diff --git a/advisories/unreviewed/2025/04/GHSA-2r79-7vx7-g52g/GHSA-2r79-7vx7-g52g.json b/advisories/unreviewed/2025/04/GHSA-2r79-7vx7-g52g/GHSA-2r79-7vx7-g52g.json
new file mode 100644
index 00000000000..f273c637631
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-2r79-7vx7-g52g/GHSA-2r79-7vx7-g52g.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2r79-7vx7-g52g",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-0101"
+  ],
+  "details": "A low privileged user can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes some functions to work unexpected or stop working at all. Both during runtime and after a restart.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0101"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cert.vde.com/en/advisories/VDE-2025-007"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-190"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-6476-gj69-54v6/GHSA-6476-gj69-54v6.json b/advisories/unreviewed/2025/04/GHSA-6476-gj69-54v6/GHSA-6476-gj69-54v6.json
new file mode 100644
index 00000000000..fe10ae3df6e
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-6476-gj69-54v6/GHSA-6476-gj69-54v6.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6476-gj69-54v6",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-3077"
+  ],
+  "details": "The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button shortcode and Custom CSS field in all versions up to, and including, 28.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3077"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.muffingroup.com/changelog"
+    },
+    {
+      "type": "WEB",
+      "url": "https://themeforest.net/item/betheme-responsive-multipurpose-wordpress-theme/7758048"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7a0a281d-840f-488f-b9ef-c0df8514b47c?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-7wh6-6h78-phxw/GHSA-7wh6-6h78-phxw.json b/advisories/unreviewed/2025/04/GHSA-7wh6-6h78-phxw/GHSA-7wh6-6h78-phxw.json
new file mode 100644
index 00000000000..be3a522d061
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-7wh6-6h78-phxw/GHSA-7wh6-6h78-phxw.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7wh6-6h78-phxw",
+  "modified": "2025-04-16T09:32:14Z",
+  "published": "2025-04-16T09:32:14Z",
+  "aliases": [
+    "CVE-2025-3104"
+  ],
+  "details": "The WP STAGING Pro WordPress Backup Plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 6.1.2 due to missing capability checks on the getOutdatedPluginsRequest() function. This makes it possible for unauthenticated attackers to reveal outdated installed active or inactive plugins.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3104"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wp-staging.com/wp-staging-pro-changelog"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/572e290e-9324-4c17-8c3b-fa67233b15c4?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T09:15:28Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-fcqc-4825-4p6v/GHSA-fcqc-4825-4p6v.json b/advisories/unreviewed/2025/04/GHSA-fcqc-4825-4p6v/GHSA-fcqc-4825-4p6v.json
new file mode 100644
index 00000000000..3a3bb1f5d23
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-fcqc-4825-4p6v/GHSA-fcqc-4825-4p6v.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fcqc-4825-4p6v",
+  "modified": "2025-04-16T09:32:14Z",
+  "published": "2025-04-16T09:32:14Z",
+  "aliases": [
+    "CVE-2025-3676"
+  ],
+  "details": "A vulnerability classified as critical has been found in xxyopen Novel-Plus 3.5.0. This affects an unknown part of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3676"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/mapl3miss/novel-SQLi/blob/main/novelCMS-sqli.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.304965"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.304965"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.551950"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-h4rr-f37j-4hh7/GHSA-h4rr-f37j-4hh7.json b/advisories/unreviewed/2025/04/GHSA-h4rr-f37j-4hh7/GHSA-h4rr-f37j-4hh7.json
new file mode 100644
index 00000000000..36cd8752148
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-h4rr-f37j-4hh7/GHSA-h4rr-f37j-4hh7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h4rr-f37j-4hh7",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-27571"
+  ],
+  "details": "Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to check the \"Allow Users to View Archived Channels\" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27571"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattermost.com/security-updates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-j5jw-m2ph-3jjf/GHSA-j5jw-m2ph-3jjf.json b/advisories/unreviewed/2025/04/GHSA-j5jw-m2ph-3jjf/GHSA-j5jw-m2ph-3jjf.json
new file mode 100644
index 00000000000..f65f5686e65
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-j5jw-m2ph-3jjf/GHSA-j5jw-m2ph-3jjf.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j5jw-m2ph-3jjf",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-27538"
+  ],
