Skip to content

Commit a4b8ad7

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-2j56-f322-jxrm GHSA-hgq8-fc97-42ff GHSA-3pqf-w7fm-5f4w GHSA-333r-822h-h7j4 GHSA-4hcq-q3qf-q453 GHSA-577g-w45q-4pwf GHSA-57g6-cvq3-mxgp GHSA-5c5p-g26h-xx2f GHSA-7v52-p3w5-3m2m GHSA-9g5v-hmcj-pxrc GHSA-f2p8-hh36-r2r8 GHSA-fgq8-gvxr-ghw7 GHSA-g579-x2p7-hjfv GHSA-p54q-9gfq-fvp4 GHSA-qf5w-6pph-h289 GHSA-vgc8-whvm-22v4 GHSA-x4r4-f558-hvh7 GHSA-xfhq-47hp-mvcx
1 parent 0ab3888 commit a4b8ad7

File tree

18 files changed

+319
-34
lines changed

18 files changed

+319
-34
lines changed

‎advisories/unreviewed/2022/05/GHSA-2j56-f322-jxrm/GHSA-2j56-f322-jxrm.json‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-2j56-f322-jxrm",
4-
"modified": "2025-10-22T03:30:27Z",
4+
"modified": "2026-01-12T21:30:28Z",
55
"published": "2022-05-02T03:31:14Z",
66
"aliases": [
77
"CVE-2009-2055"
88
],
99
"details": "Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{

‎advisories/unreviewed/2022/05/GHSA-hgq8-fc97-42ff/GHSA-hgq8-fc97-42ff.json‎

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-hgq8-fc97-42ff",
4-
"modified": "2025-10-22T03:30:42Z",
4+
"modified": "2026-01-12T21:30:28Z",
55
"published": "2022-05-17T04:06:30Z",
66
"aliases": [
77
"CVE-2015-0666"
88
],
99
"details": "Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{

‎advisories/unreviewed/2025/04/GHSA-3pqf-w7fm-5f4w/GHSA-3pqf-w7fm-5f4w.json‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,8 @@
2626
],
2727
"database_specific": {
2828
"cwe_ids": [
29-
"CWE-121"
29+
"CWE-121",
30+
"CWE-787"
3031
],
3132
"severity": "MODERATE",
3233
"github_reviewed": false,

‎advisories/unreviewed/2026/01/GHSA-333r-822h-h7j4/GHSA-333r-822h-h7j4.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-333r-822h-h7j4",
4-
"modified": "2026-01-08T12:30:31Z",
4+
"modified": "2026-01-12T21:30:34Z",
55
"published": "2026-01-08T12:30:31Z",
66
"aliases": [
77
"CVE-2025-69169"
88
],
99
"details": "Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noor Alam Easy Media Download easy-media-download allows Reflection Injection.This issue affects Easy Media Download: from n/a through <= 1.1.11.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -23,7 +28,7 @@
2328
"cwe_ids": [
2429
"CWE-80"
2530
],
26-
"severity": null,
31+
"severity": "MODERATE",
2732
"github_reviewed": false,
2833
"github_reviewed_at": null,
2934
"nvd_published_at": "2026-01-08T10:15:54Z"

‎advisories/unreviewed/2026/01/GHSA-4hcq-q3qf-q453/GHSA-4hcq-q3qf-q453.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4hcq-q3qf-q453",
4+
"modified": "2026-01-12T21:30:34Z",
5+
"published": "2026-01-12T21:30:34Z",
6+
"aliases": [
7+
"CVE-2026-22200"
8+
],
9+
"details": "Enhancesoft osTicket versions up to and including 1.18.2 contain an arbitrary file read vulnerability in the ticket PDF export functionality. A remote attacker can submit a ticket containing crafted rich-text HTML that includes PHP filter expressions which are insufficiently sanitized before being processed by the mPDF PDF generator during export. When the attacker exports the ticket to PDF, the generated PDF can embed the contents of attacker-selected files from the server filesystem as bitmap images, allowing disclosure of sensitive local files in the context of the osTicket application user. This issue is exploitable in default configurations where guests may create tickets and access ticket status, or where self-registration is enabled.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V4",
13+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22200"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/osTicket/osTicket"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://osticket.com"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.vulncheck.com/advisories/osticket-pdf-export-arbitrary-file-read"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-74"
38+
],
39+
"severity": "HIGH",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-01-12T19:16:02Z"
43+
}
44+
}

