Skip to content

Commit a3fc9d1

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-856v-8qm2-9wjv GHSA-433r-68jw-r53j GHSA-mw57-63xv-7mx2 GHSA-3cjf-7xfg-396f GHSA-4jvg-m2cx-p4xv GHSA-5pv9-gvf5-hfgv GHSA-5qp2-82v4-wwr8 GHSA-6hx6-8jw7-pgww GHSA-7pvj-rp26-vxxc GHSA-86rh-8633-4r2v GHSA-962p-4p89-4946 GHSA-cx2q-9f4q-7mgw GHSA-whfp-rmwr-4q53 GHSA-x4fp-gjpv-c6r5
1 parent 31b1a5c commit a3fc9d1

File tree

14 files changed

+394
-3
lines changed

14 files changed

+394
-3
lines changed

‎advisories/github-reviewed/2025/08/GHSA-856v-8qm2-9wjv/GHSA-856v-8qm2-9wjv.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-856v-8qm2-9wjv",
4-
"modified": "2025-11-20T21:30:30Z",
4+
"modified": "2025-12-01T12:30:27Z",
55
"published": "2025-08-07T21:31:08Z",
66
"aliases": [
77
"CVE-2025-7195"
@@ -64,6 +64,10 @@
6464
"type": "WEB",
6565
"url": "https://access.redhat.com/errata/RHSA-2025:21885"
6666
},
67+
{
68+
"type": "WEB",
69+
"url": "https://access.redhat.com/errata/RHSA-2025:22416"
70+
},
6771
{
6872
"type": "WEB",
6973
"url": "https://access.redhat.com/security/cve/CVE-2025-7195"

‎advisories/unreviewed/2025/08/GHSA-433r-68jw-r53j/GHSA-433r-68jw-r53j.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-433r-68jw-r53j",
4-
"modified": "2025-11-26T18:30:59Z",
4+
"modified": "2025-12-01T12:30:28Z",
55
"published": "2025-08-22T18:31:22Z",
66
"aliases": [
77
"CVE-2025-38627"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://git.kernel.org/stable/c/39868685c2a94a70762bc6d77dc81d781d05bff5"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://git.kernel.org/stable/c/5d604d40cd3232b09cb339941ef958e49283ed0a"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "https://git.kernel.org/stable/c/8fae5b6addd5f6895e03797b56e3c7b9f9cd15c9"

‎advisories/unreviewed/2025/08/GHSA-mw57-63xv-7mx2/GHSA-mw57-63xv-7mx2.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-mw57-63xv-7mx2",
4-
"modified": "2025-11-02T15:30:12Z",
4+
"modified": "2025-12-01T12:30:28Z",
55
"published": "2025-08-22T18:31:22Z",
66
"aliases": [
77
"CVE-2025-38643"
@@ -26,6 +26,10 @@
2626
"type": "WEB",
2727
"url": "https://git.kernel.org/stable/c/7022df2248c08c6f75a01714163ac902333bf3db"
2828
},
29+
{
30+
"type": "WEB",
31+
"url": "https://git.kernel.org/stable/c/b3d24038eb775f2f7a1dfef58d8e1dc444a12820"
32+
},
2933
{
3034
"type": "WEB",
3135
"url": "https://git.kernel.org/stable/c/dbce810607726408f889d3358f4780fd1436861e"

‎advisories/unreviewed/2025/12/GHSA-3cjf-7xfg-396f/GHSA-3cjf-7xfg-396f.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3cjf-7xfg-396f",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-58408"
8+
],
9+
"details": "Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free.\n\nThe Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in which the reference counts can become unbalanced. This can lead to the premature destruction of a resource while in use.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58408"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://www.imaginationtech.com/gpu-driver-vulnerabilities"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-416"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-12-01T12:15:46Z"
30+
}
31+
}

‎advisories/unreviewed/2025/12/GHSA-4jvg-m2cx-p4xv/GHSA-4jvg-m2cx-p4xv.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4jvg-m2cx-p4xv",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-41070"
8+
],
9+
"details": "Reflected Cross-site Scripting (XSS) vulnerability in Sanoma's Clickedu. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL in '/students/carpetes_varies.php'. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41070"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-sanomas-clickedu"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-01T11:15:48Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-5pv9-gvf5-hfgv/GHSA-5pv9-gvf5-hfgv.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5pv9-gvf5-hfgv",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-13819"
8+
],
9+
"details": "Open redirect in the web server component of MiR Robot and Fleet software allows a remote attacker to redirect users to arbitrary external websites via a crafted parameter, facilitating phishing or social engineering attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13819"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://mobile-industrial-robots.com/security-advisories/cve-2025-13819-open-redirect"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://supportportal.mobile-industrial-robots.com/documentation/mir-cybersecurity-guide/mir-cybersecurity-guide"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-601"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2025-12-01T10:15:59Z"
39+
}
40+
}

‎advisories/unreviewed/2025/12/GHSA-5qp2-82v4-wwr8/GHSA-5qp2-82v4-wwr8.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-5qp2-82v4-wwr8",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-41739"
8+
],
9+
"details": "An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41739"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://certvde.com/de/advisories/VDE-2025-099"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-125"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-01T10:16:01Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-6hx6-8jw7-pgww/GHSA-6hx6-8jw7-pgww.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6hx6-8jw7-pgww",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-2879"
8+
],
9+
"details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to expose sensitive data.This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-2879"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://developer.arm.com/documentation/110697/latest"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-200"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-12-01T11:15:46Z"
30+
}
31+
}

‎advisories/unreviewed/2025/12/GHSA-7pvj-rp26-vxxc/GHSA-7pvj-rp26-vxxc.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7pvj-rp26-vxxc",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-41738"
8+
],
9+
"details": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41738"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://certvde.com/de/advisories/VDE-2025-100"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-843"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-01T10:16:01Z"
35+
}
36+
}

‎advisories/unreviewed/2025/12/GHSA-86rh-8633-4r2v/GHSA-86rh-8633-4r2v.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-86rh-8633-4r2v",
4+
"modified": "2025-12-01T12:30:28Z",
5+
"published": "2025-12-01T12:30:28Z",
6+
"aliases": [
7+
"CVE-2025-13296"
8+
],
9+
"details": "Cross-Site Request Forgery (CSRF) vulnerability in Tekrom Technology Inc. T-Soft E-Commerce allows Cross Site Request Forgery.This issue affects T-Soft E-Commerce: through 28112025.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13296"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.usom.gov.tr/bildirim/tr-25-0421"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-352"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-01T12:15:45Z"
35+
}
36+
}

0 commit comments

Comments
 (0)