netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-02-06 03:34:15 +00:00
parent d251ccaa8f
commit 138ebcbde5
50 changed files with 1423 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/01/GHSA-xr7r-f8xq-vfvv/GHSA-xr7r-f8xq-vfvv.json
+4
View File
@@ -59,6 +59,10 @@
"type": "WEB",
"url": "https://github.com/opencontainers/runc/releases/tag/v1.1.12"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYMO3BANINS6RGFQFKPRG4FIOJ7GWYTL/"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html"
advisories/unreviewed/2022/05/GHSA-pr96-m2pj-3g36/GHSA-pr96-m2pj-3g36.json
+4
View File
@@ -50,6 +50,10 @@
"type": "WEB",
"url": "http://www.debian.org/security/2014/dsa-2939"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1030270"
advisories/unreviewed/2023/12/GHSA-9vh7-c87x-8q9v/GHSA-9vh7-c87x-8q9v.json
+4
View File
@@ -41,6 +41,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2253986"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/"
},
{
"type": "WEB",
"url": "https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/"
advisories/unreviewed/2024/01/GHSA-3h6x-952r-xr8p/GHSA-3h6x-952r-xr8p.json
+4
View File
@@ -68,6 +68,10 @@
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jan/40"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-63fx-c7fv-hgj5/GHSA-63fx-c7fv-hgj5.json
+4
View File
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23849"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/"
},
{
"type": "WEB",
"url": "https://lore.kernel.org/netdev/1705715319-19199-1-git-send-email-sharath.srinivasan%40oracle.com/"
advisories/unreviewed/2024/01/GHSA-73m5-j333-fcwc/GHSA-73m5-j333-fcwc.json
+4
View File
@@ -68,6 +68,10 @@
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jan/40"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-93px-8x98-j7p2/GHSA-93px-8x98-j7p2.json
+4
View File
@@ -80,6 +80,10 @@
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jan/40"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-gfh2-2mj9-m2cx/GHSA-gfh2-2mj9-m2cx.json
+4
View File
@@ -28,6 +28,10 @@
{
"type": "WEB",
"url": "https://kernel.dance/f342de4e2f33e0e39165d8639387aa6c19dff660"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-q6j4-xjv3-96rj/GHSA-q6j4-xjv3-96rj.json
+4
View File
@@ -32,6 +32,10 @@
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT213941"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-rvwq-r5pc-g3h9/GHSA-rvwq-r5pc-g3h9.json
+4
View File
@@ -40,6 +40,10 @@
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT213941"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/05/8"
}
],
"database_specific": {
advisories/unreviewed/2024/02/GHSA-293v-32vx-9g86/GHSA-293v-32vx-9g86.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-293v-32vx-9g86",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2024-22852"
],
"details": "D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to enable telnet service via a specially crafted payload.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22852"
},
{
"type": "WEB",
"url": "https://github.com/Beckaf/vunl/blob/main/D-Link/AC750/1/1.md"
},
{
"type": "WEB",
"url": "https://www.dlink.com/en/security-bulletin/"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T02:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-3298-46rv-mjjj/GHSA-3298-46rv-mjjj.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3298-46rv-mjjj",
"modified": "2024-02-01T12:30:23Z",
"modified": "2024-02-06T03:32:59Z",
"published": "2024-02-01T12:30:23Z",
"aliases": [
"CVE-2023-51509"
advisories/unreviewed/2024/02/GHSA-4gv8-ph4v-rwjm/GHSA-4gv8-ph4v-rwjm.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4gv8-ph4v-rwjm",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2024-20813"
],
"details": "Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arbitrary code.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20813"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T03:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-66qc-rgfw-8hq2/GHSA-66qc-rgfw-8hq2.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-66qc-rgfw-8hq2",
"modified": "2024-02-01T12:30:23Z",
"modified": "2024-02-06T03:32:59Z",
"published": "2024-02-01T12:30:23Z",
"aliases": [
"CVE-2023-51691"
advisories/unreviewed/2024/02/GHSA-68r4-mq9j-2rrq/GHSA-68r4-mq9j-2rrq.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68r4-mq9j-2rrq",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2024-20810"
],
"details": "Implicit intent hijacking vulnerability in Smart Suggestions prior to SMR Feb-2024 Release 1 allows attackers to get sensitive information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20810"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T03:15:07Z"
}
}
advisories/unreviewed/2024/02/GHSA-694p-hcfm-p8q8/GHSA-694p-hcfm-p8q8.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-694p-hcfm-p8q8",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2023-6230"
],
"details": "Buffer overflow in the Address Book password process in authentication of Mobile Device Function of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6230"
},
{
"type": "WEB",
"url": "https://canon.jp/support/support-info/240205vulnerability-response"
},
{
"type": "WEB",
"url": "https://psirt.canon/advisory-information/cp2024-001/"
},
{
"type": "WEB",
"url": "https://www.canon-europe.com/support/product-security-latest-news/"
},
{
"type": "WEB",
"url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T01:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-8vw5-wvh5-q977/GHSA-8vw5-wvh5-q977.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vw5-wvh5-q977",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2024-20827"
],
"details": "Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20827"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=02"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T03:15:10Z"
}
}
advisories/unreviewed/2024/02/GHSA-8xpr-jq7w-573j/GHSA-8xpr-jq7w-573j.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8xpr-jq7w-573j",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2023-6234"
],
"details": "Buffer overflow in CPCA Color LUT Resource Download process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6234"
},
{
"type": "WEB",
"url": "https://canon.jp/support/support-info/240205vulnerability-response"
},
{
"type": "WEB",
"url": "https://psirt.canon/advisory-information/cp2024-001/"
},
{
"type": "WEB",
"url": "https://www.canon-europe.com/support/product-security-latest-news/"
},
{
"type": "WEB",
"url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T01:15:09Z"
}
}
advisories/unreviewed/2024/02/GHSA-94f4-228x-55q7/GHSA-94f4-228x-55q7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94f4-228x-55q7",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2024-20817"
],
"details": "Out out bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attackers to trigger buffer overflow.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20817"
},
{
"type": "WEB",
"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=02"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T03:15:09Z"
}
}
advisories/unreviewed/2024/02/GHSA-99jr-pjjw-hqmq/GHSA-99jr-pjjw-hqmq.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-99jr-pjjw-hqmq",
"modified": "2024-02-06T03:33:00Z",
"published": "2024-02-06T03:33:00Z",
"aliases": [
"CVE-2023-6233"
],
"details": "Buffer overflow in SLP attribute request process of Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.*: Satera LBP670C Series/Satera MF750C Series firmware v03.07 and earlier sold in Japan. Color imageCLASS LBP674C/Color imageCLASS X LBP1333C/Color imageCLASS MF750C Series/Color imageCLASS X MF1333C Series firmware v03.07 and earlier sold in US. i-SENSYS LBP673Cdw/C1333P/i-SENSYS MF750C Series/C1333i Series firmware v03.07 and earlier sold in Europe.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6233"
},
{
"type": "WEB",
"url": "https://canon.jp/support/support-info/240205vulnerability-response"
},
{
"type": "WEB",
"url": "https://psirt.canon/advisory-information/cp2024-001/"
},
{
"type": "WEB",
"url": "https://www.canon-europe.com/support/product-security-latest-news/"
},
{
"type": "WEB",
"url": "https://www.usa.canon.com/support/canon-product-advisories/Service-Notice-Regarding-Vulnerability-Measure-Against-Buffer-Overflow-for-Laser-Printers-and-Small-Office-Multifunctional-Printers"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-06T01:15:08Z"
}
}

Some files were not shown because too many files have changed in this diff Show More