diff --git a/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json b/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json index a1ff4ff1e9c..fca5ab19f67 100644 --- a/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json +++ b/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-c7xh-28x2-2ww8", - "modified": "2024-03-04T03:30:26Z", + "modified": "2024-08-25T18:30:42Z", "published": "2024-03-04T03:30:26Z", "aliases": [ "CVE-2024-20023" ], "details": "In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-04T03:15:07Z" diff --git a/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json b/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json index cdd0aaafad1..76c3144eccf 100644 --- a/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json +++ b/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json b/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json index ab692355d4b..26d363f597e 100644 --- a/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json +++ b/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8w37-4wx3-mmg3", - "modified": "2024-05-22T18:30:40Z", + "modified": "2024-08-25T18:30:43Z", "published": "2024-05-22T18:30:40Z", "aliases": [ "CVE-2024-33224" ], "details": "An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-22T16:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json b/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json new file mode 100644 index 00000000000..1bfe7932784 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-44pq-qvmw-gj4m", + "modified": "2024-08-25T18:30:43Z", + "published": "2024-08-25T18:30:43Z", + "aliases": [ + "CVE-2023-48957" + ], + "details": "PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48957" + }, + { + "type": "WEB", + "url": "https://latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched" + }, + { + "type": "WEB", + "url": "https://www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.html?m=1" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-25T17:15:03Z" + } +} \ No newline at end of file