admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-02-06T23:00:48.045582+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-02-06 23:04:14 +00:00
1 parent 3169f3c801
commit f29e6be57b
117 files changed
+3996 -393
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2017/CVE-2017-126xx/CVE-2017-12615.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2017-12615",
"sourceIdentifier": "[email protected]",
"published": "2017-09-19T13:29:00.190",
"lastModified": "2025-01-23T15:34:44.007",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T21:15:09.480",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-434"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
CVE-2017/CVE-2017-56xx/CVE-2017-5638.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2017-5638",
"sourceIdentifier": "[email protected]",
"published": "2017-03-11T02:59:00.150",
"lastModified": "2025-01-23T15:28:58.827",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T22:15:32.190",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-755"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-755"
}
]
}
],
"configurations": [
CVE-2017/CVE-2017-97xx/CVE-2017-9791.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2017-9791",
"sourceIdentifier": "[email protected]",
"published": "2017-07-10T16:29:00.277",
"lastModified": "2025-01-23T15:29:25.123",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T22:15:32.543",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-20"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
CVE-2017/CVE-2017-98xx/CVE-2017-9805.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2017-9805",
"sourceIdentifier": "[email protected]",
"published": "2017-09-15T19:29:00.237",
"lastModified": "2025-01-23T15:34:40.910",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T22:15:32.763",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-502"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-117xx/CVE-2018-11776.json
+22 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2018-11776",
"sourceIdentifier": "[email protected]",
"published": "2018-08-22T13:29:00.753",
"lastModified": "2025-01-23T15:36:33.293",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T21:15:10.560",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2018/CVE-2018-174xx/CVE-2018-17450.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17450",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.440",
"lastModified": "2024-11-21T03:54:26.683",
"lastModified": "2025-02-06T21:15:10.827",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-918"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-174xx/CVE-2018-17451.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17451",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.480",
"lastModified": "2024-11-21T03:54:26.837",
"lastModified": "2025-02-06T21:15:11.020",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-352"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-174xx/CVE-2018-17452.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17452",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.520",
"lastModified": "2024-11-21T03:54:26.987",
"lastModified": "2025-02-06T21:15:11.207",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-918"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-174xx/CVE-2018-17453.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17453",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.557",
"lastModified": "2024-11-21T03:54:27.140",
"lastModified": "2025-02-06T21:15:11.420",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
CVE-2018/CVE-2018-174xx/CVE-2018-17454.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17454",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.597",
"lastModified": "2024-11-21T03:54:27.300",
"lastModified": "2025-02-06T21:15:11.610",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-174xx/CVE-2018-17455.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17455",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.637",
"lastModified": "2024-11-21T03:54:27.510",
"lastModified": "2025-02-06T21:15:11.797",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-639"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-175xx/CVE-2018-17536.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-17536",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T23:15:13.680",
"lastModified": "2024-11-21T03:54:34.167",
"lastModified": "2025-02-06T21:15:11.997",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2018/CVE-2018-199xx/CVE-2018-19949.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-19949",
"sourceIdentifier": "[email protected]",
"published": "2020-10-28T18:15:12.647",
"lastModified": "2024-11-21T03:58:52.237",
"lastModified": "2025-02-06T21:15:12.333",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2018/CVE-2018-199xx/CVE-2018-19953.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2018-19953",
"sourceIdentifier": "[email protected]",
"published": "2020-10-28T18:15:12.740",
"lastModified": "2024-11-21T03:58:52.767",
"lastModified": "2025-02-06T21:15:12.550",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
],
"cvssMetricV2": [
CVE-2019/CVE-2019-01xx/CVE-2019-0193.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-0193",
"sourceIdentifier": "[email protected]",
"published": "2019-08-01T14:15:13.113",
"lastModified": "2025-01-23T15:37:04.953",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T22:15:32.973",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-94"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-02xx/CVE-2019-0211.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-0211",
"sourceIdentifier": "[email protected]",
"published": "2019-04-08T22:29:00.387",
