diff --git a/advisories/unreviewed/2025/02/GHSA-572c-4f8h-65c4/GHSA-572c-4f8h-65c4.json b/advisories/unreviewed/2025/02/GHSA-572c-4f8h-65c4/GHSA-572c-4f8h-65c4.json index 4ab639d8ac3..e5a03ff576d 100644 --- a/advisories/unreviewed/2025/02/GHSA-572c-4f8h-65c4/GHSA-572c-4f8h-65c4.json +++ b/advisories/unreviewed/2025/02/GHSA-572c-4f8h-65c4/GHSA-572c-4f8h-65c4.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-572c-4f8h-65c4", - "modified": "2025-02-27T03:34:03Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:03Z", "aliases": [ "CVE-2024-58017" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nprintk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX\n\nShifting 1 << 31 on a 32-bit int causes signed integer overflow, which\nleads to undefined behavior. To prevent this, cast 1 to u32 before\nperforming the shift, ensuring well-defined behavior.\n\nThis change explicitly avoids any potential overflow by ensuring that\nthe shift occurs on an unsigned 32-bit integer.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:12Z" diff --git a/advisories/unreviewed/2025/02/GHSA-63p9-c49j-px3q/GHSA-63p9-c49j-px3q.json b/advisories/unreviewed/2025/02/GHSA-63p9-c49j-px3q/GHSA-63p9-c49j-px3q.json index eeedb78b982..77f9e9cedcc 100644 --- a/advisories/unreviewed/2025/02/GHSA-63p9-c49j-px3q/GHSA-63p9-c49j-px3q.json +++ b/advisories/unreviewed/2025/02/GHSA-63p9-c49j-px3q/GHSA-63p9-c49j-px3q.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-63p9-c49j-px3q", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21735" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFC: nci: Add bounds checking in nci_hci_create_pipe()\n\nThe \"pipe\" variable is a u8 which comes from the network. If it's more\nthan 127, then it results in memory corruption in the caller,\nnci_hci_connect_gate().", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/02/GHSA-755w-2h7x-xvj6/GHSA-755w-2h7x-xvj6.json b/advisories/unreviewed/2025/02/GHSA-755w-2h7x-xvj6/GHSA-755w-2h7x-xvj6.json index adb11fc5bcc..f4ca37fcda6 100644 --- a/advisories/unreviewed/2025/02/GHSA-755w-2h7x-xvj6/GHSA-755w-2h7x-xvj6.json +++ b/advisories/unreviewed/2025/02/GHSA-755w-2h7x-xvj6/GHSA-755w-2h7x-xvj6.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-755w-2h7x-xvj6", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21737" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix memory leak in ceph_mds_auth_match()\n\nWe now free the temporary target path substring allocation on every\npossible branch, instead of omitting the default branch. In some\ncases, a memory leak occured, which could rapidly crash the system\n(depending on how many file accesses were attempted).\n\nThis was detected in production because it caused a continuous memory\ngrowth, eventually triggering kernel OOM and completely hard-locking\nthe kernel.\n\nRelevant kmemleak stacktrace:\n\n unreferenced object 0xffff888131e69900 (size 128):\n comm \"git\", pid 66104, jiffies 4295435999\n hex dump (first 32 bytes):\n 76 6f 6c 75 6d 65 73 2f 63 6f 6e 74 61 69 6e 65 volumes/containe\n 72 73 2f 67 69 74 65 61 2f 67 69 74 65 61 2f 67 rs/gitea/gitea/g\n backtrace (crc 2f3bb450):\n [] __kmalloc_noprof+0x359/0x510\n [] ceph_mds_check_access+0x5bf/0x14e0 [ceph]\n [] ceph_open+0x312/0xd80 [ceph]\n [] do_dentry_open+0x456/0x1120\n [] vfs_open+0x79/0x360\n [] path_openat+0x1de5/0x4390\n [] do_filp_open+0x19c/0x3c0\n [] do_sys_openat2+0x141/0x180\n [] __x64_sys_open+0xe5/0x1a0\n [] do_syscall_64+0xb7/0x210\n [] entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nIt can be triggered by mouting a subdirectory of a CephFS filesystem,\nand then trying to access files on this subdirectory with an auth token\nusing a path-scoped capability:\n\n $ ceph auth get client.services\n [client.services]\n key = REDACTED\n caps mds = \"allow rw fsname=cephfs path=/volumes/\"\n caps mon = \"allow r fsname=cephfs\"\n caps osd = \"allow rw tag cephfs data=cephfs\"\n\n $ cat /proc/self/mounts\n