generated content from 2025-01-28

objects/vulnerability/vulnerability--0316f789-e323-4bed-a28c-e93d215dca68.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f7d93d25-aec9-461e-8fe1-741dbb2b7877",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0316f789-e323-4bed-a28c-e93d215dca68",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:54.671427Z",
+            "modified": "2025-01-28T00:37:54.671427Z",
+            "name": "CVE-2024-28771",
+            "description": "IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-28771"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--04277ac7-3cef-416e-9ad9-ca13f563d68b.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6ecc7fd1-4026-438c-86e5-1c7f251d2fa9",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--04277ac7-3cef-416e-9ad9-ca13f563d68b",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.46707Z",
+            "modified": "2025-01-28T00:38:05.46707Z",
+            "name": "CVE-2025-24742",
+            "description": "Cross-Site Request Forgery (CSRF) vulnerability in WP Go Maps (formerly WP Google Maps) WP Go Maps. This issue affects WP Go Maps: from n/a through 9.0.40.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24742"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--05407ff9-d92e-4f2e-af2d-1aed7c123b6d.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--b6dd9195-54b3-4c03-91e6-0e58bbbdb074",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--05407ff9-d92e-4f2e-af2d-1aed7c123b6d",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:55.050641Z",
+            "modified": "2025-01-28T00:37:55.050641Z",
+            "name": "CVE-2024-54520",
+            "description": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.2, macOS Sequoia 15.2, macOS Ventura 13.7.2. An app may be able to overwrite arbitrary files.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54520"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--05f1382b-5727-47f6-a029-640df312f839.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--5e87bf65-8ba1-46b1-9b7e-acdd803bffb1",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--05f1382b-5727-47f6-a029-640df312f839",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.464611Z",
+            "modified": "2025-01-28T00:38:05.464611Z",
+            "name": "CVE-2025-24357",
+            "description": "vLLM is a library for LLM inference and serving. vllm/model_executor/weight_utils.py implements hf_model_weights_iterator to load the model checkpoint, which is downloaded from huggingface. It uses the torch.load function and the weights_only parameter defaults to False. When torch.load loads malicious pickle data, it will execute arbitrary code during unpickling. This vulnerability is fixed in v0.7.0.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24357"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--06035b14-2a1a-4ff6-a76d-a4b449080e84.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--69ee87b4-9440-4ec6-b170-cb0ffecf95dd",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--06035b14-2a1a-4ff6-a76d-a4b449080e84",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.413115Z",
+            "modified": "2025-01-28T00:38:05.413115Z",
+            "name": "CVE-2025-24160",
+            "description": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24160"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--08087b27-dbf1-4fd2-a752-81cbb74edfbe.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--98ccb3d6-7123-4aa8-be15-808c00ec9833",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--08087b27-dbf1-4fd2-a752-81cbb74edfbe",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.525434Z",
+            "modified": "2025-01-28T00:38:05.525434Z",
+            "name": "CVE-2025-0753",
+            "description": "A vulnerability classified as critical was found in Axiomatic Bento4 up to 1.6.0. This vulnerability affects the function AP4_StdcFileByteStream::ReadPartial of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-0753"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--08ad4cda-8e09-49c5-a251-3cd1f142e2a7.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--4257d12f-9cb9-48a8-a14e-42c5ab2d82ea",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--08ad4cda-8e09-49c5-a251-3cd1f142e2a7",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.418434Z",
+            "modified": "2025-01-28T00:38:05.418434Z",
+            "name": "CVE-2025-24662",
+            "description": "Missing Authorization vulnerability in NotFound LearnDash LMS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects LearnDash LMS: from n/a through 4.20.0.1.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24662"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0930aea9-e229-4a73-b06e-501c92112dff.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3803ebb4-c7cd-4682-a314-b6598625837f",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0930aea9-e229-4a73-b06e-501c92112dff",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:55.928252Z",
+            "modified": "2025-01-28T00:37:55.928252Z",
+            "name": "CVE-2024-37526",
+            "description": "IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0) could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-37526"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0a31ee1e-33bb-4de8-9900-733bf0ce5865.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--3c940f2c-7173-421e-b7cc-184a7abf0d29",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0a31ee1e-33bb-4de8-9900-733bf0ce5865",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.47684Z",
