Auto-Update: 2025-06-19T16:00:20.308673+00:00

CVE-2005/CVE-2005-23xx/CVE-2005-2347.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2005-2347",
+  "sourceIdentifier": "security@debian.org",
+  "published": "2025-06-19T11:15:23.593",
+  "lastModified": "2025-06-19T11:15:23.593",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2009/CVE-2009-26xx/CVE-2009-2631.json

@@ -2,13 +2,13 @@
   "id": "CVE-2009-2631",
   "sourceIdentifier": "cret@cert.org",
   "published": "2009-12-04T11:30:00.437",
-  "lastModified": "2025-04-09T00:30:58.490",
+  "lastModified": "2025-06-16T21:15:22.113",
   "vulnStatus": "Deferred",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design."
+      "value": "Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design"
     },
     {
       "lang": "es",
@@ -43,6 +43,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "cret@cert.org",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-284"
+        }
+      ]
+    },
     {
       "source": "nvd@nist.gov",
       "type": "Primary",
@@ -93,134 +103,11 @@
   ],
   "references": [
     {
-      "url": "http://kb.juniper.net/KB15799",
+      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0005",
       "source": "cret@cert.org"
     },
     {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/238",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/269",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/270",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://secunia.com/advisories/37696",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37786",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37788",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37789",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://securitytracker.com/id?1023255",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=984744",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.kb.cert.org/vuls/id/261869",
-      "source": "cret@cert.org",
-      "tags": [
-        "US Government Resource"
-      ]
-    },
-    {
-      "url": "http://www.securityfocus.com/archive/1/508164/100/0/threaded",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.securityfocus.com/bid/37152",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.sonicwall.com/us/2123_14882.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.sonicwall.com/us/2123_14883.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.stonesoft.com/en/support/security_advisories/2009_03_12.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3567",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3568",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3569",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3570",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3571",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/50/025367-01.pdf",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54523",
+      "url": "https://www.kb.cert.org/vuls/id/261869",
       "source": "cret@cert.org"
     },
     {

CVE-2016/CVE-2016-33xx/CVE-2016-3399.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2016-3399",
+  "sourceIdentifier": "security@debian.org",
+  "published": "2025-06-19T09:15:21.290",
+  "lastModified": "2025-06-19T09:15:21.290",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2018/CVE-2018-145xx/CVE-2018-14520.json

@@ -2,7 +2,7 @@
   "id": "CVE-2018-14520",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-24T20:15:08.510",
-  "lastModified": "2024-11-21T03:49:15.140",
+  "lastModified": "2025-06-17T20:15:23.837",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2018/CVE-2018-162xx/CVE-2018-16210.json

@@ -2,8 +2,8 @@
   "id": "CVE-2018-16210",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2018-10-12T22:15:07.377",
-  "lastModified": "2024-11-21T03:52:17.730",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T17:56:26.900",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -16,13 +16,13 @@
     }
   ],
   "metrics": {
-    "cvssMetricV30": [
+    "cvssMetricV31": [
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
         "cvssData": {
-          "version": "3.0",
-          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
           "baseScore": 6.1,
           "baseSeverity": "MEDIUM",
           "attackVector": "NETWORK",
@@ -77,6 +77,370 @@
     }
   ],
   "configurations": [
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "051F8A1F-4792-44FE-A35E-DD1BFD71FC43"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6330A839-FAE3-43EB-B1AA-BA6844D9906D"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "AA136553-094E-4760-9C25-89E0954F4B95"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "54E13E9C-226E-4BD6-8F0C-3061092E892A"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "0E3196F5-4242-40DB-8D56-9E580C69D478"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "488896BD-593D-46AA-9521-CA089F8D6977"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "8C6FB898-CBBC-4D80-ABCD-04B3E9BA5B82"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "BE14C0B9-8B13-479D-9341-866B9FC71F9D"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "E61D2577-BB7F-4EC0-8709-C68026322EA9"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "8E001859-A338-43DA-877E-C43F57E7F9AD"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6C0865A4-6C89-4470-98E3-7E90BDF94D15"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "3631065F-27D6-4217-84EA-A8B40CC1F38F"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "1E940C38-F03A-4D81-9AEA-C3CAC90916E8"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "A5974664-66D9-45BC-8977-98E3CE1D282F"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "72B66D0B-53CF-4018-831A-5A67CBA51B14"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "FF2B7B07-532C-4D7B-B168-A9C3700EE8DD"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8"
+            }
+          ]
+        }
+      ]
+    },
     {
       "operator": "AND",
       "nodes": [

CVE-2018/CVE-2018-251xx/CVE-2018-25111.json

@@ -2,8 +2,8 @@
   "id": "CVE-2018-25111",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2025-05-31T01:15:19.123",
-  "lastModified": "2025-06-02T17:32:17.397",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-16T16:25:41.307",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.5,
         "impactScore": 2.5
+      },
+      {
+        "source": "nvd@nist.gov",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+          "baseScore": 4.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 2.5
       }
     ]
   },
@@ -51,22 +71,56 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/issues/591",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0",
-      "source": "cve@mitre.org"
-    },
-    {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
-      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:django-helpdesk_project:django-helpdesk:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "1.0.0",
+              "matchCriteriaId": "55830F69-2DB2-4842-B7A8-906646B862FA"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/issues/591",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Exploit",
+        "Third Party Advisory",
+        "Patch"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Release Notes"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "tags": [
+        "Exploit",
+        "Third Party Advisory",
+        "Patch"
+      ]
     }
   ]
 }

CVE-2018/CVE-2018-59xx/CVE-2018-5996.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2018-01-31T18:29:00.363",
   "lastModified": "2025-01-10T19:15:28.730",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {

CVE-2018/CVE-2018-93xx/CVE-2018-9372.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "security@android.com",
   "published": "2024-11-19T20:15:27.917",
   "lastModified": "2024-11-21T16:15:17.900",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2018/CVE-2018-94xx/CVE-2018-9409.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "security@android.com",
   "published": "2024-11-19T20:15:27.970",
   "lastModified": "2024-11-20T20:35:04.480",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2020/CVE-2020-138xx/CVE-2020-13878.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-13878",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-05T08:15:41.840",
-  "lastModified": "2024-11-21T05:02:03.590",
+  "lastModified": "2025-06-17T15:15:33.890",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-138xx/CVE-2020-13880.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-13880",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-05T09:15:08.587",
-  "lastModified": "2024-11-21T05:02:03.877",
+  "lastModified": "2025-06-18T16:15:19.850",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-266xx/CVE-2020-26624.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-26624",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-02T22:15:07.837",
-  "lastModified": "2024-11-21T05:20:09.577",
+  "lastModified": "2025-06-17T15:15:34.790",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 2.5
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
+          "baseScore": 3.8,
+          "baseSeverity": "LOW",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 2.5
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-80xx/CVE-2020-8006.json

@@ -2,8 +2,8 @@
   "id": "CVE-2020-8006",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-04-12T12:15:41.467",
-  "lastModified": "2024-11-21T05:38:12.083",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-17T21:01:15.817",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,52 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:circontrol:raption_server:*:*:*:*:*:*:*:*",
+              "versionEndIncluding": "5.11.2",
+              "matchCriteriaId": "90380BD4-1577-43CA-919D-55974517E129"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Mailing List"
+      ]
+    },
+    {
+      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mailing List"
+      ]
     }
   ]
 }

CVE-2021/CVE-2021-204xx/CVE-2021-20450.json

@@ -2,8 +2,8 @@
   "id": "CVE-2021-20450",
   "sourceIdentifier": "psirt@us.ibm.com",
   "published": "2024-05-03T17:15:07.363",
-  "lastModified": "2024-12-05T21:15:06.663",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T15:21:00.173",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,61 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
-      "source": "psirt@us.ibm.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:10.4.1:*:*:*:*:*:*:*",
+              "matchCriteriaId": "04E5A9C3-0F44-40C1-B6B6-92839E386F56"
             },
             {
-      "url": "https://www.ibm.com/support/pages/node/7149876",
-      "source": "psirt@us.ibm.com"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:10.4.2:*:*:*:*:*:*:*",
+              "matchCriteriaId": "7AA07D9A-71F7-446A-8A8E-DD8C357666F0"
             },
             {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://www.ibm.com/support/pages/node/7149876",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:11.0.0:*:*:*:*:*:*:*",
+              "matchCriteriaId": "4BB85020-BF02-4C91-B494-93FB19185006"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://www.ibm.com/support/pages/node/7149876",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://www.ibm.com/support/pages/node/7149876",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2021/CVE-2021-205xx/CVE-2021-20587.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-20587",
   "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
   "published": "2021-02-19T20:15:12.833",
-  "lastModified": "2024-11-21T05:46:49.637",
+  "lastModified": "2025-06-13T00:15:20.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) all versions, iQ Monozukuri Process Remote Monitoring (Data Transfer) all versions, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
+      "value": "Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
     },
     {
       "lang": "es",
@@ -17,6 +17,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
@@ -66,8 +86,18 @@
   },
   "weaknesses": [
     {
-      "source": "nvd@nist.gov",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-122"
+        }
+      ]
+    },
+    {
+      "source": "nvd@nist.gov",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -316,26 +346,16 @@
   ],
   "references": [
     {
-      "url": "https://jvn.jp/vu/JVNVU92330101/index.html",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://jvn.jp/vu/JVNVU92330101",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory",
-        "US Government Resource"
-      ]
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Vendor Advisory"
-      ]
+      "url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://jvn.jp/vu/JVNVU92330101/index.html",

