diff --git a/advisories/github-reviewed/2024/08/GHSA-4crf-28c7-v4gr/GHSA-4crf-28c7-v4gr.json b/advisories/github-reviewed/2024/08/GHSA-4crf-28c7-v4gr/GHSA-4crf-28c7-v4gr.json index e00bcf8021e..d649b7b121a 100644 --- a/advisories/github-reviewed/2024/08/GHSA-4crf-28c7-v4gr/GHSA-4crf-28c7-v4gr.json +++ b/advisories/github-reviewed/2024/08/GHSA-4crf-28c7-v4gr/GHSA-4crf-28c7-v4gr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4crf-28c7-v4gr", - "modified": "2024-12-12T06:30:48Z", + "modified": "2025-01-09T09:31:40Z", "published": "2024-08-21T06:32:18Z", "aliases": [ "CVE-2024-6508" @@ -64,6 +64,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:9620" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2025:0014" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-6508" diff --git a/advisories/github-reviewed/2024/09/GHSA-j8gh-87rx-c7w9/GHSA-j8gh-87rx-c7w9.json b/advisories/github-reviewed/2024/09/GHSA-j8gh-87rx-c7w9/GHSA-j8gh-87rx-c7w9.json index 0fe84a7f2a9..1477f964e59 100644 --- a/advisories/github-reviewed/2024/09/GHSA-j8gh-87rx-c7w9/GHSA-j8gh-87rx-c7w9.json +++ b/advisories/github-reviewed/2024/09/GHSA-j8gh-87rx-c7w9/GHSA-j8gh-87rx-c7w9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-j8gh-87rx-c7w9", - "modified": "2024-11-18T16:27:13Z", + "modified": "2025-01-09T09:31:40Z", "published": "2024-09-17T00:31:06Z", "aliases": [ "CVE-2024-45496" @@ -48,6 +48,10 @@ "type": "WEB", "url": "https://github.com/openshift/openshift-controller-manager/commit/3af3628103f9ddc3b825e6e5243ec58e85311046" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:3718" + }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:6685" diff --git a/advisories/unreviewed/2025/01/GHSA-24v2-mrj2-4wpc/GHSA-24v2-mrj2-4wpc.json b/advisories/unreviewed/2025/01/GHSA-24v2-mrj2-4wpc/GHSA-24v2-mrj2-4wpc.json index 5790bba065c..96b990bbd69 100644 --- a/advisories/unreviewed/2025/01/GHSA-24v2-mrj2-4wpc/GHSA-24v2-mrj2-4wpc.json +++ b/advisories/unreviewed/2025/01/GHSA-24v2-mrj2-4wpc/GHSA-24v2-mrj2-4wpc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-24v2-mrj2-4wpc", - "modified": "2025-01-08T15:31:09Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:50Z", "aliases": [ "CVE-2025-0247" @@ -26,6 +26,10 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-01" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-2549-xh72-qrpm/GHSA-2549-xh72-qrpm.json b/advisories/unreviewed/2025/01/GHSA-2549-xh72-qrpm/GHSA-2549-xh72-qrpm.json new file mode 100644 index 00000000000..e63ce8408d6 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2549-xh72-qrpm/GHSA-2549-xh72-qrpm.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2549-xh72-qrpm", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-20033" + ], + "details": "Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsole_read_plugins permission via creating a post with the custom_pl_notification type and specific props.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20033" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-1287" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2722-p93p-vrgm/GHSA-2722-p93p-vrgm.json b/advisories/unreviewed/2025/01/GHSA-2722-p93p-vrgm/GHSA-2722-p93p-vrgm.json new file mode 100644 index 00000000000..4c714462b2f --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2722-p93p-vrgm/GHSA-2722-p93p-vrgm.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2722-p93p-vrgm", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43657" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: High. However, the attacker will need a (low privilege) account to gain access to the action.exe CGI binary and upload the crafted firmware file, or convince a user with such access to upload it.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43657" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43657" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2776-h8x3-vrr7/GHSA-2776-h8x3-vrr7.json b/advisories/unreviewed/2025/01/GHSA-2776-h8x3-vrr7/GHSA-2776-h8x3-vrr7.json index 46e117346ce..3b419847efb 100644 --- a/advisories/unreviewed/2025/01/GHSA-2776-h8x3-vrr7/GHSA-2776-h8x3-vrr7.json +++ b/advisories/unreviewed/2025/01/GHSA-2776-h8x3-vrr7/GHSA-2776-h8x3-vrr7.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2776-h8x3-vrr7", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:49Z", "aliases": [ "CVE-2025-0237" @@ -30,6 +30,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-02" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-2fff-928r-p76x/GHSA-2fff-928r-p76x.json b/advisories/unreviewed/2025/01/GHSA-2fff-928r-p76x/GHSA-2fff-928r-p76x.json new file mode 100644 index 00000000000..dadf490dc08 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2fff-928r-p76x/GHSA-2fff-928r-p76x.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2fff-928r-p76x", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43655" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: Moderate – The attacker will first need to find the name of the script, and needs a (low privilege) account to gain access to the script, or convince a user with such access to execute a request to it.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43655" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43655" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2gpm-3664-wpcp/GHSA-2gpm-3664-wpcp.json b/advisories/unreviewed/2025/01/GHSA-2gpm-3664-wpcp/GHSA-2gpm-3664-wpcp.json new file mode 100644 index 00000000000..b26721dafe7 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2gpm-3664-wpcp/GHSA-2gpm-3664-wpcp.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2gpm-3664-wpcp", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2025-0342" + ], + "details": "A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument s_lname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0342" + }, + { + "type": "WEB", + "url": "https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20Computer%20Laboratory%20Management%20System.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290829" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290829" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.476897" + }, + { + "type": "WEB", + "url": "https://www.campcodes.