Skip to content

Commit 769649b

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-2rmw-22w9-6gqv GHSA-32fm-h45j-grpv GHSA-647r-rhm4-28g2 GHSA-65px-wjwf-w4j6 GHSA-6mcx-64mw-m32r GHSA-7cf5-cv98-v7j6 GHSA-7xr9-h4qx-73w3 GHSA-c3mr-fcrj-6g2w GHSA-ff2p-7h68-73qg GHSA-g7hf-xr86-7qmf GHSA-h5m8-46r9-qc8j GHSA-h9xr-f47v-rhg4 GHSA-qhjv-vvf7-w9xf GHSA-v37q-cgjj-3w5j GHSA-x9qh-8h86-936g
1 parent d0dcae8 commit 769649b

File tree

15 files changed

+664
-0
lines changed

15 files changed

+664
-0
lines changed

‎advisories/unreviewed/2025/12/GHSA-2rmw-22w9-6gqv/GHSA-2rmw-22w9-6gqv.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2rmw-22w9-6gqv",
4+
"modified": "2025-12-22T06:30:28Z",
5+
"published": "2025-12-22T06:30:28Z",
6+
"aliases": [
7+
"CVE-2025-15012"
8+
],
9+
"details": "A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown function of the file /home/home.php. This manipulation of the argument a causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15012"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/jjjjj-zr/jjjjjzr17/issues/2"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://code-projects.org"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.337718"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.337718"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.719788"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-12-22T05:16:19Z"
55+
}
56+
}

‎advisories/unreviewed/2025/12/GHSA-32fm-h45j-grpv/GHSA-32fm-h45j-grpv.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-32fm-h45j-grpv",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-11540"
8+
],
9+
"details": "Path Traversal vulnerability in Sharp Display Solutions projectors allows a attacker may access and read any files within the projector.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11540"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-22"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T05:16:06Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-647r-rhm4-28g2/GHSA-647r-rhm4-28g2.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-647r-rhm4-28g2",
4+
"modified": "2025-12-22T06:30:28Z",
5+
"published": "2025-12-22T06:30:28Z",
6+
"aliases": [
7+
"CVE-2025-11544"
8+
],
9+
"details": "Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11544"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11544.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-912"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T06:15:50Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-65px-wjwf-w4j6/GHSA-65px-wjwf-w4j6.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-65px-wjwf-w4j6",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-59301"
8+
],
9+
"details": "Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59301"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2025-00020_DVP15MC11T%20Modbus%20TCP%20DoS%20Vulnerability.pdf"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T04:16:00Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-6mcx-64mw-m32r/GHSA-6mcx-64mw-m32r.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6mcx-64mw-m32r",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-15011"
8+
],
9+
"details": "A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-15011"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/chunmingshanan/CVE/issues/1"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://code-projects.org"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.337717"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.337717"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.719663"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-12-22T04:16:00Z"
55+
}
56+
}

‎advisories/unreviewed/2025/12/GHSA-7cf5-cv98-v7j6/GHSA-7cf5-cv98-v7j6.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7cf5-cv98-v7j6",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-11543"
8+
],
9+
"details": "Improper Validation of Integrity Check Value vulnerability in Sharp Display Solutions projectors allows a attacker may create and run unauthorized firmware.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11543"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-354"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T05:16:18Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-7xr9-h4qx-73w3/GHSA-7xr9-h4qx-73w3.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7xr9-h4qx-73w3",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-11542"
8+
],
9+
"details": "Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11542"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://sharp-displays.jp.sharp/global/support/info/PJ-CVE-2025-11540.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-121"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T05:16:17Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-c3mr-fcrj-6g2w/GHSA-c3mr-fcrj-6g2w.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-c3mr-fcrj-6g2w",
4+
"modified": "2025-12-22T06:30:27Z",
5+
"published": "2025-12-22T06:30:27Z",
6+
"aliases": [
7+
"CVE-2025-12049"
8+
],
9+
"details": "Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the authoring software to the affected product without authentication.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12049"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://sharp-displays.jp.sharp/global/support/info/MP01-CVE-2025-12049.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-306"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-22T05:16:19Z"
35+
}
36+
}

0 commit comments

Comments
 (0)