CVE-2021/CVE-2021-205xx/CVE-2021-20588.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-20588",
   "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
   "published": "2021-02-19T20:15:13.023",
-  "lastModified": "2024-11-21T05:46:49.790",
+  "lastModified": "2025-06-13T00:15:22.797",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) all versions, iQ Monozukuri Process Remote Monitoring (Data Transfer) all versions, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
+      "value": "Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
     },
     {
       "lang": "es",
@@ -17,6 +17,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
@@ -66,8 +86,18 @@
   },
   "weaknesses": [
     {
-      "source": "nvd@nist.gov",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-130"
+        }
+      ]
+    },
+    {
+      "source": "nvd@nist.gov",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -316,22 +346,16 @@
   ],
   "references": [
     {
-      "url": "https://jvn.jp/vu/JVNVU92330101/index.html",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://jvn.jp/vu/JVNVU92330101",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
       "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Vendor Advisory"
-      ]
+      "url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://jvn.jp/vu/JVNVU92330101/index.html",

CVE-2021/CVE-2021-210xx/CVE-2021-21000.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "info@cert.vde.com",
   "published": "2021-05-24T11:15:07.917",
   "lastModified": "2024-11-21T05:47:22.593",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-210xx/CVE-2021-21001.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "info@cert.vde.com",
   "published": "2021-05-24T11:15:07.980",
   "lastModified": "2024-11-21T05:47:22.780",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-238xx/CVE-2021-23814.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-23814",
   "sourceIdentifier": "report@snyk.io",
   "published": "2021-12-17T20:15:08.340",
-  "lastModified": "2024-11-21T05:51:53.883",
+  "lastModified": "2025-06-17T12:15:20.773",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "This affects the package unisharp/laravel-filemanager from 0.0.0. The upload() function does not sufficiently validate the file type when uploading. An attacker may be able to reproduce the following steps: - Install a package with a web Laravel application. - Navigate to the Upload window - Upload an image file, then capture the request - Edit the request contents with a malicious file (webshell) - Enter the path of file uploaded on URL - Remote Code Execution **Note: Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in the [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories)."
+      "value": "This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading.\r\rAn attacker may be able to reproduce the following steps:\r\r1. Install a package with a web Laravel application.\r2. Navigate to the Upload window\r3. Upload an image file, then capture the request\r4. Edit the request contents with a malicious file (webshell)\r5. Enter the path of file uploaded on URL - Remote Code Execution\r\r\r**Note:** Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories)."
     },
     {
       "lang": "es",
@@ -85,6 +85,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "report@snyk.io",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-94"
+        }
+      ]
+    },
     {
       "source": "nvd@nist.gov",
       "type": "Primary",
@@ -124,15 +134,20 @@
       ]
     },
     {
-      "url": "https://github.com/UniSharp/laravel-filemanager/issues/1113#issuecomment-1812092975",
+      "url": "https://github.com/UniSharp/laravel-filemanager/issues/1113",
       "source": "report@snyk.io"
     },
     {
-      "url": "https://snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199",
-      "source": "report@snyk.io",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.5.1",
+      "source": "report@snyk.io"
+    },
+    {
+      "url": "https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.6.2",
+      "source": "report@snyk.io"
+    },
+    {
+      "url": "https://security.snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199",
+      "source": "report@snyk.io"
     },
     {
       "url": "https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php%23L26",

CVE-2021/CVE-2021-251xx/CVE-2021-25117.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-25117",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.213",
-  "lastModified": "2024-11-21T05:54:23.110",
+  "lastModified": "2025-06-17T14:15:26.197",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.7,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 4.8,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.7,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2021/CVE-2021-290xx/CVE-2021-29050.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-20T22:15:08.067",
   "lastModified": "2024-11-21T06:00:35.950",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30184.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-04-07T12:15:16.437",
   "lastModified": "2025-01-12T21:15:18.060",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30186.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.677",
   "lastModified": "2024-11-21T06:03:29.010",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30187.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T12:15:07.913",
   "lastModified": "2024-11-21T06:03:29.160",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30188.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.710",
   "lastModified": "2024-11-21T06:03:29.317",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30189.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.743",
   "lastModified": "2024-11-21T06:03:29.460",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30190.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.777",
   "lastModified": "2024-11-21T06:03:29.610",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30191.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.807",
   "lastModified": "2024-11-21T06:03:29.753",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30192.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.837",
   "lastModified": "2024-11-21T06:03:29.900",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30193.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.880",
   "lastModified": "2024-11-21T06:03:30.067",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30194.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.910",
   "lastModified": "2024-11-21T06:03:30.227",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30195.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.940",
   "lastModified": "2024-11-21T06:03:30.370",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-382xx/CVE-2021-38243.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-38243",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2023-09-27T15:15:54.463",
-  "lastModified": "2024-11-21T06:16:41.073",
+  "lastModified": "2025-06-18T15:15:19.803",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-94"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-435xx/CVE-2021-43584.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-43584",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-24T20:15:53.610",
-  "lastModified": "2024-11-21T06:29:29.450",
+  "lastModified": "2025-06-16T20:15:23.203",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.7,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 4.8,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.7,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-469xx/CVE-2021-46902.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-46902",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-04T21:15:07.840",
-  "lastModified": "2024-11-21T06:34:53.637",
+  "lastModified": "2025-06-17T18:15:22.437",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-22"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-469xx/CVE-2021-46903.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-46903",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-04T21:15:07.900",
-  "lastModified": "2024-11-21T06:34:53.800",
+  "lastModified": "2025-06-17T18:15:22.650",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.2
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.2
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-Other"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-284"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-471xx/CVE-2021-47144.json

@@ -2,174 +2,15 @@
   "id": "CVE-2021-47144",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-03-25T09:15:08.950",
-  "lastModified": "2024-12-17T14:49:22.333",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T14:15:24.327",
+  "vulnStatus": "Rejected",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/amdgpu: fix refcount leak\n\n[Why]\nthe gem object rfb->base.obj[0] is get according to num_planes\nin amdgpufb_create, but is not put according to num_planes\n\n[How]\nput rfb->base.obj[0] in amdgpu_fbdev_destroy according to num_planes"
-    },
-    {
-      "lang": "es",
-      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/amdgpu: corrige la fuga de refcount [Por qu\u00e9] el objeto gema rfb->base.obj[0] se obtiene seg\u00fan num_planes en amdgpufb_create, pero no se coloca seg\u00fan num_planes en amdgpufb_create num_planes [C\u00f3mo] poner rfb->base.obj[0] en amdgpu_fbdev_destroy seg\u00fan num_planes"
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
     }
   ],
-  "metrics": {
-    "cvssMetricV31": [
-      {
-        "source": "nvd@nist.gov",
-        "type": "Primary",
-        "cvssData": {
-          "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
-          "baseScore": 5.5,
-          "baseSeverity": "MEDIUM",
-          "attackVector": "LOCAL",
-          "attackComplexity": "LOW",
-          "privilegesRequired": "LOW",
-          "userInteraction": "NONE",
-          "scope": "UNCHANGED",
-          "confidentialityImpact": "NONE",
-          "integrityImpact": "NONE",
-          "availabilityImpact": "HIGH"
-        },
-        "exploitabilityScore": 1.8,
-        "impactScore": 3.6
-      }
-    ]
-  },
-  "weaknesses": [
-    {
-      "source": "nvd@nist.gov",
-      "type": "Primary",
-      "description": [
-        {
-          "lang": "en",
-          "value": "NVD-CWE-Other"
-        }
-      ]
-    }
-  ],
-  "configurations": [
-    {
-      "nodes": [
-        {
-          "operator": "OR",
-          "negate": false,
-          "cpeMatch": [
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionEndExcluding": "4.19.193",
-              "matchCriteriaId": "A3FDF344-70E4-41FE-8424-F05D70B8DC0F"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.4.0",
-              "versionEndExcluding": "5.4.124",
-              "matchCriteriaId": "F717E3E3-B420-411F-AECC-2D26A9F33F0F"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.10.0",
-              "versionEndExcluding": "5.10.42",
-              "matchCriteriaId": "18765089-FB00-4E06-82C2-69FE64CAB42D"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.12.0",
-              "versionEndExcluding": "5.12.9",
-              "matchCriteriaId": "B1F28E29-3C08-49BB-BCE1-C601F43C091D"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*",
-              "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*",
-              "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532"
-            }
-          ]
-        }
-      ]
-    }
-  ],
-  "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/599e5d61ace952b0bb9bd942b198bbd0cfded1d7",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/95a4ec905e51a30c64cf2d78b04a7acbeae5ca94",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/9fdb8ed37a3a44f9c49372b69f87fd5f61cb3240",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/dde2656e0bbb2ac7d83a7bd95a8d5c3c95bbc009",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/fa7e6abc75f3d491bc561734312d065dc9dc2a77",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/599e5d61ace952b0bb9bd942b198bbd0cfded1d7",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/95a4ec905e51a30c64cf2d78b04a7acbeae5ca94",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/9fdb8ed37a3a44f9c49372b69f87fd5f61cb3240",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/dde2656e0bbb2ac7d83a7bd95a8d5c3c95bbc009",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/fa7e6abc75f3d491bc561734312d065dc9dc2a77",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    }
-  ]
+  "metrics": {},
+  "references": []
 }

