From 0d7047a8e5b9d8dda5bbe89e1b41f1b9845c2861 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 11 Apr 2024 18:32:15 +0000 Subject: [PATCH] Publish Advisories GHSA-73jw-m44p-r46h GHSA-9xfx-mr98-wrr3 GHSA-ch2c-p7pr-2rg8 GHSA-fc56-xpwv-3gp9 GHSA-hchx-chqf-7hcp GHSA-j6qm-7hmm-gfqm GHSA-jpjw-54h4-86gr --- .../GHSA-73jw-m44p-r46h.json | 35 ++++++++++++++++ .../GHSA-9xfx-mr98-wrr3.json | 38 +++++++++++++++++ .../GHSA-ch2c-p7pr-2rg8.json | 38 +++++++++++++++++ .../GHSA-fc56-xpwv-3gp9.json | 2 +- .../GHSA-hchx-chqf-7hcp.json | 38 +++++++++++++++++ .../GHSA-j6qm-7hmm-gfqm.json | 35 ++++++++++++++++ .../GHSA-jpjw-54h4-86gr.json | 42 +++++++++++++++++++ 7 files changed, 227 insertions(+), 1 deletion(-) create mode 100644 advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json create mode 100644 advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json create mode 100644 advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json create mode 100644 advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json create mode 100644 advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json create mode 100644 advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json diff --git a/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json b/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json new file mode 100644 index 00000000000..0037bed01fe --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-73jw-m44p-r46h/GHSA-73jw-m44p-r46h.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-73jw-m44p-r46h", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2024-0881" + ], + "details": "The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not prevent password protected posts from being displayed in the result of some unauthenticated AJAX actions, allowing unauthenticated users to read such posts", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0881" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/e460e926-6e9b-4e9f-b908-ba5c9c7fb290" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T16:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json b/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json new file mode 100644 index 00000000000..15cb1d308b0 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-9xfx-mr98-wrr3/GHSA-9xfx-mr98-wrr3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9xfx-mr98-wrr3", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30272" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30272" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json b/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json new file mode 100644 index 00000000000..5e14d891a6c --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-ch2c-p7pr-2rg8/GHSA-ch2c-p7pr-2rg8.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ch2c-p7pr-2rg8", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30273" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30273" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json b/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json index c46709960ad..13715c37c57 100644 --- a/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json +++ b/advisories/unreviewed/2024/04/GHSA-fc56-xpwv-3gp9/GHSA-fc56-xpwv-3gp9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fc56-xpwv-3gp9", - "modified": "2024-04-09T21:32:00Z", + "modified": "2024-04-11T18:30:54Z", "published": "2024-04-09T21:32:00Z", "aliases": [ "CVE-2024-2866" diff --git a/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json b/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json new file mode 100644 index 00000000000..0a537ff6f7d --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-hchx-chqf-7hcp/GHSA-hchx-chqf-7hcp.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hchx-chqf-7hcp", + "modified": "2024-04-11T18:30:55Z", + "published": "2024-04-11T18:30:55Z", + "aliases": [ + "CVE-2024-30271" + ], + "details": "Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30271" + }, + { + "type": "WEB", + "url": "https://helpx.adobe.com/security/products/illustrator/apsb24-25.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json b/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json new file mode 100644 index 00000000000..843a2c4be72 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-j6qm-7hmm-gfqm/GHSA-j6qm-7hmm-gfqm.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j6qm-7hmm-gfqm", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2024-31678" + ], + "details": "Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the \"password\" parameter in the \"login.php\" file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31678" + }, + { + "type": "WEB", + "url": "https://github.com/CveSecLook/cve/issues/10" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T16:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json b/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json new file mode 100644 index 00000000000..a17ee849717 --- /dev/null +++ b/advisories/unreviewed/2024/04/GHSA-jpjw-54h4-86gr/GHSA-jpjw-54h4-86gr.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jpjw-54h4-86gr", + "modified": "2024-04-11T18:30:54Z", + "published": "2024-04-11T18:30:54Z", + "aliases": [ + "CVE-2023-50949" + ], + "details": "IBM QRadar SIEM 7.5 could allow an unauthorized user to perform unauthorized actions due to improper certificate validation. IBM X-Force ID: 275706.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50949" + }, + { + "type": "WEB", + "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/275706" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7147933" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-295" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-04-11T17:15:30Z" + } +} \ No newline at end of file