From 9b769838891832aa5aac3382b29fd2fd188a955f Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 21 Jan 2025 12:32:15 +0000 Subject: [PATCH] Publish Advisories GHSA-23cq-gcvc-5552 GHSA-2767-g28h-69jv GHSA-2jx6-v8vf-jjp6 GHSA-3ppf-39fx-hw97 GHSA-4hjr-56f9-j54w GHSA-6mfr-g9g7-ccpv GHSA-796q-jfxq-692j GHSA-87xf-mfww-rh45 GHSA-88v5-46c4-6cxw GHSA-9g3f-2224-m2qq GHSA-ccfr-2656-2j6h GHSA-cjf9-gqj4-56m7 GHSA-fh5r-crhr-qrrq GHSA-frp4-f42v-g8xw GHSA-gpw9-59r8-wpm7 GHSA-h264-cfq7-qp2r GHSA-h5qv-432c-96q7 GHSA-hq4j-7m45-9jhp GHSA-j6wf-6qh3-cm45 GHSA-jgx4-7v3v-vwfm GHSA-jxhr-pqx8-rqj9 GHSA-mvwv-8vjm-2v48 GHSA-qw8g-4j5w-5j26 GHSA-x9vx-jm6h-mwx9 --- .../GHSA-23cq-gcvc-5552.json | 36 ++++++++++++ .../GHSA-2767-g28h-69jv.json | 33 +++++++++++ .../GHSA-2jx6-v8vf-jjp6.json | 36 ++++++++++++ .../GHSA-3ppf-39fx-hw97.json | 37 ++++++++++++ .../GHSA-4hjr-56f9-j54w.json | 37 ++++++++++++ .../GHSA-6mfr-g9g7-ccpv.json | 48 ++++++++++++++++ .../GHSA-796q-jfxq-692j.json | 44 +++++++++++++++ .../GHSA-87xf-mfww-rh45.json | 36 ++++++++++++ .../GHSA-88v5-46c4-6cxw.json | 6 +- .../GHSA-9g3f-2224-m2qq.json | 33 +++++++++++ .../GHSA-ccfr-2656-2j6h.json | 53 ++++++++++++++++++ .../GHSA-cjf9-gqj4-56m7.json | 33 +++++++++++ .../GHSA-fh5r-crhr-qrrq.json | 40 +++++++++++++ .../GHSA-frp4-f42v-g8xw.json | 53 ++++++++++++++++++ .../GHSA-gpw9-59r8-wpm7.json | 31 ++++++++++ .../GHSA-h264-cfq7-qp2r.json | 40 +++++++++++++ .../GHSA-h5qv-432c-96q7.json | 36 ++++++++++++ .../GHSA-hq4j-7m45-9jhp.json | 40 +++++++++++++ .../GHSA-j6wf-6qh3-cm45.json | 45 +++++++++++++++ .../GHSA-jgx4-7v3v-vwfm.json | 36 ++++++++++++ .../GHSA-jxhr-pqx8-rqj9.json | 40 +++++++++++++ .../GHSA-mvwv-8vjm-2v48.json | 56 +++++++++++++++++++ .../GHSA-qw8g-4j5w-5j26.json | 37 ++++++++++++ .../GHSA-x9vx-jm6h-mwx9.json | 48 ++++++++++++++++ 24 files changed, 933 insertions(+), 1 deletion(-) create mode 100644 advisories/unreviewed/2025/01/GHSA-23cq-gcvc-5552/GHSA-23cq-gcvc-5552.json create mode 100644 advisories/unreviewed/2025/01/GHSA-2767-g28h-69jv/GHSA-2767-g28h-69jv.json create mode 100644 advisories/unreviewed/2025/01/GHSA-2jx6-v8vf-jjp6/GHSA-2jx6-v8vf-jjp6.json create mode 100644 advisories/unreviewed/2025/01/GHSA-3ppf-39fx-hw97/GHSA-3ppf-39fx-hw97.json create mode 100644 advisories/unreviewed/2025/01/GHSA-4hjr-56f9-j54w/GHSA-4hjr-56f9-j54w.json create mode 100644 advisories/unreviewed/2025/01/GHSA-6mfr-g9g7-ccpv/GHSA-6mfr-g9g7-ccpv.json create mode 100644 advisories/unreviewed/2025/01/GHSA-796q-jfxq-692j/GHSA-796q-jfxq-692j.json create mode 100644 advisories/unreviewed/2025/01/GHSA-87xf-mfww-rh45/GHSA-87xf-mfww-rh45.json create mode 100644 advisories/unreviewed/2025/01/GHSA-9g3f-2224-m2qq/GHSA-9g3f-2224-m2qq.json create mode 100644 advisories/unreviewed/2025/01/GHSA-ccfr-2656-2j6h/GHSA-ccfr-2656-2j6h.json create mode 100644 advisories/unreviewed/2025/01/GHSA-cjf9-gqj4-56m7/GHSA-cjf9-gqj4-56m7.json create mode 100644 advisories/unreviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json create mode 100644 advisories/unreviewed/2025/01/GHSA-frp4-f42v-g8xw/GHSA-frp4-f42v-g8xw.json create mode 100644 advisories/unreviewed/2025/01/GHSA-gpw9-59r8-wpm7/GHSA-gpw9-59r8-wpm7.json create mode 100644 advisories/unreviewed/2025/01/GHSA-h264-cfq7-qp2r/GHSA-h264-cfq7-qp2r.json create mode 100644 advisories/unreviewed/2025/01/GHSA-h5qv-432c-96q7/GHSA-h5qv-432c-96q7.json create mode 100644 advisories/unreviewed/2025/01/GHSA-hq4j-7m45-9jhp/GHSA-hq4j-7m45-9jhp.json create mode 100644 advisories/unreviewed/2025/01/GHSA-j6wf-6qh3-cm45/GHSA-j6wf-6qh3-cm45.json create mode 100644 advisories/unreviewed/2025/01/GHSA-jgx4-7v3v-vwfm/GHSA-jgx4-7v3v-vwfm.json create mode 100644 advisories/unreviewed/2025/01/GHSA-jxhr-pqx8-rqj9/GHSA-jxhr-pqx8-rqj9.json create mode 100644 advisories/unreviewed/2025/01/GHSA-mvwv-8vjm-2v48/GHSA-mvwv-8vjm-2v48.json create mode 100644 advisories/unreviewed/2025/01/GHSA-qw8g-4j5w-5j26/GHSA-qw8g-4j5w-5j26.json create mode 100644 advisories/unreviewed/2025/01/GHSA-x9vx-jm6h-mwx9/GHSA-x9vx-jm6h-mwx9.json diff --git a/advisories/unreviewed/2025/01/GHSA-23cq-gcvc-5552/GHSA-23cq-gcvc-5552.json b/advisories/unreviewed/2025/01/GHSA-23cq-gcvc-5552/GHSA-23cq-gcvc-5552.json new file mode 100644 index 00000000000..bf1c05bac52 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-23cq-gcvc-5552/GHSA-23cq-gcvc-5552.