diff --git a/advisories/unreviewed/2023/03/GHSA-4j9m-52h7-f59q/GHSA-4j9m-52h7-f59q.json b/advisories/unreviewed/2023/03/GHSA-4j9m-52h7-f59q/GHSA-4j9m-52h7-f59q.json index 04baa9ed960..2caeb8905dd 100644 --- a/advisories/unreviewed/2023/03/GHSA-4j9m-52h7-f59q/GHSA-4j9m-52h7-f59q.json +++ b/advisories/unreviewed/2023/03/GHSA-4j9m-52h7-f59q/GHSA-4j9m-52h7-f59q.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-250" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-64g2-hhj4-h788/GHSA-64g2-hhj4-h788.json b/advisories/unreviewed/2023/03/GHSA-64g2-hhj4-h788/GHSA-64g2-hhj4-h788.json index 9dab201c1ff..af1ed28dabb 100644 --- a/advisories/unreviewed/2023/03/GHSA-64g2-hhj4-h788/GHSA-64g2-hhj4-h788.json +++ b/advisories/unreviewed/2023/03/GHSA-64g2-hhj4-h788/GHSA-64g2-hhj4-h788.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-64g2-hhj4-h788", - "modified": "2023-03-17T06:30:34Z", + "modified": "2025-03-03T18:31:18Z", "published": "2023-03-13T15:30:17Z", "aliases": [ "CVE-2023-26076" diff --git a/advisories/unreviewed/2023/10/GHSA-hh4p-ff9x-4g5c/GHSA-hh4p-ff9x-4g5c.json b/advisories/unreviewed/2023/10/GHSA-hh4p-ff9x-4g5c/GHSA-hh4p-ff9x-4g5c.json index b69f0f401bb..8f1ca88cce0 100644 --- a/advisories/unreviewed/2023/10/GHSA-hh4p-ff9x-4g5c/GHSA-hh4p-ff9x-4g5c.json +++ b/advisories/unreviewed/2023/10/GHSA-hh4p-ff9x-4g5c/GHSA-hh4p-ff9x-4g5c.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-hh4p-ff9x-4g5c", - "modified": "2024-04-04T08:16:10Z", + "modified": "2025-03-03T18:31:18Z", "published": "2023-10-04T12:30:14Z", "aliases": [ "CVE-2023-4997" ], - "details": "Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.\n", + "details": "Improper authorisation of regular users in ProIntegra Uptime DC software (versions below 2.0.0.33940) allows them to change passwords of all other users including administrators leading to a privilege escalation.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/unreviewed/2024/03/GHSA-627x-567f-x2pf/GHSA-627x-567f-x2pf.json b/advisories/unreviewed/2024/03/GHSA-627x-567f-x2pf/GHSA-627x-567f-x2pf.json index 295b50850ad..ac081ddaf3e 100644 --- a/advisories/unreviewed/2024/03/GHSA-627x-567f-x2pf/GHSA-627x-567f-x2pf.json +++ b/advisories/unreviewed/2024/03/GHSA-627x-567f-x2pf/GHSA-627x-567f-x2pf.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-627x-567f-x2pf", - "modified": "2024-03-18T12:30:35Z", + "modified": "2025-03-03T18:31:20Z", "published": "2024-03-18T12:30:35Z", "aliases": [ "CVE-2024-26632" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix iterating over an empty bio with bio_for_each_folio_all\n\nIf the bio contains no data, bio_first_folio() calls page_folio() on a\nNULL pointer and oopses. Move the test that we've reached the end of\nthe bio from bio_next_folio() to bio_first_folio().\n\n[axboe: add unlikely() to error case]", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-18T11:15:09Z" diff --git a/advisories/unreviewed/2024/03/GHSA-q5g9-gxxp-qxh7/GHSA-q5g9-gxxp-qxh7.json b/advisories/unreviewed/2024/03/GHSA-q5g9-gxxp-qxh7/GHSA-q5g9-gxxp-qxh7.json index 19a5e8046ab..a0e799ccde7 100644 --- a/advisories/unreviewed/2024/03/GHSA-q5g9-gxxp-qxh7/GHSA-q5g9-gxxp-qxh7.json +++ b/advisories/unreviewed/2024/03/GHSA-q5g9-gxxp-qxh7/GHSA-q5g9-gxxp-qxh7.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-q5g9-gxxp-qxh7", - "modified": "2024-03-25T12:30:52Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-03-25T12:30:52Z", "aliases": [ "CVE-2021-47169" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nserial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'\n\nIn 'rp2_probe', the driver registers 'rp2_uart_interrupt' then calls\n'rp2_fw_cb' through 'request_firmware_nowait'. In 'rp2_fw_cb', if the\nfirmware don't exists, function just return without initializing ports\nof 'rp2_card'. But now the interrupt handler function has been\nregistered, and when an interrupt comes, 'rp2_uart_interrupt' may access\nthose ports then causing NULL pointer dereference or other bugs.\n\nBecause the driver does some initialization work in 'rp2_fw_cb', in\norder to make the driver ready to handle interrupts, 'request_firmware'\nshould be used instead of asynchronous 'request_firmware_nowait'.\n\nThis report reveals it:\n\nINFO: trying to register non-static key.\nthe code is fine but needs lockdep annotation.\nturning off the locking correctness validator.\nCPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-\ngc9ba5276e321-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0xec/0x156 lib/dump_stack.c:118\n assign_lock_key kernel/locking/lockdep.c:727 [inline]\n register_lock_class+0x14e5/0x1ba0 kernel/locking/lockdep.c:753\n __lock_acquire+0x187/0x3750 kernel/locking/lockdep.c:3303\n lock_acquire+0x124/0x340 kernel/locking/lockdep.c:3907\n __raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]\n _raw_spin_lock+0x32/0x50 kernel/locking/spinlock.c:144\n spin_lock include/linux/spinlock.h:329 [inline]\n rp2_ch_interrupt drivers/tty/serial/rp2.c:466 [inline]\n rp2_asic_interrupt.isra.9+0x15d/0x990 drivers/tty/serial/rp2.c:493\n rp2_uart_interrupt+0x49/0xe0 drivers/tty/serial/rp2.c:504\n __handle_irq_event_percpu+0xfb/0x770 kernel/irq/handle.c:149\n handle_irq_event_percpu+0x79/0x150 kernel/irq/handle.c:189\n handle_irq_event+0xac/0x140 kernel/irq/handle.c:206\n handle_fasteoi_irq+0x232/0x5c0 kernel/irq/chip.c:725\n generic_handle_irq_desc include/linux/irqdesc.h:155 [inline]\n handle_irq+0x230/0x3a0 arch/x86/kernel/irq_64.c:87\n do_IRQ+0xa7/0x1e0 arch/x86/kernel/irq.c:247\n common_interrupt+0xf/0xf arch/x86/entry/entry_64.S:670\n \nRIP: 0010:native_safe_halt+0x28/0x30 