netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-5vpc-35f4-r8w6
GHSA-rpmj-rpgj-qmpm
GHSA-3h9j-fvqm-h724
GHSA-53fv-g4jh-r462
GHSA-6cwx-2fwm-4jvm
GHSA-7w44-cfph-xhh9
GHSA-86cq-pffv-q5h2
GHSA-c6j7-ppmc-c7vq
GHSA-cwqg-xrj3-rv38
GHSA-f888-8h5m-7xjw
GHSA-jr58-4685-v24f
GHSA-p76j-345f-qxpw
GHSA-pm93-pg55-r2jm
GHSA-q5xq-vwc2-mfrm
GHSA-q788-9r25-cm5m
GHSA-qcqm-fvf4-grpc
This commit is contained in:
advisory-database[bot]
2025-02-11 09:31:38 +00:00
parent 0a10c7b803
commit 4a4e7d52ae
16 changed files with 720 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/01/GHSA-5vpc-35f4-r8w6/GHSA-5vpc-35f4-r8w6.json
+45 -41
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vpc-35f4-r8w6",
"modified": "2025-02-10T18:30:45Z",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-01-21T21:22:49Z",
"aliases": [
"CVE-2024-11218"
@@ -103,47 +103,11 @@
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0830"
"url": "https://issues.redhat.com/browse/RHEL-67618"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0878"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0922"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0923"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1186"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1187"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1188"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1189"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1207"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-11218"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326231"
"url": "https://issues.redhat.com/browse/RHEL-67616"
},
{
"type": "PACKAGE",
@@ -151,11 +115,51 @@
},
{
"type": "WEB",
"url": "https://issues.redhat.com/browse/RHEL-67616"
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2326231"
},
{
"type": "WEB",
"url": "https://issues.redhat.com/browse/RHEL-67618"
"url": "https://access.redhat.com/security/cve/CVE-2024-11218"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1275"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1207"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1189"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1188"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1187"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1186"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0923"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0922"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0878"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:0830"
}
],
"database_specific": {
advisories/github-reviewed/2025/02/GHSA-rpmj-rpgj-qmpm/GHSA-rpmj-rpgj-qmpm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rpmj-rpgj-qmpm",
"modified": "2025-02-04T17:17:24Z",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-02-03T17:56:46Z",
"aliases": [
"CVE-2025-24898"
@@ -60,6 +60,10 @@
"type": "PACKAGE",
"url": "https://github.com/sfackler/rust-openssl"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00009.html"
},
{
"type": "WEB",
"url": "https://rustsec.org/advisories/RUSTSEC-2025-0004.html"
advisories/unreviewed/2025/02/GHSA-3h9j-fvqm-h724/GHSA-3h9j-fvqm-h724.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h9j-fvqm-h724",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-02-11T09:30:32Z",
"aliases": [
"CVE-2024-13643"
],
"details": "The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks on the backup_options() and reset_options() functions in all versions up to and including 3.17.0. This vulnerability allows authenticated attackers with Subscriber-level access and above to update and delete arbitrary option values on the WordPress site. Attackers can exploit this issue to update the default user role for registration to Administrator and enable user registration, thereby gaining administrative access to the vulnerable site. Additionally, they could delete critical options, causing errors that may disrupt the site's functionality and deny service to legitimate users.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13643"
},
{
"type": "WEB",
"url": "https://mvpthemes.com/zoxnews"
},
{
"type": "WEB",
"url": "https://themeforest.net/item/zox-news-professional-wordpress-news-magazine-theme/20381541"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4adb7436-11e6-4512-b6c9-551402909bf0?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:30Z"
}
}
advisories/unreviewed/2025/02/GHSA-53fv-g4jh-r462/GHSA-53fv-g4jh-r462.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53fv-g4jh-r462",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2024-52606"
],
"details": "SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52606"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm"
},
{
"type": "WEB",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52606"
}
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:31Z"
}
}
advisories/unreviewed/2025/02/GHSA-6cwx-2fwm-4jvm/GHSA-6cwx-2fwm-4jvm.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cwx-2fwm-4jvm",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-02-11T09:30:32Z",
"aliases": [
"CVE-2025-1178"
],
"details": "A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1178"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=15914"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32638"
},
{
"type": "WEB",
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.295081"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.295081"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.495369"
},
{
"type": "WEB",
"url": "https://www.gnu.org"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T07:15:29Z"
}
}
advisories/unreviewed/2025/02/GHSA-7w44-cfph-xhh9/GHSA-7w44-cfph-xhh9.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7w44-cfph-xhh9",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2024-28989"
],
"details": "SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28989"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-5_release_notes.htm"
},
{
"type": "WEB",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28989"
}
],
"database_specific": {
"cwe_ids": [
"CWE-321"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:30Z"
}
}
advisories/unreviewed/2025/02/GHSA-86cq-pffv-q5h2/GHSA-86cq-pffv-q5h2.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-86cq-pffv-q5h2",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2025-1182"
],
"details": "A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1182"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=15919"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32644"
},
{
"type": "WEB",
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.295086"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.295086"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.495407"
