diff --git a/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json b/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json index a4116a33a4b..231f15179ff 100644 --- a/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json +++ b/advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-93px-8x98-j7p2", - "modified": "2024-02-11T06:30:27Z", + "modified": "2024-02-21T09:31:00Z", "published": "2024-01-23T03:31:08Z", "aliases": [ "CVE-2024-23222" @@ -57,6 +57,10 @@ "type": "WEB", "url": "https://support.apple.com/en-us/HT214063" }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214070" + }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2024/Feb/6" diff --git a/advisories/unreviewed/2024/02/GHSA-2c3h-gr5x-3fh2/GHSA-2c3h-gr5x-3fh2.json b/advisories/unreviewed/2024/02/GHSA-2c3h-gr5x-3fh2/GHSA-2c3h-gr5x-3fh2.json new file mode 100644 index 00000000000..fdbacfe9ad3 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2c3h-gr5x-3fh2/GHSA-2c3h-gr5x-3fh2.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2c3h-gr5x-3fh2", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42843" + ], + "details": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, Safari 17.1, macOS Sonoma 14.1. Visiting a malicious website may lead to address bar spoofing.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42843" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213981" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213986" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-2cmc-x892-vrfq/GHSA-2cmc-x892-vrfq.json b/advisories/unreviewed/2024/02/GHSA-2cmc-x892-vrfq/GHSA-2cmc-x892-vrfq.json new file mode 100644 index 00000000000..cc6e080e1ec --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-2cmc-x892-vrfq/GHSA-2cmc-x892-vrfq.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2cmc-x892-vrfq", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42836" + ], + "details": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42836" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214037" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214038" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json b/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json index acc9745d6f2..08206cb5b8f 100644 --- a/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json +++ b/advisories/unreviewed/2024/02/GHSA-2q9p-5gw5-gr76/GHSA-2q9p-5gw5-gr76.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2q9p-5gw5-gr76", - "modified": "2024-02-20T09:30:32Z", + "modified": "2024-02-21T09:31:00Z", "published": "2024-02-20T09:30:32Z", "aliases": [ "CVE-2024-25973" @@ -21,6 +21,10 @@ { "type": "WEB", "url": "https://r.sec-consult.com/openolat" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Feb/23" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/02/GHSA-39wm-55xr-v5rc/GHSA-39wm-55xr-v5rc.json b/advisories/unreviewed/2024/02/GHSA-39wm-55xr-v5rc/GHSA-39wm-55xr-v5rc.json new file mode 100644 index 00000000000..cacd266f689 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-39wm-55xr-v5rc/GHSA-39wm-55xr-v5rc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-39wm-55xr-v5rc", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24849" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects Quicksand Post Filter jQuery Plugin: from n/a through 3.1.1.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24849" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/quicksand-jquery-post-filter/wordpress-quicksand-post-filter-jquery-plugin-3-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:55Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-3v2h-jhg6-jj7v/GHSA-3v2h-jhg6-jj7v.json b/advisories/unreviewed/2024/02/GHSA-3v2h-jhg6-jj7v/GHSA-3v2h-jhg6-jj7v.json new file mode 100644 index 00000000000..8b9f9793085 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-3v2h-jhg6-jj7v/GHSA-3v2h-jhg6-jj7v.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3v2h-jhg6-jj7v", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42952" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42952" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214038" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-48j9-xh9v-wh6m/GHSA-48j9-xh9v-wh6m.json b/advisories/unreviewed/2024/02/GHSA-48j9-xh9v-wh6m/GHSA-48j9-xh9v-wh6m.json new file mode 100644 index 00000000000..8f6fd922020 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-48j9-xh9v-wh6m/GHSA-48j9-xh9v-wh6m.json @@ -0,0 +1,55 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-48j9-xh9v-wh6m", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42848" + ], + "details": "The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. Processing a maliciously crafted image may lead to heap corruption.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42848" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213981" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-5476-44cw-r459/GHSA-5476-44cw-r459.json b/advisories/unreviewed/2024/02/GHSA-5476-44cw-r459/GHSA-5476-44cw-r459.json new file mode 100644 index 00000000000..ba402938059 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-5476-44cw-r459/GHSA-5476-44cw-r459.json @@ -0,0 +1,55 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5476-44cw-r459", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42873" + ], + "details": "The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42873" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213981" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-578w-fvq5-3wc2/GHSA-578w-fvq5-3wc2.json b/advisories/unreviewed/2024/02/GHSA-578w-fvq5-3wc2/GHSA-578w-fvq5-3wc2.json new file mode 100644 index 00000000000..fdcc4cb6011 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-578w-fvq5-3wc2/GHSA-578w-fvq5-3wc2.