"lastModified": "2025-01-23T15:37:01.753",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T21:15:12.750",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-416"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-175xx/CVE-2019-17558.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2019-17558",
"sourceIdentifier": "[email protected]",
"published": "2019-12-30T17:15:19.780",
"lastModified": "2024-11-21T04:32:31.450",
"lastModified": "2025-02-06T22:15:33.237",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.6,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-74"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-74"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-39xx/CVE-2019-3929.json
+22 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-3929",
"sourceIdentifier": "[email protected]",
"published": "2019-04-30T21:29:00.713",
"lastModified": "2024-11-21T04:42:53.067",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:13.190",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2019/CVE-2019-71xx/CVE-2019-7192.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7192",
"sourceIdentifier": "[email protected]",
"published": "2019-12-05T17:15:12.950",
"lastModified": "2024-11-21T04:47:44.477",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:13.510",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-863"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-863"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-71xx/CVE-2019-7193.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7193",
"sourceIdentifier": "[email protected]",
"published": "2019-12-05T17:15:13.027",
"lastModified": "2024-11-21T04:47:44.593",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:13.767",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-20"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-71xx/CVE-2019-7194.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7194",
"sourceIdentifier": "[email protected]",
"published": "2019-12-05T17:15:13.107",
"lastModified": "2024-11-21T04:47:44.740",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:13.990",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-22"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
CVE-2019/CVE-2019-71xx/CVE-2019-7195.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2019-7195",
"sourceIdentifier": "[email protected]",
"published": "2019-12-05T17:15:13.183",
"lastModified": "2024-11-21T04:47:44.860",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:14.220",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-22"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-119xx/CVE-2020-11978.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-11978",
"sourceIdentifier": "[email protected]",
"published": "2020-07-17T00:15:10.337",
"lastModified": "2024-11-21T04:59:02.030",
"lastModified": "2025-02-06T21:15:14.453",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-78"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-175xx/CVE-2020-17530.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-17530",
"sourceIdentifier": "[email protected]",
"published": "2020-12-11T02:15:10.883",
"lastModified": "2024-11-21T05:08:18.480",
"lastModified": "2025-02-06T21:15:14.650",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-917"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-917"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-19xx/CVE-2020-1938.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-1938",
"sourceIdentifier": "[email protected]",
"published": "2020-02-24T22:15:12.057",
"lastModified": "2024-11-21T05:11:39.277",
"lastModified": "2025-02-06T22:15:33.540",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2020/CVE-2020-19xx/CVE-2020-1956.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-1956",
"sourceIdentifier": "[email protected]",
"published": "2020-05-22T14:15:11.840",
"lastModified": "2024-11-21T05:11:43.987",
"lastModified": "2025-02-06T21:15:14.887",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-78"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-25xx/CVE-2020-2509.json
+22 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2020-2509",
"sourceIdentifier": "[email protected]",
"published": "2021-04-17T04:15:11.327",
"lastModified": "2024-11-21T05:25:23.350",
"vulnStatus": "Modified",
"lastModified": "2025-02-06T21:15:15.153",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2020/CVE-2020-360xx/CVE-2020-36085.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2020-36085",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:33.937",
"lastModified": "2025-02-06T22:15:33.937",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Stored Cross Site Scripting(XSS) vulnerability in Egavilan Media Resumes Management and Job Application Website 1.0 allows remote attackers to inject arbitrary code via First and Last Name in Apply For This Job Form."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/manitorpotterk/CVE/blob/main/Egavilan%20Media%20XSS.md",
"source": "[email protected]"
}
]
}
CVE-2020/CVE-2020-57xx/CVE-2020-5722.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-5722",
"sourceIdentifier": "[email protected]",
"published": "2020-03-23T20:15:12.043",
"lastModified": "2024-11-21T05:34:29.097",
"lastModified": "2025-02-06T21:15:15.403",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-89"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
CVE-2020/CVE-2020-57xx/CVE-2020-5735.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-5735",
"sourceIdentifier": "[email protected]",
"published": "2020-04-08T13:15:13.003",
"lastModified": "2024-11-21T05:34:30.377",
"lastModified": "2025-02-06T21:15:15.593",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
CVE-2020/CVE-2020-57xx/CVE-2020-5741.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2020-5741",
"sourceIdentifier": "[email protected]",
"published": "2020-05-08T13:15:11.137",
"lastModified": "2024-11-21T05:34:31.053",
