Skip to content

Commit 745efdf

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-7vgg-mch2-66mr GHSA-2678-g677-r4gx GHSA-4qxw-jjp5-4rvw GHSA-53q8-8prq-r28c GHSA-65gh-443q-r8g2 GHSA-8xmx-8924-2g2v GHSA-9cf6-cmjx-857j GHSA-cvg8-pgv5-2vg3 GHSA-cwvv-m84p-3r2p GHSA-gj7h-pv73-9jrx GHSA-j9q5-hw2p-xmcf GHSA-m2rv-r87h-2v59 GHSA-m3vr-rg3v-c5r5 GHSA-xmm3-9x39-98r5
1 parent 6d88de4 commit 745efdf

File tree

14 files changed

+465
-8
lines changed

14 files changed

+465
-8
lines changed

‎advisories/unreviewed/2025/10/GHSA-7vgg-mch2-66mr/GHSA-7vgg-mch2-66mr.json‎

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-7vgg-mch2-66mr",
4-
"modified": "2025-10-21T18:30:31Z",
4+
"modified": "2026-03-28T00:31:12Z",
55
"published": "2025-10-14T18:30:34Z",
66
"aliases": [
77
"CVE-2025-59214"
@@ -30,6 +30,14 @@
3030
{
3131
"type": "WEB",
3232
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59214"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-59214-detection-script-windows-file-explorer-spoofing-vulnerability"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://www.vicarius.io/vsociety/posts/cve-2025-59214-mitigation-script-windows-file-explorer-spoofing-vulnerability"
3341
}
3442
],
3543
"database_specific": {

‎advisories/unreviewed/2026/03/GHSA-2678-g677-r4gx/GHSA-2678-g677-r4gx.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2678-g677-r4gx",
4+
"modified": "2026-03-28T00:31:16Z",
5+
"published": "2026-03-28T00:31:16Z",
6+
"aliases": [
7+
"CVE-2026-4988"
8+
],
9+
"details": "A security flaw has been discovered in Open5GS 2.7.6. This issue affects the function smf_gx_cca_cb/smf_gy_cca_cb/smf_s6b of the component CCA Message Handler. The manipulation results in denial of service. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been released to the public and may be used for attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4988"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/open5gs/open5gs/issues/4342"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/open5gs/open5gs/issues/4342#issue-4021772232"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/open5gs/open5gs"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?ctiid.353875"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?id.353875"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?submit.771349"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-404"
54+
],
55+
"severity": "MODERATE",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-03-27T22:16:23Z"
59+
}
60+
}

‎advisories/unreviewed/2026/03/GHSA-4qxw-jjp5-4rvw/GHSA-4qxw-jjp5-4rvw.json‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4qxw-jjp5-4rvw",
4+
"modified": "2026-03-28T00:31:16Z",
5+
"published": "2026-03-28T00:31:16Z",
6+
"aliases": [
7+
"CVE-2026-4990"
8+
],
9+
"details": "A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the file /app/login of the component Signup Endpoint. Such manipulation of the argument signupEnabled with the input true leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4990"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://vuldb.com/?ctiid.353877"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?id.353877"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?submit.772515"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-266"
42+
],
43+
"severity": "MODERATE",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2026-03-27T22:16:23Z"
47+
}
48+
}

‎advisories/unreviewed/2026/03/GHSA-53q8-8prq-r28c/GHSA-53q8-8prq-r28c.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-53q8-8prq-r28c",
4+
"modified": "2026-03-28T00:31:15Z",
5+
"published": "2026-03-28T00:31:15Z",
6+
"aliases": [
7+
"CVE-2026-27309"
8+
],
9+
"details": "Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27309"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://helpx.adobe.com/security/products/substance3d_stager/apsb26-29.html"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-416"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-03-27T22:16:20Z"
35+
}
36+
}

