Publish Advisories

advisory-database[bot] · advisory-database[bot] · commit bdb403b971cd · 2025-09-05T09:32:25.000Z
GHSA-659h-c7mc-5hrw GHSA-26jj-qj2r-hxmv GHSA-98m6-r63j-q88q GHSA-f6fj-4c3h-qjq5 GHSA-mjgg-cggm-7j9f GHSA-q5vw-gwwh-j8r7 GHSA-qf6v-j5x7-cg97 GHSA-2m52-fc9q-48mj GHSA-xp2h-p87p-622p GHSA-qwxj-4879-p647 GHSA-hfcm-596p-c7f7 GHSA-3j8p-v97g-rq93 GHSA-chf2-47rw-g4pm GHSA-hp73-ggcg-7w7c GHSA-q5ch-x94q-9rc3 GHSA-v3c7-fg8q-9w96 GHSA-xg8q-x6r3-4cw2
diff --git a/advisories/unreviewed/2024/07/GHSA-659h-c7mc-5hrw/GHSA-659h-c7mc-5hrw.json b/advisories/unreviewed/2024/07/GHSA-659h-c7mc-5hrw/GHSA-659h-c7mc-5hrw.json
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-693"
+      "CWE-693",
+      "CWE-770"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/08/GHSA-26jj-qj2r-hxmv/GHSA-26jj-qj2r-hxmv.json b/advisories/unreviewed/2024/08/GHSA-26jj-qj2r-hxmv/GHSA-26jj-qj2r-hxmv.json
@@ -35,6 +35,7 @@
   "database_specific": {
     "cwe_ids": [
       "CWE-200",
+      "CWE-359",
       "CWE-863"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2024/11/GHSA-98m6-r63j-q88q/GHSA-98m6-r63j-q88q.json b/advisories/unreviewed/2024/11/GHSA-98m6-r63j-q88q/GHSA-98m6-r63j-q88q.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-269"
+      "CWE-269",
+      "CWE-359"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-f6fj-4c3h-qjq5/GHSA-f6fj-4c3h-qjq5.json b/advisories/unreviewed/2024/12/GHSA-f6fj-4c3h-qjq5/GHSA-f6fj-4c3h-qjq5.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-602"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-mjgg-cggm-7j9f/GHSA-mjgg-cggm-7j9f.json b/advisories/unreviewed/2024/12/GHSA-mjgg-cggm-7j9f/GHSA-mjgg-cggm-7j9f.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-121",
       "CWE-787"
     ],
     "severity": "CRITICAL",
diff --git a/advisories/unreviewed/2024/12/GHSA-q5vw-gwwh-j8r7/GHSA-q5vw-gwwh-j8r7.json b/advisories/unreviewed/2024/12/GHSA-q5vw-gwwh-j8r7/GHSA-q5vw-gwwh-j8r7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q5vw-gwwh-j8r7",
-  "modified": "2024-12-16T18:31:08Z",
+  "modified": "2025-09-05T09:30:34Z",
   "published": "2024-12-16T15:31:34Z",
   "aliases": [
     "CVE-2024-10972"
@@ -26,7 +26,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-367"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/12/GHSA-qf6v-j5x7-cg97/GHSA-qf6v-j5x7-cg97.json b/advisories/unreviewed/2024/12/GHSA-qf6v-j5x7-cg97/GHSA-qf6v-j5x7-cg97.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-121",
       "CWE-787"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2025/02/GHSA-2m52-fc9q-48mj/GHSA-2m52-fc9q-48mj.json b/advisories/unreviewed/2025/02/GHSA-2m52-fc9q-48mj/GHSA-2m52-fc9q-48mj.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-290"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/03/GHSA-xp2h-p87p-622p/GHSA-xp2h-p87p-622p.json b/advisories/unreviewed/2025/03/GHSA-xp2h-p87p-622p/GHSA-xp2h-p87p-622p.json
@@ -30,6 +30,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-297",
       "CWE-300"
     ],
     "severity": "HIGH",
diff --git a/advisories/unreviewed/2025/04/GHSA-qwxj-4879-p647/GHSA-qwxj-4879-p647.json b/advisories/unreviewed/2025/04/GHSA-qwxj-4879-p647/GHSA-qwxj-4879-p647.json
@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-749"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2025/05/GHSA-hfcm-596p-c7f7/GHSA-hfcm-596p-c7f7.json b/advisories/unreviewed/2025/05/GHSA-hfcm-596p-c7f7/GHSA-hfcm-596p-c7f7.json
@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-256",
       "CWE-260"
     ],
     "severity": "MODERATE",
diff --git a/advisories/unreviewed/2025/09/GHSA-3j8p-v97g-rq93/GHSA-3j8p-v97g-rq93.json b/advisories/unreviewed/2025/09/GHSA-3j8p-v97g-rq93/GHSA-3j8p-v97g-rq93.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3j8p-v97g-rq93",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-48395"
