Publish Advisories

GHSA-9hcv-xw76-m4h6
GHSA-54qp-w9cp-g8g3
GHSA-7wfq-7p2f-6344
GHSA-9589-mpwg-8xq6
GHSA-99xf-gcww-2c64
GHSA-9qwg-ch53-9rxw
GHSA-f4vp-qjpg-x8wq
GHSA-fp4x-j6ch-w8q5
GHSA-pr7v-prvv-52v8
GHSA-pv37-78jj-hvqv
GHSA-276x-wf53-35pw
GHSA-2pmm-6ghp-fx68
GHSA-483m-67m4-vjw4
GHSA-4px5-72vp-47g3
GHSA-52hf-pcf2-jrqx
GHSA-533g-6748-wxw7
GHSA-8q8q-r57h-778r
GHSA-ccrm-5mxg-r6v5
GHSA-fvh2-vvx7-2pjr
GHSA-jfrx-g95w-9254
GHSA-qrr9-59r3-8w49
GHSA-v668-p3jq-rww8

Author: advisory-database[bot]

advisories/unreviewed/2025/03/GHSA-9hcv-xw76-m4h6/GHSA-9hcv-xw76-m4h6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9hcv-xw76-m4h6",
-  "modified": "2025-04-23T12:31:25Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-03-14T09:34:06Z",
   "aliases": [
     "CVE-2024-8176"
@@ -39,6 +39,10 @@
       "type": "WEB",
       "url": "https://access.redhat.com/errata/RHSA-2025:4048"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4447"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2024-8176"

advisories/unreviewed/2025/04/GHSA-54qp-w9cp-g8g3/GHSA-54qp-w9cp-g8g3.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-54qp-w9cp-g8g3",
-  "modified": "2025-04-03T15:31:20Z",
+  "modified": "2025-05-05T03:30:19Z",
   "published": "2025-04-03T15:31:19Z",
   "aliases": [
     "CVE-2025-32053"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32053"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32053"

advisories/unreviewed/2025/04/GHSA-7wfq-7p2f-6344/GHSA-7wfq-7p2f-6344.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7wfq-7p2f-6344",
-  "modified": "2025-04-14T15:31:58Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-14T15:31:58Z",
   "aliases": [
     "CVE-2025-32907"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32907"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32907"

advisories/unreviewed/2025/04/GHSA-9589-mpwg-8xq6/GHSA-9589-mpwg-8xq6.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9589-mpwg-8xq6",
-  "modified": "2025-04-14T15:31:58Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-14T15:31:58Z",
   "aliases": [
     "CVE-2025-32913"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32913"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32913"

advisories/unreviewed/2025/04/GHSA-99xf-gcww-2c64/GHSA-99xf-gcww-2c64.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-99xf-gcww-2c64",
-  "modified": "2025-04-03T15:31:19Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-03T15:31:19Z",
   "aliases": [
     "CVE-2025-32050"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32050"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32050"

advisories/unreviewed/2025/04/GHSA-9qwg-ch53-9rxw/GHSA-9qwg-ch53-9rxw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9qwg-ch53-9rxw",
-  "modified": "2025-04-03T15:31:19Z",
+  "modified": "2025-05-05T03:30:19Z",
   "published": "2025-04-03T15:31:19Z",
   "aliases": [
     "CVE-2025-32052"
@@ -19,6 +19,10 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32052"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32052"

advisories/unreviewed/2025/04/GHSA-f4vp-qjpg-x8wq/GHSA-f4vp-qjpg-x8wq.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f4vp-qjpg-x8wq",
-  "modified": "2025-04-14T15:31:58Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-14T15:31:58Z",
   "aliases": [
     "CVE-2025-32906"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32906"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32906"

advisories/unreviewed/2025/04/GHSA-fp4x-j6ch-w8q5/GHSA-fp4x-j6ch-w8q5.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-fp4x-j6ch-w8q5",
-  "modified": "2025-04-15T18:31:45Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-15T18:31:45Z",
   "aliases": [
     "CVE-2025-32911"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32911"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-32911"

advisories/unreviewed/2025/04/GHSA-pr7v-prvv-52v8/GHSA-pr7v-prvv-52v8.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pr7v-prvv-52v8",
-  "modified": "2025-04-24T15:30:49Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-24T15:30:49Z",
   "aliases": [
     "CVE-2025-46421"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46421"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-46421"

advisories/unreviewed/2025/04/GHSA-pv37-78jj-hvqv/GHSA-pv37-78jj-hvqv.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pv37-78jj-hvqv",
-  "modified": "2025-04-24T15:30:49Z",
+  "modified": "2025-05-05T03:30:20Z",
   "published": "2025-04-24T15:30:49Z",
   "aliases": [
     "CVE-2025-46420"
@@ -19,6 +19,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-46420"
     },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:4440"
+    },
     {
       "type": "WEB",
       "url": "https://access.redhat.com/security/cve/CVE-2025-46420"

advisories/unreviewed/2025/05/GHSA-276x-wf53-35pw/GHSA-276x-wf53-35pw.json

@@ -0,0 +1,31 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-276x-wf53-35pw",
+  "modified": "2025-05-05T03:30:21Z",
+  "published": "2025-05-05T03:30:21Z",
+  "aliases": [
+    "CVE-2025-20666"
+  ],
+  "details": "In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00650610; Issue ID: MSV-2933.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20666"
+    },
+    {
+      "type": "WEB",
+      "url": "https://corp.mediatek.com/product-security-bulletin/May-2025"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-617"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-05T03:15:21Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-2pmm-6ghp-fx68/GHSA-2pmm-6ghp-fx68.json

@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2pmm-6ghp-fx68",
+  "modified": "2025-05-05T03:30:20Z",
+  "published": "2025-05-05T03:30:20Z",
+  "aliases": [
+    "CVE-2025-4256"
+  ],
+  "details": "A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4256"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/seacms-net/CMS/issues/25"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/seacms-net/CMS/issues/25#issue-3007083568"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.307360"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.307360"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.562718"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-05T01:15:48Z"
+  }
+}

advisories/unreviewed/2025/05/GHSA-483m-67m4-vjw4/GHSA-483m-67m4-vjw4.json

@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-483m-67m4-vjw4",
+  "modified": "2025-05-05T03:30:22Z",
+  "published": "2025-05-05T03:30:22Z",
+  "aliases": [
+    "CVE-2025-4260"
+  ],
+  "details": "A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsave of the file m\\web\\handler\\admin\\system\\TemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4260"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Serein123y/vulnerability/blob/main/vul.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.307364"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.307364"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.562902"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-05T03:15:23Z"
+  }
+}