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-578w-fvq5-3wc2", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24837" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Frédéric GILLES FG PrestaShop to WooCommerce, Frédéric GILLES FG Drupal to WordPress, Frédéric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24837" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/fg-drupal-to-wp/wordpress-fg-drupal-to-wordpress-plugin-3-67-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/fg-joomla-to-wordpress/wordpress-fg-joomla-to-wordpress-plugin-4-15-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/fg-prestashop-to-woocommerce/wordpress-fg-prestashop-to-woocommerce-plugin-4-44-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-5wjx-fx3x-22c6/GHSA-5wjx-fx3x-22c6.json b/advisories/unreviewed/2024/02/GHSA-5wjx-fx3x-22c6/GHSA-5wjx-fx3x-22c6.json new file mode 100644 index 00000000000..3f2980bc3b8 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-5wjx-fx3x-22c6/GHSA-5wjx-fx3x-22c6.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5wjx-fx3x-22c6", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-52442" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate session id and tree id in compound request\n\n`smb2_get_msg()` in smb2_get_ksmbd_tcon() and smb2_check_user_session()\nwill always return the first request smb2 header in a compound request.\nif `SMB2_TREE_CONNECT_HE` is the first command in compound request, will\nreturn 0, i.e. The tree id check is skipped.\nThis patch use ksmbd_req_buf_next() to get current command in compound.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52442" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/017d85c94f02090a87f4a473dbe0d6ee0da72693" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/3df0411e132ee74a87aa13142dfd2b190275332e" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4c2b350b2e269e3fd17bbfa42de1b42775b777ac" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/becb5191d1d5fdfca0198a2e37457bbbf4fe266f" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:45Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-633m-2q58-q23r/GHSA-633m-2q58-q23r.json b/advisories/unreviewed/2024/02/GHSA-633m-2q58-q23r/GHSA-633m-2q58-q23r.json new file mode 100644 index 00000000000..e1198dad96a --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-633m-2q58-q23r/GHSA-633m-2q58-q23r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-633m-2q58-q23r", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-25905" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Mondula GmbH Multi Step Form.This issue affects Multi Step Form: from n/a through 1.7.18.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25905" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/multi-step-form/wordpress-multi-step-form-plugin-1-7-17-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:57Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-67gj-w6q2-8434/GHSA-67gj-w6q2-8434.json b/advisories/unreviewed/2024/02/GHSA-67gj-w6q2-8434/GHSA-67gj-w6q2-8434.json new file mode 100644 index 00000000000..c1ed86369fd --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-67gj-w6q2-8434/GHSA-67gj-w6q2-8434.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-67gj-w6q2-8434", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24802" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive Tables: from n/a through 4.1.9.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24802" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/jtrt-responsive-tables/wordpress-jtrt-responsive-tables-plugin-4-1-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:46Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-7279-4rvf-3vm5/GHSA-7279-4rvf-3vm5.json b/advisories/unreviewed/2024/02/GHSA-7279-4rvf-3vm5/GHSA-7279-4rvf-3vm5.json new file mode 100644 index 00000000000..a2ab456f222 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-7279-4rvf-3vm5/GHSA-7279-4rvf-3vm5.json @@ -0,0 +1,59 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7279-4rvf-3vm5", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42823" + ], + "details": "The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42823" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213981" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8g3f-2wpw-9j4h/GHSA-8g3f-2wpw-9j4h.json b/advisories/unreviewed/2024/02/GHSA-8g3f-2wpw-9j4h/GHSA-8g3f-2wpw-9j4h.json new file mode 100644 index 00000000000..78dd152a389 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8g3f-2wpw-9j4h/GHSA-8g3f-2wpw-9j4h.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8g3f-2wpw-9j4h", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42946" + ], + "details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to leak sensitive user information.