From 678b90fa641adbfc4c1d613e89572e76b3b22457 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 7 Apr 2025 06:32:22 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-2wwh-pgrr-63c8.json | 52 +++++++++++++++++++ .../GHSA-2xj4-5vhc-h42r.json | 36 +++++++++++++ .../GHSA-435f-w5x3-q9jc.json | 36 +++++++++++++ .../GHSA-4jrh-22g5-5pwg.json | 36 +++++++++++++ .../GHSA-4p64-m7fw-73rf.json | 52 +++++++++++++++++++ .../GHSA-5m5w-j5f9-r7rr.json | 36 +++++++++++++ .../GHSA-66m2-9rhm-5rrv.json | 36 +++++++++++++ .../GHSA-67g2-q3rf-r6j5.json | 36 +++++++++++++ .../GHSA-6vqr-8xjq-ghqg.json | 31 +++++++++++ .../GHSA-7wq2-cp3p-6phc.json | 52 +++++++++++++++++++ .../GHSA-7x3m-w77c-7wh5.json | 36 +++++++++++++ .../GHSA-8359-6xxw-qm22.json | 31 +++++++++++ .../GHSA-9h3x-g96g-wcqp.json | 36 +++++++++++++ .../GHSA-9j5c-g9c4-jwqv.json | 31 +++++++++++ .../GHSA-cf9c-6vvv-m2rc.json | 36 +++++++++++++ .../GHSA-f9r4-j32j-wpx3.json | 31 +++++++++++ .../GHSA-fh25-mg5h-rxhm.json | 52 +++++++++++++++++++ .../GHSA-fm83-4pv6-4h8q.json | 31 +++++++++++ .../GHSA-grgf-jm3x-9rcf.json | 36 +++++++++++++ .../GHSA-h49w-g4vp-f472.json | 31 +++++++++++ .../GHSA-hmr2-jqqv-r579.json | 40 ++++++++++++++ .../GHSA-jv3f-f575-7xgv.json | 36 +++++++++++++ .../GHSA-m9x3-4g44-fw28.json | 31 +++++++++++ .../GHSA-mfwg-8c3f-7vg2.json | 52 +++++++++++++++++++ .../GHSA-mjv8-w698-v8wq.json | 31 +++++++++++ .../GHSA-pxcm-247j-vw9j.json | 52 +++++++++++++++++++ .../GHSA-qr6w-v3fj-8cj6.json | 31 +++++++++++ .../GHSA-qxg8-7f63-gm9r.json | 36 +++++++++++++ .../GHSA-rqc7-j7wp-4xq7.json | 36 +++++++++++++ .../GHSA-rxr6-8r65-89jw.json | 36 +++++++++++++ .../GHSA-v8r3-qw2m-qq7q.json | 36 +++++++++++++ .../GHSA-vx3g-vqr3-xrgv.json | 34 ++++++++++++ .../GHSA-w388-5rjr-qx42.json | 36 +++++++++++++ .../GHSA-wrph-qwg9-rfvh.json | 36 +++++++++++++ .../GHSA-wwq8-pr59-5wqp.json | 36 +++++++++++++ .../GHSA-x8q7-9mr8-m7q6.json | 36 +++++++++++++ .../GHSA-xc47-677g-jg4q.json | 31 +++++++++++ .../GHSA-xrqc-54h4-vmvv.json | 31 +++++++++++ 38 files changed, 1411 insertions(+) create mode 100644 advisories/unreviewed/2025/04/GHSA-2wwh-pgrr-63c8/GHSA-2wwh-pgrr-63c8.json create mode 100644 advisories/unreviewed/2025/04/GHSA-2xj4-5vhc-h42r/GHSA-2xj4-5vhc-h42r.json create mode 100644 advisories/unreviewed/2025/04/GHSA-435f-w5x3-q9jc/GHSA-435f-w5x3-q9jc.json create mode 100644 advisories/unreviewed/2025/04/GHSA-4jrh-22g5-5pwg/GHSA-4jrh-22g5-5pwg.json create mode 100644 advisories/unreviewed/2025/04/GHSA-4p64-m7fw-73rf/GHSA-4p64-m7fw-73rf.json create mode 100644 advisories/unreviewed/2025/04/GHSA-5m5w-j5f9-r7rr/GHSA-5m5w-j5f9-r7rr.json create mode 100644 advisories/unreviewed/2025/04/GHSA-66m2-9rhm-5rrv/GHSA-66m2-9rhm-5rrv.json create mode 100644 advisories/unreviewed/2025/04/GHSA-67g2-q3rf-r6j5/GHSA-67g2-q3rf-r6j5.json create mode 100644 advisories/unreviewed/2025/04/GHSA-6vqr-8xjq-ghqg/GHSA-6vqr-8xjq-ghqg.json create mode 100644 advisories/unreviewed/2025/04/GHSA-7wq2-cp3p-6phc/GHSA-7wq2-cp3p-6phc.json create mode 100644 advisories/unreviewed/2025/04/GHSA-7x3m-w77c-7wh5/GHSA-7x3m-w77c-7wh5.json create mode 100644 advisories/unreviewed/2025/04/GHSA-8359-6xxw-qm22/GHSA-8359-6xxw-qm22.json create mode 100644 advisories/unreviewed/2025/04/GHSA-9h3x-g96g-wcqp/GHSA-9h3x-g96g-wcqp.json create mode 100644 advisories/unreviewed/2025/04/GHSA-9j5c-g9c4-jwqv/GHSA-9j5c-g9c4-jwqv.json create mode 100644 advisories/unreviewed/2025/04/GHSA-cf9c-6vvv-m2rc/GHSA-cf9c-6vvv-m2rc.json create mode 100644 advisories/unreviewed/2025/04/GHSA-f9r4-j32j-wpx3/GHSA-f9r4-j32j-wpx3.json create mode 100644 advisories/unreviewed/2025/04/GHSA-fh25-mg5h-rxhm/GHSA-fh25-mg5h-rxhm.json create mode 100644 advisories/unreviewed/2025/04/GHSA-fm83-4pv6-4h8q/GHSA-fm83-4pv6-4h8q.json create mode 100644 advisories/unreviewed/2025/04/GHSA-grgf-jm3x-9rcf/GHSA-grgf-jm3x-9rcf.json create mode 100644 advisories/unreviewed/2025/04/GHSA-h49w-g4vp-f472/GHSA-h49w-g4vp-f472.json create mode 100644 advisories/unreviewed/2025/04/GHSA-hmr2-jqqv-r579/GHSA-hmr2-jqqv-r579.json create mode 100644 advisories/unreviewed/2025/04/GHSA-jv3f-f575-7xgv/GHSA-jv3f-f575-7xgv.json create mode 100644 advisories/unreviewed/2025/04/GHSA-m9x3-4g44-fw28/GHSA-m9x3-4g44-fw28.json