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-23cq-gcvc-5552", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-37284" + ], + "details": "Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process encoded as a multibyte character. This leads to an uncaught exception causing Elastic Defend to crash which in turn will prevent it from quarantining the file and/or killing the process.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37284" + }, + { + "type": "WEB", + "url": "https://discuss.elastic.co/t/elastic-defend-8-13-3-security-update-esa-2024-24/373441" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-755" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2767-g28h-69jv/GHSA-2767-g28h-69jv.json b/advisories/unreviewed/2025/01/GHSA-2767-g28h-69jv/GHSA-2767-g28h-69jv.json new file mode 100644 index 00000000000..1dfc721efec --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2767-g28h-69jv/GHSA-2767-g28h-69jv.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2767-g28h-69jv", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57934" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfgraph: Add READ_ONCE() when accessing fgraph_array[]\n\nIn __ftrace_return_to_handler(), a loop iterates over the fgraph_array[]\nelements, which are fgraph_ops. The loop checks if an element is a\nfgraph_stub to prevent using a fgraph_stub afterward.\n\nHowever, if the compiler reloads fgraph_array[] after this check, it might\nrace with an update to fgraph_array[] that introduces a fgraph_stub. This\ncould result in the stub being processed, but the stub contains a null\n\"func_hash\" field, leading to a NULL pointer dereference.\n\nTo ensure that the gops compared against the fgraph_stub matches the gops\nprocessed later, add a READ_ONCE(). A similar patch appears in commit\n63a8dfb (\"function_graph: Add READ_ONCE() when accessing fgraph_array[]\").", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57934" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/b68b2a3fbacc7be720ef589d489bcacdd05c6d38" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/d65474033740ded0a4fe9a097fce72328655b41d" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2jx6-v8vf-jjp6/GHSA-2jx6-v8vf-jjp6.json b/advisories/unreviewed/2025/01/GHSA-2jx6-v8vf-jjp6/GHSA-2jx6-v8vf-jjp6.json new file mode 100644 index 00000000000..d4b93888e6c --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2jx6-v8vf-jjp6/GHSA-2jx6-v8vf-jjp6.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2jx6-v8vf-jjp6", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2025-0614" + ], + "details": "Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability could allow an attacker to modify a single email to contain upper and lower case characters in order to access the application and win prizes as many times as wanted.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0614" + }, + { + "type": "WEB", + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-qualifios-wheel-fortune" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-3ppf-39fx-hw97/GHSA-3ppf-39fx-hw97.json b/advisories/unreviewed/2025/01/GHSA-3ppf-39fx-hw97/GHSA-3ppf-39fx-hw97.json new file mode 100644 index 00000000000..907f3ce8a53 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-3ppf-39fx-hw97/GHSA-3ppf-39fx-hw97.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3ppf-39fx-hw97", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57936" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Fix max SGEs for the Work Request\n\nGen P7 supports up to 13 SGEs for now. WQE software structure\ncan hold only 6 now. Since the max send sge is reported as\n13, the stack can give requests up to 13 SGEs. This is causing\ntraffic failures and system crashes.\n\nUse the define for max SGE supported for variable size. This\nwill work for both static and variable WQEs.