diff --git a/CVE-2016/CVE-2016-90xx/CVE-2016-9079.json b/CVE-2016/CVE-2016-90xx/CVE-2016-9079.json index 2c937153eb2..ef28179c424 100644 --- a/CVE-2016/CVE-2016-90xx/CVE-2016-9079.json +++ b/CVE-2016/CVE-2016-90xx/CVE-2016-9079.json @@ -2,8 +2,8 @@ "id": "CVE-2016-9079", "sourceIdentifier": "security@mozilla.org", "published": "2018-06-11T21:29:01.797", - "lastModified": "2025-10-22T00:15:57.077", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:34:27.567", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -258,9 +258,9 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "versionEndExcluding": "50.0.2", - "matchCriteriaId": "F500D7C2-53C4-4626-8B8B-628D65A1ED6C" + "matchCriteriaId": "4A0724A6-A874-493E-8082-2D348BF13665" } ] }, @@ -353,7 +353,8 @@ "source": "security@mozilla.org", "tags": [ "Third Party Advisory", - "VDB Entry" + "VDB Entry", + "Broken Link" ] }, { @@ -438,7 +439,8 @@ "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Third Party Advisory", - "VDB Entry" + "VDB Entry", + "Broken Link" ] }, { @@ -506,7 +508,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-9079", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2019/CVE-2019-170xx/CVE-2019-17026.json b/CVE-2019/CVE-2019-170xx/CVE-2019-17026.json index 8b7d8a2ecf7..40955d73d04 100644 --- a/CVE-2019/CVE-2019-170xx/CVE-2019-17026.json +++ b/CVE-2019/CVE-2019-170xx/CVE-2019-17026.json @@ -2,8 +2,8 @@ "id": "CVE-2019-17026", "sourceIdentifier": "security@mozilla.org", "published": "2020-03-02T05:15:12.010", - "lastModified": "2025-10-22T00:16:36.960", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:34:39.563", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -125,9 +125,9 @@ }, { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "versionEndExcluding": "72.0.1", - "matchCriteriaId": "21E5F0F7-D936-4FE0-B1F3-3A7CCDF49DEF" + "matchCriteriaId": "0FC8A283-5E66-4EAD-A36A-0B0247B6EE50" }, { "vulnerable": true, @@ -246,7 +246,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-17026", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2020/CVE-2020-68xx/CVE-2020-6819.json b/CVE-2020/CVE-2020-68xx/CVE-2020-6819.json index 9367acd8df4..b7370333680 100644 --- a/CVE-2020/CVE-2020-68xx/CVE-2020-6819.json +++ b/CVE-2020/CVE-2020-68xx/CVE-2020-6819.json @@ -2,8 +2,8 @@ "id": "CVE-2020-6819", "sourceIdentifier": "security@mozilla.org", "published": "2020-04-24T16:15:13.370", - "lastModified": "2025-10-22T00:17:11.217", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:34:52.090", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -123,15 +123,15 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", - "versionEndExcluding": "74.0.1", - "matchCriteriaId": "781555D1-8E31-4BD3-9C51-40D7B43C9130" + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "68.6.1", + "matchCriteriaId": "A733A9CB-A031-4A8A-9580-8E262B6956B1" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", - "versionEndExcluding": "68.6.1", - "matchCriteriaId": "DF6BBA3E-8B43-4D39-BE34-9D3E3A6A10CB" + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "74.0.1", + "matchCriteriaId": "420A3EDF-5443-45D9-BF32-FA964184832A" }, { "vulnerable": true, @@ -205,7 +205,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-6819", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2020/CVE-2020-68xx/CVE-2020-6820.json b/CVE-2020/CVE-2020-68xx/CVE-2020-6820.json index ccc70f84c93..369b1db9657 100644 --- a/CVE-2020/CVE-2020-68xx/CVE-2020-6820.json +++ b/CVE-2020/CVE-2020-68xx/CVE-2020-6820.json @@ -2,8 +2,8 @@ "id": "CVE-2020-6820", "sourceIdentifier": "security@mozilla.org", "published": "2020-04-24T16:15:13.463", - "lastModified": "2025-10-22T00:17:11.400", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:34:43.203", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -119,15 +119,15 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", - "versionEndExcluding": "74.0.1", - "matchCriteriaId": "781555D1-8E31-4BD3-9C51-40D7B43C9130" + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "68.6.1", + "matchCriteriaId": "A733A9CB-A031-4A8A-9580-8E262B6956B1" }, { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", - "versionEndExcluding": "68.6.1", - "matchCriteriaId": "DF6BBA3E-8B43-4D39-BE34-9D3E3A6A10CB" + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", + "versionEndExcluding": "74.0.1", + "matchCriteriaId": "420A3EDF-5443-45D9-BF32-FA964184832A" }, { "vulnerable": true, @@ -201,7 +201,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-6820", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-264xx/CVE-2022-26485.json b/CVE-2022/CVE-2022-264xx/CVE-2022-26485.json index 3dbe964d970..0b940b1915c 100644 --- a/CVE-2022/CVE-2022-264xx/CVE-2022-26485.json +++ b/CVE-2022/CVE-2022-264xx/CVE-2022-26485.json @@ -2,8 +2,8 @@ "id": "CVE-2022-26485", "sourceIdentifier": "security@mozilla.org", "published": "2022-12-22T20:15:22.563", - "lastModified": "2025-10-22T00:18:01.613", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:35:17.667", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -94,9 +94,15 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "91.6.1", + "matchCriteriaId": "43351EFE-E64C-4ACD-A779-CBADE52E35B3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "versionEndExcluding": "97.0.2", - "matchCriteriaId": "9D8E2245-D602-42F5-AA80-B3CFA666E595" + "matchCriteriaId": "E34F39EA-3536-47AE-948A-A1BE4FEBAA52" }, { "vulnerable": true, @@ -104,12 +110,6 @@ "versionEndExcluding": "97.3.0", "matchCriteriaId": "CDD84821-8FA2-483B-995B-5C1F571D4247" }, - { - "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", - "versionEndExcluding": "91.6.1", - "matchCriteriaId": "4AE9257B-B169-42AF-82C6-EF62FDFE2110" - }, { "vulnerable": true, "criteria": "cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:*:*:*", @@ -162,7 +162,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26485", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2022/CVE-2022-264xx/CVE-2022-26486.json b/CVE-2022/CVE-2022-264xx/CVE-2022-26486.json index cdf20a0ce60..b9919510726 100644 --- a/CVE-2022/CVE-2022-264xx/CVE-2022-26486.json +++ b/CVE-2022/CVE-2022-264xx/CVE-2022-26486.json @@ -2,8 +2,8 @@ "id": "CVE-2022-26486", "sourceIdentifier": "security@mozilla.org", "published": "2022-12-22T20:15:22.797", - "lastModified": "2025-10-22T00:18:01.857", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:35:12.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -94,9 +94,15 @@ "cpeMatch": [ { "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", + "versionEndExcluding": "91.6.1", + "matchCriteriaId": "43351EFE-E64C-4ACD-A779-CBADE52E35B3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "versionEndExcluding": "97.0.2", - "matchCriteriaId": "9D8E2245-D602-42F5-AA80-B3CFA666E595" + "matchCriteriaId": "E34F39EA-3536-47AE-948A-A1BE4FEBAA52" }, { "vulnerable": true, @@ -104,12 +110,6 @@ "versionEndExcluding": "97.3.0", "matchCriteriaId": "CDD84821-8FA2-483B-995B-5C1F571D4247" }, - { - "vulnerable": true, - "criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", - "versionEndExcluding": "91.6.1", - "matchCriteriaId": "4AE9257B-B169-42AF-82C6-EF62FDFE2110" - }, { "vulnerable": true, "criteria": "cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:*:*:*", @@ -164,7 +164,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26486", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-40xx/CVE-2024-4040.json b/CVE-2024/CVE-2024-40xx/CVE-2024-4040.json index 5b4859db8f2..338afb06bd3 100644 --- a/CVE-2024/CVE-2024-40xx/CVE-2024-4040.json +++ b/CVE-2024/CVE-2024-40xx/CVE-2024-4040.json @@ -2,8 +2,8 @@ "id": "CVE-2024-4040", "sourceIdentifier": "430a6cef-dc26-47e3-9fa8-52fb7f19644e", "published": "2024-04-22T20:15:07.803", - "lastModified": "2025-10-21T23:16:36.990", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:36:21.647", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -224,7 +224,10 @@ }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4040", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-503xx/CVE-2024-50302.json b/CVE-2024/CVE-2024-503xx/CVE-2024-50302.json index b71d0635148..a4acb44adbc 100644 --- a/CVE-2024/CVE-2024-503xx/CVE-2024-50302.json +++ b/CVE-2024/CVE-2024-503xx/CVE-2024-50302.json @@ -2,8 +2,8 @@ "id": "CVE-2024-50302", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-11-19T02:16:32.320", - "lastModified": "2025-11-03T23:17:12.847", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:36:30.660", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -101,6 +101,21 @@ } ] }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + }, { "nodes": [ { @@ -250,11 +265,17 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-50302", diff --git a/CVE-2024/CVE-2024-531xx/CVE-2024-53104.json b/CVE-2024/CVE-2024-531xx/CVE-2024-53104.json index b5df6ca31df..56ade9a9952 100644 --- a/CVE-2024/CVE-2024-531xx/CVE-2024-53104.json +++ b/CVE-2024/CVE-2024-531xx/CVE-2024-53104.json @@ -2,8 +2,8 @@ "id": "CVE-2024-53104", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2024-12-02T08:15:08.687", - "lastModified": "2025-11-03T23:17:20.637", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:36:37.883", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -86,6 +86,21 @@ } ], "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + }, { "nodes": [ { @@ -219,11 +234,17 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-53104", diff --git a/CVE-2024/CVE-2024-555xx/CVE-2024-55568.json b/CVE-2024/CVE-2024-555xx/CVE-2024-55568.json index 97dff85780b..f727a147c5e 100644 --- a/CVE-2024/CVE-2024-555xx/CVE-2024-55568.json +++ b/CVE-2024/CVE-2024-555xx/CVE-2024-55568.json @@ -2,8 +2,8 @@ "id": "CVE-2024-55568", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-20T16:15:36.133", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:11:09.347", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,508 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "43DE4D6F-D662-46F2-93BC-9AE950320BDE" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*", + "matchCriteriaId": "EE06CD56-8BFD-4208-843A-179E3E6F5C10" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C2635646-DD6A-4735-8E01-F45445584832" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AA0F8A58-71B7-4503-A03A-6FB4282D75BD" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D381478B-C638-4663-BD71-144BE4B02E46" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*", + "matchCriteriaId": "61E72146-72FE-4B54-AB79-3C665E7F016C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "64897B0D-EBF6-4BEB-BF54-ABCDBFAB45E0" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F3F328B4-0442-4748-B5EE-DD1CEE50D6CF" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "89B88BFE-3C82-498C-8EC1-5784836DB1A1" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*", + "matchCriteriaId": "9385885D-654A-496E-8029-7C6D9B077193" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "63C0D9AC-BD23-48C9-83E7-301DEC06E583" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "16D9272E-1794-48FF-B6A4-8F48395BA38E" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*", + "matchCriteriaId": "932F5FB3-5527-44D7-9DD9-EF03963E3CA3" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "1928760C-4FC4-45B0-84FF-C1105CD1DD2A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BB410A6D-642B-49AE-8B1C-EADA953A84DA" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5F18F62E-2012-442E-BE60-6E76325D1824" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0D8701B6-6989-44D1-873A-A1823BFD7CCC" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BCF6C91D-DECE-4630-85FE-C22EF2B9160A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*", + "matchCriteriaId": "87FE8214-E165-4874-BB5A-3C4298708039" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BD1A7B09-9031-4E54-A24F-3237C054166B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*", + "matchCriteriaId": "DFC68046-2F08-40D1-B158-89D8D9263541" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F1896BFF-D709-481B-AD4F-37D1A8B30C06" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_w1000_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "526A0088-BDA7-4373-8966-AEED69C1AE8A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_w1000:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A9657C28-AA6B-4C1A-ACAA-E90645CF2A73" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4BF79654-E5C6-4DFF-B33A-A78571CD300C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "801E188F-C71B-4933-9099-151A4A1B1BC5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_w930:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8D8FC82D-57C5-4F00-BDF4-4261A32C4246" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_modem_5400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CE283E70-150F-4A64-AF37-F12856C55637" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_modem_5400:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8FE405A6-E0E3-47D5-9901-B370A3AAD423" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*", + "matchCriteriaId": "CE202894-D48A-4B9E-B3BD-28529967A0B3" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "06B60F97-1320-44F5-970C-BBA29F375524" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*", + "matchCriteriaId": "72419735-076A-4E72-869F-0C7D801371C1" + } + ] + } + ] + } + ], "references": [ { "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-55568/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2024/CVE-2024-96xx/CVE-2024-9680.json b/CVE-2024/CVE-2024-96xx/CVE-2024-9680.json index dabd2ff6cd1..c101dc494e2 100644 --- a/CVE-2024/CVE-2024-96xx/CVE-2024-9680.json +++ b/CVE-2024/CVE-2024-96xx/CVE-2024-9680.json @@ -2,8 +2,8 @@ "id": "CVE-2024-9680", "sourceIdentifier": "security@mozilla.org", "published": "2024-10-09T13:15:12.090", - "lastModified": "2025-11-03T23:17:34.480", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T14:35:50.977", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -197,11 +197,17 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00006.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9680", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "US Government Resource" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-105xx/CVE-2025-10561.json b/CVE-2025/CVE-2025-105xx/CVE-2025-10561.json index e8d169e253f..4ab4b7f24fc 100644 --- a/CVE-2025/CVE-2025-105xx/CVE-2025-10561.json +++ b/CVE-2025/CVE-2025-105xx/CVE-2025-10561.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10561", "sourceIdentifier": "psirt@sick.de", "published": "2025-10-27T10:15:36.920", - "lastModified": "2025-10-27T13:19:49.063", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:12:28.310", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.5, "impactScore": 6.0 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 } ] }, @@ -47,30 +67,77 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:sick:tloc100-100_firmware:*:*:*:*:*:*:*:*", + "matchCriteriaId": "5741B085-0E6E-4A6B-8188-1C1252B1A596" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:sick:tloc100-100:-:*:*:*:*:*:*:*", + "matchCriteriaId": "224B60BD-6A7D-410A-A72E-18D0E669A39C" + } + ] + } + ] + } + ], "references": [ { "url": "https://sick.com/psirt", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "US Government Resource" + ] }, { "url": "https://www.first.org/cvss/calculator/3.1", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "Not Applicable" + ] }, { "url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf", - "source": "psirt@sick.de" + "source": "psirt@sick.de", + "tags": [ + "Product" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10920.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10920.json index 6fa059491ef..1670e7ce55b 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10920.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10920.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10920", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:33.863", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:16:40.540", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-909/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10921.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10921.json index 0be2a50b2af..ae7d1438dbf 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10921.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10921.json @@ -2,7 +2,7 @@ "id": "CVE-2025-10921", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:34.797", - "lastModified": "2025-11-03T18:15:46.783", + "lastModified": "2025-11-04T13:15:46.910", "vulnStatus": "Undergoing Analysis", "cveTags": [], "descriptions": [ @@ -45,20 +45,56 @@ "value": "CWE-122" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] } ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-910/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00021.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10922.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10922.json index 7febcbc28bf..1349c523fe9 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10922.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10922.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10922", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:34.923", - "lastModified": "2025-11-03T18:15:46.937", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:15:06.710", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -45,20 +45,71 @@ "value": "CWE-122" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] } ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/3d909166463731e94dfe62042d76225ecfc4c1e4", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-911/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10923.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10923.json index d3954d9c1f1..29a26788bcb 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10923.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10923.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10923", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:35.050", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:14:27.657", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/2d2d39f3da1d0b01ca7d71ad2b7a8725ee92ed96", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-912/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10924.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10924.json index 95dbc8d30ed..68b60de806d 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10924.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10924.