create mode 100644 advisories/unreviewed/2025/04/GHSA-mfwg-8c3f-7vg2/GHSA-mfwg-8c3f-7vg2.json create mode 100644 advisories/unreviewed/2025/04/GHSA-mjv8-w698-v8wq/GHSA-mjv8-w698-v8wq.json create mode 100644 advisories/unreviewed/2025/04/GHSA-pxcm-247j-vw9j/GHSA-pxcm-247j-vw9j.json create mode 100644 advisories/unreviewed/2025/04/GHSA-qr6w-v3fj-8cj6/GHSA-qr6w-v3fj-8cj6.json create mode 100644 advisories/unreviewed/2025/04/GHSA-qxg8-7f63-gm9r/GHSA-qxg8-7f63-gm9r.json create mode 100644 advisories/unreviewed/2025/04/GHSA-rqc7-j7wp-4xq7/GHSA-rqc7-j7wp-4xq7.json create mode 100644 advisories/unreviewed/2025/04/GHSA-rxr6-8r65-89jw/GHSA-rxr6-8r65-89jw.json create mode 100644 advisories/unreviewed/2025/04/GHSA-v8r3-qw2m-qq7q/GHSA-v8r3-qw2m-qq7q.json create mode 100644 advisories/unreviewed/2025/04/GHSA-vx3g-vqr3-xrgv/GHSA-vx3g-vqr3-xrgv.json create mode 100644 advisories/unreviewed/2025/04/GHSA-w388-5rjr-qx42/GHSA-w388-5rjr-qx42.json create mode 100644 advisories/unreviewed/2025/04/GHSA-wrph-qwg9-rfvh/GHSA-wrph-qwg9-rfvh.json create mode 100644 advisories/unreviewed/2025/04/GHSA-wwq8-pr59-5wqp/GHSA-wwq8-pr59-5wqp.json create mode 100644 advisories/unreviewed/2025/04/GHSA-x8q7-9mr8-m7q6/GHSA-x8q7-9mr8-m7q6.json create mode 100644 advisories/unreviewed/2025/04/GHSA-xc47-677g-jg4q/GHSA-xc47-677g-jg4q.json create mode 100644 advisories/unreviewed/2025/04/GHSA-xrqc-54h4-vmvv/GHSA-xrqc-54h4-vmvv.json diff --git a/advisories/unreviewed/2025/04/GHSA-2wwh-pgrr-63c8/GHSA-2wwh-pgrr-63c8.json b/advisories/unreviewed/2025/04/GHSA-2wwh-pgrr-63c8/GHSA-2wwh-pgrr-63c8.json new file mode 100644 index 00000000000..344214cf065 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-2wwh-pgrr-63c8/GHSA-2wwh-pgrr-63c8.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2wwh-pgrr-63c8", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3339" + ], + "details": "A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3339" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/53" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303553" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303553" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551913" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T06:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-2xj4-5vhc-h42r/GHSA-2xj4-5vhc-h42r.json b/advisories/unreviewed/2025/04/GHSA-2xj4-5vhc-h42r/GHSA-2xj4-5vhc-h42r.json new file mode 100644 index 00000000000..c00a8de0b4b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-2xj4-5vhc-h42r/GHSA-2xj4-5vhc-h42r.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2xj4-5vhc-h42r", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58127" + ], + "details": "Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58127" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-435f-w5x3-q9jc/GHSA-435f-w5x3-q9jc.json b/advisories/unreviewed/2025/04/GHSA-435f-w5x3-q9jc/GHSA-435f-w5x3-q9jc.json new file mode 100644 index 00000000000..d6356bbab39 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-435f-w5x3-q9jc/GHSA-435f-w5x3-q9jc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-435f-w5x3-q9jc", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31173" + ], + "details": "Memory write permission bypass vulnerability in the kernel futex module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31173" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-280" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-4jrh-22g5-5pwg/GHSA-4jrh-22g5-5pwg.json b/advisories/unreviewed/2025/04/GHSA-4jrh-22g5-5pwg/GHSA-4jrh-22g5-5pwg.json new file mode 100644 index 00000000000..877c680f3cc --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-4jrh-22g5-5pwg/GHSA-4jrh-22g5-5pwg.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4jrh-22g5-5pwg", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58115" + ], + "details": "Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58115" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-4p64-m7fw-73rf/GHSA-4p64-m7fw-73rf.json b/advisories/unreviewed/2025/04/GHSA-4p64-m7fw-73rf/GHSA-4p64-m7fw-73rf.json new file mode 100644 index 00000000000..25cfd536bc0 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-4p64-m7fw-73rf/GHSA-4p64-m7fw-73rf.