services@[REDACTED].cephfs=/volumes/containers /ceph/containers ceph rw,noatime,name=services,secret=,ms_mode=prefer-crc,mount_timeout=300,acl,mon_addr=[REDACTED]:3300,recover_session=clean 0 0\n\n $ seq 1 1000000 | xargs -P32 --replace={} touch /ceph/containers/file-{} && \\\n seq 1 1000000 | xargs -P32 --replace={} cat /ceph/containers/file-{}\n\n[ idryomov: combine if statements, rename rc to path_matched and make\n it a bool, formatting ]", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-401" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/02/GHSA-9cf9-vw76-83rq/GHSA-9cf9-vw76-83rq.json b/advisories/unreviewed/2025/02/GHSA-9cf9-vw76-83rq/GHSA-9cf9-vw76-83rq.json index 4abb079f7d6..c0e67f856d7 100644 --- a/advisories/unreviewed/2025/02/GHSA-9cf9-vw76-83rq/GHSA-9cf9-vw76-83rq.json +++ b/advisories/unreviewed/2025/02/GHSA-9cf9-vw76-83rq/GHSA-9cf9-vw76-83rq.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-9cf9-vw76-83rq", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:03Z", "aliases": [ "CVE-2024-58020" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: multitouch: Add NULL check in mt_input_configured\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in mt_input_configured() is not checked.\nAdd NULL check in mt_input_configured(), to handle kernel NULL\npointer dereference error.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:12Z" diff --git a/advisories/unreviewed/2025/02/GHSA-ch46-7v57-76j7/GHSA-ch46-7v57-76j7.json b/advisories/unreviewed/2025/02/GHSA-ch46-7v57-76j7/GHSA-ch46-7v57-76j7.json index 23e0976ef71..30b8810f199 100644 --- a/advisories/unreviewed/2025/02/GHSA-ch46-7v57-76j7/GHSA-ch46-7v57-76j7.json +++ b/advisories/unreviewed/2025/02/GHSA-ch46-7v57-76j7/GHSA-ch46-7v57-76j7.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-ch46-7v57-76j7", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21741" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: ipheth: fix DPE OoB read\n\nFix an out-of-bounds DPE read, limit the number of processed DPEs to\nthe amount that fits into the fixed-size NDP16 header.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/02/GHSA-jj6f-649q-27mh/GHSA-jj6f-649q-27mh.json b/advisories/unreviewed/2025/02/GHSA-jj6f-649q-27mh/GHSA-jj6f-649q-27mh.json index 5c04aac7d5d..df2b7ede1c3 100644 --- a/advisories/unreviewed/2025/02/GHSA-jj6f-649q-27mh/GHSA-jj6f-649q-27mh.json +++ b/advisories/unreviewed/2025/02/GHSA-jj6f-649q-27mh/GHSA-jj6f-649q-27mh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-jj6f-649q-27mh", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21736" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix possible int overflows in nilfs_fiemap()\n\nSince nilfs_bmap_lookup_contig() in nilfs_fiemap() calculates its result\nby being prepared to go through potentially maxblocks == INT_MAX blocks,\nthe value in n may experience an overflow caused by left shift of blkbits.\n\nWhile it is extremely unlikely to occur, play it safe and cast right hand\nexpression to wider type to mitigate the issue.\n\nFound by Linux Verification Center (linuxtesting.org) with static analysis\ntool SVACE.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/02/GHSA-p4c2-xvqp-v8qj/GHSA-p4c2-xvqp-v8qj.json b/advisories/unreviewed/2025/02/GHSA-p4c2-xvqp-v8qj/GHSA-p4c2-xvqp-v8qj.json index a3e21a0916b..f8e1f519e0e 100644 --- a/advisories/unreviewed/2025/02/GHSA-p4c2-xvqp-v8qj/GHSA-p4c2-xvqp-v8qj.json +++ b/advisories/unreviewed/2025/02/GHSA-p4c2-xvqp-v8qj/GHSA-p4c2-xvqp-v8qj.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-p4c2-xvqp-v8qj", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21740" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking\n\nWhen waking a VM's NX huge page recovery thread, ensure the thread is\nactually alive before trying to wake it. Now that the thread is spawned\non-demand during KVM_RUN, a VM without a recovery thread is reachable via\nthe related module params.