arch/x86/include/asm/irqflags.h:61\nCode: 00 00 55 be 04 00 00 00 48 c7 c7 00 c2 2f 8c 48 89 e5 e8 fb 31 e7 f8\n8b 05 75 af 8d 03 85 c0 7e 07 0f 00 2d 8a 61 65 00 fb f4 <5d> c3 90 90 90\n90 90 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41\nRSP: 0018:ffff88806b71fcc8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffffde\nRAX: 0000000000000000 RBX: ffffffff8bde7e48 RCX: ffffffff88a21285\nRDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8c2fc200\nRBP: ffff88806b71fcc8 R08: fffffbfff185f840 R09: fffffbfff185f840\nR10: 0000000000000001 R11: fffffbfff185f840 R12: 0000000000000002\nR13: ffffffff8bea18a0 R14: 0000000000000000 R15: 0000000000000000\n arch_safe_halt arch/x86/include/asm/paravirt.h:94 [inline]\n default_idle+0x6f/0x360 arch/x86/kernel/process.c:557\n arch_cpu_idle+0xf/0x20 arch/x86/kernel/process.c:548\n default_idle_call+0x3b/0x60 kernel/sched/idle.c:93\n cpuidle_idle_call kernel/sched/idle.c:153 [inline]\n do_idle+0x2ab/0x3c0 kernel/sched/idle.c:263\n cpu_startup_entry+0xcb/0xe0 kernel/sched/idle.c:369\n start_secondary+0x3b8/0x4e0 arch/x86/kernel/smpboot.c:271\n secondary_startup_64+0xa4/0xb0 arch/x86/kernel/head_64.S:243\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000010\nPGD 8000000056d27067 P4D 8000000056d27067 PUD 56d28067 PMD 0\nOops: 0000 [#1] PREEMPT SMP KASAN PTI\nCPU: 2 PID: 0 Comm: swapper/2 Not tainted 4.19.177-gdba4159c14ef-dirty #45\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-\ngc9ba5276e321-prebuilt.qemu.org 04/01/2014\nRIP: 0010:readl arch/x86/include/asm/io.h:59 [inline]\nRIP: 0010:rp2_ch_interrupt drivers/tty/serial/rp2.c:472 [inline]\nRIP: 0010:rp2_asic_interrupt.isra.9+0x181/0x990 drivers/tty/serial/rp2.c:\n493\nCo\n---truncated---", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -48,8 +53,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-25T10:15:08Z" diff --git a/advisories/unreviewed/2024/03/GHSA-rfpv-q7vr-v94r/GHSA-rfpv-q7vr-v94r.json b/advisories/unreviewed/2024/03/GHSA-rfpv-q7vr-v94r/GHSA-rfpv-q7vr-v94r.json index 9c12c52c3e6..4a7a8735f85 100644 --- a/advisories/unreviewed/2024/03/GHSA-rfpv-q7vr-v94r/GHSA-rfpv-q7vr-v94r.json +++ b/advisories/unreviewed/2024/03/GHSA-rfpv-q7vr-v94r/GHSA-rfpv-q7vr-v94r.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rfpv-q7vr-v94r", - "modified": "2024-03-25T12:30:52Z", + "modified": "2025-03-03T18:31:20Z", "published": "2024-03-25T12:30:52Z", "aliases": [ "CVE-2021-47165" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/meson: fix shutdown crash when component not probed\n\nWhen main component is not probed, by example when the dw-hdmi module is\nnot loaded yet or in probe defer, the following crash appears on shutdown:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000038\n...\npc : meson_drv_shutdown+0x24/0x50\nlr : platform_drv_shutdown+0x20/0x30\n...\nCall trace:\nmeson_drv_shutdown+0x24/0x50\nplatform_drv_shutdown+0x20/0x30\ndevice_shutdown+0x158/0x360\nkernel_restart_prepare+0x38/0x48\nkernel_restart+0x18/0x68\n__do_sys_reboot+0x224/0x250\n__arm64_sys_reboot+0x24/0x30\n...\n\nSimply check if the priv struct has been allocated before using it.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -40,8 +45,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-25T10:15:08Z" diff --git a/advisories/unreviewed/2024/04/GHSA-gcr9-247m-6cpp/GHSA-gcr9-247m-6cpp.json b/advisories/unreviewed/2024/04/GHSA-gcr9-247m-6cpp/GHSA-gcr9-247m-6cpp.json index 2ba14bac9ca..8ce0976222e 100644 --- a/advisories/unreviewed/2024/04/GHSA-gcr9-247m-6cpp/GHSA-gcr9-247m-6cpp.json +++ b/advisories/unreviewed/2024/04/GHSA-gcr9-247m-6cpp/GHSA-gcr9-247m-6cpp.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-gcr9-247m-6cpp", - "modified": "2024-04-03T18:30:42Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-04-03T18:30:42Z", "aliases": [ "CVE-2024-26760" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: pscsi: Fix bio_put() for error case\n\nAs of commit 066ff571011d (\"block: turn bio_kmalloc into a simple kmalloc\nwrapper\"), a bio allocated by bio_kmalloc() must be freed by bio_uninit()\nand kfree(). That is not done properly for the error case, hitting WARN and\nNULL pointer dereference in bio_free().", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-03T17:15:52Z" diff --git a/advisories/unreviewed/2024/04/GHSA-qg9h-x99x-fcvh/GHSA-qg9h-x99x-fcvh.json b/advisories/unreviewed/2024/04/GHSA-qg9h-x99x-fcvh/GHSA-qg9h-x99x-fcvh.json index a0df32a6002..221107277e5 100644 --- a/advisories/unreviewed/2024/04/GHSA-qg9h-x99x-fcvh/GHSA-qg9h-x99x-fcvh.json +++ b/advisories/unreviewed/2024/04/GHSA-qg9h-x99x-fcvh/GHSA-qg9h-x99x-fcvh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-qg9h-x99x-fcvh", - "modified": "2024-06-26T00:31:35Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-04-02T09:30:41Z", "aliases": [ "CVE-2024-26665" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntunnels: fix out of bounds access when building IPv6 PMTU error\n\nIf the ICMPv6 error is built from a non-linear skb we get the following\nsplat,\n\n BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240\n Read of size 4 at addr ffff88811d402c80 by task netperf/820\n CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543\n ...\n kasan_report+0xd8/0x110\n do_csum+0x220/0x240\n csum_partial+0xc/0x20\n skb_tunnel_check_pmtu+0xeb9/0x3280\n vxlan_xmit_one+0x14c2/0x4080\n vxlan_xmit+0xf61/0x5c00\n dev_hard_start_xmit+0xfb/0x510\n __dev_queue_xmit+0x7cd/0x32a0\n br_dev_queue_push_xmit+0x39d/0x6a0\n\nUse skb_checksum instead of csum_partial who cannot deal with non-linear\nSKBs.