netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-14 18:31:50 +00:00
parent 3d0ed95ed5
commit 0df3b10f10
108 changed files with 1456 additions and 290 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/01/GHSA-jqwj-9jvg-583v/GHSA-jqwj-9jvg-583v.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jqwj-9jvg-583v",
"modified": "2022-01-15T00:03:33Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-01-11T00:01:34Z",
"aliases": [
"CVE-2021-35247"
],
"details": "Serv-U web login screen was allowing characters that were not sanitized by the authentication mechanism. SolarWinds has updated the authentication mechanism to remedy this issue and prevent unauthorized parameters to be used in the Serv-U login screen With the Log4j issue in the wild, input fields across the internet have been tested for vulnerability. Although Serv-U was not affected by the log4j issue, It was discovered that better input validation could be implemented.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/01/GHSA-mrwr-9wqr-6fc2/GHSA-mrwr-9wqr-6fc2.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mrwr-9wqr-6fc2",
"modified": "2022-01-25T00:02:18Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-01-19T00:01:07Z",
"aliases": [
"CVE-2021-43353"
],
"details": "The Crisp Live Chat WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the crisp_plugin_settings_page function found in the ~/crisp.php file, which made it possible for attackers to inject arbitrary web scripts in versions up to, and including 0.31.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-4fpw-j345-q48r/GHSA-4fpw-j345-q48r.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4fpw-j345-q48r",
"modified": "2022-05-24T19:16:43Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T19:16:43Z",
"aliases": [
"CVE-2021-25487"
],
"details": "Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-4g27-v2fc-m8fv/GHSA-4g27-v2fc-m8fv.json
+10 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4g27-v2fc-m8fv",
"modified": "2022-05-24T17:45:33Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T17:45:33Z",
"aliases": [
"CVE-2021-25371"
],
"details": "A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-912"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2022/05/GHSA-7x25-8cjm-2rj9/GHSA-7x25-8cjm-2rj9.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269",
"CWE-863"
],
"severity": "HIGH",
advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fj4w-55pf-m8j9",
"modified": "2022-05-24T19:05:09Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T19:05:09Z",
"aliases": [
"CVE-2021-25395"
],
"details": "A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-g6pj-gc3g-pf4q/GHSA-g6pj-gc3g-pf4q.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200",
"CWE-863"
],
"severity": "MODERATE",
advisories/unreviewed/2022/05/GHSA-hhhg-3qxh-mmh3/GHSA-hhhg-3qxh-mmh3.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416",
"CWE-787"
],
"severity": "MODERATE",
advisories/unreviewed/2022/05/GHSA-jfxr-v6vh-5957/GHSA-jfxr-v6vh-5957.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jfxr-v6vh-5957",
"modified": "2022-05-24T19:16:46Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T19:16:46Z",
"aliases": [
"CVE-2021-39350"
],
"details": "The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - 7.5.2.727.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-qvjg-564f-22c8/GHSA-qvjg-564f-22c8.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qvjg-564f-22c8",
"modified": "2022-05-24T17:45:33Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T17:45:33Z",
"aliases": [
"CVE-2021-25372"
],
"details": "An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json
+9 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v32f-c32x-pgfp",
"modified": "2022-05-24T19:05:10Z",
"modified": "2025-02-14T18:30:38Z",
"published": "2022-05-24T19:05:10Z",
"aliases": [
"CVE-2021-25394"
],
"details": "A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -21,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-362"
"CWE-362",
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/03/GHSA-gvfw-3vr2-x46g/GHSA-gvfw-3vr2-x46g.json
+67 -35
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gvfw-3vr2-x46g",
"modified": "2023-04-07T15:30:39Z",
"modified": "2025-02-14T18:30:40Z",
"published": "2023-03-30T21:30:20Z",
"aliases": [
"CVE-2023-1393"
@@ -21,39 +21,7 @@
},
{
"type": "WEB",
"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
"url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
},
{
"type": "WEB",
@@ -61,7 +29,71 @@
},
{
"type": "WEB",
"url": "https://www.openwall.com/lists/oss-security/2023/03/29/1"
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWFUDSBSABRHQOX6TIQ5O3SNPFTPFQQP"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SW2NRC3V53PIBXFPFBVWCOM2MDDILWQS"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHJMSMK7G4GPLMKIGKXIOL2RTKU5VFWE"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PSAAGI5V77FQXIT5PP4URP6BYQVCK5U5"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NOYATGGPMT3COC7ELAJW5TG2PVS3AFR2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEHSYYFGBN3G4RS2HJXKQ5NBMOAZ5F2F"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H3EVO3OQV6T4BSABWZ2TU3PY5TJTEQZ2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPNQYHUI63DB5FHK6EOI3Z4C6YQZGZKI"
},
{
"type": "WEB",
"url": "https://gitlab.freedesktop.org/xorg/xserver/-/commit/26ef545b3502f61ca722a7a3373507e88ef64110"
}
],
"database_specific": {
advisories/unreviewed/2023/03/GHSA-h569-rw5j-mxrv/GHSA-h569-rw5j-mxrv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h569-rw5j-mxrv",
"modified": "2023-04-07T15:30:39Z",
"modified": "2025-02-14T18:30:40Z",
"published": "2023-03-31T00:30:18Z",
"aliases": [
"CVE-2023-1670"
@@ -27,6 +27,10 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00006.html"
},
{
"type": "WEB",
"url": "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz%40163.com"
},
{
"type": "WEB",
"url": "https://lore.kernel.org/all/20230316161526.1568982-1-zyytlz.wz@163.com"
advisories/unreviewed/2023/04/GHSA-2jm2-q946-gq54/GHSA-2jm2-q946-gq54.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/04/GHSA-9875-8h62-hq8g/GHSA-9875-8h62-hq8g.json
+1
View File
@@ -30,6 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-276",
"CWE-287"
],
"severity": "HIGH",
advisories/unreviewed/2023/04/GHSA-h4w3-5jjx-jxhm/GHSA-h4w3-5jjx-jxhm.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
"CWE-434",
"CWE-94"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/04/GHSA-q37p-4rw5-7329/GHSA-q37p-4rw5-7329.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
"CWE-22",
"CWE-552"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-5r2r-5wx4-7x33/GHSA-5r2r-5wx4-7x33.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5r2r-5wx4-7x33",
"modified": "2024-04-04T05:35:29Z",
"modified": "2025-02-14T18:30:39Z",
"published": "2023-07-06T19:24:13Z",
"aliases": [
"CVE-2022-4744"
advisories/unreviewed/2024/02/GHSA-2726-63m5-f24q/GHSA-2726-63m5-f24q.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2726-63m5-f24q",
"modified": "2024-02-27T00:32:04Z",
"modified": "2025-02-14T18:30:42Z",
"published": "2024-02-27T00:32:04Z",
"aliases": [
"CVE-2024-25248"
],
"details": "SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-26T22:15:07Z"
advisories/unreviewed/2024/02/GHSA-69jc-r7p8-4cpg/GHSA-69jc-r7p8-4cpg.json
+3 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-69jc-r7p8-4cpg",
"modified": "2024-02-29T00:30:23Z",
"modified": "2025-02-14T18:30:43Z",
"published": "2024-02-29T00:30:23Z",
"aliases": [
"CVE-2023-5617"
],
"details": "\nHitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.\n\n\n\n",
"details": "Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.",
"severity": [
{
"type": "CVSS_V3",
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-209",
"CWE-550"
],
"severity": "MODERATE",

Some files were not shown because too many files have changed in this diff Show More