netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-mm29-jc8v-gx7f
GHSA-qfwf-5hgc-r5j2
GHSA-246p-56fr-j339
GHSA-mmq5-phxp-hrxq
GHSA-g79x-gv43-8472
GHSA-gq79-6cpg-v72r
GHSA-p92v-v2pv-248f
GHSA-26mg-p594-q328
GHSA-27rh-f3qh-3mf4
GHSA-6m2f-83vf-p7fj
GHSA-6x46-2273-xjjf
GHSA-9qc4-m2hc-5vc5
GHSA-h5qv-qcjq-wcff
GHSA-jm94-7488-jjfw
GHSA-qhcg-w878-wwxf
This commit is contained in:
advisory-database[bot]
2025-05-08 15:32:12 +00:00
parent b5a4d553dc
commit 23f2c661ca
15 changed files with 290 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/10/GHSA-mm29-jc8v-gx7f/GHSA-mm29-jc8v-gx7f.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mm29-jc8v-gx7f",
"modified": "2022-10-22T12:00:25Z",
"modified": "2025-05-08T15:30:34Z",
"published": "2022-10-21T19:01:16Z",
"aliases": [
"CVE-2022-42206"
advisories/unreviewed/2022/10/GHSA-qfwf-5hgc-r5j2/GHSA-qfwf-5hgc-r5j2.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qfwf-5hgc-r5j2",
"modified": "2022-10-22T12:00:25Z",
"modified": "2025-05-08T15:30:33Z",
"published": "2022-10-21T19:01:16Z",
"aliases": [
"CVE-2022-42205"
advisories/unreviewed/2024/02/GHSA-246p-56fr-j339/GHSA-246p-56fr-j339.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-246p-56fr-j339",
"modified": "2024-02-26T18:30:31Z",
"modified": "2025-05-08T15:30:35Z",
"published": "2024-02-26T18:30:31Z",
"aliases": [
"CVE-2024-25909"
],
"details": "Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.\n\n",
"details": "Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/02/GHSA-mmq5-phxp-hrxq/GHSA-mmq5-phxp-hrxq.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mmq5-phxp-hrxq",
"modified": "2024-02-21T18:31:01Z",
"modified": "2025-05-08T15:30:34Z",
"published": "2024-02-21T18:31:01Z",
"aliases": [
"CVE-2024-22220"
],
"details": "An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T16:15:50Z"
advisories/unreviewed/2024/12/GHSA-g79x-gv43-8472/GHSA-g79x-gv43-8472.json
+3 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g79x-gv43-8472",
"modified": "2025-01-29T18:31:19Z",
"modified": "2025-05-08T15:30:39Z",
"published": "2024-12-17T18:33:49Z",
"aliases": [
"CVE-2024-12179"
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/12/GHSA-gq79-6cpg-v72r/GHSA-gq79-6cpg-v72r.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
"CWE-120",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/12/GHSA-p92v-v2pv-248f/GHSA-p92v-v2pv-248f.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
"CWE-120",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-26mg-p594-q328/GHSA-26mg-p594-q328.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26mg-p594-q328",
"modified": "2025-04-26T00:30:24Z",
"modified": "2025-05-08T15:30:40Z",
"published": "2025-04-10T03:31:32Z",
"aliases": [
"CVE-2025-32728"
@@ -27,6 +27,10 @@
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/013_ssh.patch.sig"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00008.html"
},
{
"type": "WEB",
"url": "https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041879.html"
advisories/unreviewed/2025/05/GHSA-27rh-f3qh-3mf4/GHSA-27rh-f3qh-3mf4.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27rh-f3qh-3mf4",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2025-45820"
],
"details": "Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/pop_author_edit.php.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45820"
},
{
"type": "WEB",
"url": "https://github.com/slims/slims9_bulian/issues/282"
},
{
"type": "WEB",
"url": "https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-pop-author-edit-report.md"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T15:15:48Z"
}
}
advisories/unreviewed/2025/05/GHSA-6m2f-83vf-p7fj/GHSA-6m2f-83vf-p7fj.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6m2f-83vf-p7fj",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2024-6648"
],
"details": "Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6648"
},
{
"type": "WEB",
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/path-traversal-ap-page-builder"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T13:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-6x46-2273-xjjf/GHSA-6x46-2273-xjjf.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6x46-2273-xjjf",
"modified": "2025-05-08T15:31:13Z",
"published": "2025-05-08T15:31:13Z",
"aliases": [
"CVE-2025-4207"
],
"details": "Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13, 14.18, and 13.21 are affected.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4207"
},
{
"type": "WEB",
"url": "https://www.postgresql.org/support/security/CVE-2025-4207"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T15:15:48Z"
}
}
advisories/unreviewed/2025/05/GHSA-9qc4-m2hc-5vc5/GHSA-9qc4-m2hc-5vc5.json
+48
View File
@@ -0,0 +1,48 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9qc4-m2hc-5vc5",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2025-47730"
],
"details": "The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47730"
},
{
"type": "WEB",
"url": "https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked"
},
{
"type": "WEB",
"url": "https://github.com/micahflee/TM-SGNL-Android/blob/bd7ccbb8bc79193fc4c57cae7cc1051e6250fa89/app/src/tm/java/org/archiver/ArchiveConstants.kt#L45-L46"
},
{
"type": "WEB",
"url": "https://news.ycombinator.com/item?id=43909220"
},
{
"type": "WEB",
"url": "https://www.theregister.com/2025/05/05/telemessage_investigating"
}
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T14:15:27Z"
}
}
advisories/unreviewed/2025/05/GHSA-h5qv-qcjq-wcff/GHSA-h5qv-qcjq-wcff.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h5qv-qcjq-wcff",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2025-47729"
],
"details": "The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage \"End-to-End encryption from the mobile phone through to the corporate archive\" documentation, as exploited in the wild in May 2025.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47729"
},
{
"type": "WEB",
"url": "https://arstechnica.com/security/2025/05/signal-clone-used-by-trump-official-stops-operations-after-report-it-was-hacked"
},
{
"type": "WEB",
"url": "https://news.ycombinator.com/item?id=43909220"
},
{
"type": "WEB",
"url": "https://www.theregister.com/2025/05/05/telemessage_investigating"
}
],
"database_specific": {
"cwe_ids": [
"CWE-912"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T14:15:26Z"
}
}
advisories/unreviewed/2025/05/GHSA-jm94-7488-jjfw/GHSA-jm94-7488-jjfw.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jm94-7488-jjfw",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2025-45818"
],
"details": "Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/item_status.php.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45818"
},
{
"type": "WEB",
"url": "https://github.com/slims/slims9_bulian/issues/280"
},
{
"type": "WEB",
"url": "https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-item-status-report.md"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T15:15:48Z"
}
}
advisories/unreviewed/2025/05/GHSA-qhcg-w878-wwxf/GHSA-qhcg-w878-wwxf.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhcg-w878-wwxf",
"modified": "2025-05-08T15:31:12Z",
"published": "2025-05-08T15:31:12Z",
"aliases": [
"CVE-2025-45819"
],
"details": "Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/master_file/author.php.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45819"
},
{
"type": "WEB",
"url": "https://github.com/slims/slims9_bulian/issues/281"
},
{
"type": "WEB",
"url": "https://github.com/christopherralinanggoman/cve-skripsi/blob/main/my_reports/slims-9-bulian-author-report.md"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T15:15:48Z"
}
}