netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-06-10 21:35:17 +00:00
parent 4039b5935d
commit 252f9b5780
43 changed files with 1243 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-ch34-vwch-58hx/GHSA-ch34-vwch-58hx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ch34-vwch-58hx",
"modified": "2024-11-01T21:31:45Z",
"modified": "2025-06-10T21:31:18Z",
"published": "2024-02-29T03:33:17Z",
"aliases": [
"CVE-2024-22251"
advisories/unreviewed/2024/02/GHSA-j2p9-482v-5wj6/GHSA-j2p9-482v-5wj6.json
+4 -3
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j2p9-482v-5wj6",
"modified": "2024-02-09T06:32:24Z",
"modified": "2025-06-10T21:31:18Z",
"published": "2024-02-09T06:32:24Z",
"aliases": [
"CVE-2023-51761"
],
"details": "\n\n\n\n\nIn Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.\n\n\n\n\n\n",
"details": "In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass authentication and acquire admin capabilities.",
"severity": [
{
"type": "CVSS_V3",
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287"
"CWE-287",
"CWE-863"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-qx4x-jg45-h572/GHSA-qx4x-jg45-h572.json
+4 -3
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qx4x-jg45-h572",
"modified": "2024-02-09T06:32:23Z",
"modified": "2025-06-10T21:31:18Z",
"published": "2024-02-09T06:32:23Z",
"aliases": [
"CVE-2023-43609"
],
"details": "\n\n\n\n\n\n\nIn Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.\n\n\n\n\n\n\n\n",
"details": "In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive information or cause a denial-of-service condition.",
"severity": [
{
"type": "CVSS_V3",
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-285"
"CWE-285",
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-27jg-5m5x-f2g4/GHSA-27jg-5m5x-f2g4.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-9q78-jg46-rwj6/GHSA-9q78-jg46-rwj6.json
+2 -1
View File
@@ -42,7 +42,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-c8hr-6m27-p6qr/GHSA-c8hr-6m27-p6qr.json
+2 -1
View File
@@ -42,7 +42,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-cmg2-pjgm-gcrp/GHSA-cmg2-pjgm-gcrp.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/06/GHSA-23fj-6rwp-5rq6/GHSA-23fj-6rwp-5rq6.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23fj-6rwp-5rq6",
"modified": "2025-06-10T21:31:22Z",
"published": "2025-06-10T21:31:22Z",
"aliases": [
"CVE-2025-43576"
],
"details": "Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43576"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb25-57.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T19:15:32Z"
}
}
advisories/unreviewed/2025/06/GHSA-25px-qwqc-5cg6/GHSA-25px-qwqc-5cg6.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25px-qwqc-5cg6",
"modified": "2025-06-10T21:31:22Z",
"published": "2025-06-10T21:31:22Z",
"aliases": [
"CVE-2025-30327"
],
"details": "InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30327"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/incopy/apsb25-41.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T19:15:29Z"
}
}
advisories/unreviewed/2025/06/GHSA-2xg5-8frj-h6pm/GHSA-2xg5-8frj-h6pm.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xg5-8frj-h6pm",
"modified": "2025-06-10T18:32:26Z",
"modified": "2025-06-10T21:31:22Z",
"published": "2025-06-10T18:32:26Z",
"aliases": [
"CVE-2025-44044"
],
"details": "Keyoti SearchUnit prior to 9.0.0. is vulnerable to XML External Entity (XXE). An attacker who can force a vulnerable SearchUnit host into parsing maliciously crafted XML and/or DTD files can exfiltrate some files from the underlying operating system.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-611"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T16:15:40Z"
advisories/unreviewed/2025/06/GHSA-3fxc-2crv-fg9x/GHSA-3fxc-2crv-fg9x.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3fxc-2crv-fg9x",
"modified": "2025-06-10T18:32:32Z",
"modified": "2025-06-10T21:31:22Z",
"published": "2025-06-10T18:32:32Z",
"aliases": [
"CVE-2025-2884"
@@ -21,6 +21,14 @@
{
"type": "WEB",
"url": "https://trustedcomputinggroup.org/wp-content/uploads/TPM2.0-Library-Spec-v1.83-Errata_v1_pub.pdf"
},
{
"type": "WEB",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01209.html"
},
{
"type": "WEB",
"url": "https://www.kb.cert.org/vuls/id/282450"
}
],
"database_specific": {
advisories/unreviewed/2025/06/GHSA-4mm2-j594-64h8/GHSA-4mm2-j594-64h8.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mm2-j594-64h8",
