netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2vqj-q898-2278
GHSA-4334-fqg8-978p
GHSA-44mp-2g68-7wvv
GHSA-5v23-ffph-xc48
GHSA-7cfr-5cjf-32p4
GHSA-89cv-jc38-p2qw
GHSA-8jf4-jjhg-xf85
GHSA-f6x7-5x3c-j3rg
GHSA-m8rm-wxxp-wcc5
GHSA-p9qv-6qqh-cc4q
GHSA-pwgf-fq6f-h6c6
GHSA-qqv4-m5cq-pp99
GHSA-rmgg-7vrg-pg6w
GHSA-x4jw-p584-84v2
GHSA-x9cp-82w8-9v37
GHSA-xc4h-vcj7-vq9g
GHSA-xr87-9hpg-j7mv
This commit is contained in:
advisory-database[bot]
2025-05-16 06:31:45 +00:00
parent 5b99401a03
commit 3b25cb09c5
17 changed files with 850 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-2vqj-q898-2278/GHSA-2vqj-q898-2278.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2vqj-q898-2278",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-4749"
],
"details": "A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This vulnerability affects the function sub_4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4749"
},
{
"type": "WEB",
"url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/backup.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309052"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309052"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571068"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:38Z"
}
}
advisories/unreviewed/2025/05/GHSA-4334-fqg8-978p/GHSA-4334-fqg8-978p.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4334-fqg8-978p",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-4747"
],
"details": "A vulnerability was found in Bohua NetDragon Firewall 1.0 and classified as critical. This issue affects some unknown processing of the file /systemstatus/ip_status.php. The manipulation of the argument subnet leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4747"
},
{
"type": "WEB",
"url": "https://github.com/lche511/cve/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309047"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309047"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571035"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:37Z"
}
}
advisories/unreviewed/2025/05/GHSA-44mp-2g68-7wvv/GHSA-44mp-2g68-7wvv.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44mp-2g68-7wvv",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-48175"
],
"details": "In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L"
}
],
"affected": [],
"references": [
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48175"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/pull/2769"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:37Z"
}
}
advisories/unreviewed/2025/05/GHSA-5v23-ffph-xc48/GHSA-5v23-ffph-xc48.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v23-ffph-xc48",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-1245"
],
"details": "Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component), Hitachi Ops Center Analyzer  (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1245"
},
{
"type": "WEB",
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-116/index.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-348"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:45Z"
}
}
advisories/unreviewed/2025/05/GHSA-7cfr-5cjf-32p4/GHSA-7cfr-5cjf-32p4.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7cfr-5cjf-32p4",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-4759"
],
"details": "Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package name allowing an attacker to install other npm packages than the intended one.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4759"
},
{
"type": "WEB",
"url": "https://github.com/lirantal/lockfile-lint/pull/204"
},
{
"type": "WEB",
"url": "https://github.com/lirantal/lockfile-lint/commit/9e5305bd3e4f0c6acc0d23ec43eac2bd5303b4ca"
},
{
"type": "WEB",
"url": "https://gist.github.com/Xavier59/881aef04940970dc3e738dcbff64151f"
},
{
"type": "WEB",
"url": "https://github.com/lirantal/lockfile-lint/blob/89b5cad028df4d77bab2b73ac93bc61e392668ab/packages/lockfile-lint-api/src/validators/ValidatePackageNames.js%23L51-L63"
},
{
"type": "WEB",
"url": "https://security.snyk.io/vuln/SNYK-JS-LOCKFILELINTAPI-10169587"
}
],
"database_specific": {
"cwe_ids": [
"CWE-179"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:38Z"
}
}
advisories/unreviewed/2025/05/GHSA-89cv-jc38-p2qw/GHSA-89cv-jc38-p2qw.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89cv-jc38-p2qw",
"modified": "2025-05-16T06:30:23Z",
"published": "2025-05-16T06:30:23Z",
"aliases": [
"CVE-2025-4741"
],
"details": "A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pages/purchase_add.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4741"
},
{
"type": "WEB",
"url": "https://github.com/snkercyber/CVE/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309041"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309041"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570913"
},
{
"type": "WEB",
"url": "https://www.campcodes.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T04:15:45Z"
}
}
advisories/unreviewed/2025/05/GHSA-8jf4-jjhg-xf85/GHSA-8jf4-jjhg-xf85.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8jf4-jjhg-xf85",
"modified": "2025-05-16T06:30:23Z",
"published": "2025-05-16T06:30:23Z",
"aliases": [
"CVE-2025-4743"
],
"details": "A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4743"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://github.com/872323857/CVE/blob/main/employee-record-system.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309043"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309043"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570963"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T04:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-f6x7-5x3c-j3rg/GHSA-f6x7-5x3c-j3rg.json
+48
View File
@@ -0,0 +1,48 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f6x7-5x3c-j3rg",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-48174"
],
"details": "In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48174"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/pull/2768"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/commit/50a743062938a3828581d725facc9c2b92a1d109"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/commit/c9f1bea437f21cb78f9919c332922a3b0ba65e11"
},
{
"type": "WEB",
"url": "https://github.com/AOMediaCodec/libavif/commit/e5fdefe7d1776e6c4cf1703c163a8c0535599029"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:37Z"
}
}