},
{
"type": "WEB",
"url": "https://www.gnu.org"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T09:15:09Z"
}
}
advisories/unreviewed/2025/02/GHSA-c6j7-ppmc-c7vq/GHSA-c6j7-ppmc-c7vq.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c6j7-ppmc-c7vq",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:32Z",
"aliases": [
"CVE-2024-45718"
],
"details": "Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45718"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/kss/content/release_notes/kssng_1-3-1_release_notes.htm"
},
{
"type": "WEB",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45718"
}
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:30Z"
}
}
advisories/unreviewed/2025/02/GHSA-cwqg-xrj3-rv38/GHSA-cwqg-xrj3-rv38.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cwqg-xrj3-rv38",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2024-52612"
],
"details": "SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient sanitation of input parameters. This vulnerability requires authentication by a high- privileged account to be exploitable.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52612"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:31Z"
}
}
advisories/unreviewed/2025/02/GHSA-f888-8h5m-7xjw/GHSA-f888-8h5m-7xjw.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f888-8h5m-7xjw",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-02-11T09:30:32Z",
"aliases": [
"CVE-2025-0181"
],
"details": "The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.7. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0181"
},
{
"type": "WEB",
"url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d722ec8d-bfca-4da1-8eb0-8d33735c5e44?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-288"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T07:15:29Z"
}
}
advisories/unreviewed/2025/02/GHSA-jr58-4685-v24f/GHSA-jr58-4685-v24f.json
+60
View File
@@ -0,0 +1,60 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jr58-4685-v24f",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2025-1180"
],
"details": "A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1180"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=15917"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32642"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.295083"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.295083"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.495381"
},
{
"type": "WEB",
"url": "https://www.gnu.org"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:31Z"
}
}
advisories/unreviewed/2025/02/GHSA-p76j-345f-qxpw/GHSA-p76j-345f-qxpw.json
+34
View File
@@ -0,0 +1,34 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p76j-345f-qxpw",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2025-0589"
],
"details": "In affected versions of Octopus Deploy where customers are using Active Directory for authentication it was possible for an unauthenticated user to make an API request against two endpoints which would retrieve some data from the associated Active Directory. The requests when crafted correctly would return specific information from user profiles (Email address/UPN and Display name) from one endpoint and group information ( Group ID and Display name) from the other. This vulnerability does not expose data within the Octopus Server product itself.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0589"
},
{
"type": "WEB",
"url": "https://advisories.octopus.com/post/2025/sa2025-01"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T09:15:09Z"
}
}
advisories/unreviewed/2025/02/GHSA-pm93-pg55-r2jm/GHSA-pm93-pg55-r2jm.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pm93-pg55-r2jm",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2025-1181"
],
"details": "A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1181"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=15918"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32643"
},
{
"type": "WEB",
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.295084"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.295084"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.495402"
},
{
"type": "WEB",
"url": "https://www.gnu.org"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:31Z"
}
}
advisories/unreviewed/2025/02/GHSA-q5xq-vwc2-mfrm/GHSA-q5xq-vwc2-mfrm.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q5xq-vwc2-mfrm",
"modified": "2025-02-11T09:30:32Z",
"published": "2025-02-11T09:30:32Z",
"aliases": [
"CVE-2025-0180"
],
"details": "The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0180"
},
{
"type": "WEB",
"url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d7140a6e-a528-428e-850e-5e4a481c5d7d?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T07:15:29Z"
}
}
advisories/unreviewed/2025/02/GHSA-q788-9r25-cm5m/GHSA-q788-9r25-cm5m.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q788-9r25-cm5m",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2024-52611"
],
"details": "The SolarWinds Platform is vulnerable to an information disclosure vulnerability through an error message. While the data does not provide anything sensitive, the information could assist an attacker in other malicious actions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52611"
},
{
"type": "WEB",
"url": "https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2025-1_release_notes.htm"
},
{
"type": "WEB",
"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-52611"
}
],
"database_specific": {
"cwe_ids": [
"CWE-209"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T08:15:31Z"
}
}
advisories/unreviewed/2025/02/GHSA-qcqm-fvf4-grpc/GHSA-qcqm-fvf4-grpc.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qcqm-fvf4-grpc",
"modified": "2025-02-11T09:30:33Z",
"published": "2025-02-11T09:30:33Z",
"aliases": [
"CVE-2025-1179"
],
"details": "A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that \"[t]his bug has been fixed at some point between the 2.43 and 2.44 releases\".",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1179"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=15915"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32640"
},
{
"type": "WEB",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32640#c1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.295082"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.295082"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.495376"
},
{
"type": "WEB",
"url": "https://www.gnu.org"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-11T07:15:30Z"
}
}