Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-03-11 15:32:29 +00:00
parent 6b85ee9435
commit 4d173f6878
69 changed files with 1551 additions and 73 deletions
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-269"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -49,7 +49,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jc3f-vxgp-6jw9",
-  "modified": "2023-03-06T18:30:22Z",
+  "modified": "2025-03-11T15:30:53Z",
  "published": "2023-02-28T21:30:16Z",
  "aliases": [
    "CVE-2023-27372"
@@ -31,6 +31,14 @@
      "type": "WEB",
      "url": "https://git.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409d"
    },
+    {
+      "type": "WEB",
+      "url": "https://packetstorm.news/files/id/171921"
+    },
+    {
+      "type": "WEB",
+      "url": "https://packetstorm.news/files/id/173044"
+    },
    {
      "type": "WEB",
      "url": "https://www.debian.org/security/2023/dsa-5367"
@@ -45,7 +53,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-502"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -41,7 +41,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-200"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -45,7 +45,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-200"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-722j-2mgg-rgc3",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2024-03-13T18:31:32Z",
  "aliases": [
    "CVE-2024-0828"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-77cp-583r-8x6c",
-  "modified": "2024-03-13T18:31:33Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2024-03-13T18:31:33Z",
  "aliases": [
    "CVE-2024-1158"
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-639"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-962f-jpc6-g76g",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2024-03-13T18:31:32Z",
  "aliases": [
    "CVE-2024-0898"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-352"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xvv7-wqpf-2qrv",
-  "modified": "2024-03-13T18:31:32Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2024-03-13T18:31:32Z",
  "aliases": [
    "CVE-2024-0827"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-352"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7m8c-9m95-h39f",
-  "modified": "2025-02-20T06:31:03Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2025-02-20T06:31:03Z",
  "aliases": [
    "CVE-2024-49355"
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-116",
      "CWE-117"
    ],
    "severity": "MODERATE",
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-79",
      "CWE-80"
    ],
    "severity": "MODERATE",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-c5cj-hmh6-45pv",
-  "modified": "2025-02-20T06:31:03Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2025-02-20T06:31:03Z",
  "aliases": [
    "CVE-2024-49782"
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-295",
      "CWE-297"
    ],
    "severity": "MODERATE",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qj8v-rq4h-7fwh",
-  "modified": "2025-02-20T12:31:13Z",
+  "modified": "2025-03-11T15:30:57Z",
  "published": "2025-02-20T06:31:03Z",
  "aliases": [
    "CVE-2024-49780"
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qxm-j67j-mv87",
+  "modified": "2025-03-11T15:31:00Z",
+  "published": "2025-03-11T15:31:00Z",
+  "aliases": [
+    "CVE-2025-2195"
+  ],
+  "details": "A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is the function rename of the file /admin/file/rename.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument name/path leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2195"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/IceFoxH/VULN/issues/4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.299220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.299220"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.511733"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-03-11T14:15:27Z"
+  }
+}
--- a/Show More
+++ b/Show More