Auto-Update: 2025-06-21T16:00:26.992949+00:00

CVE-2005/CVE-2005-23xx/CVE-2005-2347.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2005-2347",
+  "sourceIdentifier": "security@debian.org",
+  "published": "2025-06-19T11:15:23.593",
+  "lastModified": "2025-06-19T11:15:23.593",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2006/CVE-2006-21xx/CVE-2006-2192.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2006-2192",
+  "sourceIdentifier": "security@debian.org",
+  "published": "2025-06-19T16:15:21.717",
+  "lastModified": "2025-06-19T16:15:21.717",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2009/CVE-2009-26xx/CVE-2009-2631.json

@@ -2,13 +2,13 @@
   "id": "CVE-2009-2631",
   "sourceIdentifier": "cret@cert.org",
   "published": "2009-12-04T11:30:00.437",
-  "lastModified": "2025-04-09T00:30:58.490",
+  "lastModified": "2025-06-16T21:15:22.113",
   "vulnStatus": "Deferred",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design."
+      "value": "Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SSL VPN and SonicWALL SSL VPN; SafeNet SecureWire Access Gateway; Juniper Networks Secure Access; Nortel CallPilot; Citrix Access Gateway; and other products, when running in configurations that do not restrict access to the same domain as the VPN, retrieve the content of remote URLs from one domain and rewrite them so they originate from the VPN's domain, which violates the same origin policy and allows remote attackers to conduct cross-site scripting attacks, read cookies that originated from other domains, access the Web VPN session to gain access to internal resources, perform key logging, and conduct other attacks.  NOTE: it could be argued that this is a fundamental design problem in any clientless VPN solution, as opposed to a commonly-introduced error that can be fixed in separate implementations. Therefore a single CVE has been assigned for all products that have this design"
     },
     {
       "lang": "es",
@@ -43,6 +43,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "cret@cert.org",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-284"
+        }
+      ]
+    },
     {
       "source": "nvd@nist.gov",
       "type": "Primary",
@@ -93,134 +103,11 @@
   ],
   "references": [
     {
-      "url": "http://kb.juniper.net/KB15799",
+      "url": "https://security.paloaltonetworks.com/PAN-SA-2025-0005",
       "source": "cret@cert.org"
     },
     {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/238",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/269",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://seclists.org/fulldisclosure/2006/Jun/270",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://secunia.com/advisories/37696",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37786",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37788",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://secunia.com/advisories/37789",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://securitytracker.com/id?1023255",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=984744",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.kb.cert.org/vuls/id/261869",
-      "source": "cret@cert.org",
-      "tags": [
-        "US Government Resource"
-      ]
-    },
-    {
-      "url": "http://www.securityfocus.com/archive/1/508164/100/0/threaded",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.securityfocus.com/bid/37152",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "http://www.sonicwall.com/us/2123_14882.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.sonicwall.com/us/2123_14883.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.stonesoft.com/en/support/security_advisories/2009_03_12.html",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3567",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3568",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3569",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3570",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www.vupen.com/english/advisories/2009/3571",
-      "source": "cret@cert.org",
-      "tags": [
-        "Vendor Advisory"
-      ]
-    },
-    {
-      "url": "http://www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2009/50/025367-01.pdf",
-      "source": "cret@cert.org"
-    },
-    {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54523",
+      "url": "https://www.kb.cert.org/vuls/id/261869",
       "source": "cret@cert.org"
     },
     {

CVE-2016/CVE-2016-33xx/CVE-2016-3399.json

@@ -0,0 +1,16 @@
+{
+  "id": "CVE-2016-3399",
+  "sourceIdentifier": "security@debian.org",
+  "published": "2025-06-19T09:15:21.290",
+  "lastModified": "2025-06-19T09:15:21.290",
+  "vulnStatus": "Rejected",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
+    }
+  ],
+  "metrics": {},
+  "references": []
+}

CVE-2018/CVE-2018-145xx/CVE-2018-14520.json

@@ -2,7 +2,7 @@
   "id": "CVE-2018-14520",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-24T20:15:08.510",
-  "lastModified": "2024-11-21T03:49:15.140",
+  "lastModified": "2025-06-17T20:15:23.837",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2018/CVE-2018-162xx/CVE-2018-16210.json

@@ -2,8 +2,8 @@
   "id": "CVE-2018-16210",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2018-10-12T22:15:07.377",
-  "lastModified": "2024-11-21T03:52:17.730",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T17:56:26.900",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -16,13 +16,13 @@
     }
   ],
   "metrics": {
-    "cvssMetricV30": [
+    "cvssMetricV31": [
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
         "cvssData": {
-          "version": "3.0",
-          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
           "baseScore": 6.1,
           "baseSeverity": "MEDIUM",
           "attackVector": "NETWORK",
@@ -77,6 +77,370 @@
     }
   ],
   "configurations": [
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-362_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "051F8A1F-4792-44FE-A35E-DD1BFD71FC43"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-362:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6330A839-FAE3-43EB-B1AA-BA6844D9906D"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-363_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "AA136553-094E-4760-9C25-89E0954F4B95"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-363:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "54E13E9C-226E-4BD6-8F0C-3061092E892A"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-823_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "0E3196F5-4242-40DB-8D56-9E580C69D478"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-823:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "CB88572A-CB05-4B52-8BFC-05EFDC819244"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-832_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "488896BD-593D-46AA-9521-CA089F8D6977"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-832:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "13D1FA8D-C8BA-4D1C-8372-DECD40177631"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-862_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "8C6FB898-CBBC-4D80-ABCD-04B3E9BA5B82"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-862:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "FA04FBFB-9E1C-4618-9FDC-70675506D8D5"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-891_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "BE14C0B9-8B13-479D-9341-866B9FC71F9D"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-891:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "22BAABD9-A10D-4904-AA02-C37C4490B47A"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-890_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "05",
+              "matchCriteriaId": "E61D2577-BB7F-4EC0-8709-C68026322EA9"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-890:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "11751A8B-FCFD-433B-9065-B4FC85168A93"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-352_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "8E001859-A338-43DA-877E-C43F57E7F9AD"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-352:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6C0865A4-6C89-4470-98E3-7E90BDF94D15"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-831_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "3631065F-27D6-4217-84EA-A8B40CC1F38F"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-831:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "F0631884-FF6F-4AA9-9D76-CDECB5A738FC"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-852_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "1E940C38-F03A-4D81-9AEA-C3CAC90916E8"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-852:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "9D6739E1-EF0B-48EE-90FC-5708756FC362"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-880_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "A5974664-66D9-45BC-8977-98E3CE1D282F"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-880:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "CFEAC4D9-15CF-44B8-844D-C012AA4637A2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-881_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "72B66D0B-53CF-4018-831A-5A67CBA51B14"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-881:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "6FE51647-62C1-4D3C-91FA-13ACA6CD71D2"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:wago:750-889_firmware:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "14",
+              "matchCriteriaId": "FF2B7B07-532C-4D7B-B168-A9C3700EE8DD"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:wago:750-889:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "57919AAB-2962-4543-810A-C143300351F8"
+            }
+          ]
+        }
+      ]
+    },
     {
       "operator": "AND",
       "nodes": [

CVE-2018/CVE-2018-251xx/CVE-2018-25111.json

@@ -2,8 +2,8 @@
   "id": "CVE-2018-25111",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2025-05-31T01:15:19.123",
-  "lastModified": "2025-06-02T17:32:17.397",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-16T16:25:41.307",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.5,
         "impactScore": 2.5
+      },
+      {
+        "source": "nvd@nist.gov",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+          "baseScore": 4.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 2.5
       }
     ]
   },
@@ -51,22 +71,56 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/issues/591",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0",
-      "source": "cve@mitre.org"
-    },
-    {
-      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
-      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:django-helpdesk_project:django-helpdesk:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "1.0.0",
+              "matchCriteriaId": "55830F69-2DB2-4842-B7A8-906646B862FA"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/issues/591",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Exploit",
+        "Third Party Advisory",
+        "Patch"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Release Notes"
+      ]
+    },
+    {
+      "url": "https://github.com/django-helpdesk/django-helpdesk/pull/1120",
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "tags": [
+        "Exploit",
+        "Third Party Advisory",
+        "Patch"
+      ]
     }
   ]
 }

