admin/nvd-json-data-feeds
1
0 Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2026-10-29 00:10:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Auto-Update: 2025-09-08T20:00:12.151463+00:00

Browse Source
This commit is contained in:
cad-safe-bot committed 2025-09-08 20:03:54 +00:00
1 parent 6312c0dc35
commit ff988f2951
47 files changed
+2678 -483
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CVE-2021/CVE-2021-371xx/CVE-2021-37150.json
+22 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2021-37150",
"sourceIdentifier": "[email protected]",
"published": "2022-08-10T06:15:08.287",
"lastModified": "2024-11-21T06:14:44.050",
"lastModified": "2025-09-08T19:15:31.697",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,13 +36,33 @@
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.2,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 2.5
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2022/CVE-2022-203xx/CVE-2022-20356.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-20356",
"sourceIdentifier": "[email protected]",
"published": "2022-08-10T20:15:27.190",
"lastModified": "2024-11-21T06:42:39.180",
"lastModified": "2025-09-08T19:15:32.697",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.4,
"impactScore": 2.5
}
]
},
@@ -49,6 +69,16 @@
"value": "CWE-20"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"configurations": [
CVE-2022/CVE-2022-346xx/CVE-2022-34660.json
+22 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-34660",
"sourceIdentifier": "[email protected]",
"published": "2022-08-10T12:15:12.200",
"lastModified": "2024-11-21T07:09:55.573",
"lastModified": "2025-09-08T19:15:32.943",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,13 +36,33 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.6,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"type": "Secondary",
"description": [
{
"lang": "en",
CVE-2022/CVE-2022-370xx/CVE-2022-37003.json
+31 -1
View File
@@ -2,7 +2,7 @@
"id": "CVE-2022-37003",
"sourceIdentifier": "[email protected]",
"published": "2022-08-10T20:16:04.073",
"lastModified": "2024-11-21T07:14:15.870",
"lastModified": "2025-09-08T19:15:33.170",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
},
@@ -49,6 +69,16 @@
"value": "CWE-276"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-276"
}
]
}
],
"configurations": [
CVE-2024/CVE-2024-320xx/CVE-2024-32025.json
+47 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32025",
"sourceIdentifier": "[email protected]",
"published": "2024-04-16T15:15:37.467",
"lastModified": "2025-08-27T22:15:35.150",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:57:12.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -71,30 +71,69 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:bmaltais:kohya_ss:*:*:*:*:*:*:*:*",
"versionStartIncluding": "22.6.1",
"versionEndExcluding": "24.0.1",
"matchCriteriaId": "2738F1DF-EA29-4B81-9A31-EC70324D4D3C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-qprv-9pg5-h33c",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-qprv-9pg5-h33c",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-320xx/CVE-2024-32026.json
+67 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32026",
"sourceIdentifier": "[email protected]",
"published": "2024-04-16T15:15:37.723",
"lastModified": "2024-11-21T09:14:21.360",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:51:29.663",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -51,30 +71,69 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:bmaltais:kohya_ss:*:*:*:*:*:*:*:*",
"versionStartIncluding": "22.6.1",
"versionEndExcluding": "24.0.1",
"matchCriteriaId": "2738F1DF-EA29-4B81-9A31-EC70324D4D3C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-v5cm-33w8-xrj6",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-v5cm-33w8-xrj6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-320xx/CVE-2024-32027.json
+67 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-32027",
"sourceIdentifier": "[email protected]",
"published": "2024-04-16T15:15:37.903",
"lastModified": "2024-11-21T09:14:21.480",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:30:53.710",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
@@ -51,30 +71,69 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:bmaltais:kohya_ss:*:*:*:*:*:*:*:*",
"versionStartIncluding": "22.6.1",
"versionEndExcluding": "24.0.1",
"matchCriteriaId": "2738F1DF-EA29-4B81-9A31-EC70324D4D3C"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-8h78-3vqm-xw83",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/commit/831af8babeb75faff62bcc6a8c6a4f80354f1ff1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/bmaltais/kohya_ss/security/advisories/GHSA-8h78-3vqm-xw83",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://securitylab.github.com/advisories/GHSL-2024-019_GHSL-2024-024_kohya_ss",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2024/CVE-2024-340xx/CVE-2024-34064.json
+88 -14
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-34064",
"sourceIdentifier": "[email protected]",
"published": "2024-05-06T15:15:23.803",
"lastModified": "2025-08-27T22:15:36.463",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:27:31.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -71,54 +71,128 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:palletsprojects:jinja:*:*:*:*:*:*:*:*",
"versionEndExcluding": "3.1.4",
"matchCriteriaId": "F26DE1AD-D6C5-48D5-BAD9-667A5AF05D8D"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",
"matchCriteriaId": "CA277A6C-83EC-4536-9125-97B84C4FAF59"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Mailing List"
]
},
{
