netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-09 21:32:19 +00:00
parent 1ef1f4f304
commit 0da2233b9a
45 changed files with 617 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/03/GHSA-46r4-f8gj-xg56/GHSA-46r4-f8gj-xg56.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-46r4-f8gj-xg56",
"modified": "2025-03-12T14:09:49Z",
"modified": "2025-05-09T21:31:08Z",
"published": "2025-03-11T19:23:22Z",
"aliases": [
"CVE-2025-27773"
@@ -106,6 +106,10 @@
{
"type": "WEB",
"url": "https://github.com/simplesamlphp/saml2/blob/9545abd0d9d48388f2fa00469c5c1e0294f0303e/src/SAML2/HTTPRedirect.php#L178-L217"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00013.html"
}
],
"database_specific": {
advisories/github-reviewed/2025/03/GHSA-qxp5-gwg8-xv66/GHSA-qxp5-gwg8-xv66.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxp5-gwg8-xv66",
"modified": "2025-03-19T15:36:20Z",
"modified": "2025-05-09T21:31:08Z",
"published": "2025-03-12T22:06:40Z",
"aliases": [
"CVE-2025-22870"
@@ -56,6 +56,10 @@
"type": "WEB",
"url": "https://pkg.go.dev/vuln/GO-2025-3503"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0007"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2025/03/07/2"
advisories/unreviewed/2022/05/GHSA-7w53-225r-6vxv/GHSA-7w53-225r-6vxv.json
+17 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7w53-225r-6vxv",
"modified": "2022-05-24T17:44:57Z",
"modified": "2025-05-09T21:31:06Z",
"published": "2022-05-24T17:44:57Z",
"aliases": [
"CVE-2021-28831"
@@ -27,6 +27,18 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4"
@@ -42,6 +54,10 @@
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202105-09"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0005"
}
],
"database_specific": {
advisories/unreviewed/2022/05/GHSA-pjrj-fmxp-cmc4/GHSA-pjrj-fmxp-cmc4.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pjrj-fmxp-cmc4",
"modified": "2024-04-04T03:04:32Z",
"modified": "2025-05-09T21:31:06Z",
"published": "2022-05-24T17:41:39Z",
"aliases": [
"CVE-2021-26937"
@@ -51,6 +51,10 @@
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202105-11"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0004"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2021/dsa-4861"
advisories/unreviewed/2022/05/GHSA-wjcr-wjqx-g6rq/GHSA-wjcr-wjqx-g6rq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wjcr-wjqx-g6rq",
"modified": "2025-04-12T12:45:39Z",
"modified": "2025-05-09T21:31:06Z",
"published": "2022-05-14T01:08:48Z",
"aliases": [
"CVE-2015-0240"
@@ -34,6 +34,10 @@
"type": "WEB",
"url": "https://securityblog.redhat.com/2015/02/23/samba-vulnerability-cve-2015-0240"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0001"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1191325"
advisories/unreviewed/2022/10/GHSA-3r9v-jg25-4p3p/GHSA-3r9v-jg25-4p3p.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3r9v-jg25-4p3p",
"modified": "2022-11-01T19:00:31Z",
"modified": "2025-05-09T21:31:06Z",
"published": "2022-10-27T19:00:28Z",
"aliases": [
"CVE-2022-3725"
@@ -27,6 +27,10 @@
"type": "WEB",
"url": "https://gitlab.com/wireshark/wireshark/-/issues/18378"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OIEIFFZ27YKCTK5C2VT4OEQSHPQDBNSF"
advisories/unreviewed/2022/10/GHSA-m2cq-w2fq-677j/GHSA-m2cq-w2fq-677j.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m2cq-w2fq-677j",
"modified": "2022-10-28T19:00:42Z",
"modified": "2025-05-09T21:31:06Z",
"published": "2022-10-26T12:00:31Z",
"aliases": [
"CVE-2022-33185"
advisories/unreviewed/2023/04/GHSA-wr4w-95gx-6cfr/GHSA-wr4w-95gx-6cfr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr4w-95gx-6cfr",
"modified": "2023-04-14T18:30:19Z",
"modified": "2025-05-09T21:31:07Z",
"published": "2023-04-08T06:30:24Z",
"aliases": [
"CVE-2023-24626"
@@ -27,6 +27,10 @@
"type": "WEB",
"url": "https://savannah.gnu.org/bugs/?63195"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0003"
},
{
"type": "WEB",
"url": "https://www.exploit-db.com/exploits/51252"
advisories/unreviewed/2024/03/GHSA-c472-r2q4-4qpm/GHSA-c472-r2q4-4qpm.json
+14 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c472-r2q4-4qpm",
"modified": "2024-08-01T15:31:32Z",
"modified": "2025-05-09T21:31:07Z",
"published": "2024-03-14T03:31:15Z",
"aliases": [
"CVE-2024-25652"
@@ -19,6 +19,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25652"
},
{
"type": "WEB",
"url": "https://docs.delinea.com/online-help/secret-server/admin/unlimited-administration-mode/index.htm?Highlight=unlimited%20admin"
},