+  ],
+  "details": "An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version of NMC G2 which is available on the Eaton download center.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48395"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1003.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T07:15:34Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/09/GHSA-chf2-47rw-g4pm/GHSA-chf2-47rw-g4pm.json b/advisories/unreviewed/2025/09/GHSA-chf2-47rw-g4pm/GHSA-chf2-47rw-g4pm.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-chf2-47rw-g4pm",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-58296"
+  ],
+  "details": "Race condition vulnerability in the audio module.\nImpact: Successful exploitation of this vulnerability may affect function stability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58296"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2025/9"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T08:15:31Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/09/GHSA-hp73-ggcg-7w7c/GHSA-hp73-ggcg-7w7c.json b/advisories/unreviewed/2025/09/GHSA-hp73-ggcg-7w7c/GHSA-hp73-ggcg-7w7c.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hp73-ggcg-7w7c",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-58313"
+  ],
+  "details": "Race condition vulnerability in the device standby module.\nImpact: Successful exploitation of this vulnerability may cause feature exceptions of the device standby module.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58313"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2025/9"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T08:15:31Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/09/GHSA-q5ch-x94q-9rc3/GHSA-q5ch-x94q-9rc3.json b/advisories/unreviewed/2025/09/GHSA-q5ch-x94q-9rc3/GHSA-q5ch-x94q-9rc3.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q5ch-x94q-9rc3",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-58281"
+  ],
+  "details": "Out-of-bounds read vulnerability in the runtime interpreter module.\nImpact: Successful exploitation of this vulnerability may affect availability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58281"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2025/9"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-125"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T08:15:31Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/09/GHSA-v3c7-fg8q-9w96/GHSA-v3c7-fg8q-9w96.json b/advisories/unreviewed/2025/09/GHSA-v3c7-fg8q-9w96/GHSA-v3c7-fg8q-9w96.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v3c7-fg8q-9w96",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-58280"
+  ],
+  "details": "Vulnerability of exposing object heap addresses in the Ark eTS module.\nImpact: Successful exploitation of this vulnerability may affect availability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58280"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2025/9"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1321"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T08:15:31Z"
+  }
+}
diff --git a/advisories/unreviewed/2025/09/GHSA-xg8q-x6r3-4cw2/GHSA-xg8q-x6r3-4cw2.json b/advisories/unreviewed/2025/09/GHSA-xg8q-x6r3-4cw2/GHSA-xg8q-x6r3-4cw2.json
@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xg8q-x6r3-4cw2",
+  "modified": "2025-09-05T09:30:35Z",
+  "published": "2025-09-05T09:30:35Z",
+  "aliases": [
+    "CVE-2025-58276"
+  ],
+  "details": "Permission verification vulnerability in the home screen module\nImpact: Successful exploitation of this vulnerability may affect availability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58276"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2025/9"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-09-05T08:15:30Z"
+  }
+}