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57936" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3de1b50f055dc2ca7072a526cdda21f691c22dd9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/79d330fbdffd8cee06d8bdf38d82cb62d8363a27" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9a479088e0c8f6140b8c7752b563bc8c6c6dcc8c" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-4hjr-56f9-j54w/GHSA-4hjr-56f9-j54w.json b/advisories/unreviewed/2025/01/GHSA-4hjr-56f9-j54w/GHSA-4hjr-56f9-j54w.json new file mode 100644 index 00000000000..de845e46263 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-4hjr-56f9-j54w/GHSA-4hjr-56f9-j54w.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4hjr-56f9-j54w", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57932" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XDP xmit NDO on existence of xdp queues\n\nIn GVE, dedicated XDP queues only exist when an XDP program is installed\nand the interface is up. As such, the NDO XDP XMIT callback should\nreturn early if either of these conditions are false.\n\nIn the case of no loaded XDP program, priv->num_xdp_queues=0 which can\ncause a divide-by-zero error, and in the case of interface down,\nnum_xdp_queues remains untouched to persist XDP queue count for the next\ninterface up, but the TX pointer itself would be NULL.\n\nThe XDP xmit callback also needs to synchronize with a device\ntransitioning from open to close. This synchronization will happen via\nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,\nwhich waits for any RCU critical sections at call-time to complete.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57932" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/35f44eed5828cf1bc7e760d1993ed8549ba41c7b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/cbe9eb2c39d09f3c8574febcfa39d8c09d0c7cb5" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ff7c2dea9dd1a436fc79d6273adffdcc4a7ffea3" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-6mfr-g9g7-ccpv/GHSA-6mfr-g9g7-ccpv.json b/advisories/unreviewed/2025/01/GHSA-6mfr-g9g7-ccpv/GHSA-6mfr-g9g7-ccpv.json new file mode 100644 index 00000000000..ef62d8f14d8 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-6mfr-g9g7-ccpv/GHSA-6mfr-g9g7-ccpv.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6mfr-g9g7-ccpv", + "modified": "2025-01-21T12:30:46Z", + "published": "2025-01-21T12:30:46Z", + "aliases": [ + "CVE-2024-12005" + ], + "details": "The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12005" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-bibtex/trunk/wp-bibtex-options.php#L55" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3225023" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/wp-bibtex/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/077538e2-ef9a-490f-9188-31f9cb82aaf7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-796q-jfxq-692j/GHSA-796q-jfxq-692j.json b/advisories/unreviewed/2025/01/GHSA-796q-jfxq-692j/GHSA-796q-jfxq-692j.json new file mode 100644 index 00000000000..0cd6a3fa884 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-796q-jfxq-692j/GHSA-796q-jfxq-692j.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-796q-jfxq-692j", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-13230" + ], + "details": "The Social Share, Social Login and Social Comments Plugin – Super Socializer plugin for WordPress is vulnerable to Limited SQL Injection via the ‘SuperSocializerKey’ parameter in all versions up to, and including, 7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional values into the already existing query that can be used to extract user metadata from the database.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13230" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/super-socializer/trunk/super_socializer.php#L291" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3225440" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4d7b2a7f-3c67-4df1-bb15-e7f4f0035953?