"url": "https://github.com/pallets/jinja/commit/0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "https://github.com/pallets/jinja/security/advisories/GHSA-h75v-3vvj-5mfj",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/567XIGSZMABG6TSMYWD7MIYNJSUQQRUC/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/GCLF44KY43BSVMTE6S53B4V5WP3FRRSE/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/SSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/ZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS/",
"source": "af854a3a-2127-422b-91ae-364da2661108"
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List"
]
}
]
}
CVE-2024/CVE-2024-483xx/CVE-2024-48341.json
+21
View File
@@ -0,0 +1,21 @@
{
"id": "CVE-2024-48341",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:33.423",
"lastModified": "2025-09-08T19:15:33.423",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addShop"
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/Jiingh/cms/tree/main/6/readme.md",
"source": "[email protected]"
}
]
}
CVE-2024/CVE-2024-561xx/CVE-2024-56189.json
+8 -8
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-56189",
"sourceIdentifier": "[email protected]",
"published": "2025-09-04T10:42:26.453",
"lastModified": "2025-09-05T16:39:36.980",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T18:15:31.293",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -18,19 +18,19 @@
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"exploitabilityScore": 2.8,
"impactScore": 3.6
}
]
@@ -42,7 +42,7 @@
"description": [
{
"lang": "en",
"value": "CWE-787"
"value": "CWE-125"
}
]
}
CVE-2024/CVE-2024-89xx/CVE-2024-8956.json
+10 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8956",
"sourceIdentifier": "[email protected]",
"published": "2024-09-17T20:15:07.287",
"lastModified": "2024-11-05T02:00:01.697",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T19:15:33.610",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -157,6 +157,14 @@
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2024/CVE-2024-89xx/CVE-2024-8957.json
+10 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2024-8957",
"sourceIdentifier": "[email protected]",
"published": "2024-09-17T21:15:13.423",
"lastModified": "2024-11-05T02:00:01.697",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T19:15:33.780",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -157,6 +157,14 @@
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://www.greynoise.io/blog/greynoise-intelligence-discovers-zero-day-vulnerabilities-in-live-streaming-cameras-with-the-help-of-ai",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
},
{
"url": "https://www.labs.greynoise.io/grimoire/2024-10-31-sift-0-day-rce/",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
]
}
CVE-2025/CVE-2025-100xx/CVE-2025-10099.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10099",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:32.000",
"lastModified": "2025-09-08T18:15:32.000",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_usuario_cad.php of the component Editar usu\u00e1rio Page. This manipulation of the argument email/data_inicial/data_expiracao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "HIGH",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
"baseScore": 2.4,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 0.9,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:M/C:N/I:P/A:N",
"baseScore": 3.3,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "MULTIPLE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE"
},
"baseSeverity": "LOW",
"exploitabilityScore": 6.4,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-79"
},
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"references": [
{
"url": "https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10099.md",
"source": "[email protected]"
},
{
"url": "https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60educar_usuario_cad.php%60%20parameters%20%60email%60,%20%60data_inicial%60,%20%60data_expiracao%60.md",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.323060",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.323060",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.644967",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-101xx/CVE-2025-10100.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10100",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:32.253",
"lastModified": "2025-09-08T18:15:32.253",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://github.com/bdrfly/cve/issues/1",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.323080",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.323080",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.645389",
"source": "[email protected]"
},
{
"url": "https://www.sourcecodester.com/",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-101xx/CVE-2025-10102.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10102",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:34.670",
"lastModified": "2025-09-08T19:15:34.670",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
},
{
"url": "https://github.com/yihaofuweng/cve/issues/14",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.323068",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.323068",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.645297",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-101xx/CVE-2025-10103.json
+145
View File
@@ -0,0 +1,145 @@
{
"id": "CVE-2025-10103",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:34.890",
"lastModified": "2025-09-08T19:15:34.890",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument main_event can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited."