\n\n BUG: kernel NULL pointer dereference, address: 0000000000000040\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015\n RIP: 0010:vhost_task_wake+0x5/0x10\n Call Trace:\n \n set_nx_huge_pages+0xcc/0x1e0 [kvm]\n param_attr_store+0x8a/0xd0\n module_attr_store+0x1a/0x30\n kernfs_fop_write_iter+0x12f/0x1e0\n vfs_write+0x233/0x3e0\n ksys_write+0x60/0xd0\n do_syscall_64+0x5b/0x160\n entry_SYSCALL_64_after_hwframe+0x4b/0x53\n RIP: 0033:0x7f3b52710104\n \n Modules linked in: kvm_intel kvm\n CR2: 0000000000000040", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/02/GHSA-r4cp-jgm6-j6m3/GHSA-r4cp-jgm6-j6m3.json b/advisories/unreviewed/2025/02/GHSA-r4cp-jgm6-j6m3/GHSA-r4cp-jgm6-j6m3.json index b80cfe32a77..919efc2df41 100644 --- a/advisories/unreviewed/2025/02/GHSA-r4cp-jgm6-j6m3/GHSA-r4cp-jgm6-j6m3.json +++ b/advisories/unreviewed/2025/02/GHSA-r4cp-jgm6-j6m3/GHSA-r4cp-jgm6-j6m3.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-r4cp-jgm6-j6m3", - "modified": "2025-02-27T03:34:03Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:03Z", "aliases": [ "CVE-2024-58012" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params\n\nEach cpu DAI should associate with a widget. However, the topology might\nnot create the right number of DAI widgets for aggregated amps. And it\nwill cause NULL pointer deference.\nCheck that the DAI widget associated with the CPU DAI is valid to prevent\nNULL pointer deference due to missing DAI widgets in topologies with\naggregated amps.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:12Z" diff --git a/advisories/unreviewed/2025/02/GHSA-w5m8-86xc-xfr5/GHSA-w5m8-86xc-xfr5.json b/advisories/unreviewed/2025/02/GHSA-w5m8-86xc-xfr5/GHSA-w5m8-86xc-xfr5.json index f4ed04a18d8..c79680c6b74 100644 --- a/advisories/unreviewed/2025/02/GHSA-w5m8-86xc-xfr5/GHSA-w5m8-86xc-xfr5.json +++ b/advisories/unreviewed/2025/02/GHSA-w5m8-86xc-xfr5/GHSA-w5m8-86xc-xfr5.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-w5m8-86xc-xfr5", - "modified": "2025-02-27T03:34:03Z", + "modified": "2025-03-06T12:30:41Z", "published": "2025-02-27T03:34:03Z", "aliases": [ "CVE-2024-58021" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: winwing: Add NULL check in winwing_init_led()\n\ndevm_kasprintf() can return a NULL pointer on failure,but this\nreturned value in winwing_init_led() is not checked.\nAdd NULL check in winwing_init_led(), to handle kernel NULL\npointer dereference error.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -28,8 +33,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-476" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:13Z" diff --git a/advisories/unreviewed/2025/02/GHSA-xg22-883p-m58m/GHSA-xg22-883p-m58m.json b/advisories/unreviewed/2025/02/GHSA-xg22-883p-m58m/GHSA-xg22-883p-m58m.json index 10a02ab5078..9ea1293391e 100644 --- a/advisories/unreviewed/2025/02/GHSA-xg22-883p-m58m/GHSA-xg22-883p-m58m.json +++ b/advisories/unreviewed/2025/02/GHSA-xg22-883p-m58m/GHSA-xg22-883p-m58m.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-xg22-883p-m58m", - "modified": "2025-02-27T03:34:04Z", + "modified": "2025-03-06T12:30:42Z", "published": "2025-02-27T03:34:04Z", "aliases": [ "CVE-2025-21742" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbnet: ipheth: use static NDP16 location in URB\n\nOriginal code allowed for the start of NDP16 to be anywhere within the\nURB based on the `wNdpIndex` value in NTH16. Only the start position of\nNDP16 was checked, so it was possible for even the fixed-length part\nof NDP16 to extend past the end of URB, leading to an out-of-bounds\nread.\n\nOn iOS devices, the NDP16 header always directly follows NTH16. Rely on\nand check for this specific format.\n\nThis, along with NCM-specific minimal URB length check that already\nexists, will ensure that the fixed-length part of NDP16 plus a set\namount of DPEs fit within the URB.\n\nNote that this commit alone does not fully address the OoB read.