netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-11 00:32:28 +00:00
parent e473af3a0d
commit 207f0b999e
72 changed files with 677 additions and 133 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-3cfr-rpp6-j86f/GHSA-3cfr-rpp6-j86f.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cfr-rpp6-j86f",
"modified": "2022-05-13T01:06:46Z",
"modified": "2025-02-11T00:31:20Z",
"published": "2022-05-13T01:06:46Z",
"aliases": [
"CVE-2012-2034"
],
"details": "Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-p5xj-3764-5mhh/GHSA-p5xj-3764-5mhh.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p5xj-3764-5mhh",
"modified": "2022-05-14T02:15:25Z",
"modified": "2025-02-11T00:31:20Z",
"published": "2022-05-14T02:15:25Z",
"aliases": [
"CVE-2012-0754"
],
"details": "Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2022/05/GHSA-p8wc-6g47-vh8j/GHSA-p8wc-6g47-vh8j.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p8wc-6g47-vh8j",
"modified": "2025-01-22T18:31:47Z",
"modified": "2025-02-11T00:31:20Z",
"published": "2022-05-14T01:02:48Z",
"aliases": [
"CVE-2015-1635"
],
"details": "HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka \"HTTP.sys Remote Code Execution Vulnerability.\"",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2023/04/GHSA-22h9-2mpf-7588/GHSA-22h9-2mpf-7588.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/04/GHSA-c3qm-r5gp-mgpm/GHSA-c3qm-r5gp-mgpm.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-535"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/02/GHSA-q9rx-4p5p-q33x/GHSA-q9rx-4p5p-q33x.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q9rx-4p5p-q33x",
"modified": "2025-01-28T18:31:20Z",
"modified": "2025-02-11T00:31:24Z",
"published": "2024-02-22T00:31:01Z",
"aliases": [
"CVE-2024-0446"
advisories/unreviewed/2024/03/GHSA-2wm5-pffj-4758/GHSA-2wm5-pffj-4758.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-32hg-4wf9-hj7c/GHSA-32hg-4wf9-hj7c.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-125"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-835r-7gv7-g577/GHSA-835r-7gv7-g577.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-cg32-2535-p88w/GHSA-cg32-2535-p88w.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cg32-2535-p88w",
"modified": "2024-03-05T03:30:31Z",
"modified": "2025-02-11T00:31:25Z",
"published": "2024-03-05T03:30:31Z",
"aliases": [
"CVE-2024-21815"
],
"details": "\nInsufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. \n\nThis issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.\n\n\n\n",
"details": "Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticated but unprivileged users. \n\nThis issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/03/GHSA-h443-pjpv-28vx/GHSA-h443-pjpv-28vx.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-jg3j-pgx3-878w/GHSA-jg3j-pgx3-878w.json
+4 -3
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jg3j-pgx3-878w",
"modified": "2024-03-05T03:30:31Z",
"modified": "2025-02-11T00:31:25Z",
"published": "2024-03-05T03:30:31Z",
"aliases": [
"CVE-2024-21838"
],
"details": "\nImproper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre. \n\nThis issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.\n\n\n\n",
"details": "Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre. \n\nThis issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.",
"severity": [
{
"type": "CVSS_V3",
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-mrx6-rgfc-x742/GHSA-mrx6-rgfc-x742.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-276"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/03/GHSA-qfcg-72h5-fvgr/GHSA-qfcg-72h5-fvgr.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-3524-72hj-ch2v/GHSA-3524-72hj-ch2v.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3524-72hj-ch2v",
"modified": "2024-04-10T21:30:33Z",
"modified": "2025-02-11T00:31:31Z",
"published": "2024-04-10T21:30:33Z",
"aliases": [
"CVE-2024-29502"
],
"details": "An issue in Secure Lockdown Multi Application Edition v2.00.219 allows attackers to read arbitrary files via using UNC paths.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-10T20:15:07Z"
advisories/unreviewed/2024/04/GHSA-5fvw-q4g6-wqf7/GHSA-5fvw-q4g6-wqf7.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5fvw-q4g6-wqf7",
"modified": "2024-04-23T15:30:34Z",
"modified": "2025-02-11T00:31:33Z",
"published": "2024-04-18T12:30:29Z",
"aliases": [
"CVE-2024-29003"
],
"details": "The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction. ",
"details": "The SolarWinds Platform was susceptible to a XSS vulnerability that affects the maps section of the user interface. This vulnerability requires authentication and requires user interaction.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/04/GHSA-62rm-mh7j-gv7j/GHSA-62rm-mh7j-gv7j.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-89jm-c34p-prg4/GHSA-89jm-c34p-prg4.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89jm-c34p-prg4",
"modified": "2024-04-18T09:30:44Z",
"modified": "2025-02-11T00:31:33Z",
"published": "2024-04-18T09:30:44Z",
"aliases": [
"CVE-2024-29001"
],
"details": "A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited. ",
"details": "A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires authentication and user interaction to be exploited.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/04/GHSA-92fr-gqp9-2ww5/GHSA-92fr-gqp9-2ww5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92fr-gqp9-2ww5",
"modified": "2024-04-29T18:30:44Z",
"modified": "2025-02-11T00:31:34Z",
"published": "2024-04-29T18:30:44Z",
"aliases": [
"CVE-2024-32268"
],
"details": "An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-241"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-29T16:15:35Z"
advisories/unreviewed/2024/04/GHSA-fx89-732f-4cfg/GHSA-fx89-732f-4cfg.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-269"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,

Some files were not shown because too many files have changed in this diff Show More