diff --git a/advisories/unreviewed/2025/05/GHSA-43qr-pjmr-cgfv/GHSA-43qr-pjmr-cgfv.json b/advisories/unreviewed/2025/05/GHSA-43qr-pjmr-cgfv/GHSA-43qr-pjmr-cgfv.json index ebf46925d48..b0b743eaffa 100644 --- a/advisories/unreviewed/2025/05/GHSA-43qr-pjmr-cgfv/GHSA-43qr-pjmr-cgfv.json +++ b/advisories/unreviewed/2025/05/GHSA-43qr-pjmr-cgfv/GHSA-43qr-pjmr-cgfv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-43qr-pjmr-cgfv", - "modified": "2025-05-14T15:31:37Z", + "modified": "2025-05-17T15:30:25Z", "published": "2025-05-14T15:31:37Z", "aliases": [ "CVE-2024-54779" @@ -23,6 +23,10 @@ "type": "WEB", "url": "https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack" }, + { + "type": "WEB", + "url": "https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2" + }, { "type": "WEB", "url": "http://netgate.com" diff --git a/advisories/unreviewed/2025/05/GHSA-8743-487v-2xqh/GHSA-8743-487v-2xqh.json b/advisories/unreviewed/2025/05/GHSA-8743-487v-2xqh/GHSA-8743-487v-2xqh.json new file mode 100644 index 00000000000..22f51a1d353 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-8743-487v-2xqh/GHSA-8743-487v-2xqh.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8743-487v-2xqh", + "modified": "2025-05-17T15:30:25Z", + "published": "2025-05-17T15:30:25Z", + "aliases": [ + "CVE-2025-4101" + ], + "details": "The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4101" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php#L982" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3293832/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php?old=3272848&old_path=dc-woocommerce-multi-vendor%2Ftrunk%2Fclasses%2Fclass-mvx-ajax.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5c1fd517-32ee-429d-9026-512afe117dc5?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-17T13:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-f87m-rx58-p97v/GHSA-f87m-rx58-p97v.json b/advisories/unreviewed/2025/05/GHSA-f87m-rx58-p97v/GHSA-f87m-rx58-p97v.json new file mode 100644 index 00000000000..14b787a220d --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-f87m-rx58-p97v/GHSA-f87m-rx58-p97v.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f87m-rx58-p97v", + "modified": "2025-05-17T15:30:25Z", + "published": "2025-05-17T15:30:25Z", + "aliases": [ + "CVE-2025-48187" + ], + "details": "RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to perform arbitrary account registration, login, and password reset. Codes are six digits and there is no rate limiting.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48187" + }, + { + "type": "WEB", + "url": "https://github.com/infiniflow/ragflow/commits/main" + }, + { + "type": "WEB", + "url": "https://www.cnblogs.com/qiushuo/p/18881084" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-307" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-17T13:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-fmqv-vc53-6mwm/GHSA-fmqv-vc53-6mwm.json b/advisories/unreviewed/2025/05/GHSA-fmqv-vc53-6mwm/GHSA-fmqv-vc53-6mwm.json new file mode 100644 index 00000000000..749559e7953 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-fmqv-vc53-6mwm/GHSA-fmqv-vc53-6mwm.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fmqv-vc53-6mwm", + "modified": "2025-05-17T15:30:25Z", + "published": "2025-05-17T15:30:25Z", + "aliases": [ + "CVE-2025-4827" + ], + "details": "A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4827" + }, + { + "type": "WEB", + "url": "https://github.com/CH13hh/tmp_store_cc/blob/main/toto/6.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.309288" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.309288" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.574598" + }, + { + "type": "WEB", + "url": "https://www.totolink.net" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-17T15:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-fx6v-jrpq-f762/GHSA-fx6v-jrpq-f762.json b/advisories/unreviewed/2025/05/GHSA-fx6v-jrpq-f762/GHSA-fx6v-jrpq-f762.json index 9614fddfb3e..60228345d1f 100644 --- a/advisories/unreviewed/2025/05/GHSA-fx6v-jrpq-f762/GHSA-fx6v-jrpq-f762.json +++ b/advisories/unreviewed/2025/05/GHSA-fx6v-jrpq-f762/GHSA-fx6v-jrpq-f762.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fx6v-jrpq-f762", - "modified": "2025-05-14T15:31:38Z", + "modified": "2025-05-17T15:30:25Z", "published": "2025-05-14T15:31:37Z", "aliases": [ "CVE-2024-54780" @@ -23,6 +23,10 @@ "type": "WEB", "url": "https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack" }, + { + "type": "WEB", + "url": "https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2" + }, { "type": "WEB", "url": "http://netgate.com" diff --git a/advisories/unreviewed/2025/05/GHSA-h9vw-8pf3-5j78/GHSA-h9vw-8pf3-5j78.json b/advisories/unreviewed/2025/05/GHSA-h9vw-8pf3-5j78/GHSA-h9vw-8pf3-5j78.json new file mode 100644 index 00000000000..cc519ad63b2 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-h9vw-8pf3-5j78/GHSA-h9vw-8pf3-5j78.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h9vw-8pf3-5j78", + "modified": "2025-05-17T15:30:25Z", + "published": "2025-05-17T15:30:25Z", + "aliases": [ + "CVE-2025-4829" + ], + "details": "A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function sub_40BE30 of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4829" + }, + { + "type": "WEB", + "url": "https://github.com/CH13hh/tmp_store_cc/blob/main/toto/7.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.309295" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.309295" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.574599" + }, + { + "type": "WEB", + "url": "https://www.totolink.net" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-17T15:15:47Z" + } +} \ No newline at end of file