CVE-2021/CVE-2021-471xx/CVE-2021-47156.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-03-18T05:15:06.260",
   "lastModified": "2025-03-27T20:15:16.147",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2022/CVE-2022-14xx/CVE-2022-1471.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1471",
   "sourceIdentifier": "cve-coordination@google.com",
   "published": "2022-12-01T11:15:10.553",
-  "lastModified": "2025-02-13T17:15:35.627",
+  "lastModified": "2025-06-18T09:15:47.243",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -116,6 +116,10 @@
         "Third Party Advisory"
       ]
     },
+    {
+      "url": "https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html",
+      "source": "cve-coordination@google.com"
+    },
     {
       "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
       "source": "cve-coordination@google.com",
@@ -136,6 +140,10 @@
       "url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc",
       "source": "cve-coordination@google.com"
     },
+    {
+      "url": "https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c",
+      "source": "cve-coordination@google.com"
+    },
     {
       "url": "https://security.netapp.com/advisory/ntap-20230818-0015/",
       "source": "cve-coordination@google.com"

CVE-2022/CVE-2022-18xx/CVE-2022-1807.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1807",
   "sourceIdentifier": "security-alert@sophos.com",
   "published": "2022-09-07T18:15:08.647",
-  "lastModified": "2024-11-21T06:41:30.647",
+  "lastModified": "2025-06-17T20:15:24.970",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -69,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-215xx/CVE-2022-21505.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-21505",
   "sourceIdentifier": "secalert_us@oracle.com",
   "published": "2024-12-24T19:15:06.763",
-  "lastModified": "2024-12-27T17:15:06.320",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T20:42:10.643",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,14 +51,47 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b",
-      "source": "secalert_us@oracle.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*",
+              "matchCriteriaId": "44B8FEDF-6CB0-46E9-9AD7-4445B001C158"
             },
             {
-      "url": "https://linux.oracle.com/cve/CVE-2022-21505.html",
-      "source": "secalert_us@oracle.com"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:*",
+              "matchCriteriaId": "CA9021D6-6027-42E9-A12D-7EA32C5C63F1"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*",
+              "matchCriteriaId": "9E6116DA-D643-4C6D-8B90-0A41125F1EF0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b",
+      "source": "secalert_us@oracle.com",
+      "tags": [
+        "Broken Link"
+      ]
+    },
+    {
+      "url": "https://linux.oracle.com/cve/CVE-2022-21505.html",
+      "source": "secalert_us@oracle.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-231xx/CVE-2022-23180.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-23180",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.787",
-  "lastModified": "2024-11-21T06:48:08.517",
+  "lastModified": "2025-06-16T18:15:19.997",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },

CVE-2022/CVE-2022-236xx/CVE-2022-23689.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-23689",
   "sourceIdentifier": "security-alert@hpe.com",
   "published": "2022-09-06T18:15:11.313",
-  "lastModified": "2024-11-21T06:49:06.443",
+  "lastModified": "2025-06-17T20:15:25.123",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "ADJACENT_NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "LOW"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },

CVE-2022/CVE-2022-289xx/CVE-2022-28975.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-28975",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-09T14:15:45.647",
-  "lastModified": "2024-11-21T06:58:16.340",
+  "lastModified": "2025-06-18T17:15:26.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-303xx/CVE-2022-30312.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-30312",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T18:15:08.807",
-  "lastModified": "2024-11-21T07:02:33.337",
+  "lastModified": "2025-06-17T20:15:25.327",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "ADJACENT_NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-319"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-319"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-314xx/CVE-2022-31414.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-31414",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.397",
-  "lastModified": "2024-11-21T07:04:27.940",
+  "lastModified": "2025-06-17T20:15:25.530",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-322xx/CVE-2022-32264.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-32264",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-06T18:15:15.530",
-  "lastModified": "2024-11-21T07:06:03.270",
+  "lastModified": "2025-06-17T20:15:25.727",
   "vulnStatus": "Modified",
   "cveTags": [
     {
@@ -43,6 +43,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -56,6 +76,16 @@
           "value": "CWE-755"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-755"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-329xx/CVE-2022-32919.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-32919",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.173",
-  "lastModified": "2024-11-21T07:07:14.263",
+  "lastModified": "2025-06-17T18:15:22.830",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+          "baseScore": 4.7,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-1021"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-1021"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36504.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36504",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.237",
-  "lastModified": "2024-11-21T07:13:10.750",
+  "lastModified": "2025-06-17T20:15:25.923",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36508.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36508",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.413",
-  "lastModified": "2024-11-21T07:13:11.347",
+  "lastModified": "2025-06-17T20:15:26.120",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36509.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36509",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.457",
-  "lastModified": "2024-11-21T07:13:11.520",
+  "lastModified": "2025-06-17T20:15:26.290",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-78"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-78"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36510.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36510",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.500",
-  "lastModified": "2024-11-21T07:13:11.693",
+  "lastModified": "2025-06-17T20:15:26.453",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-78"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-78"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36511.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36511",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.547",
-  "lastModified": "2024-11-21T07:13:11.850",
+  "lastModified": "2025-06-17T20:15:26.617",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36513.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36513",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.590",
-  "lastModified": "2024-11-21T07:13:12.010",
+  "lastModified": "2025-06-17T20:15:26.780",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36587.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36587",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.520",
-  "lastModified": "2024-11-21T07:13:21.960",
+  "lastModified": "2025-06-17T20:15:26.947",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36659.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36659",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.567",
-  "lastModified": "2024-11-21T07:13:27.807",
+  "lastModified": "2025-06-17T20:15:27.130",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-476"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36660.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36660",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.613",
-  "lastModified": "2024-11-21T07:13:27.947",
+  "lastModified": "2025-06-17T20:15:27.297",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36661.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36661",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.667",
-  "lastModified": "2024-11-21T07:13:28.100",
+  "lastModified": "2025-06-17T20:15:27.457",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-476"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-377xx/CVE-2022-37780.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-37780",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.717",
-  "lastModified": "2024-11-21T07:15:09.260",
+  "lastModified": "2025-06-17T20:15:27.613",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },

CVE-2022/CVE-2022-403xx/CVE-2022-40361.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-40361",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-11T03:15:09.157",
-  "lastModified": "2024-11-21T07:21:21.140",
+  "lastModified": "2025-06-17T18:15:23.053",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 6.1,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-415xx/CVE-2022-41572.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-41572",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2025-01-07T20:15:27.943",
-  "lastModified": "2025-01-08T15:15:09.427",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T15:10:08.940",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,14 +51,38 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://github.com/EyesOfNetworkCommunity/eonweb/issues/120",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/Orange-Cyberdefense/CVE-repository/",
-      "source": "cve@mitre.org"
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:eyesofnetwork:eyesofnetwork:*:*:*:*:*:*:*:*",
+              "versionEndIncluding": "5.3-11",
+              "matchCriteriaId": "C50D00B8-8A1D-4F64-9680-8552267A0EAC"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://github.com/EyesOfNetworkCommunity/eonweb/issues/120",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://github.com/Orange-Cyberdefense/CVE-repository/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-432xx/CVE-2022-43216.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-43216",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-04-08T12:15:08.017",
-  "lastModified": "2024-11-21T07:26:03.743",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T18:34:07.987",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,52 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://abrhil.com/",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://abrhil.com/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:abrhil:lista_de_asistenci:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "5.6.2",
+              "matchCriteriaId": "C87E0702-92E1-4AE1-A140-663508A414EC"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://abrhil.com/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Third Party Advisory"
+      ]
+    },
+    {
+      "url": "https://abrhil.com/",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-438xx/CVE-2022-43840.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-43840",
   "sourceIdentifier": "psirt@us.ibm.com",
   "published": "2025-04-14T21:15:16.200",
-  "lastModified": "2025-04-15T21:15:46.440",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-19T00:37:04.670",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,10 +51,32 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://www.ibm.com/support/pages/node/7169766",
-      "source": "psirt@us.ibm.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "3.4.0",
+              "versionEndIncluding": "3.4.4",
+              "matchCriteriaId": "682EB2AD-DD53-43FC-8A8E-7A3BDE927467"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://www.ibm.com/support/pages/node/7169766",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-450xx/CVE-2022-45064.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-45064",
   "sourceIdentifier": "security@apache.org",
   "published": "2023-04-13T11:15:06.737",
-  "lastModified": "2025-05-23T16:44:02.653",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T17:55:57.933",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -76,8 +76,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:apache:sling:2.13.0:*:*:*:*:*:*:*",
-              "matchCriteriaId": "F0452CA1-A3AB-430A-9011-25A37AD1F2A9"
+              "criteria": "cpe:2.3:a:apache:apache_sling_engine:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "2.14.0",
+              "matchCriteriaId": "F89F26B7-0485-4677-A00E-3A6B6B7D67AA"
             }
           ]
         }