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-87xf-mfww-rh45/GHSA-87xf-mfww-rh45.json b/advisories/unreviewed/2025/01/GHSA-87xf-mfww-rh45/GHSA-87xf-mfww-rh45.json new file mode 100644 index 00000000000..731f4216c82 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-87xf-mfww-rh45/GHSA-87xf-mfww-rh45.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-87xf-mfww-rh45", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-52973" + ], + "details": "An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted request to /api/log_entries/summary. This can be carried out by users with read access to the Observability-Logs feature in Kibana.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52973" + }, + { + "type": "WEB", + "url": "https://discuss.elastic.co/t/kibana-7-17-23-and-8-14-2-security-update-esa-2024-26/373443" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-770" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-88v5-46c4-6cxw/GHSA-88v5-46c4-6cxw.json b/advisories/unreviewed/2025/01/GHSA-88v5-46c4-6cxw/GHSA-88v5-46c4-6cxw.json index 1190f177743..21a45e52ba8 100644 --- a/advisories/unreviewed/2025/01/GHSA-88v5-46c4-6cxw/GHSA-88v5-46c4-6cxw.json +++ b/advisories/unreviewed/2025/01/GHSA-88v5-46c4-6cxw/GHSA-88v5-46c4-6cxw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-88v5-46c4-6cxw", - "modified": "2025-01-19T12:31:26Z", + "modified": "2025-01-21T12:30:46Z", "published": "2025-01-19T12:31:26Z", "aliases": [ "CVE-2025-21654" @@ -18,6 +18,10 @@ "type": "WEB", "url": "https://git.kernel.org/stable/c/3c7c90274ae339e1ad443c9be1c67a20b80b9c76" }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/950b604384fd75d62e860bec7135b2b62eb4d508" + }, { "type": "WEB", "url": "https://git.kernel.org/stable/c/a1a541fbfa7e97c1100144db34b57553d7164ce5" diff --git a/advisories/unreviewed/2025/01/GHSA-9g3f-2224-m2qq/GHSA-9g3f-2224-m2qq.json b/advisories/unreviewed/2025/01/GHSA-9g3f-2224-m2qq/GHSA-9g3f-2224-m2qq.json new file mode 100644 index 00000000000..9b48f189966 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-9g3f-2224-m2qq/GHSA-9g3f-2224-m2qq.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9g3f-2224-m2qq", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57935" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP\n\nIf it fails to modify QP to RTR, dip_ctx will not be attached. And\nduring detroying QP, the invalid dip_ctx pointer will be accessed.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57935" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/0572eccf239ce4bd89bd531767ec5ab20e249290" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a448c775f0aec6cfbee4bda561447c707153504a" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-ccfr-2656-2j6h/GHSA-ccfr-2656-2j6h.json b/advisories/unreviewed/2025/01/GHSA-ccfr-2656-2j6h/GHSA-ccfr-2656-2j6h.json new file mode 100644 index 00000000000..6ba5b25df7d --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-ccfr-2656-2j6h/GHSA-ccfr-2656-2j6h.json @@ -0,0 +1,53 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ccfr-2656-2j6h", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57931" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: ignore unknown extended permissions\n\nWhen evaluating extended permissions, ignore unknown permissions instead\nof calling BUG(). This commit ensures that future permissions can be\nadded without interfering with older kernels.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57931" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/712137b177b45f255ce5687e679d950fcb218256" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/900f83cf376bdaf798b6f5dcb2eae0c822e908b6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c1dbd28a079553de0023e1c938c713efeeee400f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/c79324d42fa48372e0acb306a2761cc642bd4db0" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/efefe36c03a73bb81c0720ce397659a5051b73fa" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f45a77dd24ae9ddb474303ec3975c376bd99fc51" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f70e4b9ec69d9a74b84c17767a9a4eda8c901021" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-cjf9-gqj4-56m7/GHSA-cjf9-gqj4-56m7.json b/advisories/unreviewed/2025/01/GHSA-cjf9-gqj4-56m7/GHSA-cjf9-gqj4-56m7.json new file mode 100644 index 00000000000..a47d3542501 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-cjf9-gqj4-56m7/GHSA-cjf9-gqj4-56m7.