From 2e04ba8e39190aca4f87a61c8df25863a5324046 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 19 Feb 2025 15:34:03 +0000 Subject: [PATCH] Publish Advisories GHSA-4fp8-99qh-27p3 GHSA-42f6-2hwp-g5qv GHSA-4g89-mg9x-4chc GHSA-5c34-3hc6-54jh GHSA-738r-f7wg-pq98 GHSA-7rr8-j367-crh2 GHSA-8v82-m22x-w86g GHSA-c5g7-7w25-772m GHSA-j3v4-v6h2-f4pp GHSA-j6rv-xm6g-xg9c GHSA-jrwv-mv4h-7rrq GHSA-qr32-fcm4-m5h9 GHSA-rqjf-x7vh-xfc9 GHSA-wcpp-7r83-v4gc GHSA-x9j4-33qm-hgjp --- .../GHSA-4fp8-99qh-27p3.json | 6 ++- .../GHSA-42f6-2hwp-g5qv.json | 15 ++++-- .../GHSA-4g89-mg9x-4chc.json | 15 ++++-- .../GHSA-5c34-3hc6-54jh.json | 15 ++++-- .../GHSA-738r-f7wg-pq98.json | 15 ++++-- .../GHSA-7rr8-j367-crh2.json | 36 +++++++++++++ .../GHSA-8v82-m22x-w86g.json | 52 +++++++++++++++++++ .../GHSA-c5g7-7w25-772m.json | 15 ++++-- .../GHSA-j3v4-v6h2-f4pp.json | 15 ++++-- .../GHSA-j6rv-xm6g-xg9c.json | 15 ++++-- .../GHSA-jrwv-mv4h-7rrq.json | 6 ++- .../GHSA-qr32-fcm4-m5h9.json | 15 ++++-- .../GHSA-rqjf-x7vh-xfc9.json | 15 ++++-- .../GHSA-wcpp-7r83-v4gc.json | 15 ++++-- .../GHSA-x9j4-33qm-hgjp.json | 15 ++++-- 15 files changed, 219 insertions(+), 46 deletions(-) create mode 100644 advisories/unreviewed/2025/02/GHSA-7rr8-j367-crh2/GHSA-7rr8-j367-crh2.json create mode 100644 advisories/unreviewed/2025/02/GHSA-8v82-m22x-w86g/GHSA-8v82-m22x-w86g.json diff --git a/advisories/unreviewed/2022/05/GHSA-4fp8-99qh-27p3/GHSA-4fp8-99qh-27p3.json b/advisories/unreviewed/2022/05/GHSA-4fp8-99qh-27p3/GHSA-4fp8-99qh-27p3.json index c2093f712d4..938a0028b03 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fp8-99qh-27p3/GHSA-4fp8-99qh-27p3.json +++ b/advisories/unreviewed/2022/05/GHSA-4fp8-99qh-27p3/GHSA-4fp8-99qh-27p3.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4fp8-99qh-27p3", - "modified": "2023-04-20T21:33:25Z", + "modified": "2025-02-19T15:32:11Z", "published": "2022-05-24T17:24:18Z", "aliases": [ "CVE-2020-15945" @@ -23,6 +23,10 @@ "type": "WEB", "url": "https://github.com/lua/lua/commit/a2195644d89812e5b157ce7bac35543e06db05e3" }, + { + "type": "WEB", + "url": "https://www.lua.org/bugs.html#5.4.0-8" + }, { "type": "WEB", "url": "http://lua-users.org/lists/lua-l/2020-07/msg00123.html" diff --git a/advisories/unreviewed/2025/02/GHSA-42f6-2hwp-g5qv/GHSA-42f6-2hwp-g5qv.json b/advisories/unreviewed/2025/02/GHSA-42f6-2hwp-g5qv/GHSA-42f6-2hwp-g5qv.json index 6b665b392dc..7dc9ad11e36 100644 --- a/advisories/unreviewed/2025/02/GHSA-42f6-2hwp-g5qv/GHSA-42f6-2hwp-g5qv.json +++ b/advisories/unreviewed/2025/02/GHSA-42f6-2hwp-g5qv/GHSA-42f6-2hwp-g5qv.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-42f6-2hwp-g5qv", - "modified": "2025-02-19T00:31:17Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-19T00:31:17Z", "aliases": [ "CVE-2025-25468" ], "details": "FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T22:15:18Z" diff --git a/advisories/unreviewed/2025/02/GHSA-4g89-mg9x-4chc/GHSA-4g89-mg9x-4chc.json b/advisories/unreviewed/2025/02/GHSA-4g89-mg9x-4chc/GHSA-4g89-mg9x-4chc.json index 2d915427071..42e4e28311b 100644 --- a/advisories/unreviewed/2025/02/GHSA-4g89-mg9x-4chc/GHSA-4g89-mg9x-4chc.json +++ b/advisories/unreviewed/2025/02/GHSA-4g89-mg9x-4chc/GHSA-4g89-mg9x-4chc.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-4g89-mg9x-4chc", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-50609" ], "details": "An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user (with access to the endpoint) to perform a remote Denial of service attack. The crash happens because of a NULL pointer dereference when 0 (from the Content-Length) is passed to the function cfl_sds_len, which in turn tries to cast a NULL pointer into struct cfl_sds. This is related to process_payload_traces_proto_ng() at opentelemetry_prot.c.