Skip to content

Commit d957837

Browse files
cad-safe-botcad-safe-bot
committed
Auto-Update: 2026-02-27T15:00:15.469053+00:00
1 parent 2c443e7 commit d957837

File tree

421 files changed

+4497
-1403
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

421 files changed

+4497
-1403
lines changed

‎CVE-2021/CVE-2021-44xx/CVE-2021-4456.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,17 @@
22
"id": "CVE-2021-4456",
33
"sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
44
"published": "2026-02-27T01:16:13.553",
5-
"lastModified": "2026-02-27T01:16:13.553",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{
1010
"lang": "en",
1111
"value": "Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact.\n\nThe functions `addr2cidr` and `cidrlookup` may return leading zeros in a CIDR string, which may in turn be parsed as octal numbers by subsequent users. In some cases an attacker may be able to leverage this to bypass access controls based on IP addresses.\n\nThe documentation advises validating untrusted CIDR strings with the `cidrvalidate` function. However, this mitigation is optional and not enforced by default. In practice, users may call `addr2cidr` or `cidrlookup` with untrusted input and without validation, incorrectly assuming that this is safe."
12+
},
13+
{
14+
"lang": "es",
15+
"value": "Las versiones de Net::CIDR anteriores a la 0.24 para Perl manejan incorrectamente los ceros iniciales en las direcciones IP CIDR, lo que puede tener un impacto no especificado.\n\nLas funciones `addr2cidr` y `cidrlookup` pueden devolver ceros iniciales en una cadena CIDR, que a su vez pueden ser interpretados como n\u00fameros octales por usuarios posteriores. En algunos casos, un atacante podr\u00eda aprovechar esto para eludir los controles de acceso basados en direcciones IP.\n\nLa documentaci\u00f3n aconseja validar cadenas CIDR no confiables con la funci\u00f3n `cidrvalidate`. Sin embargo, esta mitigaci\u00f3n es opcional y no se aplica por defecto. En la pr\u00e1ctica, los usuarios pueden llamar a `addr2cidr` o `cidrlookup` con entrada no confiable y sin validaci\u00f3n, asumiendo incorrectamente que esto es seguro."
1216
}
1317
],
1418
"metrics": {},

‎CVE-2023/CVE-2023-313xx/CVE-2023-31364.json‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,13 +2,17 @@
22
"id": "CVE-2023-31364",
33
"sourceIdentifier": "psirt@amd.com",
44
"published": "2026-02-26T21:28:47.037",
5-
"lastModified": "2026-02-26T21:28:47.037",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{
1010
"lang": "en",
1111
"value": "Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially causing a fatal machine check error resulting in denial of service."
12+
},
13+
{
14+
"lang": "es",
15+
"value": "El manejo inadecuado de las escrituras directas en memoria en la unidad de gesti\u00f3n de memoria de entrada/salida podr\u00eda permitir que una m\u00e1quina virtual (VM) invitada maliciosa inunde un anfitri\u00f3n con escrituras, causando potencialmente un error fatal de comprobaci\u00f3n de m\u00e1quina que resultar\u00eda en denegaci\u00f3n de servicio."
1216
}
1317
],
1418
"metrics": {

‎CVE-2024/CVE-2024-109xx/CVE-2024-10938.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"id": "CVE-2024-10938",
33
"sourceIdentifier": "security@wordfence.com",
44
"published": "2026-02-27T10:16:18.957",
5-
"lastModified": "2026-02-27T10:16:18.957",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{

‎CVE-2025/CVE-2025-109xx/CVE-2025-10990.json‎

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
{
2+
"id": "CVE-2025-10990",
3+
"sourceIdentifier": "secalert@redhat.com",
4+
"published": "2026-02-27T14:16:27.567",
5+
"lastModified": "2026-02-27T14:16:27.567",
6+
"vulnStatus": "Received",
7+
"cveTags": [],
8+
"descriptions": [
9+
{
10+
"lang": "en",
11+
"value": "A flaw was found in REXML. A remote attacker could exploit inefficient regular expression (regex) parsing when processing hex numeric character references (&#x...;) in XML documents. This could lead to a Regular Expression Denial of Service (ReDoS), impacting the availability of the affected component. This issue is the result of an incomplete fix for CVE-2024-49761."
12+
}
13+
],
14+
"metrics": {
15+
"cvssMetricV31": [
16+
{
17+
"source": "secalert@redhat.com",
18+
"type": "Primary",
19+
"cvssData": {
20+
"version": "3.1",
21+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
22+
"baseScore": 7.5,
23+
"baseSeverity": "HIGH",
24+
"attackVector": "NETWORK",
25+
"attackComplexity": "LOW",
26+
"privilegesRequired": "NONE",
27+
"userInteraction": "NONE",
28+
"scope": "UNCHANGED",
29+
"confidentialityImpact": "NONE",
30+
"integrityImpact": "NONE",
31+
"availabilityImpact": "HIGH"
32+
},
33+
"exploitabilityScore": 3.9,
34+
"impactScore": 3.6
35+
}
36+
]
37+
},
38+
"weaknesses": [
39+
{
40+
"source": "secalert@redhat.com",
41+
"type": "Primary",
42+
"description": [
43+
{
44+
"lang": "en",
45+
"value": "CWE-1333"
46+
}
47+
]
48+
}
49+
],
50+
"references": [
51+
{
52+
"url": "https://access.redhat.com/errata/RHSA-2025:17606",
53+
"source": "secalert@redhat.com"
54+
},
55+
{
56+
"url": "https://access.redhat.com/errata/RHSA-2025:17613",
57+
"source": "secalert@redhat.com"
58+
},
59+
{
60+
"url": "https://access.redhat.com/errata/RHSA-2025:17693",
61+
"source": "secalert@redhat.com"
62+
},
63+
{
64+
"url": "https://access.redhat.com/security/cve/CVE-2025-10990",
65+
"source": "secalert@redhat.com"
66+
},
67+
{
68+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2398216",
69+
"source": "secalert@redhat.com"
70+
}
71+
]
72+
}

