netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3pwm-mf62-vq4p
GHSA-43h9-35c5-3259
GHSA-9g72-vrh2-4xqw
GHSA-mjhf-p3qm-w989
GHSA-r5jx-gqfh-5pmr
GHSA-v48g-9gc6-wm57
This commit is contained in:
advisory-database[bot]
2025-01-05 18:32:00 +00:00
parent 1ebf369606
commit 2ded7054f9
6 changed files with 324 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/01/GHSA-3pwm-mf62-vq4p/GHSA-3pwm-mf62-vq4p.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3pwm-mf62-vq4p",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0225"
],
"details": "A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unknown functionality of the file /setting/ClassFy/exampleDownload.html. The manipulation of the argument name leads to path traversal: '/../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0225"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/blob/main/file_read4/poc.py"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/tree/main/file_read4"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290215"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290215"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.474264"
}
],
"database_specific": {
"cwe_ids": [
"CWE-23"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T17:15:06Z"
}
}
advisories/unreviewed/2025/01/GHSA-43h9-35c5-3259/GHSA-43h9-35c5-3259.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-43h9-35c5-3259",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0226"
],
"details": "A vulnerability, which was classified as problematic, has been found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this issue is the function download of the file /collect/PortV4/downLoad.html. The manipulation of the argument path leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0226"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/blob/main/file_read2/poc.py"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/tree/main/file_read2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290216"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290216"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.474265"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T18:15:05Z"
}
}
advisories/unreviewed/2025/01/GHSA-9g72-vrh2-4xqw/GHSA-9g72-vrh2-4xqw.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9g72-vrh2-4xqw",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0222"
],
"details": "A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0222"
},
{
"type": "WEB",
"url": "https://shareforall.notion.site/IOBit-Uninstaller-IUProcessFilter-0x8001E000-NPD-DOS-15260437bb1e809c81bbc484c53b17bc"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290201"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290201"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.466956"
}
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T16:15:05Z"
}
}
advisories/unreviewed/2025/01/GHSA-mjhf-p3qm-w989/GHSA-mjhf-p3qm-w989.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mjhf-p3qm-w989",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0227"
],
"details": "A vulnerability, which was classified as problematic, was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This affects an unknown part of the file /Logs/Annals/downLoad.html. The manipulation of the argument path leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0227"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/blob/main/file_read1/poc.py"
},
{
"type": "WEB",
"url": "https://github.com/BxYQ/ld/tree/main/file_read1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290217"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290217"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.474266"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T18:15:06Z"
}
}
advisories/unreviewed/2025/01/GHSA-r5jx-gqfh-5pmr/GHSA-r5jx-gqfh-5pmr.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r5jx-gqfh-5pmr",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0223"
],
"details": "A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0223"
},
{
"type": "WEB",
"url": "https://shareforall.notion.site/IOBit-Uninstaller-IURegistryFilter-0x8001E000-NPD-DOS-15260437bb1e80e482e0e3c9b22b58d0"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290202"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290202"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.466963"
}
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T16:15:05Z"
}
}
advisories/unreviewed/2025/01/GHSA-v48g-9gc6-wm57/GHSA-v48g-9gc6-wm57.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v48g-9gc6-wm57",
"modified": "2025-01-05T18:30:35Z",
"published": "2025-01-05T18:30:35Z",
"aliases": [
"CVE-2025-0224"
],
"details": "A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0224"
},
{
"type": "WEB",
"url": "https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.290203"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.290203"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.467085"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-01-05T17:15:06Z"
}
}