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42946" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8hfg-rm42-2g24/GHSA-8hfg-rm42-2g24.json b/advisories/unreviewed/2024/02/GHSA-8hfg-rm42-2g24/GHSA-8hfg-rm42-2g24.json new file mode 100644 index 00000000000..a70d65903e1 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8hfg-rm42-2g24/GHSA-8hfg-rm42-2g24.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8hfg-rm42-2g24", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42860" + ], + "details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42860" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8j5h-7226-33mj/GHSA-8j5h-7226-33mj.json b/advisories/unreviewed/2024/02/GHSA-8j5h-7226-33mj/GHSA-8j5h-7226-33mj.json new file mode 100644 index 00000000000..7a4f05add01 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8j5h-7226-33mj/GHSA-8j5h-7226-33mj.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8j5h-7226-33mj", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42855" + ], + "details": "This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to silently persist an Apple ID on an erased device.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42855" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8wcv-54w6-5c6v/GHSA-8wcv-54w6-5c6v.json b/advisories/unreviewed/2024/02/GHSA-8wcv-54w6-5c6v/GHSA-8wcv-54w6-5c6v.json new file mode 100644 index 00000000000..688cb77d312 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8wcv-54w6-5c6v/GHSA-8wcv-54w6-5c6v.json @@ -0,0 +1,51 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8wcv-54w6-5c6v", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42834" + ], + "details": "A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42834" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214037" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214038" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-9hf7-7328-32vm/GHSA-9hf7-7328-32vm.json b/advisories/unreviewed/2024/02/GHSA-9hf7-7328-32vm/GHSA-9hf7-7328-32vm.json new file mode 100644 index 00000000000..26c0a3fabb0 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-9hf7-7328-32vm/GHSA-9hf7-7328-32vm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9hf7-7328-32vm", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-1081" + ], + "details": "The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1081" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3038174%40interactive-3d-flipbook-powered-physics-engine&new=3038174%40interactive-3d-flipbook-powered-physics-engine&sfp_email=&sfph_mail=" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/807eadff-b39e-4d7a-9b0a-06fc18a90626?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:53Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-9rfw-9cwj-2c6f/GHSA-9rfw-9cwj-2c6f.json b/advisories/unreviewed/2024/02/GHSA-9rfw-9cwj-2c6f/GHSA-9rfw-9cwj-2c6f.json new file mode 100644 index 00000000000..bd699a40271 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-9rfw-9cwj-2c6f/GHSA-9rfw-9cwj-2c6f.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9rfw-9cwj-2c6f", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42953" + ], + "details": "A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42953" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-c537-pf3w-23p5/GHSA-c537-pf3w-23p5.json b/advisories/unreviewed/2024/02/GHSA-c537-pf3w-23p5/GHSA-c537-pf3w-23p5.json new file mode 100644 index 00000000000..70c5674d522 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-c537-pf3w-23p5/GHSA-c537-pf3w-23p5.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c537-pf3w-23p5", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42939" + ], + "details": "A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user's private browsing activity may be unexpectedly saved in the App Privacy Report.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42939" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-f8qw-xx6m-cr9m/GHSA-f8qw-xx6m-cr9m.json b/advisories/unreviewed/2024/02/GHSA-f8qw-xx6m-cr9m/GHSA-f8qw-xx6m-cr9m.json new file mode 100644 index 00000000000..70925ec1dcb --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-f8qw-xx6m-cr9m/GHSA-f8qw-xx6m-cr9m.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f8qw-xx6m-cr9m", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24872" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a through 7.0.5.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24872" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/themify-builder/wordpress-themify-builder-plugin-7-0-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:55Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-ffc2-v2cp-6fq5/GHSA-ffc2-v2cp-6fq5.json b/advisories/unreviewed/2024/02/GHSA-ffc2-v2cp-6fq5/GHSA-ffc2-v2cp-6fq5.json new file mode 100644 index 00000000000..c41ca59d64d --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-ffc2-v2cp-6fq5/GHSA-ffc2-v2cp-6fq5.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ffc2-v2cp-6fq5", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42928" + ], + "details": "The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be able to gain elevated privileges.