CVE-2022/CVE-2022-456xx/CVE-2022-45699.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-45699",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2023-02-10T02:15:10.727",
-  "lastModified": "2025-03-24T18:15:15.653",
+  "lastModified": "2025-06-17T06:15:21.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -119,6 +119,10 @@
         "Third Party Advisory"
       ]
     },
+    {
+      "url": "https://web.archive.org/web/20230626075954/https://github.com/0xst4n/APSystems-ECU-R-RCE-Timezone",
+      "source": "cve@mitre.org"
+    },
     {
       "url": "https://www.youtube.com/watch?v=YNeeaDPJOBY",
       "source": "cve@mitre.org",

CVE-2022/CVE-2022-467xx/CVE-2022-46721.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-46721",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.430",
-  "lastModified": "2024-11-21T07:30:58.433",
+  "lastModified": "2025-06-17T18:15:23.260",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-470xx/CVE-2022-47072.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-47072",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-31T21:15:08.440",
-  "lastModified": "2024-11-21T07:31:27.933",
+  "lastModified": "2025-06-17T15:15:35.183",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-485xx/CVE-2022-48577.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-48577",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.610",
-  "lastModified": "2024-11-21T07:33:31.703",
+  "lastModified": "2025-06-17T20:15:27.790",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
       }
     ]
   },

CVE-2022/CVE-2022-488xx/CVE-2022-48849.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-48849",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-07-16T13:15:12.103",
-  "lastModified": "2024-11-21T07:34:12.480",
+  "lastModified": "2025-06-19T13:15:21.690",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -91,13 +91,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2",
       "source": "af854a3a-2127-422b-91ae-364da2661108",

CVE-2022/CVE-2022-489xx/CVE-2022-48935.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-48935",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-08-22T04:15:16.877",
-  "lastModified": "2024-08-23T01:45:31.280",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:21.983",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,13 +105,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/88c795491bf45a8c08a0f94c9ca4f13722e51013",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/8ffb8ac3448845f65634889b051bd65e4dee484b",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
@@ -119,13 +112,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/b05a24cc453e3cd51b0c79e3c583b5d495eba1d6",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/b4fcc081e527aa2ce12e956912fc47e251f6bd27",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-489xx/CVE-2022-48941.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-48941",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-08-22T04:15:17.967",
-  "lastModified": "2024-08-22T18:41:37.090",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:22.263",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -84,13 +84,6 @@
     }
   ],
   "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/05ae1f0fe9c6c5ead08b306e665763a352d20716",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/2a3e61de89bab6696aa28b70030eb119968c5586",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-491xx/CVE-2022-49152.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-49152",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:00:52.440",
-  "lastModified": "2025-03-13T21:58:23.127",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:22.587",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,40 +105,12 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/1ac49c8fd49fdf53d3cd8b77eb8ffda08d7fbe22",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/29968329b926d238e3107ec071a250397555d264",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/3e2852eda19ee1a400cd809d7a9322680f34a262",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/3e3c658055c002900982513e289398a1aad4a488",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
       "tags": [
         "Patch"
       ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/7521a97b1929042604bef6859f62fa8b4bbc077b",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
     }
   ]
 }

CVE-2022/CVE-2022-492xx/CVE-2022-49299.json

@@ -2,185 +2,15 @@
   "id": "CVE-2022-49299",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:06.727",
-  "lastModified": "2025-04-14T19:49:30.960",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T14:15:34.170",
+  "vulnStatus": "Rejected",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: gadget: don't reset gadget's driver->bus\n\nUDC driver should not touch gadget's driver internals, especially it\nshould not reset driver->bus. This wasn't harmful so far, but since\ncommit fc274c1e9973 (\"USB: gadget: Add a new bus for gadgets\") gadget\nsubsystem got it's own bus and messing with ->bus triggers the\nfollowing NULL pointer dereference:\n\ndwc2 12480000.hsotg: bound driver g_ether\n8<--- cut here ---\nUnable to handle kernel NULL pointer dereference at virtual address 00000000\n[00000000] *pgd=00000000\nInternal error: Oops: 5 [#1] SMP ARM\nModules linked in: ...\nCPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862\nHardware name: Samsung Exynos (Flattened Device Tree)\nPC is at module_add_driver+0x44/0xe8\nLR is at sysfs_do_create_link_sd+0x84/0xe0\n...\nProcess modprobe (pid: 620, stack limit = 0x(ptrval))\n...\n module_add_driver from bus_add_driver+0xf4/0x1e4\n bus_add_driver from driver_register+0x78/0x10c\n driver_register from usb_gadget_register_driver_owner+0x40/0xb4\n usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0\n do_one_initcall from do_init_module+0x44/0x1c8\n do_init_module from load_module+0x19b8/0x1b9c\n load_module from sys_finit_module+0xdc/0xfc\n sys_finit_module from ret_fast_syscall+0x0/0x54\nException stack(0xf1771fa8 to 0xf1771ff0)\n...\ndwc2 12480000.hsotg: new device is high-speed\n---[ end trace 0000000000000000 ]---\n\nFix this by removing driver->bus entry reset."
-    },
-    {
-      "lang": "es",
-      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc2: gadget: no restablezca el controlador UDC del bus del gadget-&gt;controlador no debe tocar los componentes internos del controlador del gadget, especialmente no debe restablecer el controlador UDC del bus del gadget-&gt;controlador. Esto no fue da\u00f1ino hasta ahora, pero desde el commit fc274c1e9973 (\"USB: gadget: Agregar un nuevo bus para gadgets\") el subsistema de gadget tiene su propio bus y jugar con -&gt;bus desencadena la siguiente desreferencia de puntero NULL: dwc2 12480000.hsotg: controlador vinculado g_ether 8&lt;--- corte aqu\u00ed --- No se puede manejar la desreferencia de puntero NULL del kernel en la direcci\u00f3n virtual 00000000 [00000000] *pgd=00000000 Error interno: Oops: 5 [#1] M\u00f3dulos SMP ARM vinculados en: ... CPU: 0 PID: 620 Comm: modprobe No contaminado 5.18.0-rc5-next-20220504 #11862 Nombre del hardware: Samsung Exynos (\u00e1rbol de dispositivos aplanado) La PC est\u00e1 en module_add_driver+0x44/0xe8 LR est\u00e1 en sysfs_do_create_link_sd+0x84/0xe0 ... Procesar modprobe (pid: 620, l\u00edmite de pila = 0x(ptrval)) ... module_add_driver desde bus_add_driver+0xf4/0x1e4 bus_add_driver desde driver_register+0x78/0x10c driver_register desde usb_gadget_register_driver_owner+0x40/0xb4 usb_gadget_register_driver_owner desde do_one_initcall+0x44/0x1e0 do_one_initcall desde do_init_module+0x44/0x1c8 do_init_module desde load_module+0x19b8/0x1b9c load_module desde sys_finit_module+0xdc/0xfc sys_finit_module de ret_fast_syscall+0x0/0x54 Pila de excepciones (0xf1771fa8 a 0xf1771ff0) ... dwc2 12480000.hsotg: el nuevo dispositivo es de alta velocidad ---[ fin de seguimiento 000000000000000 ]--- Solucione esto eliminando el restablecimiento de la entrada del bus del controlador."
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
     }
   ],
-  "metrics": {
-    "cvssMetricV31": [
-      {
-        "source": "nvd@nist.gov",
-        "type": "Primary",
-        "cvssData": {
-          "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
-          "baseScore": 5.5,
-          "baseSeverity": "MEDIUM",
-          "attackVector": "LOCAL",
-          "attackComplexity": "LOW",
-          "privilegesRequired": "LOW",
-          "userInteraction": "NONE",
-          "scope": "UNCHANGED",
-          "confidentialityImpact": "NONE",
-          "integrityImpact": "NONE",
-          "availabilityImpact": "HIGH"
-        },
-        "exploitabilityScore": 1.8,
-        "impactScore": 3.6
-      }
-    ]
-  },
-  "weaknesses": [
-    {
-      "source": "nvd@nist.gov",
-      "type": "Primary",
-      "description": [
-        {
-          "lang": "en",
-          "value": "CWE-476"
-        }
-      ]
-    }
-  ],
-  "configurations": [
-    {
-      "nodes": [
-        {
-          "operator": "OR",
-          "negate": false,
-          "cpeMatch": [
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionEndExcluding": "4.9.318",
-              "matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.10",
-              "versionEndExcluding": "4.14.283",
-              "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.15",
-              "versionEndExcluding": "4.19.247",
-              "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.20",
-              "versionEndExcluding": "5.4.198",
-              "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.5",
-              "versionEndExcluding": "5.10.122",
-              "matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.11",
-              "versionEndExcluding": "5.15.47",
-              "matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.16",
-              "versionEndExcluding": "5.17.15",
-              "matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.18",
-              "versionEndExcluding": "5.18.4",
-              "matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
-            }
-          ]
-        }
-      ]
-    }
-  ],
-  "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    }
-  ]
+  "metrics": {},
+  "references": []
 }

CVE-2022/CVE-2022-493xx/CVE-2022-49352.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49352",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:11.920",
-  "lastModified": "2025-02-26T07:01:11.920",
+  "lastModified": "2025-06-19T13:15:23.173",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -17,10 +17,6 @@
   ],
   "metrics": {},
   "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/0ab308d72af7548f21e4499d025c25887da0c26a",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
     {
       "url": "https://git.kernel.org/stable/c/1bcce88da60eccc946c0f4ed942b0f08cd565778",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"

