diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json index 004c2e9d28f..fd8a70ffd46 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13046.json @@ -2,103 +2,15 @@ "id": "CVE-2025-13046", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-11-12T08:15:42.170", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T04:16:05.133", + "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents." + "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority." } ], - "metrics": { - "cvssMetricV40": [ - { - "source": "twcert@cert.org.tw", - "type": "Secondary", - "cvssData": { - "version": "4.0", - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", - "baseScore": 8.7, - "baseSeverity": "HIGH", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "attackRequirements": "NONE", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "vulnConfidentialityImpact": "HIGH", - "vulnIntegrityImpact": "NONE", - "vulnAvailabilityImpact": "NONE", - "subConfidentialityImpact": "NONE", - "subIntegrityImpact": "NONE", - "subAvailabilityImpact": "NONE", - "exploitMaturity": "NOT_DEFINED", - "confidentialityRequirement": "NOT_DEFINED", - "integrityRequirement": "NOT_DEFINED", - "availabilityRequirement": "NOT_DEFINED", - "modifiedAttackVector": "NOT_DEFINED", - "modifiedAttackComplexity": "NOT_DEFINED", - "modifiedAttackRequirements": "NOT_DEFINED", - "modifiedPrivilegesRequired": "NOT_DEFINED", - "modifiedUserInteraction": "NOT_DEFINED", - "modifiedVulnConfidentialityImpact": "NOT_DEFINED", - "modifiedVulnIntegrityImpact": "NOT_DEFINED", - "modifiedVulnAvailabilityImpact": "NOT_DEFINED", - "modifiedSubConfidentialityImpact": "NOT_DEFINED", - "modifiedSubIntegrityImpact": "NOT_DEFINED", - "modifiedSubAvailabilityImpact": "NOT_DEFINED", - "Safety": "NOT_DEFINED", - "Automatable": "NOT_DEFINED", - "Recovery": "NOT_DEFINED", - "valueDensity": "NOT_DEFINED", - "vulnerabilityResponseEffort": "NOT_DEFINED", - "providerUrgency": "NOT_DEFINED" - } - } - ], - "cvssMetricV31": [ - { - "source": "twcert@cert.org.tw", - "type": "Primary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", - "baseScore": 7.5, - "baseSeverity": "HIGH", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", - "availabilityImpact": "NONE" - }, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - } - ] - }, - "weaknesses": [ - { - "source": "twcert@cert.org.tw", - "type": "Primary", - "description": [ - { - "lang": "en", - "value": "CWE-89" - } - ] - } - ], - "references": [ - { - "url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html", - "source": "twcert@cert.org.tw" - }, - { - "url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html", - "source": "twcert@cert.org.tw" - } - ] + "metrics": {}, + "references": [] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json b/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json index 629c86cb807..2770e2e39a7 100644 --- a/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json +++ b/CVE-2025/CVE-2025-130xx/CVE-2025-13047.json @@ -2,103 +2,15 @@ "id": "CVE-2025-13047", "sourceIdentifier": "twcert@cert.org.tw", "published": "2025-11-12T08:15:42.433", - "lastModified": "2025-11-12T16:19:12.850", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-12-01T04:16:05.307", + "vulnStatus": "Rejected", "cveTags": [], "descriptions": [ { "lang": "en", - "value": "Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents." + "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority." } ], - "metrics": { - "cvssMetricV40": [ - { - "source": "twcert@cert.org.tw", - "type": "Secondary", - "cvssData": { - "version": "4.0", - "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", - "baseScore": 