advisories/unreviewed/2025/05/GHSA-m8rm-wxxp-wcc5/GHSA-m8rm-wxxp-wcc5.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m8rm-wxxp-wcc5",
"modified": "2025-05-16T06:30:25Z",
"published": "2025-05-16T06:30:25Z",
"aliases": [
"CVE-2025-4750"
],
"details": "A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issue affects some unknown processing of the file /H5/get_version.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4750"
},
{
"type": "WEB",
"url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/get_version.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309053"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309053"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571069"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-p9qv-6qqh-cc4q/GHSA-p9qv-6qqh-cc4q.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p9qv-6qqh-cc4q",
"modified": "2025-05-16T06:30:23Z",
"published": "2025-05-16T06:30:23Z",
"aliases": [
"CVE-2025-4742"
],
"details": "A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856. Affected is the function main of the file grpo_vanilla.py. The manipulation leads to deserialization. Local access is required to approach this attack. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4742"
},
{
"type": "WEB",
"url": "https://github.com/XU-YIJIE/grpo-flat/issues/3"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309042"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309042"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570923"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T04:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-pwgf-fq6f-h6c6/GHSA-pwgf-fq6f-h6c6.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pwgf-fq6f-h6c6",
"modified": "2025-05-16T06:30:25Z",
"published": "2025-05-16T06:30:25Z",
"aliases": [
"CVE-2025-4752"
],
"details": "A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /install_base.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4752"
},
{
"type": "WEB",
"url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/install_base.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309055"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309055"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571071"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-qqv4-m5cq-pp99/GHSA-qqv4-m5cq-pp99.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qqv4-m5cq-pp99",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-3201"
],
"details": "The Contact Form builder with drag & drop for WordPress WordPress plugin before 2.4.3 does not sanitise and escape some of its settings, which could allow high privilege users such as contributors to perform Stored Cross-Site Scripting attacks.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3201"
},
{
"type": "WEB",
"url": "https://wpscan.com/vulnerability/4248289f-36d2-41c5-baf6-bb2c630482ef"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-rmgg-7vrg-pg6w/GHSA-rmgg-7vrg-pg6w.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rmgg-7vrg-pg6w",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-4746"
],
"details": "A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchase_delete.php. The manipulation of the argument pr_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4746"
},
{
"type": "WEB",
"url": "https://github.com/snkercyber/CVE/issues/2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309046"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309046"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571020"
},
{
"type": "WEB",
"url": "https://www.campcodes.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T05:15:37Z"
}
}
advisories/unreviewed/2025/05/GHSA-x4jw-p584-84v2/GHSA-x4jw-p584-84v2.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x4jw-p584-84v2",
"modified": "2025-05-16T06:30:25Z",
"published": "2025-05-16T06:30:25Z",
"aliases": [
"CVE-2025-3516"
],
"details": "The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3516"
},
{
"type": "WEB",
"url": "https://wpscan.com/vulnerability/336a78cd-297b-4f47-a007-e33eac7f1dad"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-x9cp-82w8-9v37/GHSA-x9cp-82w8-9v37.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x9cp-82w8-9v37",
"modified": "2025-05-16T06:30:23Z",
"published": "2025-05-16T06:30:23Z",
"aliases": [
"CVE-2025-4744"
],
"details": "A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\\edit_employee.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4744"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://github.com/872323857/CVE/blob/main/employee-record-system-xss1.pdf"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309044"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309044"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570965"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T04:15:47Z"
}
}
advisories/unreviewed/2025/05/GHSA-xc4h-vcj7-vq9g/GHSA-xc4h-vcj7-vq9g.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xc4h-vcj7-vq9g",
"modified": "2025-05-16T06:30:25Z",
"published": "2025-05-16T06:30:25Z",
"aliases": [
"CVE-2025-4751"
],
"details": "A vulnerability, which was classified as problematic, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). Affected is an unknown function of the file /index.data. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4751"
},
{
"type": "WEB",
"url": "https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/index.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309054"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309054"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.571070"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T06:15:46Z"
}
}
advisories/unreviewed/2025/05/GHSA-xr87-9hpg-j7mv/GHSA-xr87-9hpg-j7mv.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xr87-9hpg-j7mv",
"modified": "2025-05-16T06:30:24Z",
"published": "2025-05-16T06:30:24Z",
"aliases": [
"CVE-2025-4745"
],
"details": "A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file current_employees.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4745"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://github.com/872323857/CVE/blob/main/employee-record-system-xss2.pdf"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309045"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309045"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570967"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T04:15:47Z"
}
}