netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-10 03:31:54 +00:00
parent eac7191108
commit 411d373a32
31 changed files with 448 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/10/GHSA-9pgf-v4c5-vh54/GHSA-9pgf-v4c5-vh54.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
"CWE-269",
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-4gfp-3h23-q93c/GHSA-4gfp-3h23-q93c.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-6233-jj46-vp44/GHSA-6233-jj46-vp44.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6233-jj46-vp44",
"modified": "2025-04-28T21:30:43Z",
"modified": "2025-05-10T03:30:21Z",
"published": "2025-04-28T21:30:43Z",
"aliases": [
"CVE-2025-3224"
],
"details": "A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdirectories under the path C:\\ProgramData\\Docker\\config with high privileges. However, this directory often does not exist by default, and C:\\ProgramData\\ allows normal users to create new directories. By creating a malicious Docker\\config folder structure at this location, an attacker can force the privileged update process to delete or manipulate arbitrary system files, leading to Elevation of Privilege.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
advisories/unreviewed/2025/04/GHSA-h9pw-jprm-xpcc/GHSA-h9pw-jprm-xpcc.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-m6rq-x2h2-222p/GHSA-m6rq-x2h2-222p.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m6rq-x2h2-222p",
"modified": "2025-04-28T21:30:43Z",
"modified": "2025-05-10T03:30:21Z",
"published": "2025-04-28T21:30:43Z",
"aliases": [
"CVE-2024-11922"
advisories/unreviewed/2025/04/GHSA-mwxx-fm83-xr9c/GHSA-mwxx-fm83-xr9c.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-vrw5-c37h-4jp2/GHSA-vrw5-c37h-4jp2.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-w2gx-jrw9-w3hf/GHSA-w2gx-jrw9-w3hf.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-w7mr-p347-2rxr/GHSA-w7mr-p347-2rxr.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w7mr-p347-2rxr",
"modified": "2025-04-28T21:30:43Z",
"modified": "2025-05-10T03:30:21Z",
"published": "2025-04-28T21:30:43Z",
"aliases": [
"CVE-2025-0049"
advisories/unreviewed/2025/04/GHSA-xg84-4r3q-gjjw/GHSA-xg84-4r3q-gjjw.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/05/GHSA-2cf4-4hv6-ccxc/GHSA-2cf4-4hv6-ccxc.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2cf4-4hv6-ccxc",
"modified": "2025-05-10T03:30:23Z",
"published": "2025-05-10T03:30:23Z",
"aliases": [
"CVE-2025-1137"
],
"details": "IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1137"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7233085"
}
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T03:15:22Z"
}
}
advisories/unreviewed/2025/05/GHSA-3m4v-8v7m-fjqh/GHSA-3m4v-8v7m-fjqh.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3m4v-8v7m-fjqh",
"modified": "2025-05-09T18:30:37Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:37Z",
"aliases": [
"CVE-2025-28203"
],
"details": "Victure RX1800 EN_V1.0.0_r12_110933 was discovered to contain a command injection vulnerability.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"
advisories/unreviewed/2025/05/GHSA-4ff9-j95w-cmww/GHSA-4ff9-j95w-cmww.json
+25
View File
@@ -0,0 +1,25 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4ff9-j95w-cmww",
"modified": "2025-05-10T03:30:23Z",
"published": "2025-05-10T03:30:23Z",
"aliases": [
"CVE-2025-47768"
],
"details": "Rejected reason: Not used",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47768"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-4hrx-7c6v-v9v5/GHSA-4hrx-7c6v-v9v5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4hrx-7c6v-v9v5",
"modified": "2025-05-09T18:30:37Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:37Z",
"aliases": [
"CVE-2025-28201"
],
"details": "An issue in Victure RX1800 EN_V1.0.0_r12_110933 allows physically proximate attackers to execute arbitrary code or gain root access.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"
advisories/unreviewed/2025/05/GHSA-58x9-xjx8-r53g/GHSA-58x9-xjx8-r53g.json
+25
View File
@@ -0,0 +1,25 @@
{
"schema_version": "1.4.0",
"id": "GHSA-58x9-xjx8-r53g",
"modified": "2025-05-10T03:30:23Z",
"published": "2025-05-10T03:30:23Z",
"aliases": [
"CVE-2025-47763"
],
"details": "Rejected reason: Not used",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47763"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-5g2m-h52j-gj53/GHSA-5g2m-h52j-gj53.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5g2m-h52j-gj53",
"modified": "2025-05-09T18:30:37Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:37Z",
"aliases": [
"CVE-2025-45513"
],
"details": "Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-121"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"
advisories/unreviewed/2025/05/GHSA-6wp9-fhmq-qf9x/GHSA-6wp9-fhmq-qf9x.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wp9-fhmq-qf9x",
"modified": "2025-05-09T18:30:38Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:38Z",
"aliases": [
"CVE-2025-46188"
],
"details": "SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadmin_phpmyadmin.php.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"
advisories/unreviewed/2025/05/GHSA-99vm-2jmg-q6cj/GHSA-99vm-2jmg-q6cj.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-99vm-2jmg-q6cj",
"modified": "2025-05-09T18:30:39Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:39Z",
"aliases": [
"CVE-2025-29509"
],
"details": "Jan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a rendered link in the conversation, due to opening external website in the app and the exposure of electronAPI, with a lack of filtering of URL when calling shell.openExternal().",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T17:15:50Z"
advisories/unreviewed/2025/05/GHSA-crgq-r5hp-5v47/GHSA-crgq-r5hp-5v47.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-crgq-r5hp-5v47",
"modified": "2025-05-09T18:30:37Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:37Z",
"aliases": [
"CVE-2025-28202"
],
"details": "Incorrect access control in Victure RX1800 EN_V1.0.0_r12_110933 allows attackers to enable SSH and Telnet services without authentication.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-862"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"
advisories/unreviewed/2025/05/GHSA-fxh7-543f-qcr8/GHSA-fxh7-543f-qcr8.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fxh7-543f-qcr8",
"modified": "2025-05-09T18:30:38Z",
"modified": "2025-05-10T03:30:22Z",
"published": "2025-05-09T18:30:38Z",
"aliases": [
"CVE-2025-46189"
],
"details": "SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in user_order_customer_update.php via the order_id POST parameter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T16:15:24Z"

Some files were not shown because too many files have changed in this diff Show More