8.7, - "baseSeverity": "HIGH", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "attackRequirements": "NONE", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "vulnConfidentialityImpact": "HIGH", - "vulnIntegrityImpact": "NONE", - "vulnAvailabilityImpact": "NONE", - "subConfidentialityImpact": "NONE", - "subIntegrityImpact": "NONE", - "subAvailabilityImpact": "NONE", - "exploitMaturity": "NOT_DEFINED", - "confidentialityRequirement": "NOT_DEFINED", - "integrityRequirement": "NOT_DEFINED", - "availabilityRequirement": "NOT_DEFINED", - "modifiedAttackVector": "NOT_DEFINED", - "modifiedAttackComplexity": "NOT_DEFINED", - "modifiedAttackRequirements": "NOT_DEFINED", - "modifiedPrivilegesRequired": "NOT_DEFINED", - "modifiedUserInteraction": "NOT_DEFINED", - "modifiedVulnConfidentialityImpact": "NOT_DEFINED", - "modifiedVulnIntegrityImpact": "NOT_DEFINED", - "modifiedVulnAvailabilityImpact": "NOT_DEFINED", - "modifiedSubConfidentialityImpact": "NOT_DEFINED", - "modifiedSubIntegrityImpact": "NOT_DEFINED", - "modifiedSubAvailabilityImpact": "NOT_DEFINED", - "Safety": "NOT_DEFINED", - "Automatable": "NOT_DEFINED", - "Recovery": "NOT_DEFINED", - "valueDensity": "NOT_DEFINED", - "vulnerabilityResponseEffort": "NOT_DEFINED", - "providerUrgency": "NOT_DEFINED" - } - } - ], - "cvssMetricV31": [ - { - "source": "twcert@cert.org.tw", - "type": "Primary", - "cvssData": { - "version": "3.1", - "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", - "baseScore": 7.5, - "baseSeverity": "HIGH", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "NONE", - "availabilityImpact": "NONE" - }, - "exploitabilityScore": 3.9, - "impactScore": 3.6 - } - ] - }, - "weaknesses": [ - { - "source": "twcert@cert.org.tw", - "type": "Primary", - "description": [ - { - "lang": "en", - "value": "CWE-89" - } - ] - } - ], - "references": [ - { - "url": "https://www.twcert.org.tw/en/cp-139-10499-15678-2.html", - "source": "twcert@cert.org.tw" - }, - { - "url": "https://www.twcert.org.tw/tw/cp-132-10498-61fa4-1.html", - "source": "twcert@cert.org.tw" - } - ] + "metrics": {}, + "references": [] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13802.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13802.json new file mode 100644 index 00000000000..f4c973d701e --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13802.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13802", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T03:15:46.140", + "lastModified": "2025-12-01T03:15:46.140", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected_date causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", + "baseScore": 5.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "NONE", + "integrityImpact": "PARTIAL", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 10.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + }, + { + "lang": "en", + "value": "CWE-94" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/dream357/report/blob/main/restaurant-website-report.docx", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333812", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333812", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.691839", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13803.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13803.json new file mode 100644 index 00000000000..ef5af9da730 --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13803.json @@ -0,0 +1,137 @@ +{ + "id": "CVE-2025-13803", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T03:15:46.390", + "lastModified": "2025-12-01T03:15:46.390", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 7.3, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", + "baseScore": 7.