netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-11 12:32:47 +00:00
parent 4a4e7d52ae
commit 05128da575
38 changed files with 1130 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/01/GHSA-5vpc-35f4-r8w6/GHSA-5vpc-35f4-r8w6.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vpc-35f4-r8w6",
"modified": "2025-02-11T09:30:32Z",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-01-21T21:22:49Z",
"aliases": [
"CVE-2024-11218"
@@ -121,6 +121,14 @@
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-11218"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1296"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1295"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1275"
advisories/github-reviewed/2025/01/GHSA-hp5j-2585-qx6g/GHSA-hp5j-2585-qx6g.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hp5j-2585-qx6g",
"modified": "2025-01-28T19:15:28Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2025-01-28T12:31:07Z",
"aliases": [
"CVE-2025-0750"
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0750"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1122"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-0750"
advisories/unreviewed/2022/10/GHSA-gh7w-58g5-rmwx/GHSA-gh7w-58g5-rmwx.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gh7w-58g5-rmwx",
"modified": "2022-10-14T19:00:33Z",
"modified": "2025-02-11T12:30:52Z",
"published": "2022-10-11T12:00:45Z",
"aliases": [
"CVE-2022-31766"
@@ -19,6 +19,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-31766"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-697140.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-697140.pdf"
advisories/unreviewed/2023/11/GHSA-282g-wxjw-75vj/GHSA-282g-wxjw-75vj.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-282g-wxjw-75vj",
"modified": "2024-08-13T09:30:51Z",
"modified": "2025-02-11T12:30:52Z",
"published": "2023-11-14T12:30:27Z",
"aliases": [
"CVE-2023-44320"
@@ -35,6 +35,10 @@
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-699386.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf"
advisories/unreviewed/2023/11/GHSA-mmpc-c8w6-wrm6/GHSA-mmpc-c8w6-wrm6.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mmpc-c8w6-wrm6",
"modified": "2024-02-13T09:30:29Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2023-11-14T12:30:27Z",
"aliases": [
"CVE-2023-44322"
@@ -31,6 +31,10 @@
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-699386.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-180704.pdf"
advisories/unreviewed/2024/06/GHSA-qhx2-rhqq-2wmm/GHSA-qhx2-rhqq-2wmm.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhx2-rhqq-2wmm",
"modified": "2024-11-18T16:26:43Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35211"
advisories/unreviewed/2024/11/GHSA-545p-76g5-36m8/GHSA-545p-76g5-36m8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-545p-76g5-36m8",
"modified": "2024-11-12T15:30:43Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2024-11-12T15:30:43Z",
"aliases": [
"CVE-2024-50560"
@@ -26,6 +26,10 @@
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-354112.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
}
],
"database_specific": {
advisories/unreviewed/2024/11/GHSA-8fc3-6g2g-rgc3/GHSA-8fc3-6g2g-rgc3.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8fc3-6g2g-rgc3",
"modified": "2024-11-12T15:30:43Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2024-11-12T15:30:43Z",
"aliases": [
"CVE-2024-50572"
@@ -26,6 +26,10 @@
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-354112.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
}
],
"database_specific": {
advisories/unreviewed/2024/11/GHSA-fc63-6853-v5m2/GHSA-fc63-6853-v5m2.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fc63-6853-v5m2",
"modified": "2024-11-12T15:30:43Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2024-11-12T15:30:43Z",
"aliases": [
"CVE-2024-50561"
@@ -26,6 +26,10 @@
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-354112.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
}
],
"database_specific": {
advisories/unreviewed/2025/01/GHSA-xh5q-pch5-g3xq/GHSA-xh5q-pch5-g3xq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xh5q-pch5-g3xq",
"modified": "2025-02-03T21:31:48Z",
"modified": "2025-02-11T12:30:53Z",
"published": "2025-01-14T18:32:00Z",
"aliases": [
"CVE-2024-12085"
@@ -63,6 +63,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0885"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1120"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-12085"
advisories/unreviewed/2025/02/GHSA-357m-v762-qj4c/GHSA-357m-v762-qj4c.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-357m-v762-qj4c",
"modified": "2025-02-11T12:30:55Z",
"published": "2025-02-11T12:30:54Z",
"aliases": [
"CVE-2025-24956"
],
"details": "A vulnerability has been identified in OpenV2G (All versions < V0.9.6). The OpenV2G EXI parsing feature is missing a length check when parsing X509 serial numbers. Thus, an attacker could introduce a buffer overflow that leads to memory corruption.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24956"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-647005.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:17Z"
}
}
advisories/unreviewed/2025/02/GHSA-4688-8pmg-jw5w/GHSA-4688-8pmg-jw5w.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4688-8pmg-jw5w",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-02-11T12:30:54Z",
"aliases": [
"CVE-2024-45386"
],
"details": "A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 (All versions < V4.1 Update 2), SIMATIC PCS neo V5.0 (All versions < V5.0 Update 1), SIMOCODE ES V19 (All versions < V19 Update 1), SIRIUS Safety ES V19 (TIA Portal) (All versions < V19 Update 1), SIRIUS Soft Starter ES V19 (TIA Portal) (All versions < V19 Update 1), TIA Administrator (All versions < V3.0.4). Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45386"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-342348.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-613"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:13Z"
}
}
advisories/unreviewed/2025/02/GHSA-7hh3-mrx6-fgwq/GHSA-7hh3-mrx6-fgwq.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7hh3-mrx6-fgwq",
"modified": "2025-02-11T12:30:55Z",
"published": "2025-02-11T12:30:55Z",
"aliases": [
"CVE-2025-24532"
],