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42928" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json b/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json new file mode 100644 index 00000000000..ee76ce969a2 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ffv2-94mg-4j9c", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42835" + ], + "details": "A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to access user data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42835" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json b/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json index d1985d85704..cb6eea21e1e 100644 --- a/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json +++ b/advisories/unreviewed/2024/02/GHSA-frwq-jm7h-q2q2/GHSA-frwq-jm7h-q2q2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-frwq-jm7h-q2q2", - "modified": "2024-02-20T09:30:32Z", + "modified": "2024-02-21T09:31:00Z", "published": "2024-02-20T09:30:32Z", "aliases": [ "CVE-2024-25974" @@ -21,6 +21,10 @@ { "type": "WEB", "url": "https://r.sec-consult.com/openolat" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Feb/23" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/02/GHSA-gqq2-gw3j-qr3c/GHSA-gqq2-gw3j-qr3c.json b/advisories/unreviewed/2024/02/GHSA-gqq2-gw3j-qr3c/GHSA-gqq2-gw3j-qr3c.json new file mode 100644 index 00000000000..c59b21b1b03 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-gqq2-gw3j-qr3c/GHSA-gqq2-gw3j-qr3c.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gqq2-gw3j-qr3c", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42951" + ], + "details": "The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and iPadOS 17.1. A user may be unable to delete browsing history items.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42951" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-gqvf-8g7j-7gh5/GHSA-gqvf-8g7j-7gh5.json b/advisories/unreviewed/2024/02/GHSA-gqvf-8g7j-7gh5/GHSA-gqvf-8g7j-7gh5.json new file mode 100644 index 00000000000..47ffc101691 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-gqvf-8g7j-7gh5/GHSA-gqvf-8g7j-7gh5.json @@ -0,0 +1,55 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gqvf-8g7j-7gh5", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42942" + ], + "details": "This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. A malicious app may be able to gain root privileges.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42942" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213981" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-gr5c-gf9x-ww6q/GHSA-gr5c-gf9x-ww6q.json b/advisories/unreviewed/2024/02/GHSA-gr5c-gf9x-ww6q/GHSA-gr5c-gf9x-ww6q.json new file mode 100644 index 00000000000..7904c3a94e3 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-gr5c-gf9x-ww6q/GHSA-gr5c-gf9x-ww6q.json @@ -0,0 +1,51 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gr5c-gf9x-ww6q", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-52440" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()\n\nIf authblob->SessionKey.Length is bigger than session key\nsize(CIFS_KEY_SIZE), slub overflow can happen in key exchange codes.\ncifs_arc4_crypt copy to session key array from SessionKey from client.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52440" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/30fd6521b2fbd9b767e438e31945e5ea3e3a2fba" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/4b081ce0d830b684fdf967abc3696d1261387254" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/7f1d6cb0eb6af3a8088dc24b7ddee9a9711538c4" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/bd554ed4fdc3d38404a1c43d428432577573e809" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ecd7e1c562cb08e41957fcd4b0e404de5ab38e20" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:45Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-h3cg-9jm8-7468/GHSA-h3cg-9jm8-7468.json b/advisories/unreviewed/2024/02/GHSA-h3cg-9jm8-7468/GHSA-h3cg-9jm8-7468.json new file mode 100644 index 00000000000..9bc9d9622fb --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-h3cg-9jm8-7468/GHSA-h3cg-9jm8-7468.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h3cg-9jm8-7468", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42858" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42858" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-hfmh-5qwh-5g5h/GHSA-hfmh-5qwh-5g5h.json b/advisories/unreviewed/2024/02/GHSA-hfmh-5qwh-5g5h/GHSA-hfmh-5qwh-5g5h.json new file mode 100644 index 00000000000..d32c43b97c6 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-hfmh-5qwh-5g5h/GHSA-hfmh-5qwh-5g5h.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hfmh-5qwh-5g5h", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42877" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42877" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-j6qv-9fc5-fqqg/GHSA-j6qv-9fc5-fqqg.json b/advisories/unreviewed/2024/02/GHSA-j6qv-9fc5-fqqg/GHSA-j6qv-9fc5-fqqg.json new file mode 100644 index 00000000000..e689eb1d5a5 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-j6qv-9fc5-fqqg/GHSA-j6qv-9fc5-fqqg.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j6qv-9fc5-fqqg", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42945" + ], + "details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may gain unauthorized access to Bluetooth.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42945" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:51Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-jhj9-jh88-9vjh/GHSA-jhj9-jh88-9vjh.json b/advisories/unreviewed/2024/02/GHSA-jhj9-jh88-9vjh/GHSA-jhj9-jh88-9vjh.json new file mode 100644 index 00000000000..8192034a8a5 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-jhj9-jh88-9vjh/GHSA-jhj9-jh88-9vjh.