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cjf9-gqj4-56m7", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57937" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: reinstate ability to map write-sealed memfd mappings read-only\n\nPatch series \"mm: reinstate ability to map write-sealed memfd mappings\nread-only\".\n\nIn commit 158978945f31 (\"mm: perform the mapping_map_writable() check\nafter call_mmap()\") (and preceding changes in the same series) it became\npossible to mmap() F_SEAL_WRITE sealed memfd mappings read-only.\n\nCommit 5de195060b2e (\"mm: resolve faulty mmap_region() error path\nbehaviour\") unintentionally undid this logic by moving the\nmapping_map_writable() check before the shmem_mmap() hook is invoked,\nthereby regressing this change.\n\nThis series reworks how we both permit write-sealed mappings being mapped\nread-only and disallow mprotect() from undoing the write-seal, fixing this\nregression.\n\nWe also add a regression test to ensure that we do not accidentally\nregress this in future.\n\nThanks to Julian Orth for reporting this regression.\n\n\nThis patch (of 2):\n\nIn commit 158978945f31 (\"mm: perform the mapping_map_writable() check\nafter call_mmap()\") (and preceding changes in the same series) it became\npossible to mmap() F_SEAL_WRITE sealed memfd mappings read-only.\n\nThis was previously unnecessarily disallowed, despite the man page\ndocumentation indicating that it would be, thereby limiting the usefulness\nof F_SEAL_WRITE logic.\n\nWe fixed this by adapting logic that existed for the F_SEAL_FUTURE_WRITE\nseal (one which disallows future writes to the memfd) to also be used for\nF_SEAL_WRITE.\n\nFor background - the F_SEAL_FUTURE_WRITE seal clears VM_MAYWRITE for a\nread-only mapping to disallow mprotect() from overriding the seal - an\noperation performed by seal_check_write(), invoked from shmem_mmap(), the\nf_op->mmap() hook used by shmem mappings.\n\nBy extending this to F_SEAL_WRITE and critically - checking\nmapping_map_writable() to determine if we may map the memfd AFTER we\ninvoke shmem_mmap() - the desired logic becomes possible. This is because\nmapping_map_writable() explicitly checks for VM_MAYWRITE, which we will\nhave cleared.\n\nCommit 5de195060b2e (\"mm: resolve faulty mmap_region() error path\nbehaviour\") unintentionally undid this logic by moving the\nmapping_map_writable() check before the shmem_mmap() hook is invoked,\nthereby regressing this change.\n\nWe reinstate this functionality by moving the check out of shmem_mmap()\nand instead performing it in do_mmap() at the point at which VMA flags are\nbeing determined, which seems in any case to be a more appropriate place\nin which to make this determination.\n\nIn order to achieve this we rework memfd seal logic to allow us access to\nthis information using existing logic and eliminate the clearing of\nVM_MAYWRITE from seal_check_write() which we are performing in do_mmap()\ninstead.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57937" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/464770df46095e6967334d77113972960f7ef1fa" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8ec396d05d1b737c87311fb7311f753b02c2a6b1" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json b/advisories/unreviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json new file mode 100644 index 00000000000..d6311aa9429 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-fh5r-crhr-qrrq/GHSA-fh5r-crhr-qrrq.