‎advisories/unreviewed/2026/01/GHSA-577g-w45q-4pwf/GHSA-577g-w45q-4pwf.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-577g-w45q-4pwf",
4-
"modified": "2026-01-12T18:30:30Z",
4+
"modified": "2026-01-12T21:30:34Z",
55
"published": "2026-01-12T18:30:30Z",
66
"aliases": [
77
"CVE-2025-66689"
88
],
99
"details": "A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -24,8 +29,10 @@
2429
}
2530
],
2631
"database_specific": {
27-
"cwe_ids": [],
28-
"severity": null,
32+
"cwe_ids": [
33+
"CWE-22"
34+
],
35+
"severity": "MODERATE",
2936
"github_reviewed": false,
3037
"github_reviewed_at": null,
3138
"nvd_published_at": "2026-01-12T17:15:52Z"

‎advisories/unreviewed/2026/01/GHSA-57g6-cvq3-mxgp/GHSA-57g6-cvq3-mxgp.json‎

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-57g6-cvq3-mxgp",
4-
"modified": "2026-01-08T12:30:31Z",
4+
"modified": "2026-01-12T21:30:34Z",
55
"published": "2026-01-08T12:30:31Z",
66
"aliases": [
77
"CVE-2026-0674"
88
],
99
"details": "Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress forms-for-campaign-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Campaign Monitor for WordPress: from n/a through <= 2.9.0.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -23,7 +28,7 @@
2328
"cwe_ids": [
2429
"CWE-862"
2530
],
26-
"severity": null,
31+
"severity": "MODERATE",
2732
"github_reviewed": false,
2833
"github_reviewed_at": null,
2934
"nvd_published_at": "2026-01-08T10:15:54Z"

‎advisories/unreviewed/2026/01/GHSA-5c5p-g26h-xx2f/GHSA-5c5p-g26h-xx2f.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5c5p-g26h-xx2f",
4-
"modified": "2026-01-10T12:30:15Z",
4+
"modified": "2026-01-12T21:30:34Z",
55
"published": "2026-01-10T12:30:15Z",
66
"aliases": [
77
"CVE-2025-52435"
88
],
99
"details": "J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.\n\nImproper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to observe the remainder of the exchange.\nThis issue affects Apache NimBLE: through <= 1.8.0.\n\nUsers are recommended to upgrade to version 1.9.0, which fixes the issue.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -32,8 +37,10 @@
3237
}
3338
],
3439
"database_specific": {
35-
"cwe_ids": [],
36-
"severity": null,
40+
"cwe_ids": [
41+
"CWE-5"
42+
],
43+
"severity": "HIGH",
3744
"github_reviewed": false,
3845
"github_reviewed_at": null,
3946
"nvd_published_at": "2026-01-10T10:15:50Z"

‎advisories/unreviewed/2026/01/GHSA-7v52-p3w5-3m2m/GHSA-7v52-p3w5-3m2m.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-7v52-p3w5-3m2m",
4+
"modified": "2026-01-12T21:30:34Z",
5+
"published": "2026-01-12T21:30:34Z",
6+
"aliases": [
7+
"CVE-2023-36331"
8+
],
9+
"details": "Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36331"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://github.com/Exrick/xmall/issues/100"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-639"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-01-12T20:15:52Z"
35+
}
36+
}

‎advisories/unreviewed/2026/01/GHSA-9g5v-hmcj-pxrc/GHSA-9g5v-hmcj-pxrc.json‎

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-9g5v-hmcj-pxrc",
4-
"modified": "2026-01-12T18:30:30Z",
4+
"modified": "2026-01-12T21:30:34Z",
55
"published": "2026-01-12T18:30:30Z",
66
"aliases": [
77
"CVE-2025-63314"
88
],
99
"details": "A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.",
10-
"severity": [],
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L"
14+
}
15+
],
1116
"affected": [],
1217
"references": [
1318
{
@@ -28,8 +33,10 @@
2833
}
2934
],
3035
"database_specific": {
31-
"cwe_ids": [],
32-
"severity": null,
36+
"cwe_ids": [
37+
"CWE-640"
38+
],
39+
"severity": "CRITICAL",
3340
"github_reviewed": false,
3441
"github_reviewed_at": null,
3542
"nvd_published_at": "2026-01-12T17:15:52Z"

0 commit comments

Comments
 (0)