{
"type": "WEB",
"url": "https://docs.delinea.com/online-help/secret-server/release-notes/ssc-rn-2024-02-10.htm"
},
{
"type": "WEB",
"url": "https://trust.delinea.com"
},
{
"type": "WEB",
"url": "https://www.cvcn.gov.it/cvcn/cve/CVE-2024-25652"
@@ -26,6 +38,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-863"
],
"severity": "CRITICAL",
advisories/unreviewed/2024/05/GHSA-j82p-r65h-xx77/GHSA-j82p-r65h-xx77.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j82p-r65h-xx77",
"modified": "2024-05-19T09:34:47Z",
"modified": "2025-05-09T21:31:07Z",
"published": "2024-05-19T09:34:47Z",
"aliases": [
"CVE-2024-35890"
@@ -33,6 +33,10 @@
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/fc126c1d51e9552eacd2d717b9ffe9262a8a4cd6"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0008"
}
],
"database_specific": {
advisories/unreviewed/2024/11/GHSA-9cv8-8vgq-fg45/GHSA-9cv8-8vgq-fg45.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cv8-8vgq-fg45",
"modified": "2024-11-14T15:32:15Z",
"modified": "2025-05-09T21:31:08Z",
"published": "2024-11-14T15:32:15Z",
"aliases": [
"CVE-2024-10976"
@@ -19,6 +19,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10976"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20250509-0010"
},
{
"type": "WEB",
"url": "https://www.postgresql.org/support/security/CVE-2024-10976"
advisories/unreviewed/2025/04/GHSA-274g-94c9-xmph/GHSA-274g-94c9-xmph.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-274g-94c9-xmph",
"modified": "2025-04-29T12:30:21Z",
"modified": "2025-05-09T21:31:08Z",
"published": "2025-04-29T12:30:21Z",
"aliases": [
"CVE-2024-58099"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame\n\nAndrew and Nikolay reported connectivity issues with Cilium's service\nload-balancing in case of vmxnet3.\n\nIf a BPF program for native XDP adds an encapsulation header such as\nIPIP and transmits the packet out the same interface, then in case\nof vmxnet3 a corrupted packet is being sent and subsequently dropped\non the path.\n\nvmxnet3_xdp_xmit_frame() which is called e.g. via vmxnet3_run_xdp()\nthrough vmxnet3_xdp_xmit_back() calculates an incorrect DMA address:\n\n page = virt_to_page(xdpf->data);\n tbi->dma_addr = page_pool_get_dma_addr(page) +\n VMXNET3_XDP_HEADROOM;\n dma_sync_single_for_device(&adapter->pdev->dev,\n tbi->dma_addr, buf_size,\n DMA_TO_DEVICE);\n\nThe above assumes a fixed offset (VMXNET3_XDP_HEADROOM), but the XDP\nBPF program could have moved xdp->data. While the passed buf_size is\ncorrect (xdpf->len), the dma_addr needs to have a dynamic offset which\ncan be calculated as xdpf->data - (void *)xdpf, that is, xdp->data -\nxdp->data_hard_start.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-29T12:15:31Z"
advisories/unreviewed/2025/04/GHSA-3244-vj38-xw85/GHSA-3244-vj38-xw85.json
+2 -1
View File
@@ -42,7 +42,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-266"
"CWE-266",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-75cj-hgmm-jp24/GHSA-75cj-hgmm-jp24.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-7m2c-3c5m-7433/GHSA-7m2c-3c5m-7433.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-7m42-95vx-wx7q/GHSA-7m42-95vx-wx7q.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-jfqq-89vx-39m4/GHSA-jfqq-89vx-39m4.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-2x3v-hc5x-cgrg/GHSA-2x3v-hc5x-cgrg.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-276"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2025/05/GHSA-346m-8227-pf2q/GHSA-346m-8227-pf2q.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-346m-8227-pf2q",
"modified": "2025-05-09T21:31:20Z",
"published": "2025-05-09T21:31:20Z",
"aliases": [
"CVE-2025-4491"
],
"details": "A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/ticket-status.php. The manipulation of the argument ticket_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4491"
},
{
"type": "WEB",
"url": "https://github.com/wyl091256/CVE/issues/11"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308206"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308206"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.566786"
},
{
"type": "WEB",
"url": "https://www.campcodes.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T21:15:51Z"
}
}
advisories/unreviewed/2025/05/GHSA-4qhg-xgv5-f524/GHSA-4qhg-xgv5-f524.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-823"
],
"severity": "MODERATE",

Some files were not shown because too many files have changed in this diff Show More