diff --git a/advisories/github-reviewed/2024/05/GHSA-2mvc-557g-5638/GHSA-2mvc-557g-5638.json b/advisories/github-reviewed/2024/05/GHSA-2mvc-557g-5638/GHSA-2mvc-557g-5638.json index 396164b5954..c78723f6eee 100644 --- a/advisories/github-reviewed/2024/05/GHSA-2mvc-557g-5638/GHSA-2mvc-557g-5638.json +++ b/advisories/github-reviewed/2024/05/GHSA-2mvc-557g-5638/GHSA-2mvc-557g-5638.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2mvc-557g-5638", - "modified": "2024-06-10T18:30:57Z", + "modified": "2024-08-02T15:46:31Z", "published": "2024-05-02T18:30:55Z", "aliases": [ "CVE-2024-4215" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L" } ], "affected": [ @@ -62,7 +66,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/05/GHSA-fgpw-cx3v-wj95/GHSA-fgpw-cx3v-wj95.json b/advisories/github-reviewed/2024/05/GHSA-fgpw-cx3v-wj95/GHSA-fgpw-cx3v-wj95.json index 17c42cd7f53..26cb5b5e331 100644 --- a/advisories/github-reviewed/2024/05/GHSA-fgpw-cx3v-wj95/GHSA-fgpw-cx3v-wj95.json +++ b/advisories/github-reviewed/2024/05/GHSA-fgpw-cx3v-wj95/GHSA-fgpw-cx3v-wj95.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-fgpw-cx3v-wj95", - "modified": "2024-05-06T14:32:35Z", + "modified": "2024-08-02T15:47:48Z", "published": "2024-05-05T03:30:47Z", "aliases": [ "CVE-2024-34486" @@ -9,7 +9,14 @@ "summary": "Ryu Infinite Loop vulnerability", "details": "`OFPPacketQueue` in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via `OFPQueueProp.len=0`.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" + } ], "affected": [ { @@ -48,9 +55,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-606" ], - "severity": "MODERATE", + "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-05-06T14:32:35Z", "nvd_published_at": "2024-05-05T03:15:07Z" diff --git a/advisories/github-reviewed/2024/05/GHSA-mg49-jqgw-gcj6/GHSA-mg49-jqgw-gcj6.json b/advisories/github-reviewed/2024/05/GHSA-mg49-jqgw-gcj6/GHSA-mg49-jqgw-gcj6.json index 1c1e4f608e6..996c623ff17 100644 --- a/advisories/github-reviewed/2024/05/GHSA-mg49-jqgw-gcj6/GHSA-mg49-jqgw-gcj6.json +++ b/advisories/github-reviewed/2024/05/GHSA-mg49-jqgw-gcj6/GHSA-mg49-jqgw-gcj6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mg49-jqgw-gcj6", - "modified": "2024-05-03T20:24:04Z", + "modified": "2024-08-02T15:47:16Z", "published": "2024-05-02T21:30:29Z", "aliases": [ "CVE-2024-34392" @@ -12,6 +12,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" } ], "affected": [ @@ -55,7 +59,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-843" ], "severity": "HIGH", "github_reviewed": true, diff --git a/advisories/github-reviewed/2024/05/GHSA-r99q-hmqv-xw8w/GHSA-r99q-hmqv-xw8w.json b/advisories/github-reviewed/2024/05/GHSA-r99q-hmqv-xw8w/GHSA-r99q-hmqv-xw8w.json index b7561ebfd59..4e9430bbf52 100644 --- a/advisories/github-reviewed/2024/05/GHSA-r99q-hmqv-xw8w/GHSA-r99q-hmqv-xw8w.json +++ b/advisories/github-reviewed/2024/05/GHSA-r99q-hmqv-xw8w/GHSA-r99q-hmqv-xw8w.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-r99q-hmqv-xw8w", - "modified": "2024-06-04T16:01:41Z", + "modified": "2024-08-02T15:48:11Z", "published": "2024-05-31T21:30:55Z", "aliases": [ "CVE-2024-34005" @@ -9,7 +9,14 @@ "summary": "Moodle Authenticated LFI risk in some misconfigured shared hosting environments", "details": "In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" + } ], "affected": [ {