admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-24 16:44:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-12-05T07:00:11.243566+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-12-05 07:04:02 +00:00
1 parent 74f3e9ef51
commit f73001b4eb
37 files changed
+2317 -30
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2016/CVE-2016-200xx/CVE-2016-20023.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2016-20023",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:03.720",
"lastModified": "2025-12-05T06:16:03.720",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-23"
}
]
}
],
"references": [
{
"url": "https://download.cksource.com/CKFinder/CKFinder%20for%20ASP.NET/2.5.0.1/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-100xx/CVE-2025-10055.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-10055",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.040",
"lastModified": "2025-12-05T06:16:05.040",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Time Sheets plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on several endpoints. This makes it possible for unauthenticated attackers to perform a variety of actions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/time-sheets/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6d8b57de-d02c-40c0-abdb-ff490bcf429e?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12124.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12124",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.207",
"lastModified": "2025-12-05T06:16:05.207",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The FitVids for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/fitvids-for-wordpress/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/063a245d-bd9e-49ac-bdf0-549a25eba9fe?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12128.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12128",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.380",
"lastModified": "2025-12-05T06:16:05.380",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Hide Categories Or Products On Shop Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.7. This is due to missing or incorrect nonce validation on the save_data_hcps() function. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/hide-categories-or-products-on-shop-page/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b649266a-6a9a-4d2e-9a82-2335e96bfe0d?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12133.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12133",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.540",
"lastModified": "2025-12-05T06:16:05.540",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The EPROLO Dropshipping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wp_ajax_eprolo_delete_tracking and wp_ajax_eprolo_save_tracking_data AJAX endpoints in all versions up to, and including, 2.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify and delete tracking data."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/eprolo-dropshipping/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a124da63-01a4-44d8-985b-cacef58ea9a3?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12153.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12153",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.707",
"lastModified": "2025-12-05T06:16:05.707",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all versions up to, and including, 0.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/featured-image-via-url/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9687a88f-ac5b-4746-a68c-91c358b5fb87?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12154.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12154",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:05.877",
"lastModified": "2025-12-05T06:16:05.877",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadThumb() function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/auto-thumbnailer/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d7c98191-bf17-4e94-88cc-ad385b1fe97d?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12163.json
+80
View File
@@ -0,0 +1,80 @@
{
"id": "CVE-2025-12163",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.053",
"lastModified": "2025-12-05T06:16:06.053",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://cwe.mitre.org/data/definitions/434.html",
"source": "[email protected]"
},
{
"url": "https://owasp.org/www-community/vulnerabilities/Unrestricted_File_Upload",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/omnipress/tags/1.6.3/includes/Core/RestControllersBase.php#L81",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/omnipress/tags/1.6.3/includes/RestApi/Controllers/V1/FileUploadRestController.php#L57",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/omnipress/tags/1.6.3/includes/uploader/FileUploader.php#L106",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/omnipress/tags/1.6.3/includes/uploader/FileUploader.php#L85",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/15aabe3b-1b77-4e4e-9710-cf06924dbcbf?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12165.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12165",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.237",
"lastModified": "2025-12-05T06:16:06.237",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Webcake \u2013 Landing Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'webcake_save_config' AJAX endpoint in all versions up to, and including, 1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/webcake/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3bdeb2a1-ab97-45ff-808e-37e631d5e9cf?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12181.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12181",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.403",
"lastModified": "2025-12-05T06:16:06.403",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all versions up to, and including, 1.3.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/contentstudio/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5b92b0a4-7ebf-43b3-837b-ad710e5e35ff?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12189.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-12189",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.573",
"lastModified": "2025-12-05T06:16:06.573",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.1321. This is due to missing or incorrect nonce validation on the uploadImage() function. This makes it possible for unauthenticated attackers to upload arbitrary files that make remote code execution possible via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://github.com/d0n601/CVE-2025-12189",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/bread-butter/trunk/src/Base/Ajax.php#L411",
"source": "[email protected]"
},
{