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -44,8 +49,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-02T07:15:43Z" diff --git a/advisories/unreviewed/2024/04/GHSA-rw5p-44jv-r4x7/GHSA-rw5p-44jv-r4x7.json b/advisories/unreviewed/2024/04/GHSA-rw5p-44jv-r4x7/GHSA-rw5p-44jv-r4x7.json index 1045ed9ac59..462486f1177 100644 --- a/advisories/unreviewed/2024/04/GHSA-rw5p-44jv-r4x7/GHSA-rw5p-44jv-r4x7.json +++ b/advisories/unreviewed/2024/04/GHSA-rw5p-44jv-r4x7/GHSA-rw5p-44jv-r4x7.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rw5p-44jv-r4x7", - "modified": "2024-04-02T09:30:40Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-04-02T09:30:40Z", "aliases": [ "CVE-2024-26660" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Implement bounds check for stream encoder creation in DCN301\n\n'stream_enc_regs' array is an array of dcn10_stream_enc_registers\nstructures. The array is initialized with four elements, corresponding\nto the four calls to stream_enc_regs() in the array initializer. This\nmeans that valid indices for this array are 0, 1, 2, and 3.\n\nThe error message 'stream_enc_regs' 4 <= 5 below, is indicating that\nthere is an attempt to access this array with an index of 5, which is\nout of bounds. This could lead to undefined behavior\n\nHere, eng_id is used as an index to access the stream_enc_regs array. If\neng_id is 5, this would result in an out-of-bounds access on the\nstream_enc_regs array.\n\nThus fixing Buffer overflow error in dcn301_stream_encoder_create\nreported by Smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn301/dcn301_resource.c:1011 dcn301_stream_encoder_create() error: buffer overflow 'stream_enc_regs' 4 <= 5", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-02T07:15:43Z" diff --git a/advisories/unreviewed/2024/05/GHSA-2xxp-mhvm-26p5/GHSA-2xxp-mhvm-26p5.json b/advisories/unreviewed/2024/05/GHSA-2xxp-mhvm-26p5/GHSA-2xxp-mhvm-26p5.json index b5975f3a203..58e857e8bab 100644 --- a/advisories/unreviewed/2024/05/GHSA-2xxp-mhvm-26p5/GHSA-2xxp-mhvm-26p5.json +++ b/advisories/unreviewed/2024/05/GHSA-2xxp-mhvm-26p5/GHSA-2xxp-mhvm-26p5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2xxp-mhvm-26p5", - "modified": "2024-05-17T21:31:47Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-05-17T21:31:47Z", "aliases": [ "CVE-2024-5064" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [], diff --git a/advisories/unreviewed/2024/05/GHSA-454p-4wfm-4wpx/GHSA-454p-4wfm-4wpx.json b/advisories/unreviewed/2024/05/GHSA-454p-4wfm-4wpx/GHSA-454p-4wfm-4wpx.json index b5d4350856d..f527d3edf34 100644 --- a/advisories/unreviewed/2024/05/GHSA-454p-4wfm-4wpx/GHSA-454p-4wfm-4wpx.json +++ b/advisories/unreviewed/2024/05/GHSA-454p-4wfm-4wpx/GHSA-454p-4wfm-4wpx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-454p-4wfm-4wpx", - "modified": "2024-05-17T21:31:47Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-05-17T21:31:47Z", "aliases": [ "CVE-2024-5065" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [], diff --git a/advisories/unreviewed/2024/05/GHSA-4g6g-5g88-76v5/GHSA-4g6g-5g88-76v5.json b/advisories/unreviewed/2024/05/GHSA-4g6g-5g88-76v5/GHSA-4g6g-5g88-76v5.json index f0a7d2a2d58..c218a27d525 100644 --- a/advisories/unreviewed/2024/05/GHSA-4g6g-5g88-76v5/GHSA-4g6g-5g88-76v5.json +++ b/advisories/unreviewed/2024/05/GHSA-4g6g-5g88-76v5/GHSA-4g6g-5g88-76v5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4g6g-5g88-76v5", - "modified": "2024-05-17T21:31:47Z", + "modified": "2025-03-03T18:31:22Z", "published": "2024-05-17T21:31:47Z", "aliases": [ "CVE-2024-5066" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [], diff --git a/advisories/unreviewed/2024/05/GHSA-97xm-5mr2-683x/GHSA-97xm-5mr2-683x.json b/advisories/unreviewed/2024/05/GHSA-97xm-5mr2-683x/GHSA-97xm-5mr2-683x.json index d66f0269f86..5cacc782194 100644 --- a/advisories/unreviewed/2024/05/GHSA-97xm-5mr2-683x/GHSA-97xm-5mr2-683x.json +++ b/advisories/unreviewed/2024/05/GHSA-97xm-5mr2-683x/GHSA-97xm-5mr2-683x.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-97xm-5mr2-683x", - "modified": "2024-05-17T15:31:11Z", + "modified": "2025-03-03T18:31:21Z", "published": "2024-05-17T15:31:11Z", "aliases": [ "CVE-2024-5048" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [], diff --git a/advisories/unreviewed/2024/09/GHSA-wv89-8x46-8266/GHSA-wv89-8x46-8266.json b/advisories/unreviewed/2024/09/GHSA-wv89-8x46-8266/GHSA-wv89-8x46-8266.json index 1ceab1c9486..f772b6a153d 100644 --- a/advisories/unreviewed/2024/09/GHSA-wv89-8x46-8266/GHSA-wv89-8x46-8266.json +++ b/advisories/unreviewed/2024/09/GHSA-wv89-8x46-8266/GHSA-wv89-8x46-8266.json @@ -46,6 +46,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-119", "CWE-120" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2025/02/GHSA-2c2p-jp6r-5757/GHSA-2c2p-jp6r-5757.json b/advisories/unreviewed/2025/02/GHSA-2c2p-jp6r-5757/GHSA-2c2p-jp6r-5757.json index 347f496b1b4..be234181d11 100644 --- a/advisories/unreviewed/2025/02/GHSA-2c2p-jp6r-5757/GHSA-2c2p-jp6r-5757.json +++ b/advisories/unreviewed/2025/02/GHSA-2c2p-jp6r-5757/GHSA-2c2p-jp6r-5757.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-2c2p-jp6r-5757", - "modified": "2025-02-27T21:32:18Z", + "modified": "2025-03-03T18:31:25Z", "published": "2025-02-27T21:32:18Z", "aliases": [ "CVE-2024-55160" ], "details": "GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/operLog/list.