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jhj9-jh88-9vjh", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-0593" + ], + "details": "The Simple Job Board plugin for WordPress is vulnerable to unauthorized access of data| due to insufficient authorization checking on the fetch_quick_job() function in all versions up to, and including, 2.10.8. This makes it possible for unauthenticated attackers to fetch arbitrary posts, which can be password protected or private and contain sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0593" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3038476/simple-job-board/trunk/includes/class-simple-job-board-ajax.php" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/0a28a161-3dbc-4ef0-a2ce-4c102cf3cbb0?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:52Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-m658-5f72-86ff/GHSA-m658-5f72-86ff.json b/advisories/unreviewed/2024/02/GHSA-m658-5f72-86ff/GHSA-m658-5f72-86ff.json new file mode 100644 index 00000000000..3cbb073c2a8 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-m658-5f72-86ff/GHSA-m658-5f72-86ff.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m658-5f72-86ff", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42838" + ], + "details": "An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42838" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214037" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT214038" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pp42-3grw-xrgx/GHSA-pp42-3grw-xrgx.json b/advisories/unreviewed/2024/02/GHSA-pp42-3grw-xrgx/GHSA-pp42-3grw-xrgx.json new file mode 100644 index 00000000000..4c56bbb9119 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pp42-3grw-xrgx/GHSA-pp42-3grw-xrgx.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pp42-3grw-xrgx", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42853" + ], + "details": "A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42853" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-pvgw-2qh3-cj63/GHSA-pvgw-2qh3-cj63.json b/advisories/unreviewed/2024/02/GHSA-pvgw-2qh3-cj63/GHSA-pvgw-2qh3-cj63.json new file mode 100644 index 00000000000..88431df2d63 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-pvgw-2qh3-cj63/GHSA-pvgw-2qh3-cj63.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pvgw-2qh3-cj63", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42878" + ], + "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42878" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-r59f-4p8m-j64c/GHSA-r59f-4p8m-j64c.json b/advisories/unreviewed/2024/02/GHSA-r59f-4p8m-j64c/GHSA-r59f-4p8m-j64c.json new file mode 100644 index 00000000000..f422e79575b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-r59f-4p8m-j64c/GHSA-r59f-4p8m-j64c.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r59f-4p8m-j64c", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-25904" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and Styles.This issue affects TinyMCE and TinyMCE Advanced Professsional Formats and Styles: from n/a through 1.1.2.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25904" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/tinymce-and-tinymce-advanced-professsional-formats-and-styles/wordpress-tinymce-and-tinymce-advanced-professsional-formats-and-styles-plugin-1-1-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:56Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-rj5v-wjwr-jxjq/GHSA-rj5v-wjwr-jxjq.json b/advisories/unreviewed/2024/02/GHSA-rj5v-wjwr-jxjq/GHSA-rj5v-wjwr-jxjq.json new file mode 100644 index 00000000000..09dbe4645a3 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-rj5v-wjwr-jxjq/GHSA-rj5v-wjwr-jxjq.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rj5v-wjwr-jxjq", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42839" + ], + "details": "This issue was addressed with improved state management. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42839" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213982" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213987" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213988" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-rrw6-96cr-28x2/GHSA-rrw6-96cr-28x2.json b/advisories/unreviewed/2024/02/GHSA-rrw6-96cr-28x2/GHSA-rrw6-96cr-28x2.json new file mode 100644 index 00000000000..dd7a35a12ab --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-rrw6-96cr-28x2/GHSA-rrw6-96cr-28x2.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rrw6-96cr-28x2", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24798" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24798" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/debug/wordpress-debug-plugin-1-10-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:45Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-rrxc-cq4j-w35w/GHSA-rrxc-cq4j-w35w.json b/advisories/unreviewed/2024/02/GHSA-rrxc-cq4j-w35w/GHSA-rrxc-cq4j-w35w.json new file mode 100644 index 00000000000..7f2f5c31aa5 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-rrxc-cq4j-w35w/GHSA-rrxc-cq4j-w35w.