Skip to content

Commit 1ab6d64

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-57f7-wfqr-87r7 GHSA-489c-c5ff-93gr GHSA-gc32-f5qg-q57v GHSA-gxp8-m5rq-3m38 GHSA-j4j8-jphm-rf4q GHSA-qhh9-jphj-p4xw
1 parent 6a0cdcd commit 1ab6d64

File tree

6 files changed

+175
-1
lines changed

6 files changed

+175
-1
lines changed

‎advisories/unreviewed/2025/05/GHSA-57f7-wfqr-87r7/GHSA-57f7-wfqr-87r7.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@
2626
],
2727
"database_specific": {
2828
"cwe_ids": [
29-
"CWE-367"
29+
"CWE-367",
30+
"CWE-59"
3031
],
3132
"severity": "HIGH",
3233
"github_reviewed": false,

‎advisories/unreviewed/2025/10/GHSA-489c-c5ff-93gr/GHSA-489c-c5ff-93gr.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-489c-c5ff-93gr",
4+
"modified": "2025-10-13T12:31:11Z",
5+
"published": "2025-10-13T12:31:11Z",
6+
"aliases": [
7+
"CVE-2025-9337"
8+
],
9+
"details": "A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD).\nRefer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9337"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.asus.com/security-advisory"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-476"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-10-13T10:15:46Z"
35+
}
36+
}

‎advisories/unreviewed/2025/10/GHSA-gc32-f5qg-q57v/GHSA-gc32-f5qg-q57v.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gc32-f5qg-q57v",
4+
"modified": "2025-10-13T12:31:10Z",
5+
"published": "2025-10-13T12:31:10Z",
6+
"aliases": [
7+
"CVE-2025-10720"
8+
],
9+
"details": "The WP Private Content Plus through 3.6.2 provides a global content protection feature that requires a password. However, the access control check is based only on the presence of an unprotected client-side cookie. As a result, an unauthenticated attacker can completely bypass the password protection by manually setting the cookie value in their browser.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10720"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/5295e8da-7aba-4322-981b-80d692b3bc35"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-10-13T10:15:45Z"
28+
}
29+
}

‎advisories/unreviewed/2025/10/GHSA-gxp8-m5rq-3m38/GHSA-gxp8-m5rq-3m38.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gxp8-m5rq-3m38",
4+
"modified": "2025-10-13T12:31:10Z",
5+
"published": "2025-10-13T12:31:10Z",
6+
"aliases": [
7+
"CVE-2025-11183"
8+
],
9+
"details": "Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14\nallows an authorized attacker to plant arbitrary JavaScript code in the page",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11183"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://hub.ntc.swiss/ntcf-2025-4286"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-10-13T10:15:45Z"
35+
}
36+
}

‎advisories/unreviewed/2025/10/GHSA-j4j8-jphm-rf4q/GHSA-j4j8-jphm-rf4q.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-j4j8-jphm-rf4q",
4+
"modified": "2025-10-13T12:31:11Z",
5+
"published": "2025-10-13T12:31:11Z",
6+
"aliases": [
7+
"CVE-2025-9336"
8+
],
9+
"details": "A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. \nRefer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9336"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.asus.com/security-advisory"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-121"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-10-13T10:15:46Z"
35+
}
36+
}

‎advisories/unreviewed/2025/10/GHSA-qhh9-jphj-p4xw/GHSA-qhh9-jphj-p4xw.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qhh9-jphj-p4xw",
4+
"modified": "2025-10-13T12:31:10Z",
5+
"published": "2025-10-13T12:31:10Z",
6+
"aliases": [
7+
"CVE-2025-11184"
8+
],
9+
"details": "Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31\nallows an authorized attacker to plant arbitrary JavaScript code in the page",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11184"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://hub.ntc.swiss/ntcf-2025-7724"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-10-13T10:15:46Z"
35+
}
36+
}

0 commit comments

Comments
 (0)