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T21:15:37Z" diff --git a/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json b/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json index 3910c298266..30c1560971f 100644 --- a/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json +++ b/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gghq-qp34-gqg8", - "modified": "2025-03-03T12:30:31Z", + "modified": "2025-03-03T18:31:25Z", "published": "2025-02-12T15:32:02Z", "aliases": [ "CVE-2025-1244" @@ -47,6 +47,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2025:2022" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2025:2157" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2025-1244" diff --git a/advisories/unreviewed/2025/02/GHSA-jh7f-g4j5-2f7h/GHSA-jh7f-g4j5-2f7h.json b/advisories/unreviewed/2025/02/GHSA-jh7f-g4j5-2f7h/GHSA-jh7f-g4j5-2f7h.json index b0c529e3c3c..b6c458b23a4 100644 --- a/advisories/unreviewed/2025/02/GHSA-jh7f-g4j5-2f7h/GHSA-jh7f-g4j5-2f7h.json +++ b/advisories/unreviewed/2025/02/GHSA-jh7f-g4j5-2f7h/GHSA-jh7f-g4j5-2f7h.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-jh7f-g4j5-2f7h", - "modified": "2025-02-27T21:32:16Z", + "modified": "2025-03-03T18:31:25Z", "published": "2025-02-27T21:32:16Z", "aliases": [ "CVE-2024-54957" ], "details": "Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permissions. This vulnerability allows an attacker to craft a malicious link that redirects users to an arbitrary external URL without their consent.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -24,8 +29,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-601" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T20:16:01Z" diff --git a/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json b/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json index 14efa6de16b..eba82e61359 100644 --- a/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json +++ b/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mrrq-63xh-fccm", - "modified": "2025-02-10T21:31:39Z", + "modified": "2025-03-03T18:31:23Z", "published": "2025-02-10T21:31:39Z", "aliases": [ "CVE-2025-1002" diff --git a/advisories/unreviewed/2025/02/GHSA-rjgv-6mwj-prq2/GHSA-rjgv-6mwj-prq2.json b/advisories/unreviewed/2025/02/GHSA-rjgv-6mwj-prq2/GHSA-rjgv-6mwj-prq2.json index efce41d479f..2c02c7e9f4a 100644 --- a/advisories/unreviewed/2025/02/GHSA-rjgv-6mwj-prq2/GHSA-rjgv-6mwj-prq2.json +++ b/advisories/unreviewed/2025/02/GHSA-rjgv-6mwj-prq2/GHSA-rjgv-6mwj-prq2.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rjgv-6mwj-prq2", - "modified": "2025-02-26T18:30:38Z", + "modified": "2025-03-03T18:31:25Z", "published": "2025-02-26T00:32:19Z", "aliases": [ "CVE-2025-22211" ], "details": "A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -27,7 +32,7 @@ "cwe_ids": [ "CWE-89" ], - "severity": null, + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-25T22:15:15Z" diff --git a/advisories/unreviewed/2025/02/GHSA-rrx5-mh35-jx5q/GHSA-rrx5-mh35-jx5q.json b/advisories/unreviewed/2025/02/GHSA-rrx5-mh35-jx5q/GHSA-rrx5-mh35-jx5q.json index ec473c7b917..d5a747be741 100644 --- a/advisories/unreviewed/2025/02/GHSA-rrx5-mh35-jx5q/GHSA-rrx5-mh35-jx5q.json +++ b/advisories/unreviewed/2025/02/GHSA-rrx5-mh35-jx5q/GHSA-rrx5-mh35-jx5q.json @@ -46,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-89" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/03/GHSA-2862-gpw6-r482/GHSA-2862-gpw6-r482.json b/advisories/unreviewed/2025/03/GHSA-2862-gpw6-r482/GHSA-2862-gpw6-r482.json new file mode 100644 index 00000000000..e340251ac73 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-2862-gpw6-r482/GHSA-2862-gpw6-r482.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2862-gpw6-r482", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2025-0555" + ], + "details": "A Cross Site Scripting (XSS) vulnerability in GitLab-EE affecting all versions from 16.6 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows an attacker to bypass security controls and execute arbitrary scripts in a users browser under specific conditions.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0555" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2939833" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/514004" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-2h4w-p9fh-9rmv/GHSA-2h4w-p9fh-9rmv.json b/advisories/unreviewed/2025/03/GHSA-2h4w-p9fh-9rmv/GHSA-2h4w-p9fh-9rmv.json new file mode 100644 index 00000000000..49abb5c3fff --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-2h4w-p9fh-9rmv/GHSA-2h4w-p9fh-9rmv.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2h4w-p9fh-9rmv", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-55532" + ], + "details": "Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0.\nUsers are recommended to upgrade to version 2.6.0, which fixes this issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55532" + }, + { + "type": "WEB", + "url": "https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/03/03/2" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1236" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-35g5-m5m3-r8mx/GHSA-35g5-m5m3-r8mx.json b/advisories/unreviewed/2025/03/GHSA-35g5-m5m3-r8mx/GHSA-35g5-m5m3-r8mx.json new file mode 100644 index 00000000000..f0694cd6685 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-35g5-m5m3-r8mx/GHSA-35g5-m5m3-r8mx.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-35g5-m5m3-r8mx", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-53387" + ], + "details": "A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53387" + }, + { + "type": "WEB", + "url": "https://gist.github.com/jackfromeast/d52c506113f33b8871d0e647411df894" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-37r5-v3hg-cg4r/GHSA-37r5-v3hg-cg4r.json b/advisories/unreviewed/2025/03/GHSA-37r5-v3hg-cg4r/GHSA-37r5-v3hg-cg4r.json new file mode 100644 index 00000000000..c778bd93706 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-37r5-v3hg-cg4r/GHSA-37r5-v3hg-cg4r.