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-2q25-7xw9-h7cj/GHSA-2q25-7xw9-h7cj.json b/advisories/unreviewed/2025/01/GHSA-2q25-7xw9-h7cj/GHSA-2q25-7xw9-h7cj.json new file mode 100644 index 00000000000..a8711488f84 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-2q25-7xw9-h7cj/GHSA-2q25-7xw9-h7cj.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2q25-7xw9-h7cj", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43662" + ], + "details": "The .exe or .exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown to the iocadmin user.\n\nThis issue affects Iocharger firmware for AC models before version 24120701.\n\nLikelihood: Moderate – An attacker will need to have knowledge of this CGI binary, e.g. by finding it in firmware. Furthermore, the attacker will need a (low privilege) account to gain access to the .exe or .exe CGI binary and upload the file, or convince a user with such access to upload it.\n\nImpact: Low – The attacker can upload arbitrary files to /tmp/upload/ or /tmp/. However, the attacker is unable to access or use these files without other vulnerabilities.\n\nCVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). Artitrary files can be uploaded, be these files will not be in a location where they can influence confidentiality or availability and have a minimal impact on device integrity (VC:N/VI:L/VA:N). There is no impact on subsequent systems. (SC:N/SI:N/SA:N). While this device is an EV charger handing significant amounts of power, we do not expect this vulnerability to have a safety impact. The attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43662" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43662" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-373j-x448-854g/GHSA-373j-x448-854g.json b/advisories/unreviewed/2025/01/GHSA-373j-x448-854g/GHSA-373j-x448-854g.json new file mode 100644 index 00000000000..55d51f85242 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-373j-x448-854g/GHSA-373j-x448-854g.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-373j-x448-854g", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-12805" + ], + "details": "A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12805" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-134" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-3vx4-pj97-vxc3/GHSA-3vx4-pj97-vxc3.json b/advisories/unreviewed/2025/01/GHSA-3vx4-pj97-vxc3/GHSA-3vx4-pj97-vxc3.json new file mode 100644 index 00000000000..5954827b93f --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-3vx4-pj97-vxc3/GHSA-3vx4-pj97-vxc3.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3vx4-pj97-vxc3", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2025-0341" + ], + "details": "A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument e_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0341" + }, + { + "type": "WEB", + "url": "https://github.com/shaturo1337/POCs/blob/main/Remote%20Code%20Execution%20via%20Arbitrary%20File%20Upload%20in%20Computer%20Laboratory%20Management%20System.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290828" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290828" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.476884" + }, + { + "type": "WEB", + "url": "https://www.campcodes.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-3wph-r629-c94g/GHSA-3wph-r629-c94g.json b/advisories/unreviewed/2025/01/GHSA-3wph-r629-c94g/GHSA-3wph-r629-c94g.json new file mode 100644 index 00000000000..3cceee10c42 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-3wph-r629-c94g/GHSA-3wph-r629-c94g.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3wph-r629-c94g", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43649" + ], + "details": "Authenticated command injection in the filename of a .exe request leads to remote code execution as the root user.\n\nThis issue affects Iocharger firmware for AC models before version 24120701.\n\nLikelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineering the firmware or trying it on all fields. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a payload.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.\n\nCVSS clarification: This attack can be performed over any network conenction serving the web interfacr (AV:N), and there are not additional mitigating measures that need to be circumvented (AC:L) or other prerequisites (AT:N). The attack does require privileges, but the level does not matter (PR:L), there is no user interaction required (UI:N). The attack leeds to a full compromised of the charger (VC:H/VI:H/VA:H) and a compromised charger can be used to \"pivot\" to networks that should normally not be reachable (SC:L/SI:L/SA:H). Because this is an EV chargers with significant pwoer, there is a potential safety imp0act (S:P). THis attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43649" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43649" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-4pqh-gmhf-2qvf/GHSA-4pqh-gmhf-2qvf.json b/advisories/unreviewed/2025/01/GHSA-4pqh-gmhf-2qvf/GHSA-4pqh-gmhf-2qvf.json new file mode 100644 index 00000000000..f1a31290ab9 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-4pqh-gmhf-2qvf/GHSA-4pqh-gmhf-2qvf.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4pqh-gmhf-2qvf", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43656" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\n\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: Moderate – It might be difficult for an attacker to identify the file structure of the directory, and then modify the backup to add a new CGI script in the correct directory. Furthermore, the attacker will need an account to restore the settings backup, or convince a user with such access to upload a modified backup file.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and deletefiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43656" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43656" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-6447-4qjm-h76m/GHSA-6447-4qjm-h76m.json b/advisories/unreviewed/2025/01/GHSA-6447-4qjm-h76m/GHSA-6447-4qjm-h76m.json new file mode 100644 index 00000000000..b3fa74bd579 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-6447-4qjm-h76m/GHSA-6447-4qjm-h76m.