diff --git a/CVE-2018/CVE-2018-168xx/CVE-2018-16840.json b/CVE-2018/CVE-2018-168xx/CVE-2018-16840.json index c8856b0aea9..de7074c59b4 100644 --- a/CVE-2018/CVE-2018-168xx/CVE-2018-16840.json +++ b/CVE-2018/CVE-2018-168xx/CVE-2018-16840.json @@ -2,8 +2,8 @@ "id": "CVE-2018-16840", "sourceIdentifier": "secalert@redhat.com", "published": "2018-10-31T18:29:00.307", - "lastModified": "2024-11-21T03:53:25.240", - "vulnStatus": "Modified", + "lastModified": "2025-04-17T13:05:04.557", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -16,6 +16,28 @@ } ], "metrics": { + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ], "cvssMetricV30": [ { "source": "secalert@redhat.com", @@ -36,26 +58,6 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 - }, - { - "source": "nvd@nist.gov", - "type": "Primary", - "cvssData": { - "version": "3.0", - "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", - "baseScore": 9.8, - "baseSeverity": "CRITICAL", - "attackVector": "NETWORK", - "attackComplexity": "LOW", - "privilegesRequired": "NONE", - "userInteraction": "NONE", - "scope": "UNCHANGED", - "confidentialityImpact": "HIGH", - "integrityImpact": "HIGH", - "availabilityImpact": "HIGH" - }, - "exploitabilityScore": 3.9, - "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -117,8 +119,8 @@ "vulnerable": true, "criteria": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.59.0", - "versionEndIncluding": "7.61.1", - "matchCriteriaId": "221B8B10-497F-42ED-B4E1-0E02B6F0C6A1" + "versionEndExcluding": "7.62.0", + "matchCriteriaId": "BA39901D-8EE5-4B6F-A0D3-43522D998003" } ] } diff --git a/CVE-2023/CVE-2023-229xx/CVE-2023-22955.json b/CVE-2023/CVE-2023-229xx/CVE-2023-22955.json index 1ed3c88fa84..8476077224c 100644 --- a/CVE-2023/CVE-2023-229xx/CVE-2023-22955.json +++ b/CVE-2023/CVE-2023-229xx/CVE-2023-22955.json @@ -2,8 +2,8 @@ "id": "CVE-2023-22955", "sourceIdentifier": "cve@mitre.org", "published": "2023-08-11T20:15:14.607", - "lastModified": "2024-11-21T07:45:43.033", - "vulnStatus": "Modified", + "lastModified": "2025-04-17T13:04:52.510", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -48,90 +48,6 @@ } ], "configurations": [ - { - "operator": "AND", - "nodes": [ - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": true, - "criteria": "cpe:2.3:o:audiocodes:c470hd_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "3.4.4.1000", - "matchCriteriaId": "0AD6593B-6088-4EBB-899E-42142251874E" - } - ] - }, - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": false, - "criteria": "cpe:2.3:h:audiocodes:c470hd:-:*:*:*:*:*:*:*", - "matchCriteriaId": "775A2A42-B3C2-454E-9677-22512DA3A17E" - } - ] - } - ] - }, - { - "operator": "AND", - "nodes": [ - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": true, - "criteria": "cpe:2.3:o:audiocodes:c455hd_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "3.4.4.1000", - "matchCriteriaId": "6B673481-C80C-4C76-968A-034303233827" - } - ] - }, - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": false, - "criteria": "cpe:2.3:h:audiocodes:c455hd:-:*:*:*:*:*:*:*", - "matchCriteriaId": "58D3A875-ADA0-4126-AE7F-3A27F6ECC6B9" - } - ] - } - ] - }, - { - "operator": "AND", - "nodes": [ - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": true, - "criteria": "cpe:2.3:o:audiocodes:c435hd_firmware:*:*:*:*:*:*:*:*", - "versionEndIncluding": "3.4.4.1000", - "matchCriteriaId": "6B52B0A3-52A7-4E10-B054-201A2E2D37CF" - } - ] - }, - { - "operator": "OR", - "negate": false, - "cpeMatch": [ - { - "vulnerable": false, - "criteria": "cpe:2.3:h:audiocodes:c435hd:-:*:*:*:*:*:*:*", - "matchCriteriaId": "054FD690-9C40-4ADA-910A-1E18D7F5E7E4" - } - ] - } - ] - }, { "operator": "AND", "nodes": [ diff --git a/CVE-2024/CVE-2024-242xx/CVE-2024-24292.json b/CVE-2024/CVE-2024-242xx/CVE-2024-24292.json index c698faa0bfc..5733f49bc70 100644 --- a/CVE-2024/CVE-2024-242xx/CVE-2024-24292.json +++ b/CVE-2024/CVE-2024-242xx/CVE-2024-24292.json @@ -2,8 +2,8 @@ "id": "CVE-2024-24292", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-28T21:15:15.833", - "lastModified": "2025-04-01T20:26:30.593", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-04-17T13:56:10.917", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:aliconnect:software_development_kit:0.0.6:*:*:*:*:*:*:*", + "matchCriteriaId": "900A7AEA-7CF4-40D7-BC62-7BCAF7B9E97A" + } + ] + } + ] + } + ], "references": [ { "url": "https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Mitigation" + ] }, { "url": "https://gist.github.com/tariqhawis/a8b2c936622c885558173c37df0a77d9", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Mitigation" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54804.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54804.json index 56089fa7da1..46dc6408e75 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54804.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54804.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54804", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:47.560", - "lastModified": "2025-04-02T15:15:57.603", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T13:05:10.540", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#804", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54805.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54805.json index 87be547217e..a02706c3a95 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54805.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54805.