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10924", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:35.180", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:14:19.067", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,37 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-913/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10925.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10925.json index cd988fbb18d..f668426fcee 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10925.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10925.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10925", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:35.300", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:14:01.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -45,16 +45,49 @@ "value": "CWE-121" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] } ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2450", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-914/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-109xx/CVE-2025-10934.json b/CVE-2025/CVE-2025-109xx/CVE-2025-10934.json index c7eb2473086..fa78c6db498 100644 --- a/CVE-2025/CVE-2025-109xx/CVE-2025-10934.json +++ b/CVE-2025/CVE-2025-109xx/CVE-2025-10934.json @@ -2,8 +2,8 @@ "id": "CVE-2025-10934", "sourceIdentifier": "zdi-disclosures@trendmicro.com", "published": "2025-10-29T20:15:35.423", - "lastModified": "2025-11-04T01:15:32.890", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:12:43.120", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,18 +47,59 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:gimp:gimp:3.0.4:*:*:*:*:*:*:*", + "matchCriteriaId": "103D75C8-35B7-4E50-B75C-2D75294CB7AC" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + } + ], "references": [ { "url": "https://gitlab.gnome.org/GNOME/gimp/-/commit/5c3e2122d53869599d77ef0f1bdece117b24fd7c", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Patch" + ] }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-978/", - "source": "zdi-disclosures@trendmicro.com" + "source": "zdi-disclosures@trendmicro.com", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/11/msg00005.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-123xx/CVE-2025-12326.json b/CVE-2025/CVE-2025-123xx/CVE-2025-12326.json index 270776df64e..97d47c6ce61 100644 --- a/CVE-2025/CVE-2025-123xx/CVE-2025-12326.json +++ b/CVE-2025/CVE-2025-123xx/CVE-2025-12326.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12326", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-27T21:15:36.520", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:59:34.933", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -118,20 +138,61 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:shawonruet:ruet_oj:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2022-10-19", + "matchCriteriaId": "A49CA863-91A0-43A6-81AF-E57886D0E879" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.330103", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.330103", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.674322", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Exploit", + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-123xx/CVE-2025-12327.json b/CVE-2025/CVE-2025-123xx/CVE-2025-12327.json index 376e493f851..47cc5367fc6 100644 --- a/CVE-2025/CVE-2025-123xx/CVE-2025-12327.json +++ b/CVE-2025/CVE-2025-123xx/CVE-2025-12327.json @@ -2,8 +2,8 @@ "id": "CVE-2025-12327", "sourceIdentifier": "cna@vuldb.com", "published": "2025-10-27T21:15:36.713", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:57:16.500", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -59,7 +59,7 @@ "cvssMetricV31": [ { "source": "cna@vuldb.com", - "type": "Primary", + "type": "Secondary", "cvssData": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", @@ -76,6 +76,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 3.4 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 } ], "cvssMetricV2": [ @@ -118,20 +138,60 @@ "value": "CWE-89" } ] + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-89" + } + ] + } + ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:shawonruet:ruet_oj:*:*:*:*:*:*:*:*", + "versionEndIncluding": "2022-10-19", + "matchCriteriaId": "A49CA863-91A0-43A6-81AF-E57886D0E879" + } + ] + } + ] } ], "references": [ { "url": "https://vuldb.com/?ctiid.330104", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Permissions Required", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?id.330104", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] }, { "url": "https://vuldb.com/?submit.674349", - "source": "cna@vuldb.com" + "source": "cna@vuldb.com", + "tags": [ + "Third Party Advisory", + "VDB Entry" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12682.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12682.json new file mode 100644 index 00000000000..cfebaed85d7 --- /dev/null +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12682.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12682", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-04T14:15:33.377", + "lastModified": "2025-11-04T14:15:33.377", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for unauthenticated attackers to upload arbitrary JavaScript files on the affected site's server which may make remote code execution possible." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-434" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset/3384711/", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6a050764-0ba6-49a4-bd71-f79e3129fc4c?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-126xx/CVE-2025-12695.json b/CVE-2025/CVE-2025-126xx/CVE-2025-12695.json new file mode 100644 index 00000000000..0f269be18bf --- /dev/null +++ b/CVE-2025/CVE-2025-126xx/CVE-2025-12695.json @@ -0,0 +1,56 @@ +{ + "id": "CVE-2025-12695", + "sourceIdentifier": "reefs@jfrog.com", + "published": "2025-11-04T14:15:34.087", + "lastModified": "2025-11-04T14:15:34.087", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the \u201cPythonInterpreter\u201d class." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "reefs@jfrog.com", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "reefs@jfrog.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-653" + } + ] + } + ], + "references": [ + { + "url": "https://research.jfrog.com/vulnerabilities/dspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652/", + "source": "reefs@jfrog.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20739.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20739.json index 0d963e96462..7460498df9b 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20739.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20739.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20739", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:43.343", - "lastModified": "2025-11-04T07:15:43.343", + "lastModified": "2025-11-04T14:15:34.250", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20741.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20741.json index 9a6a0fe828b..b8b1a950cb1 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20741.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20741.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20741", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:44.913", - "lastModified": "2025-11-04T07:15:44.913", + "lastModified": "2025-11-04T14:15:34.423", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20746.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20746.json index 5fcb58c0207..7938963cf07 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20746.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20746.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20746", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:48.700", - "lastModified": "2025-11-04T07:15:48.700", + "lastModified": "2025-11-04T14:15:34.577", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20747.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20747.json index ba14f2b3c12..73327fdc5dd 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20747.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20747.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20747", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:49.540", - "lastModified": "2025-11-04T07:15:49.540", + "lastModified": "2025-11-04T14:15:34.733", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20748.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20748.json index c9a813b0ddb..2c2c0d0bf47 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20748.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20748.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20748", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:50.343", - "lastModified": "2025-11-04T07:15:50.343", + "lastModified": "2025-11-04T14:15:34.893", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-207xx/CVE-2025-20749.json b/CVE-2025/CVE-2025-207xx/CVE-2025-20749.json index ce324a98d41..3ec4e1db5af 100644 --- a/CVE-2025/CVE-2025-207xx/CVE-2025-20749.json +++ b/CVE-2025/CVE-2025-207xx/CVE-2025-20749.json @@ -2,7 +2,7 @@ "id": "CVE-2025-20749", "sourceIdentifier": "security@mediatek.com", "published": "2025-11-04T07:15:51.240", - "lastModified": "2025-11-04T07:15:51.240", + "lastModified": "2025-11-04T14:15:35.053", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,11 +11,34 @@ "value": "In charger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915493; Issue ID: MSV-3800." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 6.7, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 0.8, + "impactScore": 5.9 + } + ] + }, "weaknesses": [ { "source": "security@mediatek.com", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", diff --git a/CVE-2025/CVE-2025-267xx/CVE-2025-26781.json b/CVE-2025/CVE-2025-267xx/CVE-2025-26781.json index 52097ae14b8..144ab457f00 100644 --- a/CVE-2025/CVE-2025-267xx/CVE-2025-26781.json +++ b/CVE-2025/CVE-2025-267xx/CVE-2025-26781.json @@ -2,8 +2,8 @@ "id": "CVE-2025-26781", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-20T16:15:36.770", - "lastModified": "2025-10-21T19:31:25.450", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T13:11:01.813", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -51,14 +51,373 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_w920_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "B6ADED27-EDAF-4FB3-8CB2-AE5F59B93641" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_w920:-:*:*:*:*:*:*:*", + "matchCriteriaId": "4BF79654-E5C6-4DFF-B33A-A78571CD300C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "43DE4D6F-D662-46F2-93BC-9AE950320BDE" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*", + "matchCriteriaId": "EE06CD56-8BFD-4208-843A-179E3E6F5C10" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "5F18F62E-2012-442E-BE60-6E76325D1824" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*", + "matchCriteriaId": "0D8701B6-6989-44D1-873A-A1823BFD7CCC" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BCF6C91D-DECE-4630-85FE-C22EF2B9160A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*", + "matchCriteriaId": "87FE8214-E165-4874-BB5A-3C4298708039" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_850_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "1928760C-4FC4-45B0-84FF-C1105CD1DD2A" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_850:-:*:*:*:*:*:*:*", + "matchCriteriaId": "BB410A6D-642B-49AE-8B1C-EADA953A84DA" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "63C0D9AC-BD23-48C9-83E7-301DEC06E583" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "C2635646-DD6A-4735-8E01-F45445584832" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*", + "matchCriteriaId": "AA0F8A58-71B7-4503-A03A-6FB4282D75BD" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D381478B-C638-4663-BD71-144BE4B02E46" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*", + "matchCriteriaId": "61E72146-72FE-4B54-AB79-3C665E7F016C" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_1480_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "64897B0D-EBF6-4BEB-BF54-ABCDBFAB45E0" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_1480:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F3F328B4-0442-4748-B5EE-DD1CEE50D6CF" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_9110_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "F1896BFF-D709-481B-AD4F-37D1A8B30C06" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_9110:-:*:*:*:*:*:*:*", + "matchCriteriaId": "E6748EF2-3C63-41CD-B3D1-4B3FEC614B40" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:modem_5400_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8102AC98-AE72-4CFD-A9FA-BD0D6E3AFB6C" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:modem_5400:-:*:*:*:*:*:*:*", + "matchCriteriaId": "D751AA7E-090D-477A-890D-3E9C895FA42E" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:modem_5123_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "045EF1AD-09AE-4A33-9CB0-E30548BF5324" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:modem_5123:-:*:*:*:*:*:*:*", + "matchCriteriaId": "65A314B5-05AD-4F3D-8371-DFDF3778A743" + } + ] + } + ] + }, + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:samsung:exynos_w930_firmware:-:*:*:*:*:*:*:*", + "matchCriteriaId": "801E188F-C71B-4933-9099-151A4A1B1BC5" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:samsung:exynos_w930:-:*:*:*:*:*:*:*", + "matchCriteriaId": "8D8FC82D-57C5-4F00-BDF4-4261A32C4246" + } + ] + } + ] + } + ], "references": [ { "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] }, { "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2025-26781/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-324xx/CVE-2025-32433.json b/CVE-2025/CVE-2025-324xx/CVE-2025-32433.json index afe94367067..69df6f4104f 100644 --- a/CVE-2025/CVE-2025-324xx/CVE-2025-32433.json +++ b/CVE-2025/CVE-2025-324xx/CVE-2025-32433.json @@ -2,8 +2,8 @@ "id": "CVE-2025-32433", "sourceIdentifier": "security-advisories@github.com", "published": "2025-04-16T22:15:14.373", - "lastModified": "2025-11-03T20:18:27.333", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:49:05.177", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -555,6 +555,21 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] } ], "references": [ @@ -623,7 +638,10 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://security.netapp.com/advisory/ntap-20250425-0001/", diff --git a/CVE-2025/CVE-2025-383xx/CVE-2025-38352.json b/CVE-2025/CVE-2025-383xx/CVE-2025-38352.json index d48934a56b9..c9ef130b1b9 100644 --- a/CVE-2025/CVE-2025-383xx/CVE-2025-38352.json +++ b/CVE-2025/CVE-2025-383xx/CVE-2025-38352.json @@ -2,8 +2,8 @@ "id": "CVE-2025-38352", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "published": "2025-07-22T08:15:23.577", - "lastModified": "2025-11-03T18:16:15.580", - "vulnStatus": "Modified", + "lastModified": "2025-11-04T14:36:42.337", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -119,6 +119,21 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] } ], "references": [ @@ -180,11 +195,19 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-38352", diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41111.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41111.json new file mode 100644 index 00000000000..6d73a4e6efe --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41111.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41111", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T13:15:34.167", + "lastModified": "2025-11-04T13:15:34.167", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'id_denuncia' in '/backend/api/buscarComentariosByDenuncia.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41112.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41112.json new file mode 100644 index 00000000000..8c1e331568f --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41112.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41112", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T13:15:34.877", + "lastModified": "2025-11-04T13:15:34.877", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'web' in '/backend/api/buscarConfiguracionParametros2.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41113.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41113.json new file mode 100644 index 00000000000..5b745498d56 --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41113.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41113", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T13:15:35.017", + "lastModified": "2025-11-04T13:15:35.017", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'id_denuncia' in '/backend/api/buscarDenunciaByPin.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-411xx/CVE-2025-41114.json b/CVE-2025/CVE-2025-411xx/CVE-2025-41114.json new file mode 100644 index 00000000000..6cd90a311c4 --- /dev/null +++ b/CVE-2025/CVE-2025-411xx/CVE-2025-41114.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41114", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T13:15:35.153", + "lastModified": "2025-11-04T13:15:35.153", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDocumentosByIdDenunciaUsuario.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-412xx/CVE-2025-41244.json b/CVE-2025/CVE-2025-412xx/CVE-2025-41244.json index 5270aa3d62d..2be22c77f95 100644 --- a/CVE-2025/CVE-2025-412xx/CVE-2025-41244.json +++ b/CVE-2025/CVE-2025-412xx/CVE-2025-41244.json @@ -2,8 +2,8 @@ "id": "CVE-2025-41244", "sourceIdentifier": "security@vmware.com", "published": "2025-09-29T17:15:30.843", - "lastModified": "2025-11-03T19:15:53.027", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T14:53:09.403", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -135,6 +135,21 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] } ], "references": [ @@ -147,7 +162,11 @@ }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00000.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://blog.nviso.eu/2025/09/29/you-name-it-vmware-elevates-it-cve-2025-41244/", diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41335.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41335.json new file mode 100644 index 00000000000..b546d7c9879 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41335.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41335", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.220", + "lastModified": "2025-11-04T14:15:35.220", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id' and ' 'id_sociedad' in '/api/buscarEmpresaById.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41336.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41336.json new file mode 100644 index 00000000000..2b73446380a --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41336.