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 3.9,
"impactScore": 3.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"baseScore": 7.5,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"references": [
{
"url": "https://code-projects.org/",
"source": "[email protected]"
},
{
"url": "https://github.com/yihaofuweng/cve/issues/16",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?ctiid.323069",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?id.323069",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/?submit.645298",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-262xx/CVE-2025-26210.json
+7 -7
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-26210",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T14:15:44.430",
"lastModified": "2025-09-08T17:57:57.707",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T18:15:32.490",
"vulnStatus": "Modified",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
@@ -25,19 +25,19 @@
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
CVE-2025/CVE-2025-345xx/CVE-2025-34509.json
+74 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34509",
"sourceIdentifier": "[email protected]",
"published": "2025-06-17T19:15:31.423",
"lastModified": "2025-07-22T14:15:33.827",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:17:06.773",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -36,6 +36,26 @@
},
"exploitabilityScore": 3.9,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
@@ -51,14 +71,64 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-345xx/CVE-2025-34510.json
+54 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34510",
"sourceIdentifier": "[email protected]",
"published": "2025-06-17T19:15:31.557",
"lastModified": "2025-06-17T20:50:23.507",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:22:24.210",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,64 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-345xx/CVE-2025-34511.json
+54 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-34511",
"sourceIdentifier": "[email protected]",
"published": "2025-06-17T19:15:31.683",
"lastModified": "2025-07-22T14:15:33.957",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T19:10:33.220",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,64 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-409xx/CVE-2025-40928.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-40928",
"sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"published": "2025-09-08T15:15:35.810",
"lastModified": "2025-09-08T16:25:38.810",
"lastModified": "2025-09-08T19:15:35.310",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact"
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
CVE-2025/CVE-2025-409xx/CVE-2025-40930.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-40930",
"sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
"published": "2025-09-08T15:15:36.093",
"lastModified": "2025-09-08T16:25:38.810",
"lastModified": "2025-09-08T19:15:35.487",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "JSON::SIMD before version 1.07 and earlier for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
CVE-2025/CVE-2025-437xx/CVE-2025-43722.json
+56
View File
@@ -0,0 +1,56 @@
{
"id": "CVE-2025-43722",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:35.663",
"lastModified": "2025-09-08T19:15:35.663",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper privilege management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"references": [
{
"url": "https://www.dell.com/support/kbdoc/en-us/000363686/dsa-2025-319-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-458xx/CVE-2025-45805.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-45805",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T18:15:34.910",
"lastModified": "2025-09-04T15:35:29.497",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-08T18:57:54.867",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:phpgurukul:doctor_appointment_management_system:1.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "B58B52DB-32F7-4AE0-80A4-9CEA7433587F"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/mhsinj/CVE-2025-45805",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://phpgurukul.com/doctor-appointment-management-system-using-php-and-mysql",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}
CVE-2025/CVE-2025-485xx/CVE-2025-48561.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48561",
"sourceIdentifier": "[email protected]",
"published": "2025-09-04T19:15:43.543",
"lastModified": "2025-09-05T19:08:15.010",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T19:15:35.937",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "CWE-203"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-203"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-485xx/CVE-2025-48562.json
+32 -2
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-48562",
"sourceIdentifier": "[email protected]",
"published": "2025-09-04T19:15:43.690",
"lastModified": "2025-09-05T19:08:26.397",
"vulnStatus": "Analyzed",
"lastModified": "2025-09-08T19:15:36.117",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 1.3,
"impactScore": 3.6
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.3,
"impactScore": 3.6
}
]
},
@@ -45,6 +65,16 @@
"value": "NVD-CWE-noinfo"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-209"
}
]
}
],
"configurations": [
CVE-2025/CVE-2025-515xx/CVE-2025-51586.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-51586",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T17:15:33.830",
"lastModified": "2025-09-08T17:15:33.830",
"lastModified": "2025-09-08T18:15:33.310",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"baseScore": 3.7,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.2,
"impactScore": 1.4
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-359"
}
]
}
],
"references": [
{
"url": "https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.1",
