netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-04-07 15:33:01 +00:00
parent 5017e7fc19
commit a5b1668359
78 changed files with 2939 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/01/GHSA-q4cw-h889-p6jj/GHSA-q4cw-h889-p6jj.json
+1
View File
@@ -27,6 +27,7 @@
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-290",
"CWE-293"
],
"severity": "CRITICAL",
advisories/unreviewed/2024/04/GHSA-fqrj-wwq6-q94w/GHSA-fqrj-wwq6-q94w.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-89"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-rfj8-v7wf-3hfc/GHSA-rfj8-v7wf-3hfc.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-c382-wfjm-cr9h/GHSA-c382-wfjm-cr9h.json
+2 -1
View File
@@ -46,7 +46,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2025/04/GHSA-23rf-wq7x-gvq7/GHSA-23rf-wq7x-gvq7.json
+55
View File
@@ -0,0 +1,55 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23rf-wq7x-gvq7",
"modified": "2025-04-07T15:31:12Z",
"published": "2025-04-07T15:31:11Z",
"aliases": [
"CVE-2024-52322"
],
"details": "WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.\n\nSpecifically WebService::Xero uses the Data::Random library which specifically states that it is \"Useful mostly for test programs\". Data::Random uses the rand() function.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52322"
},
{
"type": "WEB",
"url": "https://metacpan.org/release/BAREFOOT/Data-Random-0.13/source/lib/Data/Random.pm#L537"
},
{
"type": "WEB",
"url": "https://metacpan.org/release/LOCALSHOP/WebService-Xero-0.11/source/lib/WebService/Xero/Agent.pm#L17"
},
{
"type": "WEB",
"url": "https://metacpan.org/release/LOCALSHOP/WebService-Xero-0.11/source/lib/WebService/Xero/Agent.pm#L178"
},
{
"type": "WEB",
"url": "https://metacpan.org/release/LOCALSHOP/WebService-Xero-0.11/source/lib/WebService/Xero/Agent/PublicApplication.pm#L13"
},
{
"type": "WEB",
"url": "https://metacpan.org/release/LOCALSHOP/WebService-Xero-0.11/source/lib/WebService/Xero/Agent/PublicApplication.pm#L93"
},
{
"type": "WEB",
"url": "https://perldoc.perl.org/functions/rand"
},
{
"type": "WEB",
"url": "https://security.metacpan.org/docs/guides/random-data-for-security.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-338"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T17:15:39Z"
}
}
advisories/unreviewed/2025/04/GHSA-2749-6w3x-fm28/GHSA-2749-6w3x-fm28.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2749-6w3x-fm28",
"modified": "2025-04-07T15:31:09Z",
"published": "2025-04-07T15:31:09Z",
"aliases": [
"CVE-2025-1500"
],
"details": "IBM Maximo Application Suite 9.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1500"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7230140"
}
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T01:15:42Z"
}
}
advisories/unreviewed/2025/04/GHSA-2c38-3wjv-55hm/GHSA-2c38-3wjv-55hm.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2c38-3wjv-55hm",
"modified": "2025-04-07T15:31:10Z",
"published": "2025-04-07T15:31:10Z",
"aliases": [
"CVE-2025-3298"
],
"details": "A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=save_product of the component Registration Handler. The manipulation of the argument email leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3298"
},
{
"type": "WEB",
"url": "https://github.com/foreverfeifei/cve/blob/main/user.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303493"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303493"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550010"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-266"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T11:15:40Z"
}
}
advisories/unreviewed/2025/04/GHSA-2cq5-j9m5-v929/GHSA-2cq5-j9m5-v929.json
+60
View File
@@ -0,0 +1,60 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2cq5-j9m5-v929",
"modified": "2025-04-07T15:31:14Z",
"published": "2025-04-07T15:31:14Z",
"aliases": [
"CVE-2025-3328"
],
"details": "A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_set of the file /goform/fast_setting_wifi_set. The manipulation of the argument ssid/timeZone leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3328"
},
{
"type": "WEB",
"url": "https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set/form_fast_setting_wifi_set.md"
},
{
"type": "WEB",
"url": "https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206form_fast_setting_wifi_set_time/time.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303540"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303540"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.551893"
},
{
"type": "WEB",
"url": "https://www.tenda.com.cn"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T01:15:42Z"
}
}
advisories/unreviewed/2025/04/GHSA-2f7m-9j2c-gwvw/GHSA-2f7m-9j2c-gwvw.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2025/04/GHSA-2ggh-pp2g-4gr9/GHSA-2ggh-pp2g-4gr9.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2ggh-pp2g-4gr9",
"modified": "2025-04-07T15:31:09Z",
"published": "2025-04-07T15:31:09Z",
"aliases": [
"CVE-2025-2544"
],
"details": "The AI Content Pipelines plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2544"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L42"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L44"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/ai-content-pipelines/tags/1.6/includes/generate-scheduled-content.php#L47"
},
{
"type": "WEB",
"url": "https://wordpress.org/plugins/ai-content-pipelines/#developers"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b93214ec-5738-4f10-b48c-1d74aad52acb?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T02:15:15Z"
}
}
advisories/unreviewed/2025/04/GHSA-33q9-fp3q-fw2p/GHSA-33q9-fp3q-fw2p.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33q9-fp3q-fw2p",
"modified": "2025-04-07T15:31:15Z",
"published": "2025-04-07T15:31:15Z",
"aliases": [
"CVE-2025-27534"
],
