admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-28 23:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-10-27T17:00:12.591636+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-10-27 17:03:58 +00:00
1 parent f5153ce7b5
commit f739584828
107 files changed
+5803 -846
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2021/CVE-2021-225xx/CVE-2021-22502.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-22502",
"sourceIdentifier": "[email protected]",
"published": "2021-02-08T22:15:12.527",
"lastModified": "2025-10-22T00:17:23.723",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:58:45.167",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -194,7 +194,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22502",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2021/CVE-2021-225xx/CVE-2021-22506.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2021-22506",
"sourceIdentifier": "[email protected]",
"published": "2021-03-26T14:15:11.967",
"lastModified": "2025-10-22T00:17:23.890",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:58:39.307",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -135,7 +135,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22506",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2023/CVE-2023-377xx/CVE-2023-37749.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2023-37749",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:34.270",
"lastModified": "2025-10-27T16:15:34.270",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization."
}
],
"metrics": {},
"references": [
{
"url": "https://app.hubspot.com/api/external-options/v2/pagedFetch/0-1/OWNER?useIndexOffset=true&portalId=22152277&clienttimeout=14000&hs_static_app=settings-ui-users&hs_static_app_version=1.43001&limit=200&q=&offset=0&includeDeleted=true",
"source": "[email protected]"
},
{
"url": "https://gist.github.com/0xDBJ/28072f7eea42571d5b4ebaabdcb21cce",
"source": "[email protected]"
},
{
"url": "https://owasp.org/Top10/A01_2021-Broken_Access_Control/",
"source": "[email protected]"
}
]
}
CVE-2023/CVE-2023-494xx/CVE-2023-49440.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2023-49440",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:35.147",
"lastModified": "2025-10-27T16:15:35.147",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "AhnLab EPP 1.0.15 is vulnerable to SQL Injection via the \"preview parameter.\""
}
],
"metrics": {},
"references": [
{
"url": "http://ahnlab.com",
"source": "[email protected]"
},
{
"url": "https://github.com/KernelCipher/CVE-2023-49440-POC",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-89xx/CVE-2024-8956.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8956",
"sourceIdentifier": "[email protected]",
"published": "2024-09-17T20:15:07.287",
"lastModified": "2025-10-21T23:16:43.503",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:50.473",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -160,7 +160,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8956",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
},
{
"url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai",
CVE-2024/CVE-2024-89xx/CVE-2024-8957.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8957",
"sourceIdentifier": "[email protected]",
"published": "2024-09-17T21:15:13.423",
"lastModified": "2025-10-21T23:16:43.653",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:44.983",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -160,7 +160,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8957",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
},
{
"url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai",
CVE-2025/CVE-2025-100xx/CVE-2025-10023.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-10023",
"sourceIdentifier": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
"published": "2025-10-27T16:15:35.287",
"lastModified": "2025-10-27T16:15:35.287",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Centreon Infra Monitoring (Services Meta-services modules) \n\nallows Stored XSS by users with elevated privileges.This issue affects Infra Monitoring: from 24.10.0 before 24.10.9, from 24.04.0 before 24.04.16, from 23.10.0 before 23.10.26."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.7,
"impactScore": 4.0
}
]
},
"weaknesses": [
{
"source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "https://github.com/centreon/centreon/releases",
"source": "bd4443e6-1eef-43f3-9886-25fc9ceeaae7"
}
]
}
CVE-2025/CVE-2025-111xx/CVE-2025-11154.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-11154",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T06:15:37.020",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:35.940",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "The IDonate WordPress plugin before 2.1.13 does not have authorisation and CSRF when deleting users via an action handler, allowing unauthenticated attackers to delete arbitrary users."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"references": [
{
"url": "https://wpscan.com/vulnerability/fdb9e076-4c65-4fd1-b1f6-23c23a11bdb7/",
CVE-2025/CVE-2025-122xx/CVE-2025-12212.json
+8 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12212",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T04:15:50.877",
"lastModified": "2025-10-27T13:19:49.063",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-27T16:15:37.040",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
},
{
"url": "https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setNetworkService.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12213.json
+8 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12213",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T04:15:51.143",
"lastModified": "2025-10-27T13:19:49.063",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-27T16:15:37.177",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
},
{
"url": "https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/O3v2.0/setVlanConfig.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12230.json
+8 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12230",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T06:15:38.790",
"lastModified": "2025-10-27T13:19:49.063",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-27T16:15:37.320",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -136,6 +136,10 @@
{
"url": "https://vuldb.com/?submit.673707",
"source": "[email protected]"
},
{
"url": "https://github.com/QIU-DIE/CVE/issues/11",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12231.json
+8 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-12231",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T06:15:39.013",
"lastModified": "2025-10-27T13:19:49.063",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-10-27T16:15:37.477",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
{
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -136,6 +136,10 @@
{
"url": "https://vuldb.com/?submit.673708",
"source": "[email protected]"
},
{
"url": "https://github.com/QIU-DIE/CVE/issues/12",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12232.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-12232",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T07:15:37.900",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:35.523",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
},
{
"url": "https://github.com/QIU-DIE/CVE/issues/13",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12233.json
+7 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-12233",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T07:15:38.153",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:36.517",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"descriptions": [
@@ -59,7 +59,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -107,7 +107,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -140,6 +140,10 @@
{
"url": "https://www.tenda.com.cn/",
"source": "[email protected]"
},
{
"url": "https://github.com/QIU-DIE/CVE/issues/14",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12287.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-12287",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:36.923",
"lastModified": "2025-10-27T15:15:36.923",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argument first_name/last_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.4,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-12287.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329955",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329955",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.674274",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12288.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-12288",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:37.117",
"lastModified": "2025-10-27T15:15:37.117",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
"baseScore": 4.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "SINGLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-285"
},
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-12288.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329956",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329956",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.674883",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12289.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12289",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:37.293",
"lastModified": "2025-10-27T16:15:37.833",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activity_state/1/category_id/1001. Executing manipulation of the argument category_id can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/1276486/CVE/issues/19",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329957",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329957",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675435",
