netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-g32f-3xj9-c76c
GHSA-97m7-v625-f2m3
GHSA-fqmf-59rf-68g2
GHSA-rpmq-xq2g-32wx
GHSA-vpq4-gmw2-wmqg
GHSA-2697-96mv-3gfm
GHSA-2xjh-34g7-vxf5
GHSA-3gp8-m3mx-fm5q
GHSA-7rm3-4w6j-8xx4
GHSA-9wmc-988h-2mv2
This commit is contained in:
advisory-database[bot]
2024-12-30 15:33:25 +00:00
parent 37814485af
commit 12edded5c2
10 changed files with 199 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/06/GHSA-g32f-3xj9-c76c/GHSA-g32f-3xj9-c76c.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-863"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-97m7-v625-f2m3/GHSA-97m7-v625-f2m3.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97m7-v625-f2m3",
"modified": "2024-05-19T09:34:45Z",
"modified": "2024-12-30T15:31:57Z",
"published": "2024-05-19T09:34:45Z",
"aliases": [
"CVE-2024-35861"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:07Z"
advisories/unreviewed/2024/05/GHSA-fqmf-59rf-68g2/GHSA-fqmf-59rf-68g2.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fqmf-59rf-68g2",
"modified": "2024-05-19T09:34:45Z",
"modified": "2024-12-30T15:31:58Z",
"published": "2024-05-19T09:34:45Z",
"aliases": [
"CVE-2024-35862"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in smb2_is_network_name_deleted()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:07Z"
advisories/unreviewed/2024/05/GHSA-rpmq-xq2g-32wx/GHSA-rpmq-xq2g-32wx.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rpmq-xq2g-32wx",
"modified": "2024-05-19T09:34:46Z",
"modified": "2024-12-30T15:31:58Z",
"published": "2024-05-19T09:34:46Z",
"aliases": [
"CVE-2024-35864"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in smb2_is_valid_lease_break()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:07Z"
advisories/unreviewed/2024/05/GHSA-vpq4-gmw2-wmqg/GHSA-vpq4-gmw2-wmqg.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vpq4-gmw2-wmqg",
"modified": "2024-05-19T09:34:45Z",
"modified": "2024-12-30T15:31:58Z",
"published": "2024-05-19T09:34:45Z",
"aliases": [
"CVE-2024-35863"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential UAF in is_valid_oplock_break()\n\nSkip sessions that are being teared down (status == SES_EXITING) to\navoid UAF.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-19T09:15:07Z"
advisories/unreviewed/2024/12/GHSA-2697-96mv-3gfm/GHSA-2697-96mv-3gfm.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2697-96mv-3gfm",
"modified": "2024-12-30T15:31:59Z",
"published": "2024-12-30T15:31:59Z",
"aliases": [
"CVE-2024-50701"
],
"details": "TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50701"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/commit/ddbb2d3d94085dced50c4936fd2215af88e4a88d"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-30T15:15:10Z"
}
}
advisories/unreviewed/2024/12/GHSA-2xjh-34g7-vxf5/GHSA-2xjh-34g7-vxf5.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xjh-34g7-vxf5",
"modified": "2024-12-30T15:31:58Z",
"published": "2024-12-30T15:31:58Z",
"aliases": [
"CVE-2024-54181"
],
"details": "IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54181"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7179994"
}
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-30T14:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-3gp8-m3mx-fm5q/GHSA-3gp8-m3mx-fm5q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3gp8-m3mx-fm5q",
"modified": "2024-12-27T18:30:26Z",
"modified": "2024-12-30T15:31:58Z",
"published": "2024-12-27T18:30:26Z",
"aliases": [
"CVE-2024-12986"
@@ -23,6 +23,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12986"
},
{
"type": "WEB",
"url": "https://netsecfish.notion.site/Command-Injection-in-apmcfgupptim-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c80b9ad8cc37b93273bf6"
},
{
"type": "WEB",
"url": "https://netsecfish.notion.site/Command-Injection-in-apmcfgupptim-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c80b9ad8cc37b93273bf6?pvs=4"
advisories/unreviewed/2024/12/GHSA-7rm3-4w6j-8xx4/GHSA-7rm3-4w6j-8xx4.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rm3-4w6j-8xx4",
"modified": "2024-12-30T15:31:59Z",
"published": "2024-12-30T15:31:59Z",
"aliases": [
"CVE-2024-50702"
],
"details": "TeamPass before 3.1.3.1 does not properly check whether a mail_me (aka action_mail) operation is on behalf of an administrator or manager.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50702"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/commit/35e2b479f2379545b4132bc30a9d052ba7018bf9"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-30T15:15:10Z"
}
}
advisories/unreviewed/2024/12/GHSA-9wmc-988h-2mv2/GHSA-9wmc-988h-2mv2.json
+37
View File
@@ -0,0 +1,37 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9wmc-988h-2mv2",
"modified": "2024-12-30T15:31:59Z",
"published": "2024-12-30T15:31:59Z",
"aliases": [
"CVE-2024-50703"
],
"details": "TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50703"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/commit/c7f7f809071eaa9e04505ee79cec7049a42959e9"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.2...3.1.3.1"
},
{
"type": "WEB",
"url": "https://github.com/nilsteampassnet/TeamPass/compare/3.1.3...3.1.3.1"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-30T15:15:10Z"
}
}