netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-5556-q3wj-f3qc
GHSA-6v59-r3jm-5c87
GHSA-fqw2-jpxp-qh8x
GHSA-g5hg-47xm-jfg5
GHSA-grcx-9235-p4r6
GHSA-v3fg-mx3v-6mvx
GHSA-v5mh-39m2-r3vf
GHSA-v8fm-gcgr-rhrg
This commit is contained in:
advisory-database[bot]
2025-06-04 12:32:31 +00:00
parent 0fad006819
commit fb59e9ccf4
8 changed files with 332 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/06/GHSA-5556-q3wj-f3qc/GHSA-5556-q3wj-f3qc.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5556-q3wj-f3qc",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:36Z",
"aliases": [
"CVE-2025-30415"
],
"details": "Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30415"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-8646"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1286"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T12:15:20Z"
}
}
advisories/unreviewed/2025/06/GHSA-6v59-r3jm-5c87/GHSA-6v59-r3jm-5c87.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6v59-r3jm-5c87",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:36Z",
"aliases": [
"CVE-2025-5597"
],
"details": "Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5597"
},
{
"type": "WEB",
"url": "https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-003_wf-seuerungstechnik-gmbh_airleader-master_authentication-bypass.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-fqw2-jpxp-qh8x/GHSA-fqw2-jpxp-qh8x.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fqw2-jpxp-qh8x",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:35Z",
"aliases": [
"CVE-2025-5601"
],
"details": "Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5601"
},
{
"type": "WEB",
"url": "https://gitlab.com/wireshark/wireshark/-/issues/20509"
},
{
"type": "WEB",
"url": "https://www.wireshark.org/security/wnpa-sec-2025-02.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T11:15:22Z"
}
}
advisories/unreviewed/2025/06/GHSA-g5hg-47xm-jfg5/GHSA-g5hg-47xm-jfg5.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g5hg-47xm-jfg5",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:36Z",
"aliases": [
"CVE-2025-5598"
],
"details": "Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5598"
},
{
"type": "WEB",
"url": "https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-004_wf-seuerungstechnik-gmbh_airleader-master_path-traversal.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-35"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T12:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-grcx-9235-p4r6/GHSA-grcx-9235-p4r6.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grcx-9235-p4r6",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:36Z",
"aliases": [
"CVE-2025-48959"
],
"details": "Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40077.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48959"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-8133"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T12:15:20Z"
}
}
advisories/unreviewed/2025/06/GHSA-v3fg-mx3v-6mvx/GHSA-v3fg-mx3v-6mvx.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v3fg-mx3v-6mvx",
"modified": "2025-06-04T12:30:35Z",
"published": "2025-06-04T12:30:35Z",
"aliases": [
"CVE-2025-5583"
],
"details": "A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5583"
},
{
"type": "WEB",
"url": "https://codeastro.com"
},
{
"type": "WEB",
"url": "https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_register.php.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.311040"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.311040"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.588822"
}
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T10:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-v5mh-39m2-r3vf/GHSA-v5mh-39m2-r3vf.json
+56
View File
@@ -0,0 +1,56 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v5mh-39m2-r3vf",
"modified": "2025-06-04T12:30:36Z",
"published": "2025-06-04T12:30:35Z",
"aliases": [
"CVE-2025-5584"
],
"details": "A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5584"
},
{
"type": "WEB",
"url": "https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-Stored-XSS/blob/main/stored-xss-exploit.md"
},
{
"type": "WEB",
"url": "https://phpgurukul.com"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.311046"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.311046"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.588828"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T10:15:21Z"
}
}
advisories/unreviewed/2025/06/GHSA-v8fm-gcgr-rhrg/GHSA-v8fm-gcgr-rhrg.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v8fm-gcgr-rhrg",
"modified": "2025-06-04T12:30:35Z",
"published": "2025-06-04T12:30:35Z",
"aliases": [
"CVE-2018-25112"
],
"details": "An unauthenticated remote attacker may use an uncontrolled resource consumption in the IEC 61131 program of the affected products by creating large amounts of network traffic that needs to be handled by the ILC. This results in a Denial-of-Service of the device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-25112"
},
{
"type": "WEB",
"url": "https://certvde.com/en/advisories/VDE-2018-012"
}
],
"database_specific": {
"cwe_ids": [
"CWE-770"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-04T10:15:20Z"
}
}