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54805", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:47.737", - "lastModified": "2025-04-02T14:15:45.140", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T13:04:30.327", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#805", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54806.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54806.json index e3a7fded46e..f07ed686562 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54806.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54806.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54806", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:47.923", - "lastModified": "2025-04-02T14:15:45.370", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T13:03:58.260", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#806", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54807.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54807.json index 919f1176e17..df7ad8db550 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54807.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54807.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54807", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:48.090", - "lastModified": "2025-04-02T14:15:45.597", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T13:00:32.320", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#807", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54808.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54808.json index a573b7eb4d8..7a80870f82d 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54808.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54808.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54808", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:48.310", - "lastModified": "2025-04-02T14:15:45.820", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T12:55:22.040", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#808", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-548xx/CVE-2024-54809.json b/CVE-2024/CVE-2024-548xx/CVE-2024-54809.json index 9a21254e306..4e22060ae3f 100644 --- a/CVE-2024/CVE-2024-548xx/CVE-2024-54809.json +++ b/CVE-2024/CVE-2024-548xx/CVE-2024-54809.json @@ -2,8 +2,8 @@ "id": "CVE-2024-54809", "sourceIdentifier": "cve@mitre.org", "published": "2025-03-31T21:15:48.527", - "lastModified": "2025-04-02T14:15:46.023", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T12:54:59.290", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cve@mitre.org", @@ -58,10 +58,43 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:netgear:wnr854t_firmware:1.5.2:*:*:*:*:*:*:*", + "matchCriteriaId": "04160B4A-2291-4BA4-8438-7269576CE238" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:netgear:wnr854t:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DE71A95C-8A0E-4939-BAD7-B06DBA21961E" + } + ] + } + ] + } + ], "references": [ { "url": "https://faultpoint.com/post/2025-03-25-8-cves-on-the-wnr854t-junkyard/#809", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json b/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json index d57795766f1..440e8fecd35 100644 --- a/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json +++ b/CVE-2025/CVE-2025-06xx/CVE-2025-0624.json @@ -2,7 +2,7 @@ "id": "CVE-2025-0624", "sourceIdentifier": "secalert@redhat.com", "published": "2025-02-19T19:15:15.120", - "lastModified": "2025-04-10T22:15:17.233", + "lastModified": "2025-04-17T13:15:40.933", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ @@ -108,6 +108,10 @@ "url": "https://access.redhat.com/errata/RHSA-2025:3577", "source": "secalert@redhat.com" }, + { + "url": "https://access.redhat.com/errata/RHSA-2025:3780", + "source": "secalert@redhat.com" + }, { "url": "https://access.redhat.com/security/cve/CVE-2025-0624", "source": "secalert@redhat.com" diff --git a/CVE-2025/CVE-2025-17xx/CVE-2025-1762.json b/CVE-2025/CVE-2025-17xx/CVE-2025-1762.json index 926f5660e74..f20d447d2c7 100644 --- a/CVE-2025/CVE-2025-17xx/CVE-2025-1762.json +++ b/CVE-2025/CVE-2025-17xx/CVE-2025-1762.json @@ -2,8 +2,8 @@ "id": "CVE-2025-1762", "sourceIdentifier": "contact@wpscan.com", "published": "2025-03-28T06:15:32.770", - "lastModified": "2025-03-28T18:11:40.180", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-04-17T13:48:32.093", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -39,14 +39,52 @@ } ] }, + "weaknesses": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-352" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:vollstart:event_tickets_with_ticket_scanner:*:*:*:*:*:wordpress:*:*", + "versionEndExcluding": "2.5.4", + "matchCriteriaId": "BE886CA1-D4DA-4692-A833-D795042E8929" + } + ] + } + ] + } + ], "references": [ { "url": "https://wpscan.com/vulnerability/d5cefdee-2ba0-465d-b176-0dff39fc322c/", - "source": "contact@wpscan.com" + "source": "contact@wpscan.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://wpscan.com/vulnerability/d5cefdee-2ba0-465d-b176-0dff39fc322c/", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-264xx/CVE-2025-26477.json b/CVE-2025/CVE-2025-264xx/CVE-2025-26477.json new file mode 100644 index 00000000000..5926a6a92b8 --- /dev/null +++ b/CVE-2025/CVE-2025-264xx/CVE-2025-26477.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-26477", + "sourceIdentifier": "security_alert@emc.com", + "published": "2025-04-17T12:15:14.570", + "lastModified": "2025-04-17T12:15:14.570", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Dell ECS version 3.8.1.4 and prior contain an Improper Input Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security_alert@emc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security_alert@emc.