netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-03 18:42:35 +00:00
parent 37e28da531
commit 1dd43dd301
121 changed files with 633 additions and 362 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wvf-f2vw-3425",
"modified": "2024-06-27T18:31:30Z",
"modified": "2024-07-03T18:41:22Z",
"published": "2024-05-14T18:30:52Z",
"aliases": [
"CVE-2024-3727"
@@ -142,6 +142,10 @@
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-3727"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4159"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0045"
advisories/unreviewed/2024/05/GHSA-22fx-rv4f-228x/GHSA-22fx-rv4f-228x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22fx-rv4f-228x",
"modified": "2024-05-15T15:30:33Z",
"modified": "2024-07-03T18:41:57Z",
"published": "2024-05-15T15:30:33Z",
"aliases": [
"CVE-2024-34954"
],
"details": "Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-15T15:15:08Z"
advisories/unreviewed/2024/05/GHSA-22hh-9pxh-mm6v/GHSA-22hh-9pxh-mm6v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22hh-9pxh-mm6v",
"modified": "2024-05-14T18:30:46Z",
"modified": "2024-07-03T18:40:37Z",
"published": "2024-05-14T18:30:46Z",
"aliases": [
"CVE-2024-32619"
],
"details": "HDF5 Library through 1.14.3 contains a heap-based buffer overflow in H5T_copy_reopen in H5T.c, resulting in the corruption of the instruction pointer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:36:47Z"
advisories/unreviewed/2024/05/GHSA-2738-rgv4-92wj/GHSA-2738-rgv4-92wj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2738-rgv4-92wj",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-07-03T18:41:01Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34220"
],
"details": "Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:35Z"
advisories/unreviewed/2024/05/GHSA-28fv-xp4g-pphf/GHSA-28fv-xp4g-pphf.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-2g58-2x39-qh45/GHSA-2g58-2x39-qh45.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2g58-2x39-qh45",
"modified": "2024-05-14T18:31:01Z",
"modified": "2024-07-03T18:41:33Z",
"published": "2024-05-14T18:31:01Z",
"aliases": [
"CVE-2024-34256"
],
"details": "OFCMS V1.1.2 is vulnerable to SQL Injection via the new table function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T16:17:23Z"
advisories/unreviewed/2024/05/GHSA-2pww-4jgc-f998/GHSA-2pww-4jgc-f998.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2pww-4jgc-f998",
"modified": "2024-05-15T15:30:33Z",
"modified": "2024-07-03T18:41:55Z",
"published": "2024-05-15T15:30:33Z",
"aliases": [
"CVE-2024-25078"
],
"details": "A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and kernel 5.6: IB19130163 in 05.61.07 could lead to escalating privileges in SMM.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-822"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-15T14:15:08Z"
advisories/unreviewed/2024/05/GHSA-38hg-hvc8-v572/GHSA-38hg-hvc8-v572.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38hg-hvc8-v572",
"modified": "2024-05-14T18:30:51Z",
"modified": "2024-07-03T18:41:07Z",
"published": "2024-05-14T18:30:51Z",
"aliases": [
"CVE-2024-34943"
],
"details": "Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:39:38Z"
advisories/unreviewed/2024/05/GHSA-38mm-6p5m-rh38/GHSA-38mm-6p5m-rh38.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38mm-6p5m-rh38",
"modified": "2024-05-14T18:31:05Z",
"modified": "2024-07-03T18:41:41Z",
"published": "2024-05-14T18:31:05Z",
"aliases": [
"CVE-2024-4776"
],
"details": "A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability affects Firefox < 126.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T18:15:16Z"
advisories/unreviewed/2024/05/GHSA-3m6r-3gw2-h96x/GHSA-3m6r-3gw2-h96x.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-49hv-2hp8-w863/GHSA-49hv-2hp8-w863.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49hv-2hp8-w863",
"modified": "2024-05-14T18:30:46Z",
"modified": "2024-07-03T18:40:38Z",
"published": "2024-05-14T18:30:46Z",
"aliases": [
"CVE-2024-32620"
],
"details": "HDF5 Library through 1.14.3 contains a heap-based buffer over-read in H5F_addr_decode_len in H5Fint.c, resulting in the corruption of the instruction pointer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:36:47Z"
advisories/unreviewed/2024/05/GHSA-4jqg-874r-phg3/GHSA-4jqg-874r-phg3.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-4vrv-4wc3-4q25/GHSA-4vrv-4wc3-4q25.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4vrv-4wc3-4q25",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-07-03T18:41:02Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34221"
],
"details": "Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:36Z"
advisories/unreviewed/2024/05/GHSA-4x9h-9pcf-jf7h/GHSA-4x9h-9pcf-jf7h.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-53j6-rqp4-4h6m/GHSA-53j6-rqp4-4h6m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53j6-rqp4-4h6m",
"modified": "2024-05-15T06:30:44Z",
"modified": "2024-07-03T18:41:55Z",
"published": "2024-05-15T06:30:44Z",
"aliases": [
"CVE-2024-3407"
],
"details": "The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-15T06:15:11Z"
advisories/unreviewed/2024/05/GHSA-54pq-5528-hp79/GHSA-54pq-5528-hp79.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-54pq-5528-hp79",
"modified": "2024-05-14T18:31:02Z",
"modified": "2024-07-03T18:41:34Z",
"published": "2024-05-14T18:31:02Z",
"aliases": [
"CVE-2024-3579"
],
"details": "Open-source project Online Shopping System Advanced is vulnerable to Reflected Cross-Site Scripting (XSS). An attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser. \n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T16:17:32Z"
advisories/unreviewed/2024/05/GHSA-55qw-5fwm-j996/GHSA-55qw-5fwm-j996.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-55qw-5fwm-j996",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-07-03T18:40:57Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34210"
],
"details": "TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the CloudACMunualUpdate function via the FileName parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:34Z"
advisories/unreviewed/2024/05/GHSA-574f-9862-pvrw/GHSA-574f-9862-pvrw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-574f-9862-pvrw",
"modified": "2024-05-14T18:30:48Z",
"modified": "2024-07-03T18:40:47Z",
"published": "2024-05-14T18:30:48Z",
"aliases": [
"CVE-2024-33873"
],
"details": "HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:09Z"
advisories/unreviewed/2024/05/GHSA-57h3-6mh3-cjrr/GHSA-57h3-6mh3-cjrr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57h3-6mh3-cjrr",
"modified": "2024-05-15T18:30:34Z",
"modified": "2024-07-03T18:41:59Z",
"published": "2024-05-15T18:30:34Z",
"aliases": [
"CVE-2024-27593"
],
"details": "A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the filter name field. This vulnerability has been fixed in version 3.23.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-15T17:15:10Z"
advisories/unreviewed/2024/05/GHSA-5cx3-xfw2-wh7v/GHSA-5cx3-xfw2-wh7v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5cx3-xfw2-wh7v",
"modified": "2024-05-14T18:30:51Z",
"modified": "2024-07-03T18:41:08Z",
"published": "2024-05-14T18:30:51Z",
"aliases": [
"CVE-2024-34945"
],
"details": "Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPW parameter at ip/goform/WizardHandle.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:39:38Z"

Some files were not shown because too many files have changed in this diff Show More