"lastModified": "2025-02-06T21:15:15.817",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-502"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"configurations": [
CVE-2021/CVE-2021-200xx/CVE-2021-20090.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-20090",
"sourceIdentifier": "[email protected]",
"published": "2021-04-29T15:15:10.630",
"lastModified": "2024-11-21T05:45:54.457",
"lastModified": "2025-02-06T21:15:16.230",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-22"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
CVE-2021/CVE-2021-225xx/CVE-2021-22502.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-22502",
"sourceIdentifier": "[email protected]",
"published": "2021-02-08T22:15:12.527",
"lastModified": "2024-11-21T05:50:14.200",
"lastModified": "2025-02-06T21:15:16.477",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
@@ -78,6 +98,16 @@
"value": "CWE-78"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
CVE-2021/CVE-2021-225xx/CVE-2021-22506.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-22506",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T14:15:11.967",
"lastModified": "2024-11-21T05:50:14.610",
"lastModified": "2025-02-06T21:15:16.713",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"cvssMetricV2": [
CVE-2021/CVE-2021-404xx/CVE-2021-40438.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-40438",
"sourceIdentifier": "[email protected]",
"published": "2021-09-16T15:15:07.633",
"lastModified": "2024-11-21T06:24:06.787",
"lastModified": "2025-02-06T21:15:16.947",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.2,
"impactScore": 6.0
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.2,
"impactScore": 6.0
}
],
"cvssMetricV2": [
CVE-2022/CVE-2022-404xx/CVE-2022-40490.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-40490",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:13.640",
"lastModified": "2025-02-06T17:15:13.640",
"lastModified": "2025-02-06T21:15:17.307",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the name of an uploaded or already existing file."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/prasathmani/tinyfilemanager",
@@ -20,6 +55,10 @@
{
"url": "https://github.com/whitej3rry/CVE-2022-40490/blob/main/PoC.md",
"source": "[email protected]"
},
{
"url": "https://github.com/whitej3rry/CVE-2022-40490/blob/main/PoC.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2022/CVE-2022-436xx/CVE-2022-43697.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-43697",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T02:15:07.147",
"lastModified": "2024-11-21T07:27:04.417",
"lastModified": "2025-02-06T21:15:17.633",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2022/CVE-2022-436xx/CVE-2022-43698.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-43698",
"sourceIdentifier": "[email protected]",
"published": "2023-04-15T02:15:07.183",
"lastModified": "2024-11-21T07:27:04.587",
"lastModified": "2025-02-06T21:15:18.037",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-918"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-918"
}
]
}
],
"configurations": [
CVE-2022/CVE-2022-468xx/CVE-2022-46886.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-46886",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T20:15:09.413",
"lastModified": "2024-11-21T07:31:14.717",
"lastModified": "2025-02-06T22:15:34.057",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "CWE-601"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-601"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-261xx/CVE-2023-26123.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-26123",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T05:15:13.867",
"lastModified": "2024-11-21T07:50:49.430",
"lastModified": "2025-02-06T21:15:18.370",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -75,6 +75,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-279xx/CVE-2023-27912.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-27912",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T19:15:08.967",
"lastModified": "2024-11-21T07:53:41.130",
"lastModified": "2025-02-06T22:15:34.360",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-125"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-279xx/CVE-2023-27913.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-27913",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T19:15:09.020",
"lastModified": "2024-11-21T07:53:41.253",
"lastModified": "2025-02-06T22:15:34.523",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-190"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-190"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-279xx/CVE-2023-27914.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-27914",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T19:15:09.053",
"lastModified": "2024-11-21T07:53:41.360",
"lastModified": "2025-02-06T21:15:18.557",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-279xx/CVE-2023-27915.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-27915",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T19:15:09.090",
"lastModified": "2024-11-21T07:53:41.463",
"lastModified": "2025-02-06T21:15:18.750",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-290xx/CVE-2023-29067.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29067",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T19:15:09.237",
"lastModified": "2024-11-21T07:56:29.633",
"lastModified": "2025-02-06T21:15:18.917",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-290xx/CVE-2023-29091.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29091",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T21:15:08.493",
"lastModified": "2024-11-21T07:56:31.763",
"lastModified": "2025-02-06T22:15:34.703",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1173"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-291xx/CVE-2023-29132.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29132",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T01:15:08.367",