‎advisories/unreviewed/2026/03/GHSA-65gh-443q-r8g2/GHSA-65gh-443q-r8g2.json‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-65gh-443q-r8g2",
4+
"modified": "2026-03-28T00:31:16Z",
5+
"published": "2026-03-28T00:31:16Z",
6+
"aliases": [
7+
"CVE-2026-4248"
8+
],
9+
"details": "The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.2. This is due to the '{usermeta:password_reset_link}' template tag being processed within post content via the '[um_loggedin]' shortcode, which generates a valid password reset token for the currently logged-in user viewing the page. This makes it possible for authenticated attackers, with Contributor-level access and above, to craft a malicious pending post that, when previewed by an Administrator, generates a password reset token for the Administrator and exfiltrates it to an attacker-controlled server, leading to full account takeover.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4248"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/ultimatemember/ultimatemember/pull/1799"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.11.2/includes/um-short-functions.php#L205"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://plugins.trac.wordpress.org/changeset/3492178/ultimate-member/trunk/includes/um-short-functions.php"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/baafd001-144d-4ee4-b7e6-28c0931e6e10?source=cve"
37+
}
38+
],
39+
"database_specific": {
40+
"cwe_ids": [
41+
"CWE-285"
42+
],
43+
"severity": "HIGH",
44+
"github_reviewed": false,
45+
"github_reviewed_at": null,
46+
"nvd_published_at": "2026-03-27T23:17:14Z"
47+
}
48+
}

‎advisories/unreviewed/2026/03/GHSA-8xmx-8924-2g2v/GHSA-8xmx-8924-2g2v.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-8xmx-8924-2g2v",
4-
"modified": "2026-03-27T18:31:28Z",
4+
"modified": "2026-03-28T00:31:14Z",
55
"published": "2026-03-27T18:31:28Z",
66
"aliases": [
77
"CVE-2026-30568"
88
],
99
"details": "A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Inventory System 1.0 in in the view_purchase.php file via the \"limit\" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script or HTML via a crafted URL.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -20,8 +25,10 @@
2025
}
2126
],
2227
"database_specific": {
23-
"cwe_ids": [],
24-
"severity": null,
28+
"cwe_ids": [
29+
"CWE-79"
30+
],
31+
"severity": "MODERATE",
2532
"github_reviewed": false,
2633
"github_reviewed_at": null,
2734
"nvd_published_at": "2026-03-27T18:16:05Z"

‎advisories/unreviewed/2026/03/GHSA-9cf6-cmjx-857j/GHSA-9cf6-cmjx-857j.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9cf6-cmjx-857j",
4-
"modified": "2026-03-27T15:30:26Z",
4+
"modified": "2026-03-28T00:31:13Z",
55
"published": "2026-03-27T15:30:26Z",
66
"aliases": [
77
"CVE-2026-4954"

‎advisories/unreviewed/2026/03/GHSA-cvg8-pgv5-2vg3/GHSA-cvg8-pgv5-2vg3.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-cvg8-pgv5-2vg3",
4-
"modified": "2026-03-24T03:31:19Z",
4+
"modified": "2026-03-28T00:31:13Z",
55
"published": "2026-03-24T03:31:19Z",
66
"aliases": [
77
"CVE-2026-4616"

‎advisories/unreviewed/2026/03/GHSA-cwvv-m84p-3r2p/GHSA-cwvv-m84p-3r2p.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-cwvv-m84p-3r2p",
4+
"modified": "2026-03-28T00:31:15Z",
5+
"published": "2026-03-28T00:31:15Z",
6+
"aliases": [
7+
"CVE-2019-25652"
8+
],
9+
"details": "UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP connections. Attackers can intercept SMTP traffic and obtain credentials by exploiting the insecure SSL host verification mechanism in the SMTP certificate validation process.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25652"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.vulncheck.com/advisories/unifi-network-controller-improper-certificate-validation-leading-to-credential-theft-via-mitm"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-295"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-03-27T22:16:19Z"
43+
}
44+
}

‎advisories/unreviewed/2026/03/GHSA-gj7h-pv73-9jrx/GHSA-gj7h-pv73-9jrx.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-gj7h-pv73-9jrx",
4+
"modified": "2026-03-28T00:31:16Z",
5+
"published": "2026-03-28T00:31:16Z",
6+
"aliases": [
7+
"CVE-2026-4992"
8+
],
9+
"details": "A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4992"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://gist.github.com/YLChen-007/7b42be1da37af51a0cfba0866d100987"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.353879"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.353879"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.778264"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-79"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-03-27T23:17:19Z"
51+
}
52+
}

0 commit comments

Comments
 (0)