Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-04-03 21:34:21 +00:00
parent e18a71ed36
commit 278cb60db3
50 changed files with 1189 additions and 40 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qgr2-xgqv-24x8",
-  "modified": "2024-11-04T18:31:16Z",
+  "modified": "2025-04-03T21:32:46Z",
  "published": "2022-01-29T00:00:42Z",
  "aliases": [
    "CVE-2021-4034"
@@ -19,6 +19,10 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4034"
    },
+    {
+      "type": "WEB",
+      "url": "https://www.vicarius.io/vsociety/posts/pwnkit-pkexec-lpe-cve-2021-4034"
+    },
    {
      "type": "WEB",
      "url": "https://www.suse.com/support/kb/doc/?id=000020564"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5c53-gj37-m7jp",
-  "modified": "2022-05-24T16:50:14Z",
+  "modified": "2025-04-03T21:32:38Z",
  "published": "2022-05-24T16:50:14Z",
  "aliases": [
    "CVE-2019-0880"
  ],
  "details": "A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2cfq-hfxh-5h78",
-  "modified": "2023-01-30T15:30:36Z",
+  "modified": "2025-04-03T21:32:47Z",
  "published": "2023-01-19T00:30:30Z",
  "aliases": [
    "CVE-2022-4235"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6fhx-fm6h-hpxq",
-  "modified": "2023-02-02T15:30:37Z",
+  "modified": "2025-04-03T21:32:49Z",
  "published": "2023-01-20T21:30:30Z",
  "aliases": [
    "CVE-2022-48279"
@@ -43,6 +43,18 @@
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00023.html"
    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYRTXTOQQI6SB2TLI5QXU76DURSLS4XI"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WCH6JM4I4MD4YABYFHSBDDOUFDGIFJKL"
+    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/52TGCZCOHYBDCVWJYNN2PS4QLOHCXWTQ"
@@ -58,7 +70,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-436"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-84gr-vfg9-783r",
-  "modified": "2023-01-27T18:30:31Z",
+  "modified": "2025-04-03T21:32:46Z",
  "published": "2023-01-17T21:30:22Z",
  "aliases": [
    "CVE-2023-23749"
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-862"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-hwpw-gw93-83r7",
-  "modified": "2023-01-26T18:30:48Z",
+  "modified": "2025-04-03T21:32:48Z",
  "published": "2023-01-20T09:30:31Z",
  "aliases": [
    "CVE-2022-48191"
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qwfh-7v4c-5cqf",
-  "modified": "2023-01-28T06:30:29Z",
+  "modified": "2025-04-03T21:32:47Z",
  "published": "2023-01-19T00:30:30Z",
  "aliases": [
    "CVE-2023-0164"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-284"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-494"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jrmv-h6h9-gcm3",
-  "modified": "2024-04-04T05:31:40Z",
+  "modified": "2025-04-03T21:32:47Z",
  "published": "2023-07-06T19:24:07Z",
  "aliases": [
    "CVE-2021-4314"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qmc4-wjcr-2569",
-  "modified": "2025-03-05T18:32:03Z",
+  "modified": "2025-04-03T21:32:54Z",
  "published": "2025-03-01T00:31:55Z",
  "aliases": [
    "CVE-2025-25723"
@@ -22,6 +22,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/gpac/gpac/issues/3089"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/gpac/gpac/commit/74e26b8dfeb0ab8c7317603b80a18306d0698473"
    }
  ],
  "database_specific": {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2h82-w6j2-mfx6",
-  "modified": "2025-04-01T00:30:35Z",
+  "modified": "2025-04-03T21:32:57Z",
  "published": "2025-04-01T00:30:35Z",
  "aliases": [
    "CVE-2025-24095"
  ],
  "details": "This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass Privacy preferences.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,8 +29,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-288"
+    ],
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-03-31T23:15:16Z"
@@ -0,0 +1,33 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2hgm-xvx6-w372",
+  "modified": "2025-04-03T21:32:59Z",
+  "published": "2025-04-03T21:32:59Z",
+  "aliases": [
+    "CVE-2025-26818"
+  ],
+  "details": "Netwrix Password Secure through 9.2 allows command injection.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26818"
+    },
+    {
+      "type": "WEB",
+      "url": "https://helpcenter.netwrix.com/bundle/PasswordSecure_9.2_ReleaseNotes/resource/Netwrix_PasswordSecure_9.2_BugFixList.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netwrix.com/advisories/adv-2025-009"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-03T20:15:23Z"
+  }
+}
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2wf7-238m-g5qh",
+  "modified": "2025-04-03T21:33:00Z",
+  "published": "2025-04-03T21:33:00Z",
+  "aliases": [
+    "CVE-2025-3179"
+  ],
+  "details": "A vulnerability classified as critical has been found in projectworlds Online Doctor Appointment Booking System 1.0. Affected is an unknown function of the file /doctor/deletepatient.php. The manipulation of the argument ic leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3179"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/p1026/CVE/issues/13"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303138"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303138"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.543839"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-03T21:15:42Z"
+  }
+}
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2x46-9926-54cg",
+  "modified": "2025-04-03T21:33:00Z",
+  "published": "2025-04-03T21:33:00Z",
+  "aliases": [
+    "CVE-2025-3176"
+  ],
+  "details": "A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /single_lawyer.php. The manipulation of the argument u_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3176"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/p1026/CVE/issues/10"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303135"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303135"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.543278"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-03T20:15:27Z"
+  }
+}
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33qf-6xj8-p2pq",
+  "modified": "2025-04-03T21:33:00Z",
+  "published": "2025-04-03T21:33:00Z",
+  "aliases": [
+    "CVE-2025-3178"
+  ],
+  "details": "A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /doctor/deleteappointment.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3178"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/p1026/CVE/issues/12"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.303137"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.303137"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.543838"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-03T21:15:42Z"
+  }
+}
--- a/Show More
+++ b/Show More