"source": "[email protected]"
},
{
"url": "https://github.com/1276486/CVE/issues/19",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12290.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12290",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:37.470",
"lastModified": "2025-10-27T16:15:37.960",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/1276486/CVE/issues/18",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329958",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329958",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675436",
"source": "[email protected]"
},
{
"url": "https://github.com/1276486/CVE/issues/18",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12291.json
+141
View File
@@ -0,0 +1,141 @@
{
"id": "CVE-2025-12291",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:38.080",
"lastModified": "2025-10-27T16:15:38.080",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.4,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-284"
},
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://github.com/Lianhaorui/Report/blob/main/FileUpload-1.docx",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329959",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329959",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675846",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12292.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12292",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:38.257",
"lastModified": "2025-10-27T16:15:38.257",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/J-Fy2767/CVE/issues/2",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329960",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329960",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675847",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12293.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12293",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:38.437",
"lastModified": "2025-10-27T16:15:38.437",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/J-Fy2767/CVE/issues/4",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329961",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329961",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675852",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-122xx/CVE-2025-12294.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-12294",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:38.617",
"lastModified": "2025-10-27T16:15:38.617",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 1.2,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:P/I:P/A:P",
"baseScore": 5.8,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 6.4,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/J-Fy2767/CVE/issues/6",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.329962",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.329962",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.675856",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-123xx/CVE-2025-12351.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-12351",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:37.653",
"lastModified": "2025-10-27T15:15:37.653",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Honeywell S35 Series Cameras contains an authorization bypass Vulnerability through User controller key. An attacker could potentially exploit this vulnerability, leading to Privilege Escalation to admin privileged functionalities . Honeywell also recommends updating to the most recent version of this product, service or offering (S35 Pinhole/Kit Camera to version 2025.08.28, S35 AI Fisheye & Dual Sensor/Micro Dome/Full Color Eyeball & Bullet Camera to version 2025.08.22, S35 Thermal Camera to version 2025.08.26)."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-639"
},
{
"lang": "en",
"value": "CWE-668"
}
]
}
],
"references": [
{
"url": "https://www.honeywell.com/us/en/product-security",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-221xx/CVE-2025-22175.json
+14 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-22175",
"sourceIdentifier": "[email protected]",
"published": "2025-10-22T17:15:57.940",
"lastModified": "2025-10-24T14:22:24.297",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:38.860",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -89,6 +89,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-285"
}
]
}
],
"configurations": [
@@ -115,8 +125,8 @@
"url": "https://jira.atlassian.com/browse/JIRAALIGN-8644",
"source": "[email protected]",
"tags": [
"Vendor Advisory",
"Issue Tracking"
"Issue Tracking",
"Vendor Advisory"
]
}
]
CVE-2025/CVE-2025-267xx/CVE-2025-26780.json
+66 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-26780",
"sourceIdentifier": "[email protected]",
"published": "2025-07-07T16:15:22.683",
"lastModified": "2025-07-08T18:15:27.073",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:49.150",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,76 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16D9272E-1794-48FF-B6A4-8F48395BA38E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "932F5FB3-5527-44D7-9DD9-EF03963E3CA3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:modem_5400_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8102AC98-AE72-4CFD-A9FA-BD0D6E3AFB6C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:modem_5400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D751AA7E-090D-477A-890D-3E9C895FA42E"
}
]
}
]
}
],
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26780/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-268xx/CVE-2025-26862.json
+82
View File
@@ -0,0 +1,82 @@
{
"id": "CVE-2025-26862",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:37.800",
"lastModified": "2025-10-27T15:15:37.800",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:L/U:Amber",
"baseScore": 0.0,
"baseSeverity": "NONE",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "PRESENT",
"Automatable": "YES",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "LOW",
"providerUrgency": "AMBER"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-307"
}
]
}
],
"references": [
{
"url": "https://support.pingidentity.com/s/article/PingFederate-unexpected-template-rendering-in-redirectless-mode",
"source": "[email protected]"
},
{
"url": "https://www.pingidentity.com/en/resources/downloads/pingfederate.html",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-27xx/CVE-2025-2746.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2746",
"sourceIdentifier": "[email protected]",
"published": "2025-03-24T19:15:51.460",
"lastModified": "2025-10-21T23:16:55.197",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:18.917",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -98,7 +98,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2746",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-27xx/CVE-2025-2747.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2747",
"sourceIdentifier": "[email protected]",
"published": "2025-03-24T19:15:51.967",
"lastModified": "2025-10-21T23:16:55.400",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:11.100",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -98,7 +98,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2747",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-27xx/CVE-2025-2775.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2775",
"sourceIdentifier": "[email protected]",
"published": "2025-05-07T15:15:57.447",
"lastModified": "2025-10-21T23:16:55.533",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:58:55.380",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -119,7 +119,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2775",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-27xx/CVE-2025-2776.json
+6 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-2776",
"sourceIdentifier": "[email protected]",
"published": "2025-05-07T15:15:57.573",
"lastModified": "2025-10-21T23:16:55.670",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:58:51.230",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -111,7 +111,10 @@
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2776",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
]
}
]
}
CVE-2025/CVE-2025-283xx/CVE-2025-28380.json
+15 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-28380",
"sourceIdentifier": "[email protected]",
"published": "2025-06-13T14:15:20.030",
"lastModified": "2025-06-17T18:58:32.397",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T15:15:37.983",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS v6.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter."
"value": "A cross-site scripting (XSS) vulnerability in OpenC3 COSMOS before v6.0.2 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the URL parameter."
},
{
"lang": "es",
@@ -69,6 +69,18 @@
}
],
"references": [
{
"url": "https://github.com/OpenC3/cosmos/commit/12e3e12307afd3dbfc306f20d60400989db89883",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/pull/1816",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/releases/tag/v6.0.2",
"source": "[email protected]"
},
{
"url": "https://openc3.com/",
"source": "[email protected]",
CVE-2025/CVE-2025-283xx/CVE-2025-28381.json
+15 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-28381",
"sourceIdentifier": "[email protected]",
"published": "2025-06-13T14:15:20.177",
"lastModified": "2025-06-17T19:09:45.910",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:39.003",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A credential leak in OpenC3 COSMOS v6.0.0 allows attackers to access service credentials as environment variables stored in all containers."
