From 17d8c0278faa3d26f8cac77b4c39b83cfd9b4324 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sun, 25 Aug 2024 18:32:08 +0000
Subject: [PATCH] Publish Advisories

GHSA-c7xh-28x2-2ww8
GHSA-7953-6pvf-6rgx
GHSA-8w37-4wx3-mmg3
GHSA-44pq-qvmw-gj4m
---
 .../GHSA-c7xh-28x2-2ww8.json                  | 11 ++++--
 .../GHSA-7953-6pvf-6rgx.json                  |  2 +-
 .../GHSA-8w37-4wx3-mmg3.json                  |  9 +++--
 .../GHSA-44pq-qvmw-gj4m.json                  | 39 +++++++++++++++++++
 4 files changed, 53 insertions(+), 8 deletions(-)
 create mode 100644 advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json

diff --git a/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json b/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json
index a1ff4ff1e9c..fca5ab19f67 100644
--- a/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json
+++ b/advisories/unreviewed/2024/03/GHSA-c7xh-28x2-2ww8/GHSA-c7xh-28x2-2ww8.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-c7xh-28x2-2ww8",
-  "modified": "2024-03-04T03:30:26Z",
+  "modified": "2024-08-25T18:30:42Z",
   "published": "2024-03-04T03:30:26Z",
   "aliases": [
     "CVE-2024-20023"
   ],
   "details": "In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -25,9 +28,9 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-787"
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-04T03:15:07Z"
diff --git a/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json b/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json
index cdd0aaafad1..76c3144eccf 100644
--- a/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json
+++ b/advisories/unreviewed/2024/05/GHSA-7953-6pvf-6rgx/GHSA-7953-6pvf-6rgx.json
@@ -28,7 +28,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-
+      "CWE-434"
     ],
     "severity": "HIGH",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json b/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json
index ab692355d4b..26d363f597e 100644
--- a/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json
+++ b/advisories/unreviewed/2024/05/GHSA-8w37-4wx3-mmg3/GHSA-8w37-4wx3-mmg3.json
@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8w37-4wx3-mmg3",
-  "modified": "2024-05-22T18:30:40Z",
+  "modified": "2024-08-25T18:30:43Z",
   "published": "2024-05-22T18:30:40Z",
   "aliases": [
     "CVE-2024-33224"
   ],
   "details": "An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-05-22T16:15:10Z"
diff --git a/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json b/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json
new file mode 100644
index 00000000000..1bfe7932784
--- /dev/null
+++ b/advisories/unreviewed/2024/08/GHSA-44pq-qvmw-gj4m/GHSA-44pq-qvmw-gj4m.json
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-44pq-qvmw-gj4m",
+  "modified": "2024-08-25T18:30:43Z",
+  "published": "2024-08-25T18:30:43Z",
+  "aliases": [
+    "CVE-2023-48957"
+  ],
+  "details": "PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48957"
+    },
+    {
+      "type": "WEB",
+      "url": "https://latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.html?m=1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-25T17:15:03Z"
+  }
+}
\ No newline at end of file