"lastModified": "2024-11-21T07:56:36.033",
"lastModified": "2025-02-06T22:15:34.880",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-416"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-293xx/CVE-2023-29383.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29383",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T22:15:07.680",
"lastModified": "2024-11-21T07:56:58.387",
"lastModified": "2025-02-06T22:15:35.057",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -45,6 +45,16 @@
"value": "CWE-74"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-295xx/CVE-2023-29569.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29569",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T12:15:07.770",
"lastModified": "2024-11-21T07:57:17.467",
"lastModified": "2025-02-06T22:15:35.180",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-476"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-295xx/CVE-2023-29584.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29584",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T12:15:07.810",
"lastModified": "2024-11-21T07:57:19.470",
"lastModified": "2025-02-06T22:15:35.340",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-787"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-296xx/CVE-2023-29621.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29621",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T02:15:12.920",
"lastModified": "2024-11-21T07:57:20.173",
"lastModified": "2025-02-06T22:15:35.490",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-434"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-296xx/CVE-2023-29626.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29626",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T02:15:13.383",
"lastModified": "2024-11-21T07:57:20.713",
"lastModified": "2025-02-06T22:15:35.647",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-89"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-296xx/CVE-2023-29627.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29627",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T02:15:13.457",
"lastModified": "2024-11-21T07:57:20.837",
"lastModified": "2025-02-06T22:15:35.797",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-434"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-297xx/CVE-2023-29798.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29798",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:10.790",
"lastModified": "2024-11-21T07:57:31.270",
"lastModified": "2025-02-06T21:15:19.093",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-77"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29800.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29800",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.170",
"lastModified": "2024-11-21T07:57:31.550",
"lastModified": "2025-02-06T21:15:19.353",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-77"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29801.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29801",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.360",
"lastModified": "2024-11-21T07:57:31.687",
"lastModified": "2025-02-06T21:15:19.533",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-77"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29802.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29802",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.440",
"lastModified": "2024-11-21T07:57:31.830",
"lastModified": "2025-02-06T21:15:19.707",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-77"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29803.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29803",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.507",
"lastModified": "2024-11-21T07:57:31.977",
"lastModified": "2025-02-06T21:15:19.880",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-77"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-77"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29804.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29804",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.560",
"lastModified": "2024-11-21T07:57:32.117",
"lastModified": "2025-02-06T21:15:20.043",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-78"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29805.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29805",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.617",
"lastModified": "2024-11-21T07:57:32.257",
"lastModified": "2025-02-06T21:15:20.210",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-78"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29847.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29847",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.673",
"lastModified": "2024-11-21T07:57:34.513",
"lastModified": "2025-02-06T21:15:20.397",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-298xx/CVE-2023-29850.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-29850",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T14:15:11.733",
"lastModified": "2024-11-21T07:57:34.940",
"lastModified": "2025-02-06T21:15:20.580",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-203"
}
]
}
],
"configurations": [
CVE-2023/CVE-2023-304xx/CVE-2023-30459.json
+21 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-30459",
"sourceIdentifier": "[email protected]",
"published": "2023-04-14T15:15:07.657",
"lastModified": "2024-11-21T08:00:13.730",
"lastModified": "2025-02-06T21:15:20.813",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
CVE-2023/CVE-2023-369xx/CVE-2023-36998.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-36998",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:09.647",
"lastModified": "2025-01-22T15:15:09.647",
