netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-12 15:31:47 +00:00
parent 6b2b20ed34
commit 502a56936b
25 changed files with 384 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/01/GHSA-mvrw-4465-r2jc/GHSA-mvrw-4465-r2jc.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mvrw-4465-r2jc",
"modified": "2024-01-19T15:30:19Z",
"modified": "2025-05-12T15:30:35Z",
"published": "2024-01-16T18:31:08Z",
"aliases": [
"CVE-2021-24870"
advisories/unreviewed/2024/02/GHSA-pv4h-p8jr-6cv2/GHSA-pv4h-p8jr-6cv2.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pv4h-p8jr-6cv2",
"modified": "2024-06-10T18:30:52Z",
"modified": "2025-05-12T15:30:37Z",
"published": "2024-02-14T18:30:25Z",
"aliases": [
"CVE-2023-50868"
],
"details": "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [],
"references": [
{
@@ -112,8 +117,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-14T16:15:45Z"
advisories/unreviewed/2024/05/GHSA-cwwf-74gf-jf68/GHSA-cwwf-74gf-jf68.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-h93v-cpw2-8m3x/GHSA-h93v-cpw2-8m3x.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-hp7j-hj47-34vh/GHSA-hp7j-hj47-34vh.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hp7j-hj47-34vh",
"modified": "2024-07-03T18:42:37Z",
"modified": "2025-05-12T15:30:38Z",
"published": "2024-05-20T15:31:44Z",
"aliases": [
"CVE-2023-49330"
advisories/unreviewed/2024/05/GHSA-p689-3c5j-vchp/GHSA-p689-3c5j-vchp.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/10/GHSA-f8cp-cqvw-c2xf/GHSA-f8cp-cqvw-c2xf.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f8cp-cqvw-c2xf",
"modified": "2025-05-12T15:30:36Z",
"published": "2024-10-10T21:30:41Z",
"aliases": [
"CVE-2023-24542"
],
"details": "Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-24542"
},
{
"type": "WEB",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-428"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-14T14:15:40Z"
}
}
advisories/unreviewed/2025/04/GHSA-2823-wfgm-j3hr/GHSA-2823-wfgm-j3hr.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2823-wfgm-j3hr",
"modified": "2025-04-21T18:32:09Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-04-21T18:32:09Z",
"aliases": [
"CVE-2025-29446"
],
"details": "open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verify_connection.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-918"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-21T17:15:23Z"
advisories/unreviewed/2025/04/GHSA-5fjr-xr2p-8c46/GHSA-5fjr-xr2p-8c46.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5fjr-xr2p-8c46",
"modified": "2025-04-21T18:32:09Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-04-21T18:32:09Z",
"aliases": [
"CVE-2025-28099"
],
"details": "opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-21T17:15:23Z"
advisories/unreviewed/2025/04/GHSA-87v4-c5h4-88xg/GHSA-87v4-c5h4-88xg.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-87v4-c5h4-88xg",
"modified": "2025-04-21T18:32:09Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-04-21T18:32:09Z",
"aliases": [
"CVE-2025-28103"
],
"details": "Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-21T18:15:22Z"
advisories/unreviewed/2025/04/GHSA-v4fw-ww7x-63fp/GHSA-v4fw-ww7x-63fp.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v4fw-ww7x-63fp",
"modified": "2025-04-21T18:32:09Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-04-21T18:32:09Z",
"aliases": [
"CVE-2024-57394"
],
"details": "The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-73"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-21T18:15:18Z"
advisories/unreviewed/2025/05/GHSA-4cwh-m6gc-c4p6/GHSA-4cwh-m6gc-c4p6.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4cwh-m6gc-c4p6",
"modified": "2025-05-08T18:30:42Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-05-08T18:30:42Z",
"aliases": [
"CVE-2025-45843"
],
"details": "TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T16:15:26Z"
advisories/unreviewed/2025/05/GHSA-7q2c-3wqx-c54w/GHSA-7q2c-3wqx-c54w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7q2c-3wqx-c54w",
"modified": "2025-05-11T12:30:29Z",
"modified": "2025-05-12T15:30:42Z",
"published": "2025-05-11T12:30:29Z",
"aliases": [
"CVE-2025-4539"
@@ -38,6 +38,10 @@
{
"type": "WEB",
"url": "https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc"
