From 8c98b9badff312922ebb9f58d59482a183b765b0 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 23 Apr 2025 06:32:43 +0000
Subject: [PATCH] Publish Advisories

GHSA-2w8j-h6jx-gc5q
GHSA-p2hm-hc2v-xwc6
---
 .../GHSA-2w8j-h6jx-gc5q.json                  | 36 +++++++++++++++++++
 .../GHSA-p2hm-hc2v-xwc6.json                  | 36 +++++++++++++++++++
 2 files changed, 72 insertions(+)
 create mode 100644 advisories/unreviewed/2025/04/GHSA-2w8j-h6jx-gc5q/GHSA-2w8j-h6jx-gc5q.json
 create mode 100644 advisories/unreviewed/2025/04/GHSA-p2hm-hc2v-xwc6/GHSA-p2hm-hc2v-xwc6.json

diff --git a/advisories/unreviewed/2025/04/GHSA-2w8j-h6jx-gc5q/GHSA-2w8j-h6jx-gc5q.json b/advisories/unreviewed/2025/04/GHSA-2w8j-h6jx-gc5q/GHSA-2w8j-h6jx-gc5q.json
new file mode 100644
index 00000000000..70ec1344f05
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-2w8j-h6jx-gc5q/GHSA-2w8j-h6jx-gc5q.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2w8j-h6jx-gc5q",
+  "modified": "2025-04-23T06:31:26Z",
+  "published": "2025-04-23T06:31:26Z",
+  "aliases": [
+    "CVE-2025-1056"
+  ],
+  "details": "Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location.\nAxis has released a patched version for the highlighted flaw. Please \nrefer to the Axis security advisory for more information and solution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1056"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.axis.com/dam/public/e4/2e/b2/cve-2025-1056pdf-en-US-479106.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-73"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-23T06:15:46Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/04/GHSA-p2hm-hc2v-xwc6/GHSA-p2hm-hc2v-xwc6.json b/advisories/unreviewed/2025/04/GHSA-p2hm-hc2v-xwc6/GHSA-p2hm-hc2v-xwc6.json
new file mode 100644
index 00000000000..68de6db6568
--- /dev/null
+++ b/advisories/unreviewed/2025/04/GHSA-p2hm-hc2v-xwc6/GHSA-p2hm-hc2v-xwc6.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p2hm-hc2v-xwc6",
+  "modified": "2025-04-23T06:31:26Z",
+  "published": "2025-04-23T06:31:26Z",
+  "aliases": [
+    "CVE-2025-0926"
+  ],
+  "details": "Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for a non-admin user to remove system files causing a boot loop by redirecting a file deletion when recording video.\nAxis has released a patched version for the highlighted flaw. Please \nrefer to the Axis security advisory for more information and solution.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0926"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.axis.com/dam/public/9d/fe/3f/cve-2025-0926pdf-en-US-479105.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-732"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-04-23T06:15:45Z"
+  }
+}
\ No newline at end of file