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-multiple-vulnerabilities", + "source": "security_alert@emc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-264xx/CVE-2025-26478.json b/CVE-2025/CVE-2025-264xx/CVE-2025-26478.json new file mode 100644 index 00000000000..c4a38a85d28 --- /dev/null +++ b/CVE-2025/CVE-2025-264xx/CVE-2025-26478.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-26478", + "sourceIdentifier": "security_alert@emc.com", + "published": "2025-04-17T12:15:15.307", + "lastModified": "2025-04-17T12:15:15.307", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "Dell ECS version 3.8.1.4 and prior contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security_alert@emc.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 3.1, + "baseSeverity": "LOW", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.6, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security_alert@emc.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-295" + } + ] + } + ], + "references": [ + { + "url": "https://www.dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-multiple-vulnerabilities", + "source": "security_alert@emc.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-29xx/CVE-2025-2924.json b/CVE-2025/CVE-2025-29xx/CVE-2025-2924.json index e57d24e7050..2e5622a096b 100644 --- a/CVE-2025/CVE-2025-29xx/CVE-2025-2924.json +++ b/CVE-2025/CVE-2025-29xx/CVE-2025-2924.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2924", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-28T20:15:26.147", - "lastModified": "2025-04-01T20:26:39.627", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-04-17T13:13:27.960", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -63,7 +63,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-122" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.14.6", + "matchCriteriaId": "F9158517-069A-4BE6-98F2-EBFDE3437236" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/HDFGroup/hdf5/issues/5382", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.301899", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.301899", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.521170", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/HDFGroup/hdf5/issues/5382", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-29xx/CVE-2025-2925.json b/CVE-2025/CVE-2025-29xx/CVE-2025-2925.json index d6e8e246d8a..5ccfb940e2d 100644 --- a/CVE-2025/CVE-2025-29xx/CVE-2025-2925.json +++ b/CVE-2025/CVE-2025-29xx/CVE-2025-2925.json @@ -2,8 +2,8 @@ "id": "CVE-2025-2925", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-28T20:15:26.440", - "lastModified": "2025-04-01T20:26:39.627", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-04-17T13:11:07.250", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 1.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,28 +142,78 @@ "value": "CWE-415" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-415" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:hdfgroup:hdf5:*:*:*:*:*:*:*:*", + "versionEndIncluding": "1.14.6", + "matchCriteriaId": "F9158517-069A-4BE6-98F2-EBFDE3437236" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/HDFGroup/hdf5/issues/5383", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] }, { "url": "https://vuldb.com/?ctiid.301900", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.301900", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.521193", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/HDFGroup/hdf5/issues/5383", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-30xx/CVE-2025-3015.json b/CVE-2025/CVE-2025-30xx/CVE-2025-3015.json index 77f3624b1c9..ce96a71ae39 100644 --- a/CVE-2025/CVE-2025-30xx/CVE-2025-3015.json +++ b/CVE-2025/CVE-2025-30xx/CVE-2025-3015.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3015", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-31T21:15:53.757", - "lastModified": "2025-04-01T20:26:22.890", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T12:51:20.710", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ], "cvssMetricV2": [ @@ -122,40 +142,98 @@ "value": "CWE-125" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*", + "matchCriteriaId": "DD8EC697-A5C6-4066-9E02-9181B33F7428" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/assimp/assimp/commit/7c705fde418d68cca4e8eff56be01b2617b0d6fe", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/assimp/assimp/issues/6021", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/assimp/assimp/issues/6021#issue-2877378829", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/assimp/assimp/pull/6045", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Patch" + ] }, { "url": "https://vuldb.com/?ctiid.302067", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.302067", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.524589", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/assimp/assimp/issues/6021", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-30xx/CVE-2025-3016.json b/CVE-2025/CVE-2025-30xx/CVE-2025-3016.json index 0a024b7c963..52074d5aaa6 100644 --- a/CVE-2025/CVE-2025-30xx/CVE-2025-3016.json +++ b/CVE-2025/CVE-2025-30xx/CVE-2025-3016.json @@ -2,8 +2,8 @@ "id": "CVE-2025-3016", "sourceIdentifier": "cna@vuldb.com", "published": "2025-03-31T21:15:53.940", - "lastModified": "2025-04-01T20:26:22.890", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-04-17T12:19:23.703", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -80,6 +80,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 1.