netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-4xcw-rcp3-wq4p
GHSA-qc34-rvrg-f2q8
GHSA-9x77-r8vf-hc6h
GHSA-c56x-xgv9-mcx5
GHSA-mxmx-4cj8-4596
GHSA-rrh3-jcg8-jvpm
GHSA-wr2r-3r87-rxfx
This commit is contained in:
advisory-database[bot]
2025-04-12 03:31:56 +00:00
parent e00a7303bc
commit c8f6c7dfca
7 changed files with 209 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/12/GHSA-4xcw-rcp3-wq4p/GHSA-4xcw-rcp3-wq4p.json
+4 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4xcw-rcp3-wq4p",
"modified": "2023-01-05T21:30:16Z",
"modified": "2025-04-12T03:30:30Z",
"published": "2022-12-26T06:30:22Z",
"aliases": [
"CVE-2021-45467"
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/12/GHSA-qc34-rvrg-f2q8/GHSA-qc34-rvrg-f2q8.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-325",
"CWE-326"
],
"severity": "CRITICAL",
advisories/unreviewed/2025/04/GHSA-9x77-r8vf-hc6h/GHSA-9x77-r8vf-hc6h.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9x77-r8vf-hc6h",
"modified": "2025-04-12T03:30:30Z",
"published": "2025-04-12T03:30:30Z",
"aliases": [
"CVE-2025-29834"
],
"details": "Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29834"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29834"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-12T02:15:22Z"
}
}
advisories/unreviewed/2025/04/GHSA-c56x-xgv9-mcx5/GHSA-c56x-xgv9-mcx5.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c56x-xgv9-mcx5",
"modified": "2025-04-12T03:30:30Z",
"published": "2025-04-12T03:30:30Z",
"aliases": [
"CVE-2025-32726"
],
"details": "Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32726"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-32726"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-12T02:15:22Z"
}
}
advisories/unreviewed/2025/04/GHSA-mxmx-4cj8-4596/GHSA-mxmx-4cj8-4596.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxmx-4cj8-4596",
"modified": "2025-04-12T03:30:30Z",
"published": "2025-04-12T03:30:30Z",
"aliases": [
"CVE-2025-29803"
],
"details": "Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-29803"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803"
}
],
"database_specific": {
"cwe_ids": [
"CWE-427"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-12T02:15:20Z"
}
}
advisories/unreviewed/2025/04/GHSA-rrh3-jcg8-jvpm/GHSA-rrh3-jcg8-jvpm.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rrh3-jcg8-jvpm",
"modified": "2025-04-12T03:30:30Z",
"published": "2025-04-12T03:30:30Z",
"aliases": [
"CVE-2025-2881"
],
"details": "The Developer Toolbar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.3 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2881"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/developer-toolbar/trunk/views/phpinfo.php#L45"
},
{
"type": "WEB",
"url": "https://wordpress.org/plugins/developer-toolbar/#developers"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e10ba37a-cd7d-4fc9-8b41-806fa3dc7785?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-12T03:15:14Z"
}
}
advisories/unreviewed/2025/04/GHSA-wr2r-3r87-rxfx/GHSA-wr2r-3r87-rxfx.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr2r-3r87-rxfx",
"modified": "2025-04-12T03:30:30Z",
"published": "2025-04-12T03:30:30Z",
"aliases": [
"CVE-2025-2841"
],
"details": "The Cart66 Cloud plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.7 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2841"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L26"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L39"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/cart66-cloud/tags/2.3.7/views/admin/html-system-info.php#L59"
},
{
"type": "WEB",
"url": "https://wordpress.org/plugins/cart66-cloud/#developers"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5be01bba-e4f4-4818-9612-fc37b648a349?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-12T03:15:13Z"
}
}