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fh5r-crhr-qrrq", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2025-23184" + ], + "details": "A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10, 3.6.5 and 4.0.6. In some edge cases, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system (it applies to servers and clients).", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23184" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/lfs8l63rnctnj2skfrxyys7v8fgnt122" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/01/20/3" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-400" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T10:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-frp4-f42v-g8xw/GHSA-frp4-f42v-g8xw.json b/advisories/unreviewed/2025/01/GHSA-frp4-f42v-g8xw/GHSA-frp4-f42v-g8xw.json new file mode 100644 index 00000000000..7ab9672ed81 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-frp4-f42v-g8xw/GHSA-frp4-f42v-g8xw.json @@ -0,0 +1,53 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-frp4-f42v-g8xw", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57938" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()\n\nWhile by default max_autoclose equals to INT_MAX / HZ, one may set\nnet.sctp.max_autoclose to UINT_MAX. There is code in\nsctp_association_init() that can consequently trigger overflow.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57938" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/081bdb3a31674339313c6d702af922bc29de2c53" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2297890b778b0e7c8200d6818154f7e461d78e94" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/271f031f4c31c07e2a85a1ba2b4c8e734909a477" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4e86729d1ff329815a6e8a920cb554a1d4cb5b8d" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7af63ef5fe4d480064eb22583b24ffc8b408183a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/94b7ed0a4896420988e1776942f0a3f67167873e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f9c3adb083d3278f065a83c3f667f1246c74c31f" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-gpw9-59r8-wpm7/GHSA-gpw9-59r8-wpm7.json b/advisories/unreviewed/2025/01/GHSA-gpw9-59r8-wpm7/GHSA-gpw9-59r8-wpm7.json new file mode 100644 index 00000000000..bfcd50cbbb0 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-gpw9-59r8-wpm7/GHSA-gpw9-59r8-wpm7.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gpw9-59r8-wpm7", + "modified": "2025-01-21T12:30:46Z", + "published": "2025-01-21T12:30:46Z", + "aliases": [ + "CVE-2024-6466" + ], + "details": "NEC Corporation's WebSAM DeploymentManager v6.0 to v6.80 allows an attacker to reset configurations or restart products via network with X-FRAME-OPTIONS is not specified.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6466" + }, + { + "type": "WEB", + "url": "https://jpn.nec.com/security-info/secinfo/nv15-019_en.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1021" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-h264-cfq7-qp2r/GHSA-h264-cfq7-qp2r.json b/advisories/unreviewed/2025/01/GHSA-h264-cfq7-qp2r/GHSA-h264-cfq7-qp2r.json new file mode 100644 index 00000000000..1ca4428fd77 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-h264-cfq7-qp2r/GHSA-h264-cfq7-qp2r.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h264-cfq7-qp2r", + "modified": "2025-01-21T12:30:46Z", + "published": "2025-01-21T12:30:46Z", + "aliases": [ + "CVE-2024-12104" + ], + "details": "The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12104" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225314%40atarim-visual-collaboration&new=3225314%40atarim-visual-collaboration&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d40c658-a156-470e-bf93-a1f2ccec9c61?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-h5qv-432c-96q7/GHSA-h5qv-432c-96q7.json b/advisories/unreviewed/2025/01/GHSA-h5qv-432c-96q7/GHSA-h5qv-432c-96q7.json new file mode 100644 index 00000000000..e6ca1a12a10 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-h5qv-432c-96q7/GHSA-h5qv-432c-96q7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h5qv-432c-96q7", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2025-0615" + ], + "details": "Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ symbol to access the application and win prizes as many times as wanted.