Skip to content

Commit d65ff66

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-q28p-82xj-hwh7 GHSA-43w7-g3v2-94w3 GHSA-6r3p-62p9-53qf GHSA-7v6r-wcm9-2v47 GHSA-83c9-w22j-g8qq GHSA-8jw8-pgw4-rc28 GHSA-9956-2fv5-m3gf GHSA-cprf-mp87-92j8 GHSA-f7m4-f638-5p2j GHSA-j4p8-5vj7-45mf GHSA-m7xh-548p-355r GHSA-mvgr-2wf6-g44v GHSA-q54j-fwxq-mwm7 GHSA-qrgh-xx65-9fhw GHSA-wvx3-j2j6-g5g8
1 parent aab8c73 commit d65ff66

File tree

15 files changed

+431
-1
lines changed

15 files changed

+431
-1
lines changed

‎advisories/unreviewed/2022/12/GHSA-q28p-82xj-hwh7/GHSA-q28p-82xj-hwh7.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-q28p-82xj-hwh7",
4-
"modified": "2022-12-31T03:30:26Z",
4+
"modified": "2025-12-24T06:30:25Z",
55
"published": "2022-12-24T00:30:19Z",
66
"aliases": [
77
"CVE-2022-40011"
@@ -23,6 +23,10 @@
2323
"type": "WEB",
2424
"url": "https://gist.github.com/wangking1/61bdd1967367301a950ffbb3d10386f3"
2525
},
26+
{
27+
"type": "WEB",
28+
"url": "https://typora.io/releases/all"
29+
},
2630
{
2731
"type": "WEB",
2832
"url": "http://typora.com"

‎advisories/unreviewed/2025/12/GHSA-43w7-g3v2-94w3/GHSA-43w7-g3v2-94w3.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-43w7-g3v2-94w3",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68693"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68693"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-6r3p-62p9-53qf/GHSA-6r3p-62p9-53qf.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6r3p-62p9-53qf",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68688"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68688"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-7v6r-wcm9-2v47/GHSA-7v6r-wcm9-2v47.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7v6r-wcm9-2v47",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68695"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68695"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-83c9-w22j-g8qq/GHSA-83c9-w22j-g8qq.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-83c9-w22j-g8qq",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68691"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68691"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-8jw8-pgw4-rc28/GHSA-8jw8-pgw4-rc28.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8jw8-pgw4-rc28",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68690"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68690"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-9956-2fv5-m3gf/GHSA-9956-2fv5-m3gf.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9956-2fv5-m3gf",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-13773"
8+
],
9+
"details": "The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerce_Delivery_Notes::update' function. This is due to missing capability check in the 'WooCommerce_Delivery_Notes::update' function, PHP enabled in Dompdf, and missing escape in the 'template.php' file. This makes it possible for unauthenticated attackers to execute code on the server.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13773"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/tags/5.8.0/includes/class-woocommerce-delivery-notes.php#L347"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/tags/5.8.0/includes/class-woocommerce-delivery-notes.php#L473"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/tags/5.8.0/includes/front/vendor/dompdf/dompdf/src/PhpEvaluator.php#L52"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/tags/5.8.0/includes/front/wcdn-front-function.php#L37"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://plugins.trac.wordpress.org/browser/woocommerce-delivery-notes/tags/5.8.0/templates/pdf/simple/invoice/template.php#L36"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://plugins.trac.wordpress.org/changeset/3426119/woocommerce-delivery-notes"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e52b34fe-2414-4d6f-bf43-9c5b65ebf769?source=cve"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-94"
54+
],
55+
"severity": "CRITICAL",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2025-12-24T05:16:05Z"
59+
}
60+
}

‎advisories/unreviewed/2025/12/GHSA-cprf-mp87-92j8/GHSA-cprf-mp87-92j8.json‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cprf-mp87-92j8",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-68689"
8+
],
9+
"details": "Rejected reason: Not used",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68689"
16+
}
17+
],
18+
"database_specific": {
19+
"cwe_ids": [],
20+
"severity": null,
21+
"github_reviewed": false,
22+
"github_reviewed_at": null,
23+
"nvd_published_at": "2025-12-24T04:15:56Z"
24+
}
25+
}

‎advisories/unreviewed/2025/12/GHSA-f7m4-f638-5p2j/GHSA-f7m4-f638-5p2j.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-f7m4-f638-5p2j",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-13407"
8+
],
9+
"details": "The Gravity Forms WordPress plugin before 2.9.23.1 does not properly prevent users from uploading dangerous files through its chunked upload functionality, allowing attackers to upload PHP files to affected sites and achieve Remote Code Execution, granted they can discover or enumerate the upload path.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13407"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/e09908fb-f5ad-45ca-8698-c0d596fd39cc"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-12-24T06:15:43Z"
28+
}
29+
}

‎advisories/unreviewed/2025/12/GHSA-j4p8-5vj7-45mf/GHSA-j4p8-5vj7-45mf.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-j4p8-5vj7-45mf",
4+
"modified": "2025-12-24T06:30:26Z",
5+
"published": "2025-12-24T06:30:26Z",
6+
"aliases": [
7+
"CVE-2025-66445"
8+
],
9+
"details": "Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detail view component).This issue affects Hitachi Infrastructure Analytics Advisor:; Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.5-00.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66445"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2025-133/index.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-306"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-12-24T05:16:08Z"
35+
}
36+
}

0 commit comments

Comments
 (0)