Skip to content

Commit b08202f

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-52xv-3j2w-p329 GHSA-936r-ccvf-h37h GHSA-hwx6-437w-47vv GHSA-q35g-37c5-hjjh GHSA-q493-98vp-6cm3
1 parent b16924f commit b08202f

File tree

5 files changed

+204
-0
lines changed

5 files changed

+204
-0
lines changed

‎advisories/unreviewed/2025/05/GHSA-52xv-3j2w-p329/GHSA-52xv-3j2w-p329.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-52xv-3j2w-p329",
4+
"modified": "2025-05-11T00:33:45Z",
5+
"published": "2025-05-11T00:33:45Z",
6+
"aliases": [
7+
"CVE-2025-47816"
8+
],
9+
"details": "libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related to extra content at the end of a document.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47816"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://savannah.gnu.org/bugs/?67073"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-125"
30+
],
31+
"severity": "LOW",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-05-10T22:15:20Z"
35+
}
36+
}

‎advisories/unreviewed/2025/05/GHSA-936r-ccvf-h37h/GHSA-936r-ccvf-h37h.json

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-936r-ccvf-h37h",
4+
"modified": "2025-05-11T00:33:45Z",
5+
"published": "2025-05-11T00:33:45Z",
6+
"aliases": [
7+
"CVE-2025-4525"
8+
],
9+
"details": "A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4525"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gist.github.com/shellkraft/ac4be6a3953e2889a7bf54aea2db88c2"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.308270"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.308270"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.562788"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-426"
46+
],
47+
"severity": "HIGH",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-05-10T23:15:51Z"
51+
}
52+
}

‎advisories/unreviewed/2025/05/GHSA-hwx6-437w-47vv/GHSA-hwx6-437w-47vv.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-hwx6-437w-47vv",
4+
"modified": "2025-05-11T00:33:45Z",
5+
"published": "2025-05-11T00:33:45Z",
6+
"aliases": [
7+
"CVE-2025-47815"
8+
],
9+
"details": "libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47815"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://savannah.gnu.org/bugs/?67075"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-122"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-05-10T22:15:20Z"
35+
}
36+
}

‎advisories/unreviewed/2025/05/GHSA-q35g-37c5-hjjh/GHSA-q35g-37c5-hjjh.json

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q35g-37c5-hjjh",
4+
"modified": "2025-05-11T00:33:45Z",
5+
"published": "2025-05-11T00:33:45Z",
6+
"aliases": [
7+
"CVE-2025-47817"
8+
],
9+
"details": "In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "WEB",
20+
"url": "https://github.com/bluewave-labs/Checkmate/security/advisories/GHSA-rq7r-p9cq-5q4f"
21+
},
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47817"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/bluewave-labs/Checkmate/pull/2161"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/bluewave-labs/Checkmate/commit/b387ebaae96fc3a23b090a8baea7a9ebaa70f052"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-472"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2025-05-10T22:15:20Z"
43+
}
44+
}

‎advisories/unreviewed/2025/05/GHSA-q493-98vp-6cm3/GHSA-q493-98vp-6cm3.json

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q493-98vp-6cm3",
4+
"modified": "2025-05-11T00:33:45Z",
5+
"published": "2025-05-11T00:33:45Z",
6+
"aliases": [
7+
"CVE-2025-47814"
8+
],
9+
"details": "libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47814"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://savannah.gnu.org/bugs/?67074"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-122"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-05-10T22:15:20Z"
35+
}
36+
}

0 commit comments

Comments
 (0)