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41336", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.370", + "lastModified": "2025-11-04T14:15:35.370", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'web' in '/backend/api/buscarConfiguracionParametros.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41337.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41337.json new file mode 100644 index 00000000000..2e77fb8daf6 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41337.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41337", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.517", + "lastModified": "2025-11-04T14:15:35.517", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'web' in '/backend/api/buscarSSOParametros.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41338.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41338.json new file mode 100644 index 00000000000..21f65607ad2 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41338.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41338", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.670", + "lastModified": "2025-11-04T14:15:35.670", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarTestigoByIdDenunciaUsuario.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41339.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41339.json new file mode 100644 index 00000000000..4c9156ba1e6 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41339.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41339", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.817", + "lastModified": "2025-11-04T14:15:35.817", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'id_sociedad' in '/backend/api/buscarTipoDenuncia.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41340.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41340.json new file mode 100644 index 00000000000..27865de85f2 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41340.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41340", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:35.993", + "lastModified": "2025-11-04T14:15:35.993", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id_tp_denuncia' and 'id_sociedad' in '/backend/api/buscarTipoDenunciabyId.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41341.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41341.json new file mode 100644 index 00000000000..ca24d2743d5 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41341.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41341", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:36.133", + "lastModified": "2025-11-04T14:15:36.133", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id_denuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41342.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41342.json new file mode 100644 index 00000000000..2845ca17999 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41342.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41342", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:36.277", + "lastModified": "2025-11-04T14:15:36.277", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'id_user' in '/backend/api/buscarUsuarioId.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41343.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41343.json new file mode 100644 index 00000000000..e591f7f8431 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41343.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41343", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:36.417", + "lastModified": "2025-11-04T14:15:36.417", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'email' in '/backend/api/users/searchUserByEmail.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41344.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41344.json new file mode 100644 index 00000000000..8de03f3eaf4 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41344.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41344", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:36.560", + "lastModified": "2025-11-04T14:15:36.560", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameter 'id_archivo' in '/backend/api/verArchivo.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-413xx/CVE-2025-41345.json b/CVE-2025/CVE-2025-413xx/CVE-2025-41345.json new file mode 100644 index 00000000000..2b465a48e04 --- /dev/null +++ b/CVE-2025/CVE-2025-413xx/CVE-2025-41345.json @@ -0,0 +1,78 @@ +{ + "id": "CVE-2025-41345", + "sourceIdentifier": "cve-coordination@incibe.es", + "published": "2025-11-04T14:15:36.703", + "lastModified": "2025-11-04T14:15:36.703", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the\u00a0parameters 'id_denuncia' and 'id_user' in '/backend/api/buscarDenunciasById.php'." + } + ], + "metrics": { + "cvssMetricV40": [ + { + "source": "cve-coordination@incibe.es", + "type": "Secondary", + "cvssData": { + "version": "4.0", + "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", + "baseScore": 8.7, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "attackRequirements": "NONE", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "vulnConfidentialityImpact": "HIGH", + "vulnIntegrityImpact": "NONE", + "vulnAvailabilityImpact": "NONE", + "subConfidentialityImpact": "NONE", + "subIntegrityImpact": "NONE", + "subAvailabilityImpact": "NONE", + "exploitMaturity": "NOT_DEFINED", + "confidentialityRequirement": "NOT_DEFINED", + "integrityRequirement": "NOT_DEFINED", + "availabilityRequirement": "NOT_DEFINED", + "modifiedAttackVector": "NOT_DEFINED", + "modifiedAttackComplexity": "NOT_DEFINED", + "modifiedAttackRequirements": "NOT_DEFINED", + "modifiedPrivilegesRequired": "NOT_DEFINED", + "modifiedUserInteraction": "NOT_DEFINED", + "modifiedVulnConfidentialityImpact": "NOT_DEFINED", + "modifiedVulnIntegrityImpact": "NOT_DEFINED", + "modifiedVulnAvailabilityImpact": "NOT_DEFINED", + "modifiedSubConfidentialityImpact": "NOT_DEFINED", + "modifiedSubIntegrityImpact": "NOT_DEFINED", + "modifiedSubAvailabilityImpact": "NOT_DEFINED", + "Safety": "NOT_DEFINED", + "Automatable": "NOT_DEFINED", + "Recovery": "NOT_DEFINED", + "valueDensity": "NOT_DEFINED", + "vulnerabilityResponseEffort": "NOT_DEFINED", + "providerUrgency": "NOT_DEFINED" + } + } + ] + }, + "weaknesses": [ + { + "source": "cve-coordination@incibe.es", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-862" + } + ] + } + ], + "references": [ + { + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-canaldenunciaapp", + "source": "cve-coordination@incibe.es" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43365.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43365.json index 59b15398bdc..989b6cf7938 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43365.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43365.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43365", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:44.037", - "lastModified": "2025-11-04T02:15:44.037", + "lastModified": "2025-11-04T13:15:35.297", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26 and iPadOS 26. An unprivileged process may be able to terminate a root processes." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 2.8, + "baseSeverity": "LOW", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 1.3, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125108", diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43377.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43377.json index 0f3459b7cc1..8caf2f7d11e 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43377.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43377.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43377", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:44.810", - "lastModified": "2025-11-04T02:15:44.810", + "lastModified": "2025-11-04T14:15:36.857", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.2. An app may be able to cause a denial-of-service." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43384.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43384.json index f444e642813..d32d8d23544 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43384.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43384.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43384", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:45.387", - "lastModified": "2025-11-04T02:15:45.387", + "lastModified": "2025-11-04T14:15:37.007", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 26.1 and iPadOS 26.1, tvOS 26.1, visionOS 26.1, macOS Sequoia 15.7.2. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43387.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43387.json index 27f7e307382..1cf1aa9a36c 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43387.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43387.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43387", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:45.700", - "lastModified": "2025-11-04T02:15:45.700", + "lastModified": "2025-11-04T13:15:35.510", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.2. A malicious app may be able to gain root privileges." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-433xx/CVE-2025-43397.json b/CVE-2025/CVE-2025-433xx/CVE-2025-43397.json index a11d7958fa3..e85698ad1cf 100644 --- a/CVE-2025/CVE-2025-433xx/CVE-2025-43397.json +++ b/CVE-2025/CVE-2025-433xx/CVE-2025-43397.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43397", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:46.477", - "lastModified": "2025-11-04T02:15:46.477", + "lastModified": "2025-11-04T14:15:37.147", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to cause a denial-of-service." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43408.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43408.json index 063bbcd03db..4f32512a460 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43408.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43408.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43408", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:47.217", - "lastModified": "2025-11-04T02:15:47.217", + "lastModified": "2025-11-04T14:15:37.290", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An attacker with physical access may be able to access contacts from the lock screen." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", + "baseScore": 2.4, + "baseSeverity": "LOW", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-284" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43421.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43421.json index e336ecf144b..5c018d30a88 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43421.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43421.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43421", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:47.977", - "lastModified": "2025-11-04T02:15:47.977", + "lastModified": "2025-11-04T13:15:35.657", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "Multiple issues were addressed by disabling array allocation sinking. This issue is fixed in iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43425.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43425.json index d67368fd15c..51d2cf30b60 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43425.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43425.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43425", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:48.387", - "lastModified": "2025-11-04T02:15:48.387", + "lastModified": "2025-11-04T14:15:37.433", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43427.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43427.json index d1cda20ada6..a1fbc32cf08 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43427.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43427.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43427", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:48.600", - "lastModified": "2025-11-04T02:15:48.600", + "lastModified": "2025-11-04T13:15:35.800", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "This issue was addressed through improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, tvOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43430.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43430.json index acf86c7d2ce..5486e0bf09f 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43430.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43430.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43430", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:48.850", - "lastModified": "2025-11-04T02:15:48.850", + "lastModified": "2025-11-04T13:15:35.933", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "This issue was addressed through improved state management. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43431.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43431.json index 3177e8f2c5a..e5fcdefc881 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43431.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43431.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43431", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:48.950", - "lastModified": "2025-11-04T02:15:48.950", + "lastModified": "2025-11-04T13:15:36.070", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to memory corruption." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43433.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43433.json index a80c13487bf..ca4485a6aa6 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43433.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43433.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43433", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:49.160", - "lastModified": "2025-11-04T02:15:49.160", + "lastModified": "2025-11-04T14:15:37.577", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,30 @@ "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to memory corruption." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43434.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43434.json index 7be5001a3b5..4c4e39de40b 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43434.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43434.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43434", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:49.260", - "lastModified": "2025-11-04T02:15:49.260", + "lastModified": "2025-11-04T14:15:37.713", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43435.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43435.json index f7f0f73af37..77b6eed05e6 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43435.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43435.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43435", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:49.363", - "lastModified": "2025-11-04T02:15:49.363", + "lastModified": "2025-11-04T14:15:37.860", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43438.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43438.json index bd001e18629..d61adfa0682 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43438.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43438.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43438", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:49.563", - "lastModified": "2025-11-04T02:15:49.563", + "lastModified": "2025-11-04T14:15:38.007", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43441.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43441.json index af34868d083..d0995b70e5b 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43441.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43441.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43441", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:49.863", - "lastModified": "2025-11-04T02:15:49.863", + "lastModified": "2025-11-04T13:15:36.210", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "The issue was addressed with improved memory handling. This issue is fixed in iOS 26.1 and iPadOS 26.1, tvOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43445.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43445.json index 16ab9c3be8a..fc04e025581 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43445.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43445.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43445", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:50.260", - "lastModified": "2025-11-04T02:15:50.260", + "lastModified": "2025-11-04T14:15:38.153", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in visionOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", + "baseScore": 4.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "LOW" + }, + "exploitabilityScore": 2.8, + "impactScore": 1.4 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43446.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43446.json index 6915a4dc6af..f28b5dbe32f 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43446.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43446.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43446", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:50.353", - "lastModified": "2025-11-04T02:15:50.353", + "lastModified": "2025-11-04T13:15:36.353", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to modify protected parts of the file system." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "HIGH", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-59" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43457.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43457.json index 4bd0382ab2c..5347ff6a633 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43457.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43457.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43457", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:51.120", - "lastModified": "2025-11-04T02:15:51.120", + "lastModified": "2025-11-04T13:15:36.527", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Processing maliciously crafted web content may lead to an unexpected Safari crash." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125632", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43459.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43459.json index d8ca47f3877..d7703f2d72d 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43459.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43459.