Publish Advisories

GHSA-rm87-ccvw-q747
GHSA-595j-mfvm-f4gx
GHSA-cc2p-6hmp-4729

advisories/unreviewed/2023/12/GHSA-rm87-ccvw-q747/GHSA-rm87-ccvw-q747.json

@@ -17,13 +17,25 @@
 
   ],
   "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-wmcc-g67r-9962"
+    },
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45779"
     },
+    {
+      "type": "WEB",
+      "url": "https://rtx.meta.security/exploitation/2024/01/30/Android-vendors-APEX-test-keys.html"
+    },
     {
       "type": "WEB",
       "url": "https://source.android.com/security/bulletin/2023-12-01"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.fairphone.com/en/2024/01/30/security-update-apex-modules-vulnerability-fixed/"
     }
   ],
   "database_specific": {

advisories/unreviewed/2024/01/GHSA-595j-mfvm-f4gx/GHSA-595j-mfvm-f4gx.json

@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-595j-mfvm-f4gx",
-  "modified": "2024-01-26T00:30:26Z",
+  "modified": "2024-02-01T00:31:28Z",
   "published": "2024-01-26T00:30:26Z",
   "aliases": [
     "CVE-2023-51833"
   ],
   "details": "A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameter in the debug.cgi page.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -29,9 +32,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-77"
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-01-25T22:15:07Z"

advisories/unreviewed/2024/01/GHSA-cc2p-6hmp-4729/GHSA-cc2p-6hmp-4729.json

@@ -28,7 +28,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,