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -122,36 +142,90 @@ "value": "CWE-404" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-404" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*", + "matchCriteriaId": "DD8EC697-A5C6-4066-9E02-9181B33F7428" + } + ] + } + ] } ], "references": [ { "url": "https://github.com/assimp/assimp/commit/5d2a7482312db2e866439a8c05a07ce1e718bed1", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/assimp/assimp/issues/6022", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Issue Tracking" + ] }, { "url": "https://github.com/assimp/assimp/pull/6046", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Issue Tracking", + "Patch" + ] }, { "url": "https://vuldb.com/?ctiid.302068", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.302068", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.524593", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://github.com/assimp/assimp/issues/6022", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Issue Tracking" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-34xx/CVE-2025-3453.json b/CVE-2025/CVE-2025-34xx/CVE-2025-3453.json new file mode 100644 index 00000000000..e364976e966 --- /dev/null +++ b/CVE-2025/CVE-2025-34xx/CVE-2025-3453.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-3453", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-04-17T12:15:15.467", + "lastModified": "2025-04-17T12:15:15.467", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Password Protected \u2013 Password Protect your WordPress Site, Pages, & WooCommerce Products \u2013 Restrict Content, Protect WooCommerce Category and more plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.7 via the 'password_protected_cookie' function. This makes it possible for unauthenticated attackers to extract sensitive data including all protected site content if the 'Use Transient' setting is enabled." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/password-protected/trunk/includes/compatibility.php", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3274358/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/241d75ca-55e3-461a-9844-52e69904da1b?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-34xx/CVE-2025-3479.json b/CVE-2025/CVE-2025-34xx/CVE-2025-3479.json new file mode 100644 index 00000000000..852ea94ef5c --- /dev/null +++ b/CVE-2025/CVE-2025-34xx/CVE-2025-3479.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-3479", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-04-17T12:15:15.633", + "lastModified": "2025-04-17T12:15:15.633", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'handle_stripe_single' function due to insufficient validation on a user controlled key. This makes it possible for unauthenticated attackers to reuse a single Stripe PaymentIntent for multiple transactions. Only the first transaction is processed via Stripe, but the plugin sends a successful email message for each transaction, which may trick an administrator into fulfilling each order." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-354" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.41.2/library/modules/custom-forms/front/front-action.php#L964", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3274844/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c873c04e-516e-41ee-a295-b8c5235abc1b?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-34xx/CVE-2025-3487.json b/CVE-2025/CVE-2025-34xx/CVE-2025-3487.json new file mode 100644 index 00000000000..377f9142dd3 --- /dev/null +++ b/CVE-2025/CVE-2025-34xx/CVE-2025-3487.json @@ -0,0 +1,68 @@ +{ + "id": "CVE-2025-3487", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-04-17T12:15:15.797", + "lastModified": "2025-04-17T12:15:15.797", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Forminator Forms \u2013 Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018limit\u2019 parameter in all versions up to, and including, 1.42.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.41.2/assets/js/front/front.loader.js#L320", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/forminator/tags/1.41.2/assets/js/front/front.multi.js#L1006", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/changeset/3274844/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5039d63b-377d-435a-be31-4ae81ea30dd3?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-37xx/CVE-2025-3760.json b/CVE-2025/CVE-2025-37xx/CVE-2025-3760.json new file mode 100644 index 00000000000..e6ac4b46cea --- /dev/null +++ b/CVE-2025/CVE-2025-37xx/CVE-2025-3760.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-3760", + "sourceIdentifier": "security@liferay.com", + "published": "2025-04-17T13:15:41.147", + "lastModified": "2025-04-17T13:15:41.147", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal 7.2.0 through 7.4.3.129, and Liferay DXP 2024.Q4.1 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, 7.3 GA through update 36, and 7.2 GA through fix pack 20 allows remote authenticated attackers to inject malicious JavaScript into a page." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "security@liferay.com", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 4.8, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "HIGH", + "userInteraction": "PASSIVE", + "vulnConfidentialityImpact": "LOW", + "vulnIntegrityImpact": "LOW", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "LOW", + "subIntegrityImpact": "LOW", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "security@liferay.