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43459", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:51.313", - "lastModified": "2025-11-04T02:15:51.313", + "lastModified": "2025-11-04T14:15:38.297", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An authentication issue was addressed with improved state management. This issue is fixed in watchOS 26.1. An attacker with physical access to a locked Apple Watch may be able to view Live Voicemail." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 4.6, + "baseSeverity": "MEDIUM", + "attackVector": "PHYSICAL", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 0.9, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-863" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125639", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43472.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43472.json index 67a334f68fc..81275c083d8 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43472.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43472.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43472", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:51.810", - "lastModified": "2025-11-04T02:15:51.810", + "lastModified": "2025-11-04T14:15:38.433", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to gain root privileges." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-20" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43474.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43474.json index 41d59be330a..593e8cb63b8 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43474.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43474.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43474", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:51.910", - "lastModified": "2025-11-04T02:15:51.910", + "lastModified": "2025-11-04T14:15:38.580", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to cause unexpected system termination or read kernel memory." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-125" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-434xx/CVE-2025-43478.json b/CVE-2025/CVE-2025-434xx/CVE-2025-43478.json index 64cd85723c1..464e12ef289 100644 --- a/CVE-2025/CVE-2025-434xx/CVE-2025-43478.json +++ b/CVE-2025/CVE-2025-434xx/CVE-2025-43478.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43478", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:52.207", - "lastModified": "2025-11-04T02:15:52.207", + "lastModified": "2025-11-04T14:15:38.717", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.8.2, macOS Sequoia 15.7.2. An app may be able to cause unexpected system termination." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-416" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125635", diff --git a/CVE-2025/CVE-2025-435xx/CVE-2025-43504.json b/CVE-2025/CVE-2025-435xx/CVE-2025-43504.json index 9f8082daca4..b87fadcd06e 100644 --- a/CVE-2025/CVE-2025-435xx/CVE-2025-43504.json +++ b/CVE-2025/CVE-2025-435xx/CVE-2025-43504.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43504", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:53.370", - "lastModified": "2025-11-04T02:15:53.370", + "lastModified": "2025-11-04T13:15:36.710", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "A buffer overflow was addressed with improved bounds checking. This issue is fixed in Xcode 26.1. A user in a privileged network position may be able to cause a denial-of-service." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 4.9, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "HIGH", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.2, + "impactScore": 3.6 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-119" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125641", diff --git a/CVE-2025/CVE-2025-435xx/CVE-2025-43505.json b/CVE-2025/CVE-2025-435xx/CVE-2025-43505.json index 2b2f50283fa..46b2984d703 100644 --- a/CVE-2025/CVE-2025-435xx/CVE-2025-43505.json +++ b/CVE-2025/CVE-2025-435xx/CVE-2025-43505.json @@ -2,7 +2,7 @@ "id": "CVE-2025-43505", "sourceIdentifier": "product-security@apple.com", "published": "2025-11-04T02:15:53.467", - "lastModified": "2025-11-04T02:15:53.467", + "lastModified": "2025-11-04T14:15:38.857", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -11,7 +11,42 @@ "value": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in Xcode 26.1. Processing a maliciously crafted file may lead to heap corruption." } ], - "metrics": {}, + "metrics": { + "cvssMetricV31": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "type": "Secondary", + "description": [ + { + "lang": "en", + "value": "CWE-787" + } + ] + } + ], "references": [ { "url": "https://support.apple.com/en-us/125641", diff --git a/CVE-2025/CVE-2025-439xx/CVE-2025-43994.json b/CVE-2025/CVE-2025-439xx/CVE-2025-43994.json index 1fba7d64115..c02da9d6b01 100644 --- a/CVE-2025/CVE-2025-439xx/CVE-2025-43994.json +++ b/CVE-2025/CVE-2025-439xx/CVE-2025-43994.json @@ -2,8 +2,8 @@ "id": "CVE-2025-43994", "sourceIdentifier": "security_alert@emc.com", "published": "2025-10-24T15:15:38.187", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:31:14.497", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 3.9, "impactScore": 4.7 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 7.5, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 3.6 } ] }, @@ -47,10 +67,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2020", + "matchCriteriaId": "F19B1117-55A1-46EC-A046-BE3B99EC4900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1:*:*:*:*:*:*", + "matchCriteriaId": "567442CC-381B-43A1-ADE9-AE00075021D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.10:*:*:*:*:*:*", + "matchCriteriaId": "B978EFB1-877F-4091-A401-F1861229E033" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "263E78BD-D8C0-480F-9EED-D5496708CFCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:*", + "matchCriteriaId": "1055DB85-9105-44E5-9CEB-509C7F7041FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-439xx/CVE-2025-43995.json b/CVE-2025/CVE-2025-439xx/CVE-2025-43995.json index dcaa9577741..8ccac5579e0 100644 --- a/CVE-2025/CVE-2025-439xx/CVE-2025-43995.json +++ b/CVE-2025/CVE-2025-439xx/CVE-2025-43995.json @@ -2,8 +2,8 @@ "id": "CVE-2025-43995", "sourceIdentifier": "security_alert@emc.com", "published": "2025-10-24T15:15:38.380", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:43:05.420", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2020", + "matchCriteriaId": "F19B1117-55A1-46EC-A046-BE3B99EC4900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1:*:*:*:*:*:*", + "matchCriteriaId": "567442CC-381B-43A1-ADE9-AE00075021D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.10:*:*:*:*:*:*", + "matchCriteriaId": "B978EFB1-877F-4091-A401-F1861229E033" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "263E78BD-D8C0-480F-9EED-D5496708CFCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:*", + "matchCriteriaId": "1055DB85-9105-44E5-9CEB-509C7F7041FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-464xx/CVE-2025-46425.json b/CVE-2025/CVE-2025-464xx/CVE-2025-46425.json index 0d1d8312332..774eda21790 100644 --- a/CVE-2025/CVE-2025-464xx/CVE-2025-46425.json +++ b/CVE-2025/CVE-2025-464xx/CVE-2025-46425.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46425", "sourceIdentifier": "security_alert@emc.com", "published": "2025-10-24T14:15:42.337", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:26:41.313", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,51 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2020", + "matchCriteriaId": "F19B1117-55A1-46EC-A046-BE3B99EC4900" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1:*:*:*:*:*:*", + "matchCriteriaId": "567442CC-381B-43A1-ADE9-AE00075021D4" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.10:*:*:*:*:*:*", + "matchCriteriaId": "B978EFB1-877F-4091-A401-F1861229E033" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.2:*:*:*:*:*:*", + "matchCriteriaId": "263E78BD-D8C0-480F-9EED-D5496708CFCD" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:storage_manager:2020:r1.20:*:*:*:*:*:*", + "matchCriteriaId": "1055DB85-9105-44E5-9CEB-509C7F7041FE" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000382899/dsa-2025-393-security-update-for-storage-center-dell-storage-manager-vulnerabilities", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-466xx/CVE-2025-46602.json b/CVE-2025/CVE-2025-466xx/CVE-2025-46602.json index 4d3c6b2b240..215c4c2d0a9 100644 --- a/CVE-2025/CVE-2025-466xx/CVE-2025-46602.json +++ b/CVE-2025/CVE-2025-466xx/CVE-2025-46602.json @@ -2,8 +2,8 @@ "id": "CVE-2025-46602", "sourceIdentifier": "security_alert@emc.com", "published": "2025-10-27T19:16:03.837", - "lastModified": "2025-10-30T15:05:50.613", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:49:20.907", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 0.8, "impactScore": 3.6 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", + "baseScore": 5.5, + "baseSeverity": "MEDIUM", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "NONE", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 1.8, + "impactScore": 3.6 } ] }, @@ -47,10 +67,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:dell:supportassist_os_recovery:*:*:*:*:*:*:*:*", + "versionEndExcluding": "5.5.15.0", + "matchCriteriaId": "14E62EB3-0687-4A17-A947-B681BFB7F3A2" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.dell.com/support/kbdoc/en-us/000382443/dsa-2025-403", - "source": "security_alert@emc.com" + "source": "security_alert@emc.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-483xx/CVE-2025-48384.json b/CVE-2025/CVE-2025-483xx/CVE-2025-48384.json index 077d3d4f765..23b21c28aeb 100644 --- a/CVE-2025/CVE-2025-483xx/CVE-2025-48384.json +++ b/CVE-2025/CVE-2025-483xx/CVE-2025-48384.json @@ -2,8 +2,8 @@ "id": "CVE-2025-48384", "sourceIdentifier": "security-advisories@github.com", "published": "2025-07-08T19:15:42.800", - "lastModified": "2025-11-03T19:16:06.623", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T14:50:32.750", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -124,6 +124,37 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*", + "versionEndExcluding": "26.0", + "matchCriteriaId": "37CC7F40-CC3A-4AEB-9260-B621FE64735A" + } + ] + } + ] } ], "references": [ @@ -136,11 +167,19 @@ }, { "url": "http://seclists.org/fulldisclosure/2025/Sep/60", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00003.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48384", diff --git a/CVE-2025/CVE-2025-537xx/CVE-2025-53701.json b/CVE-2025/CVE-2025-537xx/CVE-2025-53701.json index 641ee408b3b..d7fcb36ff03 100644 --- a/CVE-2025/CVE-2025-537xx/CVE-2025-53701.json +++ b/CVE-2025/CVE-2025-537xx/CVE-2025-53701.json @@ -2,8 +2,8 @@ "id": "CVE-2025-53701", "sourceIdentifier": "cvd@cert.pl", "published": "2025-10-23T14:15:39.107", - "lastModified": "2025-10-27T13:20:33.350", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:10:52.810", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cvd@cert.pl", @@ -62,6 +62,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", + "baseScore": 6.1, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 2.8, + "impactScore": 2.7 + } ] }, "weaknesses": [ @@ -76,10 +98,42 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:vimicro:vs-ipc1002_firmware:1.1.0.18:*:*:*:*:*:*:*", + "matchCriteriaId": "BFF3572F-8791-43CE-A735-95568316F29B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:vimicro:vs-ipc1002:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7B7DA5F-FE1C-461D-A957-60AB93BAD83F" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/10/CVE-2025-53701", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-537xx/CVE-2025-53702.json b/CVE-2025/CVE-2025-537xx/CVE-2025-53702.json index d58dfb96f1b..1c0de2cc92a 100644 --- a/CVE-2025/CVE-2025-537xx/CVE-2025-53702.json +++ b/CVE-2025/CVE-2025-537xx/CVE-2025-53702.json @@ -2,8 +2,8 @@ "id": "CVE-2025-53702", "sourceIdentifier": "cvd@cert.pl", "published": "2025-10-23T14:15:39.267", - "lastModified": "2025-10-27T13:20:33.350", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:10:40.083", + "vulnStatus": "Analyzed", "cveTags": [ { "sourceIdentifier": "cvd@cert.pl", @@ -62,6 +62,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", + "baseScore": 6.5, + "baseSeverity": "MEDIUM", + "attackVector": "ADJACENT_NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "NONE", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 3.6 + } ] }, "weaknesses": [ @@ -76,10 +98,42 @@ ] } ], + "configurations": [ + { + "operator": "AND", + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:vimicro:vs-ipc1002_firmware:1.1.0.18:*:*:*:*:*:*:*", + "matchCriteriaId": "BFF3572F-8791-43CE-A735-95568316F29B" + } + ] + }, + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": false, + "criteria": "cpe:2.3:h:vimicro:vs-ipc1002:-:*:*:*:*:*:*:*", + "matchCriteriaId": "A7B7DA5F-FE1C-461D-A957-60AB93BAD83F" + } + ] + } + ] + } + ], "references": [ { "url": "https://cert.pl/en/posts/2025/10/CVE-2025-53701", - "source": "cvd@cert.pl" + "source": "cvd@cert.pl", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-560xx/CVE-2025-56007.json b/CVE-2025/CVE-2025-560xx/CVE-2025-56007.json index d52b0e67496..1aff21e4e9c 100644 --- a/CVE-2025/CVE-2025-560xx/CVE-2025-56007.json +++ b/CVE-2025/CVE-2025-560xx/CVE-2025-56007.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56007", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-23T15:15:39.097", - "lastModified": "2025-10-27T13:20:33.350", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:10:02.530", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.3", + "matchCriteriaId": "31463ACE-A8BB-4E5D-AA71-1BC479DE8AA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://keenetic.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://keenetic.com/global/security#october-2025-web-api-vulnerabilities", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-560xx/CVE-2025-56008.json b/CVE-2025/CVE-2025-560xx/CVE-2025-56008.json index 8f58d3d07b0..bf3bd869a15 100644 --- a/CVE-2025/CVE-2025-560xx/CVE-2025-56008.json +++ b/CVE-2025/CVE-2025-560xx/CVE-2025-56008.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56008", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-23T15:15:39.213", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:09:54.770", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.3", + "matchCriteriaId": "31463ACE-A8BB-4E5D-AA71-1BC479DE8AA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://keenetic.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://keenetic.com/global/security#october-2025-web-api-vulnerabilities", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-560xx/CVE-2025-56009.json b/CVE-2025/CVE-2025-560xx/CVE-2025-56009.json index f84ceb4cd12..75bdcb1e2c8 100644 --- a/CVE-2025/CVE-2025-560xx/CVE-2025-56009.json +++ b/CVE-2025/CVE-2025-560xx/CVE-2025-56009.json @@ -2,8 +2,8 @@ "id": "CVE-2025-56009", "sourceIdentifier": "cve@mitre.org", "published": "2025-10-23T15:15:39.347", - "lastModified": "2025-10-27T13:20:15.637", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:09:44.150", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,14 +47,38 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:keenetic:keeneticos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "4.3", + "matchCriteriaId": "31463ACE-A8BB-4E5D-AA71-1BC479DE8AA4" + } + ] + } + ] + } + ], "references": [ { "url": "https://keenetic.com/", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Product" + ] }, { "url": "https://keenetic.com/global/security#october-2025-web-api-vulnerabilities", - "source": "cve@mitre.org" + "source": "cve@mitre.org", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62782.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62782.json index d0c13102878..3370c3e0c01 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62782.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62782.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62782", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-27T21:15:38.287", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:23:24.003", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,18 +91,46 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phoenix616:inventorygui:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.6.4", + "matchCriteriaId": "551F56D7-2126-42AF-A832-F53E8126FECE" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Phoenix616/InventoryGui/commit/00e684bd689ebc60bcb5b83ce4ef3c5a01778494", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Phoenix616/InventoryGui/issues/51", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Issue Tracking" + ] }, { "url": "https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-rgvh-4m82-fvjq", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch", + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-627xx/CVE-2025-62784.json b/CVE-2025/CVE-2025-627xx/CVE-2025-62784.json index d01a285e2cb..262b7c7005f 100644 --- a/CVE-2025/CVE-2025-627xx/CVE-2025-62784.json +++ b/CVE-2025/CVE-2025-627xx/CVE-2025-62784.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62784", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-27T21:15:38.593", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T14:59:16.450", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", + "baseScore": 5.3, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "NONE", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.9, + "impactScore": 1.4 + } ] }, "weaknesses": [ @@ -69,14 +91,39 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:phoenix616:inventorygui:*:*:*:*:*:*:*:*", + "versionEndExcluding": "1.6.5", + "matchCriteriaId": "817A9CE5-215C-4532-AC09-C9492E97F1A0" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/Phoenix616/InventoryGui/commit/690fc91d137c6cc04f6ed3a89449050964dd8cb9", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/Phoenix616/InventoryGui/security/advisories/GHSA-7whh-79j3-7c55", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-628xx/CVE-2025-62801.json b/CVE-2025/CVE-2025-628xx/CVE-2025-62801.json index a4adff7c6dc..12d3707a01f 100644 --- a/CVE-2025/CVE-2025-628xx/CVE-2025-62801.json +++ b/CVE-2025/CVE-2025-628xx/CVE-2025-62801.json @@ -2,8 +2,8 @@ "id": "CVE-2025-62801", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-28T22:15:37.950", - "lastModified": "2025-10-30T15:05:32.197", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:24:32.793", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 7.8, + "baseSeverity": "HIGH", + "attackVector": "LOCAL", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 1.8, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,40 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jlowin:fastmcp:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.13.0", + "matchCriteriaId": "938DF638-7486-4DDB-A950-1A16D8FCCEA1" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/jlowin/fastmcp/security/advisories/GHSA-rj5c-58rq-j5g5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Exploit", + "Third Party Advisory" + ] }, { "url": "https://github.com/jlowin/fastmcp/security/advisories/GHSA-rj5c-58rq-j5g5", - "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0" + "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", + "tags": [ + "Exploit", + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64101.