"url": "https://ryankozak.com/posts/cve-2025-12189/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/bb280004-e0ba-44c8-a205-8fec30900d86?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12190.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12190",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.740",
"lastModified": "2025-12-05T06:16:06.740",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Image Optimizer by wps.sk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0. This is due to missing or incorrect nonce validation on the imagopby_ajax_optimize_gallery() function. This makes it possible for unauthenticated attackers to trigger bulk optimization via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.svn.wordpress.org/image-optimizer-wpssk/tags/1.2.0/image-optimizer-wpssk.php",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/image-optimizer-wpssk/tags/1.2.0/image-optimizer-wpssk.php",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d321183a-f0ef-4b5b-855a-da95edb610b9?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-121xx/CVE-2025-12191.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12191",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:06.910",
"lastModified": "2025-12-05T06:16:06.910",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The PDF Catalog for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pdfcatalog' AJAX action in all versions up to, and including, 1.1.18 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://wordpress.org/plugins/pdf-catalog-for-woocommerce/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/cb5f5e33-e066-4a85-9367-4b8c2f948adf?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-123xx/CVE-2025-12368.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12368",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.070",
"lastModified": "2025-12-05T06:16:07.070",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sermon-views` shortcode in all versions up to, and including, 2.30.0. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/sermon-manager-for-wordpress/tags/2.30.0/includes/vendor/entry-views.php#L114",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/sermon-manager-for-wordpress",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/41116b52-8f94-4d29-8845-a27bdf817b43?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-123xx/CVE-2025-12370.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12370",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.233",
"lastModified": "2025-12-05T06:16:07.233",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Takeads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.13. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete the plugin's configuration options."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/monetize-link/tags/1.0.13/src/MLP_Ajax.php#L8",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9f3619d9-7572-439e-a284-d59ef5de08f3?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-124xx/CVE-2025-12417.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-12417",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:55.693",
"lastModified": "2025-12-05T05:16:55.693",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The SurveyFunnel \u2013 Survey Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'surveyfunnel_lite_survey' shortcode in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://developer.wordpress.org/apis/security/escaping/",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/surveyfunnel-lite/tags/1.1.5/public/class-surveyfunnel-lite-public.php#L240",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2d13aadf-c144-4919-9bbd-54cb26cf2527?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-130xx/CVE-2025-13006.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13006",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:56.937",
"lastModified": "2025-12-05T05:16:56.937",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The SurveyFunnel \u2013 Survey Plugin for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via several unprotected /wp-json/surveyfunnel/v2/ REST API endpoints. This makes it possible for unauthenticated attackers to extract sensitive data from survey responses."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://github.com/wpeka/surveyfunnel-lite/blob/master/includes/class-surveyfunnel-lite-rest-api.php",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/surveyfunnel-lite/tags/1.1.5/includes/class-surveyfunnel-lite-rest-api.php",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f43f69f0-6995-4789-acf3-8019227effe1?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-131xx/CVE-2025-13144.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13144",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.400",
"lastModified": "2025-12-05T06:16:07.400",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insufficient nonce validation on the add_cstu_settings function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/contentstudio/tags/1.3.7/contentstudio-plugin.php#L380",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/contentstudio/tags/1.3.7/contentstudio-plugin.php#L383",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/047fd07c-ab07-49bf-8a94-8ae33c92f93e?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13312.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13312",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:57.560",
"lastModified": "2025-12-05T05:16:57.560",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The CRM Memberships plugin for WordPress is vulnerable to unauthorized membership tag creation due to a missing capability check on the 'ntzcrm_add_new_tag' function in all versions up to, and including, 2.5. This makes it possible for unauthenticated attackers to create arbitrary membership tags and modify CRM configuration that should be restricted to administrators."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-api.php#L14",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-api.php#L828",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f61b9de5-5c37-4efb-ad1c-006e9fc05bc2?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13313.json
+76
View File
@@ -0,0 +1,76 @@
{
"id": "CVE-2025-13313",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:57.780",