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4p64-m7fw-73rf", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3338" + ], + "details": "A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3338" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/52" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303552" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303552" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551912" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T06:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-5m5w-j5f9-r7rr/GHSA-5m5w-j5f9-r7rr.json b/advisories/unreviewed/2025/04/GHSA-5m5w-j5f9-r7rr/GHSA-5m5w-j5f9-r7rr.json new file mode 100644 index 00000000000..f29526caf30 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-5m5w-j5f9-r7rr/GHSA-5m5w-j5f9-r7rr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5m5w-j5f9-r7rr", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31172" + ], + "details": "Memory write permission bypass vulnerability in the kernel futex module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31172" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-280" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-66m2-9rhm-5rrv/GHSA-66m2-9rhm-5rrv.json b/advisories/unreviewed/2025/04/GHSA-66m2-9rhm-5rrv/GHSA-66m2-9rhm-5rrv.json new file mode 100644 index 00000000000..2f64ea76cbd --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-66m2-9rhm-5rrv/GHSA-66m2-9rhm-5rrv.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-66m2-9rhm-5rrv", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58116" + ], + "details": "Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58116" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-67g2-q3rf-r6j5/GHSA-67g2-q3rf-r6j5.json b/advisories/unreviewed/2025/04/GHSA-67g2-q3rf-r6j5/GHSA-67g2-q3rf-r6j5.json new file mode 100644 index 00000000000..df139283b99 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-67g2-q3rf-r6j5/GHSA-67g2-q3rf-r6j5.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-67g2-q3rf-r6j5", + "modified": "2025-04-07T06:30:26Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58106" + ], + "details": "Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58106" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-6vqr-8xjq-ghqg/GHSA-6vqr-8xjq-ghqg.json b/advisories/unreviewed/2025/04/GHSA-6vqr-8xjq-ghqg/GHSA-6vqr-8xjq-ghqg.json new file mode 100644 index 00000000000..6b91f6bbbcd --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-6vqr-8xjq-ghqg/GHSA-6vqr-8xjq-ghqg.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6vqr-8xjq-ghqg", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20656" + ], + "details": "In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09625423; Issue ID: MSV-3033.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20656" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-7wq2-cp3p-6phc/GHSA-7wq2-cp3p-6phc.json b/advisories/unreviewed/2025/04/GHSA-7wq2-cp3p-6phc/GHSA-7wq2-cp3p-6phc.json new file mode 100644 index 00000000000..0378d63697c --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-7wq2-cp3p-6phc/GHSA-7wq2-cp3p-6phc.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7wq2-cp3p-6phc", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3336" + ], + "details": "A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3336" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/50" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303550" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303550" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551910" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T05:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-7x3m-w77c-7wh5/GHSA-7x3m-w77c-7wh5.json b/advisories/unreviewed/2025/04/GHSA-7x3m-w77c-7wh5/GHSA-7x3m-w77c-7wh5.json new file mode 100644 index 00000000000..7b7cb2f7892 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-7x3m-w77c-7wh5/GHSA-7x3m-w77c-7wh5.