+            "modified": "2025-01-28T00:38:05.47684Z",
+            "name": "CVE-2025-24109",
+            "description": "A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to access sensitive user data.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24109"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0c458818-a9fd-41c1-bb83-879e7248ec83.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d14aa1fd-89d2-40ba-a0d5-d1da5f91045e",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0c458818-a9fd-41c1-bb83-879e7248ec83",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:55.441202Z",
+            "modified": "2025-01-28T00:37:55.441202Z",
+            "name": "CVE-2024-52012",
+            "description": "Relative Path Traversal vulnerability in Apache Solr.\n\nSolr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the \"configset upload\" API.  Commonly known as a \"zipslip\", maliciously constructed ZIP files can use relative filepaths to write data to unanticipated parts of the filesystem.  \nThis issue affects Apache Solr: from 6.6 through 9.7.0.\n\nUsers are recommended to upgrade to version 9.8.0, which fixes the issue.  Users unable to upgrade may also safely prevent the issue by using Solr's \"Rule-Based Authentication Plugin\" to restrict access to the configset upload API, so that it can only be accessed by a trusted set of administrators/users.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-52012"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0cc099d0-eb15-4905-9caf-34700e98f961.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--6be7d887-e153-41f7-b3c9-24b09fd43472",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0cc099d0-eb15-4905-9caf-34700e98f961",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.322787Z",
+            "modified": "2025-01-28T00:38:05.322787Z",
+            "name": "CVE-2025-23752",
+            "description": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound CGD Arrange Terms allows Reflected XSS. This issue affects CGD Arrange Terms: from n/a through 1.1.3.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-23752"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0d3eac1e-d09c-469a-8169-be0c3c4091e5.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--06dd6d97-626a-4c44-97da-6b6ae5101763",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0d3eac1e-d09c-469a-8169-be0c3c4091e5",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.452158Z",
+            "modified": "2025-01-28T00:38:05.452158Z",
+            "name": "CVE-2025-24121",
+            "description": "A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to modify protected parts of the file system.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24121"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0e11f891-c6fc-450b-8c74-180128793ef4.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--e46c9440-6e68-44d3-8199-0c72de490750",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0e11f891-c6fc-450b-8c74-180128793ef4",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:55.222472Z",
+            "modified": "2025-01-28T00:37:55.222472Z",
+            "name": "CVE-2024-57546",
+            "description": "An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-57546"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0e6f9d24-e49e-4d7f-8060-23e60d840987.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--d3e7ed3f-16c9-4666-af6c-e69f4c7c28ef",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0e6f9d24-e49e-4d7f-8060-23e60d840987",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.474509Z",
+            "modified": "2025-01-28T00:38:05.474509Z",
+            "name": "CVE-2025-24108",
+            "description": "An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.3. An app may be able to access protected user data.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24108"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--0faa1b2c-9614-4906-b62f-a0b703041694.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--f2071ef3-7afe-4cdf-9774-90f28eee8603",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--0faa1b2c-9614-4906-b62f-a0b703041694",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:38:05.463136Z",
+            "modified": "2025-01-28T00:38:05.463136Z",
+            "name": "CVE-2025-24138",
+            "description": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A malicious application may be able to leak sensitive user information.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2025-24138"
+                }
+            ]
+        }
+    ]
+}

objects/vulnerability/vulnerability--11b6c947-3670-40d1-9f66-683f5dbb6223.json

@@ -0,0 +1,22 @@
+{
+    "type": "bundle",
+    "id": "bundle--aaf9bb7e-00d0-42f6-81fa-1e2aa2dea323",
+    "objects": [
+        {
+            "type": "vulnerability",
+            "spec_version": "2.1",
+            "id": "vulnerability--11b6c947-3670-40d1-9f66-683f5dbb6223",
+            "created_by_ref": "identity--8ce3f695-d5a4-4dc8-9e93-a65af453a31a",
+            "created": "2025-01-28T00:37:55.085802Z",
+            "modified": "2025-01-28T00:37:55.085802Z",
+            "name": "CVE-2024-54543",
+            "description": "The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.",
+            "external_references": [
+                {
+                    "source_name": "cve",
+                    "external_id": "CVE-2024-54543"
+                }
+            ]
+        }
+    ]
+}