netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-02 21:33:04 +00:00
parent 2137026eb2
commit 108e9c816f
46 changed files with 573 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/08/GHSA-frvj-cfq4-3228/GHSA-frvj-cfq4-3228.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frvj-cfq4-3228",
"modified": "2024-08-02T21:13:14Z",
"modified": "2024-08-02T21:32:26Z",
"published": "2024-08-02T21:13:13Z",
"aliases": [
"CVE-2024-36116"
@@ -22,7 +22,7 @@
{
"package": {
"ecosystem": "Maven",
"name": "com.dzikoysk:reposilite-backend"
"name": "com.reposilite:reposilite-backend"
},
"ranges": [
{
advisories/unreviewed/2022/10/GHSA-6prj-5r8w-3x38/GHSA-6prj-5r8w-3x38.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6prj-5r8w-3x38",
"modified": "2022-10-21T12:00:22Z",
"modified": "2024-08-02T21:31:32Z",
"published": "2022-10-18T19:00:33Z",
"aliases": [
"CVE-2022-41479"
@@ -24,6 +24,14 @@
{
"type": "WEB",
"url": "https://github.com/IthacaLabs/DevExpress/tree/main/ASP.NET_Web_Forms_Build_19.2.3"
},
{
"type": "WEB",
"url": "https://supportcenter.devexpress.com/ticket/details/t1171808/penetration-test-idor-source-code-cve-2022-41479"
},
{
"type": "WEB",
"url": "https://supportcenter.devexpress.com/ticket/details/t190349/false-positive-vulnerabilities-known-alerts-detected-by-various-security-scanners-and"
}
],
"database_specific": {
advisories/unreviewed/2024/02/GHSA-35j4-pxc2-3gcf/GHSA-35j4-pxc2-3gcf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35j4-pxc2-3gcf",
"modified": "2024-02-26T18:30:31Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-02-26T18:30:31Z",
"aliases": [
"CVE-2024-25344"
],
"details": "Cross Site Scripting vulnerability in ITFlow.org before commit v.432488eca3998c5be6b6b9e8f8ba01f54bc12378 allows a remtoe attacker to execute arbitrary code and obtain sensitive information via the settings.php, settings+company.php, settings_defaults.php,settings_integrations.php, settings_invoice.php, settings_localization.php, settings_mail.php components.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-26T16:27:58Z"
advisories/unreviewed/2024/03/GHSA-268q-c8pq-99pj/GHSA-268q-c8pq-99pj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-268q-c8pq-99pj",
"modified": "2024-03-20T21:31:14Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T21:31:14Z",
"aliases": [
"CVE-2024-25294"
],
"details": "An SSRF issue in REBUILD v.3.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the FileDownloader.java, proxyDownload,URL parameters.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T21:15:30Z"
advisories/unreviewed/2024/03/GHSA-3j55-px9j-gc5p/GHSA-3j55-px9j-gc5p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3j55-px9j-gc5p",
"modified": "2024-03-13T15:31:03Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-13T15:31:03Z",
"aliases": [
"CVE-2024-28430"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog_edit.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T13:15:47Z"
advisories/unreviewed/2024/03/GHSA-52q4-4w7h-h6vp/GHSA-52q4-4w7h-h6vp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-52q4-4w7h-h6vp",
"modified": "2024-03-27T06:30:32Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-27T06:30:32Z",
"aliases": [
"CVE-2023-29134"
],
"details": "An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T06:15:08Z"
advisories/unreviewed/2024/03/GHSA-5vqc-63mj-rggw/GHSA-5vqc-63mj-rggw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vqc-63mj-rggw",
"modified": "2024-03-20T15:32:46Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:46Z",
"aliases": [
"CVE-2024-28581"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the _assignPixel<>() function when reading images in TARGA format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:11Z"
advisories/unreviewed/2024/03/GHSA-746c-3fpg-6m7j/GHSA-746c-3fpg-6m7j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-746c-3fpg-6m7j",
"modified": "2024-03-21T03:36:46Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-21T03:36:46Z",
"aliases": [
"CVE-2024-25359"
],
"details": "An issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the pickle_load function of the serialize.py file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:52:14Z"
advisories/unreviewed/2024/03/GHSA-7rg9-mm6v-qwrq/GHSA-7rg9-mm6v-qwrq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rg9-mm6v-qwrq",
"modified": "2024-03-20T15:32:43Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:43Z",
"aliases": [
"CVE-2024-28567"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_CreateICCProfile() function when reading images in TIFF format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:09Z"
advisories/unreviewed/2024/03/GHSA-9gc2-35h9-mhj5/GHSA-9gc2-35h9-mhj5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gc2-35h9-mhj5",
"modified": "2024-03-20T15:32:45Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:45Z",
"aliases": [
