From ef8990364fcd2c97e00fb111485f5a399578dd86 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 22 May 2025 12:32:10 +0000 Subject: [PATCH] Publish Advisories GHSA-4w7r-x646-644r GHSA-5h65-2pwj-39r9 GHSA-cfrx-6379-8qgj GHSA-f49c-fpvw-q6c9 GHSA-mjxx-858f-xw63 GHSA-pjwq-mhqr-h9gw GHSA-qhrc-jg2f-vvhg GHSA-rrxj-rfjx-rqrq GHSA-x7r7-9j4g-5qrp --- .../GHSA-4w7r-x646-644r.json | 36 +++++++++++++ .../GHSA-5h65-2pwj-39r9.json | 40 ++++++++++++++ .../GHSA-cfrx-6379-8qgj.json | 48 +++++++++++++++++ .../GHSA-f49c-fpvw-q6c9.json | 52 +++++++++++++++++++ .../GHSA-mjxx-858f-xw63.json | 36 +++++++++++++ .../GHSA-pjwq-mhqr-h9gw.json | 48 +++++++++++++++++ .../GHSA-qhrc-jg2f-vvhg.json | 52 +++++++++++++++++++ .../GHSA-rrxj-rfjx-rqrq.json | 36 +++++++++++++ .../GHSA-x7r7-9j4g-5qrp.json | 36 +++++++++++++ 9 files changed, 384 insertions(+) create mode 100644 advisories/unreviewed/2025/05/GHSA-4w7r-x646-644r/GHSA-4w7r-x646-644r.json create mode 100644 advisories/unreviewed/2025/05/GHSA-5h65-2pwj-39r9/GHSA-5h65-2pwj-39r9.json create mode 100644 advisories/unreviewed/2025/05/GHSA-cfrx-6379-8qgj/GHSA-cfrx-6379-8qgj.json create mode 100644 advisories/unreviewed/2025/05/GHSA-f49c-fpvw-q6c9/GHSA-f49c-fpvw-q6c9.json create mode 100644 advisories/unreviewed/2025/05/GHSA-mjxx-858f-xw63/GHSA-mjxx-858f-xw63.json create mode 100644 advisories/unreviewed/2025/05/GHSA-pjwq-mhqr-h9gw/GHSA-pjwq-mhqr-h9gw.json create mode 100644 advisories/unreviewed/2025/05/GHSA-qhrc-jg2f-vvhg/GHSA-qhrc-jg2f-vvhg.json create mode 100644 advisories/unreviewed/2025/05/GHSA-rrxj-rfjx-rqrq/GHSA-rrxj-rfjx-rqrq.json create mode 100644 advisories/unreviewed/2025/05/GHSA-x7r7-9j4g-5qrp/GHSA-x7r7-9j4g-5qrp.json diff --git a/advisories/unreviewed/2025/05/GHSA-4w7r-x646-644r/GHSA-4w7r-x646-644r.json b/advisories/unreviewed/2025/05/GHSA-4w7r-x646-644r/GHSA-4w7r-x646-644r.json new file mode 100644 index 00000000000..2f80d51365d --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-4w7r-x646-644r/GHSA-4w7r-x646-644r.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4w7r-x646-644r", + "modified": "2025-05-22T12:30:29Z", + "published": "2025-05-22T12:30:29Z", + "aliases": [ + "CVE-2025-3836" + ], + "details": "Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the logon events aggregate report.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3836" + }, + { + "type": "WEB", + "url": "https://www.manageengine.com/products/active-directory-audit/cve-2025-3836.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T11:15:52Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-5h65-2pwj-39r9/GHSA-5h65-2pwj-39r9.json b/advisories/unreviewed/2025/05/GHSA-5h65-2pwj-39r9/GHSA-5h65-2pwj-39r9.json new file mode 100644 index 00000000000..8bd00d96a15 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-5h65-2pwj-39r9/GHSA-5h65-2pwj-39r9.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5h65-2pwj-39r9", + "modified": "2025-05-22T12:30:28Z", + "published": "2025-05-22T12:30:28Z", + "aliases": [ + "CVE-2024-9544" + ], + "details": "The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 8.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9544" + }, + { + "type": "WEB", + "url": "https://simplepx.com/newfloward/wp-content/uploads/mapsvg/malicious.svg" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ec77f96-c73a-44f7-afa2-673f68ee3582?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T10:15:54Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-cfrx-6379-8qgj/GHSA-cfrx-6379-8qgj.json b/advisories/unreviewed/2025/05/GHSA-cfrx-6379-8qgj/GHSA-cfrx-6379-8qgj.json new file mode 100644 index 00000000000..c13f7c731c5 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-cfrx-6379-8qgj/GHSA-cfrx-6379-8qgj.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cfrx-6379-8qgj", + "modified": "2025-05-22T12:30:28Z", + "published": "2025-05-22T12:30:28Z", + "aliases": [ + "CVE-2025-4419" + ], + "details": "The Hot Random Image plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.9.2 via the 'path' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to access arbitrary images with allowed extensions, outside of the originally intended directory.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4419" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hot-random-image/tags/1.9.2/hot_random_image.php#L57" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3298033" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/hot-random-image/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d6628232-0bd1-4194-8322-36084b1eb0f7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T10:15:55Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-f49c-fpvw-q6c9/GHSA-f49c-fpvw-q6c9.json b/advisories/unreviewed/2025/05/GHSA-f49c-fpvw-q6c9/GHSA-f49c-fpvw-q6c9.json new file mode 100644 index 00000000000..ddb4f012ea3 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-f49c-fpvw-q6c9/GHSA-f49c-fpvw-q6c9.