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-37r5-v3hg-cg4r", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0685" + ], + "details": "A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_jfs_lookup_symlink() function will write past the internal buffer length during grub_jfs_read_file(). This issue can be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0685" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-0685" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346120" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-3mf5-r4hg-hfx9/GHSA-3mf5-r4hg-hfx9.json b/advisories/unreviewed/2025/03/GHSA-3mf5-r4hg-hfx9/GHSA-3mf5-r4hg-hfx9.json new file mode 100644 index 00000000000..90cbf535418 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-3mf5-r4hg-hfx9/GHSA-3mf5-r4hg-hfx9.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3mf5-r4hg-hfx9", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-53388" + ], + "details": "A DOM Clobbering vulnerability in mavo v0.3.2 allows attackers to execute arbitrary code via supplying a crafted HTML element.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53388" + }, + { + "type": "WEB", + "url": "https://gist.github.com/jackfromeast/a61a5429a97985e7ff4c1d39e339d5d8" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-3mv9-4h5g-vhg3/GHSA-3mv9-4h5g-vhg3.json b/advisories/unreviewed/2025/03/GHSA-3mv9-4h5g-vhg3/GHSA-3mv9-4h5g-vhg3.json new file mode 100644 index 00000000000..713de85be9f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-3mv9-4h5g-vhg3/GHSA-3mv9-4h5g-vhg3.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3mv9-4h5g-vhg3", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2024-53384" + ], + "details": "A DOM Clobbering vulnerability in tsup v8.3.4 allows attackers to execute arbitrary code via a crafted script in the import.meta.url to document.currentScript in cjs_shims.js components", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53384" + }, + { + "type": "WEB", + "url": "https://gist.github.com/jackfromeast/36f98bf7542d11835c883c1d175d9b92" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-5pg5-wv5r-mmj7/GHSA-5pg5-wv5r-mmj7.json b/advisories/unreviewed/2025/03/GHSA-5pg5-wv5r-mmj7/GHSA-5pg5-wv5r-mmj7.json new file mode 100644 index 00000000000..1cae56d0902 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-5pg5-wv5r-mmj7/GHSA-5pg5-wv5r-mmj7.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5pg5-wv5r-mmj7", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0686" + ], + "details": "A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_romfs_read_symlink() may cause out-of-bounds writes when the calling grub_disk_read() function. This issue may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution by-passing secure boot protections.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0686" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-0686" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346121" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-6pcr-45mv-9gp3/GHSA-6pcr-45mv-9gp3.json b/advisories/unreviewed/2025/03/GHSA-6pcr-45mv-9gp3/GHSA-6pcr-45mv-9gp3.json new file mode 100644 index 00000000000..c7349ca54b0 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-6pcr-45mv-9gp3/GHSA-6pcr-45mv-9gp3.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6pcr-45mv-9gp3", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2025-0286" + ], + "details": "Paragon Partition Manager version 7.9.1 contains an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0286" + }, + { + "type": "WEB", + "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys" + }, + { + "type": "WEB", + "url": "https://www.kb.cert.org/vuls/id/726882" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-6xv6-rjcf-vc95/GHSA-6xv6-rjcf-vc95.json b/advisories/unreviewed/2025/03/GHSA-6xv6-rjcf-vc95/GHSA-6xv6-rjcf-vc95.json new file mode 100644 index 00000000000..6533b1d5ae6 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-6xv6-rjcf-vc95/GHSA-6xv6-rjcf-vc95.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6xv6-rjcf-vc95", + "modified": "2025-03-03T18:31:27Z", + "published": "2025-03-03T18:31:27Z", + "aliases": [ + "CVE-2024-43169" + ], + "details": "IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43169" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7184506" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-494" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-7mf9-x65f-jwgf/GHSA-7mf9-x65f-jwgf.json b/advisories/unreviewed/2025/03/GHSA-7mf9-x65f-jwgf/GHSA-7mf9-x65f-jwgf.json new file mode 100644 index 00000000000..c64b5e1fda2 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-7mf9-x65f-jwgf/GHSA-7mf9-x65f-jwgf.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7mf9-x65f-jwgf", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0289" + ], + "details": "Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0289" + }, + { + "type": "WEB", + "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys" + }, + { + "type": "WEB", + "url": "https://www.kb.cert.org/vuls/id/726882" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-8f76-x9r8-c3c2/GHSA-8f76-x9r8-c3c2.json b/advisories/unreviewed/2025/03/GHSA-8f76-x9r8-c3c2/GHSA-8f76-x9r8-c3c2.json new file mode 100644 index 00000000000..400d6b93d2e --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-8f76-x9r8-c3c2/GHSA-8f76-x9r8-c3c2.