netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-20 15:32:58 +00:00
parent 657cc6fa53
commit bcd5084fb5
32 changed files with 644 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-gvrx-mcwr-87pv/GHSA-gvrx-mcwr-87pv.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gvrx-mcwr-87pv",
"modified": "2024-03-17T18:30:48Z",
"modified": "2025-02-20T15:31:06Z",
"published": "2024-03-17T18:30:48Z",
"aliases": [
"CVE-2024-24867"
],
"details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.\n\n",
"details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Osamaesh WP Visitor Statistics (Real Time Traffic).This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through 6.9.4.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/06/GHSA-c2xh-vr49-pcp6/GHSA-c2xh-vr49-pcp6.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-639"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/08/GHSA-h63c-4f8g-75qg/GHSA-h63c-4f8g-75qg.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h63c-4f8g-75qg",
"modified": "2024-08-20T12:30:27Z",
"modified": "2025-02-20T15:31:06Z",
"published": "2024-08-20T12:30:27Z",
"aliases": [
"CVE-2024-21689"
advisories/unreviewed/2025/02/GHSA-298w-pg84-p7jw/GHSA-298w-pg84-p7jw.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-298w-pg84-p7jw",
"modified": "2025-02-20T00:32:05Z",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T00:32:05Z",
"aliases": [
"CVE-2024-37361"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://support.pentaho.com/hc/en-us/articles/34298351866893--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-37360"
},
{
"type": "WEB",
"url": "https://support.pentaho.com/hc/en-us/articles/34299135441805--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Deserialization-of-Untrusted-Data-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-37361"
}
],
"database_specific": {
advisories/unreviewed/2025/02/GHSA-29x9-gccg-r992/GHSA-29x9-gccg-r992.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29x9-gccg-r992",
"modified": "2025-02-20T15:31:10Z",
"published": "2025-02-20T15:31:10Z",
"aliases": [
"CVE-2024-57401"
],
"details": "SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57401"
},
{
"type": "WEB",
"url": "https://github.com/aksingh82/CVE-2024-57401"
},
{
"type": "WEB",
"url": "https://studentportal.universitysolutions.in"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:13Z"
}
}
advisories/unreviewed/2025/02/GHSA-2v3m-p433-pwh8/GHSA-2v3m-p433-pwh8.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2v3m-p433-pwh8",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51309"
],
"details": "A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51309"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176492"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/car-park-booking/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:11Z"
}
}
advisories/unreviewed/2025/02/GHSA-44hx-fmcp-x4qh/GHSA-44hx-fmcp-x4qh.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44hx-fmcp-x4qh",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51306"
],
"details": "PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the \"name, title\" parameters.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51306"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176516"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/event-ticketing-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:11Z"
}
}
advisories/unreviewed/2025/02/GHSA-4797-mjw6-28fm/GHSA-4797-mjw6-28fm.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4797-mjw6-28fm",
"modified": "2025-02-20T15:31:10Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51312"
],
"details": "PHPJabbers Restaurant Booking System v3.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Reservations menu, Schedule section date parameter.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51312"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176493"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-53fw-hrcf-m25v/GHSA-53fw-hrcf-m25v.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53fw-hrcf-m25v",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51311"
],
"details": "PHPJabbers Car Park Booking System v3.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51311"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176494"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/car-park-booking/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-572j-cqp5-7xrw/GHSA-572j-cqp5-7xrw.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-572j-cqp5-7xrw",
"modified": "2025-02-20T00:32:03Z",
"modified": "2025-02-20T15:31:08Z",
"published": "2025-02-20T00:32:03Z",
"aliases": [
"CVE-2023-51305"
],
"details": "PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the \"name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key\" parameters.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T23:15:09Z"
advisories/unreviewed/2025/02/GHSA-5f3r-pg69-63xp/GHSA-5f3r-pg69-63xp.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5f3r-pg69-63xp",