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T18:15:25Z" diff --git a/advisories/unreviewed/2025/02/GHSA-5c34-3hc6-54jh/GHSA-5c34-3hc6-54jh.json b/advisories/unreviewed/2025/02/GHSA-5c34-3hc6-54jh/GHSA-5c34-3hc6-54jh.json index 3e61bd0e5e4..65f7740100d 100644 --- a/advisories/unreviewed/2025/02/GHSA-5c34-3hc6-54jh/GHSA-5c34-3hc6-54jh.json +++ b/advisories/unreviewed/2025/02/GHSA-5c34-3hc6-54jh/GHSA-5c34-3hc6-54jh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-5c34-3hc6-54jh", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-55460" ], "details": "A time-based SQL injection vulnerability in the login page of BoardRoom Limited Dividend Distribution Tax Election System Version v2.0 allows attackers to execute arbitrary code via a crafted input.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T17:15:19Z" diff --git a/advisories/unreviewed/2025/02/GHSA-738r-f7wg-pq98/GHSA-738r-f7wg-pq98.json b/advisories/unreviewed/2025/02/GHSA-738r-f7wg-pq98/GHSA-738r-f7wg-pq98.json index 07a498da0a8..9ebfab44523 100644 --- a/advisories/unreviewed/2025/02/GHSA-738r-f7wg-pq98/GHSA-738r-f7wg-pq98.json +++ b/advisories/unreviewed/2025/02/GHSA-738r-f7wg-pq98/GHSA-738r-f7wg-pq98.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-738r-f7wg-pq98", - "modified": "2025-02-19T00:31:16Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-19T00:31:16Z", "aliases": [ "CVE-2025-25467" ], "details": "Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-94" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T22:15:18Z" diff --git a/advisories/unreviewed/2025/02/GHSA-7rr8-j367-crh2/GHSA-7rr8-j367-crh2.json b/advisories/unreviewed/2025/02/GHSA-7rr8-j367-crh2/GHSA-7rr8-j367-crh2.json new file mode 100644 index 00000000000..ba5f369a63a --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-7rr8-j367-crh2/GHSA-7rr8-j367-crh2.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7rr8-j367-crh2", + "modified": "2025-02-19T15:32:12Z", + "published": "2025-02-19T15:32:12Z", + "aliases": [ + "CVE-2024-52902" + ], + "details": "IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code which could be used for unauthorized access to the system.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52902" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7183597" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-19T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-8v82-m22x-w86g/GHSA-8v82-m22x-w86g.json b/advisories/unreviewed/2025/02/GHSA-8v82-m22x-w86g/GHSA-8v82-m22x-w86g.json new file mode 100644 index 00000000000..223be1b1e53 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-8v82-m22x-w86g/GHSA-8v82-m22x-w86g.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8v82-m22x-w86g", + "modified": "2025-02-19T15:32:12Z", + "published": "2025-02-19T15:32:12Z", + "aliases": [ + "CVE-2025-1464" + ], + "details": "A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204. This issue affects some unknown processing of the file /wuser/admin.house.collect.php. The manipulation of the argument