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0615" + }, + { + "type": "WEB", + "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-qualifios-wheel-fortune" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hq4j-7m45-9jhp/GHSA-hq4j-7m45-9jhp.json b/advisories/unreviewed/2025/01/GHSA-hq4j-7m45-9jhp/GHSA-hq4j-7m45-9jhp.json new file mode 100644 index 00000000000..be144983234 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hq4j-7m45-9jhp/GHSA-hq4j-7m45-9jhp.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hq4j-7m45-9jhp", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2025-0450" + ], + "details": "The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality in all versions up to, and including, 27.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0450" + }, + { + "type": "WEB", + "url": "https://support.muffingroup.com/changelog" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/340c14ea-70b9-4f60-84b3-97328432f110?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-j6wf-6qh3-cm45/GHSA-j6wf-6qh3-cm45.json b/advisories/unreviewed/2025/01/GHSA-j6wf-6qh3-cm45/GHSA-j6wf-6qh3-cm45.json new file mode 100644 index 00000000000..8c7cba31218 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-j6wf-6qh3-cm45/GHSA-j6wf-6qh3-cm45.json @@ -0,0 +1,45 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j6wf-6qh3-cm45", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-57930" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Have process_string() also allow arrays\n\nIn order to catch a common bug where a TRACE_EVENT() TP_fast_assign()\nassigns an address of an allocated string to the ring buffer and then\nreferences it in TP_printk(), which can be executed hours later when the\nstring is free, the function test_event_printk() runs on all events as\nthey are registered to make sure there's no unwanted dereferencing.\n\nIt calls process_string() to handle cases in TP_printk() format that has\n\"%s\". It returns whether or not the string is safe. But it can have some\nfalse positives.\n\nFor instance, xe_bo_move() has:\n\n TP_printk(\"move_lacks_source:%s, migrate object %p [size %zu] from %s to %s device_id:%s\",\n __entry->move_lacks_source ? \"yes\" : \"no\", __entry->bo, __entry->size,\n xe_mem_type_to_name[__entry->old_placement],\n xe_mem_type_to_name[__entry->new_placement], __get_str(device_id))\n\nWhere the \"%s\" references into xe_mem_type_to_name[]. This is an array of\npointers that should be safe for the event to access. Instead of flagging\nthis as a bad reference, if a reference points to an array, where the\nrecord field is the index, consider it safe.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57930" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3bcdc9039a6e9e6e47ed689a37b8d57894a3c571" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/631b1e09e213c86d5a4ce23d45c81af473bb0ac7" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/92bd18c74624e5eb9f96e70076aa46293f4b626f" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/a64e5295ebc4afdefe69cdf16cc286a60ff8ba4b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/afc6717628f959941d7b33728570568b4af1c4b8" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-jgx4-7v3v-vwfm/GHSA-jgx4-7v3v-vwfm.json b/advisories/unreviewed/2025/01/GHSA-jgx4-7v3v-vwfm/GHSA-jgx4-7v3v-vwfm.json new file mode 100644 index 00000000000..b4f09e8f3f7 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-jgx4-7v3v-vwfm/GHSA-jgx4-7v3v-vwfm.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jgx4-7v3v-vwfm", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-43709" + ], + "details": "An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43709" + }, + { + "type": "WEB", + "url": "https://discuss.elastic.co/t/elasticsearch-7-17-21-and-8-13-3-security-update-esa-2024-25/373442" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-770" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-jxhr-pqx8-rqj9/GHSA-jxhr-pqx8-rqj9.json b/advisories/unreviewed/2025/01/GHSA-jxhr-pqx8-rqj9/GHSA-jxhr-pqx8-rqj9.json new file mode 100644 index 00000000000..c4c7c14ed02 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-jxhr-pqx8-rqj9/GHSA-jxhr-pqx8-rqj9.