netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-04-18 18:32:32 +00:00
parent dcdca03014
commit 4ad3f8e983
37 changed files with 539 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/12/GHSA-36pv-3r3h-xrc8/GHSA-36pv-3r3h-xrc8.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-610"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/12/GHSA-4377-hq3v-hgqh/GHSA-4377-hq3v-hgqh.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-610"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/12/GHSA-57rw-93xc-4hpv/GHSA-57rw-93xc-4hpv.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-668"
"CWE-668",
"CWE-862"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/12/GHSA-5g7j-9r76-23cc/GHSA-5g7j-9r76-23cc.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-102",
"CWE-1021"
],
"severity": "HIGH",
advisories/unreviewed/2022/12/GHSA-6973-4pp3-gvj6/GHSA-6973-4pp3-gvj6.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
"CWE-190",
"CWE-191"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/12/GHSA-hjjq-jc6w-mqf5/GHSA-hjjq-jc6w-mqf5.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-863"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/12/GHSA-jx7f-5pph-phx8/GHSA-jx7f-5pph-phx8.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/12/GHSA-vq94-fv28-3h2v/GHSA-vq94-fv28-3h2v.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-451"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-45rx-4g83-g5mj/GHSA-45rx-4g83-g5mj.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-9r5m-gmgr-m7qh/GHSA-9r5m-gmgr-m7qh.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9r5m-gmgr-m7qh",
"modified": "2024-04-17T12:32:03Z",
"modified": "2025-04-18T18:31:18Z",
"published": "2024-04-17T12:32:03Z",
"aliases": [
"CVE-2024-32505"
],
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Elements kit Elementor addons allows Stored XSS.This issue affects Elements kit Elementor addons: from n/a through 3.0.6.\n\n",
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Elements kit Elementor addons allows Stored XSS.This issue affects Elements kit Elementor addons: from n/a through 3.0.6.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/05/GHSA-46pr-93vx-57gx/GHSA-46pr-93vx-57gx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-46pr-93vx-57gx",
"modified": "2024-05-17T09:31:00Z",
"modified": "2025-04-18T18:31:19Z",
"published": "2024-05-17T09:31:00Z",
"aliases": [
"CVE-2024-31351"
advisories/unreviewed/2024/05/GHSA-6fj9-cq25-9x7h/GHSA-6fj9-cq25-9x7h.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-rrv6-pjjr-4r3x/GHSA-rrv6-pjjr-4r3x.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-22"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-x73j-6c5w-6h22/GHSA-x73j-6c5w-6h22.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x73j-6c5w-6h22",
"modified": "2024-12-06T18:30:45Z",
"modified": "2025-04-18T18:31:20Z",
"published": "2024-12-05T18:31:03Z",
"aliases": [
"CVE-2024-11158"
advisories/unreviewed/2025/04/GHSA-27ww-388c-hfhf/GHSA-27ww-388c-hfhf.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27ww-388c-hfhf",
"modified": "2025-04-18T00:30:43Z",
"modified": "2025-04-18T18:31:23Z",
"published": "2025-04-18T00:30:43Z",
"aliases": [
"CVE-2025-29457"
],
"details": "An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-17T22:15:15Z"
advisories/unreviewed/2025/04/GHSA-3996-4m5r-mmwf/GHSA-3996-4m5r-mmwf.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3996-4m5r-mmwf",
"modified": "2025-04-18T00:30:43Z",
"modified": "2025-04-18T18:31:23Z",
"published": "2025-04-18T00:30:43Z",
"aliases": [
"CVE-2025-29458"
],
"details": "An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-17T22:15:15Z"
advisories/unreviewed/2025/04/GHSA-3c8w-xm49-2w5f/GHSA-3c8w-xm49-2w5f.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3c8w-xm49-2w5f",
"modified": "2025-04-17T21:31:05Z",
"modified": "2025-04-18T18:31:23Z",
"published": "2025-04-17T21:31:05Z",
"aliases": [
"CVE-2025-29452"
],
"details": "An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-17T21:15:50Z"
advisories/unreviewed/2025/04/GHSA-485p-gmh5-r688/GHSA-485p-gmh5-r688.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-485p-gmh5-r688",
"modified": "2025-04-18T18:31:24Z",
"published": "2025-04-18T18:31:24Z",
"aliases": [
"CVE-2025-28236"
],
"details": "Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-28236"
},
{
"type": "WEB",
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28236"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-18T18:15:46Z"
}
}
advisories/unreviewed/2025/04/GHSA-62c2-pjmr-4wx5/GHSA-62c2-pjmr-4wx5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-62c2-pjmr-4wx5",
"modified": "2025-04-17T21:31:05Z",
"modified": "2025-04-18T18:31:23Z",
"published": "2025-04-17T21:31:05Z",
"aliases": [
"CVE-2025-29451"
],
"details": "An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-17T21:15:50Z"
advisories/unreviewed/2025/04/GHSA-7jpf-hrrg-gcj2/GHSA-7jpf-hrrg-gcj2.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7jpf-hrrg-gcj2",
"modified": "2025-04-18T18:31:24Z",
"published": "2025-04-18T18:31:24Z",
"aliases": [
"CVE-2025-28233"
],
"details": "Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-28233"
},
{
"type": "WEB",
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28233"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-18T18:15:45Z"
}
}

Some files were not shown because too many files have changed in this diff Show More