Skip to content

Commit e125dea

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-34qf-4246-phgf GHSA-5wr5-vxhh-x7gm GHSA-2c34-jhww-wwcm GHSA-2vmw-qjp2-rr96 GHSA-2xm3-5jp9-423w GHSA-4587-27hr-9q42 GHSA-46m9-h86m-p3xh GHSA-58xj-93qq-mmvg GHSA-6rpc-86fm-9prv GHSA-8pxq-pw5m-8q7x GHSA-cccx-m78h-m3xw GHSA-f6qv-f2mh-m4wj GHSA-fcjm-cm6x-4v66 GHSA-ghjj-x456-6m6f GHSA-h9r9-rwmc-3wm5 GHSA-hj6r-ww52-66xr GHSA-hvjp-3x5g-4g4f GHSA-p322-q4fj-r244 GHSA-pqj4-h6r8-qxjh GHSA-qg4j-p3wp-3c25 GHSA-qv8q-6q9m-8ch9 GHSA-rqv3-6h29-j2m3 GHSA-vpqx-f7gf-qp3x GHSA-wm9q-282x-pcmx
1 parent e1739a4 commit e125dea

File tree

24 files changed

+886
-2
lines changed

24 files changed

+886
-2
lines changed

‎advisories/unreviewed/2024/07/GHSA-34qf-4246-phgf/GHSA-34qf-4246-phgf.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-34qf-4246-phgf",
4-
"modified": "2026-01-08T12:30:28Z",
4+
"modified": "2026-04-14T00:31:11Z",
55
"published": "2024-07-04T09:32:49Z",
66
"aliases": [
77
"CVE-2024-1573"
@@ -30,6 +30,10 @@
3030
{
3131
"type": "WEB",
3232
"url": "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-004_en.pdf"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2024-004_en.pdf"
3337
}
3438
],
3539
"database_specific": {

‎advisories/unreviewed/2026/02/GHSA-5wr5-vxhh-x7gm/GHSA-5wr5-vxhh-x7gm.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,17 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-5wr5-vxhh-x7gm",
4-
"modified": "2026-02-13T18:31:25Z",
4+
"modified": "2026-04-14T00:31:11Z",
55
"published": "2026-02-13T18:31:25Z",
66
"aliases": [
77
"CVE-2026-26221"
88
],
99
"details": "Hyland OnBase contains an unauthenticated .NET Remoting exposure in the OnBase Workflow Timer Service (Hyland.Core.Workflow.NTService.exe). An attacker who can reach the service can send crafted .NET Remoting requests to default HTTP channel endpoints on TCP/8900 (e.g., TimerServiceAPI.rem and TimerServiceEvents.rem for Workflow) to trigger unsafe object unmarshalling, enabling arbitrary file read/write. By writing attacker-controlled content into web-accessible locations or chaining with other OnBase features, this can lead to remote code execution. The same primitive can be abused by supplying a UNC path to coerce outbound NTLM authentication (SMB coercion) to an attacker-controlled host.",
1010
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
},
1115
{
1216
"type": "CVSS_V4",
1317
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

‎advisories/unreviewed/2026/04/GHSA-2c34-jhww-wwcm/GHSA-2c34-jhww-wwcm.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2c34-jhww-wwcm",
4+
"modified": "2026-04-14T00:31:13Z",
5+
"published": "2026-04-14T00:31:13Z",
6+
"aliases": [
7+
"CVE-2026-27674"
8+
],
9+
"details": "Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interpreted by the application and causes it to reference attacker-controlled content. If a victim accesses the affected functionality, that attacker-controlled content could be executed in the victim�s browser, potentially resulting in session compromise. This could allow the attacker to execute arbitrary client-side code, impacting the confidentiality and integrity of the application, with no impact to availability.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27674"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://me.sap.com/notes/3719397"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://url.sap/sapsecuritypatchday"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-94"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-14T00:16:05Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-2vmw-qjp2-rr96/GHSA-2vmw-qjp2-rr96.json‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2vmw-qjp2-rr96",
4+
"modified": "2026-04-14T00:31:12Z",
5+
"published": "2026-04-14T00:31:12Z",
6+
"aliases": [
7+
"CVE-2026-6203"
8+
],
9+
"details": "The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4. This is due to insufficient validation of user-supplied URLs passed via the 'redirect_to_on_logout' GET parameter before redirecting users. The `redirect_to_on_logout` GET parameter is passed directly to WordPress's `wp_redirect()` function instead of the domain-restricted `wp_safe_redirect()`. While `esc_url_raw()` is applied to sanitize malformed URLs, it does not restrict the redirect destination to the local domain, allowing an attacker to craft a specially formed link that redirects users to potentially malicious external URLs after logout, which could be used to facilitate phishing attacks.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6203"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://plugins.trac.wordpress.org/browser/user-registration/tags/5.1.4/includes/functions-ur-template.php#L39"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://plugins.trac.wordpress.org/browser/user-registration/trunk/includes/functions-ur-template.php#L39"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/020bed37-9544-49b7-941d-3b7f509fdfdf?source=cve"
33+
}
34+
],
35+
"database_specific": {
36+
"cwe_ids": [
37+
"CWE-601"
38+
],
39+
"severity": "MODERATE",
40+
"github_reviewed": false,
41+
"github_reviewed_at": null,
42+
"nvd_published_at": "2026-04-13T23:16:28Z"
43+
}
44+
}