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f49c-fpvw-q6c9", + "modified": "2025-05-22T12:30:29Z", + "published": "2025-05-22T12:30:29Z", + "aliases": [ + "CVE-2025-5074" + ], + "details": "A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5074" + }, + { + "type": "WEB", + "url": "https://fitoxs.com/exploit/exploit-f178a364d6fda9f1ff1b6a3e4a09707f746bbd3c34b087c3871e9dc0e00f28df.txt" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.309954" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.309954" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.581290" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T12:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-mjxx-858f-xw63/GHSA-mjxx-858f-xw63.json b/advisories/unreviewed/2025/05/GHSA-mjxx-858f-xw63/GHSA-mjxx-858f-xw63.json new file mode 100644 index 00000000000..3b78491a3b4 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-mjxx-858f-xw63/GHSA-mjxx-858f-xw63.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mjxx-858f-xw63", + "modified": "2025-05-22T12:30:29Z", + "published": "2025-05-22T12:30:29Z", + "aliases": [ + "CVE-2025-3444" + ], + "details": "Zohocorp ManageEngine ServiceDesk Plus MSP and SupportCenter Plus versions below 14920 are vulnerable to authenticated Local File Inclusion (LFI) in the Admin module, where help card content is loaded.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3444" + }, + { + "type": "WEB", + "url": "https://www.manageengine.com/products/service-desk-msp/cve-2025-3444.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T11:15:52Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-pjwq-mhqr-h9gw/GHSA-pjwq-mhqr-h9gw.json b/advisories/unreviewed/2025/05/GHSA-pjwq-mhqr-h9gw/GHSA-pjwq-mhqr-h9gw.json new file mode 100644 index 00000000000..dc7c89b097d --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-pjwq-mhqr-h9gw/GHSA-pjwq-mhqr-h9gw.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pjwq-mhqr-h9gw", + "modified": "2025-05-22T12:30:28Z", + "published": "2025-05-22T12:30:28Z", + "aliases": [ + "CVE-2025-4405" + ], + "details": "The Hot Random Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4405" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/hot-random-image/tags/1.9.2/hot_random_image.php#L43" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3298033" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/hot-random-image/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c5cff14e-e891-4569-afd8-2885ebb26401?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T10:15:55Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-qhrc-jg2f-vvhg/GHSA-qhrc-jg2f-vvhg.json b/advisories/unreviewed/2025/05/GHSA-qhrc-jg2f-vvhg/GHSA-qhrc-jg2f-vvhg.json new file mode 100644 index 00000000000..c63f2d499c4 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-qhrc-jg2f-vvhg/GHSA-qhrc-jg2f-vvhg.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qhrc-jg2f-vvhg", + "modified": "2025-05-22T12:30:29Z", + "published": "2025-05-22T12:30:29Z", + "aliases": [ + "CVE-2025-5073" + ], + "details": "A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. This issue affects some unknown processing of the component MKDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5073" + }, + { + "type": "WEB", + "url": "https://fitoxs.com/exploit/expoit-bbcf0f842f1c5385430b6992995a8eb068c58dfbaae38ffb7df1d2c69041bc7c.txt" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.309953" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.309953" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.581288" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T11:15:52Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-rrxj-rfjx-rqrq/GHSA-rrxj-rfjx-rqrq.json b/advisories/unreviewed/2025/05/GHSA-rrxj-rfjx-rqrq/GHSA-rrxj-rfjx-rqrq.json new file mode 100644 index 00000000000..8cf6fe6049b --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-rrxj-rfjx-rqrq/GHSA-rrxj-rfjx-rqrq.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rrxj-rfjx-rqrq", + "modified": "2025-05-22T12:30:28Z", + "published": "2025-05-22T12:30:28Z", + "aliases": [ + "CVE-2024-25010" + ], + "details": "Ericsson RAN Compute\nand Site Controller 6610 contains in certain configurations a high severity\nvulnerability where improper input validation could be exploited leading to arbitrary code execution.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25010" + }, + { + "type": "WEB", + "url": "https://www.ericsson.com/en/about-us/security/psirt/CVE-2024-25010" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T11:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/05/GHSA-x7r7-9j4g-5qrp/GHSA-x7r7-9j4g-5qrp.json b/advisories/unreviewed/2025/05/GHSA-x7r7-9j4g-5qrp/GHSA-x7r7-9j4g-5qrp.json new file mode 100644 index 00000000000..8a9c62aa1c9 --- /dev/null +++ b/advisories/unreviewed/2025/05/GHSA-x7r7-9j4g-5qrp/GHSA-x7r7-9j4g-5qrp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x7r7-9j4g-5qrp", + "modified": "2025-05-22T12:30:29Z", + "published": "2025-05-22T12:30:29Z", + "aliases": [ + "CVE-2025-41403" + ], + "details": "Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection while fetching service account audit data.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41403" + }, + { + "type": "WEB", + "url": "https://www.manageengine.com/products/active-directory-audit/cve-2025-41403.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-05-22T11:15:52Z" + } +} \ No newline at end of file