netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-qxcv-34v8-5wrh
GHSA-3rwr-fq47-78qj
GHSA-57qp-9rcf-vpfx
GHSA-9222-9gfj-p99r
GHSA-pf35-fgmp-qc9h
This commit is contained in:
advisory-database[bot]
2025-04-15 00:33:44 +00:00
parent a7a4f70f5d
commit 8ef729767c
5 changed files with 213 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-qxcv-34v8-5wrh/GHSA-qxcv-34v8-5wrh.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxcv-34v8-5wrh",
"modified": "2022-05-13T01:28:30Z",
"modified": "2025-04-15T00:31:38Z",
"published": "2022-05-13T01:28:30Z",
"aliases": [
"CVE-2010-5305"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-10-070-02"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-10-070-02"
}
],
"database_specific": {
advisories/unreviewed/2025/04/GHSA-3rwr-fq47-78qj/GHSA-3rwr-fq47-78qj.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rwr-fq47-78qj",
"modified": "2025-04-15T00:31:38Z",
"published": "2025-04-15T00:31:38Z",
"aliases": [
"CVE-2025-3592"
],
"details": "A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3592"
},
{
"type": "WEB",
"url": "https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-2.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.304647"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.304647"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550910"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-14T22:15:17Z"
}
}
advisories/unreviewed/2025/04/GHSA-57qp-9rcf-vpfx/GHSA-57qp-9rcf-vpfx.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57qp-9rcf-vpfx",
"modified": "2025-04-15T00:31:39Z",
"published": "2025-04-15T00:31:39Z",
"aliases": [
"CVE-2025-3593"
],
"details": "A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3593"
},
{
"type": "WEB",
"url": "https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-fileUpload.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.304648"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.304648"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550912"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-14T23:15:22Z"
}
}
advisories/unreviewed/2025/04/GHSA-9222-9gfj-p99r/GHSA-9222-9gfj-p99r.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9222-9gfj-p99r",
"modified": "2025-04-15T00:31:38Z",
"published": "2025-04-15T00:31:38Z",
"aliases": [
"CVE-2025-3590"
],
"details": "A vulnerability has been found in Adianti Framework up to 8.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.1 is able to address this issue. It is recommended to upgrade the affected component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3590"
},
{
"type": "WEB",
"url": "https://gist.github.com/mcdruid/8412cfb55f443a1344ff41af0ce1b215"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.304645"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.304645"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550296"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-14T22:15:16Z"
}
}
advisories/unreviewed/2025/04/GHSA-pf35-fgmp-qc9h/GHSA-pf35-fgmp-qc9h.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pf35-fgmp-qc9h",
"modified": "2025-04-15T00:31:38Z",
"published": "2025-04-15T00:31:38Z",
"aliases": [
"CVE-2025-3591"
],
"details": "A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3591"
},
{
"type": "WEB",
"url": "https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-1.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.304646"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.304646"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550909"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-14T22:15:16Z"
}
}