\nThe limit on the amount of DPEs needs to be enforced separately.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-125" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-27T03:15:14Z" diff --git a/advisories/unreviewed/2025/03/GHSA-2p34-6p43-4q34/GHSA-2p34-6p43-4q34.json b/advisories/unreviewed/2025/03/GHSA-2p34-6p43-4q34/GHSA-2p34-6p43-4q34.json index 64f83029a10..9c9ddbc8f6f 100644 --- a/advisories/unreviewed/2025/03/GHSA-2p34-6p43-4q34/GHSA-2p34-6p43-4q34.json +++ b/advisories/unreviewed/2025/03/GHSA-2p34-6p43-4q34/GHSA-2p34-6p43-4q34.json @@ -46,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-89" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/03/GHSA-4m6p-f924-hjw4/GHSA-4m6p-f924-hjw4.json b/advisories/unreviewed/2025/03/GHSA-4m6p-f924-hjw4/GHSA-4m6p-f924-hjw4.json new file mode 100644 index 00000000000..a998827e8be --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-4m6p-f924-hjw4/GHSA-4m6p-f924-hjw4.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4m6p-f924-hjw4", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2024-56196" + ], + "details": "Improper Access Control vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 10.0.0 through 10.0.3.\n\nUsers are recommended to upgrade to version 10.0.4, which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56196" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:35Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-53v8-xp2g-qpcw/GHSA-53v8-xp2g-qpcw.json b/advisories/unreviewed/2025/03/GHSA-53v8-xp2g-qpcw/GHSA-53v8-xp2g-qpcw.json new file mode 100644 index 00000000000..2f2c325c79f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-53v8-xp2g-qpcw/GHSA-53v8-xp2g-qpcw.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-53v8-xp2g-qpcw", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2024-38311" + ], + "details": "Improper Input Validation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.\n\nUsers are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38311" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:34Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-9c9c-fvg8-fgwr/GHSA-9c9c-fvg8-fgwr.json b/advisories/unreviewed/2025/03/GHSA-9c9c-fvg8-fgwr/GHSA-9c9c-fvg8-fgwr.json new file mode 100644 index 00000000000..6732f6108ac --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-9c9c-fvg8-fgwr/GHSA-9c9c-fvg8-fgwr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9c9c-fvg8-fgwr", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2024-7872" + ], + "details": "Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data.This issue affects Extreme XDS: before 3933.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7872" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-25-0057" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-201" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:35Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-9cqr-9w8p-9hxm/GHSA-9cqr-9w8p-9hxm.json b/advisories/unreviewed/2025/03/GHSA-9cqr-9w8p-9hxm/GHSA-9cqr-9w8p-9hxm.json new file mode 100644 index 00000000000..b50065f9c1b --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-9cqr-9w8p-9hxm/GHSA-9cqr-9w8p-9hxm.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9cqr-9w8p-9hxm", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2024-56195" + ], + "details": "Improper Access Control vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3.\n\nUsers are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56195" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:35Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-hr72-4f8w-mw62/GHSA-hr72-4f8w-mw62.json b/advisories/unreviewed/2025/03/GHSA-hr72-4f8w-mw62/GHSA-hr72-4f8w-mw62.json index 38e5ce500f3..632b9c625d7 100644 --- a/advisories/unreviewed/2025/03/GHSA-hr72-4f8w-mw62/GHSA-hr72-4f8w-mw62.json +++ b/advisories/unreviewed/2025/03/GHSA-hr72-4f8w-mw62/GHSA-hr72-4f8w-mw62.