CVE-2018/CVE-2018-59xx/CVE-2018-5996.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2018-01-31T18:29:00.363",
   "lastModified": "2025-01-10T19:15:28.730",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {

CVE-2018/CVE-2018-93xx/CVE-2018-9372.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "security@android.com",
   "published": "2024-11-19T20:15:27.917",
   "lastModified": "2024-11-21T16:15:17.900",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2018/CVE-2018-94xx/CVE-2018-9409.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "security@android.com",
   "published": "2024-11-19T20:15:27.970",
   "lastModified": "2024-11-20T20:35:04.480",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2020/CVE-2020-138xx/CVE-2020-13878.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-13878",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-05T08:15:41.840",
-  "lastModified": "2024-11-21T05:02:03.590",
+  "lastModified": "2025-06-17T15:15:33.890",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-138xx/CVE-2020-13880.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-13880",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-05T09:15:08.587",
-  "lastModified": "2024-11-21T05:02:03.877",
+  "lastModified": "2025-06-18T16:15:19.850",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-266xx/CVE-2020-26624.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-26624",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-02T22:15:07.837",
-  "lastModified": "2024-11-21T05:20:09.577",
+  "lastModified": "2025-06-17T15:15:34.790",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 2.5
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
+          "baseScore": 3.8,
+          "baseSeverity": "LOW",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 2.5
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-266xx/CVE-2020-26628.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-26628",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-10T09:15:43.863",
-  "lastModified": "2024-11-21T05:20:09.997",
+  "lastModified": "2025-06-20T16:15:19.880",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 6.1,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-367xx/CVE-2020-36770.json

@@ -2,7 +2,7 @@
   "id": "CVE-2020-36770",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-15T07:15:07.917",
-  "lastModified": "2024-11-21T05:30:16.170",
+  "lastModified": "2025-06-20T17:15:25.413",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-732"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2020/CVE-2020-80xx/CVE-2020-8006.json

@@ -2,8 +2,8 @@
   "id": "CVE-2020-8006",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-04-12T12:15:41.467",
-  "lastModified": "2024-11-21T05:38:12.083",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-17T21:01:15.817",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,52 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:circontrol:raption_server:*:*:*:*:*:*:*:*",
+              "versionEndIncluding": "5.11.2",
+              "matchCriteriaId": "90380BD4-1577-43CA-919D-55974517E129"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Mailing List"
+      ]
+    },
+    {
+      "url": "https://circontrol.com/intelligent-charging-solutions/dc-chargers-series/raption-150/",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://seclists.org/fulldisclosure/2024/Mar/33",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Mailing List"
+      ]
     }
   ]
 }

CVE-2021/CVE-2021-204xx/CVE-2021-20450.json

@@ -2,8 +2,8 @@
   "id": "CVE-2021-20450",
   "sourceIdentifier": "psirt@us.ibm.com",
   "published": "2024-05-03T17:15:07.363",
-  "lastModified": "2024-12-05T21:15:06.663",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T15:21:00.173",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,61 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
-      "source": "psirt@us.ibm.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:10.4.1:*:*:*:*:*:*:*",
+              "matchCriteriaId": "04E5A9C3-0F44-40C1-B6B6-92839E386F56"
             },
             {
-      "url": "https://www.ibm.com/support/pages/node/7149876",
-      "source": "psirt@us.ibm.com"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:10.4.2:*:*:*:*:*:*:*",
+              "matchCriteriaId": "7AA07D9A-71F7-446A-8A8E-DD8C357666F0"
             },
             {
-      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://www.ibm.com/support/pages/node/7149876",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:cognos_controller:11.0.0:*:*:*:*:*:*:*",
+              "matchCriteriaId": "4BB85020-BF02-4C91-B494-93FB19185006"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://www.ibm.com/support/pages/node/7149876",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/196640",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Vendor Advisory"
+      ]
+    },
+    {
+      "url": "https://www.ibm.com/support/pages/node/7149876",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2021/CVE-2021-205xx/CVE-2021-20587.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-20587",
   "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
   "published": "2021-02-19T20:15:12.833",
-  "lastModified": "2024-11-21T05:46:49.637",
+  "lastModified": "2025-06-13T00:15:20.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) all versions, iQ Monozukuri Process Remote Monitoring (Data Transfer) all versions, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
+      "value": "Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
     },
     {
       "lang": "es",
@@ -17,6 +17,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
@@ -66,8 +86,18 @@
   },
   "weaknesses": [
     {
-      "source": "nvd@nist.gov",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-122"
+        }
+      ]
+    },
+    {
+      "source": "nvd@nist.gov",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -316,26 +346,16 @@
   ],
   "references": [
     {
-      "url": "https://jvn.jp/vu/JVNVU92330101/index.html",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://jvn.jp/vu/JVNVU92330101",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory",
-        "US Government Resource"
-      ]
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Vendor Advisory"
-      ]
+      "url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://jvn.jp/vu/JVNVU92330101/index.html",

CVE-2021/CVE-2021-205xx/CVE-2021-20588.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-20588",
   "sourceIdentifier": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
   "published": "2021-02-19T20:15:13.023",
-  "lastModified": "2024-11-21T05:46:49.790",
+  "lastModified": "2025-06-13T00:15:22.797",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "Improper handling of length parameter inconsistency vulnerability in Mitsubishi Electric FA Engineering Software(CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) all versions, iQ Monozukuri Process Remote Monitoring (Data Transfer) all versions, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition of the software products, and possibly to execute a malicious program on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
+      "value": "Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
     },
     {
       "lang": "es",
@@ -17,6 +17,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
+      },
       {
         "source": "nvd@nist.gov",
         "type": "Primary",
@@ -66,8 +86,18 @@
   },
   "weaknesses": [
     {
-      "source": "nvd@nist.gov",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
       "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-130"
+        }
+      ]
+    },
+    {
+      "source": "nvd@nist.gov",
+      "type": "Secondary",
       "description": [
         {
           "lang": "en",
@@ -316,22 +346,16 @@
   ],
   "references": [
     {
-      "url": "https://jvn.jp/vu/JVNVU92330101/index.html",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://jvn.jp/vu/JVNVU92330101",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
       "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
-      "url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
-      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
-      "tags": [
-        "Vendor Advisory"
-      ]
+      "url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
+      "source": "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
     },
     {
       "url": "https://jvn.jp/vu/JVNVU92330101/index.html",

CVE-2021/CVE-2021-210xx/CVE-2021-21000.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "info@cert.vde.com",
   "published": "2021-05-24T11:15:07.917",
   "lastModified": "2024-11-21T05:47:22.593",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-210xx/CVE-2021-21001.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "info@cert.vde.com",
   "published": "2021-05-24T11:15:07.980",
   "lastModified": "2024-11-21T05:47:22.780",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-238xx/CVE-2021-23814.json

@@ -2,13 +2,13 @@
   "id": "CVE-2021-23814",
   "sourceIdentifier": "report@snyk.io",
   "published": "2021-12-17T20:15:08.340",
-  "lastModified": "2024-11-21T05:51:53.883",
+  "lastModified": "2025-06-17T12:15:20.773",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "This affects the package unisharp/laravel-filemanager from 0.0.0. The upload() function does not sufficiently validate the file type when uploading. An attacker may be able to reproduce the following steps: - Install a package with a web Laravel application. - Navigate to the Upload window - Upload an image file, then capture the request - Edit the request contents with a malicious file (webshell) - Enter the path of file uploaded on URL - Remote Code Execution **Note: Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in the [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories)."
+      "value": "This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading.\r\rAn attacker may be able to reproduce the following steps:\r\r1. Install a package with a web Laravel application.\r2. Navigate to the Upload window\r3. Upload an image file, then capture the request\r4. Edit the request contents with a malicious file (webshell)\r5. Enter the path of file uploaded on URL - Remote Code Execution\r\r\r**Note:** Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories)."
     },
     {
       "lang": "es",
@@ -85,6 +85,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "report@snyk.io",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-94"
+        }
+      ]
+    },
     {
       "source": "nvd@nist.gov",
       "type": "Primary",
@@ -124,15 +134,20 @@
       ]
     },
     {
-      "url": "https://github.com/UniSharp/laravel-filemanager/issues/1113#issuecomment-1812092975",
+      "url": "https://github.com/UniSharp/laravel-filemanager/issues/1113",
       "source": "report@snyk.io"
     },
     {
-      "url": "https://snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199",
-      "source": "report@snyk.io",
-      "tags": [
-        "Third Party Advisory"
-      ]
+      "url": "https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.5.1",
+      "source": "report@snyk.io"
+    },
+    {
+      "url": "https://github.com/UniSharp/laravel-filemanager/releases/tag/v2.6.2",
+      "source": "report@snyk.io"
+    },
+    {
+      "url": "https://security.snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199",
+      "source": "report@snyk.io"
     },
     {
       "url": "https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php%23L26",

