netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-05 15:31:58 +00:00
parent c54a595765
commit 1324c5ede7
63 changed files with 2391 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-8f46-hh28-cq8h/GHSA-8f46-hh28-cq8h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8f46-hh28-cq8h",
"modified": "2024-06-07T15:30:40Z",
"modified": "2024-11-05T15:30:33Z",
"published": "2024-06-07T15:30:40Z",
"aliases": [
"CVE-2024-36788"
],
"details": "Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-07T15:15:50Z"
advisories/unreviewed/2024/10/GHSA-p38m-32qc-f4cg/GHSA-p38m-32qc-f4cg.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-259"
"CWE-259",
"CWE-798"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-242c-pm42-hqwq/GHSA-242c-pm42-hqwq.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-242c-pm42-hqwq",
"modified": "2024-11-05T15:30:38Z",
"published": "2024-11-05T15:30:38Z",
"aliases": [
"CVE-2024-52015"
],
"details": "Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52015"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_43/43.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:26Z"
}
}
advisories/unreviewed/2024/11/GHSA-387f-x58r-3vw7/GHSA-387f-x58r-3vw7.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-387f-x58r-3vw7",
"modified": "2024-11-05T15:30:36Z",
"published": "2024-11-05T15:30:36Z",
"aliases": [
"CVE-2024-50993"
],
"details": "Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50993"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_39/39.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:23Z"
}
}
advisories/unreviewed/2024/11/GHSA-4f3c-9wh3-6773/GHSA-4f3c-9wh3-6773.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4f3c-9wh3-6773",
"modified": "2024-11-05T15:30:35Z",
"published": "2024-11-05T15:30:35Z",
"aliases": [
"CVE-2024-10841"
],
"details": "A vulnerability classified as critical was found in romadebrian WEB-Sekolah 1.0. Affected by this vulnerability is an unknown functionality of the file /Proses_Kirim.php of the component Mail Handler. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10841"
},
{
"type": "WEB",
"url": "https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.283087"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.283087"
}
],
"database_specific": {
"cwe_ids": [
"CWE-707"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T14:15:14Z"
}
}
advisories/unreviewed/2024/11/GHSA-4fw5-75q7-v8g7/GHSA-4fw5-75q7-v8g7.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4fw5-75q7-v8g7",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-50996"
],
"details": "Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50996"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_37/37.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:23Z"
}
}
advisories/unreviewed/2024/11/GHSA-4r2j-6r55-j9g2/GHSA-4r2j-6r55-j9g2.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r2j-6r55-j9g2",
"modified": "2024-11-05T15:30:38Z",
"published": "2024-11-05T15:30:38Z",
"aliases": [
"CVE-2024-52018"
],
"details": "Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at genie_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52018"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_53/53.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:26Z"
}
}
advisories/unreviewed/2024/11/GHSA-5fv9-2vmx-f4m6/GHSA-5fv9-2vmx-f4m6.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5fv9-2vmx-f4m6",
"modified": "2024-11-05T15:30:34Z",
"published": "2024-11-05T15:30:34Z",
"aliases": [
"CVE-2024-10840"
],
"details": "A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akun_edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10840"
},
{
"type": "WEB",
"url": "https://github.com/2537463005/a/blob/main/WEB-Sekolah%E5%90%8E%E5%8F%B0%E5%AD%98%E5%82%A8%E5%9E%8Bxss.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.283086"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.283086"
}
],
"database_specific": {
"cwe_ids": [
"CWE-707"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T13:15:03Z"
}
}
advisories/unreviewed/2024/11/GHSA-5q3c-q96r-vr6x/GHSA-5q3c-q96r-vr6x.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5q3c-q96r-vr6x",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-51001"
],
"details": "Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51001"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_41/41.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:24Z"
}
}
advisories/unreviewed/2024/11/GHSA-5x44-vxm3-fqv4/GHSA-5x44-vxm3-fqv4.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5x44-vxm3-fqv4",
"modified": "2024-11-05T15:30:36Z",
"published": "2024-11-05T15:30:36Z",
"aliases": [
"CVE-2024-50995"
],
"details": "Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50995"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_40/40.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:23Z"
}
}
advisories/unreviewed/2024/11/GHSA-683q-j7j9-j863/GHSA-683q-j7j9-j863.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-683q-j7j9-j863",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-51007"