"lastModified": "2025-12-05T05:16:57.780",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.5. This is due to missing authorization and authentication checks on the `ntzcrm_changepassword` AJAX action. This makes it possible for unauthenticated attackers to reset arbitrary user passwords and gain unauthorized access to user accounts via the `ntzcrm_changepassword` endpoint, granted they can obtain or enumerate a target user's email address. The plugin also exposes the `ntzcrm_get_users` endpoint without authentication, allowing attackers to enumerate subscriber email addresses, facilitating the exploitation of the password reset vulnerability."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-api.php#L12",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-api.php#L63",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-api.php#L795",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/includes/class/class-ntzcrm-dbquery.php#L287",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/crm-memberships/tags/2.5/ntzcrm-memberships.php#L42",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e2837399-c44f-494e-bdc6-f9c6e4e2dc11?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13360.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13360",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.563",
"lastModified": "2025-12-05T06:16:07.563",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/tw-image-hover-share/tags/1.0.8/tw-image-hover.php#L103",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/tw-image-hover-share/trunk/tw-image-hover.php#L103",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/43a237fd-5d3a-47fb-bacf-ceb5eeaa8bbb?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-133xx/CVE-2025-13362.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13362",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:58.010",
"lastModified": "2025-12-05T05:16:58.010",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/norby-ai/tags/1.0.3/api/save.php#L23",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/norby-ai/trunk/api/save.php#L23",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7dc6f6e2-6777-4056-95d0-e3d3e7ad7a22?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-134xx/CVE-2025-13494.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13494",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:58.213",
"lastModified": "2025-12-05T05:16:58.213",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The SSP Debug plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0. This is due to the plugin storing PHP error logs in a predictable, web-accessible location (wp-content/uploads/ssp-debug/ssp-debug.log) without any access controls. This makes it possible for unauthenticated attackers to view sensitive debugging information including full URLs, client IP addresses, User-Agent strings, WordPress user IDs, and internal filesystem paths."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/ssp-debugging/tags/1.0.0/ssp-debug.php#L221",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/ssp-debugging/trunk/ssp-debug.php#L221",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/66f29499-1522-43cd-af78-9b734c66af8c?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-135xx/CVE-2025-13512.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13512",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.727",
"lastModified": "2025-12-05T06:16:07.727",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/cosign-sso/tags/0.3.1/cosign-sso.php#L423",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/cosign-sso/trunk/cosign-sso.php#L423",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0bbeab52-59a9-4d8d-8e3e-ebcbbca9816b?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-135xx/CVE-2025-13528.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13528",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:07.900",
"lastModified": "2025-12-05T06:16:07.900",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handle_export' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or JSON format via the 'export_data' parameter."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-862"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/feedback-modal-for-website/tags/1.0.1/inc/admin/main.php#L1011",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/feedback-modal-for-website/trunk/inc/admin/main.php#L1011",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3341c29-a69e-4618-a8a5-11f4141ff88f?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13621.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-13621",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.063",
"lastModified": "2025-12-05T06:16:08.063",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the 'dreampluginsmain' AJAX action. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/dream-gallery/tags/1.0/dreamgallery.php#L254",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/dream-gallery/tags/1.0/dreamgallery.php#L257",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/dream-gallery/tags/1.0/templates/front.php#L38",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/dream-gallery/trunk/dreamgallery.php#L254",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3cdf6ba0-2866-4347-8518-bb1d2e40bab3?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13622.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13622",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.233",
"lastModified": "2025-12-05T06:16:08.233",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/jabberbenachrichtigung/tags/0.99-RC2/jabbernotification.php#L85",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/jabberbenachrichtigung/trunk/jabbernotification.php#L85",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/jabberbenachrichtigung/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8e9a872d-575c-455c-8f26-709878817ae0?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13623.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13623",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.400",
"lastModified": "2025-12-05T06:16:08.400",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/twitscription/tags/0.1.1/twitscription.php#L101",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/twitscription/trunk/twitscription.php#L101",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/twitscription/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f6e7756-d8cc-4380-a93e-47d7916a5f7b?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-136xx/CVE-2025-13625.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-13625",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.563",
"lastModified": "2025-12-05T06:16:08.563",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The WP-SOS-Donate Donation Sidebar Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `$_SERVER['PHP_SELF']` parameter in all versions up to, and including, 0.9.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/wp-sos-donate/tags/0.9.2/wp-sos-donate_options.php#L45",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/wp-sos-donate/trunk/wp-sos-donate_options.php#L45",
"source": "[email protected]"
},
{
"url": "https://wordpress.org/plugins/wp-sos-donate/",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5123c672-e769-4d44-9912-e159d3e186c1?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-138xx/CVE-2025-13860.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-13860",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.730",