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8f76-x9r8-c3c2", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2025-0285" + ], + "details": "Paragon Partition Manager version 7.9.1 contains an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0285" + }, + { + "type": "WEB", + "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys" + }, + { + "type": "WEB", + "url": "https://www.kb.cert.org/vuls/id/726882" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-cx28-78m7-h38f/GHSA-cx28-78m7-h38f.json b/advisories/unreviewed/2025/03/GHSA-cx28-78m7-h38f/GHSA-cx28-78m7-h38f.json new file mode 100644 index 00000000000..22d71643d7e --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-cx28-78m7-h38f/GHSA-cx28-78m7-h38f.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cx28-78m7-h38f", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-57240" + ], + "details": "A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57240" + }, + { + "type": "WEB", + "url": "https://gist.github.com/devom3/43c328e23ec854090ed555a13541ca94" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-f5q7-wc42-9m26/GHSA-f5q7-wc42-9m26.json b/advisories/unreviewed/2025/03/GHSA-f5q7-wc42-9m26/GHSA-f5q7-wc42-9m26.json new file mode 100644 index 00000000000..c9b2b5e667f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-f5q7-wc42-9m26/GHSA-f5q7-wc42-9m26.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f5q7-wc42-9m26", + "modified": "2025-03-03T18:31:25Z", + "published": "2025-03-03T18:31:25Z", + "aliases": [ + "CVE-2025-25818" + ], + "details": "A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at article_save.php.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25818" + }, + { + "type": "WEB", + "url": "https://github.com/Ka7arotto/emlog/blob/main/xss.md" + }, + { + "type": "WEB", + "url": "https://www.emlog.net" + }, + { + "type": "WEB", + "url": "http://emlogpro.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T15:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-f8gw-fp67-9958/GHSA-f8gw-fp67-9958.json b/advisories/unreviewed/2025/03/GHSA-f8gw-fp67-9958/GHSA-f8gw-fp67-9958.json new file mode 100644 index 00000000000..ffb9b4c7cd3 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-f8gw-fp67-9958/GHSA-f8gw-fp67-9958.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f8gw-fp67-9958", + "modified": "2025-03-03T18:31:27Z", + "published": "2025-03-03T18:31:27Z", + "aliases": [ + "CVE-2024-41770" + ], + "details": "IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41770" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7184663" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-522" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-mf4f-2vjv-3rq6/GHSA-mf4f-2vjv-3rq6.json b/advisories/unreviewed/2025/03/GHSA-mf4f-2vjv-3rq6/GHSA-mf4f-2vjv-3rq6.json new file mode 100644 index 00000000000..0174d0cf18c --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-mf4f-2vjv-3rq6/GHSA-mf4f-2vjv-3rq6.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mf4f-2vjv-3rq6", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0684" + ], + "details": "A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciouly crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the grub_reiserfs_read_symlink() will call grub_reiserfs_read_real() with a overflown length parameter, leading to a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and can result in arbitrary code execution, by-passing secure boot protections.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0684" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-0684" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346119" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-mx6f-2mmj-cp9q/GHSA-mx6f-2mmj-cp9q.json b/advisories/unreviewed/2025/03/GHSA-mx6f-2mmj-cp9q/GHSA-mx6f-2mmj-cp9q.json new file mode 100644 index 00000000000..bc590a53863 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-mx6f-2mmj-cp9q/GHSA-mx6f-2mmj-cp9q.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mx6f-2mmj-cp9q", + "modified": "2025-03-03T18:31:27Z", + "published": "2025-03-03T18:31:27Z", + "aliases": [ + "CVE-2024-41771" + ], + "details": "IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41771" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7184663" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-522" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-pcj4-9fcj-56c8/GHSA-pcj4-9fcj-56c8.json b/advisories/unreviewed/2025/03/GHSA-pcj4-9fcj-56c8/GHSA-pcj4-9fcj-56c8.json new file mode 100644 index 00000000000..7a82e2a8649 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-pcj4-9fcj-56c8/GHSA-pcj4-9fcj-56c8.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pcj4-9fcj-56c8", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-27370" + ], + "details": "OpenID Connect Core through 1.0 errata set 2 allows audience injection in certain situations. When the private_key_jwt authentication mechanism is used, a malicious Authorization Server could trick a Client into writing attacker-controlled values into the audience, including token endpoints or issuer identifiers of other Authorization Servers. The malicious Authorization Server could then use these private key JWTs to impersonate the Client.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27370" + }, + { + "type": "WEB", + "url": "https://openid.net/notice-of-a-security-vulnerability" + }, + { + "type": "WEB", + "url": "https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf" + }, + { + "type": "WEB", + "url": "https://talks.secworkshop.events/osw2025/talk/R8D9BS" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-pfr4-4397-3hg8/GHSA-pfr4-4397-3hg8.json b/advisories/unreviewed/2025/03/GHSA-pfr4-4397-3hg8/GHSA-pfr4-4397-3hg8.json new file mode 100644 index 00000000000..2350d680b68 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-pfr4-4397-3hg8/GHSA-pfr4-4397-3hg8.