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7x3m-w77c-7wh5", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58111" + ], + "details": "Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58111" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-8359-6xxw-qm22/GHSA-8359-6xxw-qm22.json b/advisories/unreviewed/2025/04/GHSA-8359-6xxw-qm22/GHSA-8359-6xxw-qm22.json new file mode 100644 index 00000000000..445247dea68 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-8359-6xxw-qm22/GHSA-8359-6xxw-qm22.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8359-6xxw-qm22", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20659" + ], + "details": "In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01519028; Issue ID: MSV-2768.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20659" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9h3x-g96g-wcqp/GHSA-9h3x-g96g-wcqp.json b/advisories/unreviewed/2025/04/GHSA-9h3x-g96g-wcqp/GHSA-9h3x-g96g-wcqp.json new file mode 100644 index 00000000000..058bc1e37ad --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9h3x-g96g-wcqp/GHSA-9h3x-g96g-wcqp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9h3x-g96g-wcqp", + "modified": "2025-04-07T06:30:26Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58107" + ], + "details": "Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58107" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-680" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-9j5c-g9c4-jwqv/GHSA-9j5c-g9c4-jwqv.json b/advisories/unreviewed/2025/04/GHSA-9j5c-g9c4-jwqv/GHSA-9j5c-g9c4-jwqv.json new file mode 100644 index 00000000000..9490b837c27 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-9j5c-g9c4-jwqv/GHSA-9j5c-g9c4-jwqv.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9j5c-g9c4-jwqv", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20658" + ], + "details": "In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09474894; Issue ID: MSV-2597.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20658" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-cf9c-6vvv-m2rc/GHSA-cf9c-6vvv-m2rc.json b/advisories/unreviewed/2025/04/GHSA-cf9c-6vvv-m2rc/GHSA-cf9c-6vvv-m2rc.json new file mode 100644 index 00000000000..b774979bc6b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-cf9c-6vvv-m2rc/GHSA-cf9c-6vvv-m2rc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cf9c-6vvv-m2rc", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58112" + ], + "details": "Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58112" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-f9r4-j32j-wpx3/GHSA-f9r4-j32j-wpx3.json b/advisories/unreviewed/2025/04/GHSA-f9r4-j32j-wpx3/GHSA-f9r4-j32j-wpx3.json new file mode 100644 index 00000000000..683a1d12f4a --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-f9r4-j32j-wpx3/GHSA-f9r4-j32j-wpx3.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f9r4-j32j-wpx3", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20662" + ], + "details": "In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20662" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fh25-mg5h-rxhm/GHSA-fh25-mg5h-rxhm.json b/advisories/unreviewed/2025/04/GHSA-fh25-mg5h-rxhm/GHSA-fh25-mg5h-rxhm.json new file mode 100644 index 00000000000..cba1aee877b --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fh25-mg5h-rxhm/GHSA-fh25-mg5h-rxhm.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fh25-mg5h-rxhm", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3335" + ], + "details": "A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3335" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/49" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303549" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303549" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551909" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:36Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-fm83-4pv6-4h8q/GHSA-fm83-4pv6-4h8q.json b/advisories/unreviewed/2025/04/GHSA-fm83-4pv6-4h8q/GHSA-fm83-4pv6-4h8q.json new file mode 100644 index 00000000000..b32c14f318f --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-fm83-4pv6-4h8q/GHSA-fm83-4pv6-4h8q.