Skip to content

Commit ec673fa

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-4whc-3xqp-jprr GHSA-9qx4-cv5v-q4q6 GHSA-fmx9-hrmg-3x9v GHSA-h8wg-cp8f-q66r GHSA-q5cj-48g5-f774 GHSA-r39v-2pqf-6ww6
1 parent 200b557 commit ec673fa

File tree

6 files changed

+368
-0
lines changed

6 files changed

+368
-0
lines changed

‎advisories/unreviewed/2025/09/GHSA-4whc-3xqp-jprr/GHSA-4whc-3xqp-jprr.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4whc-3xqp-jprr",
4+
"modified": "2025-09-28T00:30:14Z",
5+
"published": "2025-09-28T00:30:14Z",
6+
"aliases": [
7+
"CVE-2025-11082"
8+
],
9+
"details": "A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with \"[f]ixed for 2.46\".",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11082"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=16358"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33464"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?ctiid.326123"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?id.326123"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.661276"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://www.gnu.org"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-119"
62+
],
63+
"severity": "MODERATE",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2025-09-27T23:15:31Z"
67+
}
68+
}

‎advisories/unreviewed/2025/09/GHSA-9qx4-cv5v-q4q6/GHSA-9qx4-cv5v-q4q6.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-9qx4-cv5v-q4q6",
4+
"modified": "2025-09-28T00:30:15Z",
5+
"published": "2025-09-28T00:30:15Z",
6+
"aliases": [
7+
"CVE-2025-11088"
8+
],
9+
"details": "A weakness has been identified in itsourcecode Open Source Job Portal 1.0. Impacted is an unknown function of the file /admin/vacancy/index.php?view=edit. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11088"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/yihaofuweng/cve/issues/35"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://itsourcecode.com"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.326156"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.326156"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.659763"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-28T00:15:31Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-fmx9-hrmg-3x9v/GHSA-fmx9-hrmg-3x9v.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fmx9-hrmg-3x9v",
4+
"modified": "2025-09-28T00:30:14Z",
5+
"published": "2025-09-28T00:30:14Z",
6+
"aliases": [
7+
"CVE-2025-11083"
8+
],
9+
"details": "A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with \"[f]ixed for 2.46\".",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11083"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://sourceware.org/bugzilla/attachment.cgi?id=16353"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33457#c1"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=9ca499644a21ceb3f946d1c179c38a83be084490"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?ctiid.326124"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?id.326124"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.661277"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://www.gnu.org"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-119"
62+
],
63+
"severity": "MODERATE",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2025-09-27T23:15:32Z"
67+
}
68+
}

‎advisories/unreviewed/2025/09/GHSA-h8wg-cp8f-q66r/GHSA-h8wg-cp8f-q66r.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-h8wg-cp8f-q66r",
4+
"modified": "2025-09-28T00:30:14Z",
5+
"published": "2025-09-28T00:30:14Z",
6+
"aliases": [
7+
"CVE-2025-11080"
8+
],
9+
"details": "A security vulnerability has been detected in zhuimengshaonian wisdom-education up to 1.0.4. This vulnerability affects the function selectStudentExamInfoList of the file src/main/java/com/education/api/controller/student/ExamInfoController.java. Such manipulation of the argument subjectId leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11080"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/xkalami-Tta0/CVE/blob/main/wisdom-education/%E6%B0%B4%E5%B9%B3%E8%B6%8A%E6%9D%83.md#vulnerability-reproduction"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?ctiid.326121"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?id.326121"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?submit.661308"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-266"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2025-09-27T22:15:31Z"
55+
}
56+
}

‎advisories/unreviewed/2025/09/GHSA-q5cj-48g5-f774/GHSA-q5cj-48g5-f774.json‎

Lines changed: 68 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,68 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-q5cj-48g5-f774",
4+
"modified": "2025-09-28T00:30:14Z",
5+
"published": "2025-09-28T00:30:14Z",
6+
"aliases": [
7+
"CVE-2025-11081"
8+
],
9+
"details": "A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11081"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33406"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/?ctiid.326122"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/?id.326122"
49+
},
50+
{
51+
"type": "WEB",
52+
"url": "https://vuldb.com/?submit.661275"
53+
},
54+
{
55+
"type": "WEB",
56+
"url": "https://www.gnu.org"
57+
}
58+
],
59+
"database_specific": {
60+
"cwe_ids": [
61+
"CWE-119"
62+
],
63+
"severity": "MODERATE",
64+
"github_reviewed": false,
65+
"github_reviewed_at": null,
66+
"nvd_published_at": "2025-09-27T22:15:32Z"
67+
}
68+
}

‎advisories/unreviewed/2025/09/GHSA-r39v-2pqf-6ww6/GHSA-r39v-2pqf-6ww6.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-r39v-2pqf-6ww6",
4+
"modified": "2025-09-28T00:30:15Z",
5+
"published": "2025-09-28T00:30:15Z",
6+
"aliases": [
7+
"CVE-2025-11089"
8+
],
9+
"details": "A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This impacts an unknown function of the file /Profilers/PriProfile/COUNT3s4.php. Executing manipulation of the argument cbranch can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11089"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/evilthan9/cve/issues/2"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/?ctiid.326171"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/?id.326171"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/?submit.661282"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-74"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2025-09-28T00:15:32Z"
51+
}
52+
}

0 commit comments

Comments
 (0)