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hr72-4f8w-mw62", - "modified": "2025-03-03T21:31:00Z", + "modified": "2025-03-06T12:30:42Z", "published": "2025-03-03T21:31:00Z", "aliases": [ "CVE-2024-51944" diff --git a/advisories/unreviewed/2025/03/GHSA-j574-v322-ccpg/GHSA-j574-v322-ccpg.json b/advisories/unreviewed/2025/03/GHSA-j574-v322-ccpg/GHSA-j574-v322-ccpg.json new file mode 100644 index 00000000000..9673b037d57 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-j574-v322-ccpg/GHSA-j574-v322-ccpg.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j574-v322-ccpg", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2025-1666" + ], + "details": "The Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1666" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/cookiebot/tags/4.4.1/src/lib/Cookiebot_Review.php#L135" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251089%40cookiebot&new=3251089%40cookiebot&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d2e5fca6-363c-4875-9eb8-44e080d99650?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:36Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-jfc5-qq86-r67f/GHSA-jfc5-qq86-r67f.json b/advisories/unreviewed/2025/03/GHSA-jfc5-qq86-r67f/GHSA-jfc5-qq86-r67f.json new file mode 100644 index 00000000000..946852668a8 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-jfc5-qq86-r67f/GHSA-jfc5-qq86-r67f.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jfc5-qq86-r67f", + "modified": "2025-03-06T12:30:43Z", + "published": "2025-03-06T12:30:43Z", + "aliases": [ + "CVE-2025-1672" + ], + "details": "The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1672" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3246799" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/notibar/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/9985627d-9ba4-4a5b-94fb-06bcc769acfd?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T10:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-jjqx-rr3m-x253/GHSA-jjqx-rr3m-x253.json b/advisories/unreviewed/2025/03/GHSA-jjqx-rr3m-x253/GHSA-jjqx-rr3m-x253.json new file mode 100644 index 00000000000..fba16eb686a --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-jjqx-rr3m-x253/GHSA-jjqx-rr3m-x253.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jjqx-rr3m-x253", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2025-1383" + ], + "details": "The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajax_transcript_delete() function. This makes it possible for unauthenticated attackers to delete arbitrary episode transcripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1383" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/podlove-podcasting-plugin-for-wordpress/tags/4.2.0/lib/modules/transcripts/transcripts.php#L223" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3246867" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/podlove-podcasting-plugin-for-wordpress/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/00a95ae7-3c58-4e5e-aaef-c04d1dacf27f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:35Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-mp92-g2h5-gx86/GHSA-mp92-g2h5-gx86.json b/advisories/unreviewed/2025/03/GHSA-mp92-g2h5-gx86/GHSA-mp92-g2h5-gx86.json new file mode 100644 index 00000000000..220f7804003 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-mp92-g2h5-gx86/GHSA-mp92-g2h5-gx86.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mp92-g2h5-gx86", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:43Z", + "aliases": [ + "CVE-2024-56202" + ], + "details": "Expected Behavior Violation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 9.0.0 through 9.2.8, from 10.0.0 through 10.0.3.