"lastModified": "2025-12-05T06:16:08.730",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `h_tags` parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.1,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://plugins.trac.wordpress.org/browser/easy-jump-links-menus/tags/1.0.0/easy-jump-links-menus.php#L52",
"source": "[email protected]"
},
{
"url": "https://plugins.trac.wordpress.org/browser/easy-jump-links-menus/trunk/easy-jump-links-menus.php#L52",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e3e88dc0-4798-4da8-87cf-4c398acc622c?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-328xx/CVE-2025-32898.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-32898",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:58.480",
"lastModified": "2025-12-05T05:16:58.480",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-331"
}
]
}
],
"references": [
{
"url": "https://kde.org/info/security/advisory-20250418-3.txt",
"source": "[email protected]"
},
{
"url": "https://kdeconnect.kde.org",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-328xx/CVE-2025-32899.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-32899",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:16:59.407",
"lastModified": "2025-12-05T05:16:59.407",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1250"
}
]
}
],
"references": [
{
"url": "https://kde.org/info/security/advisory-20250418-1.txt",
"source": "[email protected]"
},
{
"url": "https://kdeconnect.kde.org",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-329xx/CVE-2025-32900.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-32900",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:08.900",
"lastModified": "2025-12-05T06:16:08.900",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-348"
}
]
}
],
"references": [
{
"url": "https://kde.org/info/security/advisory-20250418-2.txt",
"source": "[email protected]"
},
{
"url": "https://kdeconnect.kde.org",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-329xx/CVE-2025-32901.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-32901",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T05:17:02.380",
"lastModified": "2025-12-05T06:16:09.077",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-1287"
}
]
}
],
"references": [
{
"url": "https://kde.org/info/security/advisory-20250418-4.txt",
"source": "[email protected]"
},
{
"url": "https://kdeconnect.kde.org",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-662xx/CVE-2025-66270.json
+76
View File
@@ -0,0 +1,76 @@
{
"id": "CVE-2025-66270",
"sourceIdentifier": "[email protected]",
"published": "2025-12-05T06:16:09.253",
"lastModified": "2025-12-05T06:16:09.253",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-290"
}
]
}
],
"references": [
{
"url": "https://github.com/GSConnect/gnome-shell-extension-gsconnect/commit/a38246deec0af50ae218cdc51db32cdd7eb145e3",
"source": "[email protected]"
},
{
"url": "https://github.com/andyholmes/valent/commit/85f773124a67ed1add79e7465bb088ec667cccce",
"source": "[email protected]"
},
{
"url": "https://invent.kde.org/network/kdeconnect-android/-/commit/675d2d24a1eb95d15d9e5bde2b7e2271d5ada6a9",
"source": "[email protected]"
},
{
"url": "https://invent.kde.org/network/kdeconnect-ios/-/commit/6c003c22d04270cabc4b262d399c753d55cf9080",
"source": "[email protected]"
},
{
"url": "https://invent.kde.org/network/kdeconnect-kde/-/commit/4e53bcdd5d4c28bd9fefd114b807ce35d7b3373e",
"source": "[email protected]"
},
{
"url": "https://kde.org/info/security/advisory-20251128-1.txt",
"source": "[email protected]"
}
]
}
README.md
+29 -17
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-12-05T05:00:12.862004+00:00
2025-12-05T07:00:11.243566+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-12-05T04:16:01.137000+00:00
2025-12-05T06:16:09.253000+00:00
```
### Last Data Feed Release
@@ -33,26 +33,38 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
320238
320273
```
### CVEs added in the last Commit
Recently added CVEs: `13`
Recently added CVEs: `35`
- [CVE-2025-11759](CVE-2025/CVE-2025-117xx/CVE-2025-11759.json) (`2025-12-05T03:15:56.450`)
- [CVE-2025-12804](CVE-2025/CVE-2025-128xx/CVE-2025-12804.json) (`2025-12-05T03:15:56.660`)
- [CVE-2025-13066](CVE-2025/CVE-2025-130xx/CVE-2025-13066.json) (`2025-12-05T04:15:59.757`)
- [CVE-2025-27389](CVE-2025/CVE-2025-273xx/CVE-2025-27389.json) (`2025-12-05T04:16:00.333`)
- [CVE-2025-66536](CVE-2025/CVE-2025-665xx/CVE-2025-66536.json) (`2025-12-05T04:16:00.537`)
- [CVE-2025-66537](CVE-2025/CVE-2025-665xx/CVE-2025-66537.json) (`2025-12-05T04:16:00.640`)
- [CVE-2025-66538](CVE-2025/CVE-2025-665xx/CVE-2025-66538.json) (`2025-12-05T04:16:00.717`)
- [CVE-2025-66539](CVE-2025/CVE-2025-665xx/CVE-2025-66539.json) (`2025-12-05T04:16:00.787`)
- [CVE-2025-66540](CVE-2025/CVE-2025-665xx/CVE-2025-66540.json) (`2025-12-05T04:16:00.857`)
- [CVE-2025-66541](CVE-2025/CVE-2025-665xx/CVE-2025-66541.json) (`2025-12-05T04:16:00.927`)
- [CVE-2025-66542](CVE-2025/CVE-2025-665xx/CVE-2025-66542.json) (`2025-12-05T04:16:00.993`)
- [CVE-2025-66543](CVE-2025/CVE-2025-665xx/CVE-2025-66543.json) (`2025-12-05T04:16:01.070`)
- [CVE-2025-66544](CVE-2025/CVE-2025-665xx/CVE-2025-66544.json) (`2025-12-05T04:16:01.137`)
- [CVE-2025-12189](CVE-2025/CVE-2025-121xx/CVE-2025-12189.json) (`2025-12-05T06:16:06.573`)
- [CVE-2025-12190](CVE-2025/CVE-2025-121xx/CVE-2025-12190.json) (`2025-12-05T06:16:06.740`)
- [CVE-2025-12191](CVE-2025/CVE-2025-121xx/CVE-2025-12191.json) (`2025-12-05T06:16:06.910`)
- [CVE-2025-12368](CVE-2025/CVE-2025-123xx/CVE-2025-12368.json) (`2025-12-05T06:16:07.070`)
- [CVE-2025-12370](CVE-2025/CVE-2025-123xx/CVE-2025-12370.json) (`2025-12-05T06:16:07.233`)
- [CVE-2025-12417](CVE-2025/CVE-2025-124xx/CVE-2025-12417.json) (`2025-12-05T05:16:55.693`)
- [CVE-2025-13006](CVE-2025/CVE-2025-130xx/CVE-2025-13006.json) (`2025-12-05T05:16:56.937`)
- [CVE-2025-13144](CVE-2025/CVE-2025-131xx/CVE-2025-13144.json) (`2025-12-05T06:16:07.400`)
- [CVE-2025-13312](CVE-2025/CVE-2025-133xx/CVE-2025-13312.json) (`2025-12-05T05:16:57.560`)
- [CVE-2025-13313](CVE-2025/CVE-2025-133xx/CVE-2025-13313.json) (`2025-12-05T05:16:57.780`)
- [CVE-2025-13360](CVE-2025/CVE-2025-133xx/CVE-2025-13360.json) (`2025-12-05T06:16:07.563`)
- [CVE-2025-13362](CVE-2025/CVE-2025-133xx/CVE-2025-13362.json) (`2025-12-05T05:16:58.010`)
- [CVE-2025-13494](CVE-2025/CVE-2025-134xx/CVE-2025-13494.json) (`2025-12-05T05:16:58.213`)
- [CVE-2025-13512](CVE-2025/CVE-2025-135xx/CVE-2025-13512.json) (`2025-12-05T06:16:07.727`)
- [CVE-2025-13528](CVE-2025/CVE-2025-135xx/CVE-2025-13528.json) (`2025-12-05T06:16:07.900`)
- [CVE-2025-13621](CVE-2025/CVE-2025-136xx/CVE-2025-13621.json) (`2025-12-05T06:16:08.063`)
- [CVE-2025-13622](CVE-2025/CVE-2025-136xx/CVE-2025-13622.json) (`2025-12-05T06:16:08.233`)
