netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-2f2v-g446-pw52
GHSA-3p5q-c694-c8q3
GHSA-7c85-87cp-mr6g
GHSA-hggp-38jg-4c95
GHSA-hxpq-cx68-pw83
GHSA-vxgx-r9x4-7gfx
GHSA-x63c-5qg7-5jgc
GHSA-xqg4-rm9f-hv4c
This commit is contained in:
advisory-database[bot]
2025-05-10 15:32:03 +00:00
parent 96f77c9bb8
commit ae783fe011
8 changed files with 398 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-2f2v-g446-pw52/GHSA-2f2v-g446-pw52.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2f2v-g446-pw52",
"modified": "2025-05-10T15:30:29Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-4504"
],
"details": "A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4504"
},
{
"type": "WEB",
"url": "https://github.com/krookies/cve/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308220"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308220"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.567156"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T15:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-3p5q-c694-c8q3/GHSA-3p5q-c694-c8q3.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3p5q-c694-c8q3",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-4501"
],
"details": "A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4501"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://github.com/zzzxc643/cve/blob/main/ALBUM_MANAGEMENT_SYSTEM.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308217"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308217"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.567111"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T13:15:52Z"
}
}
advisories/unreviewed/2025/05/GHSA-7c85-87cp-mr6g/GHSA-7c85-87cp-mr6g.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7c85-87cp-mr6g",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-1752"
],
"details": "A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1752"
},
{
"type": "WEB",
"url": "https://github.com/run-llama/llama_index/commit/3c65db2947271de3bd1927dc66a044da385de4da"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/cd7b9082-7d75-42e4-84f5-dbee23cbc467"
}
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T14:15:32Z"
}
}
advisories/unreviewed/2025/05/GHSA-hggp-38jg-4c95/GHSA-hggp-38jg-4c95.json
+25 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hggp-38jg-4c95",
"modified": "2025-05-09T09:33:21Z",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-09T09:33:21Z",
"aliases": [
"CVE-2025-37889"
@@ -14,6 +14,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-37889"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0eba2a7e858907a746ba69cd002eb9eb4dbd7bf3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/296c8295ae34045da0214882628d49c1c060dd8a"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/2e3ad60b8f72a95e3a32ddd9d70ea129aa3fcfb7"
@@ -25,6 +33,22 @@
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/46d357520934eef99fa121889f8ebbf46a6eddb8"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/544055329560d4b64fe204fc6be325ebc24c72ca"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/694110bc2407a61f02a770cbb5f39b51e4ec77c6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a46a9371f8b9a0eeff53a21e11ed3b65f52d9cf6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c402f184a053c8e7ca325e50f04bbbc1e4fee019"
}
],
"database_specific": {
advisories/unreviewed/2025/05/GHSA-hxpq-cx68-pw83/GHSA-hxpq-cx68-pw83.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hxpq-cx68-pw83",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-4500"
],
"details": "A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is the function Edit of the component Edit Room. The manipulation of the argument roomnumber leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4500"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://github.com/zzzxc643/cve/blob/main/HOTEL_MANAGEMENT_SYSTEM.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308216"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308216"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.567110"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T13:15:51Z"
}
}
advisories/unreviewed/2025/05/GHSA-vxgx-r9x4-7gfx/GHSA-vxgx-r9x4-7gfx.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vxgx-r9x4-7gfx",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-4503"
],
"details": "A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/customer_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4503"
},
{
"type": "WEB",
"url": "https://github.com/0x0a1lphg/CVE/issues/2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308219"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308219"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.567145"
},
{
"type": "WEB",
"url": "https://www.campcodes.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T14:15:32Z"
}
}
advisories/unreviewed/2025/05/GHSA-x63c-5qg7-5jgc/GHSA-x63c-5qg7-5jgc.json
+53
View File
@@ -0,0 +1,53 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x63c-5qg7-5jgc",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2023-53145"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition\n\nIn btsdio_probe, the data->work is bound with btsdio_work. It will be\nstarted in btsdio_send_frame.\n\nIf the btsdio_remove runs with a unfinished work, there may be a race\ncondition that hdev is freed but used in btsdio_work. Fix it by\ncanceling the work before do cleanup in btsdio_remove.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53145"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/179c65828593aff1f444e15debd40a477cb23cf4"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/3efcbf25e5ab4d4ad1b7e6ba0869ff85540e3f6e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6c3653627397a0d6eab19b20a59423e118985a6b"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/73f7b171b7c09139eb3c6a5677c200dc1be5f318"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/746b363bef41cc159c051c47f9e30800bc6b520d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a5c2a467e9e789ae0891de55b766daac52e3b7b3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a6650d27ab2c12a8ee750f396edb5ac8b4558b2e"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T15:15:58Z"
}
}
advisories/unreviewed/2025/05/GHSA-xqg4-rm9f-hv4c/GHSA-xqg4-rm9f-hv4c.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xqg4-rm9f-hv4c",
"modified": "2025-05-10T15:30:28Z",
"published": "2025-05-10T15:30:28Z",
"aliases": [
"CVE-2025-4502"
],
"details": "A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/creditor_add.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4502"
},
{
"type": "WEB",
"url": "https://github.com/0x0a1lphg/CVE/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308218"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308218"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.567144"
},
{
"type": "WEB",
"url": "https://www.campcodes.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-10T14:15:32Z"
}
}