],
"details": "Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51007"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_54/54.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:24Z"
}
}
advisories/unreviewed/2024/11/GHSA-79wp-x2px-mc9v/GHSA-79wp-x2px-mc9v.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79wp-x2px-mc9v",
"modified": "2024-11-05T15:30:38Z",
"published": "2024-11-05T15:30:38Z",
"aliases": [
"CVE-2024-52023"
],
"details": "Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52023"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_52/52.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:27Z"
}
}
advisories/unreviewed/2024/11/GHSA-7h26-mwqv-pxpv/GHSA-7h26-mwqv-pxpv.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7h26-mwqv-pxpv",
"modified": "2024-11-05T15:30:38Z",
"published": "2024-11-05T15:30:38Z",
"aliases": [
"CVE-2024-52029"
],
"details": "Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52029"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_60/60.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:27Z"
}
}
advisories/unreviewed/2024/11/GHSA-7mpv-9qrc-wxrj/GHSA-7mpv-9qrc-wxrj.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7mpv-9qrc-wxrj",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-51017"
],
"details": "Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51017"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear6/vuln_59/59.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:25Z"
}
}
advisories/unreviewed/2024/11/GHSA-88m6-45c8-3f97/GHSA-88m6-45c8-3f97.json
+46
View File
@@ -0,0 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-88m6-45c8-3f97",
"modified": "2024-11-05T15:30:34Z",
"published": "2024-11-05T15:30:34Z",
"aliases": [
"CVE-2024-10329"
],
"details": "The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10329"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/ultimate-bootstrap-elements-for-elementor/trunk/inc/functions/core.php#L239"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3176562"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3af83ec2-9ebb-4cca-8523-8fe9b1517825?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T14:15:13Z"
}
}
advisories/unreviewed/2024/11/GHSA-8cmh-6vqw-c3j2/GHSA-8cmh-6vqw-c3j2.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8cmh-6vqw-c3j2",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-50997"
],
"details": "Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50997"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_43/43.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:23Z"
}
}
advisories/unreviewed/2024/11/GHSA-8vx7-5vg4-3p7c/GHSA-8vx7-5vg4-3p7c.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vx7-5vg4-3p7c",
"modified": "2024-11-05T15:30:38Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-51022"
],
"details": "Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51022"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear5/vuln_55/55.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:25Z"
}
}
advisories/unreviewed/2024/11/GHSA-927w-m77q-8hq6/GHSA-927w-m77q-8hq6.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-927w-m77q-8hq6",
"modified": "2024-11-05T15:30:36Z",
"published": "2024-11-05T15:30:36Z",
"aliases": [
"CVE-2024-50994"
],
"details": "Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, and ipv6_lan_length parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50994"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_36/36.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:23Z"
}
}
advisories/unreviewed/2024/11/GHSA-986m-4392-3r23/GHSA-986m-4392-3r23.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-986m-4392-3r23",
"modified": "2024-11-05T15:30:36Z",
"published": "2024-11-05T15:30:36Z",
"aliases": [
"CVE-2024-10845"
],
"details": "A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file book_detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10845"
},
{
"type": "WEB",
"url": "https://github.com/hbuzs/CVE/issues/3"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.283090"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.283090"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.436999"
}
],
"database_specific": {
"cwe_ids": [
"CWE-707"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:22Z"
}
}
advisories/unreviewed/2024/11/GHSA-c5r9-g2wg-76jp/GHSA-c5r9-g2wg-76jp.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c5r9-g2wg-76jp",
"modified": "2024-11-05T15:30:37Z",
"published": "2024-11-05T15:30:37Z",
"aliases": [
"CVE-2024-51003"
],
"details": "Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51003"
},
{
"type": "WEB",
"url": "https://github.com/wudipjq/my_vuln/blob/main/Netgear4/vuln_49/49.md"
},
{
"type": "WEB",
"url": "https://www.netgear.com/about/security"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-05T15:15:24Z"
}
}

Some files were not shown because too many files have changed in this diff Show More