NVD公開月 2025-07
14 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2025-29628 | Deferred | 未確認 | CWE-200, CWE-77, CWE-924 | A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, an |
| CVE-2025-29629 | Deferred | 未確認 | CWE-1392, CWE-200, CWE-94 | Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access. |
| CVE-2025-29631 | Deferred | 未確認 | CWE-78, CWE-94 | Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow command injection through vulnerable methods th |
| CVE-2025-30023 | Analyzed | 未確認 | CWE-502 | The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack. |
| CVE-2025-30024 | Analyzed | 未確認 | CWE-295 | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. |
| CVE-2025-30025 | Analyzed | 未確認 | CWE-502 | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation. |
| CVE-2025-30026 | Analyzed | 未確認 | CWE-288 | The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required. |
| CVE-2025-31277 | Analyzed | 掲載 | CWE-119, CWE-120 | The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Proc |
| CVE-2025-47813 | Analyzed | 掲載 | CWE-209 | loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie. |
| CVE-2025-49604 | Deferred | 未確認 | CWE-122 | For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f |
| CVE-2025-53816 | Modified | 未確認 | CWE-122 | 7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip |
| CVE-2025-53817 | Modified | 未確認 | CWE-476 | 7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handl |
| CVE-2025-54068 | Analyzed | 掲載 | CWE-94 | Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in s |
| CVE-2025-54313 | Analyzed | 掲載 | CWE-506 | eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise. Installing an affected package executes an install.js file that |