CVE-2025/CVE-2025-521xx/CVE-2025-52161.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-52161",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T15:15:36.383",
"lastModified": "2025-09-08T16:25:38.810",
"lastModified": "2025-09-08T18:15:33.503",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,42 @@
"value": "Scholl Communications AG Weblication CMS Core v019.004.000.000 was discovered to contain a cross-site scripting (XSS) vulnerability."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"references": [
{
"url": "http://scholl.com",
CVE-2025/CVE-2025-524xx/CVE-2025-52494.json
+29 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-52494",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T18:15:35.120",
"lastModified": "2025-09-04T15:35:29.497",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-08T18:50:48.793",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -51,14 +51,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:adacore:ada_web_server:*:*:*:*:*:*:*:*",
"versionEndExcluding": "26.0",
"matchCriteriaId": "423A6212-3351-4936-A734-62A46CD4850D"
}
]
}
]
}
],
"references": [
{
"url": "https://adacore.com",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://docs.adacore.com/corp/security-advisories/SEC.AWS-0095-v1.pdf",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Vendor Advisory",
"Technical Description"
]
}
]
}
CVE-2025/CVE-2025-536xx/CVE-2025-53691.json
+54 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53691",
"sourceIdentifier": "9947ef80-c5d5-474a-bbab-97341a59000e",
"published": "2025-09-03T13:15:49.297",
"lastModified": "2025-09-04T15:36:56.447",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T18:30:40.133",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,64 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-536xx/CVE-2025-53693.json
+54 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53693",
"sourceIdentifier": "9947ef80-c5d5-474a-bbab-97341a59000e",
"published": "2025-09-03T13:15:49.570",
"lastModified": "2025-09-04T15:36:56.447",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T18:28:13.110",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,64 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-536xx/CVE-2025-53694.json
+64 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-53694",
"sourceIdentifier": "9947ef80-c5d5-474a-bbab-97341a59000e",
"published": "2025-09-03T13:15:49.790",
"lastModified": "2025-09-04T15:36:56.447",
"vulnStatus": "Awaiting Analysis",
"lastModified": "2025-09-08T18:11:15.357",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -45,16 +45,76 @@
"value": "CWE-200"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.2",
"versionEndIncluding": "10.4",
"matchCriteriaId": "F805A7BA-F50B-4F32-9849-645B4F448872"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.2",
"versionEndIncluding": "10.4",
"matchCriteriaId": "940C8CE3-7311-479E-8A96-6CD4C4F69E0E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.2",
"versionEndExcluding": "10.4",
"matchCriteriaId": "411C4275-CC92-45AA-801E-1503F861A3A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003734",
"source": "9947ef80-c5d5-474a-bbab-97341a59000e"
"source": "9947ef80-c5d5-474a-bbab-97341a59000e",
"tags": [
"Vendor Advisory"
]
}
]
}
CVE-2025/CVE-2025-551xx/CVE-2025-55162.json
+75 -5
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-55162",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T20:15:33.697",
"lastModified": "2025-09-04T15:35:29.497",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-08T18:42:05.630",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -32,6 +32,26 @@
},
"exploitabilityScore": 2.1,
"impactScore": 4.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
@@ -47,18 +67,68 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.32.10",
"matchCriteriaId": "FA57E951-C59A-4179-9550-AD23F08288E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.33.0",
"versionEndIncluding": "1.33.7",
"matchCriteriaId": "902FA0F1-9760-448F-BCDD-08CFE2C79FBC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*",
"versionStartIncluding": "1.34.0",
"versionEndExcluding": "1.34.5",
"matchCriteriaId": "1F1AA6D9-25A4-4950-A81E-FB151E6BF8C5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:envoyproxy:envoy:1.35.0:*:*:*:*:*:*:*",
"matchCriteriaId": "2645CD2A-8C59-4ED4-AC88-5BE9660B6D08"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/envoyproxy/envoy/releases/tag/v1.35.1",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Release Notes"
]
},
{
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory",
"Mitigation"
]
},
{
"url": "https://github.com/envoyproxy/envoy/security/advisories/GHSA-95j4-hw7f-v2rh",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory",
"Mitigation"
]
}
]
}
CVE-2025/CVE-2025-558xx/CVE-2025-55849.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-55849",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:36.297",
"lastModified": "2025-09-08T19:15:36.297",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee"
}
],
"metrics": {},
"references": [
{
"url": "http://shenzhen.com",
"source": "[email protected]"
},
{
"url": "https://gitee.com/zyun4/wei-php5.0/issues/ICWO0Y",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-561xx/CVE-2025-56139.json
+27 -4
View File
@@ -2,8 +2,8 @@
"id": "CVE-2025-56139",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T20:15:34.680",
"lastModified": "2025-09-04T15:35:29.497",
"vulnStatus": "Undergoing Analysis",
"lastModified": "2025-09-08T18:37:24.330",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
@@ -47,14 +47,37 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:linkedin:linkedin:4.1.1087.2:*:*:*:*:android:*:*",
"matchCriteriaId": "7841A213-4A45-4E6C-88F8-64FF81F0AF4D"
}
]
}
]
}
],
"references": [
{
"url": "https://hdhrmi.blogspot.com/2025/07/aiman-al-hadhrami-linkedin-vulnerability.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://hdhrmi.blogspot.com/2025/09/link-preview-mismatch-cve-2025-56139.html",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-562xx/CVE-2025-56265.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-56265",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:33.720",