CVE-2021/CVE-2021-241xx/CVE-2021-24151.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-24151",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:08.763",
-  "lastModified": "2024-11-21T05:52:28.493",
+  "lastModified": "2025-06-20T17:15:27.670",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },

CVE-2021/CVE-2021-245xx/CVE-2021-24559.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-24559",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:08.953",
-  "lastModified": "2024-11-21T05:53:18.153",
+  "lastModified": "2025-06-20T17:15:27.930",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2021/CVE-2021-251xx/CVE-2021-25117.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-25117",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.213",
-  "lastModified": "2024-11-21T05:54:23.110",
+  "lastModified": "2025-06-17T14:15:26.197",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.7,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 4.8,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.7,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2021/CVE-2021-290xx/CVE-2021-29050.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-20T22:15:08.067",
   "lastModified": "2024-11-21T06:00:35.950",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30184.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-04-07T12:15:16.437",
   "lastModified": "2025-01-12T21:15:18.060",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30186.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.677",
   "lastModified": "2024-11-21T06:03:29.010",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30187.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T12:15:07.913",
   "lastModified": "2024-11-21T06:03:29.160",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30188.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.710",
   "lastModified": "2024-11-21T06:03:29.317",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30189.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.743",
   "lastModified": "2024-11-21T06:03:29.460",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30190.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.777",
   "lastModified": "2024-11-21T06:03:29.610",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30191.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.807",
   "lastModified": "2024-11-21T06:03:29.753",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30192.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.837",
   "lastModified": "2024-11-21T06:03:29.900",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30193.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.880",
   "lastModified": "2024-11-21T06:03:30.067",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30194.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.910",
   "lastModified": "2024-11-21T06:03:30.227",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-301xx/CVE-2021-30195.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2021-05-25T13:15:17.940",
   "lastModified": "2024-11-21T06:03:30.370",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-382xx/CVE-2021-38243.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-38243",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2023-09-27T15:15:54.463",
-  "lastModified": "2024-11-21T06:16:41.073",
+  "lastModified": "2025-06-18T15:15:19.803",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-94"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-435xx/CVE-2021-43584.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-43584",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-24T20:15:53.610",
-  "lastModified": "2024-11-21T06:29:29.450",
+  "lastModified": "2025-06-16T20:15:23.203",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.7,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 4.8,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.7,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-436xx/CVE-2021-43635.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-02-04T18:15:07.287",
   "lastModified": "2024-11-21T06:29:32.877",
-  "vulnStatus": "Modified",
+  "vulnStatus": "Undergoing Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2021/CVE-2021-469xx/CVE-2021-46902.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-46902",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-04T21:15:07.840",
-  "lastModified": "2024-11-21T06:34:53.637",
+  "lastModified": "2025-06-17T18:15:22.437",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-22"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-469xx/CVE-2021-46903.json

@@ -2,7 +2,7 @@
   "id": "CVE-2021-46903",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-02-04T21:15:07.900",
-  "lastModified": "2024-11-21T06:34:53.800",
+  "lastModified": "2025-06-17T18:15:22.650",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.2
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.2
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-Other"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-284"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2021/CVE-2021-471xx/CVE-2021-47144.json

@@ -2,174 +2,15 @@
   "id": "CVE-2021-47144",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-03-25T09:15:08.950",
-  "lastModified": "2024-12-17T14:49:22.333",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T14:15:24.327",
+  "vulnStatus": "Rejected",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/amdgpu: fix refcount leak\n\n[Why]\nthe gem object rfb->base.obj[0] is get according to num_planes\nin amdgpufb_create, but is not put according to num_planes\n\n[How]\nput rfb->base.obj[0] in amdgpu_fbdev_destroy according to num_planes"
-    },
-    {
-      "lang": "es",
-      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: drm/amd/amdgpu: corrige la fuga de refcount [Por qu\u00e9] el objeto gema rfb->base.obj[0] se obtiene seg\u00fan num_planes en amdgpufb_create, pero no se coloca seg\u00fan num_planes en amdgpufb_create num_planes [C\u00f3mo] poner rfb->base.obj[0] en amdgpu_fbdev_destroy seg\u00fan num_planes"
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
     }
   ],
-  "metrics": {
-    "cvssMetricV31": [
-      {
-        "source": "nvd@nist.gov",
-        "type": "Primary",
-        "cvssData": {
-          "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
-          "baseScore": 5.5,
-          "baseSeverity": "MEDIUM",
-          "attackVector": "LOCAL",
-          "attackComplexity": "LOW",
-          "privilegesRequired": "LOW",
-          "userInteraction": "NONE",
-          "scope": "UNCHANGED",
-          "confidentialityImpact": "NONE",
-          "integrityImpact": "NONE",
-          "availabilityImpact": "HIGH"
-        },
-        "exploitabilityScore": 1.8,
-        "impactScore": 3.6
-      }
-    ]
-  },
-  "weaknesses": [
-    {
-      "source": "nvd@nist.gov",
-      "type": "Primary",
-      "description": [
-        {
-          "lang": "en",
-          "value": "NVD-CWE-Other"
-        }
-      ]
-    }
-  ],
-  "configurations": [
-    {
-      "nodes": [
-        {
-          "operator": "OR",
-          "negate": false,
-          "cpeMatch": [
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionEndExcluding": "4.19.193",
-              "matchCriteriaId": "A3FDF344-70E4-41FE-8424-F05D70B8DC0F"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.4.0",
-              "versionEndExcluding": "5.4.124",
-              "matchCriteriaId": "F717E3E3-B420-411F-AECC-2D26A9F33F0F"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.10.0",
-              "versionEndExcluding": "5.10.42",
-              "matchCriteriaId": "18765089-FB00-4E06-82C2-69FE64CAB42D"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.12.0",
-              "versionEndExcluding": "5.12.9",
-              "matchCriteriaId": "B1F28E29-3C08-49BB-BCE1-C601F43C091D"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc1:*:*:*:*:*:*",
-              "matchCriteriaId": "0CBAD0FC-C281-4666-AB2F-F8E6E1165DF7"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:5.13:rc2:*:*:*:*:*:*",
-              "matchCriteriaId": "96AC23B2-D46A-49D9-8203-8E1BEDCA8532"
-            }
-          ]
-        }
-      ]
-    }
-  ],
-  "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/599e5d61ace952b0bb9bd942b198bbd0cfded1d7",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/95a4ec905e51a30c64cf2d78b04a7acbeae5ca94",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/9fdb8ed37a3a44f9c49372b69f87fd5f61cb3240",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/dde2656e0bbb2ac7d83a7bd95a8d5c3c95bbc009",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/fa7e6abc75f3d491bc561734312d065dc9dc2a77",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/599e5d61ace952b0bb9bd942b198bbd0cfded1d7",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/95a4ec905e51a30c64cf2d78b04a7acbeae5ca94",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/9fdb8ed37a3a44f9c49372b69f87fd5f61cb3240",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/dde2656e0bbb2ac7d83a7bd95a8d5c3c95bbc009",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/fa7e6abc75f3d491bc561734312d065dc9dc2a77",
-      "source": "af854a3a-2127-422b-91ae-364da2661108",
-      "tags": [
-        "Patch"
-      ]
-    }
-  ]
+  "metrics": {},
+  "references": []
 }

CVE-2021/CVE-2021-471xx/CVE-2021-47156.json

@@ -3,7 +3,7 @@
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-03-18T05:15:06.260",
   "lastModified": "2025-03-27T20:15:16.147",
-  "vulnStatus": "Undergoing Analysis",
+  "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
     {

