Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2023-04-03 21:33:58 +00:00
parent 7c43f64ef7
commit 1dd0c223d7
39 changed files with 565 additions and 57 deletions
@@ -81,6 +81,10 @@
      "type": "WEB",
      "url": "http://httpd.apache.org/security/vulnerabilities_24.html"
    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171631/Apache-2.4.x-Buffer-Overflow.html"
+    },
    {
      "type": "WEB",
      "url": "http://seclists.org/fulldisclosure/2022/May/33"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w774-7g7w-83fx",
-  "modified": "2022-05-24T17:27:41Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2022-05-24T17:27:41Z",
  "aliases": [
    "CVE-2020-25213"
  ],
  "details": "The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -49,6 +52,10 @@
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/160003/WordPress-File-Manager-6.8-Remote-Code-Execution.html"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171650/WordPress-File-Manager-6.9-Shell-Upload.html"
    }
  ],
  "database_specific": {
@@ -32,6 +32,10 @@
    {
      "type": "WEB",
      "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/371098"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171628/GitLab-15.3-Remote-Code-Execution.html"
    }
  ],
  "database_specific": {
@@ -28,6 +28,10 @@
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html"
    }
  ],
  "database_specific": {
@@ -24,6 +24,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/earth2sky/Disclosed/blob/main/CVE-2022-30519"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171627/Reprise-Software-RLM-14.2BL4-Cross-Site-Scripting.html"
    }
  ],
  "database_specific": {
@@ -24,6 +24,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/otsmr/internet-of-vulnerable-things/tree/main/exploits"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171623/TP-Link-TL-WR902AC-Remote-Code-Execution.html"
    }
  ],
  "database_specific": {
@@ -49,6 +49,10 @@
      "type": "WEB",
      "url": "https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf"
    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html"
+    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2023/01/19/1"
@@ -28,6 +28,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/yui/yui2/tags"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171633/Yahoo-User-Interface-TreeView-2.8.2-Cross-Site-Scripting.html"
    }
  ],
  "database_specific": {
@@ -24,6 +24,10 @@
    {
      "type": "WEB",
      "url": "https://www.tenable.com/security/research/tra-2023-2"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171661/WordPress-Paid-Memberships-Pro-2.9.8-SQL-Injection.html"
    }
  ],
  "database_specific": {
@@ -25,6 +25,10 @@
      "type": "WEB",
      "url": "https://www.binaryworld.it/guidepoc.asp#CVE-2022-45639"
    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171649/Sleuthkit-4.11.1-Command-Injection.html"
+    },
    {
      "type": "WEB",
      "url": "http://www.binaryworld.it/"
@@ -32,6 +32,10 @@
    {
      "type": "WEB",
      "url": "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171642/Art-Gallery-Management-System-Project-1.0-Cross-Site-Scripting.html"
    }
  ],
  "database_specific": {
@@ -32,6 +32,10 @@
    {
      "type": "WEB",
      "url": "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html"
    }
  ],
  "database_specific": {
@@ -32,6 +32,10 @@
    {
      "type": "WEB",
      "url": "https://phpgurukul.com/projects/Art-Gallery-MS-PHP.zip"
+    },
+    {
+      "type": "WEB",
+      "url": "http://packetstormsecurity.com/files/171643/Art-Gallery-Management-System-Project-1.0-SQL-Injection.html"
    }
  ],
  "database_specific": {
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2v4g-w3qw-prh4",
-  "modified": "2023-03-29T21:30:17Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-29T21:30:17Z",
  "aliases": [
    "CVE-2022-47607"
  ],
  "details": "Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Usersnap plugin <= 4.16 versions.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
  ],
  "affected": [

@@ -27,7 +30,7 @@
    "cwe_ids": [
      "CWE-79"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-29T19:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-472h-pprq-pg3p",
-  "modified": "2023-03-28T00:34:28Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-28T00:34:28Z",
  "aliases": [
    "CVE-2023-26924"
  ],
  "details": "LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
  ],
  "affected": [

@@ -29,9 +32,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-120"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-27T22:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6738-85h4-qhxj",
-  "modified": "2023-03-28T00:34:28Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-28T00:34:28Z",
  "aliases": [
    "CVE-2023-26549"
  ],
  "details": "The SystemUI module has a vulnerability of repeated app restart due to improper parameters. Successful exploitation of this vulnerability may affect confidentiality.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -31,7 +34,7 @@
    "cwe_ids": [

    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-27T22:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6f7j-jmxj-m9g3",
-  "modified": "2023-03-27T21:30:26Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-27T21:30:26Z",
  "aliases": [
    "CVE-2023-1074"
  ],
  "details": "A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
  ],
  "affected": [

@@ -33,9 +36,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-401"
    ],
-    "severity": null,
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-27T21:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f289-g9w2-9j5h",
-  "modified": "2023-03-28T03:30:18Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-28T03:30:18Z",
  "aliases": [
    "CVE-2023-25262"
  ],
  "details": "Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather than the client. Therefore, the server causes outbound traffic and potentially imports data. An attacker may also leverage this behaviour to exfiltrate data of machines on the internal network of the server hosting the Stimulsoft Reporting Designer (Web).",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -33,9 +36,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-918"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-28T01:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g874-7753-4g62",
-  "modified": "2023-03-31T12:30:16Z",
+  "modified": "2023-04-03T21:32:48Z",
  "published": "2023-03-31T12:30:16Z",
  "aliases": [
    "CVE-2023-1769"
  ],
  "details": "A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=grade_table leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224670 is the identifier assigned to this vulnerability.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -35,7 +38,7 @@
    "cwe_ids": [

    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-31T11:15:00Z"
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gqqh-295f-w7wc",
-  "modified": "2023-03-27T21:30:25Z",
+  "modified": "2023-04-03T21:32:47Z",
  "published": "2023-03-27T21:30:25Z",
  "aliases": [
    "CVE-2023-1077"
  ],
  "details": "In the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the BUG_ON condition, as the confused entry will not be NULL, but list_head.The buggy error condition would lead to a type confused entry with the list head,which would then be used as a type confused sched_rt_entity,causing memory corruption.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,9 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-843"
    ],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-03-27T21:15:00Z"
--- a/Show More
+++ b/Show More