- [CVE-2025-13623](CVE-2025/CVE-2025-136xx/CVE-2025-13623.json) (`2025-12-05T06:16:08.400`)
- [CVE-2025-13625](CVE-2025/CVE-2025-136xx/CVE-2025-13625.json) (`2025-12-05T06:16:08.563`)
- [CVE-2025-13860](CVE-2025/CVE-2025-138xx/CVE-2025-13860.json) (`2025-12-05T06:16:08.730`)
- [CVE-2025-32898](CVE-2025/CVE-2025-328xx/CVE-2025-32898.json) (`2025-12-05T05:16:58.480`)
- [CVE-2025-32899](CVE-2025/CVE-2025-328xx/CVE-2025-32899.json) (`2025-12-05T05:16:59.407`)
- [CVE-2025-32900](CVE-2025/CVE-2025-329xx/CVE-2025-32900.json) (`2025-12-05T06:16:08.900`)
- [CVE-2025-32901](CVE-2025/CVE-2025-329xx/CVE-2025-32901.json) (`2025-12-05T05:17:02.380`)
- [CVE-2025-66270](CVE-2025/CVE-2025-662xx/CVE-2025-66270.json) (`2025-12-05T06:16:09.253`)
### CVEs modified in the last Commit
_state.csv
+48 -13
View File
@@ -85606,6 +85606,7 @@ CVE-2016-20018,0,0,62c09eb5dba9905cc98613f73c036000dc23cdec0f8a6845db0dc239c7ec6
CVE-2016-2002,0,0,90dea3dd4fe78635a96aa5ab9c034af2b917f4528ea4c8a4b6931247b62a87ee,2025-11-19T13:23:10.650000
CVE-2016-20021,0,0,4c0bb541ca009b5d3374ad6a22f85f63acf8e0c180eb227f6601ee2b69627cb0,2025-06-03T14:15:26.830000
CVE-2016-20022,0,0,f3b79e4e40b7b258a06430f1aad64a75e784e076547d4ddff1aa1a207dd3d2a6,2025-03-13T18:15:35.470000
CVE-2016-20023,1,1,b8689962a941ed1ec5bf7c5e46bfdb36fe791874e45ba5728a65adf2663e7fc3,2025-12-05T06:16:03.720000
CVE-2016-2003,0,0,bb11b401da15b32c0d63ef7b69ec2cb9fbbe494777c30d27975cdf22b552adb2,2025-04-12T10:46:40.837000
CVE-2016-2004,0,0,f52df976e977d8cf55fdef3a116501f8beee39979c830285072b3d77a2a7ee20,2025-04-12T10:46:40.837000
CVE-2016-2005,0,0,3046700118defdda9ed9d657c9705eb0d79e37b2180f9f2da3973069df062eb5,2025-04-12T10:46:40.837000
@@ -285675,6 +285676,7 @@ CVE-2025-10050,0,0,48c56fa25e06da5f84057e0104a1b2aa017d428d2b5e23c6358b5715edd0a
CVE-2025-10051,0,0,32fbc496c105724367f059b2949c0c6edf450c7c0e667438797e5a5725945c97,2025-10-16T15:28:59.610000
CVE-2025-10053,0,0,6c6197bfa223cdb0768f7e64def5038e3d6cfa20ac231a3d3cef68e7fec99151,2025-10-06T14:57:05
CVE-2025-10054,0,0,519a2b1b3267af4e5e6dcf545878c4216f3fe20a6ecafe294a28a4e22095a3fb,2025-11-26T16:44:10.627000
CVE-2025-10055,1,1,b697193fda25db0da16e97ff4867fb8bbb7ba8dd13b6693bd3ac45131b48e9aa,2025-12-05T06:16:05.040000
CVE-2025-10056,0,0,fe1121a54d1b0bc824d2256366afe09e2cb7e282fb424809622e452e1d7049dc,2025-10-16T15:28:59.610000
CVE-2025-10057,0,0,e7c66d7f712605b5f4ab9396c61b556e4b63dadf26184cd30d0afbc729ec1aa2,2025-09-17T14:18:55.093000
CVE-2025-10058,0,0,247d0c38ffac72c0b031a6db917dba3ab50cc134f5abda94bf76965300693a37,2025-09-17T14:18:55.093000
@@ -287240,7 +287242,7 @@ CVE-2025-11755,0,0,e5baa99e43a4ddc9310a3a7b11a9886eb0253e6d3147e723d3be66ed08104
CVE-2025-11756,0,0,026fac440aa98f8b03413893829f8cf4c4c3eb7a6922c38ccc036f2824e59af1,2025-11-25T14:48:32.077000
CVE-2025-11757,0,0,a39e3724a2acd53ebd7b29e06d16eb8c46a7a7a751c3cb32874032ba913da6cd,2025-10-21T19:31:25.450000
CVE-2025-11758,0,0,fdd1d7b0c5468cb75e3652535ac7087c51b1246e9da95d3194efd265c455c087,2025-11-04T15:40:45.533000
CVE-2025-11759,1,1,8f4ee862edc456ce40c2c33f93f64b977348fd26b28f24928301bf7d6cdb8eb4,2025-12-05T03:15:56.450000
CVE-2025-11759,0,0,8f4ee862edc456ce40c2c33f93f64b977348fd26b28f24928301bf7d6cdb8eb4,2025-12-05T03:15:56.450000
CVE-2025-1176,0,0,7211655ba673c7f07e260b973e03bf185afc4c6c1eb2b470fbc3c1078b6ea002,2025-04-11T22:15:29.513000
CVE-2025-11760,0,0,2278e8563c8fa400497f05caa6c939e904911908a39cb90570a030722b36ae2b,2025-10-27T13:20:15.637000
CVE-2025-11761,0,0,f6e39bd9482657942879edd0b2a1b17b4e754913cb6b1c42f5608d25f9fcf9db,2025-11-04T15:41:31.450000
@@ -287557,10 +287559,13 @@ CVE-2025-1212,0,0,3abd957af5194f62a619834352f61a49a30dbfb280f60a8147027e5362c8c4
CVE-2025-12120,0,0,7f0389f21bbd7c8be214d1dc09c061766e927cbfab8b1683888253dd070c2852,2025-11-21T15:13:13.800000
CVE-2025-12121,0,0,475ffa32727480595c84a097646c3643b8f09691514c629e7b8c959cf8dc8176,2025-11-21T15:13:13.800000
CVE-2025-12123,0,0,8af3942d75049148b2e51eea33e5309da3c28aaa298e926d554f403bce0603c7,2025-12-01T15:39:33.110000
CVE-2025-12124,1,1,afed78a5c40efc853f222899290ae47060385cefc4f4b5068a487f25f6d594c3,2025-12-05T06:16:05.207000
CVE-2025-12125,0,0,d377c4ab97f1c931195e69299449d914aa968842e1322651dd3b6630e9f11202,2025-11-12T16:19:59.103000
CVE-2025-12126,0,0,204d6b6ca7ca6af9141fff2f2edfa46d59f0c85a3d08a6d5cecf1cdda3f252ee,2025-11-12T16:19:34.210000
CVE-2025-12128,1,1,e0e6f8a5c09ab5927586b8e6c1a5326d03552f2ed746a5f40def6ff4233c6d8a,2025-12-05T06:16:05.380000
CVE-2025-1213,0,0,09a6a70ca5cef42504b01e1673b93239bee3ac66032d2bec5ee9ff5bd8cae38d,2025-10-17T15:18:14.670000
CVE-2025-12132,0,0,18ea5051152814ceb56c8d2e5a3c981d723302db3e250e3180d205d41620d0d9,2025-11-12T16:19:34.210000
CVE-2025-12133,1,1,04e9aacdd884465464f92d086145cc1635f295828459d5f0c079138bdfae3229,2025-12-05T06:16:05.540000
CVE-2025-12134,0,0,e9b1e4ef62ed22e84d03a081ccb83e63d7d2952cbb11dd70ce179ce19e5e0b1d,2025-10-27T13:20:15.637000
CVE-2025-12135,0,0,06f210fceaf93a6687dfcfad724db7aa7c3cd3e30c729bb4f35b390ff9eb61a3,2025-11-21T15:13:13.800000
CVE-2025-12136,0,0,ec75df734155dbd8682050d7268d5bb6143c8362cc6111c73ed3b65c054b922d,2025-10-27T13:20:15.637000
@@ -287577,6 +287582,8 @@ CVE-2025-12149,0,0,53a42d6fbb30f206a7535a87aa75c31aef52932ef0e390c43a76403ccad76
CVE-2025-1215,0,0,07ddd3fd3d55438353bcb7e0c3e4cf4b1378d56cbbd763bb2a52a0d379b4ca82,2025-08-13T17:28:19.607000
CVE-2025-12151,0,0,bd1ebbbe866ec792de8c6a52350337d8f6d29134ac36d040eb761aac83884a7f,2025-12-01T15:39:33.110000
CVE-2025-12152,0,0,e709d881b09b2053123c66d140363cb1fb7a52ef236a625d53d967f278e464d6,2025-11-12T16:15:35.783000
CVE-2025-12153,1,1,b0df1fd06c21d0f20ac480eca710861a2c4f7cf5d247b0ebff1024a61afd3970,2025-12-05T06:16:05.707000
CVE-2025-12154,1,1,556e77dfd5a6d58849cb0ee3be91c6d13872eab3dede7c10873f5d4e28fdb533,2025-12-05T06:16:05.877000
CVE-2025-12155,0,0,7a9df136f5a258ad5f2ca9673af2f340538a26cf6a76bd6530bae7f814089be9,2025-11-12T16:19:59.103000
CVE-2025-12156,0,0,40b41a0ae890e9fc364a3b35bfe9e9c4a89220d3ec9e6427c8422a610b3b411e,2025-11-04T15:40:45.533000
CVE-2025-12157,0,0,4b1b2da9e6ac2bb4185d3dc9fc7b98d0fcad36cc1bad652e73238da2e0884532,2025-11-04T15:40:45.533000
@@ -287584,6 +287591,8 @@ CVE-2025-12158,0,0,75e82560d3c0001c25ef033d591fddc1ff117faf5deb99040776aad99480a
CVE-2025-1216,0,0,11060ed5e60af2bec3a647a424c2180f5bf8e8f9b6c184be93391bb10c3302cb,2025-08-26T18:38:22.790000
CVE-2025-12160,0,0,778446296dec55ad9ca7c6c03e4e27eb678dfd3ee1a3b76af3c53c5cc68aa5a0,2025-11-21T15:13:13.800000
CVE-2025-12161,0,0,7070192a143797783226bbe9405e90ed94752c39a0b05566b8826c4f3aecf4da,2025-11-12T16:19:59.103000
CVE-2025-12163,1,1,7cad8ac94ddcac904cb4dd7db19f1cbcb222c99fd1f9544eb1fe3567eb5064b3,2025-12-05T06:16:06.053000
CVE-2025-12165,1,1,de97344ec10e7897c43f4d237ab1ae348805be71af1de684bd48d22c7fe0b48e,2025-12-05T06:16:06.237000
CVE-2025-12167,0,0,6d4f725f30f1dd32d631dc19935d42a97e917b21edc2c5d25795c374acc44922,2025-11-12T16:19:59.103000