CVE-2022/CVE-2022-04xx/CVE-2022-0402.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-0402",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.317",
-  "lastModified": "2024-11-21T06:38:33.050",
+  "lastModified": "2025-06-20T17:15:28.180",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 6.1,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2022/CVE-2022-14xx/CVE-2022-1471.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1471",
   "sourceIdentifier": "cve-coordination@google.com",
   "published": "2022-12-01T11:15:10.553",
-  "lastModified": "2025-02-13T17:15:35.627",
+  "lastModified": "2025-06-18T09:15:47.243",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -116,6 +116,10 @@
         "Third Party Advisory"
       ]
     },
+    {
+      "url": "https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html",
+      "source": "cve-coordination@google.com"
+    },
     {
       "url": "https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
       "source": "cve-coordination@google.com",
@@ -136,6 +140,10 @@
       "url": "https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc",
       "source": "cve-coordination@google.com"
     },
+    {
+      "url": "https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c",
+      "source": "cve-coordination@google.com"
+    },
     {
       "url": "https://security.netapp.com/advisory/ntap-20230818-0015/",
       "source": "cve-coordination@google.com"

CVE-2022/CVE-2022-15xx/CVE-2022-1538.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1538",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.437",
-  "lastModified": "2024-11-21T06:40:55.617",
+  "lastModified": "2025-06-20T17:15:28.410",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },

CVE-2022/CVE-2022-15xx/CVE-2022-1563.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1563",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.480",
-  "lastModified": "2024-11-21T06:40:58.593",
+  "lastModified": "2025-06-20T17:15:28.647",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+          "baseScore": 5.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 1.4
       }
     ]
   },

CVE-2022/CVE-2022-18xx/CVE-2022-1807.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-1807",
   "sourceIdentifier": "security-alert@sophos.com",
   "published": "2022-09-07T18:15:08.647",
-  "lastModified": "2024-11-21T06:41:30.647",
+  "lastModified": "2025-06-17T20:15:24.970",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -69,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-215xx/CVE-2022-21505.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-21505",
   "sourceIdentifier": "secalert_us@oracle.com",
   "published": "2024-12-24T19:15:06.763",
-  "lastModified": "2024-12-27T17:15:06.320",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T20:42:10.643",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,14 +51,47 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b",
-      "source": "secalert_us@oracle.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:*",
+              "matchCriteriaId": "44B8FEDF-6CB0-46E9-9AD7-4445B001C158"
             },
             {
-      "url": "https://linux.oracle.com/cve/CVE-2022-21505.html",
-      "source": "secalert_us@oracle.com"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:*",
+              "matchCriteriaId": "CA9021D6-6027-42E9-A12D-7EA32C5C63F1"
+            },
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*",
+              "matchCriteriaId": "9E6116DA-D643-4C6D-8B90-0A41125F1EF0"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b",
+      "source": "secalert_us@oracle.com",
+      "tags": [
+        "Broken Link"
+      ]
+    },
+    {
+      "url": "https://linux.oracle.com/cve/CVE-2022-21505.html",
+      "source": "secalert_us@oracle.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-224xx/CVE-2022-22491.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-22491",
   "sourceIdentifier": "psirt@us.ibm.com",
   "published": "2025-01-09T14:15:25.927",
-  "lastModified": "2025-01-09T15:15:09.430",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-20T17:54:49.337",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -81,10 +81,32 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://www.ibm.com/support/pages/node/7180500",
-      "source": "psirt@us.ibm.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:app_connect_enterprise_certified_container:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "7.0",
+              "versionEndIncluding": "12.4",
+              "matchCriteriaId": "4A3D90A2-BDD3-46A0-B990-0487941D7682"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://www.ibm.com/support/pages/node/7180500",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-231xx/CVE-2022-23180.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-23180",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.787",
-  "lastModified": "2024-11-21T06:48:08.517",
+  "lastModified": "2025-06-16T18:15:19.997",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },

CVE-2022/CVE-2022-236xx/CVE-2022-23689.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-23689",
   "sourceIdentifier": "security-alert@hpe.com",
   "published": "2022-09-06T18:15:11.313",
-  "lastModified": "2024-11-21T06:49:06.443",
+  "lastModified": "2025-06-17T20:15:25.123",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
+          "baseScore": 4.3,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "ADJACENT_NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "LOW"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },

CVE-2022/CVE-2022-289xx/CVE-2022-28975.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-28975",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-09T14:15:45.647",
-  "lastModified": "2024-11-21T06:58:16.340",
+  "lastModified": "2025-06-18T17:15:26.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-303xx/CVE-2022-30312.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-30312",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T18:15:08.807",
-  "lastModified": "2024-11-21T07:02:33.337",
+  "lastModified": "2025-06-17T20:15:25.327",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "ADJACENT_NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-319"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-319"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-314xx/CVE-2022-31414.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-31414",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.397",
-  "lastModified": "2024-11-21T07:04:27.940",
+  "lastModified": "2025-06-17T20:15:25.530",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-322xx/CVE-2022-32264.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-32264",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-06T18:15:15.530",
-  "lastModified": "2024-11-21T07:06:03.270",
+  "lastModified": "2025-06-17T20:15:25.727",
   "vulnStatus": "Modified",
   "cveTags": [
     {
@@ -43,6 +43,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 7.5,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 3.6
       }
     ]
   },
@@ -56,6 +76,16 @@
           "value": "CWE-755"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-755"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-329xx/CVE-2022-32919.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-32919",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.173",
-  "lastModified": "2024-11-21T07:07:14.263",
+  "lastModified": "2025-06-17T18:15:22.830",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 1.4
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+          "baseScore": 4.7,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 1.4
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-1021"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-1021"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36504.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36504",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.237",
-  "lastModified": "2024-11-21T07:13:10.750",
+  "lastModified": "2025-06-17T20:15:25.923",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36508.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36508",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.413",
-  "lastModified": "2024-11-21T07:13:11.347",
+  "lastModified": "2025-06-17T20:15:26.120",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36509.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36509",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.457",
-  "lastModified": "2024-11-21T07:13:11.520",
+  "lastModified": "2025-06-17T20:15:26.290",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-78"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-78"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36510.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36510",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.500",
-  "lastModified": "2024-11-21T07:13:11.693",
+  "lastModified": "2025-06-17T20:15:26.453",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-78"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-78"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36511.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36511",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.547",
-  "lastModified": "2024-11-21T07:13:11.850",
+  "lastModified": "2025-06-17T20:15:26.617",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36513.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36513",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-08-25T14:15:11.590",
-  "lastModified": "2024-11-21T07:13:12.010",
+  "lastModified": "2025-06-17T20:15:26.780",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-365xx/CVE-2022-36587.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36587",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.520",
-  "lastModified": "2024-11-21T07:13:21.960",
+  "lastModified": "2025-06-17T20:15:26.947",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-120"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-120"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36659.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36659",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.567",
-  "lastModified": "2024-11-21T07:13:27.807",
+  "lastModified": "2025-06-17T20:15:27.130",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-476"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36660.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36660",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.613",
-  "lastModified": "2024-11-21T07:13:27.947",
+  "lastModified": "2025-06-17T20:15:27.297",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-787"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-366xx/CVE-2022-36661.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-36661",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.667",
-  "lastModified": "2024-11-21T07:13:28.100",
+  "lastModified": "2025-06-17T20:15:27.457",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+          "baseScore": 6.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-476"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-476"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-377xx/CVE-2022-37780.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-37780",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2022-09-07T17:15:08.717",
-  "lastModified": "2024-11-21T07:15:09.260",
+  "lastModified": "2025-06-17T20:15:27.613",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },

CVE-2022/CVE-2022-37xx/CVE-2022-3739.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-3739",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:09.980",
-  "lastModified": "2024-11-21T07:20:08.650",
+  "lastModified": "2025-06-20T17:15:28.887",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.3,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2022/CVE-2022-37xx/CVE-2022-3764.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-3764",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:10.030",
-  "lastModified": "2024-11-21T07:20:12.047",
+  "lastModified": "2025-06-20T17:15:29.157",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.2,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 7.2,
+          "baseSeverity": "HIGH",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.2,
+        "impactScore": 5.9
       }
     ]
   },

