netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-4v2m-666w-ffm3
GHSA-3whw-wqrp-r5hq
GHSA-722x-w6hg-5675
GHSA-84x7-6ff7-9cj2
GHSA-mxhr-5h76-4875
GHSA-r29w-mcfc-r8cc
GHSA-rpfq-qgpp-7qm9
This commit is contained in:
advisory-database[bot]
2024-09-06 09:34:17 +00:00
parent 18a91b69d7
commit 1499adea3a
7 changed files with 304 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-4v2m-666w-ffm3/GHSA-4v2m-666w-ffm3.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4v2m-666w-ffm3",
"modified": "2024-06-03T18:55:29Z",
"modified": "2024-09-06T09:32:30Z",
"published": "2024-02-05T18:31:37Z",
"aliases": [
"CVE-2024-0323"
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1240",
"CWE-327"
],
"severity": "CRITICAL",
advisories/unreviewed/2024/09/GHSA-3whw-wqrp-r5hq/GHSA-3whw-wqrp-r5hq.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3whw-wqrp-r5hq",
"modified": "2024-09-06T09:32:30Z",
"published": "2024-09-06T09:32:30Z",
"aliases": [
"CVE-2024-7349"
],
"details": "The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to blind SQL Injection via the 'order' parameter in all versions up to, and including, 7.7.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7349"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3139798/lifterlms/tags/7.7.6/includes/abstracts/abstract.llms.database.query.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3a096506-b18e-419c-808b-6099baa628ce?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T07:15:02Z"
}
}
advisories/unreviewed/2024/09/GHSA-722x-w6hg-5675/GHSA-722x-w6hg-5675.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-722x-w6hg-5675",
"modified": "2024-09-06T09:32:31Z",
"published": "2024-09-06T09:32:31Z",
"aliases": [
"CVE-2023-52916"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: aspeed: Fix memory overwrite if timing is 1600x900\n\nWhen capturing 1600x900, system could crash when system memory usage is\ntight.\n\nThe way to reproduce this issue:\n1. Use 1600x900 to display on host\n2. Mount ISO through 'Virtual media' on OpenBMC's web\n3. Run script as below on host to do sha continuously\n #!/bin/bash\n while [ [1] ];\n do\n\tfind /media -type f -printf '\"%h/%f\"\\n' | xargs sha256sum\n done\n4. Open KVM on OpenBMC's web\n\nThe size of macro block captured is 8x8. Therefore, we should make sure\nthe height of src-buf is 8 aligned to fix this issue.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52916"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/c281355068bc258fd619c5aefd978595bede7bfe"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T09:15:03Z"
}
}
advisories/unreviewed/2024/09/GHSA-84x7-6ff7-9cj2/GHSA-84x7-6ff7-9cj2.json
+62
View File
@@ -0,0 +1,62 @@
{
"schema_version": "1.4.0",
"id": "GHSA-84x7-6ff7-9cj2",
"modified": "2024-09-06T09:32:31Z",
"published": "2024-09-06T09:32:31Z",
"aliases": [
"CVE-2024-8317"
],
"details": "The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad_alignment’ attribute in all versions up to, and including, 2.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8317"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L2922"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L3020"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wpadcenter/trunk/admin/class-wpadcenter-admin.php#L3127"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3146736"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3146736/#file6"
},
{
"type": "WEB",
"url": "https://wordpress.org/plugins/wpadcenter/#developers"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ac7f95c7-2159-4327-ba09-da7721f1312e?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T07:15:03Z"
}
}
advisories/unreviewed/2024/09/GHSA-mxhr-5h76-4875/GHSA-mxhr-5h76-4875.json
+46
View File
@@ -0,0 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxhr-5h76-4875",
"modified": "2024-09-06T09:32:31Z",
"published": "2024-09-06T09:32:31Z",
"aliases": [
"CVE-2024-8427"
],
"details": "The Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_global_settings and process_form_edit functions in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings and forms.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8427"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/frontend-post-submission-manager-lite/tags/1.2.2/includes/classes/admin/class-fpsml-ajax-admin.php#L25"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3147218/frontend-post-submission-manager-lite/trunk/includes/classes/admin/class-fpsml-ajax-admin.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e84b68b6-1ce8-45fb-823f-a61158aa4d21?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T07:15:03Z"
}
}
advisories/unreviewed/2024/09/GHSA-r29w-mcfc-r8cc/GHSA-r29w-mcfc-r8cc.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r29w-mcfc-r8cc",
"modified": "2024-09-06T09:32:30Z",
"published": "2024-09-06T09:32:30Z",
"aliases": [
"CVE-2024-8292"
],
"details": "The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to privilege escalation/account takeover in all versions up to, and including, 16.26.8. This is due to to plugin not properly verifying a user's identity during new order creation. This makes it possible for unauthenticated attackers to supply any email through the user_email field and update the password for that user during new order creation. This requires the commerce addon to be enabled in order to exploit.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8292"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/add-on/commerce/classes/class-rcl-create-order.php#L127"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/add-on/commerce/functions-frontend.php#L113"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/wp-recall/tags/16.26.8/rcl-functions.php#L1339"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3145798/wp-recall/trunk/add-on/commerce/classes/class-rcl-create-order.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8fa4b5df-dc71-49de-880b-895eb1d9cdca?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-639"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T07:15:03Z"
}
}
advisories/unreviewed/2024/09/GHSA-rpfq-qgpp-7qm9/GHSA-rpfq-qgpp-7qm9.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rpfq-qgpp-7qm9",
"modified": "2024-09-06T09:32:31Z",
"published": "2024-09-06T09:32:31Z",
"aliases": [
"CVE-2023-52915"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer\n\nIn af9035_i2c_master_xfer, msg is controlled by user. When msg[i].buf\nis null and msg[i].len is zero, former checks on msg[i].buf would be\npassed. Malicious data finally reach af9035_i2c_master_xfer. If accessing\nmsg[i].buf[0] without sanity check, null ptr deref would happen.\nWe add check on msg[i].len to prevent crash.\n\nSimilar commit:\ncommit 0ed554fd769a\n(\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52915"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0143f282b15f7cedc0392ea10050fb6000fd16e6"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/41b7181a40af84448a2b144fb02d8bf32b7e9a23"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/6c01ef65de0b321b2db1ef9abf8f1d15862b937e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/7bf744f2de0a848fb1d717f5831b03db96feae89"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/b2f54ed7739dfdf42c4df0a11131aad7c8635464"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/b49c6e5dd236787f13a062ec528d724169f11152"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/d9ef84a7c222497ecb5fdf93361c76931804825e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/fa58d9db5cad4bb7bb694b6837e3b96d87554f2b"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-06T09:15:02Z"
}
}