Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-02-21 18:32:36 +00:00
parent e8d43fd2c0
commit a443dcb68b
63 changed files with 978 additions and 126 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-389x-839f-4rhx",
-  "modified": "2025-02-19T15:14:00Z",
+  "modified": "2025-02-21T18:31:09Z",
  "published": "2025-02-10T18:14:47Z",
  "aliases": [
    "CVE-2025-25193"
@@ -51,6 +51,10 @@
    {
      "type": "PACKAGE",
      "url": "https://github.com/netty/netty"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250221-0006"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-99fr-5jwf-5mf5",
-  "modified": "2023-03-29T15:30:18Z",
+  "modified": "2025-02-21T18:31:02Z",
  "published": "2023-03-24T15:30:20Z",
  "aliases": [
    "CVE-2023-24625"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://cupc4k3.lol/cve-2023-24625-idor-in-faveo-service-desk-37a63f53d896"
    },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/%40cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896"
+    },
    {
      "type": "WEB",
      "url": "https://medium.com/@cupc4k3/vulnerabilities-in-faveo-service-desk-37a63f53d896"
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-46wg-cm84-p5p3",
-  "modified": "2024-06-28T18:31:42Z",
+  "modified": "2025-02-21T18:31:05Z",
  "published": "2024-04-27T00:30:38Z",
  "aliases": [
    "CVE-2024-2859"
  ],
-  "details": "By default, SANnav OVA is shipped with root user login enabled.  While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account. ",
+  "details": "By default, SANnav OVA is shipped with root user login enabled.  While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f4cf-2w52-c853",
-  "modified": "2024-07-22T18:31:47Z",
+  "modified": "2025-02-21T18:31:05Z",
  "published": "2024-05-06T21:30:38Z",
  "aliases": [
    "CVE-2024-33601"
  ],
-  "details": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.\n\n",
+  "details": "nscd: netgroup cache may terminate daemon on memory allocation failure\n\nThe Name Service Cache Daemon's (nscd) netgroup cache uses xmalloc or\nxrealloc and these functions may terminate the process due to a memory\nallocation failure resulting in a denial of service to the clients.  The\nflaw was introduced in glibc 2.15 when the cache was added to nscd.\n\nThis vulnerability is only present in the nscd binary.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2x4f-r6q9-v77h",
-  "modified": "2025-01-31T12:33:03Z",
+  "modified": "2025-02-21T18:31:06Z",
  "published": "2025-01-31T12:33:03Z",
  "aliases": [
    "CVE-2025-21681"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nopenvswitch: fix lockup on tx to unregistering netdev with carrier\n\nCommit in a fixes tag attempted to fix the issue in the following\nsequence of calls:\n\n    do_output\n    -> ovs_vport_send\n       -> dev_queue_xmit\n          -> __dev_queue_xmit\n             -> netdev_core_pick_tx\n                -> skb_tx_hash\n\nWhen device is unregistering, the 'dev->real_num_tx_queues' goes to\nzero and the 'while (unlikely(hash >= qcount))' loop inside the\n'skb_tx_hash' becomes infinite, locking up the core forever.\n\nBut unfortunately, checking just the carrier status is not enough to\nfix the issue, because some devices may still be in unregistering\nstate while reporting carrier status OK.\n\nOne example of such device is a net/dummy.  It sets carrier ON\non start, but it doesn't implement .ndo_stop to set the carrier off.\nAnd it makes sense, because dummy doesn't really have a carrier.\nTherefore, while this device is unregistering, it's still easy to hit\nthe infinite loop in the skb_tx_hash() from the OVS datapath.  There\nmight be other drivers that do the same, but dummy by itself is\nimportant for the OVS ecosystem, because it is frequently used as a\npacket sink for tcpdump while debugging OVS deployments.  And when the\nissue is hit, the only way to recover is to reboot.\n\nFix that by also checking if the device is running.  The running\nstate is handled by the net core during unregistering, so it covers\nunregistering case better, and we don't really need to send packets\nto devices that are not running anyway.\n\nWhile only checking the running state might be enough, the carrier\ncheck is preserved.  The running and the carrier states seem disjoined\nthroughout the code and different drivers.  And other core functions\nlike __dev_direct_xmit() check both before attempting to transmit\na packet.  So, it seems safer to check both flags in OVS as well.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -32,8 +37,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-835"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-01-31T12:15:29Z"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3f6r-qh9c-x6mm",
-  "modified": "2025-01-28T18:31:27Z",
+  "modified": "2025-02-21T18:31:06Z",
  "published": "2025-01-28T03:31:14Z",
  "aliases": [
    "CVE-2024-45341"
@@ -38,6 +38,10 @@
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2025-3373"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250221-0004"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7wrw-r4p8-38rx",
-  "modified": "2025-01-28T18:31:27Z",
+  "modified": "2025-02-21T18:31:06Z",