CVE-2022/CVE-2022-38xx/CVE-2022-3829.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-3829",
   "sourceIdentifier": "contact@wpscan.com",
   "published": "2024-01-16T16:15:10.080",
-  "lastModified": "2024-11-21T07:20:19.280",
+  "lastModified": "2025-06-20T17:15:29.400",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.7,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 4.8,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "HIGH",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.7,
+        "impactScore": 2.7
       }
     ]
   },

CVE-2022/CVE-2022-403xx/CVE-2022-40361.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-40361",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-11T03:15:09.157",
-  "lastModified": "2024-11-21T07:21:21.140",
+  "lastModified": "2025-06-17T18:15:23.053",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 2.8,
         "impactScore": 2.7
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+          "baseScore": 6.1,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 2.8,
+        "impactScore": 2.7
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-79"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-415xx/CVE-2022-41572.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-41572",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2025-01-07T20:15:27.943",
-  "lastModified": "2025-01-08T15:15:09.427",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T15:10:08.940",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,14 +51,38 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://github.com/EyesOfNetworkCommunity/eonweb/issues/120",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/Orange-Cyberdefense/CVE-repository/",
-      "source": "cve@mitre.org"
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:eyesofnetwork:eyesofnetwork:*:*:*:*:*:*:*:*",
+              "versionEndIncluding": "5.3-11",
+              "matchCriteriaId": "C50D00B8-8A1D-4F64-9680-8552267A0EAC"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://github.com/EyesOfNetworkCommunity/eonweb/issues/120",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Issue Tracking"
+      ]
+    },
+    {
+      "url": "https://github.com/Orange-Cyberdefense/CVE-repository/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-428xx/CVE-2022-42816.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-42816",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.290",
-  "lastModified": "2024-11-21T07:25:24.283",
+  "lastModified": "2025-06-20T16:15:20.133",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "NONE",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-284"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-432xx/CVE-2022-43216.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-43216",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-04-08T12:15:08.017",
-  "lastModified": "2024-11-21T07:26:03.743",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-18T18:34:07.987",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,22 +51,52 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://abrhil.com/",
-      "source": "cve@mitre.org"
-    },
+      "nodes": [
         {
-      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
-      "source": "cve@mitre.org"
-    },
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
             {
-      "url": "https://abrhil.com/",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
-    },
-    {
-      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
-      "source": "af854a3a-2127-422b-91ae-364da2661108"
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:abrhil:lista_de_asistenci:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "5.6.2",
+              "matchCriteriaId": "C87E0702-92E1-4AE1-A140-663508A414EC"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://abrhil.com/",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
+      "source": "cve@mitre.org",
+      "tags": [
+        "Third Party Advisory"
+      ]
+    },
+    {
+      "url": "https://abrhil.com/",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Product"
+      ]
+    },
+    {
+      "url": "https://github.com/blackarrowsec/advisories/tree/master/2022/CVE-2022-43216",
+      "source": "af854a3a-2127-422b-91ae-364da2661108",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-438xx/CVE-2022-43840.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-43840",
   "sourceIdentifier": "psirt@us.ibm.com",
   "published": "2025-04-14T21:15:16.200",
-  "lastModified": "2025-04-15T21:15:46.440",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2025-06-19T00:37:04.670",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -51,10 +51,32 @@
       ]
     }
   ],
-  "references": [
+  "configurations": [
     {
-      "url": "https://www.ibm.com/support/pages/node/7169766",
-      "source": "psirt@us.ibm.com"
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:a:ibm:aspera_console:*:*:*:*:*:*:*:*",
+              "versionStartIncluding": "3.4.0",
+              "versionEndIncluding": "3.4.4",
+              "matchCriteriaId": "682EB2AD-DD53-43FC-8A8E-7A3BDE927467"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "url": "https://www.ibm.com/support/pages/node/7169766",
+      "source": "psirt@us.ibm.com",
+      "tags": [
+        "Vendor Advisory"
+      ]
     }
   ]
 }

CVE-2022/CVE-2022-450xx/CVE-2022-45064.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-45064",
   "sourceIdentifier": "security@apache.org",
   "published": "2023-04-13T11:15:06.737",
-  "lastModified": "2025-05-23T16:44:02.653",
-  "vulnStatus": "Undergoing Analysis",
+  "lastModified": "2025-06-13T17:55:57.933",
+  "vulnStatus": "Analyzed",
   "cveTags": [],
   "descriptions": [
     {
@@ -76,8 +76,9 @@
           "cpeMatch": [
             {
               "vulnerable": true,
-              "criteria": "cpe:2.3:a:apache:sling:2.13.0:*:*:*:*:*:*:*",
-              "matchCriteriaId": "F0452CA1-A3AB-430A-9011-25A37AD1F2A9"
+              "criteria": "cpe:2.3:a:apache:apache_sling_engine:*:*:*:*:*:*:*:*",
+              "versionEndExcluding": "2.14.0",
+              "matchCriteriaId": "F89F26B7-0485-4677-A00E-3A6B6B7D67AA"
             }
           ]
         }

CVE-2022/CVE-2022-456xx/CVE-2022-45699.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-45699",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2023-02-10T02:15:10.727",
-  "lastModified": "2025-03-24T18:15:15.653",
+  "lastModified": "2025-06-17T06:15:21.230",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -119,6 +119,10 @@
         "Third Party Advisory"
       ]
     },
+    {
+      "url": "https://web.archive.org/web/20230626075954/https://github.com/0xst4n/APSystems-ECU-R-RCE-Timezone",
+      "source": "cve@mitre.org"
+    },
     {
       "url": "https://www.youtube.com/watch?v=YNeeaDPJOBY",
       "source": "cve@mitre.org",

CVE-2022/CVE-2022-467xx/CVE-2022-46710.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-46710",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.380",
-  "lastModified": "2024-11-21T07:30:57.417",
+  "lastModified": "2025-06-20T16:15:20.500",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-841"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-467xx/CVE-2022-46721.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-46721",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.430",
-  "lastModified": "2024-11-21T07:30:58.433",
+  "lastModified": "2025-06-17T18:15:23.260",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-787"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-470xx/CVE-2022-47072.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-47072",
   "sourceIdentifier": "cve@mitre.org",
   "published": "2024-01-31T21:15:08.440",
-  "lastModified": "2024-11-21T07:31:27.933",
+  "lastModified": "2025-06-17T15:15:35.183",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 3.9,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+          "baseScore": 9.8,
+          "baseSeverity": "CRITICAL",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "NONE",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 3.9,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "CWE-89"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-89"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-479xx/CVE-2022-47915.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-47915",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.473",
-  "lastModified": "2024-11-21T07:32:31.490",
+  "lastModified": "2025-06-20T16:15:20.760",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-119"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-479xx/CVE-2022-47965.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-47965",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.523",
-  "lastModified": "2024-11-21T07:32:38.080",
+  "lastModified": "2025-06-20T16:15:20.953",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 5.9
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+          "baseScore": 7.8,
+          "baseSeverity": "HIGH",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "HIGH",
+          "availabilityImpact": "HIGH"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 5.9
       }
     ]
   },
@@ -49,6 +69,16 @@
           "value": "NVD-CWE-noinfo"
         }
       ]
+    },
+    {
+      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+      "type": "Secondary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-119"
+        }
+      ]
     }
   ],
   "configurations": [

CVE-2022/CVE-2022-485xx/CVE-2022-48577.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-48577",
   "sourceIdentifier": "product-security@apple.com",
   "published": "2024-01-10T22:15:47.610",
-  "lastModified": "2024-11-21T07:33:31.703",
+  "lastModified": "2025-06-17T20:15:27.790",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -36,6 +36,26 @@
         },
         "exploitabilityScore": 1.8,
         "impactScore": 3.6
+      },
+      {
+        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
+        "type": "Secondary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+          "baseScore": 5.5,
+          "baseSeverity": "MEDIUM",
+          "attackVector": "LOCAL",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "NONE",
+          "userInteraction": "REQUIRED",
+          "scope": "UNCHANGED",
+          "confidentialityImpact": "HIGH",
+          "integrityImpact": "NONE",
+          "availabilityImpact": "NONE"
+        },
+        "exploitabilityScore": 1.8,
+        "impactScore": 3.6
       }
     ]
   },