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-79" + } + ] + } + ], + "references": [ + { + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3760", + "source": "security@liferay.com" + } + ] +} \ No newline at end of file diff --git a/README.md b/README.md index 2a6915d6752..e5ce9065694 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-04-17T12:00:19.545491+00:00 +2025-04-17T14:00:20.487093+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-04-17T11:15:48.567000+00:00 +2025-04-17T13:56:10.917000+00:00 ``` ### Last Data Feed Release @@ -33,24 +33,40 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -290497 +290503 ``` ### CVEs added in the last Commit -Recently added CVEs: `4` +Recently added CVEs: `6` -- [CVE-2025-1532](CVE-2025/CVE-2025-15xx/CVE-2025-1532.json) (`2025-04-17T10:15:14.337`) -- [CVE-2025-2188](CVE-2025/CVE-2025-21xx/CVE-2025-2188.json) (`2025-04-17T10:15:15.693`) -- [CVE-2025-2197](CVE-2025/CVE-2025-21xx/CVE-2025-2197.json) (`2025-04-17T10:15:15.810`) -- [CVE-2025-29931](CVE-2025/CVE-2025-299xx/CVE-2025-29931.json) (`2025-04-17T11:15:47.807`) +- [CVE-2025-26477](CVE-2025/CVE-2025-264xx/CVE-2025-26477.json) (`2025-04-17T12:15:14.570`) +- [CVE-2025-26478](CVE-2025/CVE-2025-264xx/CVE-2025-26478.json) (`2025-04-17T12:15:15.307`) +- [CVE-2025-3453](CVE-2025/CVE-2025-34xx/CVE-2025-3453.json) (`2025-04-17T12:15:15.467`) +- [CVE-2025-3479](CVE-2025/CVE-2025-34xx/CVE-2025-3479.json) (`2025-04-17T12:15:15.633`) +- [CVE-2025-3487](CVE-2025/CVE-2025-34xx/CVE-2025-3487.json) (`2025-04-17T12:15:15.797`) +- [CVE-2025-3760](CVE-2025/CVE-2025-37xx/CVE-2025-3760.json) (`2025-04-17T13:15:41.147`) ### CVEs modified in the last Commit -Recently modified CVEs: `1` +Recently modified CVEs: `15` -- [CVE-2025-31492](CVE-2025/CVE-2025-314xx/CVE-2025-31492.json) (`2025-04-17T11:15:48.567`) +- [CVE-2018-16840](CVE-2018/CVE-2018-168xx/CVE-2018-16840.json) (`2025-04-17T13:05:04.557`) +- [CVE-2023-22955](CVE-2023/CVE-2023-229xx/CVE-2023-22955.json) (`2025-04-17T13:04:52.510`) +- [CVE-2024-24292](CVE-2024/CVE-2024-242xx/CVE-2024-24292.json) (`2025-04-17T13:56:10.917`) +- [CVE-2024-54804](CVE-2024/CVE-2024-548xx/CVE-2024-54804.json) (`2025-04-17T13:05:10.540`) +- [CVE-2024-54805](CVE-2024/CVE-2024-548xx/CVE-2024-54805.json) (`2025-04-17T13:04:30.327`) +- [CVE-2024-54806](CVE-2024/CVE-2024-548xx/CVE-2024-54806.json) (`2025-04-17T13:03:58.260`) +- [CVE-2024-54807](CVE-2024/CVE-2024-548xx/CVE-2024-54807.json) (`2025-04-17T13:00:32.320`) +- [CVE-2024-54808](CVE-2024/CVE-2024-548xx/CVE-2024-54808.json) (`2025-04-17T12:55:22.040`) +- [CVE-2024-54809](CVE-2024/CVE-2024-548xx/CVE-2024-54809.json) (`2025-04-17T12:54:59.290`) +- [CVE-2025-0624](CVE-2025/CVE-2025-06xx/CVE-2025-0624.json) (`2025-04-17T13:15:40.933`) +- [CVE-2025-1762](CVE-2025/CVE-2025-17xx/CVE-2025-1762.json) (`2025-04-17T13:48:32.093`) +- [CVE-2025-2924](CVE-2025/CVE-2025-29xx/CVE-2025-2924.json) (`2025-04-17T13:13:27.960`) +- [CVE-2025-2925](CVE-2025/CVE-2025-29xx/CVE-2025-2925.json) (`2025-04-17T13:11:07.250`) +- [CVE-2025-3015](CVE-2025/CVE-2025-30xx/CVE-2025-3015.json) (`2025-04-17T12:51:20.710`) +- [CVE-2025-3016](CVE-2025/CVE-2025-30xx/CVE-2025-3016.json) (`2025-04-17T12:19:23.703`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 196048fbf56..7650b2ec661 100644 --- a/_state.csv +++ b/_state.csv @@ -117154,7 +117154,7 @@ CVE-2018-16837,0,0,56f79a31b5cb951dbe3523d3647e88596b4bfa4d31ce31e0c062c1fe1e29a CVE-2018-16838,0,0,051fb941a08dd3d41c1d1aa76dea6147af6983234cad269efb154c597d9d4e79,2024-11-21T03:53:24.937000 CVE-2018-16839,0,0,0351009ba7e2cd8ba8e6a49b6b9185ff9815655d92115ee7b1cf8e822828fff5,2024-11-21T03:53:25.087000 CVE-2018-1684,0,0,bdfaa24d3452679641b00a0ec39ef6da992a9caa277ce04df58c7a27c13d6398,2024-11-21T04:00:12.050000 -CVE-2018-16840,0,0,1dded32bfcb86ecb8ab642ae5d949bb4f3568b6ca68b86c8d1ac23cce5b8a7fd,2024-11-21T03:53:25.240000 +CVE-2018-16840,0,1,0d93e49ed31b16ae96bff4500d4376cf6b1e44db16acd7592bcf8007c62a45c5,2025-04-17T13:05:04.557000 CVE-2018-16841,0,0,1fd9852128ecbac12d2f51760ad7b902230ab93c026e2c1190bcff0f9de10172,2024-11-21T03:53:25.367000 CVE-2018-16842,0,0,a38a86d0b13a3dfc770a9ce071e78cad53a87e05d5fee1d56eabb11c1c0422f2,2024-11-21T03:53:25.507000 CVE-2018-16843,0,0,1cc2eb7696a81c09ee793021e4a2345339aa893b580f28b40e2976a5588aecaf,2024-11-21T03:53:25.653000 @@ -218580,7 +218580,7 @@ CVE-2023-22950,0,0,8c4cba5718d39bb68a4a85fa3e0f0a6bfef3dc772f2834b319352e126de48 CVE-2023-22951,0,0,70bdded0ddb28bb7d8bc3d1c435ba4d472104f2250c2e369e4e606e02380631f,2025-02-07T17:15:24.703000 CVE-2023-22952,0,0,ab7f027c64811cb7464a0848c2597b01c246baf2eb1b55f21b6d16a73ce3e898,2025-03-14T20:00:58.340000 CVE-2023-22953,0,0,bed49673bbc96a045c9877af44a86454f976a2f42cbdac8b1077b232940179e9,2024-11-21T07:45:42.890000 -CVE-2023-22955,0,0,f49d36274ca7567a64130f898ca11f77f987f59512cb6653e952d2147c62ef57,2024-11-21T07:45:43.033000 +CVE-2023-22955,0,1,666844d4d777028c70382fceda60358d96b11967762d69095723fab7eb5a0504,2025-04-17T13:04:52.510000 CVE-2023-22956,0,0,1332b5cd87c22c199d8ceae3097ab92ca89dc1d86aebb9f1b90634d9f0c438f0,2024-11-21T07:45:43.200000 CVE-2023-22957,0,0,043a65d5e6d441aeb4150a7accfa1c33271fe84d17bcac839ccc09a8ec9c1c26,2024-11-21T07:45:43.357000 CVE-2023-22958,0,0,26d361391acfdc5160383836e310babc01acaeed6a847f073734bf4747cada5b,2025-04-07T19:15:52.103000 @@ -252457,7 +252457,7 @@ CVE-2024-24279,0,0,3c4f04c26cb85f0333fe6d1f13856ff9faa25dcc02100f20c125ebce26e32 