"lastModified": "2025-02-06T22:15:36.057",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "El MME NextEPC <= 1.0.1 (corregido en commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contiene una vulnerabilidad de desbordamiento de b\u00fafer basada en pila en el m\u00e9todo de decodificaci\u00f3n de la lista de n\u00fameros de emergencia. Un atacante puede enviar un mensaje NAS que contenga un valor de lista de n\u00fameros de emergencia de gran tama\u00f1o al MME para sobrescribir la pila con bytes arbitrarios. Un atacante con una conexi\u00f3n de tel\u00e9fono celular a cualquier estaci\u00f3n base administrada por el MME puede explotar esta vulnerabilidad sin tener que autenticarse con el n\u00facleo LTE."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"baseScore": 8.9,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.3,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-121"
}
]
}
],
"references": [
{
"url": "http://nextepc.com",
CVE-2023/CVE-2023-370xx/CVE-2023-37015.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37015",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.100",
"lastModified": "2025-01-22T15:15:11.100",
"lastModified": "2025-02-06T22:15:36.193",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Solicitud de cambio de ruta\" sin el campo \"MME_UE_S1AP_ID\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37016.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37016",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.207",
"lastModified": "2025-01-22T15:15:11.207",
"lastModified": "2025-02-06T22:15:36.333",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Respuesta de modificaci\u00f3n de contexto de UE\" sin el campo \"MME_UE_S1AP_ID\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37017.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37017",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.310",
"lastModified": "2025-01-22T15:15:11.310",
"lastModified": "2025-02-06T22:15:36.467",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Solicitud de configuraci\u00f3n de S1\" sin el campo \"ID de eNB global\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37018.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37018",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.410",
"lastModified": "2025-01-22T15:15:11.410",
"lastModified": "2025-02-06T22:15:36.610",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una afirmaci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Indicaci\u00f3n de informaci\u00f3n de capacidad de UE\" sin el campo \"MME_UE_S1AP_ID\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37019.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37019",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.510",
"lastModified": "2025-01-22T15:15:11.510",
"lastModified": "2025-02-06T22:15:36.743",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Solicitud de configuraci\u00f3n de S1\" sin el campo \"TA compatibles\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37020.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37020",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.613",
"lastModified": "2025-01-22T15:15:11.613",
"lastModified": "2025-02-06T22:15:36.887",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje \"UE Context Release Complete\" sin el campo \"MME_UE_S1AP_ID\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37021.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37021",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.710",
"lastModified": "2025-01-22T15:15:11.710",
"lastModified": "2025-02-06T22:15:37.020",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "La versi\u00f3n 2.6.4 de Open5GS MME contiene una aserci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un mensaje de \"Error de modificaci\u00f3n de contexto de UE\" sin el campo \"MME_UE_S1AP_ID\" requerido para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-370xx/CVE-2023-37023.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2023-37023",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:11.913",
"lastModified": "2025-01-22T15:15:11.913",
"lastModified": "2025-02-06T22:15:37.160",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una afirmaci\u00f3n de alcance en el controlador de paquetes `Uplink NAS Transport`. Un paquete al que le falta el campo `MME_UE_S1AP_ID` ??hace que Open5gs se bloquee; un atacante puede enviar repetidamente dichos paquetes para provocar una denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2023/CVE-2023-476xx/CVE-2023-47622.json
+73 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47622",
"sourceIdentifier": "[email protected]",
"published": "2024-04-15T18:15:08.510",
"lastModified": "2024-11-21T08:30:32.830",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-06T21:00:13.853",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
@@ -49,24 +69,71 @@
"value": "CWE-79"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.0.4",
"matchCriteriaId": "9189E922-30ED-4E69-9B1F-6AD643A37BF7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.1.0",
"versionEndExcluding": "3.1.1",
"matchCriteriaId": "E46BEA8B-6ECB-44B7-9509-99E2CBB569EC"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxh",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/Combodo/iTop/commit/09be84f69da0fe44221f63b8c2db041bdf7dd7f9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-q9cm-q7fc-frxh",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-476xx/CVE-2023-47626.json
+59 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-47626",
"sourceIdentifier": "[email protected]",
"published": "2024-04-15T18:15:08.697",
"lastModified": "2024-11-21T08:30:33.443",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-06T21:00:28.473",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
@@ -49,16 +69,51 @@