CVE-2025-12169,0,0,1717227344313c485ba4c210910a5592821d1d13269b6426ccc41f72a74a6aad,2025-12-03T18:29:07.057000
CVE-2025-1217,0,0,7a4f77ddbf4866354d6400499cb508309b4f67f2161a63f8bd69404d2498e007,2025-11-03T21:18:52.340000
@@ -287595,13 +287604,17 @@ CVE-2025-12175,0,0,da1418d6015f97470d81158a66e3f9720e17f76c6f6cac27f8d1826600110
CVE-2025-12176,0,0,51600658b76b8abed7d6a398e4c4cb5526eda72706d4808694322523753d89dd,2025-11-10T15:05:15.617000
CVE-2025-12177,0,0,a516ceb62e2212e2658270c753c65a8528d1292d4adb5d88e6ed3c1f6752e688,2025-11-12T16:19:59.103000
CVE-2025-12180,0,0,706ded67723279ae679ea8a333580d98de93133f559c2ae245f3cd4a4afbff28,2025-11-04T15:41:31.450000
CVE-2025-12181,1,1,12dfdd09f0935d6706c2fc80e814c427c29de64b8b5063f0d55c52b8ff2dd949,2025-12-05T06:16:06.403000
CVE-2025-12182,0,0,04714423c38cafa185523dc6e162118ee4841c3fbc17fa16f369cb4b3a84e7f3,2025-11-18T14:06:55.963000
CVE-2025-12183,0,0,367e2afa8a2b7673afc1cfdd5f058820877baae401c6ea6b4bb5d351370b35ee,2025-12-01T21:15:49.800000
CVE-2025-12184,0,0,be752abd2f1d114dc84a062fb352b4536431571405a4ab3177e8747475735a18,2025-11-04T15:40:45.533000
CVE-2025-12185,0,0,0c1f0a26d080e334a74a6c6b8deee641f8133460696c8d1238e911b5e7c6218b,2025-12-01T15:39:33.110000
CVE-2025-12187,0,0,3056c3ab8d89d2755db634d4cb95d2e7cae150f33cecf32d33886a5af85e72bb,2025-11-14T19:15:56.707000
CVE-2025-12188,0,0,c70c576d01c11e9642af5bd77fd654a069b0b8a99cd2533cd3d2105c232bfe3c,2025-11-04T15:40:45.533000
CVE-2025-12189,1,1,40b7be27b4b1d213e8bda93db010e66e60da171270fb8e069d51bf6a50ade0b2,2025-12-05T06:16:06.573000
CVE-2025-1219,0,0,6f1f69e2faa6be38034464fa71871f25135a0aebe53cdc3879b7977b8e22919e,2025-11-03T21:18:52.480000
CVE-2025-12190,1,1,0af8c7ce35b97580fdbc4c1dae66ba06bd77cc30bc8bb162d0abbe015c12f7a9,2025-12-05T06:16:06.740000
CVE-2025-12191,1,1,8419e2b8f3c304d6b06b57200a6fef8a528cab56b0d23dbf15233e396899ce2a,2025-12-05T06:16:06.910000
CVE-2025-12192,0,0,8418ed8e8d92fcb0d246126204de15d702d3358884eeac6804c09a883c99003c,2025-11-06T19:45:30.990000
CVE-2025-12193,0,0,c8b2e08ef16f7899201880c25b53ab8b3c8e7ff4b6a629eff024de67ac5d2fec,2025-11-12T16:19:59.103000
CVE-2025-12194,0,0,503ab32aacc6da9a69fd5ee71259c1a210a74dff053210934096081adeb4809c,2025-10-27T13:20:15.637000
@@ -287779,7 +287792,9 @@ CVE-2025-12364,0,0,ea35ca2d8516b8243a1df7c92f765b7389fbad31aa1c141280dfeff02cddf
CVE-2025-12365,0,0,e644fe6859e4c0fea7811c6332b1629140ba70a04279b602af09884de4fec251,2025-11-10T14:54:12.747000
CVE-2025-12366,0,0,d9c0f5e1f687a42dc876bf55bdd2361efbbd17d7329daed07e9b1235ed9ed2e0,2025-11-14T16:42:03.187000
CVE-2025-12367,0,0,fdc4e13dc4823c4f2ebd516855f0994820a812a71426c0158ba005b28d73e993,2025-11-04T15:41:31.450000
CVE-2025-12368,1,1,26ef491d5ee1f3c4312c7e49cb89349573d9ba2fec626893a9c9e058683d3b00,2025-12-05T06:16:07.070000
CVE-2025-12369,0,0,7138931d181b1186e76b17d1fe262d14551c9ffda7682171860d81fc16e0589f,2025-11-04T15:40:45.533000
CVE-2025-12370,1,1,031bba03de7b511058daaa8f43b485ffa90362dbac5038c9ad53fe3339f078b9,2025-12-05T06:16:07.233000
CVE-2025-12371,0,0,728a3d354d73aa4b3531e521ba186b9f829eabbfe71fb19a23bbc9800f341ff3,2025-11-04T15:40:45.533000
CVE-2025-12372,0,0,507dfd31f27bba5c97b79fea61f2048f47b69ddb97b4c3c9834f1906ebde3b16,2025-11-18T14:06:29.817000
CVE-2025-12376,0,0,1a025369633d3b9c243e647d89ff61793b0b9bed3173d74c3ca2e666152f5e3a,2025-11-19T19:15:16.750000
@@ -287817,6 +287832,7 @@ CVE-2025-12413,0,0,5d7fe3a7e47a475a9c0ef94ac93fed937f84f5c66411a28364a8806394690
CVE-2025-12414,0,0,8dabb6354a884c1b0b603a9f195da7b4cd96d3b73b3b45f7ee435e57ee17bcaf,2025-11-21T15:13:59.083000
CVE-2025-12415,0,0,81c866442fb9fd46706f21c98259794a7fcc8b091f645ddfb160f6da0ea0b137,2025-11-04T15:40:45.533000
CVE-2025-12416,0,0,ec35b538eb8dc521ad393c983756c4acf2a7d587acce4aede1c3f6348a585ec8,2025-11-04T15:40:45.533000
CVE-2025-12417,1,1,30df491f83875a3d53681feb8ccb11af196c1817aadae2af326339286604929b,2025-12-05T05:16:55.693000
CVE-2025-12418,0,0,a1a3e7ea14eefbd5d5678a02f92ecd8b22ddabc6222cd4b305997e821ca32c95,2025-11-12T16:20:22.257000
CVE-2025-12419,0,0,ad3385086b26c76bcfdbfb10071b4bed49dd0ad9ecaeccab6e8ce67b0cfa6efc,2025-12-03T15:17:16.337000
CVE-2025-12421,0,0,7ce4296b0ce546f87c19119bcb88cb71647b9c59e9fb3864088df018318ba094,2025-12-03T15:10:42.900000
@@ -288089,7 +288105,7 @@ CVE-2025-1279,0,0,81b425d3af391d6b47292396dd129cbf7aa0312666c7090cda5b04e25a332e
CVE-2025-12790,0,0,32dae10fe8cbfc3f834324194dddc4ee4bcca04b572289398babdff4d245e46f,2025-11-12T16:20:22.257000
CVE-2025-12792,0,0,93a4c3216fde466b897f0740c07bb66598130a4089f4661f5f4990f4ea795394,2025-11-18T14:06:29.817000
CVE-2025-12800,0,0,6f7f713673e6b423010bc4162e30adceeb61d0aecced08b9661630d55f926dc8,2025-11-25T22:16:42.557000
CVE-2025-12804,1,1,1d5ca92aa14aaaf3542cd32985e8b052d2d81b427117bbabf055e3f40bbc4290,2025-12-05T03:15:56.660000
CVE-2025-12804,0,0,1d5ca92aa14aaaf3542cd32985e8b052d2d81b427117bbabf055e3f40bbc4290,2025-12-05T03:15:56.660000
CVE-2025-12808,0,0,fe1796695c5d88205051329946a0c8077ea1490f01c73d7003b668ba6de325f9,2025-11-10T16:30:59.457000
CVE-2025-12813,0,0,9a2f3b66496ecc6aaf76d6e8054aee4f10e055a89f44476be425dd404cb7c212,2025-11-12T16:19:34.210000
CVE-2025-12814,0,0,dcbdaefce3580c4fc8beb17737b597b42fdd6e0dcfb3adf78d0d3eaeded42fbd,2025-11-19T19:14:59.327000
@@ -288232,6 +288248,7 @@ CVE-2025-12998,0,0,f3fb06fa9653aba1e764961f6e183b92926d1d490811825111e397e962eee
CVE-2025-1300,0,0,2e9e1d2e469024f43a6eb15e12f1773ee35786b336ee8b88da59578559ba2189,2025-11-14T15:29:28.110000
CVE-2025-13000,0,0,6b632c39873761963ae6990bb25209d5b73d7c74afd5e98774cb3b6e4c49bd5f,2025-12-02T17:16:29.163000
CVE-2025-13001,0,0,b40f575fe791cb133c43312b16748863751abb6dfee278b0c21529f4926d64b3,2025-12-02T17:16:29.163000
CVE-2025-13006,1,1,e436494674b7e45b19692b87a417334353265e2fbd2c5b512e17b4bbc3b6a495,2025-12-05T05:16:56.937000
CVE-2025-13007,0,0,d9f03fbabebe93b851083ac52b0ba8043199f6fa05dcfc77556a4cb451fab1fd,2025-12-02T17:16:29.163000
CVE-2025-1301,0,0,d7faba0f900312629252c10b0ff69e7ad4067abfd474abf12d63d55853a93aef,2025-09-12T08:15:44.563000
CVE-2025-13012,0,0,8ea8bcb845d142171f1a579f978cb92e3f566cf3dfdc35fb064b9bd183c6d8fd,2025-11-19T20:15:49.383000
@@ -288269,7 +288286,7 @@ CVE-2025-1306,0,0,de526cacf8bf273c9432977eceb9f985b41588e9255fe87d024d0d99218909
CVE-2025-13060,0,0,72a310f3b82221fd7985613f28f09948690ba9f0191c16c66d3292f6a7d76d68,2025-11-17T12:32:35.167000
CVE-2025-13061,0,0,3dae6fe3856612139fc3a77ae84ce221444ed2b477b6fa7a3a76672988ca757b,2025-11-17T12:31:25.667000
CVE-2025-13063,0,0,fd99a54039cec8c530ed1111ee3a257dfbb551bd857a40899dbd1b2cfbcbd0b6,2025-11-14T16:42:30.503000
CVE-2025-13066,1,1,37ba84ffd60d9bf504aa2ecd1d3a3a55c11906eaeb678f74a163dd23a84b8e07,2025-12-05T04:15:59.757000
CVE-2025-13066,0,0,37ba84ffd60d9bf504aa2ecd1d3a3a55c11906eaeb678f74a163dd23a84b8e07,2025-12-05T04:15:59.757000
CVE-2025-13068,0,0,4cd5b9f20d822f725b208588067ed6e3063aca17c1c5cf7633be777f5a8d1d14,2025-11-25T22:16:16.690000