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pfr4-4397-3hg8", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2024-51091" + ], + "details": "Cross Site Scripting vulnerability in seajs v.2.2.3 allows a remote attacker to execute arbitrary code via the seajs package", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51091" + }, + { + "type": "WEB", + "url": "https://gist.github.com/jackfromeast/176413c3bd73f825f7aeeb05e80e02a6" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-pgf7-qmfm-349p/GHSA-pgf7-qmfm-349p.json b/advisories/unreviewed/2025/03/GHSA-pgf7-qmfm-349p/GHSA-pgf7-qmfm-349p.json new file mode 100644 index 00000000000..df72e2732d7 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-pgf7-qmfm-349p/GHSA-pgf7-qmfm-349p.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pgf7-qmfm-349p", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-45782" + ], + "details": "A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver performs a strcpy() using the user-provided volume name as input without properly validating the volume name's length. This issue may read to a heap-based out-of-bounds writer, impacting grub's sensitive data integrity and eventually leading to a secure boot protection bypass.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45782" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-45782" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345858" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-pw46-7qrx-4mc7/GHSA-pw46-7qrx-4mc7.json b/advisories/unreviewed/2025/03/GHSA-pw46-7qrx-4mc7/GHSA-pw46-7qrx-4mc7.json new file mode 100644 index 00000000000..74059453363 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-pw46-7qrx-4mc7/GHSA-pw46-7qrx-4mc7.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pw46-7qrx-4mc7", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-1876" + ], + "details": "A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function http_request_parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1876" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.298190" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.298190" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.506106" + }, + { + "type": "WEB", + "url": "https://witty-maiasaura-083.notion.site/D-link-DAP-1562-http_request_parse-Vulnerability-1a4b2f2a636180a2a67de271ad5fe6d7" + }, + { + "type": "WEB", + "url": "https://www.dlink.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-q67r-p3hc-x2w9/GHSA-q67r-p3hc-x2w9.json b/advisories/unreviewed/2025/03/GHSA-q67r-p3hc-x2w9/GHSA-q67r-p3hc-x2w9.json new file mode 100644 index 00000000000..7f59789a16f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-q67r-p3hc-x2w9/GHSA-q67r-p3hc-x2w9.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q67r-p3hc-x2w9", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0678" + ], + "details": "A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the filesystem geometry to determine the internal buffer size, however, it improperly checks for integer overflows. A maliciously crafted filesystem may lead some of those buffer size calculations to overflow, causing it to perform a grub_malloc() operation with a smaller size than expected. As a result, the direct_read() will perform a heap based out-of-bounds write during data reading. This flaw may be leveraged to corrupt grub's internal critical data and may result in arbitrary code execution, by-passing secure boot protections.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0678" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2025-0678" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2346118" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-qqm4-w34f-whgp/GHSA-qqm4-w34f-whgp.json b/advisories/unreviewed/2025/03/GHSA-qqm4-w34f-whgp/GHSA-qqm4-w34f-whgp.json new file mode 100644 index 00000000000..e6d66067ef9 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-qqm4-w34f-whgp/GHSA-qqm4-w34f-whgp.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qqm4-w34f-whgp", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2025-0288" + ], + "details": "Paragon Partition Manager version 7.9.1 contains an arbitrary kernel memory vulnerability facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0288" + }, + { + "type": "WEB", + "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys" + }, + { + "type": "WEB", + "url": "https://www.kb.cert.org/vuls/id/726882" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-qxrq-72v2-78jv/GHSA-qxrq-72v2-78jv.json b/advisories/unreviewed/2025/03/GHSA-qxrq-72v2-78jv/GHSA-qxrq-72v2-78jv.json new file mode 100644 index 00000000000..d9c519121e0 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-qxrq-72v2-78jv/GHSA-qxrq-72v2-78jv.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qxrq-72v2-78jv", + "modified": "2025-03-03T18:31:25Z", + "published": "2025-03-03T18:31:25Z", + "aliases": [ + "CVE-2025-25791" + ], + "details": "An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Zip file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25791" + }, + { + "type": "WEB", + "url": "https://gitee.com/ken678/YZNCMS" + }, + { + "type": "WEB", + "url": "https://github.com/Ka7arotto/YZNCMS/blob/main/yzncms-upload.md" + }, + { + "type": "WEB", + "url": "http://yzncms.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-77" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T15:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-rf85-mcvw-mw7j/GHSA-rf85-mcvw-mw7j.json b/advisories/unreviewed/2025/03/GHSA-rf85-mcvw-mw7j/GHSA-rf85-mcvw-mw7j.json new file mode 100644 index 00000000000..b5fec0ba29e --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-rf85-mcvw-mw7j/GHSA-rf85-mcvw-mw7j.