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "HIGH", + "exploitabilityScore": 10.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-644" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/mediacrush.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333813", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333813", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.691857", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13804.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13804.json new file mode 100644 index 00000000000..ec8810b2c90 --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13804.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13804", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T04:16:05.393", + "lastModified": "2025-12-01T04:16:05.393", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be exploited." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", + "baseScore": 4.0, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-200" + }, + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333814", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333814", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692050", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-138xx/CVE-2025-13805.json b/CVE-2025/CVE-2025-138xx/CVE-2025-13805.json new file mode 100644 index 00000000000..a5f55f2f2ad --- /dev/null +++ b/CVE-2025/CVE-2025-138xx/CVE-2025-13805.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13805", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-12-01T04:16:05.643", + "lastModified": "2025-12-01T04:16:05.643", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the file nutzcloud/nutzcloud-literpc/src/main/java/org/nutz/boot/starter/literpc/impl/endpoint/http/HttpServletRpcEndpoint.java of the component LiteRpc-Serializer. Executing manipulation can lead to deserialization. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been made available to the public and could be exploited." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.7, + "baseSeverity": "LOW", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 1.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", + "baseScore": 2.6, + "accessVector": "NETWORK", + "accessComplexity": "HIGH", + "authentication": "NONE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "baseSeverity": "LOW", + "exploitabilityScore": 4.9, + "impactScore": 2.9, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + }, + { + "lang": "en", + "value": "CWE-502" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-RCE-1/report.md#vulnerability-details-and-poc", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.333815", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.333815", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.692053", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index e14733f0067..f887b44e2e6 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-12-01T03:00:11.423158+00:00 +2025-12-01T05:00:10.693373+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-12-01T02:15:45.677000+00:00 +2025-12-01T04:16:05.643000+00:00 ``` ### Last Data Feed Release @@ -33,26 +33,25 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -319640 +319644 ``` ### CVEs added in the last Commit -Recently added CVEs: `5` +Recently added CVEs: `4` -- [CVE-2025-13797](CVE-2025/CVE-2025-137xx/CVE-2025-13797.json) (`2025-12-01T01:16:00.147`) -- [CVE-2025-13798](CVE-2025/CVE-2025-137xx/CVE-2025-13798.json) (`2025-12-01T01:16:00.383`) -- [CVE-2025-13799](CVE-2025/CVE-2025-137xx/CVE-2025-13799.json) (`2025-12-01T01:16:00.620`) -- [CVE-2025-13800](CVE-2025/CVE-2025-138xx/CVE-2025-13800.json) (`2025-12-01T02:15:45.677`) -- [CVE-2025-64772](CVE-2025/CVE-2025-647xx/CVE-2025-64772.json) (`2025-12-01T01:16:00.877`) +- [CVE-2025-13802](CVE-2025/CVE-2025-138xx/CVE-2025-13802.json) (`2025-12-01T03:15:46.140`) +- [CVE-2025-13803](CVE-2025/CVE-2025-138xx/CVE-2025-13803.json) (`2025-12-01T03:15:46.390`) +- [CVE-2025-13804](CVE-2025/CVE-2025-138xx/CVE-2025-13804.json) (`2025-12-01T04:16:05.393`) +- [CVE-2025-13805](CVE-2025/CVE-2025-138xx/CVE-2025-13805.json) (`2025-12-01T04:16:05.643`) ### CVEs modified in the last Commit Recently modified CVEs: `2` -- [CVE-2025-11411](CVE-2025/CVE-2025-114xx/CVE-2025-11411.json) (`2025-12-01T01:15:59.930`) -- [CVE-2025-54236](CVE-2025/CVE-2025-542xx/CVE-2025-54236.json) (`2025-12-01T02:00:02.263`) +- [CVE-2025-13046](CVE-2025/CVE-2025-130xx/CVE-2025-13046.json) (`2025-12-01T04:16:05.133`) +- [CVE-2025-13047](CVE-2025/CVE-2025-130xx/CVE-2025-13047.json) (`2025-12-01T04:16:05.307`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 5bdf9323fdf..c01f951372d 100644 --- a/_state.csv +++ b/_state.csv @@ -286879,7 +286879,7 @@ CVE-2025-11407,0,0,c25591315b61f604260187dbd5826fa8df8d26ac6a73e19b1028db165e6a5 CVE-2025-11408,0,0,706a29a8555fe33fb530ad30b0dbc158de57b530f453f92dbd17c5a7234a8f16,2025-11-19T20:30:10.900000 CVE-2025-11409,0,0,7acda80d09b0f0e387fa4f4fe6962ee98f08f8b0b783414c036c5d7e0a52d29d,2025-10-09T16:23:28.043000 CVE-2025-11410,0,0,544ce946f7f3d076ad86ea0b62a4569a55c096ae851c0c5a466608860e6ae86a,2025-10-09T16:24:25.223000 -CVE-2025-11411,0,1,55bb6102ac0102b8bf8e593d7cbff1f3f7c99486b33cdbeb6f53dc2226a1e705,2025-12-01T01:15:59.930000 +CVE-2025-11411,0,0,55bb6102ac0102b8bf8e593d7cbff1f3f7c99486b33cdbeb6f53dc2226a1e705,2025-12-01T01:15:59.930000 CVE-2025-11412,0,0,723261bf6329babb0452f1de3b0b6123e177135fb93ad77fd85244a06a012129,2025-10-14T15:09:07.050000 CVE-2025-11413,0,0,7b7fa89d7b20021aee2d155e0da49c7cfc1740886f2aa670b24b4c993bf4dc6c,2025-10-14T15:24:49.567000 CVE-2025-11414,0,0,94cd3177569fa748b107abf147079f5f522885069fd3215668c73ecf75bea4fe,2025-10-14T15:25:00.127000 @@ -288176,8 +288176,8 @@ CVE-2025-13033,0,0,ff102e369d638a5f2061d0ed97185110c4eba8b3bccac53dc73a50d32e5fc CVE-2025-13035,0,0,945737ba8318f2bd7ffe3ddce618773577be270b4db21ff88b1acd7a732168b7,2025-11-19T19:14:59.327000 CVE-2025-1304,0,0,19e272dd5c37445f8582e9faeec74dfd955b4d0ec48e945f5531dcff91a0acdc,2025-05-06T15:38:17.380000 CVE-2025-13042,0,0,804cb81b6e0d3507e4730737e0bdc92de4d173e744d8cc3eba2e7fbdbbdaf73e,2025-11-25T15:03:24.297000 -CVE-2025-13046,0,0,35fa53b70d1fa47ce7acb93a7c39a45fefe329ad2063438a47ccc97e6f96c494,2025-11-12T16:19:12.850000 -CVE-2025-13047,0,0,061330915d8fb4e4572e2da14cda6d86fa183d4e0637d7b0aeaad03a24b4d042,2025-11-12T16:19:12.850000 +CVE-2025-13046,0,1,915e5843592b810691950bf6094974d69403c9a00f0bc2eceaa0bc72e3bca28e,2025-12-01T04:16:05.133000 +CVE-2025-13047,0,1,e633a12dcf98f9479815df9312958fb8598a9b7007f32343d84cd41401c49e76,2025-12-01T04:16:05.307000 CVE-2025-1305,0,0,69ffedca9ae25327ab642cff1223fc450ea93b4a540021dd3ca51c4288d01232,2025-05-06T15:38:55.647000 CVE-2025-13051,0,0,b4f61e4d738dbe2d7041a478dd3e011761f3bbf5c095e73cd1c5800dfb903fd6,2025-11-19T19:14:59.327000 CVE-2025-13054,0,0,0b2c463a2040aab34adde4ec71563f7b330bccd296d502256c98dd4c657caf83,2025-11-19T19:14:59.327000 @@ -288577,11 +288577,15 @@ CVE-2025-13792,0,0,6ecc5b52034bc2b5f7d42afe4aa7f89bea7fc06fa355b321797587c418d35 CVE-2025-13793,0,0,3f99f488b65830143a0edb098586a326b5849e3038d993e8fafb7a7aba8db946,2025-11-30T17:15:45.273000 CVE-2025-13795,0,0,eb97294d7f7178c8f3016e50a2ea1b52a0537b823f583bd39ed79fd949cc8839,2025-11-30T23:15:47.107000 CVE-2025-13796,0,0,03006e36ffb176b6b71a9b96fb54c38a56d5bd8d61e9adafb25abf3cbbe04498,2025-12-01T00:15:46.670000 -CVE-2025-13797,1,1,fc2cc87c140e852f141dcadc46e871a8c49054f603d699b86f2500c05ff57c8e,2025-12-01T01:16:00.147000 -CVE-2025-13798,1,1,6f73b197649d5ba2d1e4590bd8080bcb3b055e6c99ad8bd6b15b79663e336fc3,2025-12-01T01:16:00.383000 -CVE-2025-13799,1,1,3c8dca2ce633424741220c81b21315aca19ddf1ea628641bede145b1563dbd21,2025-12-01T01:16:00.620000 +CVE-2025-13797,0,0,fc2cc87c140e852f141dcadc46e871a8c49054f603d699b86f2500c05ff57c8e,2025-12-01T01:16:00.147000 +CVE-2025-13798,0,0,6f73b197649d5ba2d1e4590bd8080bcb3b055e6c99ad8bd6b15b79663e336fc3,2025-12-01T01:16:00.383000 +CVE-2025-13799,0,0,3c8dca2ce633424741220c81b21315aca19ddf1ea628641bede145b1563dbd21,2025-12-01T01:16:00.620000 CVE-2025-1380,0,0,6bd04dd2008ea0079e8919e2e53c4972b6e83c3f4c56a4b8715e29739c2e265b,2025-04-02T19:01:09.913000 -CVE-2025-13800,1,1,9f0704f38f88ec96512c3a955681b97129120f040f6f1bb9f60a15cc43c0693c,2025-12-01T02:15:45.677000 +CVE-2025-13800,0,0,9f0704f38f88ec96512c3a955681b97129120f040f6f1bb9f60a15cc43c0693c,2025-12-01T02:15:45.677000 +CVE-2025-13802,1,1,93a1f5e9cc8fd23d4b3bdd818264614c454a6ae099bfdc392844974caf60e982,2025-12-01T03:15:46.140000 +CVE-2025-13803,1,1,d6a041755fce91f94d48965096f987bd328cb24eabdf6d449949d4ae0d33bd05,2025-12-01T03:15:46.390000 +CVE-2025-13804,1,1,b1ed6a5497375512df166fcf31b38e7645a10d597722b6f909164e06379865ab,2025-12-01T04:16:05.393000 +CVE-2025-13805,1,1,61d1d3eac5306ed8262232880ac68575c7493956d3856df626e6389ab0b1a85f,2025-12-01T04:16:05.643000 CVE-2025-1381,0,0,0527ab2734ccec4269c70fb2d0d40ea59b49fa3f3723a4356fee1835e38fef1a,2025-04-11T18:38:03.400000 CVE-2025-1382,0,0,87b39febd022dc5be9950aee3332d7f65d611ba2ccabe27600ad34ce4d1074c8,2025-05-21T16:54:27.347000 CVE-2025-1383,0,0,c9fb1a308be655ba73427b329ae1663f0ab56dcb4706e7cabab9a87230c6ae97,2025-03-19T20:47:28.020000 @@ -310603,7 +310607,7 @@ CVE-2025-54232,0,0,74738f8e59094d5441631bc47d8d83de85a54bd8947c605920a0f71b3a56a CVE-2025-54233,0,0,9b14013bc2511806dfc06793d5702178c0c1db7ab1a06628f77055eb730a98f2,2025-08-14T01:05:54.053000 CVE-2025-54234,0,0,15b722fe53a2a83df32f09430aa080a833a389e22b3cffdb61b9dcca09579de8,2025-11-06T22:23:13.170000 CVE-2025-54235,0,0,4c6e47535464eb5cac8c8712d883f6108cec41e891c1af59388fea6e2afee65a,2025-08-13T18:14:43.213000 -CVE-2025-54236,0,1,71293211003a65015f7bceb2faaee461c372d6b31f4aadeaab471c731e843494,2025-12-01T02:00:02.263000 +CVE-2025-54236,0,0,71293211003a65015f7bceb2faaee461c372d6b31f4aadeaab471c731e843494,2025-12-01T02:00:02.263000 CVE-2025-54237,0,0,f86cd71bb4266b1e9b06486eb24aa138c30d53f2219596e78679b21c5750c179,2025-09-18T13:38:39.070000 CVE-2025-54238,0,0,a36be64074d7d47b6190447bb92bfe557d52fcc438e1a77896e2e199d15e1917,2025-08-14T01:06:18.920000 CVE-2025-54239,0,0,9ad52d97af19a42000e5faa35316c0d255739384a3fc936923a9b36b4d0dd5ae,2025-09-12T14:29:06.223000 @@ -316299,7 +316303,7 @@ CVE-2025-64766,0,0,869c63890b71c7d3612ddcb69d1600eee17abf3cbba677d2f8adf9672cd1b CVE-2025-64767,0,0,dd77e9f4719910b8a798605076fb68719b569c8ab81ebc2195f7a8992f71be03,2025-11-25T22:16:42.557000 CVE-2025-6477,0,0,718d8ccaacc87e1c57765c6643de1f27af3dbe6e78ffbb21600c33723313882d,2025-06-25T19:25:44.190000 CVE-2025-64770,0,0,9f6d874024d46174136454b2b8784191b86d838279b0afddf1eb50435c5eceaf,2025-11-21T15:13:13.800000 -CVE-2025-64772,1,1,cb1168699b12d376d0d31edce5ad82bedfb040388fed08c28f6018829a8a89b6,2025-12-01T01:16:00.877000 +CVE-2025-64772,0,0,cb1168699b12d376d0d31edce5ad82bedfb040388fed08c28f6018829a8a89b6,2025-12-01T01:16:00.877000 CVE-2025-64773,0,0,59049fa938a874236a592ec4986adf18874e19e9a9d1ab314c7036607af19763,2025-11-21T12:57:53.123000 CVE-2025-6478,0,0,31ec8a10802d4265d3843ba47157156e1cd48721db6d3f2b4bbfa8dcfc5414f1,2025-06-27T17:13:26.643000 CVE-2025-6479,0,0,2c5b2471154f56ce282446555e3678e22ea4cd2374f79e129a80d30240de1c44,2025-06-25T19:19:01.967000