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6447-4qjm-h76m", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2025-0345" + ], + "details": "A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0345" + }, + { + "type": "WEB", + "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli4.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290858" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290858" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.475748" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-6p2f-hm45-h2mh/GHSA-6p2f-hm45-h2mh.json b/advisories/unreviewed/2025/01/GHSA-6p2f-hm45-h2mh/GHSA-6p2f-hm45-h2mh.json new file mode 100644 index 00000000000..7c403966362 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-6p2f-hm45-h2mh/GHSA-6p2f-hm45-h2mh.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6p2f-hm45-h2mh", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2025-0346" + ], + "details": "A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0346" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://gist.github.com/Lytes/266e5fa6eb4506fe2c7e35166664249a" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290859" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290859" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.476728" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T09:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-6wxc-jqg3-v947/GHSA-6wxc-jqg3-v947.json b/advisories/unreviewed/2025/01/GHSA-6wxc-jqg3-v947/GHSA-6wxc-jqg3-v947.json new file mode 100644 index 00000000000..fefad157d01 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-6wxc-jqg3-v947/GHSA-6wxc-jqg3-v947.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6wxc-jqg3-v947", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43661" + ], + "details": "The .so library, which is used by , is\nvulnerable to a buffer overflow in the code that handles the deletion\nof certificates. This buffer overflow can be triggered by providing a\nlong file path to the action of the .exe CGI binary or\nto the .sh CGI script. This binary or script will write this\nfile path to , which is then\nread by .so\n\n\nThis issue affects Iocharger firmware for AC models before version 24120701.\n\nLikelihood: Moderate – An attacker will have to find this exploit by\neither obtaining the binaries involved in this vulnerability, or by trial\nand error. Furthermore, the attacker will need a (low privilege)\naccount to gain access to the .exe CGI binary or .sh\nscript to trigger the vulnerability, or convince a user with such access\nsend an HTTP request that triggers it.\n\n\nImpact: High – The process, which we assume is\nresponsible for OCPP communication, will keep crashing after\nperforming the exploit. This happens because the buffer overflow\ncauses the process to segfault before\n is removed. This means that,\neven though is automatically restarted, it will crash\nagain as soon as it tries to parse the text file.\n\nCVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). The attack leads to reducred availability of the device (VC:N/VI:N/VA:H). THere is not impact on subsequent systems. (SC:N/SI:N/SA:N). Alltough this device is an EV charger handing significant amounts of power, we do not forsee a safety impact. The attack can be automated (AU:Y). Because the DoS condition is written to disk persistantly, it cannot be recovered by the user (R:I).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:I/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43661" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43661" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-6x4w-74f8-5jjw/GHSA-6x4w-74f8-5jjw.json b/advisories/unreviewed/2025/01/GHSA-6x4w-74f8-5jjw/GHSA-6x4w-74f8-5jjw.json new file mode 100644 index 00000000000..558e2bd6144 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-6x4w-74f8-5jjw/GHSA-6x4w-74f8-5jjw.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6x4w-74f8-5jjw", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43650" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root\n\nThis issue affects  firmware versions before 24120701.\n\nLikelihood: Moderate – The binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a crafted HTTP request.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete\nfiles and services.\n\nCVSS clarification: The attack can be executed over any network connection serving the web interface (AV:N). There are no additional measures that need to be circumvented (AC:L) or attack preconditions (AT:N). THe attack is privileged, but the level does not matter (PR:L) and does not require user interaction (UI:N). Attack leads to full system compromised (VC:H/VI:H/VA:H) and compromised devices can be used to \"pivot\" to other networks that should be unreachable (SC:L/SI:L/SA:H). Because this an EV charger using high power, there is a potential safety impact (S:P). The attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43650" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43650" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-7g8h-978r-mhh2/GHSA-7g8h-978r-mhh2.json b/advisories/unreviewed/2025/01/GHSA-7g8h-978r-mhh2/GHSA-7g8h-978r-mhh2.json new file mode 100644 index 00000000000..4118dff82a0 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-7g8h-978r-mhh2/GHSA-7g8h-978r-mhh2.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7g8h-978r-mhh2", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-12803" + ], + "details": "A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12803" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-7rgp-4j56-fm79/GHSA-7rgp-4j56-fm79.json b/advisories/unreviewed/2025/01/GHSA-7rgp-4j56-fm79/GHSA-7rgp-4j56-fm79.json new file mode 100644 index 00000000000..b040657e869 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-7rgp-4j56-fm79/GHSA-7rgp-4j56-fm79.