CVE-2022/CVE-2022-488xx/CVE-2022-48849.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-48849",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-07-16T13:15:12.103",
-  "lastModified": "2024-11-21T07:34:12.480",
+  "lastModified": "2025-06-19T13:15:21.690",
   "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
@@ -91,13 +91,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/fcd1d79aa943fff4fbaa0cce1d576995a7960699",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/cb29021be49858059138f75d6311a7c35a9379b2",
       "source": "af854a3a-2127-422b-91ae-364da2661108",

CVE-2022/CVE-2022-489xx/CVE-2022-48935.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-48935",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-08-22T04:15:16.877",
-  "lastModified": "2024-08-23T01:45:31.280",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:21.983",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,13 +105,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/88c795491bf45a8c08a0f94c9ca4f13722e51013",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/8ffb8ac3448845f65634889b051bd65e4dee484b",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
@@ -119,13 +112,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/b05a24cc453e3cd51b0c79e3c583b5d495eba1d6",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/b4fcc081e527aa2ce12e956912fc47e251f6bd27",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-489xx/CVE-2022-48941.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-48941",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2024-08-22T04:15:17.967",
-  "lastModified": "2024-08-22T18:41:37.090",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:22.263",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -84,13 +84,6 @@
     }
   ],
   "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/05ae1f0fe9c6c5ead08b306e665763a352d20716",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/2a3e61de89bab6696aa28b70030eb119968c5586",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-491xx/CVE-2022-49152.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-49152",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:00:52.440",
-  "lastModified": "2025-03-13T21:58:23.127",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:22.587",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,40 +105,12 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/1ac49c8fd49fdf53d3cd8b77eb8ffda08d7fbe22",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/29968329b926d238e3107ec071a250397555d264",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/3e2852eda19ee1a400cd809d7a9322680f34a262",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/3e3c658055c002900982513e289398a1aad4a488",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
       "tags": [
         "Patch"
       ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/7521a97b1929042604bef6859f62fa8b4bbc077b",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
     }
   ]
 }

CVE-2022/CVE-2022-492xx/CVE-2022-49299.json

@@ -2,185 +2,15 @@
   "id": "CVE-2022-49299",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:06.727",
-  "lastModified": "2025-04-14T19:49:30.960",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T14:15:34.170",
+  "vulnStatus": "Rejected",
   "cveTags": [],
   "descriptions": [
     {
       "lang": "en",
-      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: gadget: don't reset gadget's driver->bus\n\nUDC driver should not touch gadget's driver internals, especially it\nshould not reset driver->bus. This wasn't harmful so far, but since\ncommit fc274c1e9973 (\"USB: gadget: Add a new bus for gadgets\") gadget\nsubsystem got it's own bus and messing with ->bus triggers the\nfollowing NULL pointer dereference:\n\ndwc2 12480000.hsotg: bound driver g_ether\n8<--- cut here ---\nUnable to handle kernel NULL pointer dereference at virtual address 00000000\n[00000000] *pgd=00000000\nInternal error: Oops: 5 [#1] SMP ARM\nModules linked in: ...\nCPU: 0 PID: 620 Comm: modprobe Not tainted 5.18.0-rc5-next-20220504 #11862\nHardware name: Samsung Exynos (Flattened Device Tree)\nPC is at module_add_driver+0x44/0xe8\nLR is at sysfs_do_create_link_sd+0x84/0xe0\n...\nProcess modprobe (pid: 620, stack limit = 0x(ptrval))\n...\n module_add_driver from bus_add_driver+0xf4/0x1e4\n bus_add_driver from driver_register+0x78/0x10c\n driver_register from usb_gadget_register_driver_owner+0x40/0xb4\n usb_gadget_register_driver_owner from do_one_initcall+0x44/0x1e0\n do_one_initcall from do_init_module+0x44/0x1c8\n do_init_module from load_module+0x19b8/0x1b9c\n load_module from sys_finit_module+0xdc/0xfc\n sys_finit_module from ret_fast_syscall+0x0/0x54\nException stack(0xf1771fa8 to 0xf1771ff0)\n...\ndwc2 12480000.hsotg: new device is high-speed\n---[ end trace 0000000000000000 ]---\n\nFix this by removing driver->bus entry reset."
-    },
-    {
-      "lang": "es",
-      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: dwc2: gadget: no restablezca el controlador UDC del bus del gadget-&gt;controlador no debe tocar los componentes internos del controlador del gadget, especialmente no debe restablecer el controlador UDC del bus del gadget-&gt;controlador. Esto no fue da\u00f1ino hasta ahora, pero desde el commit fc274c1e9973 (\"USB: gadget: Agregar un nuevo bus para gadgets\") el subsistema de gadget tiene su propio bus y jugar con -&gt;bus desencadena la siguiente desreferencia de puntero NULL: dwc2 12480000.hsotg: controlador vinculado g_ether 8&lt;--- corte aqu\u00ed --- No se puede manejar la desreferencia de puntero NULL del kernel en la direcci\u00f3n virtual 00000000 [00000000] *pgd=00000000 Error interno: Oops: 5 [#1] M\u00f3dulos SMP ARM vinculados en: ... CPU: 0 PID: 620 Comm: modprobe No contaminado 5.18.0-rc5-next-20220504 #11862 Nombre del hardware: Samsung Exynos (\u00e1rbol de dispositivos aplanado) La PC est\u00e1 en module_add_driver+0x44/0xe8 LR est\u00e1 en sysfs_do_create_link_sd+0x84/0xe0 ... Procesar modprobe (pid: 620, l\u00edmite de pila = 0x(ptrval)) ... module_add_driver desde bus_add_driver+0xf4/0x1e4 bus_add_driver desde driver_register+0x78/0x10c driver_register desde usb_gadget_register_driver_owner+0x40/0xb4 usb_gadget_register_driver_owner desde do_one_initcall+0x44/0x1e0 do_one_initcall desde do_init_module+0x44/0x1c8 do_init_module desde load_module+0x19b8/0x1b9c load_module desde sys_finit_module+0xdc/0xfc sys_finit_module de ret_fast_syscall+0x0/0x54 Pila de excepciones (0xf1771fa8 a 0xf1771ff0) ... dwc2 12480000.hsotg: el nuevo dispositivo es de alta velocidad ---[ fin de seguimiento 000000000000000 ]--- Solucione esto eliminando el restablecimiento de la entrada del bus del controlador."
+      "value": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority."
     }
   ],
-  "metrics": {
-    "cvssMetricV31": [
-      {
-        "source": "nvd@nist.gov",
-        "type": "Primary",
-        "cvssData": {
-          "version": "3.1",
-          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
-          "baseScore": 5.5,
-          "baseSeverity": "MEDIUM",
-          "attackVector": "LOCAL",
-          "attackComplexity": "LOW",
-          "privilegesRequired": "LOW",
-          "userInteraction": "NONE",
-          "scope": "UNCHANGED",
-          "confidentialityImpact": "NONE",
-          "integrityImpact": "NONE",
-          "availabilityImpact": "HIGH"
-        },
-        "exploitabilityScore": 1.8,
-        "impactScore": 3.6
-      }
-    ]
-  },
-  "weaknesses": [
-    {
-      "source": "nvd@nist.gov",
-      "type": "Primary",
-      "description": [
-        {
-          "lang": "en",
-          "value": "CWE-476"
-        }
-      ]
-    }
-  ],
-  "configurations": [
-    {
-      "nodes": [
-        {
-          "operator": "OR",
-          "negate": false,
-          "cpeMatch": [
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionEndExcluding": "4.9.318",
-              "matchCriteriaId": "0D4D4067-974D-4560-8320-22FDA399E3F9"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.10",
-              "versionEndExcluding": "4.14.283",
-              "matchCriteriaId": "D6823775-2653-4644-A0D4-4E6E68F10C65"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.15",
-              "versionEndExcluding": "4.19.247",
-              "matchCriteriaId": "B8CFA0F4-2D75-41F4-9753-87944A08B53B"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "4.20",
-              "versionEndExcluding": "5.4.198",
-              "matchCriteriaId": "3EC49633-14DE-4EBD-BB80-76AE2E3EABB9"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.5",
-              "versionEndExcluding": "5.10.122",
-              "matchCriteriaId": "1B42AA01-44D8-4572-95E6-FF8E374CF9C5"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.11",
-              "versionEndExcluding": "5.15.47",
-              "matchCriteriaId": "FC042EE3-4864-4325-BE0B-4BCDBF11AA61"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.16",
-              "versionEndExcluding": "5.17.15",
-              "matchCriteriaId": "53E7AA2E-2FB4-45CA-A22B-08B4EDBB51AD"
-            },
-            {
-              "vulnerable": true,
-              "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
-              "versionStartIncluding": "5.18",
-              "versionEndExcluding": "5.18.4",
-              "matchCriteriaId": "FA6D643C-6D6A-4821-8A8D-B5776B8F0103"
-            }
-          ]
-        }
-      ]
-    }
-  ],
-  "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/172cfc167c8ee6238f24f9c16efd598602af643c",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/3120aac6d0ecd9accf56894aeac0e265f74d3d5a",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/5127c0f365265bb69cd776ad6e4b872c309f3fa8",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/547ebdc200b862dff761ff4890f66d8217c33316",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/5b0c0298f7c3b57417f1729ec4071f76864b72dd",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/bee8f9808a7e82addfc73a0973b16a8bb684205b",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/d2159feb9d28ce496d77df98313ab454646372ac",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/d232ca0bbc7d03144bad0ffd1792c3352bfd03fa",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/efb15ff4a77fe053c941281775fefa91c87770e0",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    }
-  ]
+  "metrics": {},
+  "references": []
 }

