netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-06-10 18:33:34 +00:00
parent 34a684fd40
commit a2e53e3c7e
148 changed files with 4715 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/01/GHSA-mxjq-xrv7-m36q/GHSA-mxjq-xrv7-m36q.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxjq-xrv7-m36q",
"modified": "2024-01-29T18:31:48Z",
"modified": "2025-06-10T18:32:10Z",
"published": "2024-01-23T21:30:21Z",
"aliases": [
"CVE-2023-52327"
advisories/unreviewed/2024/01/GHSA-rp98-9vmx-835h/GHSA-rp98-9vmx-835h.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rp98-9vmx-835h",
"modified": "2024-01-24T18:31:00Z",
"modified": "2025-06-10T18:32:10Z",
"published": "2024-01-17T03:30:55Z",
"aliases": [
"CVE-2023-36235"
advisories/unreviewed/2024/07/GHSA-5vgq-r8m3-f582/GHSA-5vgq-r8m3-f582.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/07/GHSA-f25c-wxgv-xhrw/GHSA-f25c-wxgv-xhrw.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/07/GHSA-f44w-q987-x489/GHSA-f44w-q987-x489.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/07/GHSA-jmmr-w66h-7p5r/GHSA-jmmr-w66h-7p5r.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/07/GHSA-rpvm-69vv-cpww/GHSA-rpvm-69vv-cpww.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/08/GHSA-fgw8-wccj-749x/GHSA-fgw8-wccj-749x.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2025/03/GHSA-wpmj-mx2h-xgfx/GHSA-wpmj-mx2h-xgfx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wpmj-mx2h-xgfx",
"modified": "2025-03-11T12:30:59Z",
"modified": "2025-06-10T18:32:15Z",
"published": "2025-03-11T12:30:59Z",
"aliases": [
"CVE-2024-56181"
advisories/unreviewed/2025/03/GHSA-x7x2-6gw9-jg8m/GHSA-x7x2-6gw9-jg8m.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x7x2-6gw9-jg8m",
"modified": "2025-03-11T12:30:58Z",
"modified": "2025-06-10T18:32:16Z",
"published": "2025-03-11T12:30:58Z",
"aliases": [
"CVE-2024-56182"
advisories/unreviewed/2025/05/GHSA-mjcq-3whq-7xjh/GHSA-mjcq-3whq-7xjh.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mjcq-3whq-7xjh",
"modified": "2025-05-21T21:31:37Z",
"modified": "2025-06-10T18:32:17Z",
"published": "2025-05-21T21:31:37Z",
"aliases": [
"CVE-2021-25254"
],
"details": "Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
advisories/unreviewed/2025/05/GHSA-p986-xv2x-2cjm/GHSA-p986-xv2x-2cjm.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p986-xv2x-2cjm",
"modified": "2025-05-21T21:31:37Z",
"modified": "2025-06-10T18:32:17Z",
"published": "2025-05-21T21:31:37Z",
"aliases": [
"CVE-2021-25255"
],
"details": "Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
advisories/unreviewed/2025/05/GHSA-q7v7-jhxh-rv68/GHSA-q7v7-jhxh-rv68.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q7v7-jhxh-rv68",
"modified": "2025-05-13T12:31:36Z",
"modified": "2025-06-10T18:32:16Z",
"published": "2025-05-13T12:31:36Z",
"aliases": [
"CVE-2025-32454"
@@ -23,6 +23,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32454"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-486186.html"
},
{
"type": "WEB",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-542540.html"
advisories/unreviewed/2025/05/GHSA-qpcv-fjxx-24cv/GHSA-qpcv-fjxx-24cv.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qpcv-fjxx-24cv",
"modified": "2025-05-21T21:31:37Z",
"modified": "2025-06-10T18:32:17Z",
"published": "2025-05-21T21:31:37Z",
"aliases": [
"CVE-2021-25262"
],
"details": "Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
advisories/unreviewed/2025/06/GHSA-26qv-p8cr-jxp5/GHSA-26qv-p8cr-jxp5.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26qv-p8cr-jxp5",
"modified": "2025-06-10T18:32:28Z",
"published": "2025-06-10T18:32:28Z",
"aliases": [
"CVE-2025-33053"
],
"details": "External control of file name or path in WebDAV allows an unauthorized attacker to execute code over a network.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33053"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33053"
}
],
"database_specific": {
"cwe_ids": [
"CWE-73"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:22:18Z"
}
}
advisories/unreviewed/2025/06/GHSA-2972-gp35-c62r/GHSA-2972-gp35-c62r.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2972-gp35-c62r",
"modified": "2025-06-10T18:32:31Z",
"published": "2025-06-10T18:32:31Z",
"aliases": [
"CVE-2024-37395"
],
"details": "A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a crafted payload into the 'Survey Title' and 'Survey Instructions' fields. This vulnerability could be exploited by attackers to execute malicious scripts when the survey is accessed through its public link. It is advised to update to version 14.2.1 or later to fix this issue.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37395"
},
{
"type": "WEB",
"url": "https://www.evms.edu/research/resources_services/redcap/redcap_change_log"
},
{
"type": "WEB",
"url": "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/multiple-cross-site-scripting-xss-vulnerabilities-in-redcap-cve-2024-37394-cve-2024-37395-and-cve-2024-37396"
},
{
"type": "WEB",
"url": "https://www.trustwave.com/hubfs/Web/Library/Advisories_txt/TWSL2024-003_XSS_REDCap_1.txt"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T18:15:29Z"
}
}
advisories/unreviewed/2025/06/GHSA-2977-5php-6789/GHSA-2977-5php-6789.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2977-5php-6789",
"modified": "2025-06-10T18:32:27Z",
"published": "2025-06-10T18:32:27Z",
"aliases": [
"CVE-2024-57189"
],
"details": "In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57189"
},
{
"type": "WEB",
"url": "https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3"
},
{
"type": "WEB",
"url": "https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:20:09Z"
}
}
advisories/unreviewed/2025/06/GHSA-29gg-qvj7-46c7/GHSA-29gg-qvj7-46c7.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29gg-qvj7-46c7",
"modified": "2025-06-10T18:32:30Z",
"published": "2025-06-10T18:32:30Z",
"aliases": [
"CVE-2025-47165"
],
"details": "Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47165"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47165"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:23:36Z"
}
}
advisories/unreviewed/2025/06/GHSA-2qpr-jh9p-xf8p/GHSA-2qpr-jh9p-xf8p.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qpr-jh9p-xf8p",
"modified": "2025-06-10T18:32:29Z",
"published": "2025-06-10T18:32:29Z",
"aliases": [
"CVE-2025-33065"
],
"details": "Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-33065"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-33065"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:22:45Z"
}
}
advisories/unreviewed/2025/06/GHSA-2rm9-pcmr-fvfj/GHSA-2rm9-pcmr-fvfj.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rm9-pcmr-fvfj",
"modified": "2025-06-10T18:32:31Z",
"published": "2025-06-10T18:32:31Z",
"aliases": [
"CVE-2025-47175"
],
"details": "Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47175"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47175"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-10T17:23:57Z"
}
}

Some files were not shown because too many files have changed in this diff Show More