netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-q3rr-g46f-jgqr
GHSA-44r5-8x6q-27jq
GHSA-8vx3-42wr-xwrf
GHSA-955m-4443-8f7r
GHSA-gw88-vjjm-8vp4
GHSA-jwpm-8696-jr8x
GHSA-m5vp-hqc5-ggg7
GHSA-q29p-vg3v-q6c5
GHSA-qxp8-q6wp-7mq2
GHSA-r7x3-qhq3-x8hr
GHSA-v5rp-5hx5-3vwq
GHSA-xq8j-rprv-xmq6
This commit is contained in:
advisory-database[bot]
2025-05-09 03:32:00 +00:00
parent 6d0d90aa16
commit d5b6b3016d
12 changed files with 569 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/02/GHSA-q3rr-g46f-jgqr/GHSA-q3rr-g46f-jgqr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q3rr-g46f-jgqr",
"modified": "2025-04-17T15:32:32Z",
"modified": "2025-05-09T03:30:23Z",
"published": "2025-02-19T21:31:38Z",
"aliases": [
"CVE-2025-0624"
@@ -27,6 +27,10 @@
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-0624"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:4422"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:3780"
advisories/unreviewed/2025/05/GHSA-44r5-8x6q-27jq/GHSA-44r5-8x6q-27jq.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44r5-8x6q-27jq",
"modified": "2025-05-09T03:30:24Z",
"published": "2025-05-09T03:30:23Z",
"aliases": [
"CVE-2025-4448"
],
"details": "A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4448"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formEasySetupWizard-curTime/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308062"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308062"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.558357"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T01:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-8vx3-42wr-xwrf/GHSA-8vx3-42wr-xwrf.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vx3-42wr-xwrf",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-4434"
],
"details": "The Remote Images Grabber plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 0.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4434"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/wordpress/plugin/remote-images-grabber/vulnerability/wordpress-remote-images-grabber-plugin-0-6-reflected-cross-site-scripting-xss-vulnerability"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e87bec5f-2265-4272-8a9c-dd8f22e3d421?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-955m-4443-8f7r/GHSA-955m-4443-8f7r.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-955m-4443-8f7r",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-4453"
],
"details": "A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4453"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-formSysCmd-sysCmd/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308067"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308067"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.560797"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-gw88-vjjm-8vp4/GHSA-gw88-vjjm-8vp4.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gw88-vjjm-8vp4",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:24Z",
"aliases": [
"CVE-2025-4452"
],
"details": "A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4452"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetWizard2-curTime/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308066"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308066"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.560795"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T02:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-jwpm-8696-jr8x/GHSA-jwpm-8696-jr8x.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jwpm-8696-jr8x",
"modified": "2025-05-09T03:30:24Z",
"published": "2025-05-09T03:30:24Z",
"aliases": [
"CVE-2025-4449"
],
"details": "A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipulation of the argument wan_connected leads to buffer overflow. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4449"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formEasySetupWizard3-wan_connected/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308063"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308063"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.558358"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T01:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-m5vp-hqc5-ggg7/GHSA-m5vp-hqc5-ggg7.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m5vp-hqc5-ggg7",
"modified": "2025-05-09T03:30:24Z",
"published": "2025-05-09T03:30:24Z",
"aliases": [
"CVE-2025-4450"
],
"details": "A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4450"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetEasy_Wizard-curTime/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308064"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308064"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.560792"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T01:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-q29p-vg3v-q6c5/GHSA-q29p-vg3v-q6c5.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q29p-vg3v-q6c5",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-4455"
],
"details": "A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library advapi32.dll/BCrypt.dll/comctl32.dll/crypt32.dll/dwmapi.dll/gdi32.dll/gdiplus.dll/imm32.dll/iphlpapi.dll/kernel32.dll/mscms.dll/msctf.dll/ntdll.dll/ole32.dll/oleaut32.dll/PresentationNative_cor3.dll/secur32.dll/shcore.dll/shell32.dll/sspicli.dll/System.IO. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4455"
},
{
"type": "WEB",
"url": "https://gist.github.com/shellkraft/d7db265b53115d52a4ca5bffe5e9c6e4"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308069"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308069"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.562440"
}
],
"database_specific": {
"cwe_ids": [
"CWE-426"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-qxp8-q6wp-7mq2/GHSA-qxp8-q6wp-7mq2.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxp8-q6wp-7mq2",
"modified": "2025-05-09T03:30:24Z",
"published": "2025-05-09T03:30:24Z",
"aliases": [
"CVE-2025-4451"
],
"details": "A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4451"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Buffer_overflow-formSetWAN_Wizard52-curTime/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308065"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308065"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.560793"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T01:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-r7x3-qhq3-x8hr/GHSA-r7x3-qhq3-x8hr.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r7x3-qhq3-x8hr",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-3810"
],
"details": "The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the edit_profile_data() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses and passwords, including administrators, and leverage that to gain access to their account.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3810"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3278939/wpbookit/trunk/core/admin/classes/controllers/class.wpb-profile-controller.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/54f1ebfb-67f1-461d-91f1-269b0a2c0653?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-639"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-v5rp-5hx5-3vwq/GHSA-v5rp-5hx5-3vwq.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v5rp-5hx5-3vwq",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-3811"
],
"details": "The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email through the edit_newdata_customer_callback() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3811"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3278939/wpbookit/trunk/core/admin/classes/controllers/class.wpb-customer-controller.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a61cce43-0df7-4ca9-8897-24c7d131b505?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-639"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}
advisories/unreviewed/2025/05/GHSA-xq8j-rprv-xmq6/GHSA-xq8j-rprv-xmq6.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xq8j-rprv-xmq6",
"modified": "2025-05-09T03:30:25Z",
"published": "2025-05-09T03:30:25Z",
"aliases": [
"CVE-2025-4454"
],
"details": "A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure. This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4454"
},
{
"type": "WEB",
"url": "https://github.com/jylsec/vuldb/blob/main/D-Link/dlink_dir619l/Command_injection-wake_on_lan-mac/README.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.308068"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.308068"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.560798"
},
{
"type": "WEB",
"url": "https://www.dlink.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-09T03:15:24Z"
}
}