diff --git a/CVE-2024/CVE-2024-103xx/CVE-2024-10395.json b/CVE-2024/CVE-2024-103xx/CVE-2024-10395.json new file mode 100644 index 00000000000..a37b0a840eb --- /dev/null +++ b/CVE-2024/CVE-2024-103xx/CVE-2024-10395.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2024-10395", + "sourceIdentifier": "vulnerabilities@zephyrproject.org", + "published": "2025-02-03T07:15:09.923", + "lastModified": "2025-02-03T07:15:09.923", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "No proper validation of the length of user input in http_server_get_content_type_from_extension." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "vulnerabilities@zephyrproject.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", + "baseScore": 8.6, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "vulnerabilities@zephyrproject.org", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-127" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-hfww-j92m-x8fv", + "source": "vulnerabilities@zephyrproject.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index ba2988a07ba..2a559c94d3d 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-02-03T07:00:25.981759+00:00 +2025-02-03T09:00:20.330595+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-02-03T06:15:11.373000+00:00 +2025-02-03T07:15:09.923000+00:00 ``` ### Last Data Feed Release @@ -33,16 +33,14 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -279787 +279788 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `1` -- [CVE-2024-13347](CVE-2024/CVE-2024-133xx/CVE-2024-13347.json) (`2025-02-03T06:15:10.180`) -- [CVE-2024-57966](CVE-2024/CVE-2024-579xx/CVE-2024-57966.json) (`2025-02-03T05:15:10.080`) -- [CVE-2025-25066](CVE-2025/CVE-2025-250xx/CVE-2025-25066.json) (`2025-02-03T06:15:11.373`) +- [CVE-2024-10395](CVE-2024/CVE-2024-103xx/CVE-2024-10395.json) (`2025-02-03T07:15:09.923`) ### CVEs modified in the last Commit diff --git a/_state.csv b/_state.csv index e3231b84bc8..a017479bb90 100644 --- a/_state.csv +++ b/_state.csv @@ -243691,6 +243691,7 @@ CVE-2024-10390,0,0,eadc75c0265a2251af0e90207242caf2d4c771cd929a6213a0b7a52a99ae2 CVE-2024-10392,0,0,83d379ab85e5e89a3576ff9cf8715105eb816b9252912e835661d530611c1ac3,2024-11-01T12:57:03.417000 CVE-2024-10393,0,0,7b6946ed09e04710793d4d8a0e7e4503b730ded4153dd63924855e0dab4b1d70,2025-01-23T17:04:21.173000 CVE-2024-10394,0,0,1c13062239a25b9cff9e6f26f1b26f8ee25a1ff47a2d83f4af8592b1a7803dad,2024-11-21T17:15:09.443000 +CVE-2024-10395,1,1,e25b6a1e640365c260abdfe36e7326e5b5360ac27d43cc2b0e2a93dfa9a8c3d6,2025-02-03T07:15:09.923000 CVE-2024-10396,0,0,272e67398031519d0ec84db2984b2070d0fff6896ad84074c3b533bb58587972,2024-11-21T17:15:09.647000 CVE-2024-10397,0,0,eb0a841cfeefac1bdb6f8751be98fffeababa67bb8b15c52555a33acc05c4b9f,2024-11-21T17:15:09.860000 