"modified": "2025-06-10T21:31:24Z",
"published": "2025-06-10T21:31:24Z",
"aliases": [
"CVE-2025-5977"
],
"details": "A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /datatable.php. The manipulation of the argument sSortDir_0 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5977"
},
{
"type": "WEB",
"url": "https://github.com/jiangffffd/cve/issues/1"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.311855"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.311855"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.592458"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T20:15:25Z"
}
}
advisories/unreviewed/2025/06/GHSA-57x8-g7cj-crwq/GHSA-57x8-g7cj-crwq.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57x8-g7cj-crwq",
"modified": "2025-06-10T21:31:23Z",
"published": "2025-06-10T21:31:23Z",
"aliases": [
"CVE-2024-41504"
],
"details": "Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the \"Oportunidades\" (opportunities) section of the application when creating or editing an \"Atividade\" (activity), the form field \"Descrico\" allows injection of JavaScript.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41504"
},
{
"type": "WEB",
"url": "https://github.com/rafaelbaldasso/CVE-2024-41504"
},
{
"type": "WEB",
"url": "http://jetimob.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T20:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-5wcp-x98w-p534/GHSA-5wcp-x98w-p534.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5wcp-x98w-p534",
"modified": "2025-06-10T21:31:24Z",
"published": "2025-06-10T21:31:24Z",
"aliases": [
"CVE-2025-35940"
],
"details": "The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-35940"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/research/tra-2025-17"
}
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T21:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-639h-q5mc-2xjf/GHSA-639h-q5mc-2xjf.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/06/GHSA-66jr-c3x5-vxxr/GHSA-66jr-c3x5-vxxr.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-66jr-c3x5-vxxr",
"modified": "2025-06-10T21:31:23Z",
"published": "2025-06-10T21:31:23Z",
"aliases": [
"CVE-2025-47111"
],
"details": "Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing a disruption in service. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47111"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb25-57.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T19:15:33Z"
}
}
advisories/unreviewed/2025/06/GHSA-6fpm-c38x-hr9h/GHSA-6fpm-c38x-hr9h.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6fpm-c38x-hr9h",
"modified": "2025-06-10T21:31:23Z",
"published": "2025-06-10T21:31:23Z",
"aliases": [
"CVE-2024-41503"
],
"details": "Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field \"Ttulo\" (title) inside the filter Save option in the \"Busca\" (search) function.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41503"
},
{
"type": "WEB",
"url": "https://github.com/rafaelbaldasso/CVE-2024-41503"
},
{
"type": "WEB",
"url": "http://jetimob.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T20:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-6g24-6w3x-338j/GHSA-6g24-6w3x-338j.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6g24-6w3x-338j",
"modified": "2025-06-10T21:31:22Z",
"published": "2025-06-10T21:31:22Z",
"aliases": [
"CVE-2025-43575"
],
"details": "Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43575"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb25-57.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T19:15:32Z"
}
}
advisories/unreviewed/2025/06/GHSA-6mvj-rxp7-39x3/GHSA-6mvj-rxp7-39x3.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6mvj-rxp7-39x3",
"modified": "2025-06-10T21:31:23Z",
"published": "2025-06-10T21:31:23Z",
"aliases": [
"CVE-2024-41505"
],
"details": "Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the \"Pessoas\" (persons) section via the field \"Profisso\" (professor).",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41505"
},
{
"type": "WEB",
"url": "https://github.com/rafaelbaldasso/CVE-2024-41505"
},
{
"type": "WEB",
"url": "http://jetimob.com"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T20:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-7v3j-qcv2-4wc4/GHSA-7v3j-qcv2-4wc4.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-77"
],
"severity": "HIGH",

Some files were not shown because too many files have changed in this diff Show More