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64101.json index dc889e2241a..a15c1941ea6 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64101.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64101.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64101", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-29T19:15:38.763", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:20:04.240", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -32,6 +32,26 @@ }, "exploitabilityScore": 2.8, "impactScore": 5.2 + }, + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", + "baseScore": 8.8, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "REQUIRED", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.8, + "impactScore": 5.9 } ] }, @@ -51,14 +71,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.71.18", + "matchCriteriaId": "CC5B40B7-D194-4612-84F5-9EE0477D1492" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", + "versionEndExcluding": "3.4.3", + "matchCriteriaId": "71F16C15-7BC0-48BF-94CA-A0675AE8144E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0.0", + "versionEndExcluding": "4.6.0", + "matchCriteriaId": "EBBE21CE-7517-4843-AD68-281A0254BC26" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/zitadel/zitadel/commit/72a5c33e6ac302b978d564bd049f9364f5a989b1", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/zitadel/zitadel/security/advisories/GHSA-mwmh-7px9-4c23", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64102.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64102.json index b4c01360e57..86a2e3da82a 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64102.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64102.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64102", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-29T19:15:38.927", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:18:57.337", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -69,14 +91,52 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.71.18", + "matchCriteriaId": "CC5B40B7-D194-4612-84F5-9EE0477D1492" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", + "versionEndExcluding": "3.4.3", + "matchCriteriaId": "71F16C15-7BC0-48BF-94CA-A0675AE8144E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0.0", + "versionEndExcluding": "4.6.0", + "matchCriteriaId": "EBBE21CE-7517-4843-AD68-281A0254BC26" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/zitadel/zitadel/commit/b8db8cdf9cc8ea13f461758aef12457f8b7d972a", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/zitadel/zitadel/security/advisories/GHSA-xrw9-r35x-x878", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64103.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64103.json index a68cf3b77ff..fd6a9323238 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64103.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64103.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64103", "sourceIdentifier": "security-advisories@github.com", "published": "2025-10-29T19:15:39.067", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:17:27.277", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -55,6 +55,28 @@ "providerUrgency": "NOT_DEFINED" } } + ], + "cvssMetricV31": [ + { + "source": "nvd@nist.gov", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 9.8, + "baseSeverity": "CRITICAL", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 3.9, + "impactScore": 5.9 + } ] }, "weaknesses": [ @@ -73,14 +95,67 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.53.6", + "versionEndIncluding": "2.53.9", + "matchCriteriaId": "98F3C323-CBEA-4E27-92F2-6CB4976186A3" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.54.3", + "versionEndIncluding": "2.54.10", + "matchCriteriaId": "19218EA3-8DE3-4182-8109-3B87839092D1" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "2.55.0", + "versionEndExcluding": "2.71.18", + "matchCriteriaId": "0DF8B5A2-B574-4E0E-B6A6-6D08F2FB9300" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "3.0.0", + "versionEndExcluding": "3.4.3", + "matchCriteriaId": "71F16C15-7BC0-48BF-94CA-A0675AE8144E" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:a:zitadel:zitadel:*:*:*:*:*:*:*:*", + "versionStartIncluding": "4.0.0", + "versionEndExcluding": "4.6.0", + "matchCriteriaId": "EBBE21CE-7517-4843-AD68-281A0254BC26" + } + ] + } + ] + } + ], "references": [ { "url": "https://github.com/zitadel/zitadel/commit/b284f8474eed0cba531905101619e7ae7963156b", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Patch" + ] }, { "url": "https://github.com/zitadel/zitadel/security/advisories/GHSA-cfjq-28r2-4jv5", - "source": "security-advisories@github.com" + "source": "security-advisories@github.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64136.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64136.json index 77c8d41c8df..74e09b0e4fc 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64136.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64136.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64136", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:57.930", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:23:36.440", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:themis:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "1.4.1", + "matchCriteriaId": "68468B62-E7D1-4527-A7BB-D0E6254D5DAE" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3517", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64137.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64137.json index e6ddb56c0b0..815e5e9636c 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64137.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64137.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64137", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.087", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:23:27.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:themis:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "1.4.1", + "matchCriteriaId": "68468B62-E7D1-4527-A7BB-D0E6254D5DAE" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3517", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64138.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64138.json index b312f2443f5..9471a22594b 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64138.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64138.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64138", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.237", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:23:11.260", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:start_windocks_container:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "1.4", + "matchCriteriaId": "437431B8-691D-4DE8-8F3E-409BA371ADF6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3531", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64139.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64139.json index e9c46baf238..da397a4b071 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64139.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64139.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64139", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.390", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:23:00.210", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:start_windocks_container:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "1.4", + "matchCriteriaId": "437431B8-691D-4DE8-8F3E-409BA371ADF6" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3531", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64141.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64141.json index 1c65dd29c43..4d474e292b5 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64141.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64141.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64141", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.690", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:22:36.960", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:nexus_task_runner:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "0.9.2", + "matchCriteriaId": "EF9BAB0C-78DC-434E-879B-95FABADA874B" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3550", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64142.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64142.json index fbc138af362..c79ef9c406d 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64142.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64142.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64142", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.843", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:22:24.583", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:nexus_task_runner:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "0.9.2", + "matchCriteriaId": "EF9BAB0C-78DC-434E-879B-95FABADA874B" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3550", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64143.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64143.json index e818d6202e0..e8d1c11cf90 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64143.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64143.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64143", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:58.993", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:22:14.023", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:openshift_pipeline:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "1.0.57", + "matchCriteriaId": "D163A2B0-4F41-4A68-B2B4-36E4387DF88C" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3553", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64144.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64144.json index 3311f9a3422..da9bd8d86dc 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64144.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64144.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64144", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.143", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:51.753", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:byteguard_build_actions:1.0:*:*:*:*:jenkins:*:*", + "matchCriteriaId": "68BCABA0-96C0-4433-AA7A-A0377572DADA" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3560", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64145.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64145.json index 1a2665faa4f..0d1eeaceb68 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64145.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64145.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64145", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.300", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:59.470", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:byteguard_build_actions:1.0:*:*:*:*:jenkins:*:*", + "matchCriteriaId": "68BCABA0-96C0-4433-AA7A-A0377572DADA" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3560", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64146.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64146.json index d0f80eb445d..40c4a829b7c 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64146.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64146.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64146", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.457", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:42.520", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:curseforge_publisher:1.0:*:*:*:*:jenkins:*:*", + "matchCriteriaId": "5AA75189-8898-4173-87E5-818B6D713C95" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3562", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64147.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64147.json index 3346eb164e1..6595860762b 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64147.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64147.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64147", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.553", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:33.047", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,30 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:curseforge_publisher:1.0:*:*:*:*:jenkins:*:*", + "matchCriteriaId": "5AA75189-8898-4173-87E5-818B6D713C95" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3562", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64148.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64148.json index d2b55bd6ff5..1f2ff2594c3 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64148.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64148.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64148", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.650", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:20.757", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:publish_to_bitbucket:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "0.4", + "matchCriteriaId": "AFB047CD-0168-404D-9C45-E750E3F85763" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3570", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64149.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64149.json index 8fc9ee65c1d..eca39691d6b 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64149.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64149.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64149", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.743", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:21:08.243", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:publish_to_bitbucket:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "0.4", + "matchCriteriaId": "AFB047CD-0168-404D-9C45-E750E3F85763" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3576", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Third Party Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-641xx/CVE-2025-64150.json b/CVE-2025/CVE-2025-641xx/CVE-2025-64150.json index 3ac9a1da9ca..ee3ee83730d 100644 --- a/CVE-2025/CVE-2025-641xx/CVE-2025-64150.json +++ b/CVE-2025/CVE-2025-641xx/CVE-2025-64150.json @@ -2,8 +2,8 @@ "id": "CVE-2025-64150", "sourceIdentifier": "jenkinsci-cert@googlegroups.com", "published": "2025-10-29T14:15:59.837", - "lastModified": "2025-10-30T15:03:13.440", - "vulnStatus": "Awaiting Analysis", + "lastModified": "2025-11-04T13:20:49.617", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -47,10 +47,31 @@ ] } ], + "configurations": [ + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:jenkins:publish_to_bitbucket:*:*:*:*:*:jenkins:*:*", + "versionEndIncluding": "0.4", + "matchCriteriaId": "AFB047CD-0168-404D-9C45-E750E3F85763" + } + ] + } + ] + } + ], "references": [ { "url": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3576", - "source": "jenkinsci-cert@googlegroups.com" + "source": "jenkinsci-cert@googlegroups.com", + "tags": [ + "Vendor Advisory" + ] } ] } \ No newline at end of file diff --git a/CVE-2025/CVE-2025-65xx/CVE-2025-6558.json b/CVE-2025/CVE-2025-65xx/CVE-2025-6558.json index ece3f9c116e..c2366800822 100644 --- a/CVE-2025/CVE-2025-65xx/CVE-2025-6558.json +++ b/CVE-2025/CVE-2025-65xx/CVE-2025-6558.json @@ -2,8 +2,8 @@ "id": "CVE-2025-6558", "sourceIdentifier": "chrome-cve-admin@google.com", "published": "2025-07-15T18:15:24.533", - "lastModified": "2025-11-03T20:19:19.597", - "vulnStatus": "Undergoing Analysis", + "lastModified": "2025-11-04T14:48:28.100", + "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [ { @@ -71,6 +71,67 @@ ] } ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", + "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED" + } + ] + } + ] + }, + { + "nodes": [ + { + "operator": "OR", + "negate": false, + "cpeMatch": [ + { + "vulnerable": true, + "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", + "versionEndExcluding": "18.6", + "matchCriteriaId": "969AD7A8-5CCF-4607-BBE8-E06E642A170C" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", + "versionEndExcluding": "18.6", + "matchCriteriaId": "8ED4015E-C707-4A91-86B3-23100E0DFA8F" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", + "versionEndExcluding": "18.6", + "matchCriteriaId": "BD9D42A7-DE2A-4D5A-8C7B-002A60148483" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "15.6", + "matchCriteriaId": "077E4BB7-4A8B-4D18-BCD7-2938A2B8B9C8" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "2.6", + "matchCriteriaId": "EADBC0BD-ECAC-4E0A-B490-24649AFE5355" + }, + { + "vulnerable": true, + "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", + "versionEndExcluding": "11.6", + "matchCriteriaId": "35D9C2D7-6120-4631-8D0B-259641DFD85B" + } + ] + } + ] } ], "references": [ @@ -91,27 +152,46 @@ }, { "url": "http://seclists.org/fulldisclosure/2025/Aug/0", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/30", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/32", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/35", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "http://seclists.org/fulldisclosure/2025/Jul/37", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Third Party Advisory" + ] }, { "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00015.html", - "source": "af854a3a-2127-422b-91ae-364da2661108" + "source": "af854a3a-2127-422b-91ae-364da2661108", + "tags": [ + "Mailing List", + "Third Party Advisory" + ] }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6558", diff --git a/README.md b/README.md index aa32c152a0c..7f4eba8d324 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-04T13:00:11.467684+00:00 +2025-11-04T15:00:12.738680+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-04T12:15:37.120000+00:00 +2025-11-04T14:59:16.450000+00:00 ``` ### Last Data Feed Release @@ -33,27 +33,61 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -110919 +110981 ``` ### CVEs added in the last Commit -Recently added CVEs: `3` +Recently added CVEs: `17` -- [CVE-2025-11690](CVE-2025/CVE-2025-116xx/CVE-2025-11690.json) (`2025-11-04T11:15:37.573`) -- [CVE-2025-12045](CVE-2025/CVE-2025-120xx/CVE-2025-12045.json) (`2025-11-04T12:15:35.960`) -- [CVE-2025-12493](CVE-2025/CVE-2025-124xx/CVE-2025-12493.json) (`2025-11-04T12:15:36.957`) +- [CVE-2025-12682](CVE-2025/CVE-2025-126xx/CVE-2025-12682.json) (`2025-11-04T14:15:33.377`) +- [CVE-2025-12695](CVE-2025/CVE-2025-126xx/CVE-2025-12695.json) (`2025-11-04T14:15:34.087`) +- [CVE-2025-41111](CVE-2025/CVE-2025-411xx/CVE-2025-41111.json) (`2025-11-04T13:15:34.167`) +- [CVE-2025-41112](CVE-2025/CVE-2025-411xx/CVE-2025-41112.json) (`2025-11-04T13:15:34.877`) +- [CVE-2025-41113](CVE-2025/CVE-2025-411xx/CVE-2025-41113.json) (`2025-11-04T13:15:35.017`) +- [CVE-2025-41114](CVE-2025/CVE-2025-411xx/CVE-2025-41114.json) (`2025-11-04T13:15:35.153`) +- [CVE-2025-41335](CVE-2025/CVE-2025-413xx/CVE-2025-41335.json) (`2025-11-04T14:15:35.220`) +- [CVE-2025-41336](CVE-2025/CVE-2025-413xx/CVE-2025-41336.json) (`2025-11-04T14:15:35.370`) +- [CVE-2025-41337](CVE-2025/CVE-2025-413xx/CVE-2025-41337.json) (`2025-11-04T14:15:35.517`) +- [CVE-2025-41338](CVE-2025/CVE-2025-413xx/CVE-2025-41338.json) (`2025-11-04T14:15:35.670`) +- [CVE-2025-41339](CVE-2025/CVE-2025-413xx/CVE-2025-41339.json) (`2025-11-04T14:15:35.817`) +- [CVE-2025-41340](CVE-2025/CVE-2025-413xx/CVE-2025-41340.json) (`2025-11-04T14:15:35.993`) +- [CVE-2025-41341](CVE-2025/CVE-2025-413xx/CVE-2025-41341.json) (`2025-11-04T14:15:36.133`) +- [CVE-2025-41342](CVE-2025/CVE-2025-413xx/CVE-2025-41342.json) (`2025-11-04T14:15:36.277`) +- [CVE-2025-41343](CVE-2025/CVE-2025-413xx/CVE-2025-41343.json) (`2025-11-04T14:15:36.417`) +- [CVE-2025-41344](CVE-2025/CVE-2025-413xx/CVE-2025-41344.json) (`2025-11-04T14:15:36.560`) +- [CVE-2025-41345](CVE-2025/CVE-2025-413xx/CVE-2025-41345.json) (`2025-11-04T14:15:36.703`) ### CVEs modified in the last Commit -Recently modified CVEs: `5` +Recently modified CVEs: `87` -- [CVE-2025-11561](CVE-2025/CVE-2025-115xx/CVE-2025-11561.json) (`2025-11-04T11:15:36.200`) -- [CVE-2025-12683](CVE-2025/CVE-2025-126xx/CVE-2025-12683.json) (`2025-11-04T12:15:37.120`) -- [CVE-2025-62229](CVE-2025/CVE-2025-622xx/CVE-2025-62229.json) (`2025-11-04T11:15:38.157`) -- [CVE-2025-62230](CVE-2025/CVE-2025-622xx/CVE-2025-62230.json) (`2025-11-04T11:15:38.327`) -- [CVE-2025-62231](CVE-2025/CVE-2025-622xx/CVE-2025-62231.json) (`2025-11-04T11:15:38.587`) +- [CVE-2025-53702](CVE-2025/CVE-2025-537xx/CVE-2025-53702.json) (`2025-11-04T13:10:40.083`) +- [CVE-2025-56007](CVE-2025/CVE-2025-560xx/CVE-2025-56007.json) (`2025-11-04T13:10:02.530`) +- [CVE-2025-56008](CVE-2025/CVE-2025-560xx/CVE-2025-56008.json) (`2025-11-04T13:09:54.770`) +- [CVE-2025-56009](CVE-2025/CVE-2025-560xx/CVE-2025-56009.json) (`2025-11-04T13:09:44.150`) +- [CVE-2025-62782](CVE-2025/CVE-2025-627xx/CVE-2025-62782.json) (`2025-11-04T13:23:24.003`) +- [CVE-2025-62784](CVE-2025/CVE-2025-627xx/CVE-2025-62784.json) (`2025-11-04T14:59:16.450`) +- [CVE-2025-62801](CVE-2025/CVE-2025-628xx/CVE-2025-62801.json) (`2025-11-04T13:24:32.793`) +- [CVE-2025-64101](CVE-2025/CVE-2025-641xx/CVE-2025-64101.json) (`2025-11-04T13:20:04.240`) +- [CVE-2025-64102](CVE-2025/CVE-2025-641xx/CVE-2025-64102.json) (`2025-11-04T13:18:57.337`) +- [CVE-2025-64103](CVE-2025/CVE-2025-641xx/CVE-2025-64103.json) (`2025-11-04T13:17:27.277`) +- [CVE-2025-64136](CVE-2025/CVE-2025-641xx/CVE-2025-64136.json) (`2025-11-04T13:23:36.440`) +- [CVE-2025-64137](CVE-2025/CVE-2025-641xx/CVE-2025-64137.json) (`2025-11-04T13:23:27.470`) +- [CVE-2025-64138](CVE-2025/CVE-2025-641xx/CVE-2025-64138.json) (`2025-11-04T13:23:11.260`) +- [CVE-2025-64139](CVE-2025/CVE-2025-641xx/CVE-2025-64139.json) (`2025-11-04T13:23:00.210`) +- [CVE-2025-64141](CVE-2025/CVE-2025-641xx/CVE-2025-64141.json) (`2025-11-04T13:22:36.960`) +- [CVE-2025-64142](CVE-2025/CVE-2025-641xx/CVE-2025-64142.json) (`2025-11-04T13:22:24.583`) +- [CVE-2025-64143](CVE-2025/CVE-2025-641xx/CVE-2025-64143.json) (`2025-11-04T13:22:14.023`) +- [CVE-2025-64144](CVE-2025/CVE-2025-641xx/CVE-2025-64144.json) (`2025-11-04T13:21:51.753`) +- [CVE-2025-64145](CVE-2025/CVE-2025-641xx/CVE-2025-64145.json) (`2025-11-04T13:21:59.470`) +- [CVE-2025-64146](CVE-2025/CVE-2025-641xx/CVE-2025-64146.json) (`2025-11-04T13:21:42.520`) +- [CVE-2025-64147](CVE-2025/CVE-2025-641xx/CVE-2025-64147.json) (`2025-11-04T13:21:33.047`) +- [CVE-2025-64148](CVE-2025/CVE-2025-641xx/CVE-2025-64148.json) (`2025-11-04T13:21:20.757`) +- [CVE-2025-64149](CVE-2025/CVE-2025-641xx/CVE-2025-64149.json) (`2025-11-04T13:21:08.243`) +- [CVE-2025-64150](CVE-2025/CVE-2025-641xx/CVE-2025-64150.json) (`2025-11-04T13:20:49.617`) +- [CVE-2025-6558](CVE-2025/CVE-2025-65xx/CVE-2025-6558.json) (`2025-11-04T14:48:28.100`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 6c89690b918..22969b4422e 100644 --- a/_state.csv +++ b/_state.csv @@ -87963,6 +87963,7 @@ CVE-2016-9057,0,0,7e2b29db008d61eb2b5eb405c0a601cfddc781ca464c3072193d4502173856 CVE-2016-9058,0,0,9a534ce36128ad388348ecf6949697e976b40136bec43f4a795e8b45a42ae743,2023-11-07T02:36:43.467000 CVE-2016-9059,0,0,2f41d6f4ea9c4476e9aeec4346db05b5db8174ac4c5ead3917268e87af71abfc,2023-11-07T02:36:43.710000 CVE-2016-9060,0,0,a43bf87d3cc6ef44c821b29c6abe7a695ce43bd51f5d045e39cf99334412acc2,2023-11-07T02:36:43.943000 +CVE-2016-9079,0,1,dd40dc373c8bf092408ce3366c7d7ed300945f9e45e44a5d1dd046d8fe47be61,2025-11-04T14:34:27.567000 CVE-2016-9081,0,0,38bdd07191039d81bcbf8afb444f82a51cd516ac62316b1471a143335a5cfb6e,2025-04-20T01:37:25.860000 CVE-2016-9082,0,0,b0529a2a085c1fab15a9359e1fa9779d1be3daa876d7bb7f51ca9a1af648f76c,2025-04-20T01:37:25.860000 CVE-2016-9083,0,0,5bc740075e8930aa5b777dd2447a2b8f44abc4a9baa179398cd453aee1065460,2025-04-12T10:46:40.837000 @@ -106020,6 +106021,7 @@ CVE-2019-11483,0,0,12b3022ec02855fc0cd7fddff6aa9bfe383db9d7887a6c3a1ee0759579355 CVE-2019-13147,0,0,08b2a891000bea99d4d6dbe94a1b80321c177ef1b4d9add8869d4be95cdbf6ac,2025-11-03T20:15:42.290000 CVE-2019-14196,0,0,745c220c47787acf28cddec75e9625924f2c29c6cae59331738f19c5821fd4da,2025-11-03T20:15:42.423000 CVE-2019-15790,0,0,1e855177f0f3bb3b90b46e39921e453cd9c6217b3a39c93663f9736466d11322,2025-11-03T20:15:42.550000 +CVE-2019-17026,0,1,558db2a9fc43fbc915199d66eb257f77cb121b0560d314240bd6fa21277a5652,2025-11-04T14:34:39.563000 CVE-2019-19391,0,0,e2d5532bf21ebf878af58b99e26a49bb4f35bb2b0cfe73bf5935f72b0547c025,2025-11-03T19:15:39.210000 CVE-2019-25211,0,0,308b02def3fb5e4df1b84b4d584988a177643cd1707d2e99a3680deca3ac0c9a,2025-11-03T19:15:39.390000 CVE-2019-3728,0,0,df5bd05d641742817afaf35f4ca14370d5f2fe19a6b6ff478be69d27e7d4bce4,2025-11-03T18:15:36.830000 @@ -106050,6 +106052,8 @@ CVE-2020-4428,0,0,d0c4fb9038e3a776e5883b3105c487f1d8472d81bc30523e32c3d5b61b1121 CVE-2020-4429,0,0,3055a49f879b027325089865bcdfeb4f25c5f1c2842b74629d9a146088087512,2025-11-03T22:15:47.120000 CVE-2020-4430,0,0,af1cbdbf2557de072c14d483545839666f641aa424a26dcd5b6a52b7f1198574,2025-11-03T22:15:47.250000 CVE-2020-5410,0,0,74e7efb19d4c1370c960147b74549fe9f4845c7bfe3e1245671991e64ed21ae8,2025-11-03T19:21:42.220000 +CVE-2020-6819,0,1,c4ec0ffc1f1dd9830e8ea989ec27a1d4243a31c5f9a353b2423df8f12bfdd34a,2025-11-04T14:34:52.090000 +CVE-2020-6820,0,1,e7d60e964316658ae8228254720f6a31baf3c8f0df856cd1ffb951a5c60eb49f,2025-11-04T14:34:43.203000 CVE-2021-20086,0,0,2c4678a87511daa0b903347bcec8f47343580bd2772367163f41769858314785,2025-11-03T22:15:47.437000 CVE-2021-20090,0,0,76eff79f00781882dbb6ab45952e37855b255de741738c97802e58648584ec06,2025-11-03T18:59:30.060000 CVE-2021-20123,0,0,3f1d5a7c6ae344c5cffc34d803e0d28d9369374b39b334586a88801501f557a2,2025-11-03T18:59:21.040000 @@ -106267,6 +106271,8 @@ CVE-2022-26258,0,0,5b584f4981d182b60d6b07716aef47d2c1f118085fe35eed1b0a8d83b72d5 CVE-2022-26280,0,0,1b8e3c400afe1f69078b7046f9e7fe743ed3d77daebdc2b15fe640a4f1f586cf,2025-11-03T22:15:57.873000 CVE-2022-26318,0,0,377a66feb252d50b2b61bb25beb3184c9d46850d4732d3f5601ead7e434df0f1,2025-11-03T15:16:07.390000 CVE-2022-26352,0,0,6ab74d251441f8488f3c5b9a972de415f49b4cdd6da799bafff2d570b26dfdac,2025-11-03T15:52:14.360000 +CVE-2022-26485,0,1,dfa4b097090a22228ddb5b070ddae169ea072a23a579abb35bfded1fc6cdcaf0,2025-11-04T14:35:17.667000 +CVE-2022-26486,0,1,d55d20e7701ecc3a529321792c9c779834e5fc3a897ce29aa666a7eeffb6c521,2025-11-04T14:35:12.657000 CVE-2022-26500,0,0,d695cfdf0554180513f091a65b848a685afb0554076967014d09484fcb284250,2025-11-03T15:48:03.947000 CVE-2022-26501,0,0,d0722417327a695a2dbdeb30f9f9f1f81e9d221739f8282073e30396034c92fb,2025-11-03T15:47:55.190000 CVE-2022-27593,0,0,4a32b928350a5e5207cf3e9cfc5685becac754aeb7b163d57aaf8803641e0f7d,2025-11-03T15:07:42.103000 @@ -107002,6 +107008,7 @@ CVE-2024-39803,0,0,8c78031762ce39170b08458d63796d6103ddb294a7dad9d045d0c44216039 CVE-2024-39908,0,0,997e699590f2b9bb91b9d3a0e2343c3e8d4218d94b8d6976d03185acb5f39fc8,2025-11-03T21:16:16.133000 CVE-2024-39917,0,0,12d1b6309c4f16efd068ebbd1e04c623c436d4418288f22c107eb9c9f4780d05,2025-11-03T20:16:26.580000 CVE-2024-4032,0,0,ba42526cb593a165349797e12e91035e1180c1130e7f3893c271f72321958ba3,2025-11-03T22:18:33.707000 +CVE-2024-4040,0,1,6a1a37c3b81878de44631d895e6c1de5d67ee276a617199cd782f96b97eb9f53,2025-11-04T14:36:21.647000 CVE-2024-40851,0,0,f0bcb793e8c14ad9639d48e32381a013003796aed5a065ef0ff0bd781368e757,2025-11-03T22:17:10.833000 CVE-2024-40855,0,0,d454f9c94b0c091f50e2e8d220d2d0591ba9445dab363f34ed261d6427cd0d1d,2025-11-03T22:17:11.010000 CVE-2024-40864,0,0,1af58ae9ba774ca087d3417e58f07597b99f8e07bdd979ac0dc6d5ba050c06f7,2025-11-03T21:16:16.560000 @@ -108030,7 +108037,7 @@ CVE-2024-50295,0,0,8cf2a92bc0b03b45c32acb16e84f0091b42400f60594dbfee1bc3245df79a CVE-2024-50296,0,0,ed562c72f56b172a1ab43f34bef1e00f4e5a833719ef3e581c39bfd59a8a641a,2025-11-03T23:17:12.273000 CVE-2024-50299,0,0,7c1a35ac73d68db9b81966f2e13b1494d32c5a046b4229cbf4159a55ee8dc3da,2025-11-03T23:17:12.457000 CVE-2024-50301,0,0,a93fab19051a2c88ca23bfff2ca5d74ed971ca28b16e34906176d494b614db61,2025-11-03T23:17:12.650000 -CVE-2024-50302,0,0,a6b9442768cea4fb75791e6c5f215ba07802bcf669c8c96831c6b36d0d163baa,2025-11-03T23:17:12.847000 +CVE-2024-50302,0,1,520053113d190a272119e29688700d9b3ae275932d168e3f63d395d42b653f72,2025-11-04T14:36:30.660000 CVE-2024-50304,0,0,d31600c6621af0ddfc6a51a533ab2ae1d334ec9fc15743b6e5e978371ac89c06,2025-11-03T21:17:19.177000 CVE-2024-50306,0,0,2ca5c3a220d31e294d48cc8170dfa2f43560ecfabdd6f3e10380532c28ebc2eb,2025-11-03T21:17:19.477000 CVE-2024-50336,0,0,79ae2f178f7b78170c26db202c779e2ac12a1786df21729e742cf7f517407f59,2025-11-03T23:17:13.030000 @@ -108097,7 +108104,7 @@ CVE-2024-53099,0,0,33c02ccc43e300679a80d217a0443fe5864b6c9607395270255d40aa50651 CVE-2024-53100,0,0,92ee688c9a3d443a91e633bd8f3bfca58c7af30740b1a684c69f2decb5c22f82,2025-11-03T23:17:19.917000 CVE-2024-53101,0,0,b36cb7e14dc42c339425f8786a8a1d4bb8fa6fdb5318e12519258b6fc2f1d1a5,2025-11-03T23:17:20.133000 CVE-2024-53103,0,0,2325f5f2c37d0cd75a799e67cc45045f32e7b5de4424b232d9355cacb36e5ea3,2025-11-03T23:17:20.387000 -CVE-2024-53104,0,0,293ce1a934ef3cea7bbe32707208f50fcce0d7c5f8010f71950a6918cf216eea,2025-11-03T23:17:20.637000 +CVE-2024-53104,0,1,a9ad25f34c1d38f747508cd11d0680e0cf8c74e20074aae67e454b7df6e3fe3f,2025-11-04T14:36:37.883000 CVE-2024-53105,0,0,c9ad60e130b87e2fa04cfa6ca4765ca5bef219fa78b46956eb5d4a2609072e1e,2025-11-03T21:17:26.760000 CVE-2024-53106,0,0,b07cb7a43484b0add9e596650d8bf1e200f9329cae2ac25359a929d682bca54e,2025-11-03T23:17:20.847000 CVE-2024-53110,0,0,1d1b73cb8cb13f7c2ebc77ab0e29b4d60f0d6fc942c9510f7c2d38bc79ca6a5c,2025-11-03T23:17:21.047000 @@ -108237,6 +108244,7 @@ CVE-2024-55547,0,0,b162878448bc5224532ecc0c4860f8eb587f1f0538a9e5d79d03f22f3084e CVE-2024-55548,0,0,59c788d3338cf3775e83213a9a5d3208efae808db56976b3ea9fd94836d20aef,2025-11-03T23:17:30.100000 CVE-2024-55549,0,0,f0f0b886cb6bfd0bc65a0a17dfb429f9d452a54ca7e34e4d33d65dcf6a683540,2025-11-03T21:17:50.197000 CVE-2024-55565,0,0,17b71fe41d474a60ffc2fde3e0d54a87ffb817f25b6473929be10b173d0d92a3,2025-11-03T23:17:30.213000 +CVE-2024-55568,0,1,d2c92fece09eff3acce7c628c6303e0b7576d497a15287122c0435e27e922754,2025-11-04T13:11:09.347000 CVE-2024-55626,0,0,be1723f98c122f26d1cf1ac74e0c8496df1308b329e6fd0cac1a4aca0835c8a3,2025-11-03T20:16:50.247000 CVE-2024-55881,0,0,78e900aa0f67028a84156485e4c84e6c1eca6cda842020dae6292382fe56aed5,2025-11-03T21:17:50.373000 CVE-2024-55916,0,0,a486833979f339ad20c391d172e9e2a2d10e316afeda7ae617d5a3536b1dadd1,2025-11-03T21:17:50.523000 @@ -108546,7 +108554,7 @@ CVE-2024-9393,0,0,2138d0deafc77c916d9b99b40f4112d2f79436f73248578ed29a0d9ac230d5 CVE-2024-9394,0,0,8db4eb1e6627f6745d93454a727641765a6ddbf3e67f408e3f888c5a6cc72ef7,2025-11-03T23:17:34.097000 CVE-2024-9401,0,0,e722384c598c37ad9f054e17786fdefdba4a19e1ffa7c3491bb21a3a7f270e35,2025-11-03T23:17:34.280000 CVE-2024-9537,0,0,5be1f0a3eed8788bf4543f8231bf092eb2091df1ae9b447bd0d054ef54b4acc9,2025-11-03T18:55:13.320000 -CVE-2024-9680,0,0,45d33c5478e706067f551c9f85a56ebb0d1a0fc790d972297a4f5e3e42e11433,2025-11-03T23:17:34.480000 +CVE-2024-9680,0,1,db4d6f24613203fe2408ded4d471f821baeaa25839fda93e23e250d7b8766e89,2025-11-04T14:35:50.977000 CVE-2024-9681,0,0,bf96637545ccf9f1ad5957be53db69c7b62b734a7b8ca2f47732632534059d2b,2025-11-03T21:18:48.670000 CVE-2024-9823,0,0,2abdaee0a1cc80139a65417a88e1a457b568390a1626c854d8bf973d185da2d2,2025-11-03T20:17:05.567000 CVE-2024-9902,0,0,6ae587ffbb87f1fc4555797423cdf0a3e856af4e432abcac7aea246dbe81befd,2025-11-03T23:17:34.743000 @@ -108590,14 +108598,19 @@ CVE-2025-10540,0,0,4c4e14a8eb774919f47e4523b9a6f5b0b5a229bf1a27fb3e0be9ee43a4157 CVE-2025-10541,0,0,9f9cb3417375183401fe037c6f1e00a4e4d0c2374dfc6ddd7e5aa62664cffb11,2025-11-03T19:15:46.090000 CVE-2025-10542,0,0,789d93655f70a49cc275fb9aead633e57675578f63287e6a64d640404b381583,2025-11-03T19:15:46.223000 CVE-2025-10548,0,0,486680f88f9c5bbaaa56260fc8847f989aaa6db948c5b6196f489f88cb31da5e,2025-11-03T19:15:46.357000 +CVE-2025-10561,0,1,ba6ac1f9ef6157ffd795c2c4eba955656f5dfedbb4b4786d425c51a5ecf3f442,2025-11-04T14:12:28.310000 CVE-2025-10639,0,0,70f00392034d146f7df37beb260a4c93285876c184dd7da41793d7f94859bcb6,2025-11-03T18:15:46.290000 CVE-2025-10640,0,0,d5d63cc0e090d61ca9b39a9891d037f5089d0d1b447340b76ce98e90fd6edf8f,2025-11-03T18:15:46.500000 CVE-2025-10641,0,0,90d696ed97408ba3197a8b7ce04576ef5203fd1839327dc179a203a95d210a1e,2025-11-03T18:15:46.643000 CVE-2025-1080,0,0,b1bdfe91561ab843423801d11eb7785297b7c42dad896e4c99bae03333583777,2025-11-03T20:17:06.687000 CVE-2025-10896,0,0,49e644a6036674105d4d4cc28efffc348a17f2fc708ae60f9f16dd3ec8bd6521,2025-11-04T05:15:49.360000 -CVE-2025-10921,0,0,9b1744d0c0ee0f5a8532175a911892641002f2f87c5704f42140185f895412cd,2025-11-03T18:15:46.783000 -CVE-2025-10922,0,0,6c094784c3b216d051673d025efd8b963d5a3fdbd44e434a257bf59a6296a4f7,2025-11-03T18:15:46.937000 -CVE-2025-10934,0,0,14608750998539d06c2d315bc5b76a0e88cab10038cea740f1b24debbe8f767f,2025-11-04T01:15:32.890000 +CVE-2025-10920,0,1,4d58503acd7d8b28c0971a22d401912a3e31753bc0371233607eddc153dd7239,2025-11-04T13:16:40.540000 +CVE-2025-10921,0,1,c8dd6c608aef9598efdd7ad8e21118d5c5d4ee0bf2035497bd837e61292dc6bd,2025-11-04T13:15:46.910000 +CVE-2025-10922,0,1,9bf5ddc080885067d66025f2821e67812ff689b753bdbccd8789fc8d771877bf,2025-11-04T13:15:06.710000 +CVE-2025-10923,0,1,1bf340c7191985fd42f80a43e4a4777afd3d1337494e88b85d84a29d583d64cd,2025-11-04T13:14:27.657000 +CVE-2025-10924,0,1,63d9b3ba5331937113bca99faf9e4c0a0d004a79f594c50a201697da6729c99e,2025-11-04T13:14:19.067000 +CVE-2025-10925,0,1,b42d4c36874cb1f425be3ff0b2c073b801fbab5bb1ee5b870b5ace3c7b1179ed,2025-11-04T13:14:01.757000 +CVE-2025-10934,0,1,4b019042e3c9bce43c9ad5c429cbb2d54039455926e6570e0a952388238e5823,2025-11-04T13:12:43.120000 CVE-2025-1097,0,0,5680e85d18ec5605fb88a2924264a43c54978cedd997e744589d4016687bf829,2025-11-03T21:18:52.093000 CVE-2025-1098,0,0,0ecfae677f996d8c5821e8dbcd60de24300eac5289bd8151b98959d9aecc8269,2025-11-03T21:18:52.230000 CVE-2025-11007,0,0,f93e2cf3af5aa0f9f187e76dc29450d8e135ced79e6c7753a6e0fd55b9d59e14,2025-11-04T04:15:36.903000 @@ -108622,9 +108635,9 @@ CVE-2025-11371,0,0,e3cbb02cd4c49506fde0722c589f3d83b9498b8f68740d830c8e32acababa CVE-2025-11377,0,0,e98954d51c623557c553c004d0327ede0cd30b0b0e93f1bd815fb1f6a8e8d276,2025-11-01T05:16:02.037000 CVE-2025-11499,0,0,99eff8453ca6afbd40f5e630681279b22d3da26cce7d03d2b80be8e194682bad,2025-11-01T07:15:34.940000 CVE-2025-11502,0,0,b830db5e348c4405b75aaabf7e3405784c18b29ee4cea9c63e94561c5654dae5,2025-11-01T06:15:38.423000 -CVE-2025-11561,0,1,6b0e129b6f07b8e21a6f167c2a710a23b2dd4895f8f5576ef08c7583f2a5ab19,2025-11-04T11:15:36.200000 +CVE-2025-11561,0,0,6b0e129b6f07b8e21a6f167c2a710a23b2dd4895f8f5576ef08c7583f2a5ab19,2025-11-04T11:15:36.200000 CVE-2025-11665,0,0,361866b361822a39dbe13bf3d7e914dc04d7287cb60bcf8e8028854d72a79906,2025-11-03T16:32:20.470000 -CVE-2025-11690,1,1,77fcfae554e5e22f166b30f15b936aeb6a19cde864cca4b23bd533ae131b9595,2025-11-04T11:15:37.573000 +CVE-2025-11690,0,0,77fcfae554e5e22f166b30f15b936aeb6a19cde864cca4b23bd533ae131b9595,2025-11-04T11:15:37.573000 CVE-2025-11702,0,0,5142107184c69cc8e0f48cfe5724c00ba0feabacaaed56d34360251f413bfe04,2025-11-03T18:32:41.577000 CVE-2025-11704,0,0,f7766f6b40a8ebc4d78246ae4786cbec01e05ab745a125e33266809afc898ca4,2025-11-04T05:15:53.957000 CVE-2025-11708,0,0,13d30826208f1c3cd7cfc6470a30eae2c031b101f3d7e7a840d3aa94f51dbf0a,2025-11-03T18:15:47.520000 @@ -108654,7 +108667,7 @@ CVE-2025-11953,0,0,ad811ee4614582d6698b73f1ed940397bb8dbb8a7347af56973cd894e564d CVE-2025-11983,0,0,cbf9b13d7a40e84c19b6b44374908fe8a4a890cb6fd80a64d21395bb9b01260b,2025-11-01T06:15:39.970000 CVE-2025-11995,0,0,20c72bdc6cadde90fcf7ef7e7c5a62b425ab1ebd9f222f500a3a530fa9c34112,2025-11-01T05:16:02.430000 CVE-2025-12038,0,0,d57612597e5c6cb7710159cf19969dd0cf4d8ef41c4bd72999a02e7f7a3d29a2,2025-11-01T06:15:40.160000 -CVE-2025-12045,1,1,a2df5e8aef8cece6fef90260dc37c60f65542516ec30b8f5a62d39f367c077f7,2025-11-04T12:15:35.960000 +CVE-2025-12045,0,0,a2df5e8aef8cece6fef90260dc37c60f65542516ec30b8f5a62d39f367c077f7,2025-11-04T12:15:35.960000 CVE-2025-12055,0,0,84c73d443794d55b2f59ea211f7d8e3cfccb9c9b623d28011fbbbee2377a14ae,2025-11-03T18:15:48.737000 CVE-2025-12065,0,0,4d3cad45989d892a2c074e9d18262d6fda37d9e4b62b65ca2d04111ae5de4606,2025-11-04T05:16:07.183000 CVE-2025-12069,0,0,2557490504d21e42e305a8906785f1ccc44b1c62eaf85a548e3c546dfab59706,2025-11-04T04:15:37.270000 @@ -108699,6 +108712,8 @@ CVE-2025-12307,0,0,60f4c302b739ae81ca1cd4819617c1171a65e3196fb54cb75f75d1779a81e CVE-2025-12308,0,0,84bc07510c89bd432f921ae73d1b34191d3bba36e0c315e13670a1e896c62791,2025-11-03T16:54:41.317000 CVE-2025-12313,0,0,63708303cde595caebcb86012437561eca5b29fa77e63f1e65a6b1c410b94744,2025-11-03T18:07:06.973000 