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fm83-4pv6-4h8q", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20660" + ], + "details": "In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20660" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-grgf-jm3x-9rcf/GHSA-grgf-jm3x-9rcf.json b/advisories/unreviewed/2025/04/GHSA-grgf-jm3x-9rcf/GHSA-grgf-jm3x-9rcf.json new file mode 100644 index 00000000000..362ae125dde --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-grgf-jm3x-9rcf/GHSA-grgf-jm3x-9rcf.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-grgf-jm3x-9rcf", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31174" + ], + "details": "Path traversal vulnerability in the DFS module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31174" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-h49w-g4vp-f472/GHSA-h49w-g4vp-f472.json b/advisories/unreviewed/2025/04/GHSA-h49w-g4vp-f472/GHSA-h49w-g4vp-f472.json new file mode 100644 index 00000000000..f4735781432 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-h49w-g4vp-f472/GHSA-h49w-g4vp-f472.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h49w-g4vp-f472", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20655" + ], + "details": "In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04427687; Issue ID: MSV-3183.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20655" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-hmr2-jqqv-r579/GHSA-hmr2-jqqv-r579.json b/advisories/unreviewed/2025/04/GHSA-hmr2-jqqv-r579/GHSA-hmr2-jqqv-r579.json new file mode 100644 index 00000000000..66b3dc2506d --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-hmr2-jqqv-r579/GHSA-hmr2-jqqv-r579.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hmr2-jqqv-r579", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2024-11071" + ], + "details": "Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11071" + }, + { + "type": "WEB", + "url": "https://cyberdigm.co.kr/destinyEcm" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T06:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-jv3f-f575-7xgv/GHSA-jv3f-f575-7xgv.json b/advisories/unreviewed/2025/04/GHSA-jv3f-f575-7xgv/GHSA-jv3f-f575-7xgv.json new file mode 100644 index 00000000000..4009fea8145 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-jv3f-f575-7xgv/GHSA-jv3f-f575-7xgv.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jv3f-f575-7xgv", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58124" + ], + "details": "Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58124" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-m9x3-4g44-fw28/GHSA-m9x3-4g44-fw28.json b/advisories/unreviewed/2025/04/GHSA-m9x3-4g44-fw28/GHSA-m9x3-4g44-fw28.json new file mode 100644 index 00000000000..3617e450485 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-m9x3-4g44-fw28/GHSA-m9x3-4g44-fw28.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m9x3-4g44-fw28", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20664" + ], + "details": "In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-2773.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20664" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-mfwg-8c3f-7vg2/GHSA-mfwg-8c3f-7vg2.json b/advisories/unreviewed/2025/04/GHSA-mfwg-8c3f-7vg2/GHSA-mfwg-8c3f-7vg2.json new file mode 100644 index 00000000000..15f33344f2a --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-mfwg-8c3f-7vg2/GHSA-mfwg-8c3f-7vg2.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mfwg-8c3f-7vg2", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3337" + ], + "details": "A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3337" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/51" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303551" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303551" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551911" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T05:15:31Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-mjv8-w698-v8wq/GHSA-mjv8-w698-v8wq.json b/advisories/unreviewed/2025/04/GHSA-mjv8-w698-v8wq/GHSA-mjv8-w698-v8wq.json new file mode 100644 index 00000000000..3a94a5f3fd0 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-mjv8-w698-v8wq/GHSA-mjv8-w698-v8wq.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mjv8-w698-v8wq", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20663" + ], + "details": "In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-3031.