CVE-2022/CVE-2022-493xx/CVE-2022-49352.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49352",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:11.920",
-  "lastModified": "2025-02-26T07:01:11.920",
+  "lastModified": "2025-06-19T13:15:23.173",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -17,10 +17,6 @@
   ],
   "metrics": {},
   "references": [
-    {
-      "url": "https://git.kernel.org/stable/c/0ab308d72af7548f21e4499d025c25887da0c26a",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
     {
       "url": "https://git.kernel.org/stable/c/1bcce88da60eccc946c0f4ed942b0f08cd565778",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"

CVE-2022/CVE-2022-494xx/CVE-2022-49412.json

@@ -2,8 +2,8 @@
   "id": "CVE-2022-49412",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:17.703",
-  "lastModified": "2025-03-24T19:52:31.537",
-  "vulnStatus": "Analyzed",
+  "lastModified": "2025-06-19T13:15:23.390",
+  "vulnStatus": "Modified",
   "cveTags": [],
   "descriptions": [
     {
@@ -105,13 +105,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/7d172b9dc913e161d8ff88770eea01701ff553de",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/8abc8763b11c35e03cc91d59fd0cd28d39f88ca9",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
@@ -119,13 +112,6 @@
         "Patch"
       ]
     },
-    {
-      "url": "https://git.kernel.org/stable/c/97be7d13fbd4001eeab49b1be6399f23a8c66160",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
-      "tags": [
-        "Patch"
-      ]
-    },
     {
       "url": "https://git.kernel.org/stable/c/a16c65cca7d2c7ff965fdd3adc8df2156529caf1",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",

CVE-2022/CVE-2022-494xx/CVE-2022-49418.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49418",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:18.260",
-  "lastModified": "2025-02-26T07:01:18.260",
+  "lastModified": "2025-06-19T13:15:23.660",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -24,10 +24,6 @@
     {
       "url": "https://git.kernel.org/stable/c/c3ed222745d9ad7b69299b349a64ba533c64a34f",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
-    {
-      "url": "https://git.kernel.org/stable/c/eb1fe9600b86c24a789046bfc5c6851dda119280",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
     }
   ]
 }

CVE-2022/CVE-2022-495xx/CVE-2022-49558.json

@@ -2,7 +2,7 @@
   "id": "CVE-2022-49558",
   "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
   "published": "2025-02-26T07:01:31.597",
-  "lastModified": "2025-02-26T07:01:31.597",
+  "lastModified": "2025-06-19T13:15:23.990",
   "vulnStatus": "Awaiting Analysis",
   "cveTags": [],
   "descriptions": [
@@ -37,10 +37,6 @@
       "url": "https://git.kernel.org/stable/c/b09e6ccf0d12f9356e8e3508d3e3dce126298538",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
     },
-    {
-      "url": "https://git.kernel.org/stable/c/c73955a09408e7374d9abfd0e78ce3de9cda0635",
-      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
-    },
     {
       "url": "https://git.kernel.org/stable/c/f9a43007d3f7ba76d5e7f9421094f00f2ef202f8",
       "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"

CVE-2022/CVE-2022-499xx/CVE-2022-49934.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49934",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:19.400",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix UAF in ieee80211_scan_rx()\n\nieee80211_scan_rx() tries to access scan_req->flags after a\nnull check, but a UAF is observed when the scan is completed\nand __ieee80211_scan_completed() executes, which then calls\ncfg80211_scan_done() leading to the freeing of scan_req.\n\nSince scan_req is rcu_dereference()'d, prevent the racing in\n__ieee80211_scan_completed() by ensuring that from mac80211's\nPOV it is no longer accessed from an RCU read critical section\nbefore we call cfg80211_scan_done()."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/4abc8c07a065ecf771827bde3c63fbbe4aa0c08b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/5d20c6f932f2758078d0454729129c894fe353e7",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/60deb9f10eec5c6a20252ed36238b55d8b614a2c",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/6eb181a64fdabf10be9e54de728876667da20255",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/78a07732fbb0934d14827d8f09b9aa6a49ee1aa9",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9ad48cbf8b07f10c1e4a7a262b32a9179ae9dd2d",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c0445feb80a4d0854898118fa01073701f8d356b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/e0ff39448cea654843744c72c6780293c5082cb1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49935.json

@@ -0,0 +1,25 @@
+{
+  "id": "CVE-2022-49935",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.340",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma-buf/dma-resv: check if the new fence is really later\n\nPreviously when we added a fence to a dma_resv object we always\nassumed the the newer than all the existing fences.\n\nWith Jason's work to add an UAPI to explicit export/import that's not\nnecessary the case any more. So without this check we would allow\nuserspace to force the kernel into an use after free error.\n\nSince the change is very small and defensive it's probably a good\nidea to backport this to stable kernels as well just in case others\nare using the dma_resv object in the same way."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/a3f7c10a269d5b77dd5822ade822643ced3057f0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c4c798fe98adceb642050819cb57cbc8f5c27870",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49936.json