project_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1464" + }, + { + "type": "WEB", + "url": "https://github.com/stevenchen0x01/CVE/issues/2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.296237" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.296237" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.494807" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-19T14:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-c5g7-7w25-772m/GHSA-c5g7-7w25-772m.json b/advisories/unreviewed/2025/02/GHSA-c5g7-7w25-772m/GHSA-c5g7-7w25-772m.json index 6ca5edb74e2..d68bb247509 100644 --- a/advisories/unreviewed/2025/02/GHSA-c5g7-7w25-772m/GHSA-c5g7-7w25-772m.json +++ b/advisories/unreviewed/2025/02/GHSA-c5g7-7w25-772m/GHSA-c5g7-7w25-772m.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-c5g7-7w25-772m", - "modified": "2025-02-18T15:31:08Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T15:31:08Z", "aliases": [ "CVE-2024-57050" ], "details": "A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory.When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing the authentication.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-287" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T15:15:16Z" diff --git a/advisories/unreviewed/2025/02/GHSA-j3v4-v6h2-f4pp/GHSA-j3v4-v6h2-f4pp.json b/advisories/unreviewed/2025/02/GHSA-j3v4-v6h2-f4pp/GHSA-j3v4-v6h2-f4pp.json index 2c7b1b3affd..f90c5d645ea 100644 --- a/advisories/unreviewed/2025/02/GHSA-j3v4-v6h2-f4pp/GHSA-j3v4-v6h2-f4pp.json +++ b/advisories/unreviewed/2025/02/GHSA-j3v4-v6h2-f4pp/GHSA-j3v4-v6h2-f4pp.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-j3v4-v6h2-f4pp", - "modified": "2025-02-19T00:31:16Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-19T00:31:16Z", "aliases": [ "CVE-2025-22921" ], "details": "FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T22:15:18Z" diff --git a/advisories/unreviewed/2025/02/GHSA-j6rv-xm6g-xg9c/GHSA-j6rv-xm6g-xg9c.json b/advisories/unreviewed/2025/02/GHSA-j6rv-xm6g-xg9c/GHSA-j6rv-xm6g-xg9c.json index 0ec068e581c..a33e3fbb820 100644 --- a/advisories/unreviewed/2025/02/GHSA-j6rv-xm6g-xg9c/GHSA-j6rv-xm6g-xg9c.json +++ b/advisories/unreviewed/2025/02/GHSA-j6rv-xm6g-xg9c/GHSA-j6rv-xm6g-xg9c.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-j6rv-xm6g-xg9c", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-56882" ], "details": "Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with the modified data elements.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T18:15:26Z" diff --git a/advisories/unreviewed/2025/02/GHSA-jrwv-mv4h-7rrq/GHSA-jrwv-mv4h-7rrq.json b/advisories/unreviewed/2025/02/GHSA-jrwv-mv4h-7rrq/GHSA-jrwv-mv4h-7rrq.json index 53273382641..d906cbbf06c 100644 --- a/advisories/unreviewed/2025/02/GHSA-jrwv-mv4h-7rrq/GHSA-jrwv-mv4h-7rrq.json +++ b/advisories/unreviewed/2025/02/GHSA-jrwv-mv4h-7rrq/GHSA-jrwv-mv4h-7rrq.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jrwv-mv4h-7rrq", - "modified": "2025-02-19T06:35:14Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T21:32:51Z", "aliases": [ "CVE-2025-26465" @@ -47,6 +47,10 @@ "type": "WEB", "url": "https://lists.mindrot.org/pipermail/openssh-unix-announce/2025-February/000161.html" }, + { + "type": "WEB", + "url": "https://seclists.org/oss-sec/2025/q1/144" + }, { "type": "WEB", "url": "https://security-tracker.debian.org/tracker/CVE-2025-26465" diff --git a/advisories/unreviewed/2025/02/GHSA-qr32-fcm4-m5h9/GHSA-qr32-fcm4-m5h9.json b/advisories/unreviewed/2025/02/GHSA-qr32-fcm4-m5h9/GHSA-qr32-fcm4-m5h9.json index 8428416db1a..6267c35538d 100644 --- a/advisories/unreviewed/2025/02/GHSA-qr32-fcm4-m5h9/GHSA-qr32-fcm4-m5h9.json +++ b/advisories/unreviewed/2025/02/GHSA-qr32-fcm4-m5h9/GHSA-qr32-fcm4-m5h9.