diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13163.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13163.json new file mode 100644 index 00000000000..c31e9ed4e66 --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13163.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-13163", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-17T08:16:22.123", + "lastModified": "2025-11-17T08:16:22.123", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-522" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13164.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13164.json new file mode 100644 index 00000000000..8678e64e077 --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13164.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-13164", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-17T08:16:22.860", + "lastModified": "2025-11-17T08:16:22.860", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 6.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-522" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-131xx/CVE-2025-13165.json b/CVE-2025/CVE-2025-131xx/CVE-2025-13165.json new file mode 100644 index 00000000000..cf15d42e685 --- /dev/null +++ b/CVE-2025/CVE-2025-131xx/CVE-2025-13165.json @@ -0,0 +1,104 @@ +{ + "id": "CVE-2025-13165", + "sourceIdentifier": "twcert@cert.org.tw", + "published": "2025-11-17T08:16:23.233", + "lastModified": "2025-11-17T08:16:23.233", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "twcert@cert.org.tw", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "NONE", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "HIGH", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "twcert@cert.org.tw", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-770" + } + ] + } + ], + "references": [ + { + "url": "https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html", + "source": "twcert@cert.org.tw" + }, + { + "url": "https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html", + "source": "twcert@cert.org.tw" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13267.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13267.json new file mode 100644 index 00000000000..4bc4da9d645 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13267.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13267", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T08:16:23.577", + "lastModified": "2025-11-17T08:16:23.577", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was detected in SourceCodester Dental Clinic Appointment Reservation System 1.0. Impacted is an unknown function of the file /success.php. Performing manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/0xffaaa/cve/blob/main/Dental_Clinic_Appointment_Reservation_System_Time-Based_SQL_Injection2.md", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332602", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332602", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.689450", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.sourcecodester.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13268.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13268.json new file mode 100644 index 00000000000..a9a62cb53d3 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13268.json @@ -0,0 +1,141 @@ +{ + "id": "CVE-2025-13268", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T08:16:24.013", + "lastModified": "2025-11-17T08:16:24.013", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A flaw has been found in Dromara dataCompare up to 1.0.1. The affected element is the function DbConfig of the file src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java of the component JDBC URL Handler. Executing manipulation can lead to injection. The attack can be launched remotely. The exploit has been published and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-707" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/dromara/dataCompare/issues/13", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332603", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332603", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.689460", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13269.