"value": "A credential leak in OpenC3 COSMOS before v6.0.2 allows attackers to access service credentials as environment variables stored in all containers."
},
{
"lang": "es",
@@ -74,6 +74,18 @@
}
],
"references": [
{
"url": "https://github.com/OpenC3/cosmos/pull/1816",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/pull/1816/commits/cce64c213fd2e6a70e2ccbf3622949fe8f9dcaef",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/releases/tag/v6.0.2",
"source": "[email protected]"
},
{
"url": "https://openc3.com/",
"source": "[email protected]",
CVE-2025/CVE-2025-283xx/CVE-2025-28382.json
+15 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-28382",
"sourceIdentifier": "[email protected]",
"published": "2025-06-13T14:15:20.440",
"lastModified": "2025-06-17T19:29:21.273",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:39.180",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in the openc3-api/tables endpoint of OpenC3 COSMOS 6.0.0 allows attackers to execute a directory traversal."
"value": "An issue in the openc3-api/tables endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal."
},
{
"lang": "es",
@@ -74,6 +74,18 @@
}
],
"references": [
{
"url": "https://github.com/OpenC3/cosmos/commit/fc7e11310a7cdf9f1939886e1b29009db4d4b718",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/pull/1828",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/releases/tag/v6.1.0",
"source": "[email protected]"
},
{
"url": "https://openc3.com/",
"source": "[email protected]",
CVE-2025/CVE-2025-283xx/CVE-2025-28384.json
+15 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-28384",
"sourceIdentifier": "[email protected]",
"published": "2025-06-13T14:15:20.590",
"lastModified": "2025-06-17T19:31:52.810",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:39.347",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS 6.0.0 allows attackers to execute a directory traversal."
"value": "An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal."
},
{
"lang": "es",
@@ -74,6 +74,18 @@
}
],
"references": [
{
"url": "https://github.com/OpenC3/cosmos/pull/1828",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/pull/1828/commits/fc7e11310a7cdf9f1939886e1b29009db4d4b718",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/releases/tag/v6.1.0",
"source": "[email protected]"
},
{
"url": "https://openc3.com/",
"source": "[email protected]",
CVE-2025/CVE-2025-283xx/CVE-2025-28388.json
+15 -3
View File
@@ -2,13 +2,13 @@
"id": "CVE-2025-28388",
"sourceIdentifier": "[email protected]",
"published": "2025-06-13T14:15:20.883",
"lastModified": "2025-06-17T19:41:40.320",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:39.513",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "OpenC3 COSMOS v6.0.0 was discovered to contain hardcoded credentials for the Service Account."
"value": "OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account."
},
{
"lang": "es",
@@ -74,6 +74,18 @@
}
],
"references": [
{
"url": "https://github.com/OpenC3/cosmos/pull/1816",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/pull/1816/commits/195974a019f375f7c5a35f48e4151babb40649ac",
"source": "[email protected]"
},
{
"url": "https://github.com/OpenC3/cosmos/releases/tag/v6.0.2",
"source": "[email protected]"
},
{
"url": "https://openc3.com/",
"source": "[email protected]",
CVE-2025/CVE-2025-327xx/CVE-2025-32779.json
+6 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-32779",
"sourceIdentifier": "[email protected]",
"published": "2025-04-15T17:15:49.863",
"lastModified": "2025-04-15T18:39:27.967",
"lastModified": "2025-10-27T15:15:38.190",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -42,7 +42,7 @@
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
@@ -59,6 +59,10 @@
{
"url": "https://github.com/labsai/EDDI/security/advisories/GHSA-9v34-frgq-63mv",
"source": "[email protected]"
},
{
"url": "https://www.sonarsource.com/blog/code-security-for-conversational-ai-uncovering-a-zip-slip-in-eddi",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-341xx/CVE-2025-34133.json
+86
View File
@@ -0,0 +1,86 @@
{
"id": "CVE-2025-34133",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:39.683",
"lastModified": "2025-10-27T16:15:39.683",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Wimi Teamwork versions prior to 7.38.17 contains a cross-site request forgery (CSRF) vulnerability in its API. The API accepts any authenticated request that contains a JSON field named 'csrf_token' without validating the field\u2019s value; only the presence of the field is checked. An attacker can craft a cross-site request that causes a logged-in victim\u2019s browser to submit a JSON POST containing an arbitrary or empty 'csrf_token', and the API will execute the request with the victim\u2019s privileges. Successful exploitation can allow an attacker to perform privileged actions as the victim potentially resulting in account takeover, privilege escalation, or service disruption."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "ACTIVE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"references": [
{
"url": "https://www.vulncheck.com/advisories/wimi-teamwork-csrf",
"source": "[email protected]"
},
{
"url": "https://www.wimi-teamwork.com/",
"source": "[email protected]"
},
{
"url": "https://www.wimi-teamwork.com/product-news/release-7-38/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-342xx/CVE-2025-34292.json
+94
View File
@@ -0,0 +1,94 @@
{
"id": "CVE-2025-34292",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:38.317",
"lastModified": "2025-10-27T16:15:39.850",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Rox, the software running BeWelcome,\u00a0contains a PHP object injection vulnerability\u00a0resulting from deserialization of untrusted data. User-controlled input is passed to PHP's unserialize(): the POST parameter `formkit_memory_recovery` in \\\\RoxPostHandler::getCallbackAction and the 'memory cookie' read by \\\\RoxModelBase::getMemoryCookie (bwRemember). (1) If present, `formkit_memory_recovery` is processed and passed to unserialize(), and (2) restore-from-memory functionality calls unserialize() on the bwRemember cookie value. Gadget chains present in Rox and bundled libraries enable exploitation of object injection to write arbitrary files or achieve remote code execution. Successful exploitation can lead to full site compromise. This vulnerability was\u00a0remediated with commit c60bf04 (2025-06-16)."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"subAvailabilityImpact": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-502"
}
]
}
],
"references": [
{
"url": "https://gist.github.com/mcdruid/c0f7c42b28949c7d86cf77d0c674f398",
"source": "[email protected]"
},
{
"url": "https://github.com/BeWelcome/rox",
"source": "[email protected]"
},
{
"url": "https://github.com/BeWelcome/rox/commit/c60bf04",
"source": "[email protected]"
},
{
"url": "https://www.vulncheck.com/advisories/rox-php-object-injection-rce",
"source": "[email protected]"
},
{
"url": "https://gist.github.com/mcdruid/c0f7c42b28949c7d86cf77d0c674f398",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-361xx/CVE-2025-36121.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-36121",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:38.473",
"lastModified": "2025-10-27T15:15:38.473",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.3,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-80"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7248932",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-429xx/CVE-2025-42956.json
+97 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-42956",
"sourceIdentifier": "[email protected]",
