netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-7299-g634-x782
GHSA-394m-vxwj-363j
GHSA-936r-cg7h-crfg
GHSA-gqv6-f424-3g7h
GHSA-pmgm-h3cc-m4hj
GHSA-xmmg-4cv8-23px
This commit is contained in:
advisory-database[bot]
2024-02-16 09:31:35 +00:00
parent 0093aadb0b
commit 17d8b5fc03
6 changed files with 197 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/01/GHSA-7299-g634-x782/GHSA-7299-g634-x782.json
+6 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7299-g634-x782",
"modified": "2024-01-30T18:30:19Z",
"modified": "2024-02-16T09:30:24Z",
"published": "2024-01-23T12:30:30Z",
"aliases": [
"CVE-2024-22076"
@@ -23,11 +23,15 @@
},
{
"type": "WEB",
"url": "https://docs.myq-solution.com/en/print-server/8.2/"
"url": "https://docs.myq-solution.com/en/print-server/8.2"
},
{
"type": "WEB",
"url": "https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29"
},
{
"type": "WEB",
"url": "https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076"
}
],
"database_specific": {
advisories/unreviewed/2024/02/GHSA-394m-vxwj-363j/GHSA-394m-vxwj-363j.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-394m-vxwj-363j",
"modified": "2024-02-16T09:30:25Z",
"published": "2024-02-16T09:30:25Z",
"aliases": [
"CVE-2023-49508"
],
"details": "Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49508"
},
{
"type": "WEB",
"url": "https://github.com/YetiForceCompany/YetiForceCRM/commit/ba3a348aa6ecdf0a1d8b289cbb679bebcda7a132"
},
{
"type": "WEB",
"url": "https://github.com/c4v4r0n/Research/tree/main/CVE-2023-49508"
},
{
"type": "WEB",
"url": "https://huntr.com/bounties/29ed641d-eb03-4532-aed4-f96e11f78983"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T08:15:39Z"
}
}
advisories/unreviewed/2024/02/GHSA-936r-cg7h-crfg/GHSA-936r-cg7h-crfg.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-936r-cg7h-crfg",
"modified": "2024-02-16T09:30:26Z",
"published": "2024-02-16T09:30:26Z",
"aliases": [
"CVE-2024-24377"
],
"details": "An issue in idocv v.14.1.3_20231228 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24377"
},
{
"type": "WEB",
"url": "https://zhuabapa.top/2024/01/18/idocv_20231228_rce/#more"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T09:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-gqv6-f424-3g7h/GHSA-gqv6-f424-3g7h.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gqv6-f424-3g7h",
"modified": "2024-02-16T09:30:25Z",
"published": "2024-02-16T09:30:25Z",
"aliases": [
"CVE-2023-51931"
],
"details": "An issue in alanclarke URLite v.3.1.0 allows an attacker to cause a denial of service (DoS) via a crafted payload to the parsing function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51931"
},
{
"type": "WEB",
"url": "https://github.com/alanclarke/urlite/issues/61"
},
{
"type": "WEB",
"url": "https://gist.github.com/6en6ar/c792d8337b63f095cbda907e834cb4ba"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T09:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-pmgm-h3cc-m4hj/GHSA-pmgm-h3cc-m4hj.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pmgm-h3cc-m4hj",
"modified": "2024-02-16T09:30:26Z",
"published": "2024-02-16T09:30:26Z",
"aliases": [
"CVE-2024-25466"
],
"details": "Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25466"
},
{
"type": "WEB",
"url": "https://github.com/FixedOctocat/CVE-2024-25466/tree/main"
},
{
"type": "WEB",
"url": "https://github.com/rnmods/react-native-document-picker/blob/0be5a70c3b456e35c2454aaf4dc8c2d40eb2ab47/android/src/main/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T09:15:08Z"
}
}
advisories/unreviewed/2024/02/GHSA-xmmg-4cv8-23px/GHSA-xmmg-4cv8-23px.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xmmg-4cv8-23px",
"modified": "2024-02-16T09:30:25Z",
"published": "2024-02-16T09:30:25Z",
"aliases": [
"CVE-2024-22854"
],
"details": "DOM-based HTML injection vulnerability in the main page of Darktrace Threat Visualizer version 6.1.27 (bundle version 61050) and before has been identified. A URL, crafted by a remote attacker and visited by an authenticated user, allows open redirect and potential credential stealing using an injected HTML form.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22854"
},
{
"type": "WEB",
"url": "https://tomekwasiak.pl/cve-2024-22854"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T09:15:08Z"
}
}