Skip to content

Commit 4b6e884

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-2ffg-9hw7-35q4 GHSA-4j4g-v3h3-8mqg GHSA-65f9-48qm-g2v2 GHSA-942x-h2h3-8wxm GHSA-fx7g-h676-75c4 GHSA-gxhg-qc42-w3x4 GHSA-qjjh-33hc-226r GHSA-qxj7-rwmv-59qm GHSA-rxh2-ghcp-6j9j GHSA-xr4j-2qp3-r4xc GHSA-xwc6-4mcf-7v2v
1 parent 6aca6e6 commit 4b6e884

File tree

11 files changed

+343
-0
lines changed

11 files changed

+343
-0
lines changed

‎advisories/unreviewed/2025/01/GHSA-2ffg-9hw7-35q4/GHSA-2ffg-9hw7-35q4.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2ffg-9hw7-35q4",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2025-0374"
8+
],
9+
"details": "When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts. This version does not preserve the mode of the input file, and is world-readable. This applies to files that would normally have restricted visibility, such as /etc/master.passwd.\n\nAn unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts. This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0374"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-25:03.etcupdate.asc"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-732"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-01-30T05:15:10Z"
30+
}
31+
}

‎advisories/unreviewed/2025/01/GHSA-4j4g-v3h3-8mqg/GHSA-4j4g-v3h3-8mqg.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4j4g-v3h3-8mqg",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2025-0373"
8+
],
9+
"details": "On 64-bit systems, the implementation of VOP_VPTOFH() in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow.\n\nA NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with an NFS client. Further exploitation (e.g., bypassing file permission checking or remote kernel code execution) is potentially possible, though this has not been demonstrated. In particular, release kernels are compiled with stack protection enabled, and some instances of the overflow are caught by this mechanism, causing a panic.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0373"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-25:02.fs.asc"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-121"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-01-30T05:15:09Z"
30+
}
31+
}

‎advisories/unreviewed/2025/01/GHSA-65f9-48qm-g2v2/GHSA-65f9-48qm-g2v2.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-65f9-48qm-g2v2",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2024-12163"
8+
],
9+
"details": "The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12163"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-942x-h2h3-8wxm/GHSA-942x-h2h3-8wxm.json

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-942x-h2h3-8wxm",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2025-0662"
8+
],
9+
"details": "In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14 uninitialized bytes of kernel memory being copied out to userspace.\n\nIt is possible for an unprivileged userspace program to leak 14 bytes of a kernel heap allocation to userspace.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0662"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-25:04.ktrace.asc"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-122"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2025-01-30T05:15:10Z"
30+
}
31+
}

‎advisories/unreviewed/2025/01/GHSA-fx7g-h676-75c4/GHSA-fx7g-h676-75c4.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fx7g-h676-75c4",
4+
"modified": "2025-01-30T06:30:50Z",
5+
"published": "2025-01-30T06:30:50Z",
6+
"aliases": [
7+
"CVE-2024-12709"
8+
],
9+
"details": "The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12709"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-gxhg-qc42-w3x4/GHSA-gxhg-qc42-w3x4.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gxhg-qc42-w3x4",
4+
"modified": "2025-01-30T06:30:50Z",
5+
"published": "2025-01-30T06:30:50Z",
6+
"aliases": [
7+
"CVE-2024-12638"
8+
],
9+
"details": "The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12638"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/a6f5b0fe-00a0-4e30-aec6-87882c035beb"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-qjjh-33hc-226r/GHSA-qjjh-33hc-226r.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qjjh-33hc-226r",
4+
"modified": "2025-01-30T06:30:50Z",
5+
"published": "2025-01-30T06:30:50Z",
6+
"aliases": [
7+
"CVE-2024-12708"
8+
],
9+
"details": "The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12708"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/8f30a37e-b9d0-467b-a0e3-20dc0a9f2b61"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-qxj7-rwmv-59qm/GHSA-qxj7-rwmv-59qm.json

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-qxj7-rwmv-59qm",
4+
"modified": "2025-01-30T06:30:50Z",
5+
"published": "2025-01-30T06:30:50Z",
6+
"aliases": [
7+
"CVE-2024-12921"
8+
],
9+
"details": "The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12921"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/changeset/3230122/ethereumico"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-79"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2025-01-30T06:15:29Z"
39+
}
40+
}

‎advisories/unreviewed/2025/01/GHSA-rxh2-ghcp-6j9j/GHSA-rxh2-ghcp-6j9j.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-rxh2-ghcp-6j9j",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2024-10309"
8+
],
9+
"details": "The Tracking Code Manager WordPress plugin before 2.4.0 does not sanitise and escape some of its metabox settings when outputing them in the page, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10309"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/9eb21250-34bd-4600-a0a5-7c5117f69f04"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:28Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-xr4j-2qp3-r4xc/GHSA-xr4j-2qp3-r4xc.json

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-xr4j-2qp3-r4xc",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2024-12400"
8+
],
9+
"details": "The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12400"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [],
24+
"severity": null,
25+
"github_reviewed": false,
26+
"github_reviewed_at": null,
27+
"nvd_published_at": "2025-01-30T06:15:29Z"
28+
}
29+
}

‎advisories/unreviewed/2025/01/GHSA-xwc6-4mcf-7v2v/GHSA-xwc6-4mcf-7v2v.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-xwc6-4mcf-7v2v",
4+
"modified": "2025-01-30T06:30:49Z",
5+
"published": "2025-01-30T06:30:49Z",
6+
"aliases": [
7+
"CVE-2025-23374"
8+
],
9+
"details": "Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-23374"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.dell.com/support/kbdoc/en-us/000278568/dsa-2025-057-security-update-for-dell-enterprise-sonic-distribution-vulnerability"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-532"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-30T05:15:10Z"
35+
}
36+
}

0 commit comments

Comments
 (0)