"lastModified": "2025-09-08T19:15:36.490",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://github.com/nikolas-ch/CVEs/blob/main/N8N/N8N_v1.100.1/ChatTrigger_StoredXSSviaUnrestrictedFileUpload/StoredXSSviaUnristrictedFileUpload.txt",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/N8N/N8N_v1.100.1",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/N8N/N8N_v1.100.1/ChatTrigger_StoredXSSviaUnrestrictedFileUpload",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-562xx/CVE-2025-56266.json
+72
View File
@@ -0,0 +1,72 @@
{
"id": "CVE-2025-56266",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:33.870",
"lastModified": "2025-09-08T19:15:36.710",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-74"
},
{
"lang": "en",
"value": "CWE-116"
},
{
"lang": "en",
"value": "CWE-444"
}
]
}
],
"references": [
{
"url": "https://github.com/nikolas-ch/CVEs/blob/main/AvigilonACM_v7.10.0.20/HostHeaderInjection/HostHeaderInjection.txt",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20/",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20/HostHeaderInjection",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-562xx/CVE-2025-56267.json
+64
View File
@@ -0,0 +1,64 @@
{
"id": "CVE-2025-56267",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:34.020",
"lastModified": "2025-09-08T19:15:36.920",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-1236"
}
]
}
],
"references": [
{
"url": "https://github.com/nikolas-ch/CVEs/blob/main/AvigilonACM_v7.10.0.20/CSV_Injection/CSV_Injection.txt",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20",
"source": "[email protected]"
},
{
"url": "https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20/CSV_Injection",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-568xx/CVE-2025-56803.json
+38 -6
View File
@@ -2,13 +2,20 @@
"id": "CVE-2025-56803",
"sourceIdentifier": "[email protected]",
"published": "2025-09-03T18:15:35.590",
"lastModified": "2025-09-04T15:35:29.497",
"vulnStatus": "Undergoing Analysis",
"cveTags": [],
"lastModified": "2025-09-08T19:15:37.143",
"vulnStatus": "Modified",
"cveTags": [
{
"sourceIdentifier": "[email protected]",
"tags": [
"disputed"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process.exec without validation, leading to possible RCE."
"value": "Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An attacker can execute arbitrary OS commands by setting a crafted build field in the plugin's manifest.json. This field is passed to child_process.exec without validation, leading to possible RCE. NOTE: this is disputed by the Supplier because the behavior only allows a local user to attack himself via a local plugin. The local build procedure, which is essential to the attack, is not executed for plugins shared to the Figma Community."
}
],
"metrics": {
@@ -47,14 +54,39 @@
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:figma:desktop:125.6.5:*:*:*:*:windows:*:*",
"matchCriteriaId": "5E6C16A8-304D-463F-9B4F-BF893835E1EB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/shinyColumn/CVE-2025-56803",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://shinycolumn.notion.site/figma-command-injection",
"source": "[email protected]"
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}
CVE-2025/CVE-2025-572xx/CVE-2025-57285.json
+25
View File
@@ -0,0 +1,25 @@
{
"id": "CVE-2025-57285",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T18:15:34.160",
"lastModified": "2025-09-08T18:15:34.160",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js). The execSync command directly concatenates the user-controlled directoryPath parameter without sanitization or escaping, allowing attackers to execute arbitrary commands."
}
],
"metrics": {},
"references": [
{
"url": "https://gist.github.com/Dremig/1ba111f9b1f7cffe1fcb4838b64e55b9",
"source": "[email protected]"
},
{
"url": "https://www.npmjs.com",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-590xx/CVE-2025-59033.json
+37 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-59033",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T15:15:37.983",
"lastModified": "2025-09-08T16:25:38.810",
"lastModified": "2025-09-08T18:15:34.520",
"vulnStatus": "Awaiting Analysis",
"cveTags": [
{
@@ -18,7 +18,42 @@
"value": "The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. On systems that do not have hypervisor-protected code integrity (HVCI) enabled, entries that specify only the to-be-signed (TBS) part of the code signer certificate are properly blocked, but entries that specify the signing certificate\u00e2\u20ac\u2122s TBS hash along with a 'FileAttribRef' qualifier (such as file name or version) will not be blocked. This vulnerability affects any Windows system that does not have HVCI enabled or supported (HVCI is available in Windows 10, Windows 11, and Windows Server 2016 and later). NOTE: The vendor states that the driver blocklist is intended for use with HVCI, while systems without HVCI should use App Control, and any custom blocklist entries require a granular approach for proper enforcement."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-693"
}
]
}
],
"references": [
{
"url": "https://learn.microsoft.com/en-us/windows/security/application-security/application-control/app-control-for-business/design/microsoft-recommended-driver-block-rules",
CVE-2025/CVE-2025-80xx/CVE-2025-8085.json
+25 -2
View File
@@ -2,7 +2,7 @@
"id": "CVE-2025-8085",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T06:15:34.833",
"lastModified": "2025-09-08T16:25:38.810",
"lastModified": "2025-09-08T19:15:37.450",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
@@ -11,7 +11,30 @@
"value": "The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems endpoint, allowing unauthenticated visitors to make requests to arbitrary URLs."