CVE-2024-2428,0,0,2471580c23f3bb37c64f9417f5557d913d5acf37363d1d2bcff51f8dd06d13f6,2024-11-21T09:09:44.007000 CVE-2024-2429,0,0,a767c64c9199e3b93bb6544b0a221d84a3530a93ca6dacf59a3d5c5e43f266b8,2025-04-14T14:18:25.260000 CVE-2024-24291,0,0,a5675aa0c8613cb299e95ab4766425189a0597594fcb674b552846121823ab0a,2024-11-21T08:59:06.530000 -CVE-2024-24292,0,0,24d26482dd4cf28e7909826ec5dd6c0412cd365d7a700db8f9ea37581123b8e1,2025-04-01T20:26:30.593000 +CVE-2024-24292,0,1,ead44ab8d8642cbba43faf9c263f77e218058baabbc6eed7ce286cfe26b5ec9b,2025-04-17T13:56:10.917000 CVE-2024-24293,0,0,0014a75b9ac9329b36ec7351b9f343123fc5dc5be6a7d2f346e3b9ab2354f1a6,2024-11-21T08:59:06.687000 CVE-2024-24294,0,0,fb63bcb8105d83116610bdb135f4ec59089672617d771e88154265e41f25bd8d,2024-11-21T08:59:06.910000 CVE-2024-2430,0,0,53841c9e199446382dd94c9e9994298ae403a3969aa9ef4125f05f9800537a98,2024-11-21T09:09:44.353000 @@ -275542,12 +275542,12 @@ CVE-2024-54795,0,0,189377580c088768ee02d63dd643544c9e329d819648f0ba84334338aef4e CVE-2024-5480,0,0,dcddee05a122e48deec7dd054d03a98cfc3767234733af70ab63ade31364815f,2024-10-02T16:15:10.913000 CVE-2024-54802,0,0,fab8e298035d4a3b7f15cce322ed49aec5cc02f1151db463dee216fca6b7fd77,2025-04-02T15:15:57.200000 CVE-2024-54803,0,0,f997140f9d272f3452d679b088072dcbcc8e1a30a119e74b4c110e2bf5f523f6,2025-04-02T15:15:57.400000 -CVE-2024-54804,0,0,66e9e10d7cee3b61de31d435995d3aae67e98ba75dbf0febf5fc9b4d0bfb7b46,2025-04-02T15:15:57.603000 -CVE-2024-54805,0,0,2f3df2f061ff4e65faf96d7a5889f278873ea0eb8dd0a8d1ff739bb20a10aeae,2025-04-02T14:15:45.140000 -CVE-2024-54806,0,0,4ab771fa8c73eb40619e574d84bcba08466bec2bdefc2d8c33fefb94aeeb66f6,2025-04-02T14:15:45.370000 -CVE-2024-54807,0,0,5b4800ea4d09f47e1cfcdb8d03e3c9ca07ce84ddeb6166a1c7bc426c629bd2dc,2025-04-02T14:15:45.597000 -CVE-2024-54808,0,0,815d65cf377398d7896a261df2b8dc16382f78e6563b818e21eb17e480792db3,2025-04-02T14:15:45.820000 -CVE-2024-54809,0,0,269890ae914c804192af1f03b4cf2c102933b4627839ef87908ec5cfb19f969c,2025-04-02T14:15:46.023000 +CVE-2024-54804,0,1,c2f7dddff0d9ace943f4046ed847e179afde6ccfd2d76256db6557d35c4844ce,2025-04-17T13:05:10.540000 +CVE-2024-54805,0,1,6c2c97da38cae53e48d442bad67c7dfb312eab16e6f636263f5bde6a494696de,2025-04-17T13:04:30.327000 +CVE-2024-54806,0,1,771b52fd86f1cefd62260c183037bbd0e8800e3f5ae91cb4b184773b6460e623,2025-04-17T13:03:58.260000 +CVE-2024-54807,0,1,54de2c5150f325b6b632d4034f466e5caa24cd57eede4e4f3956316dd6058187,2025-04-17T13:00:32.320000 +CVE-2024-54808,0,1,699bf268e6b531852f4fbb8e8e6dfe97cd004297de1be4eb22785dca508d3046,2025-04-17T12:55:22.040000 +CVE-2024-54809,0,1,36250b298f660312d0bfb43e675753c09c37ae9b696c42d1c342e7d63cad39aa,2025-04-17T12:54:59.290000 CVE-2024-5481,0,0,6aaa03c1e132f74e5c4e90ead29bd24eb7065ad2c73e1f2805fbc82099451674,2024-11-21T09:47:45.877000 CVE-2024-54810,0,0,882d3fa1b080912bce7b34d4b8aa9b12c4912ad6adc38d0b87e5a54461198ef5,2025-04-03T16:31:58.100000 CVE-2024-54811,0,0,cf240480f3bdcc869e21e147dce6a3cfa9b1faf5d8289c88cd8952cd891f8a15,2025-04-03T16:31:51.620000 @@ -281703,7 +281703,7 @@ CVE-2025-0617,0,0,f628b1ad73170d04122e24ddb3e888ab06e1591d9b8c499515e522c90868af CVE-2025-0619,0,0,d6798daeef3d7924598dddc8037e69d4ae3bc1784ffc6b426878fbbb52aa2ee9,2025-01-23T11:15:10.700000 CVE-2025-0622,0,0,e47fbbd3a3a716f89e6a5dc5e99d39a7414dccef8758c28db6b0464c5f5b2e87,2025-02-18T20:15:23.570000 CVE-2025-0623,0,0,341d910d0f0f4575e107592c92f38288f68e01fe716af21df488a6d82193e481,2025-01-21T17:15:16.817000 -CVE-2025-0624,0,0,639984b504b761a4b77755f6d2127bf8d4693e52bb5681144533816ca6fad586,2025-04-10T22:15:17.233000 +CVE-2025-0624,0,1,5916fd2b455ef814c63d2135fe854de2abe5fc9acaea4cf3e7677b38221e3050,2025-04-17T13:15:40.933000 CVE-2025-0625,0,0,328c89607f451b43b59c7441ff870515136d8dcd178527014c9e23beca2d6c94,2025-03-28T19:14:20.063000 CVE-2025-0626,0,0,16ee263c85f3aad6f9b7c5ed60390a064032d53adec3f9f8437b4c73151fb8c7,2025-03-01T18:15:34.140000 CVE-2025-0628,0,0,570695b374c4ed87e2ed44b4722d7e35e02627e97784a5b85708accd345030c2,2025-03-20T10:15:53.407000 @@ -282333,7 +282333,7 @@ CVE-2025-1526,0,0,6ccdbe928ef24ca526e4b1e5e42bcc074377bcc67cdebc47d468f5396b2349 CVE-2025-1527,0,0,ed274a04b6ad0457d200f338a2994672af54e52d41647b0116177bb8ea442a0d,2025-03-24T17:50:57.550000 CVE-2025-1528,0,0,7b51d848bb252c8d2ce8faab7faf50aeaf0b47cac9c6975607b632c5e9c036f9,2025-03-14T05:15:42.170000 CVE-2025-1530,0,0,fd014caac806bde4806ca306b609cfc51d8d2d9092073f1a99a794d20b572d30,2025-03-25T20:02:28.730000 -CVE-2025-1532,1,1,d7b0c010af30e4d2b605de50144895561b61b92aa89293597a39aadd6864948f,2025-04-17T10:15:14.337000 +CVE-2025-1532,0,0,d7b0c010af30e4d2b605de50144895561b61b92aa89293597a39aadd6864948f,2025-04-17T10:15:14.337000 CVE-2025-1534,0,0,d4620aa836a115e03710779902069e790678aabc65f691200373939865d57e00,2025-04-07T21:15:41.667000 CVE-2025-1535,0,0,6080c0c0968f3ab3c5259d9031c93f6d6c93dcaef1c71aa8b7e3b62645a6a84e,2025-02-21T12:15:30.877000 CVE-2025-1536,0,0,13d2bb79966b022c194b53190d029539a3b9db0220df5fb889249e7f79d2fadc,2025-02-21T15:15:12.270000 @@ -282492,7 +282492,7 @@ CVE-2025-1755,0,0,b8116dcd9eafe8c21e606cf4d169f84c9b48a368fd9a8a9ed4d47dfc517183 CVE-2025-1756,0,0,469a2e36bf9b0a53fa5f2a58ce7fdccfdf577f34edea6c0bcffa665f76adda9e,2025-04-09T14:07:26.960000 CVE-2025-1757,0,0,c25e39602a825b6394df945ad4b24df4019eaaa8085cc7f11e82831fb6895cb4,2025-03-10T16:48:47.823000 CVE-2025-1758,0,0,0373ea84effa2e885cc20b107f682d5ddfeea043aa22d13e9c170486f7fa1885,2025-03-19T16:15:30.527000 -CVE-2025-1762,0,0,646b7857459189b78613cd0a814492cddbfacf3c68a509b0b8f9320e9e5dcc81,2025-03-28T18:11:40.180000 +CVE-2025-1762,0,1,5eb4f8eb32ff7e9dd5693d53ebf6ac723f3ad2b6278e75ae2680335a0f36992e,2025-04-17T13:48:32.093000 CVE-2025-1764,0,0,13706f4025eae225fc3793a7e7a1fa321df281c8253d66f7993d98f6aa09100c,2025-03-14T06:15:24.860000 CVE-2025-1766,0,0,598707d3f8b19c5a3ff0b336e9bc39a76f8ffb8a9d939d0b001d5b5f979e7c65,2025-03-20T06:15:22.740000 CVE-2025-1767,0,0,db4a25182003b3801d09638d93655c86fe8651aa60672fd3a6309c07b55e200e,2025-03-13T21:15:43.127000 @@ -283711,7 +283711,7 @@ CVE-2025-21876,0,0,29ac42f6e2dddef5e01d24d1f99b9149de3109991edd7e8724e43a3bead55 CVE-2025-21877,0,0,62eb51b2a8b8810a0a6857a1fc7de395bbc151e36231d2633da147da73791a26,2025-03-27T16:45:12.210000 CVE-2025-21878,0,0,ea1c59c546da493c029ef9036231e5836f0d99163a312b86e94b9d72cf0f284e,2025-03-27T16:45:12.210000 CVE-2025-21879,0,0,52cde173ce6cfe8244003fb8bfaa70683fe2ac5f9fd95bb9d7e6cc6afb939a5e,2025-04-01T15:44:57.750000 -CVE-2025-2188,1,1,5968c3d976a8ccae4190729b7427cf1d34d668cbedc782e73dc66034d1bec21f,2025-04-17T10:15:15.693000 +CVE-2025-2188,0,0,5968c3d976a8ccae4190729b7427cf1d34d668cbedc782e73dc66034d1bec21f,2025-04-17T10:15:15.693000 CVE-2025-21880,0,0,dbb8a128810b935b5b223103f0bc8ae55b429aee3df58a3565f1c1a08f50c5ff,2025-03-27T16:45:12.210000 CVE-2025-21881,0,0,2e727f84c5496d9764fbc6e3a5fe913da9fb88fd498782db803d2968c85aa8ed,2025-03-27T16:45:12.210000 CVE-2025-21882,0,0,83d0e496e7375f097e6b9972365cb79a279fa71e980ee63260d556590c4bcf9c,2025-03-27T16:45:12.210000 @@ -283810,7 +283810,7 @@ CVE-2025-21966,0,0,b8df930f5d34ff67503ed8868ee3b2f23c0716e02ac48ca9a2f2dc6a95c67 CVE-2025-21967,0,0,3aa7733aeb6584ed070ab2c4115cccbb457b4c15beb059c5bf5c4df253752bd3,2025-04-16T14:15:24.073000 CVE-2025-21968,0,0,e1386240b8d893b8a76956411feb2ded582ac3442fe1dd38c9a9bf2ea037af2c,2025-04-14T12:37:24.997000 CVE-2025-21969,0,0,8c616d8228585648ef177a910bcf00802c30348264f19f523b8594bc0b608015,2025-04-14T12:36:32.997000 -CVE-2025-2197,1,1,b85cd27676f61530541a752e8648eb68d7fbfcf8260baebf9de709e653428648,2025-04-17T10:15:15.810000 +CVE-2025-2197,0,0,b85cd27676f61530541a752e8648eb68d7fbfcf8260baebf9de709e653428648,2025-04-17T10:15:15.810000 CVE-2025-21970,0,0,ba7445dc61bccd37c0f7ca1a141461c1c02ebd565257c235441700d71cfad345,2025-04-10T13:15:48.327000 CVE-2025-21971,0,0,b9d234e567e462d15ed318b3bf4dc7551c45c9f6c61850ac7f7a28311b584baf,2025-04-10T13:15:48.453000 CVE-2025-21972,0,0,d85845769d0cd5fe597b1eb7b9c324d06cd06a54a4c2f3e7cb0d6c39aa6a1b43,2025-04-01T20:26:01.990000 @@ -286832,6 +286832,8 @@ CVE-2025-26466,0,0,e28b9442f0c697ea87fb930b9a4fe54153ce4a5f75ba3228289b85a6bb16f CVE-2025-2647,0,0,31fe515a44f11cf9569f888e0a91d0a688196caf010a5ad274bf1696fe7f4f4e,2025-03-27T16:26:36.977000 CVE-2025-26473,0,0,41b0bd46f32c6729eefb29a2666cce546dde395dd2362800539aebed7d4bc19a,2025-03-19T10:34:55.550000 CVE-2025-26475,0,0,4c11595a9f53aaa25545570dfec450fa96951cf66b685488bd2989725dd8947f,2025-03-19T16:15:31.030000 +CVE-2025-26477,1,1,35a8dc7e2fcb3d648ce42056a16edb026b260b52ac0e36e07fcf0a8babd4dbde,2025-04-17T12:15:14.570000 +CVE-2025-26478,1,1,b6cc6b485036cd3651b19355aa1d3ed2a9c1cb5b1302cd046c13d4576f3370bf,2025-04-17T12:15:15.307000 CVE-2025-26479,0,0,8f9047de48f6ddc1771b26a4326a4c049a609c3aa9e468762197e688e977af65,2025-04-11T15:40:10.277000 CVE-2025-2648,0,0,1e0b04231e02c958d1daf764427fee60f2d862b5e2a1ea0533e27d2313cf49b2,2025-03-27T16:27:24.183000 CVE-2025-26480,0,0,663ed3466d69ebf6feca9da84de838f0f92dd4929dec19ef6066807e57bd60c6,2025-04-11T15:40:10.277000 @@ -288067,8 +288069,8 @@ CVE-2025-29226,0,0,2a22bb41c1636f111fba56d4837d1f7d2c1c2827dade39d30847ae9b2258c CVE-2025-29227,0,0,98c6c2a56c36a920ebfda1c9f607bc1ce8140ab24fa775ca0ea0701e2b0db727,2025-04-01T20:28:58.697000 CVE-2025-2923,0,0,0127ed7eb29b6408a9d060a0a3c5fc22e3f1952b120dab3b5645aa8d85c68532,2025-04-01T20:26:39.627000 CVE-2025-29230,0,0,a96d6f25884fce83e2e6e66d008df496713f73ab7711eea3506888e7dec9bf9e,2025-04-01T20:28:51.790000 -CVE-2025-2924,0,0,15ec772a247e663d3b410bf382b3b4282d830baaa171ae147c6377e4ede34991,2025-04-01T20:26:39.627000 -CVE-2025-2925,0,0,57c779cb80b04dea98d1306bb52a4ba039c948f0dfa18686d63a5c924ae12060,2025-04-01T20:26:39.627000 +CVE-2025-2924,0,1,035b342e4739e959d11faebc838ea9c953beab2ad201da68f4190d4779a05c84,2025-04-17T13:13:27.960000 +CVE-2025-2925,0,1,6e6057af1505bd2aca9814f533b29610886f80d850b5e22863ae1d8118c6e560,2025-04-17T13:11:07.250000 CVE-2025-2926,0,0,3e72a087e763323bf5856d294592139ea832180777dddbb463811921e15208e3,2025-04-01T20:26:39.627000 CVE-2025-29266,0,0,ebe0e382c4a5abdfbad4d36c3a40b9356ea4b38f02b497fb84326608368d7b76,2025-04-01T20:26:30.593000 CVE-2025-2927,0,0,7f5ccbf74e8614d1ffa159b8af7772e0f2741b8003c2ff25a8317d72824fcb99,2025-04-14T17:09:19.427000 @@ -288273,7 +288275,7 @@ CVE-2025-29928,0,0,e7378b2e927fc5fc3ba1dc54c402e9255b7beb92fd05fe3fde032f3211ae2 CVE-2025-29929,0,0,06230861f00f04282a399bae0b4f7ed97a7506f13e695c7ff98910d0d0c5aa19,2025-04-01T20:26:22.890000 CVE-2025-2993,0,0,f1e29c0453dca825aef2d68be3449f02117216671238524fb942bc1ad682ad72,2025-04-08T14:00:57.463000 CVE-2025-29930,0,0,5c209ec60ca4eeb14d225cb677e5ddb09384395f274bc0cae2e3304b0a41e066,2025-03-18T19:15:51.340000 -CVE-2025-29931,1,1,680467427e3453e41b88bf43fb5d455da1fca298fed86dd49b26d16bb7a0940f,2025-04-17T11:15:47.807000 +CVE-2025-29931,0,0,680467427e3453e41b88bf43fb5d455da1fca298fed86dd49b26d16bb7a0940f,2025-04-17T11:15:47.807000 CVE-2025-29932,0,0,4b9314c077daab23a79ad834ada6389de74731b87a8def4d7d8999f0fd1a08b1,2025-03-27T16:45:46.410000 CVE-2025-2994,0,0,3998d75b7f0f42041f2d8938e2e7cae9fc19fcfd6624d2244213d422cfb3dff5,2025-04-07T14:38:29.277000 