netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-58fx-7v9q-3g56
GHSA-2qvr-7jvg-p9jj
GHSA-4v9p-4hw8-6h36
GHSA-4wg2-vfcc-fg3p
GHSA-7pjr-pgpp-7jxm
GHSA-7pxh-wvx3-744g
GHSA-8q73-vgp2-f355
GHSA-9r2h-cg94-r53c
GHSA-cjg5-jj7w-g8q6
GHSA-f336-wh5w-hf9v
GHSA-ff8j-mq3g-w56r
GHSA-j3v9-6gc7-vf5f
GHSA-j7fr-xvx6-3p7v
This commit is contained in:
advisory-database[bot]
2025-05-16 00:32:22 +00:00
parent 4ecb15a05e
commit ec31009dc1
13 changed files with 638 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2025/01/GHSA-58fx-7v9q-3g56/GHSA-58fx-7v9q-3g56.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-58fx-7v9q-3g56",
"modified": "2025-03-14T20:09:54Z",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-01-28T18:31:28Z",
"aliases": [
"CVE-2024-13484"
@@ -40,6 +40,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13484"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:7753"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-13484"
advisories/unreviewed/2025/05/GHSA-2qvr-7jvg-p9jj/GHSA-2qvr-7jvg-p9jj.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qvr-7jvg-p9jj",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4728"
],
"details": "A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4728"
},
{
"type": "WEB",
"url": "https://github.com/Lena-lyy/SQL/issues/4"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309030"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309030"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570677"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T23:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-4v9p-4hw8-6h36/GHSA-4v9p-4hw8-6h36.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4v9p-4hw8-6h36",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-05-16T00:31:07Z",
"aliases": [
"CVE-2025-4725"
],
"details": "A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part of the file /view_drive.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4725"
},
{
"type": "WEB",
"url": "https://github.com/Lena-lyy/SQL/issues/2"
},
{
"type": "WEB",
"url": "https://itsourcecode.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309027"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309027"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.569977"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T22:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-4wg2-vfcc-fg3p/GHSA-4wg2-vfcc-fg3p.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4wg2-vfcc-fg3p",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-05-16T00:31:07Z",
"aliases": [
"CVE-2025-4724"
],
"details": "A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is some unknown functionality of the file /student_profile.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4724"
},
{
"type": "WEB",
"url": "https://github.com/Lena-lyy/SQL/issues/1"
},
{
"type": "WEB",
"url": "https://itsourcecode.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309026"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309026"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.569974"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T22:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-7pjr-pgpp-7jxm/GHSA-7pjr-pgpp-7jxm.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7pjr-pgpp-7jxm",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4731"
],
"details": "A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4731"
},
{
"type": "WEB",
"url": "https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/4.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309033"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309033"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570688"
},
{
"type": "WEB",
"url": "https://www.totolink.net"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T00:15:20Z"
}
}
advisories/unreviewed/2025/05/GHSA-7pxh-wvx3-744g/GHSA-7pxh-wvx3-744g.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7pxh-wvx3-744g",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4726"
],
"details": "A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_student.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4726"
},
{
"type": "WEB",
"url": "https://github.com/Lena-lyy/SQL/issues/3"
},
{
"type": "WEB",
"url": "https://itsourcecode.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309028"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309028"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570010"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T23:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-8q73-vgp2-f355/GHSA-8q73-vgp2-f355.json
+25
View File
@@ -0,0 +1,25 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8q73-vgp2-f355",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4209"
],
"details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4209"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T23:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-9r2h-cg94-r53c/GHSA-9r2h-cg94-r53c.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9r2h-cg94-r53c",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4730"
],
"details": "A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMapDel of the component HTTP POST Request Handler. The manipulation of the argument devicemac1 leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4730"
},
{
"type": "WEB",