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20663" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-248" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-pxcm-247j-vw9j/GHSA-pxcm-247j-vw9j.json b/advisories/unreviewed/2025/04/GHSA-pxcm-247j-vw9j/GHSA-pxcm-247j-vw9j.json new file mode 100644 index 00000000000..454c431e995 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-pxcm-247j-vw9j/GHSA-pxcm-247j-vw9j.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pxcm-247j-vw9j", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-3334" + ], + "details": "A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3334" + }, + { + "type": "WEB", + "url": "https://github.com/p1026/CVE/issues/48" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.303548" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.303548" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.551908" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-qr6w-v3fj-8cj6/GHSA-qr6w-v3fj-8cj6.json b/advisories/unreviewed/2025/04/GHSA-qr6w-v3fj-8cj6/GHSA-qr6w-v3fj-8cj6.json new file mode 100644 index 00000000000..7c8784cd8fe --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-qr6w-v3fj-8cj6/GHSA-qr6w-v3fj-8cj6.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qr6w-v3fj-8cj6", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20657" + ], + "details": "In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20657" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-qxg8-7f63-gm9r/GHSA-qxg8-7f63-gm9r.json b/advisories/unreviewed/2025/04/GHSA-qxg8-7f63-gm9r/GHSA-qxg8-7f63-gm9r.json new file mode 100644 index 00000000000..1f04b7e3143 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-qxg8-7f63-gm9r/GHSA-qxg8-7f63-gm9r.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qxg8-7f63-gm9r", + "modified": "2025-04-07T06:30:26Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58108" + ], + "details": "Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58108" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-rqc7-j7wp-4xq7/GHSA-rqc7-j7wp-4xq7.json b/advisories/unreviewed/2025/04/GHSA-rqc7-j7wp-4xq7/GHSA-rqc7-j7wp-4xq7.json new file mode 100644 index 00000000000..e4e7857b527 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-rqc7-j7wp-4xq7/GHSA-rqc7-j7wp-4xq7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rqc7-j7wp-4xq7", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31175" + ], + "details": "Deserialization mismatch vulnerability in the DSoftBus module\nImpact: Successful exploitation of this vulnerability may affect service integrity.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31175" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-502" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-rxr6-8r65-89jw/GHSA-rxr6-8r65-89jw.json b/advisories/unreviewed/2025/04/GHSA-rxr6-8r65-89jw/GHSA-rxr6-8r65-89jw.json new file mode 100644 index 00000000000..f8e890722a9 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-rxr6-8r65-89jw/GHSA-rxr6-8r65-89jw.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rxr6-8r65-89jw", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31170" + ], + "details": "Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31170" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-v8r3-qw2m-qq7q/GHSA-v8r3-qw2m-qq7q.json b/advisories/unreviewed/2025/04/GHSA-v8r3-qw2m-qq7q/GHSA-v8r3-qw2m-qq7q.json new file mode 100644 index 00000000000..3832e7ce3cb --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-v8r3-qw2m-qq7q/GHSA-v8r3-qw2m-qq7q.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v8r3-qw2m-qq7q", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58110" + ], + "details": "Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58110" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-vx3g-vqr3-xrgv/GHSA-vx3g-vqr3-xrgv.json b/advisories/unreviewed/2025/04/GHSA-vx3g-vqr3-xrgv/GHSA-vx3g-vqr3-xrgv.json new file mode 100644 index 00000000000..f7060bd9f30 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-vx3g-vqr3-xrgv/GHSA-vx3g-vqr3-xrgv.