netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6q6r-hx29-59m5
GHSA-3q35-qxf2-xprf
GHSA-3qfw-5g24-8pmq
GHSA-5wjg-cjpv-g4q8
GHSA-646x-grvx-3j77
GHSA-73qp-wrvv-85m7
GHSA-7729-x926-xq76
GHSA-7cx5-pcxx-59q4
GHSA-7vgw-g2hc-25j8
GHSA-cpxc-2w9f-g929
GHSA-g3wf-c9jp-7296
GHSA-gwqp-v8m6-gjcc
GHSA-qjcx-2536-hmpj
GHSA-qjwp-794r-6x7v
GHSA-qwg8-7mc5-hgvx
GHSA-r597-7j2h-6248
GHSA-wgpp-rccf-q5qm
GHSA-wr93-5pfw-4c2v
This commit is contained in:
advisory-database[bot]
2024-10-15 12:32:05 +00:00
parent a0f2374449
commit 15d8463956
18 changed files with 782 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/09/GHSA-6q6r-hx29-59m5/GHSA-6q6r-hx29-59m5.json
+14 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6q6r-hx29-59m5",
"modified": "2024-04-04T07:45:35Z",
"modified": "2024-10-15T12:30:35Z",
"published": "2023-09-20T09:30:22Z",
"aliases": [
"CVE-2023-22644"
@@ -11,12 +11,20 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "WEB",
"url": "https://github.com/rancher/rancher/security/advisories/GHSA-9ghh-mmcq-8phc"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22644"
@@ -24,10 +32,15 @@
{
"type": "WEB",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22644"
},
{
"type": "WEB",
"url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-22650"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287",
"CWE-532"
],
"severity": "MODERATE",
advisories/unreviewed/2024/10/GHSA-3q35-qxf2-xprf/GHSA-3q35-qxf2-xprf.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3q35-qxf2-xprf",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-49384"
],
"details": "Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49384"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-7284"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1327"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-3qfw-5g24-8pmq/GHSA-3qfw-5g24-8pmq.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qfw-5g24-8pmq",
"modified": "2024-10-15T12:30:36Z",
"published": "2024-10-15T12:30:36Z",
"aliases": [
"CVE-2024-47945"
],
"details": "The devices are vulnerable to session hijacking due to insufficient \nentropy in its session ID generation algorithm. The session IDs are \npredictable, with only 32,768 possible values per user, which allows \nattackers to pre-generate valid session IDs, leading to unauthorized \naccess to user sessions. This is not only due to the use of an \n(insecure) rand() function call but also because of missing \ninitialization via srand(). As a result only the PIDs are effectively \nused as seed.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47945"
},
{
"type": "WEB",
"url": "https://r.sec-consult.com/rittaliot"
},
{
"type": "WEB",
"url": "https://www.rittal.com/de-de/products/deep/3124300"
}
],
"database_specific": {
"cwe_ids": [
"CWE-340"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T10:15:03Z"
}
}
advisories/unreviewed/2024/10/GHSA-5wjg-cjpv-g4q8/GHSA-5wjg-cjpv-g4q8.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5wjg-cjpv-g4q8",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-9974"
],
"details": "A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file classes/Master.php?f=add_to_card of the component POST Request Handler. The manipulation of the argument product_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9974"
},
{
"type": "WEB",
"url": "https://gist.github.com/higordiego/2373b9e3e89f03e5f8888efd38eb4b48"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.280339"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.280339"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.423231"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T10:15:04Z"
}
}
advisories/unreviewed/2024/10/GHSA-646x-grvx-3j77/GHSA-646x-grvx-3j77.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-646x-grvx-3j77",
"modified": "2024-10-15T12:30:36Z",
"published": "2024-10-15T12:30:36Z",
"aliases": [
"CVE-2024-9973"
],
"details": "A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=reports of the component Report Viewing Page. The manipulation of the argument date leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9973"
},
{
"type": "WEB",
"url": "https://gist.github.com/higordiego/b9699573de61b26f2290e69f38d23fd0"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.280338"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.280338"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.423167"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T10:15:04Z"
}
}
advisories/unreviewed/2024/10/GHSA-73qp-wrvv-85m7/GHSA-73qp-wrvv-85m7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-73qp-wrvv-85m7",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-49383"
],
"details": "Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49383"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-7285"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1327"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-7729-x926-xq76/GHSA-7729-x926-xq76.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7729-x926-xq76",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-49388"
],
"details": "Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49388"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-5984"
}
],
"database_specific": {
"cwe_ids": [
"CWE-639"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:14Z"
}
}
advisories/unreviewed/2024/10/GHSA-7cx5-pcxx-59q4/GHSA-7cx5-pcxx-59q4.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7cx5-pcxx-59q4",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45272"
],
"details": "An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45272"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-068"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-069"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1391"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:11Z"
}
}
advisories/unreviewed/2024/10/GHSA-7vgw-g2hc-25j8/GHSA-7vgw-g2hc-25j8.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7vgw-g2hc-25j8",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45274"
],
"details": "An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45274"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-056"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-066"
}
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:12Z"
}
}
advisories/unreviewed/2024/10/GHSA-cpxc-2w9f-g929/GHSA-cpxc-2w9f-g929.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cpxc-2w9f-g929",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45271"