"CVE-2024-28575"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_read_mct() function when reading images in J2K format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:10Z"
advisories/unreviewed/2024/03/GHSA-c7gv-5x7r-f2g7/GHSA-c7gv-5x7r-f2g7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c7gv-5x7r-f2g7",
"modified": "2024-03-20T15:32:43Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:43Z",
"aliases": [
"CVE-2024-28568"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the read_iptc_profile() function when reading images in TIFF format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:09Z"
advisories/unreviewed/2024/03/GHSA-fcwm-gx7c-6hgc/GHSA-fcwm-gx7c-6hgc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fcwm-gx7c-6hgc",
"modified": "2024-03-20T15:32:46Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:46Z",
"aliases": [
"CVE-2024-28580"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:11Z"
advisories/unreviewed/2024/03/GHSA-fwx6-53vm-r73w/GHSA-fwx6-53vm-r73w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fwx6-53vm-r73w",
"modified": "2024-03-20T15:32:45Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:45Z",
"aliases": [
"CVE-2024-28574"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the opj_j2k_copy_default_tcp_and_create_tcd() function when reading images in J2K format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:10Z"
advisories/unreviewed/2024/03/GHSA-g27m-qx37-w989/GHSA-g27m-qx37-w989.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g27m-qx37-w989",
"modified": "2024-03-13T15:31:05Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-13T15:31:05Z",
"aliases": [
"CVE-2024-28668"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/mychannel_add.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T13:15:48Z"
advisories/unreviewed/2024/03/GHSA-g2c5-xvv5-fcwr/GHSA-g2c5-xvv5-fcwr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g2c5-xvv5-fcwr",
"modified": "2024-03-21T03:36:46Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-21T03:36:46Z",
"aliases": [
"CVE-2024-25239"
],
"details": "SQL Injection vulnerability in Sourcecodester Employee Management System v1.0 allows attackers to run arbitrary SQL commands via crafted POST request to /emloyee_akpoly/Account/login.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:52:13Z"
advisories/unreviewed/2024/03/GHSA-ghhv-pj7q-4j6f/GHSA-ghhv-pj7q-4j6f.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ghhv-pj7q-4j6f",
"modified": "2024-03-26T00:32:02Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-26T00:32:02Z",
"aliases": [
"CVE-2024-29302"
],
"details": "SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T00:15:08Z"
advisories/unreviewed/2024/03/GHSA-gmc8-q8c9-x758/GHSA-gmc8-q8c9-x758.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gmc8-q8c9-x758",
"modified": "2024-03-26T12:31:27Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-26T12:31:27Z",
"aliases": [
"CVE-2024-28131"
],
"details": "EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer, which may lead to loading an executable file resides in the same folder where the extracted file is placed. If this vulnerability is exploited, arbitrary code may be executed with the privilege of the running program. Note that the developer was unreachable, therefore, users should consider stop using EasyRange Ver 1.41.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-427"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T10:15:09Z"
advisories/unreviewed/2024/03/GHSA-h8vf-mrp9-h5cj/GHSA-h8vf-mrp9-h5cj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h8vf-mrp9-h5cj",
"modified": "2024-03-18T03:30:32Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-18T03:30:32Z",
"aliases": [
"CVE-2024-24230"
],
"details": "Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It allows remote attackers to execute arbitrary code via a URL that specifies java.lang.Runtime in conjunction with getRuntime().exec followed by an OS command.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T02:15:06Z"
advisories/unreviewed/2024/03/GHSA-p94v-hr2q-pvmg/GHSA-p94v-hr2q-pvmg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p94v-hr2q-pvmg",
"modified": "2024-03-20T15:32:43Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-20T15:32:43Z",
"aliases": [
"CVE-2024-28566"
],
"details": "Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:09Z"
advisories/unreviewed/2024/03/GHSA-p9m7-r75h-rrfp/GHSA-p9m7-r75h-rrfp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p9m7-r75h-rrfp",
"modified": "2024-03-21T15:31:55Z",
"modified": "2024-08-02T21:31:33Z",
"published": "2024-03-21T15:31:55Z",
"aliases": [
"CVE-2024-29243"
],
"details": "Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the vpn_client_ip parameter at /apply.cgi.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T15:16:54Z"

Some files were not shown because too many files have changed in this diff Show More