CVE-2025-13069,0,0,36e56064a7dee78026e9c4012940fd24a76d86d8fa99ce01b71b331b42f12c34,2025-11-18T14:06:29.817000
CVE-2025-1307,0,0,f5a65a0d70e64918e5c1a7d1d02a502ae3db9a76fffe081c38f2a5d059c1eb26,2025-03-05T13:55:29.927000
@@ -288319,6 +288336,7 @@ CVE-2025-13140,0,0,625818e09fffb094601a2195f0ea8311ddf99c1275f53a6f615c1932a4ece
CVE-2025-13141,0,0,5648494fcf717d26fe2c289a03389490f7df50f570a7cda79c4666c0be1e6863,2025-11-21T15:13:13.800000
CVE-2025-13142,0,0,1c061f675f3b00797e8dd80ce670ab169ac0b3c46247f7c520a2600c42b76d79,2025-11-21T15:13:13.800000
CVE-2025-13143,0,0,8717e4a72df71f551fbe6dcc594f4351d5d125333a55214950695c57ccccb6cd,2025-12-01T15:39:33.110000
CVE-2025-13144,1,1,bbb1d904aa1bae43b84dd7b2e9a0875179941670d5efef7d22e81fe0c0ab7601,2025-12-05T06:16:07.400000
CVE-2025-13145,0,0,d5337a3ccd406b467733ab60443d8c85eaebb1a403bd2a57d231c09a1386c024,2025-11-19T19:14:59.327000
CVE-2025-13147,0,0,d4de50150564f6ed41c5fd6f635bc4cc7060e91a42400c1579c2d5826aa8cb73,2025-11-24T14:58:20.290000
CVE-2025-13149,0,0,2e3f420ceeed127dfdb2d3c9daa12059efbe2dd7d649d2fc6d24d24c924fa124,2025-11-21T15:13:13.800000
@@ -288463,6 +288481,8 @@ CVE-2025-13306,0,0,cadc4f1066d4003e55c2127f7ce0caf22a3e0614d7fbc8a5a03a66eb20c4b
CVE-2025-1331,0,0,ac1f8f259ae4049d984db2b1f82b3fe42914e4f2655a2a9597856cd03f33bc72,2025-06-05T14:29:03.180000
CVE-2025-13310,0,0,65a222268c4e4a4c8f4726bea30425eea064a4fd28d4f8cf26987c7d9156d640,2025-11-17T15:15:49.020000
CVE-2025-13311,0,0,9a5976f398da3cabb69223c3f2701caa9facaa03b617561ec543872ab1a0c282,2025-11-25T22:16:16.690000
CVE-2025-13312,1,1,b1688fe14071cdfb30bc6fcf4780190fd437588aecdeea493851c816a2a71ba9,2025-12-05T05:16:57.560000
CVE-2025-13313,1,1,d0c96cf5abd1d0caae981442078a1d7d3befbd5a116a827101f90e87415767e8,2025-12-05T05:16:57.780000
CVE-2025-13315,0,0,aff7c981e57f618ee1c838858f2e682a4d50f3fe71b69ae8fe0a77f99585434f,2025-12-02T16:42:19.270000
CVE-2025-13316,0,0,61da9d02f82993e70c94cb0e055a49b67c4785739c4895683257f62adafb6f8c,2025-11-25T19:36:13.140000
CVE-2025-13317,0,0,14d49acf774003ab662f05a3fc0eabe63bcc3427596b31a7a884f67a47d9e723,2025-11-25T22:16:42.557000
@@ -288488,6 +288508,8 @@ CVE-2025-13354,0,0,7c5f4411a60d1b1a7fbbce74f77b652d0a1b5f0bf7fc0d4e38fcaac21f027
CVE-2025-13357,0,0,ac9e3505b482c6441452693fcf9ee1cb16984baf418348bfe0eac270f229e3f2,2025-11-25T22:16:42.557000
CVE-2025-13359,0,0,004c6a607ad7d7d35b05a97cc1933e8ca4932bdb5d298996bf4154bed61ee353,2025-12-04T17:15:08.283000
CVE-2025-1336,0,0,5bb81efefa47b6b10a748758c689250ae0a85244c2bc3fa4b57d2310008c62b3,2025-02-28T19:55:19.603000
CVE-2025-13360,1,1,eb7e3badbd8fab5a24c75d1116fa2d43d9e47e2697fc3b25d9e640aa73d8ccf2,2025-12-05T06:16:07.563000
CVE-2025-13362,1,1,882eb994d8d008181c7fc7d2d427bbbdeaae53be304c9d9245ab6f7b81dda1f4,2025-12-05T05:16:58.010000
CVE-2025-1337,0,0,d50b5c2b5aabd36826ddbc10fd1c9ad645d3a485550527f95248dd387d871087,2025-04-09T13:15:41.100000
CVE-2025-13370,0,0,3a24769dc37fab98686f74334a18a47d736aea55d5a3843eac18a4fbd216bb4e,2025-11-25T22:16:16.690000
CVE-2025-13372,0,0,032d4a8b80e24f46c1ea48820098430b0011b016d5f61f5af7ca03c0267b7281,2025-12-02T17:16:29.163000
@@ -288555,6 +288577,7 @@ CVE-2025-13486,0,0,7f7fd9644663944536dcf77b2afa2f4b7b608e95b062f9a6ddc878e008a5c
CVE-2025-13488,0,0,f41103d833cc27defbe251451d89a523a2e7de1dd9a85d3d9008fb345b0751a0,2025-12-04T19:16:01.937000
CVE-2025-1349,0,0,e7daf32839b3f238c77f10cfc713f5e67c2ab59db0fe96ec93216ff70824f1f2,2025-07-25T17:58:03.213000
CVE-2025-13492,0,0,e5400dcd8e996bb31bff37ac5db4f6467c3c782aa20784e3725370b18e49e170,2025-12-04T17:15:08.283000
CVE-2025-13494,1,1,7cdcce517a230f54d459569b3a1f1f33a508dc4c477b15e489e7039ed9b0d1a4,2025-12-05T05:16:58.213000
CVE-2025-13495,0,0,244758692e860b54d38bf8d0a8fd2950dba383525df9e00f7a06b741c2f94d76,2025-12-04T17:15:08.283000
CVE-2025-13499,0,0,e69798d12cd8f26c4317e7476236ca1bbaa792f3a5f6484875e6a87aa6347cac,2025-12-03T19:36:21.253000
CVE-2025-13502,0,0,c482f81b377bcb9889f90a55050fc1a585a83edcbd2acff73ba92dd5821802b6,2025-11-25T22:16:16.690000
@@ -288563,12 +288586,14 @@ CVE-2025-13507,0,0,99f5ab2bb069a8525692a651cce3b73217a6a963440aad59b7612c440e2db
CVE-2025-1351,0,0,a6ea9f201c0676b9dbdab8a1dd139acec4a7e76bd59056f751f2c0d7ee3033b4,2025-08-14T00:57:24.720000
CVE-2025-13510,0,0,e2972ffab1700a21e74452381e3ee465c323feb71a354d76549520d833d584b1,2025-12-04T17:15:25.860000
CVE-2025-13511,0,0,b9f745da195477f38fddc989b5c005c59dacb12b726f4fdb397dcff4656ce475,2025-11-24T17:16:03.797000
CVE-2025-13512,1,1,12622f6d6055c8b4cab64edb547554a8ab4a558a7ef4dc55232bc61b14fc8df7,2025-12-05T06:16:07.727000
CVE-2025-13513,0,0,851e8e62d15e4765ca232f4c868e8c32fd37107850737e542986e85a2e52a8d0,2025-12-04T17:15:08.283000
CVE-2025-13516,0,0,5e03b807bc08e53fbcc648b97b68791c7b58abf856ec0d7d8ee110a41e9afc2e,2025-12-02T17:16:29.163000
CVE-2025-1352,0,0,468e4165c1fbc1f238500ed696137c4d06d5e55cbc9edf2b4912378bc89bb127,2025-11-03T20:34:23.890000
CVE-2025-13524,0,0,3b415858b7da69972d1b9f12ff03594172ed4ea72c8a1da037de613b3960c2f4,2025-11-25T22:16:42.557000
CVE-2025-13525,0,0,06ace4f74e8941ff773525f67a2f1459edfa989568c17ecb71c433afaca06e61,2025-12-01T15:39:33.110000
CVE-2025-13526,0,0,485db00b1d350a72e89fa7a3f55191ca3e9bf0282253b423ee5139249236e953,2025-11-25T22:16:42.557000
CVE-2025-13528,1,1,3327ab093af74b546a4d80c005f8c530dd030dfa9f4e6072421f4decccd21699,2025-12-05T06:16:07.900000
CVE-2025-1353,0,0,592b3b5fa0e656024e4607b02db6b1922da161f4886bf146bf25aacc925677e1,2025-02-26T08:13:23.443000
CVE-2025-13534,0,0,fb218324175fdf7b5096d507750944705940978090046c4259e4bcab5c86d019,2025-12-04T18:04:48.967000
CVE-2025-13536,0,0,568fe8d6ee5e76aaf42a1bb2fec1f141ee19f8fa0b3691080695b6f57f893bea,2025-12-01T15:39:33.110000
@@ -288641,6 +288666,10 @@ CVE-2025-1361,0,0,b6cce323b61fdcae10a836aff7fcde3aa3d158a96373b5f93a57bf88051a67
CVE-2025-13611,0,0,2fa9b199db45d6cfaabb38138b535012f58b9f4d61a54fe08c882d352a8525ff,2025-12-02T20:44:11.613000
CVE-2025-13615,0,0,0a8599f0389c492ab2d599611f1c91f28a1db499a77e7dea89caa7609ecff648,2025-12-01T15:39:33.110000
CVE-2025-1362,0,0,743c47688cdbf65506147cdcdf88122726acb67195a4454a45901cad23281f41,2025-05-21T16:59:38.977000
CVE-2025-13621,1,1,6a0ec989d6dd730c063bb865b0c47e894a1d9763993fdf785de09daf77f8e995,2025-12-05T06:16:08.063000
CVE-2025-13622,1,1,6492d25895bdf74b84c6dffd0cef8cae6e5ec35cc0ce8d2723e10caefbe0032c,2025-12-05T06:16:08.233000
CVE-2025-13623,1,1,e98009407bd63358bc80e0b90c50f30374572acade5d61eccc6ae013d2ad23eb,2025-12-05T06:16:08.400000
CVE-2025-13625,1,1,be949dc9eca33b1e6e9f55db67d38436757570faeec36ebd29ce5160a95060eb,2025-12-05T06:16:08.563000
CVE-2025-1363,0,0,5ef0e630eb65fc9fde4bf7834b0bc1238fb20723c9b2f8f7080acc6a649d8f4e,2025-05-21T17:02:28.650000
CVE-2025-13630,0,0,f87480141f58ed850609fec318c98802a12b9112ef0e8e5a4406dc22c2dae369,2025-12-04T19:59:59.043000
CVE-2025-13631,0,0,ce30c7bb20112771d1a5ea0091f18ab8659ba892c94b85ac552880dc810cfcf5,2025-12-04T19:59:37.260000
