Publish Advisories

GHSA-2hq6-c9ph-83qr
GHSA-4jhj-88x4-5xw5
GHSA-5m4f-q4wf-8492
GHSA-6cgp-c2gm-8g7j
GHSA-mv35-2gcq-wgr5
GHSA-rj95-ccvx-j559
GHSA-wwmj-wfcr-vx7r

advisories/unreviewed/2024/07/GHSA-2hq6-c9ph-83qr/GHSA-2hq6-c9ph-83qr.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2025/05/GHSA-4jhj-88x4-5xw5/GHSA-4jhj-88x4-5xw5.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4jhj-88x4-5xw5",
-  "modified": "2025-05-02T03:30:34Z",
+  "modified": "2025-05-02T12:32:00Z",
   "published": "2025-05-02T03:30:34Z",
   "aliases": [
     "CVE-2025-4195"
@@ -27,6 +27,10 @@
       "type": "WEB",
       "url": "https://github.com/ARPANET-cybersecurity/vuldb/issues/6"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/XuepengZhao-insp/vuldb/issues/6"
+    },
     {
       "type": "WEB",
       "url": "https://itsourcecode.com"

advisories/unreviewed/2025/05/GHSA-5m4f-q4wf-8492/GHSA-5m4f-q4wf-8492.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5m4f-q4wf-8492",
+  "modified": "2025-05-02T12:32:00Z",
+  "published": "2025-05-02T12:32:00Z",
+  "aliases": [
+    "CVE-2025-2488"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS).This issue affects SambaBox: before 5.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2488"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sambabox.io/2025/04/14/version-5-1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.usom.gov.tr/bildirim/tr-25-0101"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T12:15:16Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-6cgp-c2gm-8g7j/GHSA-6cgp-c2gm-8g7j.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6cgp-c2gm-8g7j",
+  "modified": "2025-05-02T12:32:00Z",
+  "published": "2025-05-02T12:32:00Z",
+  "aliases": [
+    "CVE-2025-1301"
+  ],
+  "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.This issue affects Library Automation System: before 21.6.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1301"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.usom.gov.tr/bildirim/tr-25-0100"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T11:15:46Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-mv35-2gcq-wgr5/GHSA-mv35-2gcq-wgr5.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mv35-2gcq-wgr5",
+  "modified": "2025-05-02T12:32:00Z",
+  "published": "2025-05-02T12:32:00Z",
+  "aliases": [
+    "CVE-2025-0072"
+  ],
+  "details": "Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.\n\nThis issue affects Valhall GPU Kernel Driver: from r29p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0072"
+    },
+    {
+      "type": "WEB",
+      "url": "https://developer.arm.com/documentation/110465/latest"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T10:15:15Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-rj95-ccvx-j559/GHSA-rj95-ccvx-j559.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rj95-ccvx-j559",
+  "modified": "2025-05-02T12:32:00Z",
+  "published": "2025-05-02T12:32:00Z",
+  "aliases": [
+    "CVE-2025-0427"
+  ],
+  "details": "Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0427"
+    },
+    {
+      "type": "WEB",
+      "url": "https://developer.arm.com/documentation/110465/latest"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T10:15:16Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-wwmj-wfcr-vx7r/GHSA-wwmj-wfcr-vx7r.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wwmj-wfcr-vx7r",
+  "modified": "2025-05-02T12:32:00Z",
+  "published": "2025-05-02T12:32:00Z",
+  "aliases": [
+    "CVE-2025-2421"
+  ],
+  "details": "Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.This issue affects SambaBox: before 5.1.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2421"
+    },
+    {
+      "type": "WEB",
+      "url": "https://sambabox.io/2025/04/14/version-5-1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.usom.gov.tr/bildirim/tr-25-0101"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T12:15:15Z"
+  }
+}