Skip to content

Commit 3278250

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-wp3j-xq48-xpjw GHSA-83xx-9f6p-vwfj GHSA-qg4c-8pj4-qgw2 GHSA-2fv7-mv57-whf5 GHSA-4vx3-8w8x-cp7w GHSA-5wpc-p9f6-h8mw GHSA-79jv-p4w2-qgx9 GHSA-7xp6-cgj4-vvc8 GHSA-8rmc-cwjc-p5cg GHSA-97h6-26vh-vqj6 GHSA-9p5f-59cx-3356 GHSA-q95h-87j6-273x GHSA-r22g-w3wp-pqgc GHSA-r7wf-xj64-53f2 GHSA-x2hr-hc3f-wj3x GHSA-x2rm-j7cc-24ph GHSA-xc8g-qwx7-gcfr
1 parent 807dbb7 commit 3278250

File tree

17 files changed

+667
-3
lines changed

17 files changed

+667
-3
lines changed

‎advisories/github-reviewed/2025/09/GHSA-wp3j-xq48-xpjw/GHSA-wp3j-xq48-xpjw.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-wp3j-xq48-xpjw",
4-
"modified": "2025-10-23T21:31:38Z",
4+
"modified": "2025-10-24T00:30:52Z",
55
"published": "2025-09-04T20:01:54Z",
66
"aliases": [
77
"CVE-2025-9566"
@@ -86,6 +86,10 @@
8686
"type": "WEB",
8787
"url": "https://access.redhat.com/errata/RHSA-2025:19094"
8888
},
89+
{
90+
"type": "WEB",
91+
"url": "https://access.redhat.com/errata/RHSA-2025:18240"
92+
},
8993
{
9094
"type": "WEB",
9195
"url": "https://access.redhat.com/errata/RHSA-2025:18218"

‎advisories/unreviewed/2025/06/GHSA-83xx-9f6p-vwfj/GHSA-83xx-9f6p-vwfj.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-83xx-9f6p-vwfj",
4-
"modified": "2025-10-22T09:30:18Z",
4+
"modified": "2025-10-24T00:30:52Z",
55
"published": "2025-06-16T18:32:19Z",
66
"aliases": [
77
"CVE-2025-49796"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/security/cve/CVE-2025-49796"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2025:18240"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/errata/RHSA-2025:18219"

‎advisories/unreviewed/2025/06/GHSA-qg4c-8pj4-qgw2/GHSA-qg4c-8pj4-qgw2.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-qg4c-8pj4-qgw2",
4-
"modified": "2025-10-22T09:30:18Z",
4+
"modified": "2025-10-24T00:30:52Z",
55
"published": "2025-06-16T18:32:19Z",
66
"aliases": [
77
"CVE-2025-49794"
@@ -27,6 +27,10 @@
2727
"type": "WEB",
2828
"url": "https://access.redhat.com/security/cve/CVE-2025-49794"
2929
},
30+
{
31+
"type": "WEB",
32+
"url": "https://access.redhat.com/errata/RHSA-2025:18240"
33+
},
3034
{
3135
"type": "WEB",
3236
"url": "https://access.redhat.com/errata/RHSA-2025:18219"

‎advisories/unreviewed/2025/10/GHSA-2fv7-mv57-whf5/GHSA-2fv7-mv57-whf5.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2fv7-mv57-whf5",
4+
"modified": "2025-10-24T00:30:53Z",
5+
"published": "2025-10-24T00:30:53Z",
6+
"aliases": [
7+
"CVE-2025-61977"
8+
],
9+
"details": "A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61977"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://support.automationdirect.com/docs/securityconsiderations.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.automationdirect.com/support/software-downloads"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-640"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-10-23T22:15:48Z"
51+
}
52+
}

‎advisories/unreviewed/2025/10/GHSA-4vx3-8w8x-cp7w/GHSA-4vx3-8w8x-cp7w.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4vx3-8w8x-cp7w",
4+
"modified": "2025-10-24T00:30:53Z",
5+
"published": "2025-10-24T00:30:52Z",
6+
"aliases": [
7+
"CVE-2025-61934"
8+
],
9+
"details": "A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delete arbitrary files and folders on the target machine",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61934"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://support.automationdirect.com/docs/securityconsiderations.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.automationdirect.com/support/software-downloads"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-1327"
46+
],
47+
"severity": "CRITICAL",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-10-23T22:15:48Z"
51+
}
52+
}

‎advisories/unreviewed/2025/10/GHSA-5wpc-p9f6-h8mw/GHSA-5wpc-p9f6-h8mw.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5wpc-p9f6-h8mw",
4+
"modified": "2025-10-24T00:30:52Z",
5+
"published": "2025-10-24T00:30:52Z",
6+
"aliases": [
7+
"CVE-2025-59273"
8+
],
9+
"details": "Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59273"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59273"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-284"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-10-23T22:15:47Z"
35+
}
36+
}

‎advisories/unreviewed/2025/10/GHSA-79jv-p4w2-qgx9/GHSA-79jv-p4w2-qgx9.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-79jv-p4w2-qgx9",
4+
"modified": "2025-10-24T00:30:53Z",
5+
"published": "2025-10-24T00:30:53Z",
6+
"aliases": [
7+
"CVE-2025-59776"
8+
],
9+
"details": "A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and create arbitrary directories on the target machine.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59776"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://support.automationdirect.com/docs/securityconsiderations.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.automationdirect.com/support/software-downloads"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-23"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-10-23T23:15:37Z"
51+
}
52+
}

‎advisories/unreviewed/2025/10/GHSA-7xp6-cgj4-vvc8/GHSA-7xp6-cgj4-vvc8.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7xp6-cgj4-vvc8",
4+
"modified": "2025-10-24T00:30:52Z",
5+
"published": "2025-10-24T00:30:52Z",
6+
"aliases": [
7+
"CVE-2025-58456"
8+
],
9+
"details": "A relative path traversal vulnerability was discovered in Productivity Suite software version \n\n4.4.1.19.\n\n The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read arbitrary files on the target machine.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58456"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://support.automationdirect.com/docs/securityconsiderations.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.automationdirect.com/support/software-downloads"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-23"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-10-23T22:15:41Z"
51+
}
52+
}

‎advisories/unreviewed/2025/10/GHSA-8rmc-cwjc-p5cg/GHSA-8rmc-cwjc-p5cg.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8rmc-cwjc-p5cg",
4+
"modified": "2025-10-24T00:30:53Z",
5+
"published": "2025-10-24T00:30:53Z",
6+
"aliases": [
7+
"CVE-2025-58429"
8+
],
9+
"details": "A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and delete arbitrary files on the target machine.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58429"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-296-01.json"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://support.automationdirect.com/docs/securityconsiderations.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.automationdirect.com/support/software-downloads"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-296-01"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-23"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-10-23T23:15:37Z"
51+
}
52+
}

0 commit comments

Comments
 (0)