}
],
"metrics": {},
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
]
},
"references": [
{
"url": "https://wpscan.com/vulnerability/f42c37bb-1ae0-49ab-bd81-7864dff0fcff/",
CVE-2025/CVE-2025-91xx/CVE-2025-9112.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-9112",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:37.610",
"lastModified": "2025-09-08T19:15:37.610",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'doccure_temp_file_uploader' function in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://themeforest.net/item/doccure-medical-wordpress-theme/34329202",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/2f38498d-0560-4935-b1f5-1fdb62f49a5b?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-91xx/CVE-2025-9113.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-9113",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:37.820",
"lastModified": "2025-09-08T19:15:37.820",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Doccure theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'doccure_temp_upload_to_media' function in all versions up to, and including, 1.4.8. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-434"
}
]
}
],
"references": [
{
"url": "https://themeforest.net/item/doccure-medical-wordpress-theme/34329202",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/6ff01c24-fa35-43bc-be60-f2bb37854681?source=cve",
"source": "[email protected]"
}
]
}
CVE-2025/CVE-2025-91xx/CVE-2025-9114.json
+60
View File
@@ -0,0 +1,60 @@
{
"id": "CVE-2025-9114",
"sourceIdentifier": "[email protected]",
"published": "2025-09-08T19:15:38.007",
"lastModified": "2025-09-08T19:15:38.007",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Doccure theme for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.4.8. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-639"
}
]
}
],
"references": [
{
"url": "https://themeforest.net/item/doccure-medical-wordpress-theme/34329202",
"source": "[email protected]"
},
{
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8f8b1d8f-b2b6-415c-91f2-e5b98048258d?source=cve",
"source": "[email protected]"
}
]
}
README.md
+44 -34
View File
@@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours.
### Last Repository Update
```plain
2025-09-08T18:00:12.956983+00:00
2025-09-08T20:00:12.151463+00:00
```
### Most recent CVE Modification Timestamp synchronized with NVD
```plain
2025-09-08T17:57:57.707000+00:00
2025-09-08T19:57:12.180000+00:00
```
### Last Data Feed Release
@@ -33,48 +33,58 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/
### Total Number of included CVEs
```plain
308672
308686
```
### CVEs added in the last Commit
Recently added CVEs: `4`
Recently added CVEs: `14`
- [CVE-2025-10096](CVE-2025/CVE-2025-100xx/CVE-2025-10096.json) (`2025-09-08T16:15:35.913`)
- [CVE-2025-10097](CVE-2025/CVE-2025-100xx/CVE-2025-10097.json) (`2025-09-08T17:15:32.953`)
- [CVE-2025-10098](CVE-2025/CVE-2025-100xx/CVE-2025-10098.json) (`2025-09-08T17:15:33.573`)
- [CVE-2025-51586](CVE-2025/CVE-2025-515xx/CVE-2025-51586.json) (`2025-09-08T17:15:33.830`)