"published": "2025-07-08T07:15:26.167",
"lastModified": "2025-07-08T16:18:14.207",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:51:37.780",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,107 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*",
"matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*",
"matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*",
"matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*",
"matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*",
"matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*",
"matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*",
"matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*",
"matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*",
"matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*",
"matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:755:*:*:*:*:*:*:*",
"matchCriteriaId": "0218695F-C4AD-46BF-B176-F10C644A9C2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:756:*:*:*:*:*:*:*",
"matchCriteriaId": "FC9E7C3E-1005-450A-9198-E014C1BAADBC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:757:*:*:*:*:*:*:*",
"matchCriteriaId": "3A177AB1-CC85-46EF-91DF-462096608C9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:758:*:*:*:*:*:*:*",
"matchCriteriaId": "F7591F81-708C-4285-9BB2-F2B4BDB9759B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:816:*:*:*:*:*:*:*",
"matchCriteriaId": "EF7825FC-2F0F-4096-BE41-67B4DCC4F7DE"
}
]
}
]
}
],
"references": [
{
"url": "https://me.sap.com/notes/3617131",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://url.sap/sapsecuritypatchday",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-429xx/CVE-2025-42968.json
+133 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-42968",
"sourceIdentifier": "[email protected]",
"published": "2025-07-08T01:15:23.950",
"lastModified": "2025-07-08T16:18:14.207",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:57:45.097",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -19,7 +19,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.1,
"impactScore": 1.4
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
@@ -51,14 +71,122 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:700:*:*:*:*:*:*:*",
"matchCriteriaId": "A7FED49E-6F9A-494A-9226-1059249960A0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:701:*:*:*:*:*:*:*",
"matchCriteriaId": "4836C36D-242F-4818-81B4-C170959D02F5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:702:*:*:*:*:*:*:*",
"matchCriteriaId": "6A503ABF-8655-40D7-96AD-2D7F19A673AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:710:*:*:*:*:*:*:*",
"matchCriteriaId": "BA008537-4D80-4126-A0D1-B209B9E56B46"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:731:*:*:*:*:*:*:*",
"matchCriteriaId": "8A9D5C5A-6963-438B-B0EA-2A621A34D8A9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:740:*:*:*:*:*:*:*",
"matchCriteriaId": "BFFA1591-0304-4FAE-A6A7-72D04D1F41A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:750:*:*:*:*:*:*:*",
"matchCriteriaId": "7940A9AF-308E-4CE5-BA19-7A3DCF49F644"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:751:*:*:*:*:*:*:*",
"matchCriteriaId": "C09428E4-45BB-414D-9F3D-AA5C73D2DD5E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:752:*:*:*:*:*:*:*",
"matchCriteriaId": "5ED0BA7D-939D-4B05-81A3-9F991C8C04F9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:753:*:*:*:*:*:*:*",
"matchCriteriaId": "0C2BF545-A7DC-4BB6-B894-D04CF163DD88"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:754:*:*:*:*:*:*:*",
"matchCriteriaId": "A75B2F18-60BE-41B5-82CB-520F794F2004"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:755:*:*:*:*:*:*:*",
"matchCriteriaId": "E31620E5-30FC-4545-A430-AAA77A66B51A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:756:*:*:*:*:*:*:*",
"matchCriteriaId": "9724E131-9893-4630-96A2-EB6032D98C58"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:757:*:*:*:*:*:*:*",
"matchCriteriaId": "8FEBCDDF-4828-45D1-A81D-FFB50261DBCA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:758:*:*:*:*:*:*:*",
"matchCriteriaId": "8FB60751-D53F-496C-AB5B-922561FB27D5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:816:*:*:*:*:*:*:*",
"matchCriteriaId": "4E4042A5-8859-44E6-9CA0-AA8A09D081A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:914:*:*:*:*:*:*:*",
"matchCriteriaId": "0018F635-E38F-47AB-9AC3-CA2BBE6D5FA8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:netweaver:916:*:*:*:*:*:*:*",
"matchCriteriaId": "52996086-B7EA-40CB-B6F3-983C11329FF2"
}
]
}
]
}
],
"references": [
{
"url": "https://me.sap.com/notes/3621037",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://url.sap/sapsecuritypatchday",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-429xx/CVE-2025-42986.json
+72 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-42986",
"sourceIdentifier": "[email protected]",
"published": "2025-07-08T01:15:25.730",
"lastModified": "2025-07-08T16:18:14.207",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:55:48.213",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,82 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:700:*:*:*:*:*:*:*",
"matchCriteriaId": "85616273-040E-49CB-8EB6-D2D4D7B603E5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:701:*:*:*:*:*:*:*",
"matchCriteriaId": "C5F2C3A9-DCC0-4FF1-8E68-9EA150E209F6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:702:*:*:*:*:*:*:*",
"matchCriteriaId": "6F774A45-2A9F-4873-A5DC-766D030C8CCD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:731:*:*:*:*:*:*:*",
"matchCriteriaId": "D3A0A2D6-9259-4A35-A236-F4BEE986C1FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:740:*:*:*:*:*:*:*",
"matchCriteriaId": "49C3A8E5-FA6A-4EF3-BF50-FD4E1576024F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:750:*:*:*:*:*:*:*",
"matchCriteriaId": "ABA8AB4E-3FE6-46A8-847E-660C5DF6CE71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:751:*:*:*:*:*:*:*",
"matchCriteriaId": "6DA4A6F0-C0F1-42CB-8BBD-7198064733EA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:752:*:*:*:*:*:*:*",
"matchCriteriaId": "8C121CC9-26F6-4103-8EB0-BAFF6B5B5FE8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:753:*:*:*:*:*:*:*",
"matchCriteriaId": "86086D00-10BF-4C55-8D87-82CCBE468153"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sap:sap_basis:754:*:*:*:*:*:*:*",
"matchCriteriaId": "2F25246A-D9E5-4F0D-B91A-478D4E5570DB"
}
]
}
]
}
],
"references": [
{
"url": "https://me.sap.com/notes/3626440",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Permissions Required"
]
},
{
"url": "https://url.sap/sapsecuritypatchday",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
}
]
}
CVE-2025/CVE-2025-472xx/CVE-2025-47202.json
+525 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-47202",
"sourceIdentifier": "[email protected]",
"published": "2025-07-07T16:15:23.943",
"lastModified": "2025-07-08T18:15:29.703",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:59:07.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,535 @@
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5F18F62E-2012-442E-BE60-6E76325D1824"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BCF6C91D-DECE-4630-85FE-C22EF2B9160A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*",