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7rgp-4j56-fm79", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-22445" + ], + "details": "Mattermost versions 10.x <= 10.2 fail to accurately reflect missing settings, which allows confusion for admins regarding a Calls security-sensitive configuration via incorrect UI reporting.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22445" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-754" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-7w6r-748w-mh52/GHSA-7w6r-748w-mh52.json b/advisories/unreviewed/2025/01/GHSA-7w6r-748w-mh52/GHSA-7w6r-748w-mh52.json new file mode 100644 index 00000000000..2bb247406fa --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-7w6r-748w-mh52/GHSA-7w6r-748w-mh52.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7w6r-748w-mh52", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2023-1907" + ], + "details": "A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1907" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2218384" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-88m8-572v-8fjh/GHSA-88m8-572v-8fjh.json b/advisories/unreviewed/2025/01/GHSA-88m8-572v-8fjh/GHSA-88m8-572v-8fjh.json index 54d73975bfb..a3b615e342e 100644 --- a/advisories/unreviewed/2025/01/GHSA-88m8-572v-8fjh/GHSA-88m8-572v-8fjh.json +++ b/advisories/unreviewed/2025/01/GHSA-88m8-572v-8fjh/GHSA-88m8-572v-8fjh.json @@ -42,7 +42,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-74" + "CWE-74", + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/01/GHSA-899w-xjmf-9r94/GHSA-899w-xjmf-9r94.json b/advisories/unreviewed/2025/01/GHSA-899w-xjmf-9r94/GHSA-899w-xjmf-9r94.json new file mode 100644 index 00000000000..72f9a0c2058 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-899w-xjmf-9r94/GHSA-899w-xjmf-9r94.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-899w-xjmf-9r94", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43658" + ], + "details": "Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files\nThis issue affects Iocharger firmware for AC model before firmware version 25010801.\n\nLikelihood: High, but requires authentication\n\nImpact: Critical – The vulnerability can be used to delete any file on the charging station, severely impacting the integrity of the charging station. Furthermore, the vulnerability could be used to delete binaries required for the functioning of the charging station, severely impacting the availability of the charging station.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads compromised of the integrity and availability of the device (VVC:N/VI:H/VA:H), with no effect on subsequent systems (SC:N/SI:N/SA:N). We do not forsee a safety impact (S:N). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43658" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43658" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-27" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-928f-3rxq-5jvp/GHSA-928f-3rxq-5jvp.json b/advisories/unreviewed/2025/01/GHSA-928f-3rxq-5jvp/GHSA-928f-3rxq-5jvp.json index ffc9f1d2f96..2433810c1f0 100644 --- a/advisories/unreviewed/2025/01/GHSA-928f-3rxq-5jvp/GHSA-928f-3rxq-5jvp.json +++ b/advisories/unreviewed/2025/01/GHSA-928f-3rxq-5jvp/GHSA-928f-3rxq-5jvp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-928f-3rxq-5jvp", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:50Z", "aliases": [ "CVE-2025-0243" @@ -30,6 +30,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-02" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-938g-xvcv-qg4g/GHSA-938g-xvcv-qg4g.json b/advisories/unreviewed/2025/01/GHSA-938g-xvcv-qg4g/GHSA-938g-xvcv-qg4g.json new file mode 100644 index 00000000000..c5b85054f3a --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-938g-xvcv-qg4g/GHSA-938g-xvcv-qg4g.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-938g-xvcv-qg4g", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43654" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Iocharger firmware for AC models allows OS Command Injection as root\nThis issue affects all Iocharger AC EV charger models on a firmware version before 25010801.\n\nLikelihood: Moderate – The binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a crafted HTTP request.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete\nfiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43654" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43654" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-94gh-gf9p-r6hq/GHSA-94gh-gf9p-r6hq.json b/advisories/unreviewed/2025/01/GHSA-94gh-gf9p-r6hq/GHSA-94gh-gf9p-r6hq.json new file mode 100644 index 00000000000..760198b1b62 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-94gh-gf9p-r6hq/GHSA-94gh-gf9p-r6hq.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-94gh-gf9p-r6hq", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43651" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\nThis issue affects Iocharger firmware for AC models before version 241207101\n\nLikelihood: Moderate – The binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a crafted HTTP request.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.\n\nCVSS clarification: Any network connection serving the web interface is vulnerable (AV:N) and there are no additional measures to circumvent (AC:L) nor does the attack require special conditions to be present (AT:N). The attack requires authentication, but the level does not matter (PR:L), nor is user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H) and a compromised device can be used to potentially \"pivot\" into a network that should nopt be reachable (SC:L/SI:L/SA:H). Because this is an EV charger handing significant power, there is a potential safety impact (S:P). THe attack can be autometed (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43651" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43651" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-9h5j-hv7q-6cjx/GHSA-9h5j-hv7q-6cjx.json b/advisories/unreviewed/2025/01/GHSA-9h5j-hv7q-6cjx/GHSA-9h5j-hv7q-6cjx.json new file mode 100644 index 00000000000..c59e1c9741c --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-9h5j-hv7q-6cjx/GHSA-9h5j-hv7q-6cjx.