‎advisories/unreviewed/2026/04/GHSA-2xm3-5jp9-423w/GHSA-2xm3-5jp9-423w.json‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-2xm3-5jp9-423w",
4+
"modified": "2026-04-14T00:31:12Z",
5+
"published": "2026-04-14T00:31:12Z",
6+
"aliases": [
7+
"CVE-2026-5086"
8+
],
9+
"details": "Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.\n\nFor example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.",
10+
"severity": [],
11+
"affected": [],
12+
"references": [
13+
{
14+
"type": "ADVISORY",
15+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5086"
16+
},
17+
{
18+
"type": "WEB",
19+
"url": "https://metacpan.org/release/NERDVANA/Crypt-SecretBuffer-0.019/source/Changes"
20+
}
21+
],
22+
"database_specific": {
23+
"cwe_ids": [
24+
"CWE-208"
25+
],
26+
"severity": null,
27+
"github_reviewed": false,
28+
"github_reviewed_at": null,
29+
"nvd_published_at": "2026-04-13T23:16:27Z"
30+
}
31+
}

‎advisories/unreviewed/2026/04/GHSA-4587-27hr-9q42/GHSA-4587-27hr-9q42.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-4587-27hr-9q42",
4+
"modified": "2026-04-14T00:31:13Z",
5+
"published": "2026-04-14T00:31:13Z",
6+
"aliases": [
7+
"CVE-2026-27673"
8+
],
9+
"details": "Due to a missing authorization check, SAP S/4HANA (Private Cloud and On-Premise) allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the application.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27673"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://me.sap.com/notes/3703813"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://url.sap/sapsecuritypatchday"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-14T00:16:05Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-46m9-h86m-p3xh/GHSA-46m9-h86m-p3xh.json‎

Lines changed: 52 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-46m9-h86m-p3xh",
4+
"modified": "2026-04-14T00:31:12Z",
5+
"published": "2026-04-14T00:31:12Z",
6+
"aliases": [
7+
"CVE-2026-6220"
8+
],
9+
"details": "A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File Download URL Handler. Such manipulation of the argument streamIp leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6220"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/ccccccctiiiiiiii-lab/public_exp/issues/1"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/submit/785855"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/vuln/357141"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/357141/cti"
41+
}
42+
],
43+
"database_specific": {
44+
"cwe_ids": [
45+
"CWE-918"
46+
],
47+
"severity": "MODERATE",
48+
"github_reviewed": false,
49+
"github_reviewed_at": null,
50+
"nvd_published_at": "2026-04-13T22:16:30Z"
51+
}
52+
}

‎advisories/unreviewed/2026/04/GHSA-58xj-93qq-mmvg/GHSA-58xj-93qq-mmvg.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-58xj-93qq-mmvg",
4+
"modified": "2026-04-14T00:31:13Z",
5+
"published": "2026-04-14T00:31:13Z",
6+
"aliases": [
7+
"CVE-2026-27677"
8+
],
9+
"details": "Due to missing authorization checks in the SAP S/4HANA OData Service (Manage Reference Equipment), an attacker could update and delete child entities via OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27677"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://me.sap.com/notes/3715097"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://url.sap/sapsecuritypatchday"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-14T00:16:06Z"
39+
}
40+
}

‎advisories/unreviewed/2026/04/GHSA-6rpc-86fm-9prv/GHSA-6rpc-86fm-9prv.json‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-6rpc-86fm-9prv",
4+
"modified": "2026-04-14T00:31:11Z",
5+
"published": "2026-04-14T00:31:11Z",
6+
"aliases": [
7+
"CVE-2026-22563"
8+
],
9+
"details": "A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.\n \nAffected Products:\nUniFi Play PowerAmp (Version 1.0.35 and earlier)\n\nUniFi Play Audio Port  (Version 1.0.24 and earlier)\n \n\nMitigation:\nUpdate UniFi Play PowerAmp to Version 1.0.38 or later\n\nUpdate UniFi Play Audio Port  to Version 1.1.9 or later",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22563"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-063/e468dd4b-5090-4ef8-89d8-939903c08e83"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-20"
30+
],
31+
"severity": "CRITICAL",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2026-04-13T22:16:28Z"
35+
}
36+
}

‎advisories/unreviewed/2026/04/GHSA-8pxq-pw5m-8q7x/GHSA-8pxq-pw5m-8q7x.json‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-8pxq-pw5m-8q7x",
4+
"modified": "2026-04-14T00:31:13Z",
5+
"published": "2026-04-14T00:31:13Z",
6+
"aliases": [
7+
"CVE-2026-27678"
8+
],
9+
"details": "Due to missing authorization checks in the SAP S/4HANA backend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27678"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://me.sap.com/notes/3715177"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://url.sap/sapsecuritypatchday"
29+
}
30+
],
31+
"database_specific": {
32+
"cwe_ids": [
33+
"CWE-862"
34+
],
35+
"severity": "MODERATE",
36+
"github_reviewed": false,
37+
"github_reviewed_at": null,
38+
"nvd_published_at": "2026-04-14T00:16:06Z"
39+
}
40+
}

0 commit comments

Comments
 (0)