Skip to content

Commit eceb290

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-27p7-fq6v-hh4m GHSA-3h9m-4hx4-r4rj GHSA-jc9w-4gwg-hjf5 GHSA-q2q4-jjp8-f6m3
1 parent c14cc6b commit eceb290

4 files changed

Lines changed: 177 additions & 1 deletion

File tree

‎advisories/unreviewed/2026/03/GHSA-27p7-fq6v-hh4m/GHSA-27p7-fq6v-hh4m.json‎

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-27p7-fq6v-hh4m",
4+
"modified": "2026-03-30T06:30:26Z",
5+
"published": "2026-03-30T06:30:26Z",
6+
"aliases": [
7+
"CVE-2026-5107"
8+
],
9+
"details": "A vulnerability has been found in FRRouting FRR up to 10.5.1. This affects the function process_type2_route of the file bgpd/bgp_evpn.c of the component EVPN Type-2 Route Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The attack is considered to have high complexity. The exploitability is reported as difficult. The identifier of the patch is 7676cad65114aa23adde583d91d9d29e2debd045. To fix this issue, it is recommended to deploy a patch.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5107"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/FRRouting/frr/pull/21098"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://github.com/FRRouting/frr/commit/7676cad65114aa23adde583d91d9d29e2debd045"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://github.com/FRRouting/frr"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/submit/780123"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/354132"
45+
},
46+
{
47+
"type": "WEB",
48+
"url": "https://vuldb.com/vuln/354132/cti"
49+
}
50+
],
51+
"database_specific": {
52+
"cwe_ids": [
53+
"CWE-266"
54+
],
55+
"severity": "LOW",
56+
"github_reviewed": false,
57+
"github_reviewed_at": null,
58+
"nvd_published_at": "2026-03-30T06:16:05Z"
59+
}
60+
}

‎advisories/unreviewed/2026/03/GHSA-3h9m-4hx4-r4rj/GHSA-3h9m-4hx4-r4rj.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3h9m-4hx4-r4rj",
4+
"modified": "2026-03-30T06:30:26Z",
5+
"published": "2026-03-30T06:30:26Z",
6+
"aliases": [
7+
"CVE-2026-5105"
8+
],
9+
"details": "A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component Parameter Handler. Performing a manipulation of the argument pptpPassThru results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5105"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/LvHongW/Vuln-of-totolink_A3300R/tree/main/A3300R_pptpPassThru_cmd_inject"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://vuldb.com/submit/779143"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/vuln/354130"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/354130/cti"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://www.totolink.net"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-74"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-03-30T04:16:09Z"
55+
}
56+
}

‎advisories/unreviewed/2026/03/GHSA-jc9w-4gwg-hjf5/GHSA-jc9w-4gwg-hjf5.json‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jc9w-4gwg-hjf5",
4+
"modified": "2026-03-30T06:30:26Z",
5+
"published": "2026-03-30T06:30:26Z",
6+
"aliases": [
7+
"CVE-2026-5106"
8+
],
9+
"details": "A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"
14+
},
15+
{
16+
"type": "CVSS_V4",
17+
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
18+
}
19+
],
20+
"affected": [],
21+
"references": [
22+
{
23+
"type": "ADVISORY",
24+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5106"
25+
},
26+
{
27+
"type": "WEB",
28+
"url": "https://github.com/sxc2044-pixel/hajimi/issues/1"
29+
},
30+
{
31+
"type": "WEB",
32+
"url": "https://code-projects.org"
33+
},
34+
{
35+
"type": "WEB",
36+
"url": "https://vuldb.com/submit/780091"
37+
},
38+
{
39+
"type": "WEB",
40+
"url": "https://vuldb.com/vuln/354131"
41+
},
42+
{
43+
"type": "WEB",
44+
"url": "https://vuldb.com/vuln/354131/cti"
45+
}
46+
],
47+
"database_specific": {
48+
"cwe_ids": [
49+
"CWE-79"
50+
],
51+
"severity": "MODERATE",
52+
"github_reviewed": false,
53+
"github_reviewed_at": null,
54+
"nvd_published_at": "2026-03-30T05:15:59Z"
55+
}
56+
}

‎advisories/unreviewed/2026/03/GHSA-q2q4-jjp8-f6m3/GHSA-q2q4-jjp8-f6m3.json‎

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"schema_version": "1.4.0",
33
"id": "GHSA-q2q4-jjp8-f6m3",
4-
"modified": "2026-03-29T21:30:21Z",
4+
"modified": "2026-03-30T06:30:26Z",
55
"published": "2026-03-29T21:30:21Z",
66
"aliases": [
77
"CVE-2026-4176"
@@ -37,6 +37,10 @@
3737
{
3838
"type": "WEB",
3939
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3381"
40+
},
41+
{
42+
"type": "WEB",
43+
"url": "http://www.openwall.com/lists/oss-security/2026/03/30/2"
4044
}
4145
],
4246
"database_specific": {

0 commit comments

Comments
 (0)