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9h5j-hv7q-6cjx", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-0339" + ], + "details": "A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0339" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290826" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290826" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.475731" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-cpr8-m35v-9vv2/GHSA-cpr8-m35v-9vv2.json b/advisories/unreviewed/2025/01/GHSA-cpr8-m35v-9vv2/GHSA-cpr8-m35v-9vv2.json new file mode 100644 index 00000000000..0fe47465d89 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-cpr8-m35v-9vv2/GHSA-cpr8-m35v-9vv2.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cpr8-m35v-9vv2", + "modified": "2025-01-09T09:31:41Z", + "published": "2025-01-09T09:31:41Z", + "aliases": [ + "CVE-2024-40762" + ], + "details": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in the SonicOS SSLVPN authentication token generator that, in certain cases, can be predicted by an attacker potentially resulting in authentication bypass.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40762" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-338" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-f3xq-g93v-w8cv/GHSA-f3xq-g93v-w8cv.json b/advisories/unreviewed/2025/01/GHSA-f3xq-g93v-w8cv/GHSA-f3xq-g93v-w8cv.json index cf2e19cdc62..dceaf98f044 100644 --- a/advisories/unreviewed/2025/01/GHSA-f3xq-g93v-w8cv/GHSA-f3xq-g93v-w8cv.json +++ b/advisories/unreviewed/2025/01/GHSA-f3xq-g93v-w8cv/GHSA-f3xq-g93v-w8cv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f3xq-g93v-w8cv", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:49Z", "aliases": [ "CVE-2025-0240" @@ -30,6 +30,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-02" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-f6f8-8wvp-pj55/GHSA-f6f8-8wvp-pj55.json b/advisories/unreviewed/2025/01/GHSA-f6f8-8wvp-pj55/GHSA-f6f8-8wvp-pj55.json new file mode 100644 index 00000000000..56fad95e06c --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-f6f8-8wvp-pj55/GHSA-f6f8-8wvp-pj55.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f6f8-8wvp-pj55", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-12806" + ], + "details": "A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12806" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-37" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-f929-9mwj-xwvm/GHSA-f929-9mwj-xwvm.json b/advisories/unreviewed/2025/01/GHSA-f929-9mwj-xwvm/GHSA-f929-9mwj-xwvm.json new file mode 100644 index 00000000000..79633ad2386 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-f929-9mwj-xwvm/GHSA-f929-9mwj-xwvm.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f929-9mwj-xwvm", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-40765" + ], + "details": "An Integer-based buffer overflow vulnerability in the SonicOS via IPSec allows a remote attacker in specific conditions to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a specially crafted IKEv2 payload.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40765" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0013" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-ff32-cmvq-x6c5/GHSA-ff32-cmvq-x6c5.json b/advisories/unreviewed/2025/01/GHSA-ff32-cmvq-x6c5/GHSA-ff32-cmvq-x6c5.json new file mode 100644 index 00000000000..8bba6599c34 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-ff32-cmvq-x6c5/GHSA-ff32-cmvq-x6c5.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ff32-cmvq-x6c5", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2024-12802" + ], + "details": "SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12802" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-305" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T09:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-g42r-fh8w-cm5m/GHSA-g42r-fh8w-cm5m.json b/advisories/unreviewed/2025/01/GHSA-g42r-fh8w-cm5m/GHSA-g42r-fh8w-cm5m.json new file mode 100644 index 00000000000..13b81bbf6f7 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-g42r-fh8w-cm5m/GHSA-g42r-fh8w-cm5m.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g42r-fh8w-cm5m", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2024-43663" + ], + "details": "There are many buffer overflow vulnerabilities present in several CGI binaries of the charging station.This issue affects Iocharger firmware for AC model chargers beforeversion 24120701.\n\nLikelihood: High – Given the prevalence of these buffer overflows, and the clear error message of the web server, an attacker is very likely to be able to find these vulnerabilities.\n\nImpact: Low – Usually, overflowing one of these buffers just causes a segmentation fault of the CGI binary, which causes the web server to return a 502 Bad Gateway error. However the webserver itself is not affected, and no DoS can be achieved. Abusing these buffer overflows in a meaningful way requires highly technical knowledge, especially since ASLR also seems to be enabled on the charging station. However, a skilled attacker might be able to use one of these buffer overflows to obtain remote code execution.\n\nCVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). The attack has a small impact on the availability of the device (VC:N/VI:N/VA:L). There is no impact on subsequent systems. (SC:N/SI:N/SA:N). While this device is an EV charger handing significant amounts of power, we do not expect  this vulnerability to have a safety impact. The attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43663" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43663" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hf9c-pgc4-p2v2/GHSA-hf9c-pgc4-p2v2.json b/advisories/unreviewed/2025/01/GHSA-hf9c-pgc4-p2v2/GHSA-hf9c-pgc4-p2v2.json new file mode 100644 index 00000000000..d7578095b64 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hf9c-pgc4-p2v2/GHSA-hf9c-pgc4-p2v2.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hf9c-pgc4-p2v2", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2025-0344" + ], + "details": "A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /commpara/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0344" + }, + { + "type": "WEB", + "url": "https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli3.