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rrxc-cq4j-w35w", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42859" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42859" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-rx74-fp3h-g8gv/GHSA-rx74-fp3h-g8gv.json b/advisories/unreviewed/2024/02/GHSA-rx74-fp3h-g8gv/GHSA-rx74-fp3h-g8gv.json new file mode 100644 index 00000000000..632e046ffce --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-rx74-fp3h-g8gv/GHSA-rx74-fp3h-g8gv.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rx74-fp3h-g8gv", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24876" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n/a through 1.12.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24876" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/admin-menu-editor/wordpress-admin-menu-editor-plugin-1-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:56Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-vfw6-5cxp-x52m/GHSA-vfw6-5cxp-x52m.json b/advisories/unreviewed/2024/02/GHSA-vfw6-5cxp-x52m/GHSA-vfw6-5cxp-x52m.json new file mode 100644 index 00000000000..43b016fa1b6 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-vfw6-5cxp-x52m/GHSA-vfw6-5cxp-x52m.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vfw6-5cxp-x52m", + "modified": "2024-02-21T09:31:00Z", + "published": "2024-02-21T09:31:00Z", + "aliases": [ + "CVE-2023-42840" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42840" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:48Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-ww2r-4hmc-9mh3/GHSA-ww2r-4hmc-9mh3.json b/advisories/unreviewed/2024/02/GHSA-ww2r-4hmc-9mh3/GHSA-ww2r-4hmc-9mh3.json new file mode 100644 index 00000000000..b61ef053e33 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-ww2r-4hmc-9mh3/GHSA-ww2r-4hmc-9mh3.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ww2r-4hmc-9mh3", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-42889" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to bypass certain Privacy preferences.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42889" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213983" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213984" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/HT213985" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:50Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-x6xm-ghm9-28cr/GHSA-x6xm-ghm9-28cr.json b/advisories/unreviewed/2024/02/GHSA-x6xm-ghm9-28cr/GHSA-x6xm-ghm9-28cr.json new file mode 100644 index 00000000000..025ee262469 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-x6xm-ghm9-28cr/GHSA-x6xm-ghm9-28cr.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x6xm-ghm9-28cr", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2023-52441" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix out of bounds in init_smb2_rsp_hdr()\n\nIf client send smb2 negotiate request and then send smb1 negotiate\nrequest, init_smb2_rsp_hdr is called for smb1 negotiate request since\nneed_neg is set to false. This patch ignore smb1 packets after ->need_neg\nis set to false.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52441" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/330d900620dfc9893011d725b3620cd2ee0bc2bc" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/536bb492d39bb6c080c92f31e8a55fe9934f452b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5c0df9d30c289d6b9d7d44e2a450de2f8e3cf40b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/aa669ef229ae8dd779da9caa24e254964545895f" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T08:15:45Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-xhch-ppc4-w2v4/GHSA-xhch-ppc4-w2v4.json b/advisories/unreviewed/2024/02/GHSA-xhch-ppc4-w2v4/GHSA-xhch-ppc4-w2v4.json new file mode 100644 index 00000000000..859552ea02b --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-xhch-ppc4-w2v4/GHSA-xhch-ppc4-w2v4.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xhch-ppc4-w2v4", + "modified": "2024-02-21T09:31:01Z", + "published": "2024-02-21T09:31:01Z", + "aliases": [ + "CVE-2024-24843" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue affects PowerPack Pro for Elementor: from n/a before 2.10.8.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24843" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/vulnerability/powerpack-elements/wordpress-powerpack-pro-for-elementor-plugin-2-10-8-csrf-leading-to-plugin-settings-change-xss-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-352" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T07:15:54Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-xpmp-64jj-f5gg/GHSA-xpmp-64jj-f5gg.json b/advisories/unreviewed/2024/02/GHSA-xpmp-64jj-f5gg/GHSA-xpmp-64jj-f5gg.json index 710ee0a2c67..88fc0799b47 100644 --- a/advisories/unreviewed/2024/02/GHSA-xpmp-64jj-f5gg/GHSA-xpmp-64jj-f5gg.json +++ b/advisories/unreviewed/2024/02/GHSA-xpmp-64jj-f5gg/GHSA-xpmp-64jj-f5gg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-xpmp-64jj-f5gg", - "modified": "2024-02-10T06:30:17Z", + "modified": "2024-02-21T09:31:00Z", "published": "2024-02-02T06:30:31Z", "aliases": [ "CVE-2023-46045" @@ -32,6 +32,10 @@ { "type": "WEB", "url": "https://www.openwall.com/lists/oss-security/2024/02/01/2" + }, + { + "type": "WEB", + "url": "http://seclists.org/fulldisclosure/2024/Feb/24" } ], "database_specific": {