"matchCriteriaId": "87FE8214-E165-4874-BB5A-3C4298708039"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1928760C-4FC4-45B0-84FF-C1105CD1DD2A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BB410A6D-642B-49AE-8B1C-EADA953A84DA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "89B88BFE-3C82-498C-8EC1-5784836DB1A1"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9385885D-654A-496E-8029-7C6D9B077193"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "16D9272E-1794-48FF-B6A4-8F48395BA38E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "932F5FB3-5527-44D7-9DD9-EF03963E3CA3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1580_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F3594664-3CE6-4827-ABD4-B5719817F5D5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1580:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93C1F9E8-DA04-4466-AF66-01560A07BD98"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD1A7B09-9031-4E54-A24F-3237C054166B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DFC68046-2F08-40D1-B158-89D8D9263541"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C2635646-DD6A-4735-8E01-F45445584832"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AA0F8A58-71B7-4503-A03A-6FB4282D75BD"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D381478B-C638-4663-BD71-144BE4B02E46"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*",
"matchCriteriaId": "61E72146-72FE-4B54-AB79-3C665E7F016C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "64897B0D-EBF6-4BEB-BF54-ABCDBFAB45E0"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F3F328B4-0442-4748-B5EE-DD1CEE50D6CF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F1896BFF-D709-481B-AD4F-37D1A8B30C06"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "526A0088-BDA7-4373-8966-AEED69C1AE8A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_w1000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A9657C28-AA6B-4C1A-ACAA-E90645CF2A73"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BF79654-E5C6-4DFF-B33A-A78571CD300C"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "801E188F-C71B-4933-9099-151A4A1B1BC5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:exynos_w930:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8D8FC82D-57C5-4F00-BDF4-4261A32C4246"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:modem_5123_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "045EF1AD-09AE-4A33-9CB0-E30548BF5324"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:modem_5123:-:*:*:*:*:*:*:*",
"matchCriteriaId": "65A314B5-05AD-4F3D-8371-DFDF3778A743"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:modem_5300_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C9AC3C70-7D0F-41CA-A50C-C526ED74AA27"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:modem_5300:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2CBAD6D2-AE33-424A-9ED0-92681172B57E"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:samsung:modem_5400_firmware:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8102AC98-AE72-4CFD-A9FA-BD0D6E3AFB6C"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:samsung:modem_5400:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D751AA7E-090D-477A-890D-3E9C895FA42E"
}
]
}
]
}
],
"references": [
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-47202/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-487xx/CVE-2025-48709.json
+10 -10
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-48709",
"sourceIdentifier": "[email protected]",
"published": "2025-08-07T20:15:28.117",
"lastModified": "2025-09-16T19:15:35.670",
"lastModified": "2025-10-27T16:15:40.490",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -22,20 +22,20 @@
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
"baseScore": 3.8,
"baseSeverity": "LOW",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
"exploitabilityScore": 2.0,
"impactScore": 1.4
}
]
},
CVE-2025/CVE-2025-522xx/CVE-2025-52263.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52263",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T14:15:40.807",
"lastModified": "2025-10-27T14:15:40.807",
"lastModified": "2025-10-27T16:15:40.717",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue in the Web Configuration module of Startcharge Artemis AC Charger 7-22 kW v1.0.4 allows authenticated network-adjacent attackers to upload crafted firmware, leading to arbitrary code execution."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.1,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-494"
}
]
}
],
"references": [
{
"url": "https://github.com/HaToan/CVEs/blob/main/starcharge/README.md",
CVE-2025/CVE-2025-522xx/CVE-2025-52264.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52264",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:38.637",
"lastModified": "2025-10-27T15:15:38.637",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/HaToan/CVEs/blob/main/starcharge/README.md",
"source": "[email protected]"
},
{
"url": "https://www.starcharge.com/product/artemis/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-522xx/CVE-2025-52268.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-52268",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:38.750",
"lastModified": "2025-10-27T15:15:38.750",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a hardcoded AES key which allows attackers to forge or decrypt valid login tokens."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/HaToan/CVEs/blob/main/starcharge/README.md",
"source": "[email protected]"
},
{
"url": "https://www.starcharge.com/product/artemis/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-530xx/CVE-2025-53070.json
+13 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53070",
"sourceIdentifier": "[email protected]",
"published": "2025-10-21T20:20:48.267",
"lastModified": "2025-10-24T14:37:47.250",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:40.880",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H",
@@ -45,6 +45,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-267"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-537xx/CVE-2025-53782.json
+240 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53782",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:44.143",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:32:40.887",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.5,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
]
},
@@ -45,12 +65,228 @@
"value": "CWE-303"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*",
"versionEndExcluding": "15.02.2562.029",
"matchCriteriaId": "31BF0944-2B84-40BE-9F46-E7B90B82C8EA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*",
"matchCriteriaId": "8039FBA1-73D4-4FF2-B183-0DCC961CBFF7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*",
"matchCriteriaId": "56728785-188C-470A-9692-E6C7235109CA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*",
"matchCriteriaId": "63E362CB-CF75-4B7E-A4B1-D6D84AFCBB68"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*",
"matchCriteriaId": "9BE04790-85A2-4078-88CE-1787BC5172E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*",
"matchCriteriaId": "CCF101BE-27FD-4E2D-A694-C606BD3D1ED7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*",
"matchCriteriaId": "4DF5BDB5-205D-4B64-A49A-0152AFCF4A13"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*",
"matchCriteriaId": "55284CF7-0D04-4216-83FE-4B1F9CA94207"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*",
"matchCriteriaId": "CA2CE223-AA49-49E6-AC32-59270EFF55AD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*",
"matchCriteriaId": "4830D6A9-AF74-480C-8F69-8648CD619980"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*",
"matchCriteriaId": "079E1E3F-FF25-4B0D-AC98-191D6455A014"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
"matchCriteriaId": "29805EC7-6403-44B9-91EC-109C087E98EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
"matchCriteriaId": "28FCA0E8-7D27-4746-9731-91B834CA3E64"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*",