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13269.json new file mode 100644 index 00000000000..bf58d97f7df --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13269.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13269", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T08:16:24.387", + "lastModified": "2025-11-17T08:16:24.387", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_payment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ASantsSec/CVE/issues/17", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332604", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332604", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.690034", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.campcodes.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-132xx/CVE-2025-13270.json b/CVE-2025/CVE-2025-132xx/CVE-2025-13270.json new file mode 100644 index 00000000000..82593dbc559 --- /dev/null +++ b/CVE-2025/CVE-2025-132xx/CVE-2025-13270.json @@ -0,0 +1,145 @@ +{ + "id": "CVE-2025-13270", + "sourceIdentifier": "cna@vuldb.com", + "published": "2025-11-17T08:16:24.780", + "lastModified": "2025-11-17T08:16:24.780", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=save_course. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "LOW", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "PROOF_OF_CONCEPT", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ], + "cvssMetricV31": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", + "baseScore": 6.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.4 + } + ], + "cvssMetricV2": [ + { + "source": "cna@vuldb.com", + "type": "Secondary", + "cvssData": { + "version": "2.0", + "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", + "baseScore": 6.5, + "accessVector": "NETWORK", + "accessComplexity": "LOW", + "authentication": "SINGLE", + "confidentialityImpact": "PARTIAL", + "integrityImpact": "PARTIAL", + "availabilityImpact": "PARTIAL" + }, + "baseSeverity": "MEDIUM", + "exploitabilityScore": 8.0, + "impactScore": 6.4, + "acInsufInfo": false, + "obtainAllPrivilege": false, + "obtainUserPrivilege": false, + "obtainOtherPrivilege": false, + "userInteractionRequired": false + } + ] + }, + "weaknesses": [ + { + "source": "cna@vuldb.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-74" + }, + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "references": [ + { + "url": "https://github.com/ASantsSec/CVE/issues/16", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?ctiid.332605", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?id.332605", + "source": "cna@vuldb.com" + }, + { + "url": "https://vuldb.com/?submit.690039", + "source": "cna@vuldb.com" + }, + { + "url": "https://www.campcodes.com/", + "source": "cna@vuldb.