CVE-2025-2995,0,0,5436a78f06a70eb8d33e1fe2c9cd6f31aabdc45a26a44233afe5c6b73ef22b68,2025-04-08T13:05:30.387000 @@ -288368,7 +288370,7 @@ CVE-2025-30143,0,0,c72031c589e36c3d2604bcb120ba9a6dd94ff4f6eee14259c749d5630ebbf CVE-2025-30144,0,0,15bf5f8218ba2223682697484bbc86f902d5a148eb49e6248d7c2412b7737d74,2025-03-19T16:15:33.080000 CVE-2025-30148,0,0,29af0e59843efb2e7b8c69e1b7f2af701bb5cce0280381a18f1bffe78cdaf0a3,2025-04-11T15:39:52.920000 CVE-2025-30149,0,0,ab0a07e66a00efc10ffd3507898b414b26c290aaf077498455fdbd14ccfcefee,2025-04-01T20:26:22.890000 -CVE-2025-3015,0,0,1a9600aa1cdb68fd6d8fb628abad6f46be76035ead546d7314d86cfce5302768,2025-04-01T20:26:22.890000 +CVE-2025-3015,0,1,d08d24657c146e33f2509eab18ac5125afed8fdcd595c87fbe2662a62893a2d8,2025-04-17T12:51:20.710000 CVE-2025-30150,0,0,cd318f97af1afc5ddcc3a58be3ef9678625f07c6c1c6e819a6613fc5579bd1ab,2025-04-08T18:13:53.347000 CVE-2025-30151,0,0,55157c669ceabb8368a55e1d710631e42a1374b10357acd32f11a867c2361fa2,2025-04-08T18:13:53.347000 CVE-2025-30152,0,0,fb7d8b36a0a9757a199a4cf8f9b4b43b19a772c330ea1d3bb0186654fc6f920c,2025-03-19T16:15:33.313000 @@ -288376,7 +288378,7 @@ CVE-2025-30153,0,0,da47524558affc65b6874f9bef3637406802e7d0a047ff83de555cab02282 CVE-2025-30154,0,0,f4c8f04ec10c8608001f5ee4aec87a1247d8c3c0588d5bdb69da7f038e16b9a7,2025-03-29T01:00:02.337000 CVE-2025-30155,0,0,73a90b4061b436b5d3315d16e7ed336d7d0ee9813bf9846d83eb14fdd6fcb239,2025-04-01T20:26:22.890000 CVE-2025-30157,0,0,242e1ed76bf2915a3dee7a5519b7199b1b19f384af1b145e763b2bab2e9bbb18,2025-04-01T20:22:34.500000 -CVE-2025-3016,0,0,af2eb06d49c92f9bea4f8df9974b48ccc2833bdacab9c55324355433737640fe,2025-04-01T20:26:22.890000 +CVE-2025-3016,0,1,b07b70e180de5320013daa56d7e69cbe385153c5df1fbf3b3a20a2a0b9bd37c8,2025-04-17T12:19:23.703000 CVE-2025-30160,0,0,25be472787022894833e0e3357865514f4516e8d537c62073ee43066a681f12b,2025-03-20T19:15:38.383000 CVE-2025-30161,0,0,f82851224812cb6cb51198c61284f68a32f1e38a7fd3c0f7a0c3eb3e291553c9,2025-04-01T20:26:22.890000 CVE-2025-30162,0,0,8641e47d280f65cb3bb61486e9cfbaa56cd67a484749372cb3bbdafe7ce809ee,2025-03-27T16:45:46.410000 @@ -289230,7 +289232,7 @@ CVE-2025-31489,0,0,86b687749f556cb33a8356498a01d508d0da05ad595a76560944268496b2b CVE-2025-3149,0,0,61479a4dbdbba6ab59d1ae99d855a79e55a52858fd9b2654fa6a6f9d8eddf660,2025-04-07T14:18:34.453000 CVE-2025-31490,0,0,fa1d5b8676c6e56670fc9996520b73230716c35b92d199e113f88f4fd639c21c,2025-04-15T18:39:27.967000 CVE-2025-31491,0,0,121a93a76a8e7ee91d64bde9e260caf7e7fcc2f30832e94abd08189e26e2d067,2025-04-15T18:39:27.967000 -CVE-2025-31492,0,1,475dda89c62b2a3534585927a93c334d4d192293966c45f2b947c7a33eef031f,2025-04-17T11:15:48.567000 +CVE-2025-31492,0,0,475dda89c62b2a3534585927a93c334d4d192293966c45f2b947c7a33eef031f,2025-04-17T11:15:48.567000 CVE-2025-31494,0,0,49e512ef4ebfe8914086467b54ce6e9a2ad2dba6ac7ca963a5d77ca48d87fef5,2025-04-15T18:39:27.967000 CVE-2025-31496,0,0,12f17064ea4e4584d7a91216d2d100c9a89220efe7b8206230e9a4ff7e506dee,2025-04-08T18:13:53.347000 CVE-2025-31497,0,0,1b82a56d9177bb215369f5c660b01f4df1461ec4d11c3d6455af08d6d37b9842,2025-04-16T13:25:59.640000 @@ -290313,10 +290315,13 @@ CVE-2025-3437,0,0,e73b4884af1e4c5b90938b61853540dd90f98780db8cdd9f4d702d9b75697d CVE-2025-3439,0,0,5a45d3a4e5746a323275efd17cc6f0776b222d5dbffb626174e7480f10014b98,2025-04-11T15:39:52.920000 CVE-2025-3442,0,0,2a59e6aeb9a7ce85db231c9e4252568faabc9932311aa3489ec1af959c55a52f,2025-04-09T20:02:41.860000 CVE-2025-3445,0,0,9368fe2ffe41458977755cb44cb2101cef3e3cbb78b4473c7335a5f09fb177cb,2025-04-15T18:39:27.967000 +CVE-2025-3453,1,1,bd96fe68243f54dde49ef87dc812e54ffe451c624cf9839b5825c9ccdba8d41c,2025-04-17T12:15:15.467000 CVE-2025-3469,0,0,4bca5426f9919f93dad9a4b1c330f34d47eacab0082cc9b29903729bbc139092,2025-04-11T15:39:52.920000 CVE-2025-3470,0,0,19aa6171d68cb7df7c1f3be18d7bfe917a85b5b7f1d5f3673d31726045a39093,2025-04-15T18:39:27.967000 CVE-2025-3474,0,0,86c754cf553decd220dba53e5d0d63448d8121da39946fc69feccec714981904,2025-04-09T20:02:41.860000 CVE-2025-3475,0,0,443d35ed0e717701a1888d83d8695b8f16fb37648583a3e79025b880997d544a,2025-04-09T20:02:41.860000 +CVE-2025-3479,1,1,2abb936c04496f78e0101eef44ed8980b1d2b69776253bee5ed2febb7fd5c7c9,2025-04-17T12:15:15.633000 +CVE-2025-3487,1,1,6feace6425e8e9e6fe39b09e87ed452b070dd300e664ae70a00885225e3bfd76,2025-04-17T12:15:15.797000 CVE-2025-3489,0,0,67fcd6c9f94bb6bf638f4e8bb2240b0887ef71aca32f3728fb5180eccf26711c,2025-04-11T15:40:10.277000 CVE-2025-3495,0,0,fe640c81a3ed6a86c53f35442fa10e181d645418d808dffc6fff69a3880ca71e,2025-04-16T13:25:37.340000 CVE-2025-3512,0,0,036d013cd0e3204c7e29f8f12826d9befccf940571ea0ad101dc3475585d72f8,2025-04-11T15:39:52.920000 @@ -290432,6 +290437,7 @@ CVE-2025-3736,0,0,564cad71b1e7fa3df569cf41ca780256dc009f1642d469d423a441d1ee8e05 CVE-2025-3737,0,0,35ef6e8f2a42d71a4fd629018f2a34f66136cd1d5698c7f6e583093f6b71123c,2025-04-16T17:15:50.193000 CVE-2025-3738,0,0,25a120e70b108a1107338fc22d89908c6f6e4f62a900899a59c731afea93d918,2025-04-16T17:15:50.273000 CVE-2025-3739,0,0,8f4318c477e6ef78cfbb477f16fa8d12b0c83a2a9a65573ec61aaf6c0bbeb8e9,2025-04-16T17:15:50.360000 +CVE-2025-3760,1,1,173c992d0c99fb49006ca5bb129574853b986417b687a5401f75a7095864d16d,2025-04-17T13:15:41.147000 CVE-2025-39472,0,0,f877ee59d4634387f8954acae2dec15eae960a462413f02036f322a3f69ccc35,2025-04-16T18:16:19.610000 CVE-2025-39512,0,0,30e6c9aa53398b93f238c977dd94d763073bc9afd9ceab721695d171a8dade76,2025-04-16T13:25:37.340000 CVE-2025-39513,0,0,e63086a6d242a225a037b014e92b4880238a63e6b65c770949ab086ff1bcbafb,2025-04-16T13:25:37.340000