CVE-2022/CVE-2022-494xx/CVE-2022-49412.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-49412",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:17.703",
-  "lastModified": "2025-03-24T19:52:31.537",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:23.390",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,13 +105,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/7d172b9dc913e161d8ff88770eea01701ff553de",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/8abc8763b11c35e03cc91d59fd0cd28d39f88ca9",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
@@ -119,13 +112,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/97be7d13fbd4001eeab49b1be6399f23a8c66160",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/a16c65cca7d2c7ff965fdd3adc8df2156529caf1",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-494xx/CVE-2022-49418.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49418",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:18.260",
-  "lastModified": "2025-02-26T07:01:18.260",
+  "lastModified": "2025-06-19T13:15:23.660",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -24,10 +24,6 @@
     {
       "url": "https://git.kernel.org/stable/c/c3ed222745d9ad7b69299b349a64ba533c64a34f",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/eb1fe9600b86c24a789046bfc5c6851dda119280",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
     }
   ]
 }

CVE-2022/CVE-2022-495xx/CVE-2022-49558.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49558",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:31.597",
-  "lastModified": "2025-02-26T07:01:31.597",
+  "lastModified": "2025-06-19T13:15:23.990",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -37,10 +37,6 @@
       "url": "https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
     },
-    {
-      "url": "https://git.kernel.org/stable/c/c73955a09408e7374d9abfd0e78ce3de9cda0635",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
     {
       "url": "https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"

CVE-2022/CVE-2022-499xx/CVE-2022-49934.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49934",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:19.400",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix UAF in ieee80211_scan_rx()\n\nieee80211_scan_rx() tries to access scan_req->flags after a\nnull check, but a UAF is observed when the scan is completed\nand __ieee80211_scan_completed() executes, which then calls\ncfg80211_scan_done() leading to the freeing of scan_req.\n\nSince scan_req is rcu_dereference()'d, prevent the racing in\n__ieee80211_scan_completed() by ensuring that from mac80211's\nPOV it is no longer accessed from an RCU read critical section\nbefore we call cfg80211_scan_done()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/4abc8c07a065ecf771827bde3c63fbbe4aa0c08b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/5d20c6f932f2758078d0454729129c894fe353e7",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/60deb9f10eec5c6a20252ed36238b55d8b614a2c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/6eb181a64fdabf10be9e54de728876667da20255",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/78a07732fbb0934d14827d8f09b9aa6a49ee1aa9",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9ad48cbf8b07f10c1e4a7a262b32a9179ae9dd2d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c0445feb80a4d0854898118fa01073701f8d356b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e0ff39448cea654843744c72c6780293c5082cb1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49935.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49935",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.340",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf/dma-resv: check if the new fence is really later\n\nPreviously when we added a fence to a dma_resv object we always\nassumed the the newer than all the existing fences.\n\nWith Jason's work to add an UAPI to explicit export/import that's not\nnecessary the case any more. So without this check we would allow\nuserspace to force the kernel into an use after free error.\n\nSince the change is very small and defensive it's probably a good\nidea to backport this to stable kernels as well just in case others\nare using the dma_resv object in the same way."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/a3f7c10a269d5b77dd5822ade822643ced3057f0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c4c798fe98adceb642050819cb57cbc8f5c27870",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49936.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49936",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.450",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Prevent nested device-reset calls\n\nAutomatic kernel fuzzing revealed a recursive locking violation in\nusb-storage:\n\n============================================\nWARNING: possible recursive locking detected\n5.18.0 #3 Not tainted\n--------------------------------------------\nkworker/1:3/1205 is trying to acquire lock:\nffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at:\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\n\nbut task is already holding lock:\nffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at:\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\n\n...\n\nstack backtrace:\nCPU: 1 PID: 1205 Comm: kworker/1:3 Not tainted 5.18.0 #3\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n<TASK>\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\nprint_deadlock_bug kernel/locking/lockdep.c:2988 [inline]\ncheck_deadlock kernel/locking/lockdep.c:3031 [inline]\nvalidate_chain kernel/locking/lockdep.c:3816 [inline]\n__lock_acquire.cold+0x152/0x3ca kernel/locking/lockdep.c:5053\nlock_acquire kernel/locking/lockdep.c:5665 [inline]\nlock_acquire+0x1ab/0x520 kernel/locking/lockdep.c:5630\n__mutex_lock_common kernel/locking/mutex.c:603 [inline]\n__mutex_lock+0x14f/0x1610 kernel/locking/mutex.c:747\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\nusb_reset_device+0x37d/0x9a0 drivers/usb/core/hub.c:6109\nr871xu_dev_remove+0x21a/0x270 drivers/staging/rtl8712/usb_intf.c:622\nusb_unbind_interface+0x1bd/0x890 drivers/usb/core/driver.c:458\ndevice_remove drivers/base/dd.c:545 [inline]\ndevice_remove+0x11f/0x170 drivers/base/dd.c:537\n__device_release_driver drivers/base/dd.c:1222 [inline]\ndevice_release_driver_internal+0x1a7/0x2f0 drivers/base/dd.c:1248\nusb_driver_release_interface+0x102/0x180 drivers/usb/core/driver.c:627\nusb_forced_unbind_intf+0x4d/0xa0 drivers/usb/core/driver.c:1118\nusb_reset_device+0x39b/0x9a0 drivers/usb/core/hub.c:6114\n\nThis turned out not to be an error in usb-storage but rather a nested\ndevice reset attempt.  That is, as the rtl8712 driver was being\nunbound from a composite device in preparation for an unrelated USB\nreset (that driver does not have pre_reset or post_reset callbacks),\nits ->remove routine called usb_reset_device() -- thus nesting one\nreset call within another.\n\nPerforming a reset as part of disconnect processing is a questionable\npractice at best.  However, the bug report points out that the USB\ncore does not have any protection against nested resets.  Adding a\nreset_in_progress flag and testing it will prevent such errors in the\nfuture."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/1b29498669914c7f9afb619722421418a753d372",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9c6d778800b921bde3bff3cff5003d1650f942d1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/abe3cfb7a7c8e907b312c7dbd7bf4d142b745aa8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c548b99e1c37db6f7df86ecfe9a1f895d6c5966e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/cc9a12e12808af178c600cc485338bac2e37d2a8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d5eb850b3e8836197a38475840725260b9783e94",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d90419b8b8322b6924f6da9da952647f2dadc21b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/df1875084898b15cbc42f712e93d7f113ae6271b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49937.json

@@ -0,0 +1,33 @@
+{
+  "id": "CVE-2022-49937",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.570",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mceusb: Use new usb_control_msg_*() routines\n\nAutomatic kernel fuzzing led to a WARN about invalid pipe direction in\nthe mceusb driver:\n\n------------[ cut here ]------------\nusb 6-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType 40\nWARNING: CPU: 0 PID: 2465 at drivers/usb/core/urb.c:410\nusb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410\nModules linked in:\nCPU: 0 PID: 2465 Comm: kworker/0:2 Not tainted 5.19.0-rc4-00208-g69cb6c6556ad #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nWorkqueue: usb_hub_wq hub_event\nRIP: 0010:usb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410\nCode: 7c 24 40 e8 ac 23 91 fd 48 8b 7c 24 40 e8 b2 70 1b ff 45 89 e8\n44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 a0 30 a9 86 e8 48 07 11 02 <0f> 0b\ne9 1c f0 ff ff e8 7e 23 91 fd 0f b6 1d 63 22 83 05 31 ff 41\nRSP: 0018:ffffc900032becf0 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff8881100f3058 RCX: 0000000000000000\nRDX: ffffc90004961000 RSI: ffff888114c6d580 RDI: fffff52000657d90\nRBP: ffff888105ad90f0 R08: ffffffff812c3638 R09: 0000000000000000\nR10: 0000000000000005 R11: ffffed1023504ef1 R12: ffff888105ad9000\nR13: 0000000000000040 R14: 0000000080000380 R15: ffff88810ba96500\nFS: 0000000000000000(0000) GS:ffff88811a800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007ffe810bda58 CR3: 000000010b720000 CR4: 0000000000350ef0\nCall Trace:\n<TASK>\nusb_start_wait_urb+0x101/0x4c0 drivers/usb/core/message.c:58\nusb_internal_control_msg drivers/usb/core/message.c:102 [inline]\nusb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153\nmceusb_gen1_init drivers/media/rc/mceusb.c:1431 [inline]\nmceusb_dev_probe+0x258e/0x33f0 drivers/media/rc/mceusb.c:1807\n\nThe reason for the warning is clear enough; the driver sends an\nunusual read request on endpoint 0 but does not set the USB_DIR_IN bit\nin the bRequestType field.\n\nMore importantly, the whole situation can be avoided and the driver\nsimplified by converting it over to the relatively new\nusb_control_msg_recv() and usb_control_msg_send() routines.  That's\nwhat this fix does."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/587f793c64d99d92be8ef01c4c69d885a3f2edb6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/608e58a0f4617977178131f5f68a3fce1d3f5316",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/75913c562f5ba4cf397d835c63f443879167c6f6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d69c738ac9310b56e84c51c8f09fc018a8291bc6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49938.json