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vx3g-vqr3-xrgv", + "modified": "2025-04-07T06:30:26Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58113" + ], + "details": "Vulnerability of improper resource management in the memory management module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58113" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-w388-5rjr-qx42/GHSA-w388-5rjr-qx42.json b/advisories/unreviewed/2025/04/GHSA-w388-5rjr-qx42/GHSA-w388-5rjr-qx42.json new file mode 100644 index 00000000000..587f7389732 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-w388-5rjr-qx42/GHSA-w388-5rjr-qx42.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w388-5rjr-qx42", + "modified": "2025-04-07T06:30:28Z", + "published": "2025-04-07T06:30:28Z", + "aliases": [ + "CVE-2025-31171" + ], + "details": "File read permission bypass vulnerability in the kernel file system module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31171" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-wrph-qwg9-rfvh/GHSA-wrph-qwg9-rfvh.json b/advisories/unreviewed/2025/04/GHSA-wrph-qwg9-rfvh/GHSA-wrph-qwg9-rfvh.json new file mode 100644 index 00000000000..e8fdac9dec5 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-wrph-qwg9-rfvh/GHSA-wrph-qwg9-rfvh.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wrph-qwg9-rfvh", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58125" + ], + "details": "Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58125" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-wwq8-pr59-5wqp/GHSA-wwq8-pr59-5wqp.json b/advisories/unreviewed/2025/04/GHSA-wwq8-pr59-5wqp/GHSA-wwq8-pr59-5wqp.json new file mode 100644 index 00000000000..2c753faa5ca --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-wwq8-pr59-5wqp/GHSA-wwq8-pr59-5wqp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wwq8-pr59-5wqp", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:26Z", + "aliases": [ + "CVE-2024-58109" + ], + "details": "Buffer overflow vulnerability in the codec module\nImpact: Successful exploitation of this vulnerability may affect availability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58109" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-x8q7-9mr8-m7q6/GHSA-x8q7-9mr8-m7q6.json b/advisories/unreviewed/2025/04/GHSA-x8q7-9mr8-m7q6/GHSA-x8q7-9mr8-m7q6.json new file mode 100644 index 00000000000..5c086435e47 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-x8q7-9mr8-m7q6/GHSA-x8q7-9mr8-m7q6.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x8q7-9mr8-m7q6", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2024-58126" + ], + "details": "Access control vulnerability in the security verification module\nImpact: Successful exploitation of this vulnerability will affect integrity and confidentiality.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-58126" + }, + { + "type": "WEB", + "url": "https://consumer.huawei.com/en/support/bulletin/2025/4" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xc47-677g-jg4q/GHSA-xc47-677g-jg4q.json b/advisories/unreviewed/2025/04/GHSA-xc47-677g-jg4q/GHSA-xc47-677g-jg4q.json new file mode 100644 index 00000000000..a9563d63516 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-xc47-677g-jg4q/GHSA-xc47-677g-jg4q.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xc47-677g-jg4q", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20661" + ], + "details": "In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20661" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/04/GHSA-xrqc-54h4-vmvv/GHSA-xrqc-54h4-vmvv.json b/advisories/unreviewed/2025/04/GHSA-xrqc-54h4-vmvv/GHSA-xrqc-54h4-vmvv.json new file mode 100644 index 00000000000..db829822999 --- /dev/null +++ b/advisories/unreviewed/2025/04/GHSA-xrqc-54h4-vmvv/GHSA-xrqc-54h4-vmvv.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xrqc-54h4-vmvv", + "modified": "2025-04-07T06:30:27Z", + "published": "2025-04-07T06:30:27Z", + "aliases": [ + "CVE-2025-20654" + ], + "details": "In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406897; Issue ID: MSV-2875.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20654" + }, + { + "type": "WEB", + "url": "https://corp.mediatek.com/product-security-bulletin/April-2025" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-04-07T04:15:19Z" + } +} \ No newline at end of file