+  "details": "Mattermost versions 10.5.x <= 10.5.1, 9.11.x <= 9.11.9 fail to enforce MFA checks in PUT /api/v4/users/user-id/mfa when the requesting user differs from the target user ID, which allows users with edit_other_users permission to activate or deactivate MFA for other users, even if those users have not set up MFA.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27538"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattermost.com/security-updates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-306"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:14Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-j639-m367-75cf/GHSA-j639-m367-75cf.json b/advisories/unreviewed/2025/04/GHSA-j639-m367-75cf/GHSA-j639-m367-75cf.json
new file mode 100644
index 00000000000..d4d992574ec
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-j639-m367-75cf/GHSA-j639-m367-75cf.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j639-m367-75cf",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-24839"
+  ],
+  "details": "Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activate_ai override property to a post via the Wrangler plugin, provided both the AI and Wrangler plugins are enabled.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24839"
+    },
+    {
+      "type": "WEB",
+      "url": "https://mattermost.com/security-updates"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T08:15:13Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-mfp5-c75h-8m74/GHSA-mfp5-c75h-8m74.json b/advisories/unreviewed/2025/04/GHSA-mfp5-c75h-8m74/GHSA-mfp5-c75h-8m74.json
new file mode 100644
index 00000000000..b5422338f08
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-mfp5-c75h-8m74/GHSA-mfp5-c75h-8m74.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mfp5-c75h-8m74",
+  "modified": "2025-04-16T09:32:13Z",
+  "published": "2025-04-16T09:32:13Z",
+  "aliases": [
+    "CVE-2025-3674"
+  ],
+  "details": "A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been declared as critical. Affected by this vulnerability is the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3674"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setUrlFilterRules-1cb53a41781f808f9547da7748580914?pvs=4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.304963"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.304963"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.551302"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T07:15:42Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-rj3p-xj8v-g5w3/GHSA-rj3p-xj8v-g5w3.json b/advisories/unreviewed/2025/04/GHSA-rj3p-xj8v-g5w3/GHSA-rj3p-xj8v-g5w3.json
new file mode 100644
index 00000000000..7e67414c7da
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-rj3p-xj8v-g5w3/GHSA-rj3p-xj8v-g5w3.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rj3p-xj8v-g5w3",
+  "modified": "2025-04-16T09:32:12Z",
+  "published": "2025-04-16T09:32:12Z",
+  "aliases": [
+    "CVE-2025-3675"
+  ],
+  "details": "A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3675"
+    },
+    {
+      "type": "WEB",
+      "url": "https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3700R-setL2tpServerCfg-1cb53a41781f80319d38dc5a8e9174ae?pvs=4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.304964"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.304964"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.551304"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T07:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-v32v-5787-25w8/GHSA-v32v-5787-25w8.json b/advisories/unreviewed/2025/04/GHSA-v32v-5787-25w8/GHSA-v32v-5787-25w8.json
new file mode 100644
index 00000000000..6813ef0ba9a
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-v32v-5787-25w8/GHSA-v32v-5787-25w8.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v32v-5787-25w8",
+  "modified": "2025-04-16T09:32:14Z",
+  "published": "2025-04-16T09:32:14Z",
+  "aliases": [
+    "CVE-2025-3677"
+  ],
+  "details": "A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function split_files/apply_delta_low_cpu_mem of the file fastchat/model/apply_delta.py. The manipulation leads to deserialization. An attack has to be approached locally.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3677"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/lm-sys/FastChat/issues/3713"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.304966"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.304966"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.552755"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T09:15:28Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-xjf7-3g9g-4hh3/GHSA-xjf7-3g9g-4hh3.json b/advisories/unreviewed/2025/04/GHSA-xjf7-3g9g-4hh3/GHSA-xjf7-3g9g-4hh3.json
new file mode 100644
index 00000000000..3f8d3163a3f
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-xjf7-3g9g-4hh3/GHSA-xjf7-3g9g-4hh3.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xjf7-3g9g-4hh3",
+  "modified": "2025-04-16T09:32:14Z",
+  "published": "2025-04-16T09:32:14Z",
+  "aliases": [
+    "CVE-2025-3678"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component HELP Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3678"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-a0667f99e4dc732773f505cdb86fcae1.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.304967"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.304967"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.552780"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-16T09:15:28Z"
+  }
+}
\ No newline at end of file