"details": "in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27534"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T03:15:21Z"
}
}
advisories/unreviewed/2025/04/GHSA-3435-f6h9-64p7/GHSA-3435-f6h9-64p7.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3435-f6h9-64p7",
"modified": "2025-04-07T15:31:21Z",
"published": "2025-04-07T15:31:21Z",
"aliases": [
"CVE-2025-3360"
],
"details": "A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3360"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-3360"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357754"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T13:15:43Z"
}
}
advisories/unreviewed/2025/04/GHSA-3qpr-rxgf-wxq6/GHSA-3qpr-rxgf-wxq6.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qpr-rxgf-wxq6",
"modified": "2025-04-07T15:31:15Z",
"published": "2025-04-07T15:31:15Z",
"aliases": [
"CVE-2025-25057"
],
"details": "in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25057"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-401"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T03:15:21Z"
}
}
advisories/unreviewed/2025/04/GHSA-4q3j-j6j7-qr2f/GHSA-4q3j-j6j7-qr2f.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4q3j-j6j7-qr2f",
"modified": "2025-04-07T15:31:10Z",
"published": "2025-04-07T15:31:10Z",
"aliases": [
"CVE-2025-3299"
],
"details": "A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /appointment.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3299"
},
{
"type": "WEB",
"url": "https://github.com/LaneyYu/cve/issues/1"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303494"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303494"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550185"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T11:15:41Z"
}
}
advisories/unreviewed/2025/04/GHSA-4x43-w54x-gjc8/GHSA-4x43-w54x-gjc8.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x43-w54x-gjc8",
"modified": "2025-04-07T15:31:14Z",
"published": "2025-04-07T15:31:14Z",
"aliases": [
"CVE-2025-3324"
],
"details": "A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by this issue is some unknown functionality of the file FileRestController.java. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3324"
},
{
"type": "WEB",
"url": "https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/Nimrod-fileUpload.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303536"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303536"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.551864"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-06T23:15:39Z"
}
}
advisories/unreviewed/2025/04/GHSA-527p-356f-cgq4/GHSA-527p-356f-cgq4.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-527p-356f-cgq4",
"modified": "2025-04-07T15:31:14Z",
"published": "2025-04-07T15:31:14Z",
"aliases": [
"CVE-2025-3329"
],
"details": "A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of the component Restaurant Order Handler. The manipulation of the argument Login/Password leads to cleartext transmission of sensitive information. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3329"
},
{
"type": "WEB",
"url": "https://medium.com/@davimouar/from-order-to-exploit-a-deep-dive-into-restaurant-network-security-64aeaf3a6f64"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303543"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303543"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.551790"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T01:15:43Z"
}
}
advisories/unreviewed/2025/04/GHSA-5hjr-4ff9-h4hx/GHSA-5hjr-4ff9-h4hx.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5hjr-4ff9-h4hx",
"modified": "2025-04-07T15:31:15Z",
"published": "2025-04-07T15:31:15Z",
"aliases": [
"CVE-2025-22842"
],
"details": "in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22842"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-04.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T03:15:20Z"
}
}
advisories/unreviewed/2025/04/GHSA-5px6-qr34-v59r/GHSA-5px6-qr34-v59r.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5px6-qr34-v59r",
"modified": "2025-04-07T15:31:14Z",
"published": "2025-04-07T15:31:14Z",
"aliases": [
"CVE-2025-3308"
],
"details": "A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /viewrequest.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3308"
},
{
"type": "WEB",
"url": "https://github.com/p1026/CVE/issues/25"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.303505"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.303505"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.550193"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-06T04:15:15Z"
}
}
advisories/unreviewed/2025/04/GHSA-6839-6896-r9mx/GHSA-6839-6896-r9mx.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6839-6896-r9mx",
"modified": "2025-04-07T15:31:21Z",
"published": "2025-04-07T15:31:21Z",
"aliases": [
"CVE-2025-2251"
],
"details": "A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2251"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-2251"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2351678"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-07T14:15:24Z"
}
}
advisories/unreviewed/2025/04/GHSA-69gq-2xc5-f33j/GHSA-69gq-2xc5-f33j.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-69gq-2xc5-f33j",
"modified": "2025-04-07T15:31:12Z",
"published": "2025-04-07T15:31:11Z",
"aliases": [
"CVE-2025-32364"
],
"details": "A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash when handling malformed inputs associated with INT_MIN.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32364"
},
{
"type": "WEB",
"url": "https://gitlab.freedesktop.org/poppler/poppler/-/commit/d87bc726c7cc98f8c26b60ece5f20236e9de1bc3"
},
{
"type": "WEB",
"url": "https://gitlab.freedesktop.org/poppler/poppler/-/issues/1574"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-05T22:15:18Z"
}
}

Some files were not shown because too many files have changed in this diff Show More