- [CVE-2024-48341](CVE-2024/CVE-2024-483xx/CVE-2024-48341.json) (`2025-09-08T19:15:33.423`)
- [CVE-2025-10099](CVE-2025/CVE-2025-100xx/CVE-2025-10099.json) (`2025-09-08T18:15:32.000`)
- [CVE-2025-10100](CVE-2025/CVE-2025-101xx/CVE-2025-10100.json) (`2025-09-08T18:15:32.253`)
- [CVE-2025-10102](CVE-2025/CVE-2025-101xx/CVE-2025-10102.json) (`2025-09-08T19:15:34.670`)
- [CVE-2025-10103](CVE-2025/CVE-2025-101xx/CVE-2025-10103.json) (`2025-09-08T19:15:34.890`)
- [CVE-2025-43722](CVE-2025/CVE-2025-437xx/CVE-2025-43722.json) (`2025-09-08T19:15:35.663`)
- [CVE-2025-55849](CVE-2025/CVE-2025-558xx/CVE-2025-55849.json) (`2025-09-08T19:15:36.297`)
- [CVE-2025-56265](CVE-2025/CVE-2025-562xx/CVE-2025-56265.json) (`2025-09-08T18:15:33.720`)
- [CVE-2025-56266](CVE-2025/CVE-2025-562xx/CVE-2025-56266.json) (`2025-09-08T18:15:33.870`)
- [CVE-2025-56267](CVE-2025/CVE-2025-562xx/CVE-2025-56267.json) (`2025-09-08T18:15:34.020`)
- [CVE-2025-57285](CVE-2025/CVE-2025-572xx/CVE-2025-57285.json) (`2025-09-08T18:15:34.160`)
- [CVE-2025-9112](CVE-2025/CVE-2025-91xx/CVE-2025-9112.json) (`2025-09-08T19:15:37.610`)
- [CVE-2025-9113](CVE-2025/CVE-2025-91xx/CVE-2025-9113.json) (`2025-09-08T19:15:37.820`)
- [CVE-2025-9114](CVE-2025/CVE-2025-91xx/CVE-2025-9114.json) (`2025-09-08T19:15:38.007`)
### CVEs modified in the last Commit
Recently modified CVEs: `295`
Recently modified CVEs: `31`
- [CVE-2025-9666](CVE-2025/CVE-2025-96xx/CVE-2025-9666.json) (`2025-09-08T16:38:09.263`)
- [CVE-2025-9667](CVE-2025/CVE-2025-96xx/CVE-2025-9667.json) (`2025-09-08T16:47:48.010`)
- [CVE-2025-9674](CVE-2025/CVE-2025-96xx/CVE-2025-9674.json) (`2025-09-08T16:35:50.293`)
- [CVE-2025-9675](CVE-2025/CVE-2025-96xx/CVE-2025-9675.json) (`2025-09-08T16:22:56.940`)
- [CVE-2025-9676](CVE-2025/CVE-2025-96xx/CVE-2025-9676.json) (`2025-09-08T16:14:04.183`)
- [CVE-2025-9677](CVE-2025/CVE-2025-96xx/CVE-2025-9677.json) (`2025-09-08T16:07:57.417`)
- [CVE-2025-9699](CVE-2025/CVE-2025-96xx/CVE-2025-9699.json) (`2025-09-08T16:52:57.603`)
- [CVE-2025-9700](CVE-2025/CVE-2025-97xx/CVE-2025-9700.json) (`2025-09-08T16:52:42.440`)
- [CVE-2025-9701](CVE-2025/CVE-2025-97xx/CVE-2025-9701.json) (`2025-09-08T16:52:30.373`)
- [CVE-2025-9702](CVE-2025/CVE-2025-97xx/CVE-2025-9702.json) (`2025-09-08T16:52:21.800`)
- [CVE-2025-9704](CVE-2025/CVE-2025-97xx/CVE-2025-9704.json) (`2025-09-08T16:52:11.083`)
- [CVE-2025-9705](CVE-2025/CVE-2025-97xx/CVE-2025-9705.json) (`2025-09-08T16:51:56.327`)
- [CVE-2025-9706](CVE-2025/CVE-2025-97xx/CVE-2025-9706.json) (`2025-09-08T16:51:46.280`)
- [CVE-2025-9709](CVE-2025/CVE-2025-97xx/CVE-2025-9709.json) (`2025-09-08T16:25:38.810`)
- [CVE-2025-9849](CVE-2025/CVE-2025-98xx/CVE-2025-9849.json) (`2025-09-08T16:25:38.810`)
- [CVE-2025-9853](CVE-2025/CVE-2025-98xx/CVE-2025-9853.json) (`2025-09-08T16:25:38.810`)
- [CVE-2025-9923](CVE-2025/CVE-2025-99xx/CVE-2025-9923.json) (`2025-09-08T16:42:51.653`)
- [CVE-2025-9924](CVE-2025/CVE-2025-99xx/CVE-2025-9924.json) (`2025-09-08T16:43:02.070`)