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json b/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json index 46e1c092111..81fd90e877b 100644 --- a/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json +++ b/CVE-2025/CVE-2025-565xx/CVE-2025-56503.json @@ -2,13 +2,20 @@ "id": "CVE-2025-56503", "sourceIdentifier": "cve@mitre.org", "published": "2025-11-10T20:15:47.990", - "lastModified": "2025-11-12T21:15:50.453", + "lastModified": "2025-11-17T08:16:25.153", "vulnStatus": "Awaiting Analysis", - "cveTags": [], + "cveTags": [ + { + "sourceIdentifier": "cve@mitre.org", + "tags": [ + "disputed" + ] + } + ], "descriptions": [ { "lang": "en", - "value": "An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder." + "value": "An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate privileges to Administrator via replacing the uninstall file with a crafted binary in the installation folder. NOTE: this is disputed by the Supplier because replacing the uninstall file requires administrator permissions, i.e., there is no privilege escalation." } ], "metrics": { diff --git a/CVE-2025/CVE-2025-650xx/CVE-2025-65073.json b/CVE-2025/CVE-2025-650xx/CVE-2025-65073.json new file mode 100644 index 00000000000..eedcd4b6ad8 --- /dev/null +++ b/CVE-2025/CVE-2025-650xx/CVE-2025-65073.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-65073", + "sourceIdentifier": "cve@mitre.org", + "published": "2025-11-17T08:16:25.600", + "lastModified": "2025-11-17T08:16:25.600", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "cve@mitre.org", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 4.7 + } + ] + }, + "weaknesses": [ + { + "source": "cve@mitre.org", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://www.openwall.com/lists/oss-security/2025/11/04/2", + "source": "cve@mitre.org" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 5385dd96511..a3c2625132e 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-17T07:00:11.599797+00:00 +2025-11-17T09:00:11.704872+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-17T06:15:45.093000+00:00 +2025-11-17T08:16:25.600000+00:00 ``` ### Last Data Feed Release @@ -33,26 +33,28 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -318410 +318418 ``` ### CVEs added in the last Commit -Recently added CVEs: `7` +Recently added CVEs: `8` -- [CVE-2025-13262](CVE-2025/CVE-2025-132xx/CVE-2025-13262.json) (`2025-11-17T05:16:04.427`) -- [CVE-2025-13263](CVE-2025/CVE-2025-132xx/CVE-2025-13263.json) (`2025-11-17T05:16:14.503`) -- [CVE-2025-13264](CVE-2025/CVE-2025-132xx/CVE-2025-13264.json) (`2025-11-17T05:16:15.183`) -- [CVE-2025-13265](CVE-2025/CVE-2025-132xx/CVE-2025-13265.json) (`2025-11-17T06:15:43.143`) -- [CVE-2025-13266](CVE-2025/CVE-2025-132xx/CVE-2025-13266.json) (`2025-11-17T06:15:44.403`) -- [CVE-2025-60022](CVE-2025/CVE-2025-600xx/CVE-2025-60022.json) (`2025-11-17T06:15:44.643`) -- [CVE-2025-9501](CVE-2025/CVE-2025-95xx/CVE-2025-9501.json) (`2025-11-17T06:15:45.093`) +- [CVE-2025-13163](CVE-2025/CVE-2025-131xx/CVE-2025-13163.json) (`2025-11-17T08:16:22.123`) +- [CVE-2025-13164](CVE-2025/CVE-2025-131xx/CVE-2025-13164.json) (`2025-11-17T08:16:22.860`) +- [CVE-2025-13165](CVE-2025/CVE-2025-131xx/CVE-2025-13165.json) (`2025-11-17T08:16:23.233`) +- [CVE-2025-13267](CVE-2025/CVE-2025-132xx/CVE-2025-13267.json) (`2025-11-17T08:16:23.577`) +- [CVE-2025-13268](CVE-2025/CVE-2025-132xx/CVE-2025-13268.json) (`2025-11-17T08:16:24.013`) +- [CVE-2025-13269](CVE-2025/CVE-2025-132xx/CVE-2025-13269.json) (`2025-11-17T08:16:24.387`) +- [CVE-2025-13270](CVE-2025/CVE-2025-132xx/CVE-2025-13270.json) (`2025-11-17T08:16:24.780`) +- [CVE-2025-65073](CVE-2025/CVE-2025-650xx/CVE-2025-65073.json) (`2025-11-17T08:16:25.600`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `1` +- [CVE-2025-56503](CVE-2025/CVE-2025-565xx/CVE-2025-56503.json) (`2025-11-17T08:16:25.153`) ## Download and Usage diff --git a/_state.csv b/_state.csv index eb92c4a13de..14c6cb02703 100644 --- a/_state.csv +++ b/_state.csv @@ -287964,6 +287964,9 @@ CVE-2025-1315,0,0,b2e5cb43d68af8915879a41f899eac8effc6f5ff149f94a7a5bed3683712a9 