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290857" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290857" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.475747" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:30Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-hh4j-jwjv-8726/GHSA-hh4j-jwjv-8726.json b/advisories/unreviewed/2025/01/GHSA-hh4j-jwjv-8726/GHSA-hh4j-jwjv-8726.json index 0999b672f37..1b3e073ec97 100644 --- a/advisories/unreviewed/2025/01/GHSA-hh4j-jwjv-8726/GHSA-hh4j-jwjv-8726.json +++ b/advisories/unreviewed/2025/01/GHSA-hh4j-jwjv-8726/GHSA-hh4j-jwjv-8726.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-hh4j-jwjv-8726", - "modified": "2025-01-07T18:30:50Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:50Z", "aliases": [ "CVE-2025-0241" @@ -25,6 +25,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-02" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-hjvv-3pww-4pmf/GHSA-hjvv-3pww-4pmf.json b/advisories/unreviewed/2025/01/GHSA-hjvv-3pww-4pmf/GHSA-hjvv-3pww-4pmf.json new file mode 100644 index 00000000000..b188717a823 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-hjvv-3pww-4pmf/GHSA-hjvv-3pww-4pmf.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hjvv-3pww-4pmf", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:43Z", + "aliases": [ + "CVE-2024-13153" + ], + "details": "The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: Since the widget code isn't part of the code, to apply the patch, the affected widgets: Image Tooltip, Notification, Simple Popup, Video Play Button, and Card Carousel, must be deleted and reinstalled manually.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13153" + }, + { + "type": "WEB", + "url": "https://unlimited-elements.com/change-log" + }, + { + "type": "WEB", + "url": "https://wordpress.org/plugins/unlimited-elements-for-elementor/#developers" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/99625a3e-b8a4-42f8-8996-f7c5c0ff2d5f?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T09:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-j2qh-xvg9-rx4h/GHSA-j2qh-xvg9-rx4h.json b/advisories/unreviewed/2025/01/GHSA-j2qh-xvg9-rx4h/GHSA-j2qh-xvg9-rx4h.json new file mode 100644 index 00000000000..9ccd4a5eb6a --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-j2qh-xvg9-rx4h/GHSA-j2qh-xvg9-rx4h.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j2qh-xvg9-rx4h", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-0340" + ], + "details": "A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0340" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290827" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290827" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.476707" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-j94v-jxmv-27r2/GHSA-j94v-jxmv-27r2.json b/advisories/unreviewed/2025/01/GHSA-j94v-jxmv-27r2/GHSA-j94v-jxmv-27r2.json new file mode 100644 index 00000000000..fe06f31f3d6 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-j94v-jxmv-27r2/GHSA-j94v-jxmv-27r2.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j94v-jxmv-27r2", + "modified": "2025-01-09T09:31:41Z", + "published": "2025-01-09T09:31:41Z", + "aliases": [ + "CVE-2024-13041" + ], + "details": "An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13041" + }, + { + "type": "WEB", + "url": "https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#instance-saml-does-not-respect-external_provider-configuration" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/479165" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-286" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-mr76-pvc2-w479/GHSA-mr76-pvc2-w479.json b/advisories/unreviewed/2025/01/GHSA-mr76-pvc2-w479/GHSA-mr76-pvc2-w479.json new file mode 100644 index 00000000000..451a67f024f --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-mr76-pvc2-w479/GHSA-mr76-pvc2-w479.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mr76-pvc2-w479", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-53705" + ], + "details": "A Server-Side Request Forgery vulnerability in the SonicOS SSH management interface allows a remote attacker to establish a TCP connection to an IP address on any port when the user is logged in to the firewall.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53705" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-918" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-p4q7-g7ff-823j/GHSA-p4q7-g7ff-823j.json b/advisories/unreviewed/2025/01/GHSA-p4q7-g7ff-823j/GHSA-p4q7-g7ff-823j.json index 47b0ecf2189..35b76214a31 100644 --- a/advisories/unreviewed/2025/01/GHSA-p4q7-g7ff-823j/GHSA-p4q7-g7ff-823j.json +++ b/advisories/unreviewed/2025/01/GHSA-p4q7-g7ff-823j/GHSA-p4q7-g7ff-823j.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-p4q7-g7ff-823j", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:40Z", "published": "2025-01-07T18:30:49Z", "aliases": [ "CVE-2025-0239" @@ -30,6 +30,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-02" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-p8gc-jwrx-pf65/GHSA-p8gc-jwrx-pf65.json b/advisories/unreviewed/2025/01/GHSA-p8gc-jwrx-pf65/GHSA-p8gc-jwrx-pf65.json new file mode 100644 index 00000000000..a5046c8a996 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-p8gc-jwrx-pf65/GHSA-p8gc-jwrx-pf65.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p8gc-jwrx-pf65", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43653" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability  allows OS Command Injection as root\nThis issue affects Iocharger firmware for AC model chargers before version 24120701.\n\nLikelihood: Moderate – The binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a crafted HTTP request.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete\nfiles and services.