@@ -0,0 +1,29 @@
+{
+  "id": "CVE-2022-49938",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.683",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix small mempool leak in SMB2_negotiate()\n\nIn some cases of failure (dialect mismatches) in SMB2_negotiate(), after\nthe request is sent, the checks would return -EIO when they should be\nrather setting rc = -EIO and jumping to neg_exit to free the response\nbuffer from mempool."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/27893dfc1285f80f80f46b3b8c95f5d15d2e66d0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/38a6b469bf22f153282fbe7d702a24e9eb43f50e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49939.json

@@ -0,0 +1,45 @@
+{
+  "id": "CVE-2022-49939",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.793",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix UAF of ref->proc caused by race condition\n\nA transaction of type BINDER_TYPE_WEAK_HANDLE can fail to increment the\nreference for a node. In this case, the target proc normally releases\nthe failed reference upon close as expected. However, if the target is\ndying in parallel the call will race with binder_deferred_release(), so\nthe target could have released all of its references by now leaving the\ncleanup of the new failed reference unhandled.\n\nThe transaction then ends and the target proc gets released making the\nref->proc now a dangling pointer. Later on, ref->node is closed and we\nattempt to take spin_lock(&ref->proc->inner_lock), which leads to the\nuse-after-free bug reported below. Let's fix this by cleaning up the\nfailed reference on the spot instead of relying on the target to do so.\n\n  ==================================================================\n  BUG: KASAN: use-after-free in _raw_spin_lock+0xa8/0x150\n  Write of size 4 at addr ffff5ca207094238 by task kworker/1:0/590\n\n  CPU: 1 PID: 590 Comm: kworker/1:0 Not tainted 5.19.0-rc8 #10\n  Hardware name: linux,dummy-virt (DT)\n  Workqueue: events binder_deferred_func\n  Call trace:\n   dump_backtrace.part.0+0x1d0/0x1e0\n   show_stack+0x18/0x70\n   dump_stack_lvl+0x68/0x84\n   print_report+0x2e4/0x61c\n   kasan_report+0xa4/0x110\n   kasan_check_range+0xfc/0x1a4\n   __kasan_check_write+0x3c/0x50\n   _raw_spin_lock+0xa8/0x150\n   binder_deferred_func+0x5e0/0x9b0\n   process_one_work+0x38c/0x5f0\n   worker_thread+0x9c/0x694\n   kthread+0x188/0x190\n   ret_from_fork+0x10/0x20"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/06e5b43ca4dab06a92bf4c2f33766e6fb11b880a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/229f47603dd306bc0eb1a831439adb8e48bb0eae",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/30d0901b307f27d36b2655fb3048cf31ee0e89c0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/603a47f2ae56bf68288784d3c0a8c5b8e0a827ed",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9629f2dfdb1dad294b468038ff8e161e94d0b609",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/a0e44c64b6061dda7e00b7c458e4523e2331b739",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c2a4b5dc8fa71af73bab704d0cac42ac39767ed6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49940.json