],
"details": "An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45271"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-056"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-066"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:11Z"
}
}
advisories/unreviewed/2024/10/GHSA-g3wf-c9jp-7296/GHSA-g3wf-c9jp-7296.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g3wf-c9jp-7296",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-49382"
],
"details": "Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49382"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-7286"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1327"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-gwqp-v8m6-gjcc/GHSA-gwqp-v8m6-gjcc.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gwqp-v8m6-gjcc",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45275"
],
"details": "The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45275"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-056"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-066"
}
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:12Z"
}
}
advisories/unreviewed/2024/10/GHSA-qjcx-2536-hmpj/GHSA-qjcx-2536-hmpj.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qjcx-2536-hmpj",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-49387"
],
"details": "Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49387"
},
{
"type": "WEB",
"url": "https://security-advisory.acronis.com/advisories/SEC-7022"
}
],
"database_specific": {
"cwe_ids": [
"CWE-319"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-qjwp-794r-6x7v/GHSA-qjwp-794r-6x7v.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qjwp-794r-6x7v",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-47674"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: avoid leaving partial pfn mappings around in error case\n\nAs Jann points out, PFN mappings are special, because unlike normal\nmemory mappings, there is no lifetime information associated with the\nmapping - it is just a raw mapping of PFNs with no reference counting of\na 'struct page'.\n\nThat's all very much intentional, but it does mean that it's easy to\nmess up the cleanup in case of errors. Yes, a failed mmap() will always\neventually clean up any partial mappings, but without any explicit\nlifetime in the page table mapping itself, it's very easy to do the\nerror handling in the wrong order.\n\nIn particular, it's easy to mistakenly free the physical backing store\nbefore the page tables are actually cleaned up and (temporarily) have\nstale dangling PTE entries.\n\nTo make this situation less error-prone, just make sure that any partial\npfn mapping is torn down early, before any other error handling.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47674"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/65d0db500d7c07f0f76fc24a4d837791c4862cd2"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/79a61cc3fc0466ad2b7b89618a6157785f0293b3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/954fd4c81f22c4b6ba65379a81fd252971bf4ef3"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/a95a24fcaee1b892e47d5e6dcc403f713874ee80"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:13Z"
}
}
advisories/unreviewed/2024/10/GHSA-qwg8-7mc5-hgvx/GHSA-qwg8-7mc5-hgvx.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qwg8-7mc5-hgvx",
"modified": "2024-10-15T12:30:38Z",
"published": "2024-10-15T12:30:38Z",
"aliases": [
"CVE-2024-9975"
],
"details": "A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9975"
},
{
"type": "WEB",
"url": "https://github.com/JunMing27/CVE/blob/main/SourceCodester%20-%20Arbitrary%20File%20Upload%20vulnerability%20leads%20to%20RCE%20in%20Drag%20and%20Drop%20Image%20Upload%20without%20Refresh%20Reload%20Using%20PHP%20and%20Ajax.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.280340"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.280340"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.423445"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:14Z"
}
}
advisories/unreviewed/2024/10/GHSA-r597-7j2h-6248/GHSA-r597-7j2h-6248.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r597-7j2h-6248",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45273"
],
"details": "An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45273"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-056"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-066"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-068"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-069"
}
],
"database_specific": {
"cwe_ids": [
"CWE-261"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:11Z"
}
}
advisories/unreviewed/2024/10/GHSA-wgpp-rccf-q5qm/GHSA-wgpp-rccf-q5qm.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wgpp-rccf-q5qm",
"modified": "2024-10-15T12:30:38Z",
"published": "2024-10-15T12:30:38Z",
"aliases": [
"CVE-2024-9976"
],
"details": "A vulnerability classified as critical has been found in code-projects Pharmacy Management System 1.0. This affects an unknown part of the file /php/manage_customer.php?action=search. The manipulation of the argument text leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9976"
},
{
"type": "WEB",
"url": "https://code-projects.org"
},
{
"type": "WEB",
"url": "https://gist.github.com/higordiego/b57040961b993cb5f1bfe0005f6b57be"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.280341"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.280341"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.423448"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:14Z"
}
}
advisories/unreviewed/2024/10/GHSA-wr93-5pfw-4c2v/GHSA-wr93-5pfw-4c2v.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr93-5pfw-4c2v",
"modified": "2024-10-15T12:30:37Z",
"published": "2024-10-15T12:30:37Z",
"aliases": [
"CVE-2024-45276"
],
"details": "An unauthenticated remote attacker can get read access to files in the \"/tmp\" directory due to missing authentication.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45276"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-056"
},
{
"type": "WEB",
"url": "https://cert.vde.com/en/advisories/VDE-2024-066"
}
],
"database_specific": {
"cwe_ids": [
"CWE-552"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-15T11:15:12Z"
}
}