Skip to content

Commit 6edaa1f

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-25c8-fq6j-8vvf GHSA-365w-7p77-9f2q GHSA-3q46-58r5-2xq6 GHSA-5crx-9pjw-hxgw GHSA-8pj9-4w5f-p42v GHSA-9xj4-jx6j-wv3x GHSA-c52x-7cpj-qw5f GHSA-fww6-h55r-7gx6 GHSA-gjwv-45pm-f62j GHSA-hg2m-cjh9-f76f GHSA-hp4c-hq8q-pvf3 GHSA-hqrc-chfp-x3xh GHSA-qqrg-hpxx-mmvw GHSA-v8xj-9mr9-jmpq GHSA-x3vf-39hj-gxr4 GHSA-x5w7-h7fg-w2g5
1 parent 8f94301 commit 6edaa1f

File tree

16 files changed

+592
-0
lines changed

16 files changed

+592
-0
lines changed

‎advisories/unreviewed/2025/12/GHSA-25c8-fq6j-8vvf/GHSA-25c8-fq6j-8vvf.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-25c8-fq6j-8vvf",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47320"
8+
],
9+
"details": "Memory corruption while processing MFC channel configuration during music playback.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47320"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-787"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:48Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-365w-7p77-9f2q/GHSA-365w-7p77-9f2q.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-365w-7p77-9f2q",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-68460"
8+
],
9+
"details": "Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68460"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/roundcube/roundcubemail/commit/08de250fba731b634bed188bbe18d2f6ef3c7571"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-116"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2025-12-18T05:15:52Z"
39+
}
40+
}

‎advisories/unreviewed/2025/12/GHSA-3q46-58r5-2xq6/GHSA-3q46-58r5-2xq6.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3q46-58r5-2xq6",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47323"
8+
],
9+
"details": "Memory corruption while routing GPR packets between user and root when handling large data packet.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47323"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-190"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:48Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-5crx-9pjw-hxgw/GHSA-5crx-9pjw-hxgw.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5crx-9pjw-hxgw",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47387"
8+
],
9+
"details": "Memory Corruption when processing IOCTLs for JPEG data without verification.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47387"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-822"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:49Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-8pj9-4w5f-p42v/GHSA-8pj9-4w5f-p42v.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8pj9-4w5f-p42v",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47325"
8+
],
9+
"details": "Information disclosure while processing system calls with invalid parameters.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47325"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-822"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:48Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-9xj4-jx6j-wv3x/GHSA-9xj4-jx6j-wv3x.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9xj4-jx6j-wv3x",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47350"
8+
],
9+
"details": "Memory corruption while handling concurrent memory mapping and unmapping requests from a user-space application.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47350"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-416"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:49Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-c52x-7cpj-qw5f/GHSA-c52x-7cpj-qw5f.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c52x-7cpj-qw5f",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47372"
8+
],
9+
"details": "Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47372"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-120"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:49Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-fww6-h55r-7gx6/GHSA-fww6-h55r-7gx6.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fww6-h55r-7gx6",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-68459"
8+
],
9+
"details": "RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68459"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://jvn.jp/en/vu/JVNVU94068946"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.ruijie.com.cn/gy/xw-aqtg-gw/930282"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-78"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-12-18T06:15:49Z"
43+
}
44+
}

‎advisories/unreviewed/2025/12/GHSA-gjwv-45pm-f62j/GHSA-gjwv-45pm-f62j.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gjwv-45pm-f62j",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-68462"
8+
],
9+
"details": "Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68462"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://salsa.debian.org/freedombox-team/freedombox/-/commit/8ba444990b4af6eec4b6b2b26482b107d"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-732"
30+
],
31+
"severity": "LOW",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:50Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-hg2m-cjh9-f76f/GHSA-hg2m-cjh9-f76f.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-hg2m-cjh9-f76f",
4+
"modified": "2025-12-18T06:30:13Z",
5+
"published": "2025-12-18T06:30:13Z",
6+
"aliases": [
7+
"CVE-2025-47321"
8+
],
9+
"details": "Memory corruption while copying packets received from unix clients.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47321"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2025-bulletin.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-120"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-18T06:15:48Z"
35+
}
36+
}

0 commit comments

Comments
 (0)