Skip to content

Commit 6e8b2a1

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-3pvj-q7qj-89fg GHSA-2p6p-hqq4-q469 GHSA-33hj-rcmx-86mv GHSA-4h4g-2r65-5v68 GHSA-4v8j-92c3-9f2f GHSA-75v6-gf74-7fjw GHSA-frg8-29h3-wvgf GHSA-hc69-r6rr-hmxf GHSA-qqgm-c595-2xpg GHSA-rv8x-5qhg-m8hq
1 parent c250ce8 commit 6e8b2a1

10 files changed

Lines changed: 437 additions & 1 deletion

File tree

‎advisories/unreviewed/2025/07/GHSA-3pvj-q7qj-89fg/GHSA-3pvj-q7qj-89fg.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-3pvj-q7qj-89fg",
4-
"modified": "2026-01-27T18:32:05Z",
4+
"modified": "2026-01-30T15:31:13Z",
55
"published": "2025-07-07T15:30:39Z",
66
"aliases": [
77
"CVE-2025-5987"
@@ -51,6 +51,14 @@
5151
"type": "WEB",
5252
"url": "https://access.redhat.com/errata/RHSA-2026:0978"
5353
},
54+
{
55+
"type": "WEB",
56+
"url": "https://access.redhat.com/errata/RHSA-2026:0985"
57+
},
58+
{
59+
"type": "WEB",
60+
"url": "https://access.redhat.com/errata/RHSA-2026:0996"
61+
},
5462
{
5563
"type": "WEB",
5664
"url": "https://access.redhat.com/security/cve/CVE-2025-5987"

‎advisories/unreviewed/2026/01/GHSA-2p6p-hqq4-q469/GHSA-2p6p-hqq4-q469.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2p6p-hqq4-q469",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2025-13176"
8+
],
9+
"details": "Planting a custom configuration file\n\nin \n\nESET Inspect Connector allow load a malicious DLL.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-13176"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://support.eset.com/en/ca8910-eset-customer-advisory-local-privilege-escalation-vulnerability-fixed-in-eset-inspect-connector-for-windows"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-269"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-30T13:15:53Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-33hj-rcmx-86mv/GHSA-33hj-rcmx-86mv.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-33hj-rcmx-86mv",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2024-4027"
8+
],
9+
"details": "A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4027"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://access.redhat.com/security/cve/CVE-2024-4027"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2276410"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-20"
34+
],
35+
"severity": "HIGH",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-01-30T15:16:07Z"
39+
}
40+
}

‎advisories/unreviewed/2026/01/GHSA-4h4g-2r65-5v68/GHSA-4h4g-2r65-5v68.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4h4g-2r65-5v68",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2026-1685"
8+
],
9+
"details": "A vulnerability was identified in D-Link DIR-823X 250416. This vulnerability affects the function sub_40AC74 of the component Login. Such manipulation leads to improper restriction of excessive authentication attempts. The attack may be performed from remote. This attack is characterized by high complexity. It is stated that the exploitability is difficult. The exploit is publicly available and might be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1685"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/master-abc/cve/issues/17"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.343479"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.343479"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.740886"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.dlink.com"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-307"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-01-30T15:16:08Z"
55+
}
56+
}

‎advisories/unreviewed/2026/01/GHSA-4v8j-92c3-9f2f/GHSA-4v8j-92c3-9f2f.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4v8j-92c3-9f2f",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2026-1684"
8+
],
9+
"details": "A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function HandleReports of the file /internal/context/pfcp_reports.go of the component PFCP UDP Endpoint. The manipulation results in denial of service. The attack can be executed remotely. It is advisable to implement a patch to correct this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1684"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/free5gc/free5gc/issues/806"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/free5gc/smf/pull/188"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.343477"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.343477"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.739655"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.739656"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-404"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-01-30T15:16:08Z"
59+
}
60+
}

‎advisories/unreviewed/2026/01/GHSA-75v6-gf74-7fjw/GHSA-75v6-gf74-7fjw.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-75v6-gf74-7fjw",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2026-1498"
8+
],
9+
"details": "An LDAP Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from a connected LDAP authentication server through an exposed authentication or management web interface. This vulnerability may also allow a remote attacker to authenticate as an LDAP user with a partial identifier if they additionally have that user's valid passphrase.This issue affects Fireware OS: from 12.0 through 12.11.6, from 12.5 through 12.5.15, from 2025.1 through 2026.0.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1498"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2026-00001"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-90"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-30T13:15:54Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-frg8-29h3-wvgf/GHSA-frg8-29h3-wvgf.json‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-frg8-29h3-wvgf",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2026-1683"
8+
],
9+
"details": "A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1683"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/free5gc/free5gc/issues/804"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/free5gc/free5gc/issues/804#issue-3816086696"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/free5gc/smf/pull/188"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?ctiid.343476"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?id.343476"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.739653"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.739654"
53+
}
54+
],
55+
"database_specific": {
56+
"cwe_ids": [
57+
"CWE-404"
58+
],
59+
"severity": "MODERATE",
60+
"github_reviewed": false,
61+
"github_reviewed_at": null,
62+
"nvd_published_at": "2026-01-30T14:16:07Z"
63+
}
64+
}

‎advisories/unreviewed/2026/01/GHSA-hc69-r6rr-hmxf/GHSA-hc69-r6rr-hmxf.json‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-hc69-r6rr-hmxf",
4+
"modified": "2026-01-30T15:31:14Z",
5+
"published": "2026-01-30T15:31:14Z",
6+
"aliases": [
7+
"CVE-2026-1682"
8+
],
9+
"details": "A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handler.go of the component PFCP UDP Endpoint. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The exploit has been published and may be used. A patch should be applied to remediate this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1682"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/free5gc/free5gc/issues/794"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/free5gc/free5gc/issues/794#issue-3811888505"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/free5gc/free5gc/issues/794#issuecomment-3761063382"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://github.com/free5gc/smf/pull/188"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?ctiid.343475"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?id.343475"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.739508"
53+
}
54+
],
55+
"database_specific": {
56+
"cwe_ids": [
57+
"CWE-404"
58+
],
59+
"severity": "MODERATE",
60+
"github_reviewed": false,
61+
"github_reviewed_at": null,
62+
"nvd_published_at": "2026-01-30T14:16:07Z"
63+
}
64+
}

0 commit comments

Comments
 (0)