Skip to content

Commit e1f3663

Browse files
advisory-database[bot]advisory-database[bot]
committed
Advisory Database Sync
1 parent 56dcb45 commit e1f3663

File tree

95 files changed

+3354
-3
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

95 files changed

+3354
-3
lines changed

‎advisories/unreviewed/2024/08/GHSA-vmrv-fwh7-gvm4/GHSA-vmrv-fwh7-gvm4.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,8 @@
4242
],
4343
"database_specific": {
4444
"cwe_ids": [
45-
"CWE-119"
45+
"CWE-119",
46+
"CWE-20"
4647
],
4748
"severity": "CRITICAL",
4849
"github_reviewed": false,

‎advisories/unreviewed/2024/11/GHSA-g2jf-mr78-35jh/GHSA-g2jf-mr78-35jh.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@
3030
],
3131
"database_specific": {
3232
"cwe_ids": [
33-
"CWE-345"
33+
"CWE-345",
34+
"CWE-354"
3435
],
3536
"severity": "MODERATE",
3637
"github_reviewed": false,

‎advisories/unreviewed/2024/11/GHSA-rxqh-7qx7-59m3/GHSA-rxqh-7qx7-59m3.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@
3030
],
3131
"database_specific": {
3232
"cwe_ids": [
33-
"CWE-345"
33+
"CWE-345",
34+
"CWE-807"
3435
],
3536
"severity": "MODERATE",
3637
"github_reviewed": false,

‎advisories/unreviewed/2025/02/GHSA-gcp8-45qv-x5w6/GHSA-gcp8-45qv-x5w6.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@
2626
],
2727
"database_specific": {
2828
"cwe_ids": [
29+
"CWE-295",
2930
"CWE-300"
3031
],
3132
"severity": "HIGH",

‎advisories/unreviewed/2025/09/GHSA-2652-fvfq-x6xr/GHSA-2652-fvfq-x6xr.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2652-fvfq-x6xr",
4+
"modified": "2025-09-04T12:30:44Z",
5+
"published": "2025-09-04T12:30:44Z",
6+
"aliases": [
7+
"CVE-2025-41049"
8+
],
9+
"details": "A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/appform.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41049"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apprain-cmf"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-09-04T12:15:34Z"
35+
}
36+
}

‎advisories/unreviewed/2025/09/GHSA-26wj-qwf9-fhg9/GHSA-26wj-qwf9-fhg9.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-26wj-qwf9-fhg9",
4+
"modified": "2025-09-04T12:30:41Z",
5+
"published": "2025-09-04T12:30:41Z",
6+
"aliases": [
7+
"CVE-2025-36893"
8+
],
9+
"details": "In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36893"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://source.android.com/security/bulletin/pixel/2025-09-01"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-09-04T10:42:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/09/GHSA-29fj-mx8x-vqcg/GHSA-29fj-mx8x-vqcg.json

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-29fj-mx8x-vqcg",
4+
"modified": "2025-09-04T12:30:42Z",
5+
"published": "2025-09-04T12:30:42Z",
6+
"aliases": [
7+
"CVE-2025-9518"
8+
],
9+
"details": "The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and including, 1.2.22. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9518"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/atec-debug/trunk/includes/ATEC/CONFIG.php#L320"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3355260%40atec-debug%2Ftrunk&old=3342365%40atec-debug%2Ftrunk"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/170cd2e3-e31b-452e-8c15-d44a8be7757b?source=cve"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-36"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-09-04T10:42:35Z"
43+
}
44+
}

‎advisories/unreviewed/2025/09/GHSA-2c63-6xjj-gp6q/GHSA-2c63-6xjj-gp6q.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2c63-6xjj-gp6q",
4+
"modified": "2025-09-04T12:30:41Z",
5+
"published": "2025-09-04T12:30:41Z",
6+
"aliases": [
7+
"CVE-2025-36895"
8+
],
9+
"details": "Information disclosure",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36895"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://source.android.com/security/bulletin/pixel/2025-09-01"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-09-04T10:42:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/09/GHSA-2xgc-fqf8-qx9j/GHSA-2xgc-fqf8-qx9j.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2xgc-fqf8-qx9j",
4+
"modified": "2025-09-04T12:30:43Z",
5+
"published": "2025-09-04T12:30:43Z",
6+
"aliases": [
7+
"CVE-2025-41040"
8+
],
9+
"details": "A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]', 'data[lang][0][key]', 'data[lang][0][value]', 'data[lang][1][key]' and 'data[title]' parameters in /apprain/developer/language/lipsum.xml.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41040"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-apprain-cmf"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-09-04T12:15:32Z"
35+
}
36+
}

‎advisories/unreviewed/2025/09/GHSA-3rm5-rghg-273q/GHSA-3rm5-rghg-273q.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3rm5-rghg-273q",
4+
"modified": "2025-09-04T12:30:41Z",
5+
"published": "2025-09-04T12:30:41Z",
6+
"aliases": [
7+
"CVE-2025-36891"
8+
],
9+
"details": "Elevation of privilege",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36891"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://source.android.com/security/bulletin/pixel/2025-09-01"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-09-04T10:42:29Z"
28+
}
29+
}

0 commit comments

Comments
 (0)