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, but the level of authentication does not matter (PR:L), nor is any user interaction required (UI:N). The attack leads to a full compromised (VC:H/VI:H/VA:H), and compromised devices can be used to pivot into networks that should potentially not be accessible (SC:L/SI:L/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43653" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43653" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-phcc-6pmp-qw9v/GHSA-phcc-6pmp-qw9v.json b/advisories/unreviewed/2025/01/GHSA-phcc-6pmp-qw9v/GHSA-phcc-6pmp-qw9v.json index f597a5e7b30..eebfe5ada24 100644 --- a/advisories/unreviewed/2025/01/GHSA-phcc-6pmp-qw9v/GHSA-phcc-6pmp-qw9v.json +++ b/advisories/unreviewed/2025/01/GHSA-phcc-6pmp-qw9v/GHSA-phcc-6pmp-qw9v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-phcc-6pmp-qw9v", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:49Z", "aliases": [ "CVE-2025-0238" @@ -34,6 +34,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-03" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-q8fg-cp3q-5jwm/GHSA-q8fg-cp3q-5jwm.json b/advisories/unreviewed/2025/01/GHSA-q8fg-cp3q-5jwm/GHSA-q8fg-cp3q-5jwm.json new file mode 100644 index 00000000000..1084d4d4aa4 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-q8fg-cp3q-5jwm/GHSA-q8fg-cp3q-5jwm.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q8fg-cp3q-5jwm", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-22449" + ], + "details": "Mattermost versions 9.11.x <= 9.11.5 fail to enforce invite permissions, which allows team admins, with no permission to invite users to their team, to invite users by updating the \"allow_open_invite\" field via making their team public.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22449" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:28Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-qw28-p6qx-vj78/GHSA-qw28-p6qx-vj78.json b/advisories/unreviewed/2025/01/GHSA-qw28-p6qx-vj78/GHSA-qw28-p6qx-vj78.json index 943818c8680..d3f0c0ebdb6 100644 --- a/advisories/unreviewed/2025/01/GHSA-qw28-p6qx-vj78/GHSA-qw28-p6qx-vj78.json +++ b/advisories/unreviewed/2025/01/GHSA-qw28-p6qx-vj78/GHSA-qw28-p6qx-vj78.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qw28-p6qx-vj78", - "modified": "2025-01-08T18:30:48Z", + "modified": "2025-01-09T09:31:41Z", "published": "2025-01-07T18:30:50Z", "aliases": [ "CVE-2025-0242" @@ -34,6 +34,14 @@ { "type": "WEB", "url": "https://www.mozilla.org/security/advisories/mfsa2025-03" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-04" + }, + { + "type": "WEB", + "url": "https://www.mozilla.org/security/advisories/mfsa2025-05" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/01/GHSA-qxc8-hg93-pqh7/GHSA-qxc8-hg93-pqh7.json b/advisories/unreviewed/2025/01/GHSA-qxc8-hg93-pqh7/GHSA-qxc8-hg93-pqh7.json new file mode 100644 index 00000000000..20403c860c7 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-qxc8-hg93-pqh7/GHSA-qxc8-hg93-pqh7.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qxc8-hg93-pqh7", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43659" + ], + "details": "After gaining access to the firmware of a charging station, a file at can be accessed to obtain default credentials that are the same across all Iocharger AC model EV chargers.\n\nThis issue affects Iocharger firmware for AC models before firmware version 25010801. \n\nThe issue is addressed by requiring a mandatory password change on first login, it is still recommended to change the password on older models.\n\nLikelihood: Moderate – The attacker will first have to abuse a code execution or file inclusion vulnerability (for example by using .sh) to gain access to the .json file, or obtain a firmware dump of the charging station or obtain the firmware via other channels.\n\nImpact: Critical – All chargers using Iocharger firmware for AC models started with the same initial password. For models with firmware version before 25010801 a password change was not mandatory. It is therefore very likely that this firmware password is still active on many chargers. These credentials could, once obtained, allow an attacker to log into many Iocharger charging station, and allow them to execute arbitrary commands via the System → Custom page.\n\nCVSS clarification: Any network interface serving the web ui is vulnerable (AV:N) and there are not additional security measures to circumvent (AC:L), nor does the attack require and existing preconditions (AT:N). The attack is authenticated, and requires high privileges (PR:H), there is no user interaction required (UI:N). The attack leads to a compromised of the confidentialy of the \"super user\" credentials of the device (VC:H/VI:N/VA:N), and can subsequently be used to full compromise and other devices (SC:H/SI:H/SA:H). Becuase this is an EV charger handing significant power, there is a potential safety impact (S:P). This attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43659" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43659" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-256" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-r2cp-qxjw-69v8/GHSA-r2cp-qxjw-69v8.json b/advisories/unreviewed/2025/01/GHSA-r2cp-qxjw-69v8/GHSA-r2cp-qxjw-69v8.json new file mode 100644 index 00000000000..3187dd1c461 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-r2cp-qxjw-69v8/GHSA-r2cp-qxjw-69v8.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r2cp-qxjw-69v8", + "modified": "2025-01-09T09:31:41Z", + "published": "2025-01-09T09:31:41Z", + "aliases": [ + "CVE-2024-53706" + ], + "details": "A vulnerability in the Gen7 SonicOS Cloud platform NSv, allows a remote authenticated local low-privileged attacker to elevate privileges to `root` and potentially lead to code execution.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53706" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-r3r4-jc6c-965m/GHSA-r3r4-jc6c-965m.json b/advisories/unreviewed/2025/01/GHSA-r3r4-jc6c-965m/GHSA-r3r4-jc6c-965m.json new file mode 100644 index 00000000000..117e73636d6 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-r3r4-jc6c-965m/GHSA-r3r4-jc6c-965m.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r3r4-jc6c-965m", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43648" + ], + "details": "Command injection in the parameter of a .exe request leads to remote code execution as the root user.