},
{
"type": "WEB",
"url": "https://www.yuque.com/ba1ma0-an29k/nnxoap/dgxzuhd90e19grpg?singleDoc#%20%E3%80%8Atodesk%20program%20has%20a%20privilege%20escalation%20vulnerability%E3%80%8B"
}
],
"database_specific": {
advisories/unreviewed/2025/05/GHSA-8fqh-f3cp-hqjx/GHSA-8fqh-f3cp-hqjx.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8fqh-f3cp-hqjx",
"modified": "2025-05-12T15:30:44Z",
"published": "2025-05-12T15:30:44Z",
"aliases": [
"CVE-2025-46611"
],
"details": "Cross Site Scripting vulnerability in ARTEC EMA Mail v6.92 allows an attacker to execute arbitrary code via a crafted script.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46611"
},
{
"type": "WEB",
"url": "https://www.artec-it.com/en-us/ema.html"
},
{
"type": "WEB",
"url": "https://www.syss.de/pentest-blog/csrf-und-xss-schwachstelle-in-ema-mail-von-artec-it-solutions-syss-2025-020/-021"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-12T15:16:01Z"
}
}
advisories/unreviewed/2025/05/GHSA-99vm-2jmg-q6cj/GHSA-99vm-2jmg-q6cj.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77",
"CWE-94"
],
"severity": "CRITICAL",
advisories/unreviewed/2025/05/GHSA-f74c-m4cg-rgj3/GHSA-f74c-m4cg-rgj3.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f74c-m4cg-rgj3",
"modified": "2025-05-12T15:30:43Z",
"published": "2025-05-12T15:30:43Z",
"aliases": [
"CVE-2024-56524"
],
"details": "Radware Cloud Web Application Firewall (WAF) before 2025-05-07 allows remote attackers to bypass firewall filters by adding a special character to the request.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56524"
},
{
"type": "WEB",
"url": "https://radware.com/solutions/cloud-security"
},
{
"type": "WEB",
"url": "https://www.kb.cert.org/vuls/id/722229"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-12T15:15:58Z"
}
}
advisories/unreviewed/2025/05/GHSA-g988-pqhg-r7m5/GHSA-g988-pqhg-r7m5.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g988-pqhg-r7m5",
"modified": "2025-05-12T15:30:44Z",
"published": "2025-05-12T15:30:44Z",
"aliases": [
"CVE-2025-26841"
],
"details": "Cross Site Scripting vulnerability in WPEVEREST Everest Forms before 3.0.9 allows an attacker to execute arbitrary code via a file upload.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26841"
},
{
"type": "WEB",
"url": "https://everestforms.net"
},
{
"type": "WEB",
"url": "https://gist.github.com/knilkantha/71458e9a787157653d5603fe6880bc05"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-12T15:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-gp6q-p5qw-43q6/GHSA-gp6q-p5qw-43q6.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gp6q-p5qw-43q6",
"modified": "2025-05-12T15:30:42Z",
"published": "2025-05-12T15:30:42Z",
"aliases": [
"CVE-2025-45835"
],
"details": "A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENT_LENGTH, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-45835"
},
{
"type": "WEB",
"url": "https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Null-Pointer-Dereference-Vulnerability/tree/main/1"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-12T14:15:26Z"
}
}
advisories/unreviewed/2025/05/GHSA-hmxm-mp3w-5hrg/GHSA-hmxm-mp3w-5hrg.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hmxm-mp3w-5hrg",
"modified": "2025-05-08T18:30:42Z",
"modified": "2025-05-12T15:30:40Z",
"published": "2025-05-08T18:30:42Z",
"aliases": [
"CVE-2023-51328"
],
"details": "PHPJabbers Cleaning Business Software v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the \"c_name, name\" parameters.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-08T16:15:23Z"
advisories/unreviewed/2025/05/GHSA-m53m-r8mm-799v/GHSA-m53m-r8mm-799v.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m53m-r8mm-799v",
"modified": "2025-05-12T15:30:44Z",
"published": "2025-05-12T15:30:44Z",
"aliases": [
"CVE-2025-26846"
],
"details": "An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using the Generic Interface to update ticket metadata.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26846"
},
{
"type": "WEB",
"url": "https://www.znuny.com"
},
{
"type": "WEB",
"url": "https://www.znuny.org/en/advisories/zsa-2025-02"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-12T15:15:59Z"
}
}

Some files were not shown because too many files have changed in this diff Show More