From 1d237d7bececdd2022a12be0a5e2aae01b05a2c2 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 12:32:37 +0000 Subject: [PATCH] Publish Advisories GHSA-84rx-9qxm-ffcf GHSA-gfj7-wqvc-jxxf GHSA-2582-53pq-96cq GHSA-g3vj-v55c-g2x7 GHSA-v7qg-9hqx-jr82 GHSA-w7qc-8c3p-gg37 --- .../GHSA-84rx-9qxm-ffcf.json | 6 +- .../GHSA-gfj7-wqvc-jxxf.json | 2 +- .../GHSA-2582-53pq-96cq.json | 35 ++++++++++ .../GHSA-g3vj-v55c-g2x7.json | 67 +++++++++++++++++++ .../GHSA-v7qg-9hqx-jr82.json | 38 +++++++++++ .../GHSA-w7qc-8c3p-gg37.json | 38 +++++++++++ 6 files changed, 184 insertions(+), 2 deletions(-) create mode 100644 advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json create mode 100644 advisories/unreviewed/2024/09/GHSA-g3vj-v55c-g2x7/GHSA-g3vj-v55c-g2x7.json create mode 100644 advisories/unreviewed/2024/09/GHSA-v7qg-9hqx-jr82/GHSA-v7qg-9hqx-jr82.json create mode 100644 advisories/unreviewed/2024/09/GHSA-w7qc-8c3p-gg37/GHSA-w7qc-8c3p-gg37.json diff --git a/advisories/unreviewed/2022/09/GHSA-84rx-9qxm-ffcf/GHSA-84rx-9qxm-ffcf.json b/advisories/unreviewed/2022/09/GHSA-84rx-9qxm-ffcf/GHSA-84rx-9qxm-ffcf.json index 55820d9bf0e..a1b87af182a 100644 --- a/advisories/unreviewed/2022/09/GHSA-84rx-9qxm-ffcf/GHSA-84rx-9qxm-ffcf.json +++ b/advisories/unreviewed/2022/09/GHSA-84rx-9qxm-ffcf/GHSA-84rx-9qxm-ffcf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-84rx-9qxm-ffcf", - "modified": "2022-09-20T00:00:32Z", + "modified": "2024-09-23T12:31:09Z", "published": "2022-09-15T00:00:16Z", "aliases": [ "CVE-2022-1778" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1778" }, + { + "type": "WEB", + "url": "https://publisher.hitachienergy.com/preview?DocumentId=8DBD000106&languageCode=en&Preview=true" + }, { "type": "WEB", "url": "https://search.abb.com/library/Download.aspx?DocumentID=8DBD000106&LanguageCode=en&DocumentPartId=&Action=Launch" diff --git a/advisories/unreviewed/2024/06/GHSA-gfj7-wqvc-jxxf/GHSA-gfj7-wqvc-jxxf.json b/advisories/unreviewed/2024/06/GHSA-gfj7-wqvc-jxxf/GHSA-gfj7-wqvc-jxxf.json index 709af6e3196..b174d16fb1f 100644 --- a/advisories/unreviewed/2024/06/GHSA-gfj7-wqvc-jxxf/GHSA-gfj7-wqvc-jxxf.json +++ b/advisories/unreviewed/2024/06/GHSA-gfj7-wqvc-jxxf/GHSA-gfj7-wqvc-jxxf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gfj7-wqvc-jxxf", - "modified": "2024-06-13T09:30:57Z", + "modified": "2024-09-23T12:31:09Z", "published": "2024-06-13T09:30:57Z", "aliases": [ "CVE-2024-36148" diff --git a/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json b/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json new file mode 100644 index 00000000000..87be0f8d54a --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2582-53pq-96cq", + "modified": "2024-09-23T12:31:09Z", + "published": "2024-09-23T12:31:09Z", + "aliases": [ + "CVE-2024-46544" + ], + "details": "Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.\n\nThis issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.\n\nUsers are recommended to upgrade to version 1.2.50, which fixes the issue.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46544" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/q1gp7cc38hs1r8gj8gfnopwznd5fpr4d" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-276" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-23T11:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-g3vj-v55c-g2x7/GHSA-g3vj-v55c-g2x7.json b/advisories/unreviewed/2024/09/GHSA-g3vj-v55c-g2x7/GHSA-g3vj-v55c-g2x7.json new file mode 100644 index 00000000000..06e8f15358a --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-g3vj-v55c-g2x7/GHSA-g3vj-v55c-g2x7.json @@ -0,0 +1,67 