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jxhr-pqx8-rqj9", + "modified": "2025-01-21T12:30:46Z", + "published": "2025-01-21T12:30:46Z", + "aliases": [ + "CVE-2024-13404" + ], + "details": "The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13404" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225694%40link-library&new=3225694%40link-library&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f01362dc-4f3d-4b77-b802-01b436287237?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T10:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-mvwv-8vjm-2v48/GHSA-mvwv-8vjm-2v48.json b/advisories/unreviewed/2025/01/GHSA-mvwv-8vjm-2v48/GHSA-mvwv-8vjm-2v48.json new file mode 100644 index 00000000000..1277183b7c0 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-mvwv-8vjm-2v48/GHSA-mvwv-8vjm-2v48.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mvwv-8vjm-2v48", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-13444" + ], + "details": "The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13444" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L124" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-admin.php#L350" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/wp-greet/trunk/wpg-form.php#L253" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3225035" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/wp-greet/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/dafc40bf-833a-4d42-b9bc-c7cf2b234ef5?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-qw8g-4j5w-5j26/GHSA-qw8g-4j5w-5j26.json b/advisories/unreviewed/2025/01/GHSA-qw8g-4j5w-5j26/GHSA-qw8g-4j5w-5j26.json new file mode 100644 index 00000000000..ecb8cb9d773 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-qw8g-4j5w-5j26/GHSA-qw8g-4j5w-5j26.json @@ -0,0 +1,37 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qw8g-4j5w-5j26", + "modified": "2025-01-21T12:30:48Z", + "published": "2025-01-21T12:30:48Z", + "aliases": [ + "CVE-2024-57933" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: guard XSK operations on the existence of queues\n\nThis patch predicates the enabling and disabling of XSK pools on the\nexistence of queues. As it stands, if the interface is down, disabling\nor enabling XSK pools would result in a crash, as the RX queue pointer\nwould be NULL. XSK pool registration will occur as part of the next\ninterface up.\n\nSimilarly, xsk_wakeup needs be guarded against queues disappearing\nwhile the function is executing, so a check against the\nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the\ndisabling of the bit and the synchronize_net() in gve_turndown.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57933" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/40338d7987d810fcaa95c500b1068a52b08eec9b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/771d66f2bd8c4dba1286a9163ab982cecd825718" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8e8d7037c89437af12725f454e2eaf40e8166c0f" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T12:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-x9vx-jm6h-mwx9/GHSA-x9vx-jm6h-mwx9.json b/advisories/unreviewed/2025/01/GHSA-x9vx-jm6h-mwx9/GHSA-x9vx-jm6h-mwx9.json new file mode 100644 index 00000000000..b99971c3156 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-x9vx-jm6h-mwx9/GHSA-x9vx-jm6h-mwx9.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x9vx-jm6h-mwx9", + "modified": "2025-01-21T12:30:47Z", + "published": "2025-01-21T12:30:47Z", + "aliases": [ + "CVE-2024-11226" + ], + "details": "The FireCask Like & Share Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11226" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/facebook-like-send-button/tags/1.2/class-frontend.php#L121" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3225838" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/facebook-like-send-button/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5b9d61cd-1955-40d0-99b4-c75f480733f8?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-21T11:15:08Z" + } +} \ No newline at end of file