‎CVE-2025/CVE-2025-112xx/CVE-2025-11251.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"id": "CVE-2025-11251",
33
"sourceIdentifier": "iletisim@usom.gov.tr",
44
"published": "2026-02-27T12:16:01.783",
5-
"lastModified": "2026-02-27T12:16:01.783",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{

‎CVE-2025/CVE-2025-112xx/CVE-2025-11252.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"id": "CVE-2025-11252",
3+
"sourceIdentifier": "iletisim@usom.gov.tr",
4+
"published": "2026-02-27T13:16:01.343",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
7+
"cveTags": [],
8+
"descriptions": [
9+
{
10+
"lang": "en",
11+
"value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection.This issue affects windesk.Fm: through 27022026.\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way."
12+
}
13+
],
14+
"metrics": {
15+
"cvssMetricV31": [
16+
{
17+
"source": "iletisim@usom.gov.tr",
18+
"type": "Primary",
19+
"cvssData": {
20+
"version": "3.1",
21+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
22+
"baseScore": 9.8,
23+
"baseSeverity": "CRITICAL",
24+
"attackVector": "NETWORK",
25+
"attackComplexity": "LOW",
26+
"privilegesRequired": "NONE",
27+
"userInteraction": "NONE",
28+
"scope": "UNCHANGED",
29+
"confidentialityImpact": "HIGH",
30+
"integrityImpact": "HIGH",
31+
"availabilityImpact": "HIGH"
32+
},
33+
"exploitabilityScore": 3.9,
34+
"impactScore": 5.9
35+
}
36+
]
37+
},
38+
"weaknesses": [
39+
{
40+
"source": "iletisim@usom.gov.tr",
41+
"type": "Primary",
42+
"description": [
43+
{
44+
"lang": "en",
45+
"value": "CWE-89"
46+
}
47+
]
48+
}
49+
],
50+
"references": [
51+
{
52+
"url": "https://www.usom.gov.tr/bildirim/tr-26-0085",
53+
"source": "iletisim@usom.gov.tr"
54+
}
55+
]
56+
}

‎CVE-2025/CVE-2025-119xx/CVE-2025-11950.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"id": "CVE-2025-11950",
3+
"sourceIdentifier": "iletisim@usom.gov.tr",
4+
"published": "2026-02-27T13:16:01.953",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
7+
"cveTags": [],
8+
"descriptions": [
9+
{
10+
"lang": "en",
11+
"value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KNOWHY Advanced Technology Trading Ltd. Co. EduAsist allows Reflected XSS.This issue affects EduAsist: through 27022026.\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way."
12+
}
13+
],
14+
"metrics": {
15+
"cvssMetricV31": [
16+
{
17+
"source": "iletisim@usom.gov.tr",
18+
"type": "Primary",
19+
"cvssData": {
20+
"version": "3.1",
21+
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
22+
"baseScore": 6.3,
23+
"baseSeverity": "MEDIUM",
24+
"attackVector": "NETWORK",
25+
"attackComplexity": "LOW",
26+
"privilegesRequired": "NONE",
27+
"userInteraction": "REQUIRED",
28+
"scope": "UNCHANGED",
29+
"confidentialityImpact": "LOW",
30+
"integrityImpact": "LOW",
31+
"availabilityImpact": "LOW"
32+
},
33+
"exploitabilityScore": 2.8,
34+
"impactScore": 3.4
35+
}
36+
]
37+
},
38+
"weaknesses": [
39+
{
40+
"source": "iletisim@usom.gov.tr",
41+
"type": "Primary",
42+
"description": [
43+
{
44+
"lang": "en",
45+
"value": "CWE-79"
46+
}
47+
]
48+
}
49+
],
50+
"references": [
51+
{
52+
"url": "https://www.usom.gov.tr/bildirim/tr-26-0086",
53+
"source": "iletisim@usom.gov.tr"
54+
}
55+
]
56+
}

‎CVE-2025/CVE-2025-121xx/CVE-2025-12150.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"id": "CVE-2025-12150",
33
"sourceIdentifier": "secalert@redhat.com",
44
"published": "2026-02-27T09:16:15.227",
5-
"lastModified": "2026-02-27T09:16:15.227",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{

‎CVE-2025/CVE-2025-129xx/CVE-2025-12981.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"id": "CVE-2025-12981",
33
"sourceIdentifier": "security@wordfence.com",
44
"published": "2026-02-27T07:17:09.300",
5-
"lastModified": "2026-02-27T07:17:09.300",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:37.987",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{

‎CVE-2025/CVE-2025-12xx/CVE-2025-1242.json‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
"id": "CVE-2025-1242",
33
"sourceIdentifier": "ics-cert@hq.dhs.gov",
44
"published": "2026-02-25T16:23:20.930",
5-
"lastModified": "2026-02-25T16:23:20.930",
6-
"vulnStatus": "Received",
5+
"lastModified": "2026-02-27T14:06:59.787",
6+
"vulnStatus": "Awaiting Analysis",
77
"cveTags": [],
88
"descriptions": [
99
{

0 commit comments

Comments
 (0)