"url": "https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/3.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309032"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309032"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570687"
},
{
"type": "WEB",
"url": "https://www.totolink.net"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T00:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-cjg5-jj7w-g8q6/GHSA-cjg5-jj7w-g8q6.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cjg5-jj7w-g8q6",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-05-16T00:31:07Z",
"aliases": [
"CVE-2025-4722"
],
"details": "A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /edit_profile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4722"
},
{
"type": "WEB",
"url": "https://github.com/byxs0x0/cve/issues/4"
},
{
"type": "WEB",
"url": "https://itsourcecode.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309024"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309024"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.569951"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T22:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-f336-wh5w-hf9v/GHSA-f336-wh5w-hf9v.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f336-wh5w-hf9v",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4729"
],
"details": "A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4729"
},
{
"type": "WEB",
"url": "https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/2.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309031"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309031"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570686"
},
{
"type": "WEB",
"url": "https://www.totolink.net"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-16T00:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-ff8j-mq3g-w56r/GHSA-ff8j-mq3g-w56r.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ff8j-mq3g-w56r",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-05-16T00:31:07Z",
"aliases": [
"CVE-2025-4723"
],
"details": "A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /all_student.php. The manipulation of the argument delete leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4723"
},
{
"type": "WEB",
"url": "https://github.com/byxs0x0/cve/issues/5"
},
{
"type": "WEB",
"url": "https://itsourcecode.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309025"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309025"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.569965"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T22:15:19Z"
}
}
advisories/unreviewed/2025/05/GHSA-j3v9-6gc7-vf5f/GHSA-j3v9-6gc7-vf5f.json
+64
View File
@@ -0,0 +1,64 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j3v9-6gc7-vf5f",
"modified": "2025-05-16T00:31:08Z",
"published": "2025-05-16T00:31:08Z",
"aliases": [
"CVE-2025-4727"
],
"details": "A vulnerability was found in Meteor up to 3.2.1 and classified as problematic. This issue affects the function Object.assign of the file packages/ddp-server/livedata_server.js. The manipulation of the argument forwardedFor leads to inefficient regular expression complexity. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.2 is able to address this issue. The identifier of the patch is f7ea6817b90952baaea9baace2a3b4366fee6a63. It is recommended to upgrade the affected component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4727"
},
{
"type": "WEB",
"url": "https://github.com/meteor/meteor/issues/13713"
},
{
"type": "WEB",
"url": "https://github.com/meteor/meteor/pull/13721"
},
{
"type": "WEB",
"url": "https://github.com/meteor/meteor/commit/f7ea6817b90952baaea9baace2a3b4366fee6a63"
},
{
"type": "WEB",
"url": "https://github.com/meteor/meteor/releases/tag/release/METEOR%403.2.2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.309029"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.309029"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.570441"
}
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T23:15:59Z"
}
}
advisories/unreviewed/2025/05/GHSA-j7fr-xvx6-3p7v/GHSA-j7fr-xvx6-3p7v.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j7fr-xvx6-3p7v",
"modified": "2025-05-16T00:31:07Z",
"published": "2025-05-16T00:31:07Z",
"aliases": [
"CVE-2025-0921"
],
"details": "Execution with Unnecessary Privileges vulnerability in the Pager agent of multi-agent notification feature in Mitsubishi Electric Iconics Digital Solutions GENESIS64 prior to 10.97.3, Mitsubishi Electric GENESIS64 all versions and Mitsubishi Electric MC Works64 all versions allows a local authenticated attacker to make an unauthorized write to arbitrary files, by creating a symbolic link from a file used as a write destination by the services of the affected products to a target file. This could allow the attacker to destroy the file on a PC with the affected products installed, resulting in a denial-of-service (DoS) condition on the PC if the destroyed file is necessary for the operation of the PC.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0921"
},
{
"type": "WEB",
"url": "https://jvn.jp/vu/JVNVU93838985"
},
{
"type": "WEB",
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2025-002_en.pdf"
}
],
"database_specific": {
"cwe_ids": [
"CWE-250"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-15T23:15:58Z"
}
}