@@ -0,0 +1,33 @@
+{
+  "id": "CVE-2022-49940",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.917",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()\n\nA null pointer dereference can happen when attempting to access the\n\"gsm->receive()\" function in gsmld_receive_buf(). Currently, the code\nassumes that gsm->recieve is only called after MUX activation.\nSince the gsmld_receive_buf() function can be accessed without the need to\ninitialize the MUX, the gsm->receive() function will not be set and a\nNULL pointer dereference will occur.\n\nFix this by avoiding the call to \"gsm->receive()\" in case the function is\nnot initialized by adding a sanity check.\n\nCall Trace:\n <TASK>\n gsmld_receive_buf+0x1c2/0x2f0 drivers/tty/n_gsm.c:2861\n tiocsti drivers/tty/tty_io.c:2293 [inline]\n tty_ioctl+0xa75/0x15d0 drivers/tty/tty_io.c:2692\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:870 [inline]\n __se_sys_ioctl fs/ioctl.c:856 [inline]\n __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x63/0xcd"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/309aea4b6b813f6678c3a547cfd7fe3a76ffa976",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/5a82cf64f8ad63caf6bf115642ce44ddbc64311e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/5aa37f9510345a812c0998bcbbc4d88d1dcc4d8b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/f16c6d2e58a4c2b972efcf9eb12390ee0ba3befb",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49941.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2022-49941",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.030",
+  "lastModified": "2025-06-18T15:15:20.837",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49942.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49942",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.147",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected\n\nWhen we are not connected to a channel, sending channel \"switch\"\nannouncement doesn't make any sense.\n\nThe BSS list is empty in that case. This causes the for loop in\ncfg80211_get_bss() to be bypassed, so the function returns NULL\n(check line 1424 of net/wireless/scan.c), causing the WARN_ON()\nin ieee80211_ibss_csa_beacon() to get triggered (check line 500\nof net/mac80211/ibss.c), which was consequently reported on the\nsyzkaller dashboard.\n\nThus, check if we have an existing connection before generating\nthe CSA beacon in ieee80211_ibss_finish_csa()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/15bc8966b6d3a5b9bfe4c9facfa02f2b69b1e5f0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/1691a48aef0a82d1754b9853dae7e3f5cacdf70b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/552ba102a6898630a7d16887f29e606d6fabe508",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/66689c5c02acd4d76c28498fe220998610aec61e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/864e280cb3a9a0f5212b16ef5057c4e692f7039d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/cdb9a8da9b84800eb15506cd9363cf0cf059e677",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d9eb37db6a28b59a95a3461450ee209654c5f95b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/dd649b49219a0388cc10fc40e4c2ea681566a780",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49943.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49943",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.267",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: Fix obscure lockdep violation for udc_mutex\n\nA recent commit expanding the scope of the udc_lock mutex in the\ngadget core managed to cause an obscure and slightly bizarre lockdep\nviolation.  In abbreviated form:\n\n======================================================\nWARNING: possible circular locking dependency detected\n5.19.0-rc7+ #12510 Not tainted\n------------------------------------------------------\nudevadm/312 is trying to acquire lock:\nffff80000aae1058 (udc_lock){+.+.}-{3:3}, at: usb_udc_uevent+0x54/0xe0\n\nbut task is already holding lock:\nffff000002277548 (kn->active#4){++++}-{0:0}, at: kernfs_seq_start+0x34/0xe0\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #3 (kn->active#4){++++}-{0:0}:\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 lock_acquire+0x68/0x84\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __kernfs_remove+0x268/0x380\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 kernfs_remove_by_name_ns+0x58/0xac\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 sysfs_remove_file_ns+0x18/0x24\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 device_del+0x15c/0x440\n\n-> #2 (device_links_lock){+.+.}-{3:3}:\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 lock_acquire+0x68/0x84\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __mutex_lock+0x9c/0x430\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mutex_lock_nested+0x38/0x64\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 device_link_remove+0x3c/0xa0\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 _regulator_put.part.0+0x168/0x190\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 regulator_put+0x3c/0x54\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 devm_regulator_release+0x14/0x20\n\n-> #1 (regulator_list_mutex){+.+.}-{3:3}:\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 lock_acquire+0x68/0x84\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __mutex_lock+0x9c/0x430\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mutex_lock_nested+0x38/0x64\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 regulator_lock_dependent+0x54/0x284\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 regulator_enable+0x34/0x80\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 phy_power_on+0x24/0x130\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __dwc2_lowlevel_hw_enable+0x100/0x130\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dwc2_lowlevel_hw_enable+0x18/0x40\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 dwc2_hsotg_udc_start+0x6c/0x2f0\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 gadget_bind_driver+0x124/0x1f4\n\n-> #0 (udc_lock){+.+.}-{3:3}:\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __lock_acquire+0x1298/0x20cc\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 lock_acquire.part.0+0xe0/0x230\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 lock_acquire+0x68/0x84\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 __mutex_lock+0x9c/0x430\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mutex_lock_nested+0x38/0x64\n \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 usb_udc_uevent+0x54/0xe0\n\nEvidently this was caused by the scope of udc_mutex being too large.\nThe mutex is only meant to protect udc->driver along with a few other\nthings.  As far as I can tell, there's no reason for the mutex to be\nheld while the gadget core calls a gadget driver's ->bind or ->unbind\nroutine, or while a UDC is being started or stopped.  (This accounts\nfor link #1 in the chain above, where the mutex is held while the\ndwc2_hsotg_udc is started as part of driver probing.)\n\nGadget drivers' ->disconnect callbacks are problematic.  Even though\nusb_gadget_disconnect() will now acquire the udc_mutex, there's a\nwindow in usb_gadget_bind_driver() between the times when the mutex is\nreleased and the ->bind callback is invoked.  If a disconnect occurred\nduring that window, we could call the driver's ->disconnect routine\nbefore its ->bind routine.  To prevent this from happening, it will be\nnecessary to prevent a UDC from connecting while it has no gadget\ndriver.  This should be done already but it doesn't seem to be;\ncurrently usb_gadget_connect() has no check for this.  Such a check\nwill have to be added later.\n\nSome degree of mutual exclusion is required in soft_connect_store(),\nwhich can dereference udc->driver at arbitrary times since it is a\nsysfs callback.  The solution here is to acquire the gadget's device\nlock rather than the udc_mutex.  Since the driver core guarantees that\nthe device lock is always held during driver binding and unbinding,\nthis will make the accesses in soft_connect_store() mutually exclusive\nwith any changes to udc->driver.\n\nLastly, it turns out there is one place which should hold the\nudc_mutex but currently does not: The function_show() routine needs\nprotection while it dereferences udc->driver.  The missing lock and\nunlock calls are added."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/1016fc0c096c92dd0e6e0541daac7a7868169903",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/1a065e4673cbdd9f222a05f85e17d78ea50c8d9c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49944.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49944",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.377",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"usb: typec: ucsi: add a common function ucsi_unregister_connectors()\"\n\nThe recent commit 87d0e2f41b8c (\"usb: typec: ucsi: add a common\nfunction ucsi_unregister_connectors()\") introduced a regression that\ncaused NULL dereference at reading the power supply sysfs.  It's a\nstale sysfs entry that should have been removed but remains with NULL\nops.  The commit changed the error handling to skip the entries after\na NULL con->wq, and this leaves the power device unreleased.\n\nFor addressing the regression, the straight revert is applied here.\nFurther code improvements can be done from the scratch again."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/3d4044c9e6d2e3f11f1f8b5e0ee8647d3eb1afad",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/5f73aa2cf8bef4a39baa1591c3144ede4788826e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49945.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49945",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.483",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (gpio-fan) Fix array out of bounds access\n\nThe driver does not check if the cooling state passed to\ngpio_fan_set_cur_state() exceeds the maximum cooling state as\nstored in fan_data->num_speeds. Since the cooling state is later\nused as an array index in set_fan_speed(), an array out of bounds\naccess can occur.\nThis can be exploited by setting the state of the thermal cooling device\nto arbitrary values, causing for example a kernel oops when unavailable\nmemory is accessed this way.\n\nExample kernel oops:\n[  807.987276] Unable to handle kernel paging request at virtual address ffffff80d0588064\n[  807.987369] Mem abort info:\n[  807.987398]   ESR = 0x96000005\n[  807.987428]   EC = 0x25: DABT (current EL), IL = 32 bits\n[  807.987477]   SET = 0, FnV = 0\n[  807.987507]   EA = 0, S1PTW = 0\n[  807.987536]   FSC = 0x05: level 1 translation fault\n[  807.987570] Data abort info:\n[  807.987763]   ISV = 0, ISS = 0x00000005\n[  807.987801]   CM = 0, WnR = 0\n[  807.987832] swapper pgtable: 4k pages, 39-bit VAs, pgdp=0000000001165000\n[  807.987872] [ffffff80d0588064] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000\n[  807.987961] Internal error: Oops: 96000005 [#1] PREEMPT SMP\n[  807.987992] Modules linked in: cmac algif_hash aes_arm64 algif_skcipher af_alg bnep hci_uart btbcm bluetooth ecdh_generic ecc 8021q garp stp llc snd_soc_hdmi_codec brcmfmac vc4 brcmutil cec drm_kms_helper snd_soc_core cfg80211 snd_compress bcm2835_codec(C) snd_pcm_dmaengine syscopyarea bcm2835_isp(C) bcm2835_v4l2(C) sysfillrect v4l2_mem2mem bcm2835_mmal_vchiq(C) raspberrypi_hwmon sysimgblt videobuf2_dma_contig videobuf2_vmalloc fb_sys_fops videobuf2_memops rfkill videobuf2_v4l2 videobuf2_common i2c_bcm2835 snd_bcm2835(C) videodev snd_pcm snd_timer snd mc vc_sm_cma(C) gpio_fan uio_pdrv_genirq uio drm fuse drm_panel_orientation_quirks backlight ip_tables x_tables ipv6\n[  807.988508] CPU: 0 PID: 1321 Comm: bash Tainted: G         C        5.15.56-v8+ #1575\n[  807.988548] Hardware name: Raspberry Pi 3 Model B Rev 1.2 (DT)\n[  807.988574] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[  807.988608] pc : set_fan_speed.part.5+0x34/0x80 [gpio_fan]\n[  807.988654] lr : gpio_fan_set_cur_state+0x34/0x50 [gpio_fan]\n[  807.988691] sp : ffffffc008cf3bd0\n[  807.988710] x29: ffffffc008cf3bd0 x28: ffffff80019edac0 x27: 0000000000000000\n[  807.988762] x26: 0000000000000000 x25: 0000000000000000 x24: ffffff800747c920\n[  807.988787] x23: 000000000000000a x22: ffffff800369f000 x21: 000000001999997c\n[  807.988854] x20: ffffff800369f2e8 x19: ffffff8002ae8080 x18: 0000000000000000\n[  807.988877] x17: 0000000000000000 x16: 0000000000000000 x15: 000000559e271b70\n[  807.988938] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000\n[  807.988960] x11: 0000000000000000 x10: ffffffc008cf3c20 x9 : ffffffcfb60c741c\n[  807.989018] x8 : 000000000000000a x7 : 00000000ffffffc9 x6 : 0000000000000009\n[  807.989040] x5 : 000000000000002a x4 : 0000000000000000 x3 : ffffff800369f2e8\n[  807.989062] x2 : 000000000000e780 x1 : 0000000000000001 x0 : ffffff80d0588060\n[  807.989084] Call trace:\n[  807.989091]  set_fan_speed.part.5+0x34/0x80 [gpio_fan]\n[  807.989113]  gpio_fan_set_cur_state+0x34/0x50 [gpio_fan]\n[  807.989199]  cur_state_store+0x84/0xd0\n[  807.989221]  dev_attr_store+0x20/0x38\n[  807.989262]  sysfs_kf_write+0x4c/0x60\n[  807.989282]  kernfs_fop_write_iter+0x130/0x1c0\n[  807.989298]  new_sync_write+0x10c/0x190\n[  807.989315]  vfs_write+0x254/0x378\n[  807.989362]  ksys_write+0x70/0xf8\n[  807.989379]  __arm64_sys_write+0x24/0x30\n[  807.989424]  invoke_syscall+0x4c/0x110\n[  807.989442]  el0_svc_common.constprop.3+0xfc/0x120\n[  807.989458]  do_el0_svc+0x2c/0x90\n[  807.989473]  el0_svc+0x24/0x60\n[  807.989544]  el0t_64_sync_handler+0x90/0xb8\n[  807.989558]  el0t_64_sync+0x1a0/0x1a4\n[  807.989579] Code: b9403801 f9402800 7100003f 8b35cc00 (b9400416)\n[  807.989627] ---[ end t\n---truncated---"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/3263984c7acdcb0658155b05a724ed45a10de76d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/3ff866455e1e263a9ac1958095fd440984248e2f",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/517dba798793e69b510779c3cde7224a65f3ed1d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/53196e0376205ed49b75bfd0475af5e0fbd20156",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/7756eb1ed124753f4d64f761fc3d84290dffcb4d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c8ae6a18708f260ccdeef6ba53af7548457dc26c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e9f6972ab40a82bd7f6d36800792ba2e084474d8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/f233d2be38dbbb22299192292983037f01ab363c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49946.json

@@ -0,0 +1,33 @@
+{
+  "id": "CVE-2022-49946",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.610",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: bcm: rpi: Prevent out-of-bounds access\n\nThe while loop in raspberrypi_discover_clocks() relies on the assumption\nthat the id of the last clock element is zero. Because this data comes\nfrom the Videocore firmware and it doesn't guarantuee such a behavior\nthis could lead to out-of-bounds access. So fix this by providing\na sentinel element."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/bc163555603e4ae9c817675ad80d618a4cdbfa2d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c8b04b731d43366824841ebdca4ac715f95e0ea4",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/fcae47b2d23c81603b01f56cf8db63ed64599d34",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/ff0b144d4b0a9fbd6efe4d2c0a4b6c9bae2138d2",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49947.json