"value": "CWE-79"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.1.0",
"versionEndExcluding": "3.1.1",
"matchCriteriaId": "E46BEA8B-6ECB-44B7-9509-99E2CBB569EC"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-vv3v-9vrv-h95h",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-vv3v-9vrv-h95h",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-487xx/CVE-2023-48709.json
+88 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-48709",
"sourceIdentifier": "[email protected]",
"published": "2024-04-15T18:15:08.877",
"lastModified": "2024-11-21T08:32:18.420",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-06T21:02:53.030",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.1,
"impactScore": 5.9
}
]
},
@@ -53,32 +73,92 @@
"value": "CWE-1236"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1236"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.7.9",
"matchCriteriaId": "FA0F67ED-5CDF-43B4-80A2-44BBB56A9624"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.0.4",
"matchCriteriaId": "F42542C8-DEF2-45E2-983B-B161F76C8FDA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.1.0",
"versionEndExcluding": "3.1.1",
"matchCriteriaId": "E46BEA8B-6ECB-44B7-9509-99E2CBB569EC"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Combodo/iTop/commit/083a0b79bfa2c106735b5c10eddb35a05ec7f04a",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/commit/b10bcb976dfe8e55aa0f659bfbcdd18334a1b17c",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-9q3x-9987-53x9",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/Combodo/iTop/commit/083a0b79bfa2c106735b5c10eddb35a05ec7f04a",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/commit/b10bcb976dfe8e55aa0f659bfbcdd18334a1b17c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-9q3x-9987-53x9",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2023/CVE-2023-487xx/CVE-2023-48710.json
+80 -6
View File
@@ -2,8 +2,8 @@
"id": "CVE-2023-48710",
"sourceIdentifier": "[email protected]",
"published": "2024-04-15T18:15:09.070",
"lastModified": "2024-11-21T08:32:18.550",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-02-06T21:03:10.907",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -49,24 +69,78 @@
"value": "CWE-552"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-552"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.7.10",
"matchCriteriaId": "0C4E3E7A-6775-47E8-8878-6D33E8231551"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.0.0",
"versionEndExcluding": "3.0.4",
"matchCriteriaId": "F42542C8-DEF2-45E2-983B-B161F76C8FDA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:combodo:itop:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.1.0",
"versionEndExcluding": "3.1.1",
"matchCriteriaId": "E46BEA8B-6ECB-44B7-9509-99E2CBB569EC"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://github.com/Combodo/iTop/commit/3b2da39469f7a4636ed250ed0d33f4efff38be26",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/Combodo/iTop/security/advisories/GHSA-g652-q7cc-7hfc",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2024/CVE-2024-258xx/CVE-2024-25883.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-25883",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:37.393",
"lastModified": "2025-02-06T22:15:37.393",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The mstatus register in RSD commit 3d13a updates incorrectly, leading to processing errors."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/rsd-devel/rsd/issues/75",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-271xx/CVE-2024-27137.json
+13 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-27137",
"sourceIdentifier": "[email protected]",
"published": "2025-02-04T11:15:08.220",
"lastModified": "2025-02-06T20:15:39.397",
"lastModified": "2025-02-06T21:15:20.997",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -39,6 +39,18 @@
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"references": [
{
"url": "https://lists.apache.org/thread/jsk87d9yv8r204mgqpz1qxtp5wcrpysm",
CVE-2024/CVE-2024-338xx/CVE-2024-33898.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-33898",
"sourceIdentifier": "[email protected]",
"published": "2024-06-24T22:15:10.207",
"lastModified": "2024-11-21T09:17:41.610",
"lastModified": "2025-02-06T22:15:37.507",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -56,6 +56,10 @@
"url": "https://www.axiros.com/2024/03/vulnerability-in-axusermanager",
"source": "[email protected]"
},
{
"url": "https://www.nsideattacklogic.de/advisories/NSIDE-SA-2024-002",
"source": "[email protected]"
},
{
"url": "https://www.axiros.com/2024/03/vulnerability-in-axusermanager",
"source": "af854a3a-2127-422b-91ae-364da2661108"
CVE-2024/CVE-2024-342xx/CVE-2024-34235.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-34235",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T15:15:12.900",
"lastModified": "2025-01-22T15:15:12.900",
"lastModified": "2025-02-06T22:15:37.670",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Las versiones de Open5GS MME anteriores a la 2.6.4 contienen una afirmaci\u00f3n que se puede activar de forma remota a trav\u00e9s de un paquete ASN.1 mal formado a trav\u00e9s de la interfaz S1AP. Un atacante puede enviar un \u00abMensaje inicial de UE\u00bb sin un campo \u00abNAS_PDU\u00bb obligatorio para bloquear repetidamente el MME, lo que da como resultado la denegaci\u00f3n de servicio."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"references": [
{
"url": "https://cellularsecurity.org/ransacked",
CVE-2024/CVE-2024-343xx/CVE-2024-34329.json
+10 -2
View File
@@ -2,13 +2,13 @@
"id": "CVE-2024-34329",
"sourceIdentifier": "[email protected]",
"published": "2024-07-22T20:15:03.673",
"lastModified": "2024-11-21T09:18:26.143",
"lastModified": "2025-02-06T21:15:21.130",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.4 and earlier allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload."
