netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-gwvg-5xhp-rp5q
GHSA-4j5c-r959-xx38
GHSA-4p79-vffr-6jm5
GHSA-4x5f-fcg7-8m3c
GHSA-5v9r-24g7-2gx7
GHSA-cx2v-3m68-m9x4
GHSA-fhjf-qcr2-g8m7
GHSA-gjwx-g2ph-472r
GHSA-pqjf-9c57-cpg3
GHSA-rmwj-ph92-h7fq
GHSA-v3vg-hvj3-3m8h
GHSA-wx9f-pj36-96hc
GHSA-x69c-67qv-fx4j
GHSA-xgw4-9mp9-75mc
GHSA-xh33-q298-mqqf
This commit is contained in:
advisory-database[bot]
2025-05-02 00:33:54 +00:00
parent 7c140057ca
commit dd268a25f3
15 changed files with 681 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/04/GHSA-gwvg-5xhp-rp5q/GHSA-gwvg-5xhp-rp5q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gwvg-5xhp-rp5q",
"modified": "2025-04-23T15:30:56Z",
"modified": "2025-05-02T00:32:14Z",
"published": "2025-04-22T21:30:44Z",
"aliases": [
"CVE-2025-37087"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://support.hpe.com/hpesc/docDisplay?docLocale=en_US&docId=a00146087en_us"
},
{
"type": "WEB",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04840en_us&docLocale=en_US"
}
],
"database_specific": {
advisories/unreviewed/2025/05/GHSA-4j5c-r959-xx38/GHSA-4j5c-r959-xx38.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4j5c-r959-xx38",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4185"
],
"details": "A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing of the file ?g=obj_area_export_save. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4185"
},
{
"type": "WEB",
"url": "https://flowus.cn/share/6bd8ca39-bad2-4567-b0e1-9407991ad943?code=G8A6P3"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306803"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306803"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561803"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T00:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-4p79-vffr-6jm5/GHSA-4p79-vffr-6jm5.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4p79-vffr-6jm5",
"modified": "2025-05-02T00:32:16Z",
"published": "2025-05-02T00:32:16Z",
"aliases": [
"CVE-2025-4191"
],
"details": "A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /editmyeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4191"
},
{
"type": "WEB",
"url": "https://github.com/ideal-valli/myCVE/issues/3"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306805"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306805"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561816"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T00:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-4x5f-fcg7-8m3c/GHSA-4x5f-fcg7-8m3c.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x5f-fcg7-8m3c",
"modified": "2025-05-02T00:32:16Z",
"published": "2025-05-02T00:32:16Z",
"aliases": [
"CVE-2025-4186"
],
"details": "A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4186"
},
{
"type": "WEB",
"url": "https://flowus.cn/share/0f982f99-ecd5-4e35-88f0-c27093743385?code=G8A6P3"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306804"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306804"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561814"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T00:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-5v9r-24g7-2gx7/GHSA-5v9r-24g7-2gx7.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v9r-24g7-2gx7",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2024-52903"
],
"details": "IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52903"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7232336"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T23:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-cx2v-3m68-m9x4/GHSA-cx2v-3m68-m9x4.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cx2v-3m68-m9x4",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-27365"
],
"details": "IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 \n\nClient connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27365"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7232272"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:17Z"
}
}
advisories/unreviewed/2025/05/GHSA-fhjf-qcr2-g8m7/GHSA-fhjf-qcr2-g8m7.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fhjf-qcr2-g8m7",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-1333"
],
"details": "IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1333"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7232272"
}
],
"database_specific": {
"cwe_ids": [
"CWE-214"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:16Z"
}
}
advisories/unreviewed/2025/05/GHSA-gjwx-g2ph-472r/GHSA-gjwx-g2ph-472r.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gjwx-g2ph-472r",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-43595"
],
"details": "An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. Users are recommended to upgrade to MSP360 Backup 4.4 (released on 2025-04-22).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43595"
},
{
"type": "WEB",
"url": "https://help.msp360.com/cloudberry-backup-mac-linux/whats-new"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:17Z"
}
}
advisories/unreviewed/2025/05/GHSA-pqjf-9c57-cpg3/GHSA-pqjf-9c57-cpg3.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pqjf-9c57-cpg3",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4183"
],
"details": "A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RECV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4183"
},
{
"type": "WEB",
"url": "https://fitoxs.com/exploit/exploit-d8578edf8458ce06fbc5bb76a58c5ca4.txt"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306801"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306801"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561144"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T23:15:51Z"
}
}
advisories/unreviewed/2025/05/GHSA-rmwj-ph92-h7fq/GHSA-rmwj-ph92-h7fq.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rmwj-ph92-h7fq",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4184"
],
"details": "A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4184"
},
{
"type": "WEB",
"url": "https://fitoxs.com/exploit/exploit-81dc9bdb52d04dc20036dbd8313ed055.txt"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306802"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306802"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561145"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-02T00:15:18Z"
}
}
advisories/unreviewed/2025/05/GHSA-v3vg-hvj3-3m8h/GHSA-v3vg-hvj3-3m8h.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v3vg-hvj3-3m8h",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4178"
],
"details": "A vulnerability was found in xiaowei1118 java_server up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component File Upload API. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4178"
},
{
"type": "WEB",
"url": "https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250418-02.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306797"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306797"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561794"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:18Z"
}
}
advisories/unreviewed/2025/05/GHSA-wx9f-pj36-96hc/GHSA-wx9f-pj36-96hc.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wx9f-pj36-96hc",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4182"
],
"details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component BELL Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4182"
},
{
"type": "WEB",
"url": "https://fitoxs.com/exploit/exploit-e99a18c428cb38d5f260853678922e03.txt"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306800"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306800"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561141"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T23:15:51Z"
}
}
advisories/unreviewed/2025/05/GHSA-x69c-67qv-fx4j/GHSA-x69c-67qv-fx4j.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x69c-67qv-fx4j",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4176"
],
"details": "A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4176"
},
{
"type": "WEB",
"url": "https://github.com/bluechips-zhao/myCVE/issues/5"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306796"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306796"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561764"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:17Z"
}
}
advisories/unreviewed/2025/05/GHSA-xgw4-9mp9-75mc/GHSA-xgw4-9mp9-75mc.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xgw4-9mp9-75mc",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4181"
],
"details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4181"
},
{
"type": "WEB",
"url": "https://fitoxs.com/exploit/exploit-202cb962ac59075b964b07152d234b70.txt"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306799"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306799"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561139"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T23:15:50Z"
}
}
advisories/unreviewed/2025/05/GHSA-xh33-q298-mqqf/GHSA-xh33-q298-mqqf.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xh33-q298-mqqf",
"modified": "2025-05-02T00:32:15Z",
"published": "2025-05-02T00:32:15Z",
"aliases": [
"CVE-2025-4180"
],
"details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component TRACE Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4180"
},
{
"type": "WEB",
"url": "https://fitoxs.com/exploit/exploit-25d55ad283aa400af464c76d713c07ad.txt"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.306798"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.306798"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.561035"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-01T22:15:18Z"
}
}