\n\nThis issue affects Iocharger firmware for AC models before version 24120701.\n\nLikelihood: Moderate – This action is not a common place for command injection vulnerabilities to occur. Thus, an attacker will likely only be able to find this vulnerability by reverse-engineering the firmware or trying it on all fields. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a payload.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete files and services.\n\nCVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). If is a full system compromise, potentially fully compromising confidentiality, integrity and availability of the devicer (VC:H/VI:H/VA:H).  A compromised charger can be used to \"pivot\" onto networks that should otherwise be closed, cause a low confidentiality and interity impact on subsequent systems. (SC:L/SI:L/SA:H). Because this device is an EV charger handing significant amounts of power, we suspect this vulnerability can have a safety impact (S:P). The attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43648" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43648" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-rwgq-wj29-fx3r/GHSA-rwgq-wj29-fx3r.json b/advisories/unreviewed/2025/01/GHSA-rwgq-wj29-fx3r/GHSA-rwgq-wj29-fx3r.json new file mode 100644 index 00000000000..31f44c0d494 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-rwgq-wj29-fx3r/GHSA-rwgq-wj29-fx3r.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rwgq-wj29-fx3r", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:41Z", + "aliases": [ + "CVE-2024-53704" + ], + "details": "An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53704" + }, + { + "type": "WEB", + "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-287" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-vhg3-r5rm-xmpv/GHSA-vhg3-r5rm-xmpv.json b/advisories/unreviewed/2025/01/GHSA-vhg3-r5rm-xmpv/GHSA-vhg3-r5rm-xmpv.json new file mode 100644 index 00000000000..724d0e6807b --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-vhg3-r5rm-xmpv/GHSA-vhg3-r5rm-xmpv.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vhg3-r5rm-xmpv", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2025-0336" + ], + "details": "A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0336" + }, + { + "type": "WEB", + "url": "https://github.com/fuulof/CVE/issues/1" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.290823" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.290823" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.475493" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T07:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-vj9p-8pwq-8v8j/GHSA-vj9p-8pwq-8v8j.json b/advisories/unreviewed/2025/01/GHSA-vj9p-8pwq-8v8j/GHSA-vj9p-8pwq-8v8j.json new file mode 100644 index 00000000000..d021130fc73 --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-vj9p-8pwq-8v8j/GHSA-vj9p-8pwq-8v8j.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vj9p-8pwq-8v8j", + "modified": "2025-01-09T09:31:43Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43660" + ], + "details": "The CGI script .sh can be used to download any file on the filesystem.\n\nThis issue affects Iocharger firmware for AC model chargers beforeversion 24120701.\n\nLikelihood: High, but credentials required.\n\nImpact: Critical – The script can be used to download any file on the filesystem, including sensitive files such as /etc/shadow, the CGI script source code or binaries and configuration files.\n\nCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y\nCVSS clarification. The attack can be executed over any network connection the station is listening to and serves the web interface (AV:N), and there are no additional security measure sin place that need to be circumvented (AC:L), the attack does not rely on preconditions (AT:N). The attack does require authentication, but the level of authentication is irrelevant (PR:L), it does not require user interaction (UI:N). The confidentiality of all files of the devicd can be compromised (VC:H/VI:N/VA:N). There is no impact on subsequent systems. (SC:N/SI:N/SA:N). While this device is an EV charger handing significant amounts of power, this attack in isolation does not have a safety impact. The attack can be automated (AU:Y).", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43660" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43660" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-552" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:29Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/01/GHSA-wpcm-3jpv-h3x5/GHSA-wpcm-3jpv-h3x5.json b/advisories/unreviewed/2025/01/GHSA-wpcm-3jpv-h3x5/GHSA-wpcm-3jpv-h3x5.json new file mode 100644 index 00000000000..2cfa9b8093c --- /dev/null +++ b/advisories/unreviewed/2025/01/GHSA-wpcm-3jpv-h3x5/GHSA-wpcm-3jpv-h3x5.json @@ -0,0 +1,44 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wpcm-3jpv-h3x5", + "modified": "2025-01-09T09:31:42Z", + "published": "2025-01-09T09:31:42Z", + "aliases": [ + "CVE-2024-43652" + ], + "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root\nThis issue affects Iocharger firmware for AC model chargers before version 24120701\n\nLikelihood: Moderate – The binary does not seem to be used by the web interface, so it might be more difficult to find. It seems to be largely the same binary as used by the Iocharger Pedestal charging station, however. The attacker will also need a (low privilege) account to gain access to the binary, or convince a user with such access to execute a crafted HTTP request.\n\nImpact: Critical – The attacker has full control over the charging station as the root user, and can arbitrarily add, modify and delete\nfiles and services.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:D/RE:M/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43652" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/CVE-2024-43652" + }, + { + "type": "WEB", + "url": "https://csirt.divd.nl/DIVD-2024-00035" + }, + { + "type": "WEB", + "url": "https://iocharger.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-01-09T08:15:27Z" + } +} \ No newline at end of file