diff --git a/advisories/unreviewed/2024/07/GHSA-2hq6-c9ph-83qr/GHSA-2hq6-c9ph-83qr.json b/advisories/unreviewed/2024/07/GHSA-2hq6-c9ph-83qr/GHSA-2hq6-c9ph-83qr.json index 79785740f5f..5fc405c79e1 100644 --- a/advisories/unreviewed/2024/07/GHSA-2hq6-c9ph-83qr/GHSA-2hq6-c9ph-83qr.json +++ b/advisories/unreviewed/2024/07/GHSA-2hq6-c9ph-83qr/GHSA-2hq6-c9ph-83qr.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-79" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2025/05/GHSA-4jhj-88x4-5xw5/GHSA-4jhj-88x4-5xw5.json b/advisories/unreviewed/2025/05/GHSA-4jhj-88x4-5xw5/GHSA-4jhj-88x4-5xw5.json index 61c0d16c230..e7b64c577d3 100644 --- a/advisories/unreviewed/2025/05/GHSA-4jhj-88x4-5xw5/GHSA-4jhj-88x4-5xw5.json +++ b/advisories/unreviewed/2025/05/GHSA-4jhj-88x4-5xw5/GHSA-4jhj-88x4-5xw5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4jhj-88x4-5xw5", - "modified": "2025-05-02T03:30:34Z", + "modified": "2025-05-02T12:32:00Z", "published": "2025-05-02T03:30:34Z", "aliases": [ "CVE-2025-4195" @@ -27,6 +27,10 @@ "type": "WEB", "url": "https://github.com/ARPANET-cybersecurity/vuldb/issues/6" }, + { + "type": "WEB", + "url": "https://github.com/XuepengZhao-insp/vuldb/issues/6" + }, { "type": "WEB", "url": "https://itsourcecode.com" diff --git a/advisories/unreviewed/2025/05/GHSA-5m4f-q4wf-8492/GHSA-5m4f-q4wf-8492.json b/advisories/unreviewed/2025/05/GHSA-5m4f-q4wf-8492/GHSA-5m4f-q4wf-8492.json new file mode 100644 index 00000000000..58996115a59 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-5m4f-q4wf-8492/GHSA-5m4f-q4wf-8492.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5m4f-q4wf-8492", + "modified": "2025-05-02T12:32:00Z", + "published": "2025-05-02T12:32:00Z", + "aliases": [ + "CVE-2025-2488" + ], + "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis Informatics SambaBox allows Cross-Site Scripting (XSS).This issue affects SambaBox: before 5.1.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2488" + }, + { + "type": "WEB", + "url": "https://sambabox.io/2025/04/14/version-5-1" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-25-0101" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T12:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-6cgp-c2gm-8g7j/GHSA-6cgp-c2gm-8g7j.json b/advisories/unreviewed/2025/05/GHSA-6cgp-c2gm-8g7j/GHSA-6cgp-c2gm-8g7j.json new file mode 100644 index 00000000000..7f007eb8246 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-6cgp-c2gm-8g7j/GHSA-6cgp-c2gm-8g7j.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6cgp-c2gm-8g7j", + "modified": "2025-05-02T12:32:00Z", + "published": "2025-05-02T12:32:00Z", + "aliases": [ + "CVE-2025-1301" + ], + "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.This issue affects Library Automation System: before 21.6.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1301" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-25-0100" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T11:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-mv35-2gcq-wgr5/GHSA-mv35-2gcq-wgr5.json b/advisories/unreviewed/2025/05/GHSA-mv35-2gcq-wgr5/GHSA-mv35-2gcq-wgr5.json new file mode 100644 index 00000000000..e2e48862f52 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-mv35-2gcq-wgr5/GHSA-mv35-2gcq-wgr5.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mv35-2gcq-wgr5", + "modified": "2025-05-02T12:32:00Z", + "published": "2025-05-02T12:32:00Z", + "aliases": [ + "CVE-2025-0072" + ], + "details": "Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.\n\nThis issue affects Valhall GPU Kernel Driver: from r29p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0072" + }, + { + "type": "WEB", + "url": "https://developer.arm.com/documentation/110465/latest" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T10:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-rj95-ccvx-j559/GHSA-rj95-ccvx-j559.json b/advisories/unreviewed/2025/05/GHSA-rj95-ccvx-j559/GHSA-rj95-ccvx-j559.json new file mode 100644 index 00000000000..d09cf1fdfcb --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-rj95-ccvx-j559/GHSA-rj95-ccvx-j559.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rj95-ccvx-j559", + "modified": "2025-05-02T12:32:00Z", + "published": "2025-05-02T12:32:00Z", + "aliases": [ + "CVE-2025-0427" + ], + "details": "Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0427" + }, + { + "type": "WEB", + "url": "https://developer.arm.com/documentation/110465/latest" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T10:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-wwmj-wfcr-vx7r/GHSA-wwmj-wfcr-vx7r.json b/advisories/unreviewed/2025/05/GHSA-wwmj-wfcr-vx7r/GHSA-wwmj-wfcr-vx7r.json new file mode 100644 index 00000000000..e608cef851b --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-wwmj-wfcr-vx7r/GHSA-wwmj-wfcr-vx7r.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wwmj-wfcr-vx7r", + "modified": "2025-05-02T12:32:00Z", + "published": "2025-05-02T12:32:00Z", + "aliases": [ + "CVE-2025-2421" + ], + "details": "Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.This issue affects SambaBox: before 5.1.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2421" + }, + { + "type": "WEB", + "url": "https://sambabox.io/2025/04/14/version-5-1" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-25-0101" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-94" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-02T12:15:15Z" + } +} \ No newline at end of file