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-qr32-fcm4-m5h9", - "modified": "2025-02-18T15:31:08Z", + "modified": "2025-02-19T15:32:11Z", "published": "2025-02-18T15:31:08Z", "aliases": [ "CVE-2024-57049" ], "details": "A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory. When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing the authentication.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-287" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T15:15:16Z" diff --git a/advisories/unreviewed/2025/02/GHSA-rqjf-x7vh-xfc9/GHSA-rqjf-x7vh-xfc9.json b/advisories/unreviewed/2025/02/GHSA-rqjf-x7vh-xfc9/GHSA-rqjf-x7vh-xfc9.json index 0120915ced6..a54d103cb29 100644 --- a/advisories/unreviewed/2025/02/GHSA-rqjf-x7vh-xfc9/GHSA-rqjf-x7vh-xfc9.json +++ b/advisories/unreviewed/2025/02/GHSA-rqjf-x7vh-xfc9/GHSA-rqjf-x7vh-xfc9.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rqjf-x7vh-xfc9", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-56883" ], "details": "Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the option to do so in the user interface. To do this, a valid request to create a course simply needs to be modified, so that the current user ID in the \"id\" parameter is replaced with the ID of another user.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-284" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T18:15:27Z" diff --git a/advisories/unreviewed/2025/02/GHSA-wcpp-7r83-v4gc/GHSA-wcpp-7r83-v4gc.json b/advisories/unreviewed/2025/02/GHSA-wcpp-7r83-v4gc/GHSA-wcpp-7r83-v4gc.json index c796cd34530..7a5cf8f82e3 100644 --- a/advisories/unreviewed/2025/02/GHSA-wcpp-7r83-v4gc/GHSA-wcpp-7r83-v4gc.json +++ b/advisories/unreviewed/2025/02/GHSA-wcpp-7r83-v4gc/GHSA-wcpp-7r83-v4gc.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-wcpp-7r83-v4gc", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2022-41545" ], "details": "The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transport security by default, this renders the administrative credentials vulnerable to eavesdropping by an adversary during every authenticated request made by a client to the router over a WLAN, or a LAN, should the adversary be able to perform a man-in-the-middle attack.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-287" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T18:15:13Z" diff --git a/advisories/unreviewed/2025/02/GHSA-x9j4-33qm-hgjp/GHSA-x9j4-33qm-hgjp.json b/advisories/unreviewed/2025/02/GHSA-x9j4-33qm-hgjp/GHSA-x9j4-33qm-hgjp.json index 3b62c512882..4f6a3e54831 100644 --- a/advisories/unreviewed/2025/02/GHSA-x9j4-33qm-hgjp/GHSA-x9j4-33qm-hgjp.json +++ b/advisories/unreviewed/2025/02/GHSA-x9j4-33qm-hgjp/GHSA-x9j4-33qm-hgjp.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-x9j4-33qm-hgjp", - "modified": "2025-02-18T18:33:21Z", + "modified": "2025-02-19T15:32:12Z", "published": "2025-02-18T18:33:21Z", "aliases": [ "CVE-2024-50608" ], "details": "An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user (with access to the endpoint) to perform a remote Denial of service attack. The crash happens because of a NULL pointer dereference when 0 (from the Content-Length) is passed to the function cfl_sds_len, which in turn tries to cast a NULL pointer into struct cfl_sds. This is related to process_payload_metrics_ng() at prom_rw_prot.c.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-18T18:15:25Z"