\n\nUsers are recommended to upgrade to versions 9.2.9 or 10.0.4 or newer, which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-56202" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/btofzws2yqskk2n7f01r3l1819x01023" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-440" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-p6pm-7c2p-7q78/GHSA-p6pm-7c2p-7q78.json b/advisories/unreviewed/2025/03/GHSA-p6pm-7c2p-7q78/GHSA-p6pm-7c2p-7q78.json index d6f81bcc174..084edc9962e 100644 --- a/advisories/unreviewed/2025/03/GHSA-p6pm-7c2p-7q78/GHSA-p6pm-7c2p-7q78.json +++ b/advisories/unreviewed/2025/03/GHSA-p6pm-7c2p-7q78/GHSA-p6pm-7c2p-7q78.json @@ -46,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-89" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/03/GHSA-rf73-69vr-qxgj/GHSA-rf73-69vr-qxgj.json b/advisories/unreviewed/2025/03/GHSA-rf73-69vr-qxgj/GHSA-rf73-69vr-qxgj.json index 145002dd789..480aa846e6c 100644 --- a/advisories/unreviewed/2025/03/GHSA-rf73-69vr-qxgj/GHSA-rf73-69vr-qxgj.json +++ b/advisories/unreviewed/2025/03/GHSA-rf73-69vr-qxgj/GHSA-rf73-69vr-qxgj.json @@ -46,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-404" + "CWE-404", + "CWE-476" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/03/GHSA-wxcw-p248-4c56/GHSA-wxcw-p248-4c56.json b/advisories/unreviewed/2025/03/GHSA-wxcw-p248-4c56/GHSA-wxcw-p248-4c56.json index 09ccaa529fb..30e1133f219 100644 --- a/advisories/unreviewed/2025/03/GHSA-wxcw-p248-4c56/GHSA-wxcw-p248-4c56.json +++ b/advisories/unreviewed/2025/03/GHSA-wxcw-p248-4c56/GHSA-wxcw-p248-4c56.json @@ -46,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-89" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/03/GHSA-wxvm-3rh5-gmqm/GHSA-wxvm-3rh5-gmqm.json b/advisories/unreviewed/2025/03/GHSA-wxvm-3rh5-gmqm/GHSA-wxvm-3rh5-gmqm.json new file mode 100644 index 00000000000..676f6b86595 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-wxvm-3rh5-gmqm/GHSA-wxvm-3rh5-gmqm.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wxvm-3rh5-gmqm", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:43Z", + "aliases": [ + "CVE-2024-13902" + ], + "details": "A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13902" + }, + { + "type": "WEB", + "url": "https://gitee.com/huang-yk/student-manage/issues/I9UXC4" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.298785" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.298785" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-x75c-f5w5-hw79/GHSA-x75c-f5w5-hw79.json b/advisories/unreviewed/2025/03/GHSA-x75c-f5w5-hw79/GHSA-x75c-f5w5-hw79.json new file mode 100644 index 00000000000..b3fc0915186 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-x75c-f5w5-hw79/GHSA-x75c-f5w5-hw79.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x75c-f5w5-hw79", + "modified": "2025-03-06T12:30:44Z", + "published": "2025-03-06T12:30:44Z", + "aliases": [ + "CVE-2025-1696" + ], + "details": "A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data—potentially including sensitive details—was written to log files in clear text whenever an HTTP GET request was made through a proxy. An attacker with read access to these logs could obtain the proxy information and leverage it for further attacks or unauthorized access. Starting with version 4.39.0, Docker Desktop no longer logs the proxy string, thereby mitigating this risk.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1696" + }, + { + "type": "WEB", + "url": "https://docs.docker.com/desktop/settings-and-maintenance/settings/#proxies" + }, + { + "type": "WEB", + "url": "https://docs.docker.com/desktop/troubleshoot-and-support/troubleshoot/#check-the-logs" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-532" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-06T12:15:36Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-xw9v-hfmq-vx4x/GHSA-xw9v-hfmq-vx4x.json b/advisories/unreviewed/2025/03/GHSA-xw9v-hfmq-vx4x/GHSA-xw9v-hfmq-vx4x.json index dc48ca63762..e191882dec2 100644 --- a/advisories/unreviewed/2025/03/GHSA-xw9v-hfmq-vx4x/GHSA-xw9v-hfmq-vx4x.json +++ b/advisories/unreviewed/2025/03/GHSA-xw9v-hfmq-vx4x/GHSA-xw9v-hfmq-vx4x.json @@ -42,7 +42,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-89" ], "severity": "MODERATE", "github_reviewed": false,