"value": "Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload."
},
{
"lang": "es",
@@ -48,6 +48,14 @@
"url": "https://www.entrust.com/ja/contact/services/downloads/drivers",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/sites/default/files/documentation/productsupport/entrust-security-bulletin-e24-004.pdf",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/support/instant-id-card-issuance-systems/ds3-direct-to-card-printer-support",
"source": "[email protected]"
},
{
"url": "https://github.com/pamoutaf/CVE-2024-34329/blob/main/README.md",
"source": "af854a3a-2127-422b-91ae-364da2661108"
CVE-2024/CVE-2024-390xx/CVE-2024-39033.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-39033",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:18.553",
"lastModified": "2025-02-06T17:15:18.553",
"lastModified": "2025-02-06T22:15:37.803",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "In Newgensoft OmniDocs 11.0_SP1_03_006, Insecure Direct Object Reference (IDOR) in the getuserproperty function allows user's configuration and PII to be stolen."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://pastebin.com/SHExsfh6",
CVE-2024/CVE-2024-485xx/CVE-2024-48589.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-48589",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:37.943",
"lastModified": "2025-02-06T22:15:37.943",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Scripting vulnerability in Gilnei Moraes phpABook v.0.9 allows a remote attacker to execute arbitrary code via the rol parameter in index.php"
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Exek1el/CVE-2024-48589",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-506xx/CVE-2024-50690.json
+38 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-50690",
"sourceIdentifier": "[email protected]",
"published": "2025-01-24T23:15:08.227",
"lastModified": "2025-01-24T23:15:08.227",
"vulnStatus": "Received",
"lastModified": "2025-02-06T22:15:38.033",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,42 @@
"value": "SunGrow WiNet-SV200.001.00.P027 y versiones anteriores contienen una contrase\u00f1a codificada que se puede utilizar para descifrar todas las actualizaciones de firmware."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"references": [
{
"url": "https://en.sungrowpower.com/security-notice-detail-2/5961",
CVE-2024/CVE-2024-535xx/CVE-2024-53586.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-53586",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:38.167",
"lastModified": "2025-02-06T22:15:38.167",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing data outside the intended directory."
}
],
"metrics": {},
"references": [
{
"url": "https://packetstorm.news/files/id/189017",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-541xx/CVE-2024-54171.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2024-54171",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T21:15:21.453",
"lastModified": "2025-02-06T21:15:21.453",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 4.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-611"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7182693",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-549xx/CVE-2024-54909.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-54909",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:38.250",
"lastModified": "2025-02-06T22:15:38.250",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/local/download endpoint, where manipulation of this parameter can lead to arbitrary file download."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/goldpankit/eva-springboot2/issues/2",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-552xx/CVE-2024-55227.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-55227",
"sourceIdentifier": "[email protected]",
"published": "2025-01-27T17:15:16.523",
"lastModified": "2025-02-06T16:08:03.917",
"vulnStatus": "Analyzed",
"lastModified": "2025-02-06T22:15:38.340",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 2.3,
"impactScore": 6.0
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
}
]
},
@@ -49,6 +69,16 @@
"value": "CWE-79"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"configurations": [
CVE-2024/CVE-2024-552xx/CVE-2024-55241.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-55241",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:38.483",
"lastModified": "2025-02-06T22:15:38.483",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in deep-diver LLM-As-Chatbot before commit 99c2c03 allows a remote attacker to execute arbitrary code via the modelsbyom.py component."