@@ -0,0 +1,49 @@
+{
+  "id": "CVE-2022-49936",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.450",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: core: Prevent nested device-reset calls\n\nAutomatic kernel fuzzing revealed a recursive locking violation in\nusb-storage:\n\n============================================\nWARNING: possible recursive locking detected\n5.18.0 #3 Not tainted\n--------------------------------------------\nkworker/1:3/1205 is trying to acquire lock:\nffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at:\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\n\nbut task is already holding lock:\nffff888018638db8 (&us_interface_key[i]){+.+.}-{3:3}, at:\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\n\n...\n\nstack backtrace:\nCPU: 1 PID: 1205 Comm: kworker/1:3 Not tainted 5.18.0 #3\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nWorkqueue: usb_hub_wq hub_event\nCall Trace:\n<TASK>\n__dump_stack lib/dump_stack.c:88 [inline]\ndump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106\nprint_deadlock_bug kernel/locking/lockdep.c:2988 [inline]\ncheck_deadlock kernel/locking/lockdep.c:3031 [inline]\nvalidate_chain kernel/locking/lockdep.c:3816 [inline]\n__lock_acquire.cold+0x152/0x3ca kernel/locking/lockdep.c:5053\nlock_acquire kernel/locking/lockdep.c:5665 [inline]\nlock_acquire+0x1ab/0x520 kernel/locking/lockdep.c:5630\n__mutex_lock_common kernel/locking/mutex.c:603 [inline]\n__mutex_lock+0x14f/0x1610 kernel/locking/mutex.c:747\nusb_stor_pre_reset+0x35/0x40 drivers/usb/storage/usb.c:230\nusb_reset_device+0x37d/0x9a0 drivers/usb/core/hub.c:6109\nr871xu_dev_remove+0x21a/0x270 drivers/staging/rtl8712/usb_intf.c:622\nusb_unbind_interface+0x1bd/0x890 drivers/usb/core/driver.c:458\ndevice_remove drivers/base/dd.c:545 [inline]\ndevice_remove+0x11f/0x170 drivers/base/dd.c:537\n__device_release_driver drivers/base/dd.c:1222 [inline]\ndevice_release_driver_internal+0x1a7/0x2f0 drivers/base/dd.c:1248\nusb_driver_release_interface+0x102/0x180 drivers/usb/core/driver.c:627\nusb_forced_unbind_intf+0x4d/0xa0 drivers/usb/core/driver.c:1118\nusb_reset_device+0x39b/0x9a0 drivers/usb/core/hub.c:6114\n\nThis turned out not to be an error in usb-storage but rather a nested\ndevice reset attempt.  That is, as the rtl8712 driver was being\nunbound from a composite device in preparation for an unrelated USB\nreset (that driver does not have pre_reset or post_reset callbacks),\nits ->remove routine called usb_reset_device() -- thus nesting one\nreset call within another.\n\nPerforming a reset as part of disconnect processing is a questionable\npractice at best.  However, the bug report points out that the USB\ncore does not have any protection against nested resets.  Adding a\nreset_in_progress flag and testing it will prevent such errors in the\nfuture."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/1b29498669914c7f9afb619722421418a753d372",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9c6d778800b921bde3bff3cff5003d1650f942d1",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/abe3cfb7a7c8e907b312c7dbd7bf4d142b745aa8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c548b99e1c37db6f7df86ecfe9a1f895d6c5966e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/cc9a12e12808af178c600cc485338bac2e37d2a8",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d5eb850b3e8836197a38475840725260b9783e94",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d90419b8b8322b6924f6da9da952647f2dadc21b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/df1875084898b15cbc42f712e93d7f113ae6271b",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49937.json

@@ -0,0 +1,33 @@
+{
+  "id": "CVE-2022-49937",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.570",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: mceusb: Use new usb_control_msg_*() routines\n\nAutomatic kernel fuzzing led to a WARN about invalid pipe direction in\nthe mceusb driver:\n\n------------[ cut here ]------------\nusb 6-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType 40\nWARNING: CPU: 0 PID: 2465 at drivers/usb/core/urb.c:410\nusb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410\nModules linked in:\nCPU: 0 PID: 2465 Comm: kworker/0:2 Not tainted 5.19.0-rc4-00208-g69cb6c6556ad #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.13.0-1ubuntu1.1 04/01/2014\nWorkqueue: usb_hub_wq hub_event\nRIP: 0010:usb_submit_urb+0x1326/0x1820 drivers/usb/core/urb.c:410\nCode: 7c 24 40 e8 ac 23 91 fd 48 8b 7c 24 40 e8 b2 70 1b ff 45 89 e8\n44 89 f1 4c 89 e2 48 89 c6 48 c7 c7 a0 30 a9 86 e8 48 07 11 02 <0f> 0b\ne9 1c f0 ff ff e8 7e 23 91 fd 0f b6 1d 63 22 83 05 31 ff 41\nRSP: 0018:ffffc900032becf0 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: ffff8881100f3058 RCX: 0000000000000000\nRDX: ffffc90004961000 RSI: ffff888114c6d580 RDI: fffff52000657d90\nRBP: ffff888105ad90f0 R08: ffffffff812c3638 R09: 0000000000000000\nR10: 0000000000000005 R11: ffffed1023504ef1 R12: ffff888105ad9000\nR13: 0000000000000040 R14: 0000000080000380 R15: ffff88810ba96500\nFS: 0000000000000000(0000) GS:ffff88811a800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007ffe810bda58 CR3: 000000010b720000 CR4: 0000000000350ef0\nCall Trace:\n<TASK>\nusb_start_wait_urb+0x101/0x4c0 drivers/usb/core/message.c:58\nusb_internal_control_msg drivers/usb/core/message.c:102 [inline]\nusb_control_msg+0x31c/0x4a0 drivers/usb/core/message.c:153\nmceusb_gen1_init drivers/media/rc/mceusb.c:1431 [inline]\nmceusb_dev_probe+0x258e/0x33f0 drivers/media/rc/mceusb.c:1807\n\nThe reason for the warning is clear enough; the driver sends an\nunusual read request on endpoint 0 but does not set the USB_DIR_IN bit\nin the bRequestType field.\n\nMore importantly, the whole situation can be avoided and the driver\nsimplified by converting it over to the relatively new\nusb_control_msg_recv() and usb_control_msg_send() routines.  That's\nwhat this fix does."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/587f793c64d99d92be8ef01c4c69d885a3f2edb6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/608e58a0f4617977178131f5f68a3fce1d3f5316",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/75913c562f5ba4cf397d835c63f443879167c6f6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/d69c738ac9310b56e84c51c8f09fc018a8291bc6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49938.json

@@ -0,0 +1,29 @@
+{
+  "id": "CVE-2022-49938",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.683",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix small mempool leak in SMB2_negotiate()\n\nIn some cases of failure (dialect mismatches) in SMB2_negotiate(), after\nthe request is sent, the checks would return -EIO when they should be\nrather setting rc = -EIO and jumping to neg_exit to free the response\nbuffer from mempool."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/27893dfc1285f80f80f46b3b8c95f5d15d2e66d0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/38a6b469bf22f153282fbe7d702a24e9eb43f50e",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9e3c9efa7caf16e5acc05eab5e4d0a714e1610b0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}

CVE-2022/CVE-2022-499xx/CVE-2022-49939.json

@@ -0,0 +1,45 @@
+{
+  "id": "CVE-2022-49939",
+  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
+  "published": "2025-06-18T11:15:20.793",
+  "lastModified": "2025-06-18T13:46:52.973",
+  "vulnStatus": "Awaiting Analysis",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: fix UAF of ref->proc caused by race condition\n\nA transaction of type BINDER_TYPE_WEAK_HANDLE can fail to increment the\nreference for a node. In this case, the target proc normally releases\nthe failed reference upon close as expected. However, if the target is\ndying in parallel the call will race with binder_deferred_release(), so\nthe target could have released all of its references by now leaving the\ncleanup of the new failed reference unhandled.\n\nThe transaction then ends and the target proc gets released making the\nref->proc now a dangling pointer. Later on, ref->node is closed and we\nattempt to take spin_lock(&ref->proc->inner_lock), which leads to the\nuse-after-free bug reported below. Let's fix this by cleaning up the\nfailed reference on the spot instead of relying on the target to do so.\n\n  ==================================================================\n  BUG: KASAN: use-after-free in _raw_spin_lock+0xa8/0x150\n  Write of size 4 at addr ffff5ca207094238 by task kworker/1:0/590\n\n  CPU: 1 PID: 590 Comm: kworker/1:0 Not tainted 5.19.0-rc8 #10\n  Hardware name: linux,dummy-virt (DT)\n  Workqueue: events binder_deferred_func\n  Call trace:\n   dump_backtrace.part.0+0x1d0/0x1e0\n   show_stack+0x18/0x70\n   dump_stack_lvl+0x68/0x84\n   print_report+0x2e4/0x61c\n   kasan_report+0xa4/0x110\n   kasan_check_range+0xfc/0x1a4\n   __kasan_check_write+0x3c/0x50\n   _raw_spin_lock+0xa8/0x150\n   binder_deferred_func+0x5e0/0x9b0\n   process_one_work+0x38c/0x5f0\n   worker_thread+0x9c/0x694\n   kthread+0x188/0x190\n   ret_from_fork+0x10/0x20"
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://git.kernel.org/stable/c/06e5b43ca4dab06a92bf4c2f33766e6fb11b880a",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/229f47603dd306bc0eb1a831439adb8e48bb0eae",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/30d0901b307f27d36b2655fb3048cf31ee0e89c0",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/603a47f2ae56bf68288784d3c0a8c5b8e0a827ed",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/9629f2dfdb1dad294b468038ff8e161e94d0b609",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/a0e44c64b6061dda7e00b7c458e4523e2331b739",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    },
+    {
+      "url": "https://git.kernel.org/stable/c/c2a4b5dc8fa71af73bab704d0cac42ac39767ed6",
+      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
+    }
+  ]
+}