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g3vj-v55c-g2x7", + "modified": "2024-09-23T12:31:09Z", + "published": "2024-09-23T12:31:09Z", + "aliases": [ + "CVE-2022-48945" + ], + "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: vivid: fix compose size exceed boundary\n\nsyzkaller found a bug:\n\n BUG: unable to handle page fault for address: ffffc9000a3b1000\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 100000067 P4D 100000067 PUD 10015f067 PMD 1121ca067 PTE 0\n Oops: 0002 [#1] PREEMPT SMP\n CPU: 0 PID: 23489 Comm: vivid-000-vid-c Not tainted 6.1.0-rc1+ #512\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014\n RIP: 0010:memcpy_erms+0x6/0x10\n[...]\n Call Trace:\n \n ? tpg_fill_plane_buffer+0x856/0x15b0\n vivid_fillbuff+0x8ac/0x1110\n vivid_thread_vid_cap_tick+0x361/0xc90\n vivid_thread_vid_cap+0x21a/0x3a0\n kthread+0x143/0x180\n ret_from_fork+0x1f/0x30\n \n\nThis is because we forget to check boundary after adjust compose->height\nint V4L2_SEL_TGT_CROP case. Add v4l2_rect_map_inside() to fix this problem\nfor this case.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48945" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/2f558c5208b0f70c8140e08ce09fcc84da48e789" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/54f259906039dbfe46c550011409fa16f72370f6" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/5edc3604151919da8da0fb092b71d7dce07d848a" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/8c0ee15d9a102c732d0745566d254040085d5663" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/94a7ad9283464b75b12516c5512541d467cefcf8" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/9c7fba9503b826f0c061d136f8f0c9f953ed18b9" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ab54081a2843aefb837812fac5488cc8f1696142" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/ccb5392c4fea0e7d9f7ab35567e839d74cb3998b" + }, + { + "type": "WEB", + "url": "https://git.kernel.org/stable/c/f9d19f3a044ca651b0be52a4bf951ffe74259b9f" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-23T10:15:02Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-v7qg-9hqx-jr82/GHSA-v7qg-9hqx-jr82.json b/advisories/unreviewed/2024/09/GHSA-v7qg-9hqx-jr82/GHSA-v7qg-9hqx-jr82.json new file mode 100644 index 00000000000..876a828a2a4 --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-v7qg-9hqx-jr82/GHSA-v7qg-9hqx-jr82.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v7qg-9hqx-jr82", + "modified": "2024-09-23T12:31:09Z", + "published": "2024-09-23T12:31:09Z", + "aliases": [ + "CVE-2024-7735" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection.This issue affects Ferry Reservation System: before 240805-002.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7735" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-24-1518" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-23T12:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/09/GHSA-w7qc-8c3p-gg37/GHSA-w7qc-8c3p-gg37.json b/advisories/unreviewed/2024/09/GHSA-w7qc-8c3p-gg37/GHSA-w7qc-8c3p-gg37.json new file mode 100644 index 00000000000..fc32e9e677d --- /dev/null +++ b/advisories/unreviewed/2024/09/GHSA-w7qc-8c3p-gg37/GHSA-w7qc-8c3p-gg37.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7qc-8c3p-gg37", + "modified": "2024-09-23T12:31:09Z", + "published": "2024-09-23T12:31:09Z", + "aliases": [ + "CVE-2024-7835" + ], + "details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS.This issue affects Ferry Reservation System: before 240805-002.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7835" + }, + { + "type": "WEB", + "url": "https://www.usom.gov.tr/bildirim/tr-24-1518" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-09-23T12:15:04Z" + } +} \ No newline at end of file