CVE-2025-1316,0,0,28239463de3c37f494f1c6c65af105d7f3d22d97f42aaa888e490a5a082ed25b,2025-10-30T15:54:20.360000 CVE-2025-13160,0,0,e54ae29c71ce7eef03f8831a832a386e09c1530df0dfc5f28e90267594818200,2025-11-14T16:42:03.187000 CVE-2025-13161,0,0,9dc4cdd7ec45d29a0a19e767dc5d27c391ddb793d67c3799bad127667cc84a9a,2025-11-14T16:42:03.187000 +CVE-2025-13163,1,1,610e8e9c1fa4cb603c581c526c73583557f9b55ca5c5cf250e98e946ce56de06,2025-11-17T08:16:22.123000 +CVE-2025-13164,1,1,d8d6789a8ee8b1949d621234bf63fa7d645f6604b7aace1056b422bd9a60c6ce,2025-11-17T08:16:22.860000 +CVE-2025-13165,1,1,09ed4ac76c61663287c86467b8f93a9622beb1d75e659349b29358a741300100,2025-11-17T08:16:23.233000 CVE-2025-13168,0,0,2e7970b035919f06ecad786e62040db4138d08230cd2f840467b8b47514c1579,2025-11-14T17:16:00.220000 CVE-2025-13169,0,0,a5dc96c8bd86d30bf232fbdd8803d8b95863a779c2f7cf2da75709c512f7fad3,2025-11-14T17:16:00.407000 CVE-2025-1317,0,0,4f2ecbb1517ad7f024c8a72b4e37f40a250e9f9aedba0e53124be3b9cafa8bcc,2025-07-05T23:15:24.760000 @@ -288034,12 +288037,16 @@ CVE-2025-13259,0,0,f5416c9c1ba3329a8abcc77da9b18173c15e667b932835feb6a9ba6009579 CVE-2025-1326,0,0,6342f2129b0d0351e2a170b6a294eec7a8bac9fded136ce346b22cfbbc06d346,2025-05-06T15:27:38.483000 CVE-2025-13260,0,0,bd95d0491fd8099ee36917f19e9bd4660ce46c295dd2a7d1b814910bd39a12fa,2025-11-17T04:15:54.060000 CVE-2025-13261,0,0,575da07d4e828705b7a13eab4dd136abbc565d9b4f83b9edff15613dded78b69,2025-11-17T04:15:54.303000 -CVE-2025-13262,1,1,fda6265cb5058e9600022a1e9b9c22218b5fc71bbfc566d78529c9318b7f2054,2025-11-17T05:16:04.427000 -CVE-2025-13263,1,1,9c5cfe63c0624ee7e305af9bb5b6d72670384645eab7c9967c310553ac969ce9,2025-11-17T05:16:14.503000 -CVE-2025-13264,1,1,f9b2125405c0d35fba487f629d3644f8dae94d0b615c53520dc7940d932c6d5f,2025-11-17T05:16:15.183000 -CVE-2025-13265,1,1,8576af4a35e498fb67d1a96715c2cbb5f147988281df06a43317eb3508663e68,2025-11-17T06:15:43.143000 -CVE-2025-13266,1,1,563dbb98182d4c9a19c459b582d60d35f1acf1cddd49f580a3f6abf1e34c01c8,2025-11-17T06:15:44.403000 +CVE-2025-13262,0,0,fda6265cb5058e9600022a1e9b9c22218b5fc71bbfc566d78529c9318b7f2054,2025-11-17T05:16:04.427000 +CVE-2025-13263,0,0,9c5cfe63c0624ee7e305af9bb5b6d72670384645eab7c9967c310553ac969ce9,2025-11-17T05:16:14.503000 +CVE-2025-13264,0,0,f9b2125405c0d35fba487f629d3644f8dae94d0b615c53520dc7940d932c6d5f,2025-11-17T05:16:15.183000 +CVE-2025-13265,0,0,8576af4a35e498fb67d1a96715c2cbb5f147988281df06a43317eb3508663e68,2025-11-17T06:15:43.143000 +CVE-2025-13266,0,0,563dbb98182d4c9a19c459b582d60d35f1acf1cddd49f580a3f6abf1e34c01c8,2025-11-17T06:15:44.403000 +CVE-2025-13267,1,1,b6795fb8068ecaf00ffad7ba342cec28a09b08dcafca27d73b8deee598a1a8ae,2025-11-17T08:16:23.577000 +CVE-2025-13268,1,1,1549a6d1fca73c09abd176ae8f16d8106106e9a05c5993d0363fd1509d020ef2,2025-11-17T08:16:24.013000 +CVE-2025-13269,1,1,a6b43d18ef43cddc51e83ddde2730c67c3be3fcc5ea3282045411073accbe687,2025-11-17T08:16:24.387000 CVE-2025-1327,0,0,a00f3a7838ee8cb34a28ac7722d227a8d885a7c055568ff1befbcea8c4c0fd5c,2025-05-06T15:29:09.143000 +CVE-2025-13270,1,1,ea5a4270573e8a7a564d8d08b110c49c447b63e5b5290d4f11f7d60e421feda7,2025-11-17T08:16:24.780000 CVE-2025-1328,0,0,e2b9ad996048bde72d17ec9a6affa826b875b275e51ef749199b511eae0ab088,2025-02-25T18:03:46.410000 CVE-2025-13282,0,0,8816f151ba917e9d5bbb37cb0129ef1414590df87b7fb78e41fcd2f65f477d45,2025-11-17T04:15:54.543000 CVE-2025-13283,0,0,eced155aee36eefda98569c645a5444ec430e09731b47761af0a487bd33e25c2,2025-11-17T04:15:54.800000 @@ -311248,7 +311255,7 @@ CVE-2025-5648,0,0,8d8a946a9691d84bd632207adec092a07f5e621bdddce363a223111a1e12ac CVE-2025-5649,0,0,8d1f3267e39f86a1983625a80d2b4086de30c2bb535ef4e2d4852137479dd55a,2025-06-10T15:05:56.120000 