NVD公開月 2025-12
21 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2025-11540 | Analyzed | 未確認 | CWE-22 | Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector. |
| CVE-2025-11541 | Analyzed | 未確認 | CWE-121, CWE-787 | Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs. |
| CVE-2025-11542 | Analyzed | 未確認 | CWE-121, CWE-787 | Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs. |
| CVE-2025-11543 | Analyzed | 未確認 | CWE-354 | Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware. |
| CVE-2025-11544 | Deferred | 未確認 | CWE-912 | Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware. |
| CVE-2025-11545 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sharp Display Solutions projectors allows a attacker may improperly access the HTTP serv |
| CVE-2025-12807 | Deferred | 未確認 | CWE-89 | A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive database operations through exposed API endpoints. |
| CVE-2025-20393 | Analyzed | 掲載 | CWE-20 | A vulnerability in the Spam Quarantine feature of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager could allow an unauthenticated, remot |
| CVE-2025-34291 | Analyzed | 掲載 | CWE-346 | Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_ |
| CVE-2025-37164 | Analyzed | 掲載 | CWE-94 | A remote code execution issue exists in HPE OneView. |
| CVE-2025-43510 | Analyzed | 掲載 | CWE-667 | A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macO |
| CVE-2025-43520 | Analyzed | 掲載 | CWE-120 | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS So |
| CVE-2025-52691 | Analyzed | 掲載 | CWE-434 | Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code |
| CVE-2025-59887 | Analyzed | 未確認 | CWE-427 | Improper authentication of library files in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the software package |
| CVE-2025-59888 | Analyzed | 未確認 | CWE-428 | Improper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with the access to the file system. This s |
| CVE-2025-68461 | Analyzed | 掲載 | CWE-79 | Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. |
| CVE-2025-68613 | Analyzed | 掲載 | CWE-913 | n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnera |
| CVE-2025-68645 | Analyzed | 掲載 | CWE-98 | A Local File Inclusion (LFI) vulnerability exists in the Webmail Classic UI of Zimbra Collaboration (ZCS) 10.0 and 10.1 because of improper handling of user-supplied request parame |
| CVE-2025-68919 | Deferred | 未確認 | CWE-532 | Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8-16.9.1 PA 2025-12, when collected maintenance data is accessible by a principal/auth |
| CVE-2025-8110 | Analyzed | 掲載 | CWE-22 | Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. |
| CVE-2025-9368 | Deferred | 未確認 | CWE-770 | A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service. A manual power cycle is required to recover the d |