"modified": "2025-02-20T00:32:04Z",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T00:32:04Z",
"aliases": [
"CVE-2025-25945"
],
"details": "An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T23:15:15Z"
advisories/unreviewed/2025/02/GHSA-7qm6-crcf-w49m/GHSA-7qm6-crcf-w49m.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7qm6-crcf-w49m",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51308"
],
"details": "PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple HTML Injection in the \"name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title\" parameters.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51308"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176491"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/car-park-booking/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:11Z"
}
}
advisories/unreviewed/2025/02/GHSA-93jg-3qrg-49hq/GHSA-93jg-3qrg-49hq.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-93jg-3qrg-49hq",
"modified": "2025-02-20T15:31:10Z",
"published": "2025-02-20T15:31:10Z",
"aliases": [
"CVE-2023-51315"
],
"details": "PHPJabbers Restaurant Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the \"seat_name, plugin_sms_api_key, plugin_sms_country_code, title, name\" parameters.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51315"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176493"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-9qjq-983m-84r8/GHSA-9qjq-983m-84r8.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9qjq-983m-84r8",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2025-1039"
],
"details": "The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1039"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3237538/lenix-elementor-leads-addon"
},
{
"type": "WEB",
"url": "https://wpscan.com/vulnerability/0d1abaf9-4044-4dcc-95df-73f23a8a5a9f"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/29f835c8-769a-47c0-832f-622860b1c59c?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T13:15:08Z"
}
}
advisories/unreviewed/2025/02/GHSA-cv3f-w5gj-ccpf/GHSA-cv3f-w5gj-ccpf.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cv3f-w5gj-ccpf",
"modified": "2025-02-20T00:32:04Z",
"modified": "2025-02-20T15:31:08Z",
"published": "2025-02-20T00:32:04Z",
"aliases": [
"CVE-2025-25943"
],
"details": "Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-94"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T23:15:15Z"
advisories/unreviewed/2025/02/GHSA-fp97-fcph-wh29/GHSA-fp97-fcph-wh29.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fp97-fcph-wh29",
"modified": "2025-02-19T21:31:38Z",
"modified": "2025-02-20T15:31:08Z",
"published": "2025-02-19T21:31:38Z",
"aliases": [
"CVE-2023-51303"
],
"details": "PHPJabbers Event Ticketing System v1.0 is vulnerable to Multiple HTML Injection in the \"lid, name, plugin_sms_api_key, plugin_sms_country_code, title, plugin_sms_api_key, title\" parameters.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T21:15:15Z"
advisories/unreviewed/2025/02/GHSA-gcrj-wc48-gvjv/GHSA-gcrj-wc48-gvjv.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gcrj-wc48-gvjv",
"modified": "2025-02-20T15:31:10Z",
"published": "2025-02-20T15:31:10Z",
"aliases": [
"CVE-2023-51314"
],
"details": "A lack of rate limiting in the 'Forgot Password', 'Email Settings' feature of PHPJabbers Restaurant Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51314"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176496"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/restaurant-booking-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-hwqj-cjw9-27x8/GHSA-hwqj-cjw9-27x8.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hwqj-cjw9-27x8",
"modified": "2025-02-20T00:32:05Z",
"modified": "2025-02-20T15:31:09Z",
"published": "2025-02-20T00:32:05Z",
"aliases": [
"CVE-2025-25947"
],
"details": "An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input file.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-665"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T23:15:15Z"
advisories/unreviewed/2025/02/GHSA-m4wh-553v-44vf/GHSA-m4wh-553v-44vf.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m4wh-553v-44vf",
"modified": "2025-02-20T15:31:10Z",
"published": "2025-02-20T15:31:10Z",
"aliases": [
"CVE-2023-51316"
],
"details": "A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51316"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176497"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/bus-reservation-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:12Z"
}
}
advisories/unreviewed/2025/02/GHSA-p3mv-qf8j-947x/GHSA-p3mv-qf8j-947x.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p3mv-qf8j-947x",
"modified": "2025-02-20T15:31:05Z",
"published": "2025-02-20T15:31:05Z",
"aliases": [
"CVE-2023-22311"
],
"details": "Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22311"
},
{
"type": "WEB",
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-14T14:15:38Z"
}
}

Some files were not shown because too many files have changed in this diff Show More