"details": "A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected devices with role `user` is affected by incorrect authorization in SNMPv3 View configuration. This could allow an attacker to change the View Type of SNMPv3 Views.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24532"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:16Z"
}
}
advisories/unreviewed/2025/02/GHSA-88wp-w57j-8x7m/GHSA-88wp-w57j-8x7m.json
+40
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2025/02/GHSA-8gh5-x56f-9qh9/GHSA-8gh5-x56f-9qh9.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8gh5-x56f-9qh9",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-02-11T12:30:54Z",
"aliases": [
"CVE-2025-23363"
],
"details": "A vulnerability has been identified in Teamcenter (All versions < V14.3.0.0). The SSO login service of affected applications accepts user-controlled input that could specify a link to an external site. This could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. For a successful exploit, the legitimate user must actively click on an attacker-crafted link.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23363"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-656895.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:16Z"
}
}
advisories/unreviewed/2025/02/GHSA-8w92-pvrp-jcwv/GHSA-8w92-pvrp-jcwv.json
+34
View File
@@ -0,0 +1,34 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8w92-pvrp-jcwv",
"modified": "2025-02-11T12:30:55Z",
"published": "2025-02-11T12:30:55Z",
"aliases": [
"CVE-2025-0588"
],
"details": "In affected versions of Octopus Server it was possible for a user with sufficient access to set custom headers in all server responses. By submitting a specifically crafted referrer header the user could ensure that all subsequent server responses would return 500 errors rendering the site mostly unusable. The user would be able to subsequently set and unset the referrer header to control the denial of service state with a valid CSRF token whilst new CSRF tokens could not be generated.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0588"
},
{
"type": "WEB",
"url": "https://advisories.octopus.com/post/2024/sa2025-05"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T12:15:34Z"
}
}
advisories/unreviewed/2025/02/GHSA-9cmp-ppm3-hp8w/GHSA-9cmp-ppm3-hp8w.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cmp-ppm3-hp8w",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-02-11T12:30:53Z",
"aliases": [
"CVE-2025-26409"
],
"details": "A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed in recent firmware versions BSP >= 6.4.1.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26409"
},
{
"type": "WEB",
"url": "https://r.sec-consult.com/wattsense"
},
{
"type": "WEB",
"url": "https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1191"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T10:15:09Z"
}
}
advisories/unreviewed/2025/02/GHSA-9hqf-2957-q2jh/GHSA-9hqf-2957-q2jh.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9hqf-2957-q2jh",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-02-11T12:30:54Z",
"aliases": [
"CVE-2025-24499"
],
"details": "A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0) (All versions < V3.0.0), SCALANCE WAM763-1 (ME) (6GK5763-1AL00-7DC0) (All versions < V3.0.0), SCALANCE WAM763-1 (US) (6GK5763-1AL00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 (6GK5766-1GE00-7DA0) (All versions < V3.0.0), SCALANCE WAM766-1 (ME) (6GK5766-1GE00-7DC0) (All versions < V3.0.0), SCALANCE WAM766-1 (US) (6GK5766-1GE00-7DB0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (6GK5766-1GE00-7TA0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (ME) (6GK5766-1GE00-7TC0) (All versions < V3.0.0), SCALANCE WAM766-1 EEC (US) (6GK5766-1GE00-7TB0) (All versions < V3.0.0), SCALANCE WUB762-1 (6GK5762-1AJ00-1AA0) (All versions < V3.0.0), SCALANCE WUB762-1 iFeatures (6GK5762-1AJ00-2AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3AA0) (All versions < V3.0.0), SCALANCE WUM763-1 (6GK5763-1AL00-3DA0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3AB0) (All versions < V3.0.0), SCALANCE WUM763-1 (US) (6GK5763-1AL00-3DB0) (All versions < V3.0.0), SCALANCE WUM766-1 (6GK5766-1GE00-3DA0) (All versions < V3.0.0), SCALANCE WUM766-1 (ME) (6GK5766-1GE00-3DC0) (All versions < V3.0.0), SCALANCE WUM766-1 (USA) (6GK5766-1GE00-3DB0) (All versions < V3.0.0). Affected devices do not properly validate input while loading the configuration files. This could allow an authenticated remote attacker to execute arbitrary shell commands on the device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24499"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-769027.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:16Z"
}
}
advisories/unreviewed/2025/02/GHSA-c2p9-97ww-q2q5/GHSA-c2p9-97ww-q2q5.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c2p9-97ww-q2q5",
"modified": "2025-02-11T12:30:54Z",
"published": "2025-02-11T12:30:54Z",
"aliases": [
"CVE-2024-13506"
],
"details": "The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the display_name profile parameter in all versions up to, and including, 2.8.97 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13506"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/geodirectory/tags/2.8.97/includes/admin/class-geodir-admin-post-view.php#L317"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3225839"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d0d9ba14-c0c9-426e-927e-9139a0882f0d?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-chvr-56gh-gq34/GHSA-chvr-56gh-gq34.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-chvr-56gh-gq34",
"modified": "2025-02-11T12:30:55Z",
"published": "2025-02-11T12:30:55Z",
"aliases": [
"CVE-2025-26490"
],
"details": "A vulnerability has been identified in Opcenter Intelligence (All versions < V2501). Personal access token disclosure vulnerability in Tableau Server. For details go to help.salesforce.com and search for knowledge article id 000390611.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26490"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-246355.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-532"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T11:15:17Z"
}
}

Some files were not shown because too many files have changed in this diff Show More