- [CVE-2025-9925](CVE-2025/CVE-2025-99xx/CVE-2025-9925.json) (`2025-09-08T16:47:17.650`)
- [CVE-2025-9926](CVE-2025/CVE-2025-99xx/CVE-2025-9926.json) (`2025-09-08T16:46:58.010`)
- [CVE-2025-9929](CVE-2025/CVE-2025-99xx/CVE-2025-9929.json) (`2025-09-08T16:45:40.747`)
- [CVE-2025-9930](CVE-2025/CVE-2025-99xx/CVE-2025-9930.json) (`2025-09-08T16:43:41.247`)
- [CVE-2025-9932](CVE-2025/CVE-2025-99xx/CVE-2025-9932.json) (`2025-09-08T16:43:28.063`)
- [CVE-2025-9933](CVE-2025/CVE-2025-99xx/CVE-2025-9933.json) (`2025-09-08T16:43:21.790`)
- [CVE-2025-9961](CVE-2025/CVE-2025-99xx/CVE-2025-9961.json) (`2025-09-08T16:25:38.810`)
- [CVE-2024-32027](CVE-2024/CVE-2024-320xx/CVE-2024-32027.json) (`2025-09-08T19:30:53.710`)
- [CVE-2024-34064](CVE-2024/CVE-2024-340xx/CVE-2024-34064.json) (`2025-09-08T19:27:31.120`)
- [CVE-2024-56189](CVE-2024/CVE-2024-561xx/CVE-2024-56189.json) (`2025-09-08T18:15:31.293`)
- [CVE-2024-8956](CVE-2024/CVE-2024-89xx/CVE-2024-8956.json) (`2025-09-08T19:15:33.610`)
- [CVE-2024-8957](CVE-2024/CVE-2024-89xx/CVE-2024-8957.json) (`2025-09-08T19:15:33.780`)
- [CVE-2025-26210](CVE-2025/CVE-2025-262xx/CVE-2025-26210.json) (`2025-09-08T18:15:32.490`)
- [CVE-2025-34509](CVE-2025/CVE-2025-345xx/CVE-2025-34509.json) (`2025-09-08T19:17:06.773`)
- [CVE-2025-34510](CVE-2025/CVE-2025-345xx/CVE-2025-34510.json) (`2025-09-08T19:22:24.210`)
- [CVE-2025-34511](CVE-2025/CVE-2025-345xx/CVE-2025-34511.json) (`2025-09-08T19:10:33.220`)
- [CVE-2025-40928](CVE-2025/CVE-2025-409xx/CVE-2025-40928.json) (`2025-09-08T19:15:35.310`)
- [CVE-2025-40930](CVE-2025/CVE-2025-409xx/CVE-2025-40930.json) (`2025-09-08T19:15:35.487`)
- [CVE-2025-45805](CVE-2025/CVE-2025-458xx/CVE-2025-45805.json) (`2025-09-08T18:57:54.867`)
- [CVE-2025-48561](CVE-2025/CVE-2025-485xx/CVE-2025-48561.json) (`2025-09-08T19:15:35.937`)
- [CVE-2025-48562](CVE-2025/CVE-2025-485xx/CVE-2025-48562.json) (`2025-09-08T19:15:36.117`)
- [CVE-2025-51586](CVE-2025/CVE-2025-515xx/CVE-2025-51586.json) (`2025-09-08T18:15:33.310`)
- [CVE-2025-52161](CVE-2025/CVE-2025-521xx/CVE-2025-52161.json) (`2025-09-08T18:15:33.503`)
- [CVE-2025-52494](CVE-2025/CVE-2025-524xx/CVE-2025-52494.json) (`2025-09-08T18:50:48.793`)
- [CVE-2025-53691](CVE-2025/CVE-2025-536xx/CVE-2025-53691.json) (`2025-09-08T18:30:40.133`)
- [CVE-2025-53693](CVE-2025/CVE-2025-536xx/CVE-2025-53693.json) (`2025-09-08T18:28:13.110`)
- [CVE-2025-53694](CVE-2025/CVE-2025-536xx/CVE-2025-53694.json) (`2025-09-08T18:11:15.357`)
- [CVE-2025-55162](CVE-2025/CVE-2025-551xx/CVE-2025-55162.json) (`2025-09-08T18:42:05.630`)
- [CVE-2025-56139](CVE-2025/CVE-2025-561xx/CVE-2025-56139.json) (`2025-09-08T18:37:24.330`)
- [CVE-2025-56803](CVE-2025/CVE-2025-568xx/CVE-2025-56803.json) (`2025-09-08T19:15:37.143`)
- [CVE-2025-59033](CVE-2025/CVE-2025-590xx/CVE-2025-59033.json) (`2025-09-08T18:15:34.520`)
- [CVE-2025-8085](CVE-2025/CVE-2025-80xx/CVE-2025-8085.json) (`2025-09-08T19:15:37.450`)
## Download and Usage
_state.csv
+337 -323
View File
File diff suppressed because it is too large. Load diff