}
],
"metrics": {},
"references": [
{
"url": "https://diamond-bath-fd4.notion.site/Remote-Code-Execution-vulnerability-in-load_model-in-deep-diver-LLM-As-Chatbot-14d4a5b4bb28806795e8e5e8ef9ae27b",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-554xx/CVE-2024-55488.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-55488",
"sourceIdentifier": "[email protected]",
"published": "2025-01-22T16:15:29.770",
"lastModified": "2025-01-22T16:15:29.770",
"lastModified": "2025-02-06T22:15:38.573",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "Una vulnerabilidad Cross-Site Scripting (XSS) Almacenado en Umbraco CMS v14.3.1 permite a los atacantes ejecutar scripts web o HTML arbitrarios a trav\u00e9s de un payload manipulado."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "http://umbraco.com",
CVE-2024/CVE-2024-559xx/CVE-2024-55971.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-55971",
"sourceIdentifier": "[email protected]",
"published": "2025-01-23T16:15:36.307",
"lastModified": "2025-01-23T16:15:36.307",
"lastModified": "2025-02-06T22:15:38.713",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -15,7 +15,42 @@
"value": "La vulnerabilidad de inyecci\u00f3n SQL en la configuraci\u00f3n predeterminada de la aplicaci\u00f3n Logitime WebClock <= 5.43.0 permite que un usuario no autenticado ejecute c\u00f3digo arbitrario en el servidor de base de datos backend."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://en.logitime.com/time-attendance/",
CVE-2024/CVE-2024-564xx/CVE-2024-56467.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2024-56467",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T21:15:21.600",
"lastModified": "2025-02-06T21:15:21.600",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.3,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-209"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7182693",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-568xx/CVE-2024-56889.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-56889",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:38.903",
"lastModified": "2025-02-06T22:15:38.903",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/vigneshr232/CVE-2024-56889/blob/main/CVE-2024-56889.md",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-570xx/CVE-2024-57041.json
+38 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-57041",
"sourceIdentifier": "[email protected]",
"published": "2025-01-24T20:15:33.353",
"lastModified": "2025-01-24T20:15:33.353",
"vulnStatus": "Received",
"lastModified": "2025-02-06T22:15:39.000",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,42 @@
"value": "Una vulnerabilidad persistente de cross-site scripting(XSS) en NodeBB v3.11.0 permite a atacantes remotos almacenar c\u00f3digo arbitrario en la secci\u00f3n \u201cacerca de m\u00ed\u201d de su perfil."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.1,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "http://nodebb.com",
CVE-2024/CVE-2024-573xx/CVE-2024-57392.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-57392",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:39.140",
"lastModified": "2025-02-06T22:15:39.140",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Br1m4zz/protocol_vul_repoduce.git",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-574xx/CVE-2024-57428.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-57428",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:20.527",
"lastModified": "2025-02-06T17:15:20.527",
"lastModified": "2025-02-06T22:15:39.223",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persistent JavaScript, leading to phishing, malware injection, and session hijacking."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.8
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/ahrixia/CVE-2024-57428",
CVE-2024/CVE-2024-574xx/CVE-2024-57429.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-57429",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:20.627",
"lastModified": "2025-02-06T17:15:20.627",
"lastModified": "2025-02-06T22:15:39.360",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://github.com/ahrixia/CVE-2024-57429",
CVE-2024/CVE-2024-574xx/CVE-2024-57430.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-57430",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:20.717",
"lastModified": "2025-02-06T17:15:20.717",
"lastModified": "2025-02-06T22:15:39.493",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/ahrixia/CVE-2024-57430",
CVE-2024/CVE-2024-575xx/CVE-2024-57599.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2024-57599",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T17:15:20.820",
"lastModified": "2025-02-06T17:15:20.820",
"lastModified": "2025-02-06T21:15:21.760",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/Arykon/cve/blob/main/douphp.pdf",
@@ -20,6 +55,10 @@
{
"url": "https://www.douphp.com/",
"source": "[email protected]"
},
{
"url": "https://github.com/Arykon/cve/blob/main/douphp.pdf",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2024/CVE-2024-576xx/CVE-2024-57609.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-57609",
"sourceIdentifier": "[email protected]",
"published": "2025-02-06T22:15:39.627",
"lastModified": "2025-02-06T22:15:39.627",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection function."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/nca785/CVE-2024-57609/",
"source": "[email protected]"
}
]
}
Loaded 100 of 117 files, more files were not shown because too many files have changed in this diff. Show more