"matchCriteriaId": "996163E7-6F3F-4D3B-AEA4-62A7F7E1F54D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*",
"matchCriteriaId": "19C1EE0C-B8DD-4B91-BE4B-1C42D72FB718"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*",
"matchCriteriaId": "3BE427A4-B0C2-4064-8234-29426325C348"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*",
"matchCriteriaId": "449CE85B-E599-44D3-A7C1-5133F6A55E86"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_3:*:*:*:*:*:*",
"matchCriteriaId": "FE401B0A-DDE4-4A36-8E27-6DB14E094BE2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_4:*:*:*:*:*:*",
"matchCriteriaId": "450319C4-7C8F-43B7-B7F8-80DA4F1F2817"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*",
"matchCriteriaId": "23015889-48AF-40A5-862F-290E73A54E77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*",
"matchCriteriaId": "4FC34516-D7E7-4AD9-9B45-5474831548E0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*",
"matchCriteriaId": "5211792E-5292-41C0-B7E9-8AA63EC606EE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*",
"matchCriteriaId": "075E907F-AF2F-4C31-86C7-51972BE412A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*",
"matchCriteriaId": "69AF19DC-3D65-49A8-A85F-511085CDF27B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*",
"matchCriteriaId": "40D8A6DB-9225-4A3F-AD76-192F6CCCF002"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*",
"matchCriteriaId": "051DE6C4-7456-4C42-BC51-253208AADB4E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*",
"matchCriteriaId": "B4185347-EEDD-4239-9AB3-410E2EC89D2A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*",
"matchCriteriaId": "435343A4-BF10-461A-ABF2-D511A5FBDA75"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*",
"matchCriteriaId": "B23C8E3E-5243-4DA6-B9AA-F6053084B55E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*",
"matchCriteriaId": "583745C7-B802-4CBE-BD88-B5B9AF9B5371"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*",
"matchCriteriaId": "EE320413-D2C9-4B28-89BF-361B44A3F0FF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*",
"matchCriteriaId": "104F96DC-E280-4E0A-8586-B043B55888C2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*",
"matchCriteriaId": "73B3B3FE-7E85-4B86-A983-2C410FFEF4B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*",
"matchCriteriaId": "8A9FB275-7F17-48B2-B528-BE89309D2AF5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*",
"matchCriteriaId": "D4AB3C25-CEA8-4D66-AEE4-953C8B17911A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
"matchCriteriaId": "36CE5C6D-9A04-41F5-AE7C-265779833649"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
"matchCriteriaId": "44ECF39A-1DE1-4870-A494-06A53494338D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*",
"matchCriteriaId": "71CDF29B-116B-4DE2-AFD0-B62477FF0AEB"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53782",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55326.json
+78 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55326",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:45.573",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:05:08.477",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,85 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "B51B700D-B45F-4A8E-9F78-67A1282B3BEA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55326",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55328.json
+123 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55328",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:45.757",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:01:15.767",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
@@ -47,10 +67,109 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.10240.21161",
"matchCriteriaId": "9D5EB1D1-8C53-4188-90B9-8ED2FD2837BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "D8145D41-BFB2-47A6-B5E5-1A038A27C1C1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "E216CD5B-8885-4E17-8718-97E88A724A44"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "8EA6DE31-A17D-43D4-9154-49B5FA8FB5A6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "B5441F68-143C-4091-B709-14CAC586DF76"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55328",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55332.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55332",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:46.270",
"lastModified": "2025-10-27T14:51:08.060",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:24:44.127",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
CVE-2025/CVE-2025-553xx/CVE-2025-55333.json
+23 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55333",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:46.437",
"lastModified": "2025-10-27T14:46:59.433",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:24:51.543",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
CVE-2025/CVE-2025-553xx/CVE-2025-55336.json
+94 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55336",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:46.960",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:34:06.150",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -45,12 +45,103 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "B51B700D-B45F-4A8E-9F78-67A1282B3BEA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55336",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55337.json
+57 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55337",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:47.130",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:27:22.323",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,43 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55337",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55338.json
+122 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55338",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:47.293",
"lastModified": "2025-10-22T21:15:40.330",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:13:11.280",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 0.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6
}
]
},
@@ -47,10 +67,109 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.10240.21161",
"matchCriteriaId": "9D5EB1D1-8C53-4188-90B9-8ED2FD2837BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "A6CE9E60-F2F1-43F2-A535-5326E903D219"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "B51B700D-B45F-4A8E-9F78-67A1282B3BEA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55338",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-553xx/CVE-2025-55339.json
+60 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55339",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:47.450",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:06:19.883",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,67 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55339",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55683.json
+58 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55683",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:49.087",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:03:41.147",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -45,12 +45,67 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55683",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55684.json
+36 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55684",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:49.267",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:03:00.450",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,43 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55684",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55685.json