@@ -0,0 +1,29 @@
+{
+  "id": "CVE-2022-49947",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.717",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix alloc->vma_vm_mm null-ptr dereference\n\nSyzbot reported a couple issues introduced by commit 44e602b4e52f\n(\"binder_alloc: add missing mmap_lock calls when using the VMA\"), in\nwhich we attempt to acquire the mmap_lock when alloc->vma_vm_mm has not\nbeen initialized yet.\n\nThis can happen if a binder_proc receives a transaction without having\npreviously called mmap() to setup the binder_proc->alloc space in [1].\nAlso, a similar issue occurs via binder_alloc_print_pages() when we try\nto dump the debugfs binder stats file in [2].\n\nSample of syzbot's crash report:\n  ==================================================================\n  KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f]\n  CPU: 0 PID: 3755 Comm: syz-executor229 Not tainted 6.0.0-rc1-next-20220819-syzkaller #0\n  syz-executor229[3755] cmdline: ./syz-executor2294415195\n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022\n  RIP: 0010:__lock_acquire+0xd83/0x56d0 kernel/locking/lockdep.c:4923\n  [...]\n  Call Trace:\n   <TASK>\n   lock_acquire kernel/locking/lockdep.c:5666 [inline]\n   lock_acquire+0x1ab/0x570 kernel/locking/lockdep.c:5631\n   down_read+0x98/0x450 kernel/locking/rwsem.c:1499\n   mmap_read_lock include/linux/mmap_lock.h:117 [inline]\n   binder_alloc_new_buf_locked drivers/android/binder_alloc.c:405 [inline]\n   binder_alloc_new_buf+0xa5/0x19e0 drivers/android/binder_alloc.c:593\n   binder_transaction+0x242e/0x9a80 drivers/android/binder.c:3199\n   binder_thread_write+0x664/0x3220 drivers/android/binder.c:3986\n   binder_ioctl_write_read drivers/android/binder.c:5036 [inline]\n   binder_ioctl+0x3470/0x6d00 drivers/android/binder.c:5323\n   vfs_ioctl fs/ioctl.c:51 [inline]\n   __do_sys_ioctl fs/ioctl.c:870 [inline]\n   __se_sys_ioctl fs/ioctl.c:856 [inline]\n   __x64_sys_ioctl+0x193/0x200 fs/ioctl.c:856\n   do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n   do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n   entry_SYSCALL_64_after_hwframe+0x63/0xcd\n   [...]\n  ==================================================================\n\nFix these issues by setting up alloc->vma_vm_mm pointer during open()\nand caching directly from current->mm. This guarantees we have a valid\nreference to take the mmap_lock during scenarios described above.\n\n[1] https://syzkaller.appspot.com/bug?extid=f7dc54e5be28950ac459\n[2] https://syzkaller.appspot.com/bug?extid=a75ebe0452711c9e56d9"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/1da52815d5f1b654c89044db0cdc6adce43da1f1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/81203ab7a6ef843a2b904a0a494f28c457d44d27",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/b2a97babb0a510f8921891f9e70c5a5ef33cadac",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49948.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49948",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.827",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: Clear selection before changing the font\n\nWhen changing the console font with ioctl(KDFONTOP) the new font size\ncan be bigger than the previous font. A previous selection may thus now\nbe outside of the new screen size and thus trigger out-of-bounds\naccesses to graphics memory if the selection is removed in\nvc_do_resize().\n\nPrevent such out-of-memory accesses by dropping the selection before the\nvarious con_font_set() console handlers are called."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/1cf1930369c9dc428d827b60260c53271bff3285",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/2535431ae967ad17585513649625fea7db28d4db",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/566f9c9f89337792070b5a6062dff448b3e7977f",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/989201bb8c00b222235aff04e6200230d29dc7bb",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c555cf04684fde39b5b0dd9fd80730030ee10c4a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c904fe03c4bd1f356a58797d39e2a5d0ca15cefc",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e9ba4611ddf676194385506222cce7b0844e708e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/f74b4a41c5d7c9522469917e3072e55d435efd9e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49949.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49949",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:21.947",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix memory leak in firmware upload\n\nIn the case of firmware-upload, an instance of struct fw_upload is\nallocated in firmware_upload_register(). This data needs to be freed\nin fw_dev_release(). Create a new fw_upload_free() function in\nsysfs_upload.c to handle the firmware-upload specific memory frees\nand incorporate the missing kfree call for the fw_upload structure."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/789bba82f63c3e81dce426ba457fc7905b30ac6e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/baf92485d111be828e1ab84a995515b604b938e5",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49950.json

@@ -0,0 +1,37 @@
+{
+  "id": "CVE-2022-49950",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.050",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix memory corruption on open\n\nThe probe session-duplication overflow check incremented the session\ncount also when there were no more available sessions so that memory\nbeyond the fixed-size slab-allocated session array could be corrupted in\nfastrpc_session_alloc() on open()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/5cf2a57c7a01a0d7bdecf875a63682f542891b1b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/cf20c3533efc89578ace94fa20a9e63446223c72",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d245f43aab2b61195d8ebb64cef7b5a08c590ab4",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e0578e603065f120a8759b75e0d6c216c7078a39",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/f8632b8bb53ebc005d8f24a68a0c1f9678c0e908",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49951.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49951",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.167",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware_loader: Fix use-after-free during unregister\n\nIn the following code within firmware_upload_unregister(), the call to\ndevice_unregister() could result in the dev_release function freeing the\nfw_upload_priv structure before it is dereferenced for the call to\nmodule_put(). This bug was found by the kernel test robot using\nCONFIG_KASAN while running the firmware selftests.\n\n  device_unregister(&fw_sysfs->dev);\n  module_put(fw_upload_priv->module);\n\nThe problem is fixed by copying fw_upload_priv->module to a local variable\nfor use when calling device_unregister()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/8b40c38e37492b5bdf8e95b46b5cca9517a9957a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d380d40930a674c520a5b55f3be1eb17dc634ebc",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49952.json

@@ -0,0 +1,37 @@
+{
+  "id": "CVE-2022-49952",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.277",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: fix memory corruption on probe\n\nAdd the missing sanity check on the probed-session count to avoid\ncorrupting memory beyond the fixed-size slab-allocated session array\nwhen there are more than FASTRPC_MAX_SESSIONS sessions defined in the\ndevicetree."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/0e33b0f322fecd7a92d9dc186535cdf97940a856",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9baa1415d9abdd1e08362ea2dcfadfacee8690b5",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c0425c2facd9166fa083f90c9f3187ace0c7837a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c99bc901d5eb9fbdd7bd39f625e170ce97390336",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/ec186b9f4aa2e6444d5308a6cc268aada7007639",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49953.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49953",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.397",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: cm3605: Fix an error handling path in cm3605_probe()\n\nThe commit in Fixes also introduced a new error handling path which should\ngoto the existing error handling path.\nOtherwise some resources leak."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/160905549e663019e26395ed9d66c24ee2cf5187",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/3f7f49d8135cfe137c81316af64678f4dca1b82b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49954.json

@@ -0,0 +1,37 @@
+{
+  "id": "CVE-2022-49954",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.500",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nInput: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag\n\nsyzbot is reporting hung task at __input_unregister_device() [1], for\niforce_close() waiting at wait_event_interruptible() with dev->mutex held\nis blocking input_disconnect_device() from __input_unregister_device().\n\nIt seems that the cause is simply that commit c2b27ef672992a20 (\"Input:\niforce - wait for command completion when closing the device\") forgot to\ncall wake_up() after clear_bit().\n\nFix this problem by introducing a helper that calls clear_bit() followed\nby wake_up_all()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/98e01215708b6d416345465c09dce2bd4868c67a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/b271090eea3899399e2adcf79c9c95367d472b03",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/b533b9d3a0d1327cbb31c201dc8dbbf98c8bfe3c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d186c65599bff0222da37b9215784ddfe39f9e1b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/df1b53bc799d58f79701c465505a206c72ad4ab8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49955.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49955",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.630",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/rtas: Fix RTAS MSR[HV] handling for Cell\n\nThe semi-recent changes to MSR handling when entering RTAS (firmware)\ncause crashes on IBM Cell machines. An example trace:\n\n  kernel tried to execute user page (2fff01a8) - exploit attempt? (uid: 0)\n  BUG: Unable to handle kernel instruction fetch\n  Faulting instruction address: 0x2fff01a8\n  Oops: Kernel access of bad area, sig: 11 [#1]\n  BE PAGE_SIZE=64K MMU=Hash SMP NR_CPUS=4 NUMA Cell\n  Modules linked in:\n  CPU: 0 PID: 0 Comm: swapper/0 Tainted: G        W          6.0.0-rc2-00433-gede0a8d3307a #207\n  NIP:  000000002fff01a8 LR: 0000000000032608 CTR: 0000000000000000\n  REGS: c0000000015236b0 TRAP: 0400   Tainted: G        W           (6.0.0-rc2-00433-gede0a8d3307a)\n  MSR:  0000000008001002 <ME,RI>  CR: 00000000  XER: 20000000\n  ...\n  NIP 0x2fff01a8\n  LR  0x32608\n  Call Trace:\n    0xc00000000143c5f8 (unreliable)\n    .rtas_call+0x224/0x320\n    .rtas_get_boot_time+0x70/0x150\n    .read_persistent_clock64+0x114/0x140\n    .read_persistent_wall_and_boot_offset+0x24/0x80\n    .timekeeping_init+0x40/0x29c\n    .start_kernel+0x674/0x8f0\n    start_here_common+0x1c/0x50\n\nUnlike PAPR platforms where RTAS is only used in guests, on the IBM Cell\nmachines Linux runs with MSR[HV] set but also uses RTAS, provided by\nSLOF.\n\nFix it by copying the MSR[HV] bit from the MSR value we've just read\nusing mfmsr into the value used for RTAS.\n\nIt seems like we could also fix it using an #ifdef CELL to set MSR[HV],\nbut that doesn't work because it's possible to build a single kernel\nimage that runs on both Cell native and pseries."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/8b08d4f97233d8e58fff2fd9d5f86397a49733c5",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/91926d8b7e71aaf5f84f0cf208fc5a8b7a761050",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49956.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49956",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:22.773",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: rtl8712: fix use after free bugs\n\n_Read/Write_MACREG callbacks are NULL so the read/write_macreg_hdl()\nfunctions don't do anything except free the \"pcmd\" pointer.  It\nresults in a use after free.  Delete them."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/19e3f69d19801940abc2ac37c169882769ed9770",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/376e15487fec837301d888068a3fcc82efb6171a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/7dce6b0ee7d78667d6c831ced957a08769973063",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9fd6170c5e2d0ccd027abe26f6f5ffc528e1bb27",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/b1727def850904e4b8ba384043775672841663a1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d0aac7146e96bf39e79c65087d21dfa02ef8db38",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/dc02aaf950015850e7589696521c7fca767cea77",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e230a4455ac3e9b112f0367d1b8e255e141afae0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}