-2025-13805,1,1,61d1d3eac5306ed8262232880ac68575c7493956d3856df626e6389ab0b1a85f,2025-12-01T04:16:05.643000
CVE-2025-1381,0,0,0527ab2734ccec4269c70fb2d0d40ea59b49fa3f3723a4356fee1835e38fef1a,2025-04-11T18:38:03.400000
CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074c8,2025-05-21T16:54:27.347000
CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000
@@ -310603,7 +310607,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a
CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000
CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000
CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000
CVE-2025-54236,0,1,71293211003a65015f7bceb2faaee461c372d6b31f4aadeaab471c731e843494,2025-12-01T02:00:02.263000
CVE-2025-54236,0,0,71293211003a65015f7bceb2faaee461c372d6b31f4aadeaab471c731e843494,2025-12-01T02:00:02.263000
CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000
CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000
CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000
@@ -316299,7 +316303,7 @@ CVE-2025-64766,0,0,869c63890b71c7d3612ddcb69d1600eee17abf3cbba677d2f8adf9672cd1b
CVE-2025-64767,0,0,dd77e9f4719910b8a798605076fb68719b569c8ab81ebc2195f7a8992f71be03,2025-11-25T22:16:42.557000
CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c33723313882d,2025-06-25T19:25:44.190000
CVE-2025-64770,0,0,9f6d874024d46174136454b2b8784191b86d838279b0afddf1eb50435c5eceaf,2025-11-21T15:13:13.800000
CVE-2025-64772,1,1,cb1168699b12d376d0d31edce5ad82bedfb040388fed08c28f6018829a8a89b6,2025-12-01T01:16:00.877000
CVE-2025-64772,0,0,cb1168699b12d376d0d31edce5ad82bedfb040388fed08c28f6018829a8a89b6,2025-12-01T01:16:00.877000
CVE-2025-64773,0,0,59049fa938a874236a592ec4986adf18874e19e9a9d1ab314c7036607af19763,2025-11-21T12:57:53.123000
CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000
CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000
Can't render this file because it is too large.