+72 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55685",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:49.433",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:02:20.597",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,79 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndIncluding": "10.0.26100.6899",
"matchCriteriaId": "CD6268EB-C42B-406F-B3FF-6E694F93BF41"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55685",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55686.json
+66 -3
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55686",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:49.600",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T16:01:54.780",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,10 +47,73 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55686",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-556xx/CVE-2025-55687.json
+143 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55687",
"sourceIdentifier": "[email protected]",
"published": "2025-10-14T17:15:49.770",
"lastModified": "2025-10-14T19:35:56.913",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-10-27T15:41:11.237",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -15,7 +15,7 @@
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.4,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.0,
"impactScore": 5.9
}
]
},
@@ -49,12 +69,131 @@
"value": "CWE-416"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-362"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.10240.21161",
"matchCriteriaId": "9D5EB1D1-8C53-4188-90B9-8ED2FD2837BD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "A6CE9E60-F2F1-43F2-A535-5326E903D219"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "B51B700D-B45F-4A8E-9F78-67A1282B3BEA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19044.6456",
"matchCriteriaId": "1485A427-10FF-4C39-9911-4C6F1820BE7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.19045.6456",
"matchCriteriaId": "26CAACAA-3FE8-4740-8CF2-6BF3D069C47F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22621.6060",
"matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.22631.6060",
"matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26200.6899",
"matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
"matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.14393.8519",
"matchCriteriaId": "7A8CC16F-8B44-4E7D-8503-25D753387345"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.17763.7919",
"matchCriteriaId": "20810926-AEC9-4C09-9C52-B4B8FADECF3A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.20348.4294",
"matchCriteriaId": "B1C1EA69-6BB8-4E59-8659-43581FDB48B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.25398.1913",
"matchCriteriaId": "370C12D6-90EF-44BE-8070-AA0080C12600"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
"versionEndExcluding": "10.0.26100.6899",
"matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-55687",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-557xx/CVE-2025-55757.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-55757",
"sourceIdentifier": "[email protected]",
"published": "2025-10-25T19:15:47.737",
"lastModified": "2025-10-27T13:20:15.637",
"lastModified": "2025-10-27T16:15:41.097",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "A unauthenticated reflected XSS vulnerability in VirtueMart 1.0.0-4.4.10 for Joomla was discovered."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-602xx/CVE-2025-60291.json
+41 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60291",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T14:15:41.133",
"lastModified": "2025-10-27T14:15:41.133",
"lastModified": "2025-10-27T16:15:41.270",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue was discovered in eTimeTrackLite Web thru 12.0 (20250704). There is a permission control flaw that allows unauthorized attackers to access specific routes and modify database connection configurations."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"references": [
{
"url": "https://github.com/M00nBack/CVE_Request/blob/main/eSSL%20Security/eTimeTrackLite.md",
@@ -20,6 +55,10 @@
{
"url": "https://www.esslsecurity.com/",
"source": "[email protected]"
},
{
"url": "https://github.com/M00nBack/CVE_Request/blob/main/eSSL%20Security/eTimeTrackLite.md",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-603xx/CVE-2025-60337.json
+11 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60337",
"sourceIdentifier": "[email protected]",
"published": "2025-10-22T18:15:34.733",
"lastModified": "2025-10-23T16:16:48.023",
"lastModified": "2025-10-27T16:15:41.420",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -65,6 +65,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-603xx/CVE-2025-60339.json
+12 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-60339",
"sourceIdentifier": "[email protected]",
"published": "2025-10-22T18:15:34.863",
"lastModified": "2025-10-24T14:19:58.727",
"vulnStatus": "Analyzed",
"lastModified": "2025-10-27T16:15:41.590",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -45,6 +45,16 @@
"value": "CWE-787"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-120"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-604xx/CVE-2025-60424.json
+68
View File
@@ -0,0 +1,68 @@
{
"id": "CVE-2025-60424",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:41.753",
"lastModified": "2025-10-27T16:15:41.753",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.1,
"impactScore": 5.5
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-287"
},
{
"lang": "en",
"value": "CWE-307"
}
]
}
],
"references": [
{
"url": "https://github.com/aakashtyal/2FA-Bypass-using-a-Brute-Force-Attack",
"source": "[email protected]"
},
{
"url": "https://github.com/aakashtyal/2FA-Bypass-using-a-Brute-Force-Attack-CVE-2025-60424",
"source": "[email protected]"
},
{
"url": "https://www.nagios.com/changelog/#fusion",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-604xx/CVE-2025-60425.json
+29
View File
@@ -0,0 +1,29 @@
{
"id": "CVE-2025-60425",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:42.040",
"lastModified": "2025-10-27T16:15:42.040",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/aakashtyal/Session-Persistence-After-Enabling-2FA",
"source": "[email protected]"
},
{
"url": "https://github.com/aakashtyal/Session-Persistence-After-Enabling-2FA-CVE-2025-60425",
"source": "[email protected]"
},
{
"url": "https://www.nagios.com/changelog/#fusion",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-607xx/CVE-2025-60790.json
+5 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-60790",
"sourceIdentifier": "[email protected]",
"published": "2025-10-21T18:15:36.630",
"lastModified": "2025-10-22T15:16:01.357",
"lastModified": "2025-10-27T16:15:42.230",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -48,6 +48,10 @@
}
],
"references": [
{
"url": "https://github.com/NomanProdhan/security-vulnerability-research/tree/master/CVE-2025-60790",
"source": "[email protected]"
},
{
"url": "https://github.com/processwire/processwire-issues/issues/2120",
"source": "[email protected]"
CVE-2025/CVE-2025-607xx/CVE-2025-60791.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-60791",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:42.510",
"lastModified": "2025-10-27T16:15:42.510",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound license keys in process memory after a failed activation attempt. The keys can be obtained by attaching a debugger or analyzing the process/memory dump and then they can be used to activate the software on the same machine without purchasing."