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rf85-mcvw-mw7j", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2025-0287" + ], + "details": "Paragon Partition Manager version 7.9.1 contains a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0287" + }, + { + "type": "WEB", + "url": "https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys" + }, + { + "type": "WEB", + "url": "https://www.kb.cert.org/vuls/id/726882" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-rh3q-7g79-rp3x/GHSA-rh3q-7g79-rp3x.json b/advisories/unreviewed/2025/03/GHSA-rh3q-7g79-rp3x/GHSA-rh3q-7g79-rp3x.json new file mode 100644 index 00000000000..4474a51e93b --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-rh3q-7g79-rp3x/GHSA-rh3q-7g79-rp3x.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rh3q-7g79-rp3x", + "modified": "2025-03-03T18:31:30Z", + "published": "2025-03-03T18:31:30Z", + "aliases": [ + "CVE-2025-27371" + ], + "details": "In certain IETF OAuth 2.0-related specifications, when the JSON Web Token Profile for OAuth 2.0 Client Authentication mechanism is used, there are ambiguities in the audience values of JWTs sent to authorization servers. The affected RFCs may include RFC 7523, and also RFC 7521, RFC 7522, RFC 9101 (JAR), and RFC 9126 (PAR).", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27371" + }, + { + "type": "WEB", + "url": "https://openid.net/notice-of-a-security-vulnerability" + }, + { + "type": "WEB", + "url": "https://openid.net/wp-content/uploads/2025/01/OIDF-Responsible-Disclosure-Notice-on-Security-Vulnerability-for-private_key_jwt.pdf" + }, + { + "type": "WEB", + "url": "https://talks.secworkshop.events/osw2025/talk/R8D9BS" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-rvwg-6c86-cxf4/GHSA-rvwg-6c86-cxf4.json b/advisories/unreviewed/2025/03/GHSA-rvwg-6c86-cxf4/GHSA-rvwg-6c86-cxf4.json new file mode 100644 index 00000000000..3bbe46f45b0 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-rvwg-6c86-cxf4/GHSA-rvwg-6c86-cxf4.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rvwg-6c86-cxf4", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-55570" + ], + "details": "/api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build 20231025055018) fixed in V5.0R14.5P4-V3.3R1 allows remote authenticated users of the application to increase their privileges by sending a single HTTP PUT request with rolename=Administrator, aka incorrect access control.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55570" + }, + { + "type": "WEB", + "url": "https://herolab.usd.de/security-advisories" + }, + { + "type": "WEB", + "url": "https://herolab.usd.de/security-advisories/usd-2024-0014" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T16:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-vpmj-h28j-ffpp/GHSA-vpmj-h28j-ffpp.json b/advisories/unreviewed/2025/03/GHSA-vpmj-h28j-ffpp/GHSA-vpmj-h28j-ffpp.json new file mode 100644 index 00000000000..ecf01012fc5 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-vpmj-h28j-ffpp/GHSA-vpmj-h28j-ffpp.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vpmj-h28j-ffpp", + "modified": "2025-03-03T18:31:28Z", + "published": "2025-03-03T18:31:28Z", + "aliases": [ + "CVE-2024-45778" + ], + "details": "A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45778" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-45778" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2345640" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T17:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-vr75-hjh9-7fr6/GHSA-vr75-hjh9-7fr6.json b/advisories/unreviewed/2025/03/GHSA-vr75-hjh9-7fr6/GHSA-vr75-hjh9-7fr6.json new file mode 100644 index 00000000000..68265a04710 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-vr75-hjh9-7fr6/GHSA-vr75-hjh9-7fr6.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vr75-hjh9-7fr6", + "modified": "2025-03-03T18:31:25Z", + "published": "2025-03-03T18:31:25Z", + "aliases": [ + "CVE-2025-1716" + ], + "details": "picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "WEB", + "url": "https://github.com/mmaitre314/picklescan/security/advisories/GHSA-655q-fx9r-782v" + }, + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1716" + }, + { + "type": "WEB", + "url": "https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d" + }, + { + "type": "WEB", + "url": "https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-184" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-26T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-x536-9g45-6jcr/GHSA-x536-9g45-6jcr.json b/advisories/unreviewed/2025/03/GHSA-x536-9g45-6jcr/GHSA-x536-9g45-6jcr.json new file mode 100644 index 00000000000..604fdfd2dae --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-x536-9g45-6jcr/GHSA-x536-9g45-6jcr.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x536-9g45-6jcr", + "modified": "2025-03-03T18:31:29Z", + "published": "2025-03-03T18:31:29Z", + "aliases": [ + "CVE-2023-49031" + ], + "details": "Directory Traversal (Local File Inclusion) vulnerability in Tikit (now Advanced) eMarketing platform 6.8.3.0 allows a remote attacker to read arbitrary files and obtain sensitive information via a crafted payload to the filename parameter to the OpenLogFile endpoint.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49031" + }, + { + "type": "WEB", + "url": "https://github.com/Yoshik0xF6/CVE-2023-49031" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T18:15:28Z" + } +} \ No newline at end of file