CVE-2024-10399,0,0,095406f8d5039a96c9b15f66c9c6aae69fc16e07792e432307aaf1afc72e7d79,2024-11-01T12:57:03.417000 @@ -246246,7 +246247,7 @@ CVE-2024-1334,0,0,5cd8113de272a8c461c68981cf2d6addc6166d9cf4d9dbad0d56a2a1ca6713 CVE-2024-13340,0,0,410a07bb948a432c6c68e7813dd264dbb94d6d7c0c36b44969bc437f75da1ae8,2025-01-31T16:02:16.553000 CVE-2024-13341,0,0,16acded92547be67b8d1319a2af71c7cc4dd793d079329b45b0485cf9f1e2a5f,2025-02-01T07:15:07.900000 CVE-2024-13343,0,0,f82a6052ccce2ed181e863ae61f345a91ef7738bcd705b7c57eb9cd26a33b700,2025-02-01T04:15:30.717000 -CVE-2024-13347,1,1,449d3824d97aa3b31e72bb18b804e0decfc3a64be27c513ed8d8a4ce71cea074,2025-02-03T06:15:10.180000 +CVE-2024-13347,0,0,449d3824d97aa3b31e72bb18b804e0decfc3a64be27c513ed8d8a4ce71cea074,2025-02-03T06:15:10.180000 CVE-2024-13348,0,0,e7356b4b7de40bfcab5dcbdec8635d94ba57c9cc43546ece560a6873afe1ba28,2025-01-30T15:15:16.223000 CVE-2024-13349,0,0,1a00cf757b3ec26bd50ea0e563207e24798d3893002c58755b8b9af1d412744e,2025-01-31T17:58:59.027000 CVE-2024-1335,0,0,82fb69da532892baa7a81804ae338bd46e69a8bbbad77be8c22b678b91bcc8f9,2024-12-31T16:50:11.167000 @@ -274271,7 +274272,7 @@ CVE-2024-57948,0,0,c07bf97b3b6358de0571b78c1e211a24bc27d24c3da430aa98d08a0013f7d CVE-2024-5795,0,0,8c27870eb8f46b4876cdd6a9335698b3a6adeccd1af066b5f5391281ef70b349,2024-11-21T09:48:20.780000 CVE-2024-5796,0,0,10c3848976491ca5eeb295d89b1679f80388276c56109509ef1777f493022afe,2024-11-21T09:48:20.910000 CVE-2024-57965,0,0,beca1a5c4241b8a17f2dc2e6caf9cfcb35d784b0c331b6bcd655a61453686e3e,2025-01-29T10:15:08.113000 -CVE-2024-57966,1,1,40e2f22cb22a31ff1abb28cf2e7cdb6b2203c6459f1e312f0ed24484eb3b3c7c,2025-02-03T05:15:10.080000 +CVE-2024-57966,0,0,40e2f22cb22a31ff1abb28cf2e7cdb6b2203c6459f1e312f0ed24484eb3b3c7c,2025-02-03T05:15:10.080000 CVE-2024-5798,0,0,1cf6b5fddcb53bc6e432a6a3428f56651407d96c3d029c184944ae69fb8dd23b,2024-11-21T09:48:21.013000 CVE-2024-5799,0,0,23def4a6c23961b05e747f80024dd1bb17c6a1bb6930d36587790a1981c0653f,2024-09-26T20:39:09.127000 CVE-2024-5800,0,0,0f1ba4e6921bceda8aa9f69d4954ff1ca271a0069f260f484c22f7b777658fee,2024-08-12T13:41:36.517000 @@ -279785,4 +279786,4 @@ CVE-2025-24886,0,0,22fe46ec70a40a868eba2ce8010e4edb050dca5246d72f260cb9074466803 CVE-2025-24891,0,0,07e08674cd8442d8685f561260fcf45fa0fd7fb9d59fcfb97bcd82467bccf06d,2025-01-31T23:15:08.457000 CVE-2025-25062,0,0,d7cd47140e90c99ff5d70fbea50bb5a39373533859e38c36979aba1d23137e6e,2025-02-03T04:15:09.587000 CVE-2025-25063,0,0,8c34659c6a257a89c707c83868a8b18d34ee010ab7504a5a7479117985ac792f,2025-02-03T04:15:09.760000 -CVE-2025-25066,1,1,d0c17153a53bf4d9b0d515b1e1a73dc9d8d2f57a6959d34f7f617b813c748218,2025-02-03T06:15:11.373000 +CVE-2025-25066,0,0,d0c17153a53bf4d9b0d515b1e1a73dc9d8d2f57a6959d34f7f617b813c748218,2025-02-03T06:15:11.373000