CVE-2025-56498,0,0,174f73636877cc0f6583ac98d876f9097aecf0c506b0a033d10885e6ff6a5cc9,2025-09-09T15:58:46.043000 CVE-2025-5650,0,0,c41210387d1002531a8860804a9f5e98813d1f3f1969221163975f35d5b4da41,2025-06-10T15:05:23.553000 -CVE-2025-56503,0,0,ec03bc5f003847a28cc8846c48817b31d8257daa30cfb3a9975d167ed262d3a8,2025-11-12T21:15:50.453000 +CVE-2025-56503,0,1,313e3b33e9c35a7cdfbc043bfb8356aa3f98c92e11c00becc67f9f0841f755b1,2025-11-17T08:16:25.153000 CVE-2025-5651,0,0,69664dc7492cf087d56317359c0847c497f8626f3a4191e0ea4ef5eb68f6ca9f,2025-11-13T15:52:20.293000 CVE-2025-56513,0,0,6a976a01f4257bfa909a6b270fdd9f7e03ab41d364cb2650d351d9bd14e302fc,2025-10-15T18:39:09.800000 CVE-2025-56514,0,0,4482f71c1d8ca23c138073d6af7feb89ed548879dfeab98abda9787d645099c0,2025-10-21T20:20:49.560000 @@ -313257,7 +313264,7 @@ CVE-2025-60018,0,0,d424a14dc0a41001c297b3fbf7c1a08a5668ee678db7ba734b992742158ae CVE-2025-60019,0,0,8b0602eef4c6101bfa3456b83bbc2ecc1fac0ad872ad2bbae4caf34af8940b28,2025-09-26T14:32:19.853000 CVE-2025-6002,0,0,c3342aafede1398b2d7e7cc8f4c9f889ab7afc3c4ac6360898dd2f7299f1feb2,2025-06-12T16:06:20.180000 CVE-2025-60020,0,0,3db618df90c4b5b804f25dfc3d8e46bb5ba49e63aa41a592a018255a6b1906ab,2025-09-24T18:11:24.520000 -CVE-2025-60022,1,1,cc81aedaaa7a794751c3f00a76f01e4955fa66a100145c2a4a64f52b7896d1ef,2025-11-17T06:15:44.643000 +CVE-2025-60022,0,0,cc81aedaaa7a794751c3f00a76f01e4955fa66a100145c2a4a64f52b7896d1ef,2025-11-17T06:15:44.643000 CVE-2025-60023,0,0,9593ae23d0ba7746cfb57e3e96568fe0d3a99861e39f42ff9e9211110a9ce469,2025-10-27T13:20:15.637000 CVE-2025-60026,0,0,a380739785ce10efe299f34378f97194a437dd33a08bc29142d01f5f2cb2f36b,2025-09-26T03:15:44.143000 CVE-2025-60027,0,0,c79b0f77872160050a6e8179677e5044e089329d47ee2b25529861af7d40dbc2,2025-09-26T03:15:44.233000 @@ -315365,6 +315372,7 @@ CVE-2025-6507,0,0,4879312405dc64d09260c91f5c46e6eeab37503e93b4914450ef9452b0fbe7 CVE-2025-65070,0,0,f448085f4de7ea0b353d6128a191ee6528137163bfc2caad243c69ba708c6e43,2025-11-15T04:15:57.483000 CVE-2025-65071,0,0,e56be4598f471d5cff2f43c3a018bbc199e9eeb1e2f0937667d83392f2f3ed36,2025-11-15T04:15:57.573000 CVE-2025-65072,0,0,ebf75e8acb0584e0175e0768ce68e5d3ee6116c357be488a4d6b449c8c0b140b,2025-11-15T04:15:57.667000 +CVE-2025-65073,1,1,7fab092bc7305fb0ea089e543368410c80ee4ebb9ff15b563b6b6cdff79305ed,2025-11-17T08:16:25.600000 CVE-2025-6509,0,0,0a77d8561ce4da22774ea5cb68ff62f299428ec7e8554fc3b65b6353cd49cdad,2025-06-23T20:16:21.633000 CVE-2025-6510,0,0,6ac07d683db7d6e624d6f059776301bd59aa18a2ba615c569f28edfcbd6187b8,2025-07-16T17:00:44.380000 CVE-2025-6511,0,0,4e71ec9b0caa2aa068c2cebf5a67cc985e3117883fc251602d7324ce1aa756ba,2025-07-16T17:00:57.170000 @@ -317974,7 +317982,7 @@ CVE-2025-9495,0,0,9b598754c0e7f3b761f9d50f85d4af392e980f661b0f8d9526ab01b4e49f10 CVE-2025-9496,0,0,d8efe9f653f75d96ba1419f2d8fe3eb742a8bdbe259e54a82a466c7cac97d199,2025-10-14T19:36:59.730000 CVE-2025-9499,0,0,f28e42adcb4ec79a4d21e87a7d6a8af1085a982639177b267551f84313e0b85b,2025-09-02T15:55:35.520000 CVE-2025-9500,0,0,05582685848feacf78565cd6185988d69b8ca8ac569191b023b413c136e03319,2025-09-02T15:55:35.520000 -CVE-2025-9501,1,1,d62b33d52e593ce702406fed73939c8ba9342a4fc042de8faa09bf519845ffd9,2025-11-17T06:15:45.093000 +CVE-2025-9501,0,0,d62b33d52e593ce702406fed73939c8ba9342a4fc042de8faa09bf519845ffd9,2025-11-17T06:15:45.093000 CVE-2025-9502,0,0,8a19b48f0c71e44effed7f356754aa3f2475878e3ed55caac8e1fb27d42cde95,2025-09-02T17:54:47.687000 CVE-2025-9503,0,0,359123836248f73156a599cf747da2daa3091854d084eceb0b015eaf88c6cf7c,2025-09-02T17:54:35.693000 CVE-2025-9504,0,0,5f54c1d7c18ef104ddf1e1ccc55a0124e672fdd3d71dc56417f0d51b645a280e,2025-09-02T17:52:49.353000