netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-gwr6-5fvh-8v7r
GHSA-3mp3-6fg3-7hxj
GHSA-45rh-35p3-x338
GHSA-j75p-7hp3-3p63
This commit is contained in:
advisory-database[bot]
2025-05-15 03:33:27 +00:00
parent 51227ec4aa
commit 6e049e9168
4 changed files with 75 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/07/GHSA-gwr6-5fvh-8v7r/GHSA-gwr6-5fvh-8v7r.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gwr6-5fvh-8v7r",
"modified": "2025-05-09T06:32:36Z",
"modified": "2025-05-15T03:31:28Z",
"published": "2024-07-26T15:31:51Z",
"aliases": [
"CVE-2024-7128"
@@ -23,6 +23,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4427"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4723"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-7128"
advisories/unreviewed/2024/12/GHSA-3mp3-6fg3-7hxj/GHSA-3mp3-6fg3-7hxj.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3mp3-6fg3-7hxj",
"modified": "2024-12-27T21:30:30Z",
"modified": "2025-05-15T03:31:28Z",
"published": "2024-12-27T18:30:26Z",
"aliases": [
"CVE-2024-12987"
@@ -23,6 +23,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12987"
},
{
"type": "WEB",
"url": "https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf"
},
{
"type": "WEB",
"url": "https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf"
},
{
"type": "WEB",
"url": "https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf"
},
{
"type": "WEB",
"url": "https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f"
advisories/unreviewed/2025/04/GHSA-45rh-35p3-x338/GHSA-45rh-35p3-x338.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45rh-35p3-x338",
"modified": "2025-04-23T21:30:36Z",
"modified": "2025-05-15T03:31:28Z",
"published": "2025-04-23T21:30:36Z",
"aliases": [
"CVE-2025-46400"
@@ -19,6 +19,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46400"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-46400"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2362054"
},
{
"type": "WEB",
"url": "https://sourceforge.net/p/mcj/tickets/187"
advisories/unreviewed/2025/05/GHSA-j75p-7hp3-3p63/GHSA-j75p-7hp3-3p63.json
+48
View File
@@ -0,0 +1,48 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j75p-7hp3-3p63",
"modified": "2025-05-15T03:31:28Z",
"published": "2025-05-15T03:31:28Z",
"aliases": [
"CVE-2025-4579"
],
"details": "The WP Content Security Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blocked-uri and effective-directive parameters in all versions up to, and including, 2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4579"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L597"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L612"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-content-security-policy/tags/2.3/includes/WP_CSP.php#L659"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f3c4ba08-a9fa-439a-a887-b8c113f78e20?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T02:15:21Z"
}
}