CVE-2025-12324,0,0,277d186f39911409f5edcacdd7834f155d1556501c6c93787a380299695a15c4,2025-11-04T03:15:49.667000 +CVE-2025-12326,0,1,58a9cbdd960cb85d15ab0acc4ede0171e78aa5afdd57b41f0705d39975459083,2025-11-04T13:59:34.933000 +CVE-2025-12327,0,1,918dc6e5df18dfc6a1b35e15c91f6863a936a1e827b84e4cd9365534c14bdcd2,2025-11-04T13:57:16.500000 CVE-2025-12336,0,0,23708598954d273914aa5e37337e6ddfd72eb6807cfd40adab41e1c63bd5a35a,2025-11-03T16:55:04.123000 CVE-2025-12337,0,0,f72f73a336b5ceb044a9b501f5f803b38bd7e5f590c5a75ce22391bbb918ab93,2025-11-03T16:55:16.263000 CVE-2025-12338,0,0,e638652cb990319b50c3817270b7aa9517cc7d91bfc9f42441d366e3320a052e,2025-11-03T16:55:26.627000 @@ -108724,7 +108739,7 @@ CVE-2025-1244,0,0,511fd9716249718f9e2af8c639e9da9d69840e0db63e4ab656a288d391609d CVE-2025-12452,0,0,6c6dfed786ef0e0d9a716f064b55a5ceedbebd7308bf386f446cbed0d53b9466,2025-11-04T05:16:14.093000 CVE-2025-12456,0,0,e0af80112fdca528f9449e721b607e3a1bd2d99ccf752f752fcf3f4d8d1904c9,2025-11-04T05:16:16.587000 CVE-2025-12463,0,0,cd28b6b357f2e567e0ef5bdc71b800e12bac45c19f093e5c41e381d264d7de42,2025-11-03T17:15:32.847000 -CVE-2025-12493,1,1,47a006dda8cd8a5ac0bdb17ae09019bfe955c81450bab2dbb78975bff878c145,2025-11-04T12:15:36.957000 +CVE-2025-12493,0,0,47a006dda8cd8a5ac0bdb17ae09019bfe955c81450bab2dbb78975bff878c145,2025-11-04T12:15:36.957000 CVE-2025-12503,0,0,c64d3aedad6d0924fd86c211f4d373c1cefe535f4068f8924a818a297dc15e7b,2025-11-03T07:15:41.480000 CVE-2025-12531,0,0,381c9cf8e1dafb6e68defc71b2edcf89126d4c6599c2109f2ca1240f002bad41,2025-11-03T20:17:06.247000 CVE-2025-12593,0,0,7d3e819491a397e37b4ce39cfc9002f4ba44eeab94d58b39c805a28ac3b3a3c8,2025-11-02T05:15:32.777000 @@ -108758,7 +108773,9 @@ CVE-2025-12623,0,0,12453a0d01beeb396b4aa559fb5226a8eb6bc82005eb57acd6da643aea3b8 CVE-2025-12626,0,0,ca3dcf0ec8204ec4870f2c4263c3d782647f9578ddbfd9e9dc2a4b51634599a4,2025-11-03T14:15:36.830000 CVE-2025-12642,0,0,c0cfdd6ab145523a112b99a88b580c830fb5fc801e91f285f02222bdd67551a9,2025-11-03T20:17:06.410000 CVE-2025-12657,0,0,01d182ea38526045194544f148125638fdd8195135e95f2735635e439a0e2468,2025-11-03T21:18:50.400000 -CVE-2025-12683,0,1,32dc48ece1c3481befd0bcac1fe3c321beab3e7236010a2e68a6252f14f5f26e,2025-11-04T12:15:37.120000 +CVE-2025-12682,1,1,1d3cbf8213d8031f38ef8078f4c0e07eade4205758039adf6703c08e44b66b46,2025-11-04T14:15:33.377000 +CVE-2025-12683,0,0,32dc48ece1c3481befd0bcac1fe3c321beab3e7236010a2e68a6252f14f5f26e,2025-11-04T12:15:37.120000 +CVE-2025-12695,1,1,0b832dee6c54cbd6b42588fa4c0acd494266149681a74c4ec63806988d28aaf3,2025-11-04T14:15:34.087000 CVE-2025-1352,0,0,468e4165c1fbc1f238500ed696137c4d06d5e55cbc9edf2b4912378bc89bb127,2025-11-03T20:34:23.890000 CVE-2025-1695,0,0,3d72b4b662a46bc6816504e210c66be6dc0c6ac2a91804219e18db5ae55c469b,2025-11-03T13:59:05.540000 CVE-2025-1734,0,0,828a73a0746b2fff70f113e83182dc0fa2341e54294693c61a5da872a52aaa06,2025-11-03T21:18:52.790000 @@ -108798,17 +108815,17 @@ CVE-2025-20735,0,0,d705b80a6353a2861a76dd5fb1f7aca3e941f922b86c4d101f586c1ed3e97 CVE-2025-20736,0,0,fcc191108489ec1d8db235a4eb4293d75c39d733a6af39e7f47e97289479ab0f,2025-11-04T07:15:40.977000 CVE-2025-20737,0,0,23da60962d6f078dbf94d3171addc02c826904e55eca6fe203c1106a8c174a9d,2025-11-04T07:15:41.730000 CVE-2025-20738,0,0,8b9a9c5f10686f49a91f86b991ec0b6993f02745f98f0ca615283988c84dd240,2025-11-04T07:15:42.473000 -CVE-2025-20739,0,0,9a3c52dd1f2b6f4b5d9044e37e682909bddb04503c837804f755be218a8dd84a,2025-11-04T07:15:43.343000 +CVE-2025-20739,0,1,f761c8ff7ffd4550d50022fe2bf276678ce495f98be20eaf152f2abe05e25b6b,2025-11-04T14:15:34.250000 CVE-2025-20740,0,0,c068ef95a257a8f70ec8769aa2a2c19ddaa673b04648aeda850ea5db24de801a,2025-11-04T07:15:44.140000 -CVE-2025-20741,0,0,6e0de6a5ea0580818ed78c691f9e41babf94e9ac1372eb9584bfa6148176df34,2025-11-04T07:15:44.913000 +CVE-2025-20741,0,1,7d3f1e00f8fd471ac558a63f00b372cdfea854483cd6df3fec0c0d89f9e40d56,2025-11-04T14:15:34.423000 CVE-2025-20742,0,0,ae0cde2304e77731333113ef3315d6e92dc1401b57d27a2a6cbd400f34ced52e,2025-11-04T07:15:45.627000 CVE-2025-20743,0,0,3c52d6fd26b90663b9881dcff4cbdd18eff3f19caeb4f9772ae1ed1aa545b82f,2025-11-04T07:15:46.333000 CVE-2025-20744,0,0,2f141c8f7eb61d2863fb379ddf525fcf0dc1c83802e46e11528be9462275bf2a,2025-11-04T07:15:47.070000 CVE-2025-20745,0,0,4b62d72be4b660ce04fee5009bf387c90bfc735114d847108927ddc6f542b04e,2025-11-04T07:15:47.897000 -CVE-2025-20746,0,0,178932241f61155c4e0db0d167d6e9ff4041481019bc1ee72d0fb976987b2bd1,2025-11-04T07:15:48.700000 -CVE-2025-20747,0,0,26de169dd172e8b9e8b838226a605d12f6fb989c2638fac1292f345ecb6eb406,2025-11-04T07:15:49.540000 -CVE-2025-20748,0,0,a639ac4006160f28ae87cebc02b26e9b298bad11efdf9b86702dfe04c3be7801,2025-11-04T07:15:50.343000 -CVE-2025-20749,0,0,bb02add7b5feba15ec73ba84322c52b64129bbe7daa0db601196a9e69d1a5d20,2025-11-04T07:15:51.240000 +CVE-2025-20746,0,1,defe29710e1bfd331df99203180cd959fa63cc628ecb983c652df1ea4fdfda7f,2025-11-04T14:15:34.577000 +CVE-2025-20747,0,1,3d3eddcdf7e221d39e7dd0c22f3fe86751a32692ac9bd2d702b63b839b4d4f64,2025-11-04T14:15:34.733000 +CVE-2025-20748,0,1,ec133dc929eceb904f1eb84f4046facf6245d85c294a69322bdee5e467f00870,2025-11-04T14:15:34.893000 +CVE-2025-20749,0,1,c5b3270cfc2270f0c343e4f305de736323e23dbaa54057824a889d0df4de81a6,2025-11-04T14:15:35.053000 CVE-2025-21090,0,0,2063892e6a741f598cbe1d790c0c0d54f68bc55d7de8af0b3b692b3b53787ea1,2025-11-03T18:15:49.330000 CVE-2025-21333,0,0,3c071312b446d4fcdad14b672e305f91f6afb7278db017d1a252a251214c75ef,2025-11-03T15:08:08.450000 CVE-2025-21490,0,0,550eabecccba82c61250e18212f678f8d9c56e65cc8c827edafc6ca4378b6e7b,2025-11-03T21:18:55.383000 @@ -109366,6 +109383,7 @@ CVE-2025-26599,0,0,7e714cf05183624e58a8adaad72f46aec59076b13cc1ac7a7e5285b4a7f1e CVE-2025-26600,0,0,e8d322513f84f3e542e1d2aabf083a2b59fc8522b353fc55d63d111267b85bb3,2025-11-03T22:18:42.913000 CVE-2025-26601,0,0,bd954ee225d68ae535023c563e572b81332058037f67828309efcfd6eac3ea4c,2025-11-03T22:18:43.067000 CVE-2025-26618,0,0,629d2896fe66444d366511674280a8684229974b461afc29804c8c7737d2f8d9,2025-11-03T20:18:01.563000 +CVE-2025-26781,0,1,c4989107619bf4b72c85c2ee598de4535dacb7d0e5098c01775c3d625ba4dc60,2025-11-04T13:11:01.813000 CVE-2025-27064,0,0,9fe3c9135390ab8d624db4b950ce87e615ab8299d577c9f038a66dcda8f4fcbb,2025-11-04T04:15:37.757000 CVE-2025-27070,0,0,16739bd32c0e47fe723cfd06d1805320eb852df67326b487e146dd5a499d259b,2025-11-04T04:15:37.927000 CVE-2025-27074,0,0,aadb1b42e3a3b167f3097526c163be94fa8a1a305f025dd3e9bfd124d550f99a,2025-11-04T04:15:38.107000 @@ -109601,7 +109619,7 @@ CVE-2025-32364,0,0,b8434761f0f15cd6dea67d87d673ec739aa9448d63ee7ca3522653a21597f CVE-2025-32365,0,0,955f507e91f11b76f112c1395ce8fcf2827e9a5798d0df6f819e9f184f3172c1,2025-11-03T20:18:26.977000 CVE-2025-32414,0,0,f5546590541f413a7010a663bc39f081961ab4ac11c9b1422691bc97fde3b749,2025-11-03T20:18:27.087000 CVE-2025-32415,0,0,851f40ea2fbd404b9f9d7dacec028befeffdd83c7345c50fe49572403027d001,2025-11-03T20:18:27.213000 -CVE-2025-32433,0,0,869fd4ff988853ac6f62b4080cad0cb80d144b07ba0dd67b4e6e691d9dca402a,2025-11-03T20:18:27.333000 +CVE-2025-32433,0,1,160ccb9da063d47551f11366840a0ac568dbb1a2ab9f4ea20502ab5408d61637,2025-11-04T14:49:05.177000 CVE-2025-32451,0,0,35adb87c938488c94fdd31c4eaad126bbf2c9b45289dab3da029b5b7c2ce64e8,2025-11-03T20:18:27.500000 CVE-2025-32461,0,0,ce69ef9a3c096c8bc803efcd13696c192a1a7eec0c9f15fbbebe4525edd35c5c,2025-11-03T20:18:27.613000 CVE-2025-32462,0,0,6b3a33e2a95a9cc6bbfc5885cbb9f418c16884dcc22428c54ad41d4fbdca8573,2025-11-03T20:18:27.727000 @@ -109958,7 +109976,7 @@ CVE-2025-38346,0,0,e55da2a6abaefb82d93d6ce7fab0c837d7c601f95c152a2a343c7443c3eb8 CVE-2025-38347,0,0,f4914251ff53250897952b6a33697a1f96cbf9b30b0e2edd1ad4d7b8af19cd64,2025-11-03T18:16:15.247000 CVE-2025-38348,0,0,8a7ed14aceb06b1e85fe4d5cc4b9aeaf6032f8422b3fbc34748a939098e210d8,2025-11-03T18:16:15.350000 CVE-2025-38350,0,0,709cbeedcbb939864e552e58554b03a185168445ff10a6710c485f34986b1f86,2025-11-03T18:16:15.457000 -CVE-2025-38352,0,0,9125758e60f07636a65995cd9cca2d57b7f725b3626b4b5dd1fceff5c74df963,2025-11-03T18:16:15.580000 +CVE-2025-38352,0,1,06c06f4597f33fef816e8ad05ab1bf43f2f9640cd8799bca7dd8fa950fd9d4cd,2025-11-04T14:36:42.337000 CVE-2025-38354,0,0,848af6a4fa045ade745ee68180c17a7cd514068ebc2d0a84dc51140e6b0508a4,2025-11-03T18:16:15.777000 CVE-2025-38362,0,0,11812ad9827cc8a3984d91416f3be8913f16d856a17b9fa9dd533da74103e685,2025-11-03T18:16:15.897000 CVE-2025-38363,0,0,b0d3c9c3775089ce034ead00898fff0549ff3c18e98add6ede4189bdc36d565b,2025-11-03T18:16:16 @@ -110281,7 +110299,22 @@ CVE-2025-4091,0,0,8ed6182241b1c0d4f5555e5b3d85f7e1359129ea9f65793e2f7d289ad8bda2 CVE-2025-40928,0,0,e147813781f5494e48aa695dd9e8635330b3295f3109ca14277f37c75aa4af52,2025-11-03T19:15:52.740000 CVE-2025-40929,0,0,7676454a606a82e1eff273c278c0c2e190681f6e03fd045582508824bed7121d,2025-11-03T19:15:52.887000 CVE-2025-4093,0,0,483c3656f6f3758fe23a6eaef73caf2f5169398580135a28dbabb9bde37c55c2,2025-11-03T20:19:10.840000 -CVE-2025-41244,0,0,8362ed12781098635a0950445ad95f7883667a7ac649779216c2d648d7b7264f,2025-11-03T19:15:53.027000 +CVE-2025-41111,1,1,a272034a8f0db43478a6ca4eef10495d252d992f362d62dea7cfc062c1c66e52,2025-11-04T13:15:34.167000 +CVE-2025-41112,1,1,7c076ea52effc1df156dc8a669ae756c0f04e849e7596d2a9c55ae42044e58ef,2025-11-04T13:15:34.877000 +CVE-2025-41113,1,1,7eba719e2182e823b1f40b4d10147518178f8c4025a9a58a82c354c4d270b954,2025-11-04T13:15:35.017000 +CVE-2025-41114,1,1,92f25517bde00056a3c0af9dd32cfc54ae2cceb9d60edb6323d47ca26b55fdd2,2025-11-04T13:15:35.153000 +CVE-2025-41244,0,1,6529d430a59c1a3c2d5ffb07b76499ec018413a40eafadb10faae661d9b57706,2025-11-04T14:53:09.403000 +CVE-2025-41335,1,1,ce0ba960bb8246e9b6a061e7d5874881503e8aa7dc1deacfba4c6d0ee901ad29,2025-11-04T14:15:35.220000 +CVE-2025-41336,1,1,78d6bba44cc6db72d70034a5776ade8aead28104a6bf2bb0848f578d5bffaa26,2025-11-04T14:15:35.370000 +CVE-2025-41337,1,1,d0d7e55a761e993a8e236e67c60b776bdb233a2a397c41506af04424c3a228e5,2025-11-04T14:15:35.517000 +CVE-2025-41338,1,1,d4fae051e099bacc243cecc53c56a97498457c9c03d0bf3274983095e7d761e9,2025-11-04T14:15:35.670000 +CVE-2025-41339,1,1,10764fc00f0c142755d5d10747780dbce9f5c36685aa0c704ec8dc55dff1b49b,2025-11-04T14:15:35.817000 +CVE-2025-41340,1,1,1b0ea1645d52e44ca8073b28149bf1373ad4c10f2446ba9d5f5625e45be664f3,2025-11-04T14:15:35.993000 +CVE-2025-41341,1,1,cad0bc3b8791a4a8c8a8eb3e425ef1815ce53ec8e4bca9971932e1df246f00df,2025-11-04T14:15:36.133000 +CVE-2025-41342,1,1,5857c0956b846ce65549964537b1c12fb36b21fc3c83568339adeb5c6f0b4347,2025-11-04T14:15:36.277000 +CVE-2025-41343,1,1,1ef37aabfbc70e860af0b0c56e824c43f01dfec7b38d16d821ae67973c48c760,2025-11-04T14:15:36.417000 +CVE-2025-41344,1,1,f8f60e71859aaf95571b459007bdac270465f27cce34a07d63e916670372a070,2025-11-04T14:15:36.560000 +CVE-2025-41345,1,1,adfbf3d8567b03ff0454177e878fb2208f1f21fea4ba7bc5f525f2c94e9ea672,2025-11-04T14:15:36.703000 CVE-2025-41390,0,0,f60e76371d33a8156797b4148255802befabb9698d46d8318da0c7e6f659f635,2025-11-03T18:16:53.343000 CVE-2025-41420,0,0,1aaa937a77091311a57653cf7b5fccdf8a40c0ce2b5d3f792ee64343f59ec15d,2025-11-03T20:18:48.500000 CVE-2025-41673,0,0,e1a9db100813ddf38910d2b55d626974a47448c31660d2a8be08d9f3f217ebd2,2025-11-03T20:18:48.620000 @@ -110448,7 +110481,7 @@ CVE-2025-43360,0,0,93ca03c6ab187a65c60ac85c455c9f8eb7262710733d51d01636ad215b638 CVE-2025-43361,0,0,f76a7b12efb9acf640096e06a2ee88324beee9e48893bb1ba85240a64945ba40,2025-11-04T02:15:43.683000 CVE-2025-43362,0,0,c8bcb764c761d46222ba8fe72ac4eb95b638c759745bf614c6c9f6753a5b8319,2025-11-04T02:15:43.783000 CVE-2025-43364,0,0,3e0c2fc047b57d53f226a0769adabe2e314ab8e2a215e44c49762a991a009ddb,2025-11-04T02:15:43.930000 -CVE-2025-43365,0,0,dfb7347119adf64f09f807b36fc55dc8836e8c8d93d148f6ce30532d7f2b6e4a,2025-11-04T02:15:44.037000 +CVE-2025-43365,0,1,2466542a99f6d0cc6e263d2e2c825868259d8fbf83cb5e05d7128f030641bb71,2025-11-04T13:15:35.297000 CVE-2025-43366,0,0,0439d6782f97b68fa10c6f6b15104a862127e501ce31e0c23e26a131dd2537a4,2025-11-03T19:16:04.663000 CVE-2025-43367,0,0,05bd87f5ce40fa76f322bebb1b11d8c6d0b11ade2e357e087a50c423c862f7ad,2025-11-04T02:15:44.133000 CVE-2025-43368,0,0,93ff28c1af1d94e50cd57143d4a4732c18557970eb9b3d6a93120ce41425ffa0,2025-11-04T02:15:44.287000 @@ -110459,16 +110492,16 @@ CVE-2025-43372,0,0,f62e1105e2d85a4df73ef59587d66efd03f9efa363a1c053d5a53e82cb48e CVE-2025-43373,0,0,912f5f8137972e640fbc59a3cf619692c3b9257b20560ddf6710a41428fb9f3c,2025-11-04T02:15:44.607000 CVE-2025-43375,0,0,026cfbfd9713774a606d6afd90917fe5fa87472760c162f06ba39f1138e8db22,2025-11-03T19:16:05.653000 CVE-2025-43376,0,0,51c5d2dad10b7797b7442993cc7362478f28fc9f322861c93f33910828b5a634,2025-11-04T02:15:44.710000 -CVE-2025-43377,0,0,857ea8a5204954bef835b238bfd0e220f290e3c322beff3798ab1b0b13f8841e,2025-11-04T02:15:44.810000 +CVE-2025-43377,0,1,adb7d150fdcbab092d9269e21c45006bf4e02cfba5ad9084fb5dc7d4bf1afcbb,2025-11-04T14:15:36.857000 CVE-2025-43378,0,0,8a2133af79e55c3f097439b5c8325c8a1900ff7305755e536dc0d95cf5c5671e,2025-11-04T02:15:44.910000 CVE-2025-43379,0,0,489aaf70d89e4dffba7cbbfd93f8a9be6cc56256bd921aabe5d0d31c64a27a93,2025-11-04T02:15:45 CVE-2025-43380,0,0,6b175cfad15b968fb23d9ebe088270966dfe29dee401a21a94c1439f835ee268,2025-11-04T02:15:45.097000 CVE-2025-43382,0,0,8cc391309252093e6463fb05e539e6745cd36b3d47f3b4820dcb5ea4a778a3d0,2025-11-04T02:15:45.197000 CVE-2025-43383,0,0,8a788c54559bf2581c17f83e438bd63873d8e6a5292091ebf5b1507e89ab9bdd,2025-11-04T02:15:45.293000 -CVE-2025-43384,0,0,752bceba3c2bc0445ceee987910d2db28b1c82c3be1316644a805bbffeb24c96,2025-11-04T02:15:45.387000 +CVE-2025-43384,0,1,91d51ee738a78439e27f39675fe97c7d92428b80b74b3a2ed801665f79784a21,2025-11-04T14:15:37.007000 CVE-2025-43385,0,0,2933d25d4398a5fdb324c31cf1081ba430a99fcbb079c88a00b30850ecd4cd75,2025-11-04T02:15:45.487000 CVE-2025-43386,0,0,6bc2478c01852ca26c947eca98aaf9c141eefb9bac514ece3ec9ef5f793ce09a,2025-11-04T02:15:45.590000 -CVE-2025-43387,0,0,46cba7bf75b471ca5a2b7b1f2477f4c300bbb861c0c77f533ecce0cf4cae24ff,2025-11-04T02:15:45.700000 +CVE-2025-43387,0,1,86af248048c81828ab2e9a57cdadbf55162bc944a363f9928d1f687d87d7648e,2025-11-04T13:15:35.510000 CVE-2025-43389,0,0,6252d307205f7a7b7c28d5d3e4c6623a5f681094890f9dfbc1c1aec36b95a989,2025-11-04T02:15:45.790000 CVE-2025-43390,0,0,26a1e23f51d11719a2b81dde081f95af3d6eadbb862414f9b611f3483b17e98c,2025-11-04T02:15:45.890000 CVE-2025-43391,0,0,34387372148a15c6ef19bb300dae7e99757025eb87f29c4e9351147243735b4e,2025-11-04T02:15:45.987000 @@ -110476,14 +110509,14 @@ CVE-2025-43392,0,0,161ede35d35e4d374c2c39fe9606c6e046a99f16f95ec7a57d4dc61030047 CVE-2025-43394,0,0,d74ee6162af490cdb509b92f7564d06f0fc13a8ac2fa9a9321237f6744dd4d8a,2025-11-04T02:15:46.180000 CVE-2025-43395,0,0,09603c218ca9fac49ab5da80fbe1e0404acd4a069f6d169885ead309f3e0e5a2,2025-11-04T02:15:46.277000 CVE-2025-43396,0,0,af1aa67b2c335dc8e241331cb31f2fa01ac91ce55afd24ee2798d88451be1381,2025-11-04T02:15:46.377000 -CVE-2025-43397,0,0,4412be69bf3b74fb258d56aa8410cb4d9b7d78f033470599ae343557d9cd4a01,2025-11-04T02:15:46.477000 +CVE-2025-43397,0,1,38f5bb5ebe437fc2d04512d409fc6eb00e354e912c5c2005267c46f5028a6b02,2025-11-04T14:15:37.147000 CVE-2025-43398,0,0,4a086771f1bc457b2f48abc37d628335ecdf19b748f5e4a34145697974fc0266,2025-11-04T02:15:46.570000 CVE-2025-43399,0,0,233940a9254de50a3b2c2d381ceb9249a9d6489078dbb158128b7afac3057193,2025-11-04T02:15:46.667000 CVE-2025-43400,0,0,d8cce7fd850ee31d11d092ab2bb1afc66004e2f7ac2ce89f586d82b476a59b04,2025-11-04T02:15:46.763000 CVE-2025-43401,0,0,54c490b2986dd934d80325a37dab071052365b0beaf442a088fe924d4fd311fc,2025-11-04T02:15:46.917000 CVE-2025-43405,0,0,36003837a2bd594c05b09112f0ec30f8c4d51a97747a074d24cee35fec2b4da6,2025-11-04T02:15:47.020000 CVE-2025-43407,0,0,cd2e7ef54d14f3d9dd05663bcbb0dc801408939b3fd8158b879daab6c666801b,2025-11-04T02:15:47.120000 -CVE-2025-43408,0,0,19868f8a366ccc86fe47c29234dbe3ad03a8d2337693ab1f22b685badc93ca60,2025-11-04T02:15:47.217000 +CVE-2025-43408,0,1,3e603be0556cccbebde2e7ae130e170a72d099945818299a9df5de199aa3b9f5,2025-11-04T14:15:37.290000 CVE-2025-43409,0,0,c6a1b0a33ce2195019dfd074cb011acb3644d71e8e93c65e0d7c4acb9a4ac53e,2025-11-04T02:15:47.307000 CVE-2025-43411,0,0,dc29382db734c80b3b49fa2b4b18f476d3912f85bf95a963475d55fffb4e35a9,2025-11-04T02:15:47.403000 CVE-2025-43412,0,0,ab9c1d9dd4670c1feed9b2d337ce4c005c9818ca24b64f80363274815a57e5bd,2025-11-04T02:15:47.503000 @@ -110491,30 +110524,30 @@ CVE-2025-43413,0,0,25a4c8b2d088d35a379c7890960f59af562ab5dd7ed1036c035c6c06d9813 CVE-2025-43414,0,0,45a5690a39204794861637cfa26e4f53621a655abe9de873b77fe049f9b0ae05,2025-11-04T02:15:47.697000 CVE-2025-43419,0,0,7b9407c7b25ca0717eed38102fa2191ccfe30cea8a91f32c3b68739e7948e1e3,2025-11-04T02:15:47.780000 CVE-2025-43420,0,0,a5dee5c093edcb0f559eb05889441b7fbd4bf45cb1b1b7a986b4d3c1782bd1ac,2025-11-04T02:15:47.883000 -CVE-2025-43421,0,0,089ac03e2a6c782a221458c3471ff85b3880ada1aaac691d81aa8a551912d8f7,2025-11-04T02:15:47.977000 +CVE-2025-43421,0,1,7e655e27df0417e0d493640e15094e5a430715cfb07e77952c3fd93f68aaa7d3,2025-11-04T13:15:35.657000 CVE-2025-43422,0,0,e86020b595712a273eb8e642a35e7dc733c0d193cc55f20995c18aea50e20823,2025-11-04T02:15:48.087000 CVE-2025-43423,0,0,7b5d62922fe12ffc884ff08af153c3f8a4078bc825a2e5dd63125b404e04efc2,2025-11-04T02:15:48.180000 CVE-2025-43424,0,0,80e2d6499051a6677605635bf20a87b7f5ea577a94f3c1753bbf1a01df5df01c,2025-11-04T02:15:48.287000 -CVE-2025-43425,0,0,27e2f83855bdfc1e27bf5e7963a747076300c7e2b424e748af17f5eb955431e8,2025-11-04T02:15:48.387000 +CVE-2025-43425,0,1,cfb3a3558a4a751ac45aa2271608106fda9bb60e96946161d9c02c0e4d98772e,2025-11-04T14:15:37.433000 CVE-2025-43426,0,0,e8d58e77a7ea5d203a91af54626e25dfd8e366e4ac7a7c8d3c911a2f0365633c,2025-11-04T02:15:48.490000 -CVE-2025-43427,0,0,90e033a413225d69f9696e03a1236e300aea13cf0bebd76a8b78c24732e58713,2025-11-04T02:15:48.600000 +CVE-2025-43427,0,1,d496e9962d1f578c686a571ea6747cd9e3df09ed1280dcc883d9e322a4723542,2025-11-04T13:15:35.800000 CVE-2025-43429,0,0,72acd38ff152c03bdfa9bf43ffa945811dac73039b9aa0513f4e933373c06c00,2025-11-04T02:15:48.727000 -CVE-2025-43430,0,0,26c236acb4c2ba7c42dd476716efca134db3cc7d6d3582427f9d5e9c77384169,2025-11-04T02:15:48.850000 -CVE-2025-43431,0,0,298d2bb950a3018b16a7651befeb7058dc55a3f0e50de0e06e7f340f5740776b,2025-11-04T02:15:48.950000 +CVE-2025-43430,0,1,5391a5f889d37d6a6bf5fe99f3b1ed05580c79cc773e3d80ffe8162da75eda00,2025-11-04T13:15:35.933000 +CVE-2025-43431,0,1,81f89b8e7ecbc711957e420a59206118cd5e36d77dd51e749a1e5a663d66d5d3,2025-11-04T13:15:36.070000 CVE-2025-43432,0,0,4c524029601da3f72093bdc79142b6c4eb83262846b1e794b92a42dceaa24bf4,2025-11-04T02:15:49.060000 -CVE-2025-43433,0,0,2f02285dd414e545d9b229ab0a119c496b85b58ef2391f6e0a9ddc8973925b48,2025-11-04T02:15:49.160000 -CVE-2025-43434,0,0,3a4eb2c94f815927784872522c6fe0cf746624028a8e0963768b4fb4d8468b71,2025-11-04T02:15:49.260000 -CVE-2025-43435,0,0,6acdddf700a5cb3f0ba42b02c67d6aefc0b782ce3e79dc43e514b00edb3c9f98,2025-11-04T02:15:49.363000 +CVE-2025-43433,0,1,029a7cb4e69a01b885347000b4a23fd25cb24b3471dc4497898d2293fc236ce2,2025-11-04T14:15:37.577000 +CVE-2025-43434,0,1,6300f04eda43a5b24d5aeb83e43eba600f176a7aa4e2ceab3d9daaa05d458a18,2025-11-04T14:15:37.713000 +CVE-2025-43435,0,1,0edb65381d74bb7f84debee92a8498771d3445f80c6504841629203909aefb65,2025-11-04T14:15:37.860000 CVE-2025-43436,0,0,99475bee83e9cf3720202706759980021c878f86db01d0552c8f9aaef6146fca,2025-11-04T02:15:49.467000 -CVE-2025-43438,0,0,cd9b5dc9d81ce88f6c89c098ed3aea0fea538da4a1a2e474a6c3bcfbddf4457c,2025-11-04T02:15:49.563000 +CVE-2025-43438,0,1,3cc259a97f9fe73fe1fc104d03f9e53582115573f3a4cec33cf9d11e33fe3372,2025-11-04T14:15:38.007000 CVE-2025-43439,0,0,5529718a0155453d93ae6dac76b41b320c48ecf22651e2ab31cd2731e7772054,2025-11-04T02:15:49.667000 CVE-2025-43440,0,0,81334f810d43433d28ce145b03cb1b209f4f8b0413c03a7776442812a7843f07,2025-11-04T02:15:49.760000 -CVE-2025-43441,0,0,032b72173083df87424a49e740657f95a480b9ca36484ce385a1c6e0b9f3ed7f,2025-11-04T02:15:49.863000 +CVE-2025-43441,0,1,5cb47474d2c9724736de46def2122f7e3c209b20d5bfe0cea44114a4c75430ea,2025-11-04T13:15:36.210000 CVE-2025-43442,0,0,3d4163384f1f7160130489b8457daa7d56160c6386c6e6697031c4aa811d66de,2025-11-04T02:15:49.963000 CVE-2025-43443,0,0,feeab924d9d9264af5bc97ba5de4c7866c0587ff8310ad24527bd6c7acb2b26c,2025-11-04T02:15:50.057000 CVE-2025-43444,0,0,70780ca696f669163bb2148d317292e16f0e87b10ccbe1d020588d61ced8ddfe,2025-11-04T02:15:50.160000 -CVE-2025-43445,0,0,aa3a42f16365dc397daa9b0ce0bcf0829e254bb175b88d4785a2d5842bf8cffa,2025-11-04T02:15:50.260000 -CVE-2025-43446,0,0,6502c943112c8ee41041230ec74a9c97086384761b15cd359ca73df4af81c410,2025-11-04T02:15:50.353000 +CVE-2025-43445,0,1,7696dd9fbb72dcffba0a49c8b0a78a17798a0b64d70bc6d070bf0e16defd238c,2025-11-04T14:15:38.153000 +CVE-2025-43446,0,1,19df5771c20fe5ded9131c4f733800b67bbb88af82a8592fde3bd485085497ce,2025-11-04T13:15:36.353000 CVE-2025-43447,0,0,304bd3cca4b51c8bdd33d2596d0138ff88ab0e0c2753e3da78f709a77cd55b7f,2025-11-04T02:15:50.447000 CVE-2025-43448,0,0,e9f13ef8c30ccd0e5d7bfb2dac715c8864080fbc114fd77cdd23376d6679f16b,2025-11-04T02:15:50.543000 CVE-2025-43449,0,0,8d7c9d2c6ba01ff615415afd2da53540ceaa9c831464010c6d3db38209514346,2025-11-04T02:15:50.640000 @@ -110522,18 +110555,18 @@ CVE-2025-43450,0,0,b4b71f1bbca558cebcbd1a061e279b8ea87b27e13eee078090f30845c2edc CVE-2025-43452,0,0,bb4a32a7dc1144a40224588858af5133ae0999092ea10d8e8a06905bef6e9adf,2025-11-04T02:15:50.837000 CVE-2025-43454,0,0,40da0c9247579549327a552da287b3656a270cad4501d8cb5d5b0062c88aa17c,2025-11-04T02:15:50.933000 CVE-2025-43455,0,0,7ceafbd944729e7aec2f5bb76c541d8d4af37d58e689c358d50cff54fc225fe3,2025-11-04T02:15:51.020000 -CVE-2025-43457,0,0,efebc58e5b5cd47c507bce0bcb7b0352960ca7d781924e62d553605aa111df38,2025-11-04T02:15:51.120000 +CVE-2025-43457,0,1,8123ad043d0ca5a04c4efb73e45490af7890fd2d44684e9196ab83d1f674feab,2025-11-04T13:15:36.527000 CVE-2025-43458,0,0,68c60c0a210bd7c9187caf03c1730d14af411243c9444ed3cdc38c3e8268104d,2025-11-04T02:15:51.213000 -CVE-2025-43459,0,0,d80e4ba02df3272b5ba1b0de53088338b4767f1f8c798e7ea06cbaabb75c06bd,2025-11-04T02:15:51.313000 +CVE-2025-43459,0,1,317e8abb2a09667d712407fecf5cc1283031c2c6c70ddf95ec8d500b6ec8ae22,2025-11-04T14:15:38.297000 CVE-2025-43460,0,0,5f4f2c0dde01c10b5181f510c2a2dff839703293718c993391d30f8a64cf0850,2025-11-04T02:15:51.410000 CVE-2025-43462,0,0,e98cee03e173e5d6c7284d12a7a09d34b3093f8e0a18788e366a551fa8e9a8f9,2025-11-04T02:15:51.510000 CVE-2025-43468,0,0,8e40f62160dea555838f62151190198adc28e14d790f89552a7ae66c91138fed,2025-11-04T02:15:51.610000 CVE-2025-43469,0,0,ba3d363818f0e428f641724b858257af02b78512eb6286df70e5cdc7900fd08d,2025-11-04T02:15:51.710000 -CVE-2025-43472,0,0,3a1da37fab38319ccd60cfc81744c43164baa6a6439dfa66b7bb71424b41bf78,2025-11-04T02:15:51.810000 -CVE-2025-43474,0,0,2478452074cdf060bda5c931657325cba61a53638f6ef37dc5da9d102ae946fa,2025-11-04T02:15:51.910000 +CVE-2025-43472,0,1,0b2d1b133e0601658667dd4b5c8bee63311e147ba23be778078f331e0c75df32,2025-11-04T14:15:38.433000 +CVE-2025-43474,0,1,d0a06faa985b069bee7c3696684460af5a8933701e4deb81ee5998c10c818c9b,2025-11-04T14:15:38.580000 CVE-2025-43476,0,0,6b0d624fd93fff68f8c556545f24abe242ce87d00a30fbae8e67869a467501ce,2025-11-04T02:15:52.010000 CVE-2025-43477,0,0,0c8c5a2d85f522b62eee95da88342ba1e72a1ec73f5992a00b682b2d5b425fca,2025-11-04T02:15:52.110000 -CVE-2025-43478,0,0,c5205733474c52cb3795124fab428a4c3178fac4ae1925af12dce10d38ae805f,2025-11-04T02:15:52.207000 +CVE-2025-43478,0,1,ad710e1227aa8115f5512bee904677100d6661dbcbdc51bddd31bfbd80aa4432,2025-11-04T14:15:38.717000 CVE-2025-43479,0,0,8b9651f1a1a9f17c84bc2aa97ec5f5345cf6eb623bc01ae2a2148eaa565a7769,2025-11-04T02:15:52.303000 CVE-2025-43480,0,0,9bca34911be58da4c88cd46166f6a23dc915b0a6a855db9bb4e67ef9d750bcb4,2025-11-04T02:15:52.400000 CVE-2025-43481,0,0,f2d9ec19c9223d9649c117999bb3cbbb875338f881879ff4f9b3e04bca6d0d1d,2025-11-04T02:15:52.500000 @@ -110545,8 +110578,8 @@ CVE-2025-43499,0,0,28552b9c553aa9a1fc10e4cdeb2b5dbd405c998b0fcea94c10567a9d37eec CVE-2025-43500,0,0,cc46479ab765ae73da77ba963e452305d2ef52376e260718af9320d42e031461,2025-11-04T02:15:53.073000 CVE-2025-43502,0,0,41fe9fee2e29d680078469d3b0e7aea9a8f66beec3b66ff3b9fe6469cb760935,2025-11-04T02:15:53.177000 CVE-2025-43503,0,0,c87258dcf4f9a28272c3cfbb51e7dce82ffe709e4b141531b52e4764fcfb7fb3,2025-11-04T02:15:53.270000 -CVE-2025-43504,0,0,9f33a6e706667506914b6cd4de8dc5f1366b30d98a5fd4d5a9fbb9bdf6fd7671,2025-11-04T02:15:53.370000 -CVE-2025-43505,0,0,071d368ef27eef4ecceefd95425eb9b689c59889a399589c06a8416af6e7ba6b,2025-11-04T02:15:53.467000 +CVE-2025-43504,0,1,27a83be11aadabd1b0c8366b5bd184af318cad703012be6ad231b5d285a78574,2025-11-04T13:15:36.710000 +CVE-2025-43505,0,1,92dd9b28ed1ae6ae3a7126797b9a3a5665e058654cdbeb6e39695b9797b8cd98,2025-11-04T14:15:38.857000 CVE-2025-43507,0,0,d6bea90bd1135dfbaeb37fa0fe829940506e17288e0fdf1e235045c577640f87,2025-11-04T02:15:53.560000 CVE-2025-43939,0,0,2ef0408bbfac39a524620f2088cc85b1cc74d847da3b9e5c02b41d91af6bf2c6,2025-11-03T19:57:59.767000 CVE-2025-43940,0,0,c42f5d9aa7357e1b4c79d35c5cda5e25042742d7ad074cbde5ab1a6578e4c1d1,2025-11-03T19:58:17.303000 @@ -110555,6 +110588,8 @@ CVE-2025-43961,0,0,629cb117c6e891dcff5a7c7ce5a0931f295243aa6542ec8a1788188d5ba61 CVE-2025-43962,0,0,30e278cc02fc4dd6c5dab2721f24241f293d910786a0a7f024f2ce1d9eefeb0d,2025-11-03T20:19:02.190000 CVE-2025-43963,0,0,0dc890878d8db398a4c7b0a36b664bb17823bc1a9c6f9d6dedeba9e9498a5dc0,2025-11-03T20:19:02.580000 CVE-2025-43964,0,0,d0037f0f15c7d99918d740a34e2ee5ee5b1296585f42212cb1196429fd575b10,2025-11-03T20:19:02.750000 +CVE-2025-43994,0,1,2133a7869e660b5f276ad4b9ec6fec4b5722ffe792bd76bc9c99278bbe3b2677,2025-11-04T14:31:14.497000 +CVE-2025-43995,0,1,ccbdd3dc05ef3b6db2d33e6f1a3ed6f942a4518562eac85ddda829029706450e,2025-11-04T14:43:05.420000 CVE-2025-44955,0,0,517230cf7435bd3e73dcc2fe5e4cdec16198880ab2bd5fa815402e2cc6103296,2025-11-03T20:19:02.943000 CVE-2025-44957,0,0,2a9bd04718aa10336c4a04ba837be8666b9987973458831c7c6830f8a6bd0398,2025-11-03T20:19:03.533000 CVE-2025-44958,0,0,3b7460cf76f48c0c9cbcb427609aa6740cefb83365afdd5b437abceb54fdc28c,2025-11-03T20:19:03.753000 @@ -110575,7 +110610,9 @@ CVE-2025-46400,0,0,b9f3d52104135dd0a3d1be67aca95654dbcc022c846c002ca8f2f51474a90 CVE-2025-46407,0,0,ce928e0c88a5d2a9f9ea504276e34f07507cc2cb56176ef375f902d9c45fce94,2025-11-03T19:16:05.967000 CVE-2025-46410,0,0,dd99fe7e193a012dc0600e70bd5190b07ea753944afbe394e7bacba3d9f214a2,2025-11-03T20:19:05.250000 CVE-2025-46411,0,0,c1ecb0f7668f4d94322279d69f4705b36dabde03a269d3d58dd216fb894d2bf9,2025-11-03T19:16:06.077000 +CVE-2025-46425,0,1,62fe6b45978c596848f7d1a47bf59cfa769ef7a6d59c1914ebfef2198afa3418,2025-11-04T14:26:41.313000 CVE-2025-46556,0,0,28c90a122c3ad0602cd1705236d08d966de4cab8f62bca016d869aef4381c9cd,2025-11-04T01:15:33.257000 +CVE-2025-46602,0,1,c284cc7b3286319d31c724ac54895abce3a3a0ffa9bb07e8897f36253e8b260e,2025-11-04T14:49:20.907000 CVE-2025-46701,0,0,b98a045c6e9bb2be684acdd52363a194d477f11e9e6ea1c2865e851749cd78d9,2025-11-03T20:19:05.360000 CVE-2025-46801,0,0,befe328ee043284908e5bdaf91e9d2ce64b1c1ae571c44d87fa2e3ed7004244b,2025-11-03T18:16:54.083000 CVE-2025-46827,0,0,fd5de29875a4167c7e07a5689a241f789ad4749a16cc3ba3463580206b2c2090,2025-11-03T19:29:31.520000 @@ -110599,7 +110636,7 @@ CVE-2025-4802,0,0,948781c23b1bc6bac1fd2b7d365d25df3b310a8a08a292b534eb5384874bfb CVE-2025-48060,0,0,d757230eedd12d987706b15ce9c83f3782385d40dacad3903d66bc6053f48e02,2025-11-03T19:16:06.480000 CVE-2025-48174,0,0,4affb247f09b504ff85e8b4d707878b6e00aa654853d0d971260a80b0c2512ff,2025-11-03T20:19:05.993000 CVE-2025-48175,0,0,602d6fca3d364e0b14960bae120f0df455728bb8a2ff0f80f212cc6fcc2399b6,2025-11-03T20:19:06.153000 -CVE-2025-48384,0,0,09bf66cc6fe2fe9f164b5966b43207f9f100c7c4c75b84ed4f95f6a1cc6bb07a,2025-11-03T19:16:06.623000 +CVE-2025-48384,0,1,6ad7c415921a7bf04c42488cc2499573eeb89fa4897a6259fd84e5d229608a19,2025-11-04T14:50:32.750000 CVE-2025-48387,0,0,ac0979fcbd9a32129342caa7b84654981a65d42e44d9b12bba68cba6efa944fd,2025-11-03T20:19:06.267000 CVE-2025-48396,0,0,89fc6d8a4e6fbd7704fd3fd91760d39f6df3839f0aa6bc0422d88bcc95fce9a3,2025-11-03T16:15:34.943000 CVE-2025-48397,0,0,378ca18bf7357b2ec3cb0c86002136c909e53dbdfd5b7c8210481a3724d04206,2025-11-03T16:15:35.057000 @@ -110686,6 +110723,8 @@ CVE-2025-53511,0,0,4fc647940e5d1ce108f9845c600515f40d786467fc2cf921b603d69ab8122 CVE-2025-53518,0,0,52ddf2d841429d03fc0e20df5e2ac415924510f8d92d7a928d9dff0576fed053,2025-11-03T19:16:08.713000 CVE-2025-53557,0,0,e9ab3f67172f3eaf40813e29fd9a6cef6227f93d971ac9c8b8ad9349fd8b66ac,2025-11-03T19:16:08.830000 CVE-2025-53603,0,0,32ac708b5f4f38d0fbe28d41df7b934c73d28d7c5abb5f2a6c4d454f638348a5,2025-11-03T20:19:13.990000 +CVE-2025-53701,0,1,234e82d532535779a65faf6ffe470f932df8b2bdf84906bc36513d9ffead4e55,2025-11-04T13:10:52.810000 +CVE-2025-53702,0,1,7d57d7f18adcbb65a1fd15409cf89577d750eec5c695c539accbbedc1c09bdea,2025-11-04T13:10:40.083000 CVE-2025-53814,0,0,161ce10fdf28d0d4c9b6a495469f070aada5f03df7457b3ee1dcb6686a0d9862,2025-11-03T18:16:58.513000 CVE-2025-53853,0,0,13f606ebd8253944d121b9e154f3a95f84fcb0863854a85ea709da4feea8e528,2025-11-03T19:16:09.067000 CVE-2025-53855,0,0,667e045dfd3d46ffe849802bec4f0bec0cd1d71c17538727a0e49eaf21700e69,2025-11-03T18:16:58.673000 @@ -110742,6 +110781,9 @@ CVE-2025-55154,0,0,237787aebfbf147c52094e9b53e45bed0ca96caaf177c4ca7b5c5771f14ab CVE-2025-55163,0,0,653aa81f104e324ab95b8029a3c4d7e7df2077f83445fb238aaac8e51cf0432c,2025-11-03T20:19:15.273000 CVE-2025-55212,0,0,3539949cbfc8da64ff11cd4d04f0654b1195dab8dc44e1aca75c50c21f06d1e8,2025-11-03T19:16:12.180000 CVE-2025-55298,0,0,7d0de282ec0f2fd449cccc68790e9930f14353637b65cf86f6055c77c78d0501,2025-11-03T19:16:12.337000 +CVE-2025-56007,0,1,55c48a14673a8e18af2354c51b88fc4851bb7a5710675858c7cfffae016a1109,2025-11-04T13:10:02.530000 +CVE-2025-56008,0,1,4a80a3763b48b8ec9461244394231dde5ea52128ba578a8bda8daa2121a2af83,2025-11-04T13:09:54.770000 +CVE-2025-56009,0,1,4f42956e6c0862543b9a025eaf706c2dc9ae402ea69902b197644a368da3e32c,2025-11-04T13:09:44.150000 CVE-2025-57052,0,0,08e9d4c5c9bc2efa59d1ee5506552bddf212192b9d4aa42d6d82651b39cc9da5,2025-11-03T19:16:12.460000 CVE-2025-57803,0,0,6a654dca0d98186f754aee1e1d4ca8eba38c0a1a9cf912e2b244479f285abedd,2025-11-03T19:16:12.657000 CVE-2025-57804,0,0,5c4e986888e63d8c2c6ac02ac29a5e754e455a65bbdb44a898736ed99cca980d,2025-11-03T19:16:12.777000 @@ -110797,9 +110839,9 @@ CVE-2025-61919,0,0,ea9bb1733605a94702d4474b211b25a8ce0c4777d4050372f39a1a21b72b8 CVE-2025-61920,0,0,e29ef857ea6521aaf7acb240def81946d66229f28aa9ac63a9ea6529068251a2,2025-11-03T18:17:01.530000 CVE-2025-6199,0,0,4cfff2929d4191f0ea2e897ad77718f1879f8d62a9ee03b5298a6efca64faca7,2025-11-03T20:19:18.417000 CVE-2025-62171,0,0,5d7361a44734f6c49e049a2fed86654723407abe93084acc32363c5302bf85a2,2025-11-03T18:17:01.650000 -CVE-2025-62229,0,1,a3d8421a4c0a7f259fab7da3ad09decb0fa8c57a2133e9fe6afc2fd58c311b1b,2025-11-04T11:15:38.157000 -CVE-2025-62230,0,1,0e85f9cc85e1a5e9cafb0fa746e27a08741fe8ad31ddf4a59631b1e8c5158449,2025-11-04T11:15:38.327000 -CVE-2025-62231,0,1,b7a030553711e882fdee4b07b87304492a08945577924bc08f34e51d4dd4f137,2025-11-04T11:15:38.587000 +CVE-2025-62229,0,0,a3d8421a4c0a7f259fab7da3ad09decb0fa8c57a2133e9fe6afc2fd58c311b1b,2025-11-04T11:15:38.157000 +CVE-2025-62230,0,0,0e85f9cc85e1a5e9cafb0fa746e27a08741fe8ad31ddf4a59631b1e8c5158449,2025-11-04T11:15:38.327000 +CVE-2025-62231,0,0,b7a030553711e882fdee4b07b87304492a08945577924bc08f34e51d4dd4f137,2025-11-04T11:15:38.587000 CVE-2025-62275,0,0,9969cb724ff232f44f41c82e471375308c25fcdf88a69c67c77eb20c039b514a,2025-11-01T03:15:31.757000 CVE-2025-62276,0,0,08e0650908b7827b37ec524eae09f98a9f0be5d42864f544777b00c4937ad5e5,2025-11-01T00:15:33.387000 CVE-2025-6241,0,0,86ba6ff22762f960bedb3e38ee328807386ae2f20971d79de8fbc101c0d9704c,2025-11-03T20:19:18.537000 @@ -110809,7 +110851,9 @@ CVE-2025-62706,0,0,ac590367e28321208d66b3cdc818f8459c94d9ee09c641a7cdf2171cc9df7 CVE-2025-62711,0,0,3283f27a68ad04be55c9994d4a606e5a98401b10f409851fdb06b8020c274deb,2025-11-03T19:26:50.060000 CVE-2025-62778,0,0,645dbd44fa653c9fc93f70ff1b29beb95a1f677c1f2cd63dbde556aafff80c6e,2025-11-03T18:40:23.610000 CVE-2025-62779,0,0,0a27d3e974763971cdc9bacc4d0221c52b9fb87ae2e42e86810bca01b342907d,2025-11-03T18:38:26.690000 +CVE-2025-62782,0,1,cdec24206633c56eecac9ec5e89501eaf96f965861c883f0816e8836be716862,2025-11-04T13:23:24.003000 CVE-2025-62783,0,0,af6335ba768bdccadd591c88f96a3fd1bf7498ad7a7e900a6f0e7b1b3d0c66ba,2025-11-03T20:40:10.527000 +CVE-2025-62784,0,1,80ea24dd3a5fd581555d54466ae149954cbadd9120792c9f54a99017d36ea8e1,2025-11-04T14:59:16.450000 CVE-2025-62785,0,0,b74259aebf8d8f8765f8771550e5a6bb24411a8a226cc7d6782f9a03b46581f0,2025-11-03T19:32:54.677000 CVE-2025-62786,0,0,6662205656948c7ddbc600cb2b85586a764cb7ab798840f4f5f5c4fb238824f1,2025-11-03T19:33:58.117000 CVE-2025-62787,0,0,7ad8cc49a9e78d736461398a57dfc3bbe4139af510f839081443295ec3af6f20,2025-11-03T19:35:38.197000 @@ -110818,6 +110862,7 @@ CVE-2025-62789,0,0,b9d7ccb6b220c273feee9b7927641129866be2acaa8d798ba91c67c55d108 CVE-2025-62790,0,0,12722099053d4042f7ae5edd11d68b457da1ba349720d24ccf137e3d3f228679,2025-11-03T19:34:22.580000 CVE-2025-62791,0,0,68f3672924146292dcc83cd9dde2d92083cd5d2f95d51fb1c79cad607d890c1e,2025-11-03T19:34:46.937000 CVE-2025-62792,0,0,93bec74d534c0ba0e99376e1f1db4c2080429564a6165098e981d605059190b8,2025-11-03T19:35:16.047000 +CVE-2025-62801,0,1,06a78bdf409452775b9944939c07f47481c2f31c90119ed4262249a10aac7222,2025-11-04T13:24:32.793000 CVE-2025-62802,0,0,c5adc70120e780b75c26f9a7452b5a951f50441f469b73f3055dbeff9515cb08,2025-11-03T19:38:00.530000 CVE-2025-63293,0,0,ec895c85415e391db0abddcab837182a505636b056f0617fb4ed9890864d162e,2025-11-03T21:19:38.307000 CVE-2025-63441,0,0,2eee441a8f404be80b16ffa63cd8401967f906b1f5dc4de8982be3b513f6d2c9,2025-11-03T19:16:14.717000 @@ -110846,6 +110891,23 @@ CVE-2025-63622,0,0,e7330fde3c1785920f20a1bef5d00328fe6a554fc277c370dea6273484d71 CVE-2025-6395,0,0,be817d50da4b059c11b0542c80103e3115dfb30f76885572de8940eb5d6f96e9,2025-11-03T20:19:18.670000 CVE-2025-64094,0,0,39661f21079b94d55b2d9802f58d866c8d50bab5c773b7fd3760abda8b19f220,2025-11-03T19:38:46.660000 CVE-2025-64095,0,0,7cf671f2ede04662fe08cf0b34f6479d011b82757db89deaf0ca65097276db9e,2025-11-03T19:39:58.247000 +CVE-2025-64101,0,1,ba6b618cbabb0e1bd32c87a504ea3b9c59f44b825e13386b04806850b510d85d,2025-11-04T13:20:04.240000 +CVE-2025-64102,0,1,1df615ed6c683b39edf58757662a22a34822d3a0ae651fd328b5e3a4ca9e8cb1,2025-11-04T13:18:57.337000 +CVE-2025-64103,0,1,cb99e58dd580d5243efc8885d5b88c24de593adde2cd983bd7dda52d2ec3ace5,2025-11-04T13:17:27.277000 +CVE-2025-64136,0,1,5ad888e71c40781081bc33e614cd5b1b20a5d3f74c519f1cf1cdfdcdcf6c9f5e,2025-11-04T13:23:36.440000 +CVE-2025-64137,0,1,b8e26d32e2cd515cb7aca9b9aebd8e84db6a7cec41138d60356478f499000e68,2025-11-04T13:23:27.470000 +CVE-2025-64138,0,1,108ff161bbac7d253c683450470c9efc3cbb7082e8114aed966a9aadb7b09f3a,2025-11-04T13:23:11.260000 +CVE-2025-64139,0,1,4f1147828bc8695b1a971335ebb9f1112c587513d9dae8ff5f76e5d2d9eef44b,2025-11-04T13:23:00.210000 +CVE-2025-64141,0,1,6bf811894bcb3e383b15947cd9404e212fe9c9b708ddf6902e718f8d90824ce2,2025-11-04T13:22:36.960000 +CVE-2025-64142,0,1,a338eee9ade5eae94629bc4dcb3635a574983c47be4cbb072b37d26eb6f5c5b4,2025-11-04T13:22:24.583000 +CVE-2025-64143,0,1,14d59d204e3aae14596f84fb9d1a2ad95ae7c449b056d83d975b57d0705e7e8a,2025-11-04T13:22:14.023000 +CVE-2025-64144,0,1,bb34264f848495186bfd26b0b3a00e4d0884d38553e21a19b299ecfba3f06778,2025-11-04T13:21:51.753000 +CVE-2025-64145,0,1,22ab93d76fd83af740805ded1133884ea2fd50ac79a314f8cc2967c9f803449a,2025-11-04T13:21:59.470000 +CVE-2025-64146,0,1,aa107f8ef24479b4788c48210b2d55b32347a606403a4cd233781975e3aa273d,2025-11-04T13:21:42.520000 +CVE-2025-64147,0,1,fa4da5a6d118f0f5bdac144fc31b11e7601d1ea37da6e6f0fb33f91c9fdb48b9,2025-11-04T13:21:33.047000 +CVE-2025-64148,0,1,92517508a46de8c9ebefebe6dd96a391947ea5f41ea73c426e0f19461cada709,2025-11-04T13:21:20.757000 +CVE-2025-64149,0,1,21242ab1e28acd41041723360b1b177c6afce6434f723ea44d3b6812c4e39a42,2025-11-04T13:21:08.243000 +CVE-2025-64150,0,1,d59a66397f768138aafa0eb30479f12571fe1c2fa45d51b66826971edbd46c3d,2025-11-04T13:20:49.617000 CVE-2025-6424,0,0,1344467fb40916515d612ddea1592afd947ee32323ec3c659a92d2b4f2b58a62,2025-11-03T20:19:18.803000 CVE-2025-6425,0,0,12c56ec523e169f4e1daf1c062095a42fd04636532731e19e2feed9f58f8df6c,2025-11-03T20:19:18.950000 CVE-2025-6429,0,0,38ab84757dc30a8c8ed35af327fa7b6bdecec69e8db81991ed8d7c3c729c2e25,2025-11-03T20:19:19.097000 @@ -110862,7 +110924,7 @@ CVE-2025-64387,0,0,1173091c94ba8b36672aab1a226414b315d4fabdd6487b070da5ec798b682 CVE-2025-64388,0,0,2a49ec98c80c91f8c10f02d1be0ce22018cf442967bdce0966f4a190127e3e27,2025-11-03T16:15:38.767000 CVE-2025-64389,0,0,7212971d4c35c7e288cafb50f988069aac1d05d3a525f706deb1b40c1391fd55,2025-11-03T16:15:38.880000 CVE-2025-6491,0,0,a083c929329e62158105cb8094451fea08b9ba50a1c60d650f24f650584d0611,2025-11-03T20:19:19.490000 -CVE-2025-6558,0,0,a85a7226409fe602fcf1a9f541416f3e5d835fe3d5f41ac0ab39b29938665ae1,2025-11-03T20:19:19.597000 +CVE-2025-6558,0,1,2e4747a0ff1d8bbcace33fd4a81b5fe113bf1602c31f2010500ef3003d3b9504,2025-11-04T14:48:28.100000 CVE-2025-6574,0,0,4014a41b3d671eab0c443aafba751f0ac3bee7f1b7d207bf246453defa4cd42b,2025-11-01T07:15:35.727000 CVE-2025-6926,0,0,bc7a9b6c73736552c263febe835543b28e5214a363f7ee17221eabf2ff646501,2025-11-03T20:19:19.773000 CVE-2025-6965,0,0,14da73a54cccb492b63e3242f105a9f10c02fbd3dce1b11da60a1f1ee922affc,2025-11-03T19:16:15.483000