@@ -288745,6 +288774,7 @@ CVE-2025-13837,0,0,ae528259d83bec41c9b820e3726c22184a8c764ac6d876b01f4b46086e725
CVE-2025-1384,0,0,59bca0f320dfac1819c25ed5547684a8bde0292ecdbc52eb5c51c8189c4ff6a8,2025-07-15T13:14:24.053000
CVE-2025-1385,0,0,cd0488ff01f383d9bed7e9dfcd438a68752b6f1d05d46ab0fe46ec06da7cead8,2025-03-20T08:15:11.723000
CVE-2025-1386,0,0,1e2bc83eeb339828b23f6854fed3e26712eaf84d02859537da20d28063a18e14,2025-04-11T16:15:19.490000
CVE-2025-13860,1,1,a6463fe22ff99ef532f2f10eeb208e0202c50b97245ab5978a991fb34acf1f77,2025-12-05T06:16:08.730000
CVE-2025-1387,0,0,5564d87fa88af058bd0202692e11ba9d91b174326d18038dd52c07bb732ab611,2025-11-17T13:50:14.113000
CVE-2025-13870,0,0,46551502bb08551f4391d26f290a615459428696325bf2852169a0eb7bc10fdc,2025-12-03T20:57:20.907000
CVE-2025-13871,0,0,3a7482f27ff7455c63d3f3681133d194bb135c55ff36f2446d9013c9aee15481,2025-12-04T17:54:28.767000
@@ -295792,7 +295822,7 @@ CVE-2025-27374,0,0,fc9fe1cbdd55b53433ffc2ccc9cd1c27b55aa6a7906d09e946207bd29a0c8
CVE-2025-2738,0,0,741400563bd4aa4fd7ad392a7491b41a388e6166253e6162b8e83ac30b8d81f7,2025-05-06T19:35:42.687000
CVE-2025-27387,0,0,a01b89284d712a7dbceb4b571a0e3121fe5358fd3425f9487836a306f69e5dee,2025-06-23T20:16:21.633000
CVE-2025-27388,0,0,821f4ec6a8ed0178a87822adeb3fbefbd42866ccdf4268e9f6d73b0e51e90175,2025-08-14T13:11:53.633000
CVE-2025-27389,1,1,c1602fa97a21325bc4043c81862e5de3565e33b152712864c221196a0c4cda01,2025-12-05T04:16:00.333000
CVE-2025-27389,0,0,c1602fa97a21325bc4043c81862e5de3565e33b152712864c221196a0c4cda01,2025-12-05T04:16:00.333000
CVE-2025-2739,0,0,de4ebff471a055f3e302ebbe8aa8af1520a646d6d985c1b37dbf5257ff28eac8,2025-05-06T19:34:57.733000
CVE-2025-27391,0,0,c2d3a0eb7bbba5cecdf0cc2ebad11bf90824e19a8bb6a80d343c3ba2eef81408,2025-07-14T12:12:22.513000
CVE-2025-27392,0,0,f80e5ff10d5313ff266ff51cd7528188eba9fd791938145e5c95d4e3d4273b08,2025-08-25T01:28:47.660000
@@ -299884,6 +299914,10 @@ CVE-2025-3289,0,0,0fb40abf2a8239f378f4b0e755b63a33cd85f8c6b7f0cbb0fb9c7c88472634
CVE-2025-32890,0,0,f2c41c451f0f9806b1ea692a8d179705ea340cd405232ede792930108ac7f581,2025-06-20T16:28:33.357000
CVE-2025-32896,0,0,87730d1e109c37783e2d275153cb9b2689aced8423374d3a79b510b3130c20db,2025-07-08T13:05:21.833000
CVE-2025-32897,0,0,3ccaa24fd685a0aa7a9d5b6c75cfdbe9763664838d3924a0e8ff4e0956839546,2025-07-08T14:44:38.643000
CVE-2025-32898,1,1,29f300b0ed3dc69d7af926d43d68ccf5d4796024bc40ac7f87ab6d1e5241f801,2025-12-05T05:16:58.480000
CVE-2025-32899,1,1,7f66c6a19c1b385be567466b178eff0eaeb03e92c163c1d2f2280865c88f4634,2025-12-05T05:16:59.407000
CVE-2025-32900,1,1,7799d25bbd93dad3aaa03c8e54111333362c60ddc785ff346eaf77fe204e8b57,2025-12-05T06:16:08.900000
CVE-2025-32901,1,1,1cc747d3f27a3cbee6fae0c95f99d40635974d39e1d8e136ec15174e2bf74bf5,2025-12-05T06:16:09.077000
CVE-2025-32906,0,0,390a627d38c5fa1407fa00190f8498c5020935876b584e6aa59207ecea9c65dd,2025-11-18T09:15:50.930000
CVE-2025-32907,0,0,213f7e42abba53cbe091599b6e08ac02e165cca9f4b70fa3a4b5acdea9942c00,2025-05-29T07:15:24.333000
CVE-2025-32908,0,0,d04d5cbb3961125d5a394946a9211c5953b759f1c35584196afe4caf2db9d0fd,2025-05-13T21:16:14.597000
@@ -317168,6 +317202,7 @@ CVE-2025-66265,0,0,39698fc2224a60d6bc99bd7fcfc2433662dc6b9de14f3a09a60d8b9b6d8ce
CVE-2025-66266,0,0,818df0570c8221432a22b84fb0bce3e65617a30674574eb9f2b9ccdc54d26c16,2025-12-01T15:39:53.100000
CVE-2025-66269,0,0,e47d4304690fbcf6afe3fce8d5f9f2f1c5abfc4ba777bf6d1d0fb5446f3bb00d,2025-12-01T15:39:53.100000
CVE-2025-6627,0,0,ac42708d70135c1e2f3d3c95b24cee76ad7c50967f5771ee2df2dd6c238666eb,2025-07-16T19:35:19.783000
CVE-2025-66270,1,1,56c3e5589c1a3fde916594e8f43ba3022d5fe3da70a6d10d3699ade7b5c1e19d,2025-12-05T06:16:09.253000
CVE-2025-66287,0,0,0303876e26f72fe41bc474a7a021cc8ef898ad803925603ba3391865000eb4b6,2025-12-04T17:15:56.647000
CVE-2025-66289,0,0,d3373302bd89df993a373bfafd89eaad77d255e49c31ba57c82e25d8dff22260,2025-12-03T16:47:32.060000
CVE-2025-66290,0,0,e0bcfc25c113347e669bd59b83840bbd7c3e015f662efa52f2a79ce287a7fab0,2025-12-03T16:46:12.117000
@@ -317264,16 +317299,16 @@ CVE-2025-6651,0,0,fa78872148cd78901258d69320ec9d98d44fb7e7502cae42450eeb8aa4623c
CVE-2025-66516,0,0,d364bb226b2e564080a0395fdcb10700f8c4c305753b16881e591ea25b2a4301,2025-12-04T17:15:57.120000
CVE-2025-6652,0,0,0b64f4916d90bbb83e5ab39cb0a4291c3c1bd3b96c5006bd2f0c2a3e44f504c3,2025-07-01T19:28:24.283000
CVE-2025-6653,0,0,770c62aa9a2304db20bf79914bf344eb0b9a3babf6c9cf08e1edcd5919b7255e,2025-07-01T19:28:32.937000
CVE-2025-66536,1,1,48171c6aa8762b5c50c8594707be33173db5d9e1e0457060a4e1f961eb34a0b7,2025-12-05T04:16:00.537000
CVE-2025-66537,1,1,a395cecda25e28d772e0717c8fc95380f6f828a7aee1a225b9282dee80f55d0f,2025-12-05T04:16:00.640000
CVE-2025-66538,1,1,b2f36947f93841fb22e4c6ec67b2417fe3430301728f745b23838b0dc23de463,2025-12-05T04:16:00.717000
CVE-2025-66539,1,1,9e4ff95b00fb75666c239116f985e9277194a1ec441d4e6de60ee6c5b7788163,2025-12-05T04:16:00.787000
CVE-2025-66536,0,0,48171c6aa8762b5c50c8594707be33173db5d9e1e0457060a4e1f961eb34a0b7,2025-12-05T04:16:00.537000
CVE-2025-66537,0,0,a395cecda25e28d772e0717c8fc95380f6f828a7aee1a225b9282dee80f55d0f,2025-12-05T04:16:00.640000
CVE-2025-66538,0,0,b2f36947f93841fb22e4c6ec67b2417fe3430301728f745b23838b0dc23de463,2025-12-05T04:16:00.717000
CVE-2025-66539,0,0,9e4ff95b00fb75666c239116f985e9277194a1ec441d4e6de60ee6c5b7788163,2025-12-05T04:16:00.787000
CVE-2025-6654,0,0,b4429ce2f21a922937e11f53d272f002d6937c2468bb12ed546a6be36f2838ed,2025-07-01T19:30:42.350000
CVE-2025-66540,1,1,97efad665f1c9977f1cfe8caee13455ea39e058017999c1ff8f7a35ed7740208,2025-12-05T04:16:00.857000
CVE-2025-66541,1,1,d22f9668edb586bfb7833be5e6ccd664e82ce45afe9d6130b568b51f83a25332,2025-12-05T04:16:00.927000
CVE-2025-66542,1,1,f6b8d4f5472231bb04914605aba36acdb53a0fdf81b718e0611dd83128e4d48d,2025-12-05T04:16:00.993000
CVE-2025-66543,1,1,9849c7535622f0a2e3178778c45d6f5ac0e841876e131aa1a78d2864280e2b1a,2025-12-05T04:16:01.070000
CVE-2025-66544,1,1,8cfc970d457819628e29aa16409b1e4b5543924c96b07e7aeb77d2bcd85d592b,2025-12-05T04:16:01.137000
CVE-2025-66540,0,0,97efad665f1c9977f1cfe8caee13455ea39e058017999c1ff8f7a35ed7740208,2025-12-05T04:16:00.857000
CVE-2025-66541,0,0,d22f9668edb586bfb7833be5e6ccd664e82ce45afe9d6130b568b51f83a25332,2025-12-05T04:16:00.927000
CVE-2025-66542,0,0,f6b8d4f5472231bb04914605aba36acdb53a0fdf81b718e0611dd83128e4d48d,2025-12-05T04:16:00.993000
CVE-2025-66543,0,0,9849c7535622f0a2e3178778c45d6f5ac0e841876e131aa1a78d2864280e2b1a,2025-12-05T04:16:01.070000
CVE-2025-66544,0,0,8cfc970d457819628e29aa16409b1e4b5543924c96b07e7aeb77d2bcd85d592b,2025-12-05T04:16:01.137000
CVE-2025-6655,0,0,933ab9292568937fb0e5b7a8d09d27e6b2226aeed92822029db58f7bd992c24e,2025-07-01T19:30:51.190000
CVE-2025-66555,0,0,ae6ca9f14da9a6333fe8d93c6e23dea08317cc4578511108317dff1e738b0eb4,2025-12-04T21:16:09.573000
CVE-2025-66559,0,0,7d3e9b1a6f141d8469712c3b72ec91d21c02cc749ca5ee058133a546c219fdf8,2025-12-04T23:15:46.940000
Can't render this file because it is too large.