}
],
"metrics": {},
"references": [
{
"url": "https://packetstorm.news/files/id/210832",
"source": "[email protected]"
},
{
"url": "https://sourceforge.net/projects/easyworkaccounting/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-612xx/CVE-2025-61247.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2025-61247",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T16:15:42.717",
"lastModified": "2025-10-27T16:15:42.717",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/suyashksawant/CVEs/blob/main/CVE-2025-61247%3A%20SQL%20Injection%20in%20Online%20Shopping%20System",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-614xx/CVE-2025-61481.json
+45 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-61481",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T14:15:41.410",
"lastModified": "2025-10-27T14:15:41.410",
"lastModified": "2025-10-27T16:15:42.943",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,50 @@
"value": "An issue in MikroTik RouterOS v.7.14.2 and SwitchOS v.2.18 allows a remote attacker to execute arbitrary code via the HTTP- only WebFig management component"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 6.0
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
},
{
"lang": "en",
"value": "CWE-319"
},
{
"lang": "en",
"value": "CWE-1188"
}
]
}
],
"references": [
{
"url": "https://help.mikrotik.com/docs/spaces/ROS/pages/328131/WebFig",
CVE-2025/CVE-2025-614xx/CVE-2025-61482.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-61482",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T15:15:38.917",
"lastModified": "2025-10-27T15:15:38.917",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on Android allows local attackers with root access to bypass two factor authentication. By hooking into app crypto routines and intercepting decryption paths, attacker can recover plaintext secrets, enabling generation of valid one-time passwords, and bypassing authentication for enrolled accounts."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/ReversecLabs/android-keystore-audit/blob/master/frida-scripts/tracer-cipher.js",
"source": "[email protected]"
},
{
"url": "https://svarthatt.se/cve/cve-2025-61482-pulling-otp-secrets-from-privacyidea-authenticator/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-628xx/CVE-2025-62881.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62881",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:46.787",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:44.830",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Lister Lite for eBay: from n/a through <= 3.8.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-628xx/CVE-2025-62882.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62882",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:46.940",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:45.093",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-628xx/CVE-2025-62883.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62883",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:47.090",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:45.363",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Premmerce Premmerce User Roles premmerce-user-roles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premmerce User Roles: from n/a through <= 1.0.13."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-628xx/CVE-2025-62884.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62884",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:47.220",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:45.563",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coupon Affiliates: from n/a through <= 7.0.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-628xx/CVE-2025-62885.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62885",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:47.350",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:45.730",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RexTheme WP VR wpvr allows DOM-Based XSS.This issue affects WP VR: from n/a through <= 8.5.42."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-628xx/CVE-2025-62897.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62897",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:48.803",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:45.897",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Code Injection.This issue affects WP Recipe Maker: from n/a through <= 10.1.1."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62948.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62948",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:55.150",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.063",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Konstantin Pankratov Date counter date-counter allows Stored XSS.This issue affects Date counter: from n/a through <= 2.0.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62949.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62949",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:55.280",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.227",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev Activity Plus Reloaded for BuddyPress bp-activity-plus-reloaded allows Stored XSS.This issue affects Activity Plus Reloaded for BuddyPress: from n/a through <= 1.1.2."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62951.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62951",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:55.410",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.383",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icc0rz Interactive Content \u2013 H5P h5p allows Stored XSS.This issue affects Interactive Content \u2013 H5P: from n/a through <= 1.16.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62958.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62958",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.170",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.547",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Clifton Griffin Simple Content Templates for Blog Posts &amp; Pages simple-post-template allows Cross Site Request Forgery.This issue affects Simple Content Templates for Blog Posts &amp; Pages: from n/a through <= 2.2.61."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62962.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62962",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.430",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.700",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows Stored XSS.This issue affects CloudSearch: from n/a through <= 3.0.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62963.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62963",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.550",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:46.860",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Estatik Estatik estatik allows DOM-Based XSS.This issue affects Estatik: from n/a through <= 4.1.13."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62964.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62964",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.680",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:47.013",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MDTF: from n/a through <= 1.3.4."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62965.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62965",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.803",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:47.157",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in wpseek Admin Management Xtended admin-management-xtended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Admin Management Xtended : from n/a through <= 2.5.1."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.2,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62966.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62966",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:56.940",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.037",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Apiki GoCache gocache-cdn allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoCache: from n/a through <= 1.3.6."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62967.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62967",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.073",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T16:15:47.310",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designinvento DirectoryPress directorypress allows DOM-Based XSS.This issue affects DirectoryPress: from n/a through <= 3.6.25."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62968.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62968",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.213",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.200",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sayan Datta WP Last Modified Info wp-last-modified-info allows Stored XSS.This issue affects WP Last Modified Info: from n/a through <= 1.9.2."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62969.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62969",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.343",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.347",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Stored XSS.This issue affects NextMove Lite: from n/a through <= 2.21.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62970.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62970",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.480",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.493",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through <= 0.8.8."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62971.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62971",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.610",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.640",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrestaProject Attesa Extra attesa-extra allows Stored XSS.This issue affects Attesa Extra: from n/a through <= 1.4.5."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62972.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62972",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.743",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.797",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62973.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62973",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:57.890",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:39.943",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through <= 2.9.0."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62974.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62974",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:58.020",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:40.107",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CoSchedule Headline Analyzer headline-analyzer allows Stored XSS.This issue affects Headline Analyzer: from n/a through <= 1.3.7."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "CHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.3,
"impactScore": 3.7
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62975.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62975",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:58.150",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:40.257",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Request Forgery.This issue affects Raychat: from n/a through <= 2.2.1."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62976.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62976",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:58.283",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:40.407",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Joovii Sendle Shipping official-sendle-shipping-method allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sendle Shipping: from n/a through <= 6.02."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62977.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62977",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:58.413",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:40.570",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in \u6c83\u4e4b\u6d9b \u767e\u5ea6\u7ad9\u957fSEO\u5408\u96c6(\u652f\u6301\u767e\u5ea6/\u795e\u9a6c/Bing/\u5934\u6761\u63a8\u9001) baiduseo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects \u767e\u5ea6\u7ad9\u957fSEO\u5408\u96c6(\u652f\u6301\u767e\u5ea6/\u795e\u9a6c/Bing/\u5934\u6761\u63a8\u9001): from n/a through <= 2.1.3."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2025/CVE-2025-629xx/CVE-2025-62978.json
+26 -3
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-62978",
"sourceIdentifier": "[email protected]",
"published": "2025-10-27T02:15:58.543",
"lastModified": "2025-10-27T13:19:49.063",
"lastModified": "2025-10-27T15:15:40.717",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,11 +11,34 @@
"value": "Missing Authorization vulnerability in Kiotviet KiotViet Sync kiotvietsync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiotViet Sync: from n/a through <= 1.8.5."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
Loaded 100 of 107 files, more files were not shown because too many files have changed in this diff. Show more