  "published": "2025-01-28T03:31:14Z",
  "aliases": [
    "CVE-2024-45336"
@@ -38,6 +38,10 @@
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2025-3420"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250221-0003"
    }
  ],
  "database_specific": {
@@ -34,6 +34,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-644",
      "CWE-89"
    ],
    "severity": "MODERATE",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-vvxp-46w2-6p8r",
-  "modified": "2025-01-09T06:30:23Z",
+  "modified": "2025-02-21T18:31:06Z",
  "published": "2025-01-09T06:30:23Z",
  "aliases": [
    "CVE-2025-0306"
@@ -26,6 +26,10 @@
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2336100"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250221-0009"
    }
  ],
  "database_specific": {
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-26r5-4hm4-gr66",
+  "modified": "2025-02-21T18:31:15Z",
+  "published": "2025-02-21T18:31:15Z",
+  "aliases": [
+    "CVE-2025-25878"
+  ],
+  "details": "A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25878"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/SticKManII/cve-poc/blob/main/chat-box/3/poc.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T18:16:13Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-27wp-chg4-ffw3",
+  "modified": "2025-02-21T18:31:13Z",
+  "published": "2025-02-21T18:31:13Z",
+  "aliases": [
+    "CVE-2025-26013"
+  ],
+  "details": "An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-26013"
+    },
+    {
+      "type": "WEB",
+      "url": "https://gitee.com/olajowon/loggrove/issues/IBJSXS"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T16:15:33Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-29c4-gq2r-5p78",
+  "modified": "2025-02-21T18:31:15Z",
+  "published": "2025-02-21T18:31:15Z",
+  "aliases": [
+    "CVE-2025-25876"
+  ],
+  "details": "A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25876"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/SticKManII/cve-poc/blob/main/chat-box/2/poc.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T18:16:13Z"
+  }
+}
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-29vw-wqcm-8gfj",
-  "modified": "2025-02-21T06:31:09Z",
+  "modified": "2025-02-21T18:31:13Z",
  "published": "2025-02-21T06:31:09Z",
  "aliases": [
    "CVE-2024-13314"
  ],
  "details": "The Carousel, Slider, Gallery by WP Carousel  WordPress plugin before 2.7.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -21,7 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [],
-    "severity": null,
+    "severity": "LOW",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-21T06:15:20Z"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-29x9-gccg-r992",
-  "modified": "2025-02-20T15:31:10Z",
+  "modified": "2025-02-21T18:31:12Z",
  "published": "2025-02-20T15:31:10Z",
  "aliases": [
    "CVE-2024-57401"
  ],
  "details": "SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,8 +29,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-94"
+    ],
+    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-20T15:15:13Z"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2hhx-vp2f-m5hf",
-  "modified": "2025-02-21T00:31:09Z",
+  "modified": "2025-02-21T18:31:12Z",
  "published": "2025-02-21T00:31:09Z",
  "aliases": [
    "CVE-2025-25664"
  ],
  "details": "Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -20,8 +25,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-20T23:15:12Z"
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2p2q-7m86-j6ch",
+  "modified": "2025-02-21T18:31:15Z",
+  "published": "2025-02-21T18:31:14Z",
+  "aliases": [
+    "CVE-2025-25766"
+  ],
+  "details": "An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25766"
+    },
+    {
+      "type": "WEB",
+      "url": "https://flowus.cn/share/7097c747-ae3e-4cef-a198-285863698607"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T18:16:12Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2v89-wpgr-r5vm",
+  "modified": "2025-02-21T18:31:15Z",
+  "published": "2025-02-21T18:31:15Z",
+  "aliases": [
+    "CVE-2025-25875"
+  ],
+  "details": "A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25875"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/SticKManII/cve-poc/blob/main/chat-box/4/poc.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T18:16:12Z"
+  }
+}
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3jqm-mrhq-rp94",
-  "modified": "2025-02-20T21:30:53Z",
+  "modified": "2025-02-21T18:31:12Z",
  "published": "2025-02-20T21:30:53Z",
  "aliases": [
    "CVE-2023-51339"
  ],
  "details": "A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,8 +29,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-770"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-20T19:15:11Z"
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3vwg-x7c5-rg6m",
+  "modified": "2025-02-21T18:31:14Z",
+  "published": "2025-02-21T18:31:14Z",
+  "aliases": [
+    "CVE-2025-25505"
+  ],
+  "details": "Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25505"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_getRootStatus_callback_overflow/detail.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-21T17:15:14Z"
+  }
+}
--- a/Show More
+++ b/Show More