Skip to content

Commit 479378d

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-6w73-x38p-26g5 GHSA-3rcp-jp25-8fmh GHSA-5w96-gg7w-f8mg GHSA-8444-jvgr-g6c6 GHSA-fhwr-fq2h-xgvf GHSA-g9g9-xhr4-m69q GHSA-jx6r-j78m-pjfg GHSA-r59j-vrhf-mp7x
1 parent 4d8f8e6 commit 479378d

File tree

8 files changed

+361
-1
lines changed

8 files changed

+361
-1
lines changed

‎advisories/unreviewed/2025/10/GHSA-6w73-x38p-26g5/GHSA-6w73-x38p-26g5.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-6w73-x38p-26g5",
4-
"modified": "2025-11-27T03:30:25Z",
4+
"modified": "2025-12-01T03:30:25Z",
55
"published": "2025-10-22T15:31:09Z",
66
"aliases": [
77
"CVE-2025-11411"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://lists.debian.org/debian-lts-announce/2025/11/msg00008.html"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://lists.debian.org/debian-lts-announce/2025/11/msg00032.html"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt"

‎advisories/unreviewed/2025/12/GHSA-3rcp-jp25-8fmh/GHSA-3rcp-jp25-8fmh.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3rcp-jp25-8fmh",
4+
"modified": "2025-12-01T03:30:27Z",
5+
"published": "2025-12-01T03:30:27Z",
6+
"aliases": [
7+
"CVE-2025-13803"
8+
],
9+
"details": "A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13803"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/lakshayyverma/CVE-Discovery/blob/main/mediacrush.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.333813"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.333813"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.691857"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-644"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T03:15:46Z"
51+
}
52+
}

‎advisories/unreviewed/2025/12/GHSA-5w96-gg7w-f8mg/GHSA-5w96-gg7w-f8mg.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5w96-gg7w-f8mg",
4+
"modified": "2025-12-01T03:30:26Z",
5+
"published": "2025-12-01T03:30:26Z",
6+
"aliases": [
7+
"CVE-2025-64772"
8+
],
9+
"details": "The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-64772"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://jvn.jp/en/jp/JVN28247549"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.sony.com/electronics/support/others-software/inzone-hub"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-427"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-12-01T01:16:00Z"
43+
}
44+
}

‎advisories/unreviewed/2025/12/GHSA-8444-jvgr-g6c6/GHSA-8444-jvgr-g6c6.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8444-jvgr-g6c6",
4+
"modified": "2025-12-01T03:30:26Z",
5+
"published": "2025-12-01T03:30:26Z",
6+
"aliases": [
7+
"CVE-2025-13798"
8+
],
9+
"details": "A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13798"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/?ctiid.333809"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?id.333809"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?submit.691841"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.notion.so/2a60c75766a8805a8973d2ff6a6bcb26"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-74"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T01:16:00Z"
51+
}
52+
}

‎advisories/unreviewed/2025/12/GHSA-fhwr-fq2h-xgvf/GHSA-fhwr-fq2h-xgvf.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fhwr-fq2h-xgvf",
4+
"modified": "2025-12-01T03:30:26Z",
5+
"published": "2025-12-01T03:30:26Z",
6+
"aliases": [
7+
"CVE-2025-13799"
8+
],
9+
"details": "A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13799"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/?ctiid.333810"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?id.333810"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?submit.691842"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.notion.so/2a60c75766a8801e8e4bdd3be8072d9d"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-74"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T01:16:00Z"
51+
}
52+
}

‎advisories/unreviewed/2025/12/GHSA-g9g9-xhr4-m69q/GHSA-g9g9-xhr4-m69q.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-g9g9-xhr4-m69q",
4+
"modified": "2025-12-01T03:30:27Z",
5+
"published": "2025-12-01T03:30:27Z",
6+
"aliases": [
7+
"CVE-2025-13802"
8+
],
9+
"details": "A vulnerability was determined in jairiidriss RestaurantWebsite up to e7911f12d035e8e2f9a75e7a28b59e4ef5c1d654. Impacted is an unknown function of the component Make a Reservation. This manipulation of the argument selected_date causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13802"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/dream357/report/blob/main/restaurant-website-report.docx"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.333812"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.333812"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.691839"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-79"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T03:15:46Z"
51+
}
52+
}

‎advisories/unreviewed/2025/12/GHSA-jx6r-j78m-pjfg/GHSA-jx6r-j78m-pjfg.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jx6r-j78m-pjfg",
4+
"modified": "2025-12-01T03:30:26Z",
5+
"published": "2025-12-01T03:30:26Z",
6+
"aliases": [
7+
"CVE-2025-13800"
8+
],
9+
"details": "A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13800"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/?ctiid.333811"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?id.333811"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?submit.691942"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.notion.so/2a70c75766a88023aa0ed833ff0239e1"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-74"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T02:15:45Z"
51+
}
52+
}

‎advisories/unreviewed/2025/12/GHSA-r59j-vrhf-mp7x/GHSA-r59j-vrhf-mp7x.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r59j-vrhf-mp7x",
4+
"modified": "2025-12-01T03:30:25Z",
5+
"published": "2025-12-01T03:30:25Z",
6+
"aliases": [
7+
"CVE-2025-13797"
8+
],
9+
"details": "A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13797"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/?ctiid.333808"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?id.333808"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?submit.691838"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.notion.so/2a60c75766a88027a6aec07b378332a8"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-74"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-12-01T01:16:00Z"
51+
}
52+
}

0 commit comments

Comments
 (0)