diff --git a/advisories/github-reviewed/2021/06/GHSA-5vq5-pg3r-9ph3/GHSA-5vq5-pg3r-9ph3.json b/advisories/github-reviewed/2021/06/GHSA-5vq5-pg3r-9ph3/GHSA-5vq5-pg3r-9ph3.json index 2c1edea61fc..c0accfbe889 100644 --- a/advisories/github-reviewed/2021/06/GHSA-5vq5-pg3r-9ph3/GHSA-5vq5-pg3r-9ph3.json +++ b/advisories/github-reviewed/2021/06/GHSA-5vq5-pg3r-9ph3/GHSA-5vq5-pg3r-9ph3.json @@ -4,9 +4,7 @@ "modified": "2024-11-19T18:25:36Z", "published": "2021-06-10T17:22:08Z", "withdrawn": "2024-11-19T18:25:36Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Path Traversal in Zope", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-5pr9-v234-jw36. This link is maintained to preserve external references.\n\n## Original Description\nZope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities. Most Python modules are not available for using in TAL expressions that you can add through-the-web, for example in Zope Page Templates. This restriction avoids file system access, for example via the 'os' module. But some of the untrusted modules are available indirectly through Python modules that are available for direct use. By default, you need to have the Manager role to add or edit Zope Page Templates through the web. Only sites that allow untrusted users to add/edit Zope Page Templates through the web are at risk. The problem has been fixed in Zope 5.2.1 and 4.6.1. The workaround is the same as for https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36: A site administrator can restrict adding/editing Zope Page Templates through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing Zope Page Templates through the web should be restricted to trusted users only.", "severity": [ diff --git a/advisories/github-reviewed/2021/06/GHSA-962m-m8jw-8wrr/GHSA-962m-m8jw-8wrr.json b/advisories/github-reviewed/2021/06/GHSA-962m-m8jw-8wrr/GHSA-962m-m8jw-8wrr.json index c26fffb07ff..5e10c45eb43 100644 --- a/advisories/github-reviewed/2021/06/GHSA-962m-m8jw-8wrr/GHSA-962m-m8jw-8wrr.json +++ b/advisories/github-reviewed/2021/06/GHSA-962m-m8jw-8wrr/GHSA-962m-m8jw-8wrr.json @@ -4,9 +4,7 @@ "modified": "2024-11-19T18:25:12Z", "published": "2021-06-15T16:10:49Z", "withdrawn": "2024-11-19T18:25:12Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Path Traversal in Zope", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-5pr9-v234-jw36. This link is maintained to preserve external references.\n\n## Original Description\nZope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default, only users with the Manager role can add or edit Zope Page Templates through the web, but sites that allow untrusted users to add/edit Zope Page Templates through the web are at risk from this vulnerability. The problem has been fixed in Zope 5.2 and 4.6. As a workaround, a site administrator can restrict adding/editing Zope Page Templates through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing Zope Page Templates through the web should be restricted to trusted users only.", "severity": [ diff --git a/advisories/github-reviewed/2021/06/GHSA-rpcg-f9q6-2mq6/GHSA-rpcg-f9q6-2mq6.json b/advisories/github-reviewed/2021/06/GHSA-rpcg-f9q6-2mq6/GHSA-rpcg-f9q6-2mq6.json index 97e004784f6..14c77c6ef5b 100644 --- a/advisories/github-reviewed/2021/06/GHSA-rpcg-f9q6-2mq6/GHSA-rpcg-f9q6-2mq6.json +++ b/advisories/github-reviewed/2021/06/GHSA-rpcg-f9q6-2mq6/GHSA-rpcg-f9q6-2mq6.json @@ -1,10 +1,10 @@ { "schema_version": "1.4.0", "id": "GHSA-rpcg-f9q6-2mq6", - "modified": "2024-11-19T18:29:44Z", + "modified": "2024-11-19T18:30:42Z", "published": "2021-06-08T18:45:52Z", "aliases": [ - + "CVE-2021-32674" ], "summary": "Remote Code Execution via traversal in TAL expressions", "details": "This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TAL expression traversal vulnerabilities.\n\n### Impact\nMost Python modules are not available for using in TAL expressions that you can add through-the-web, for example in Zope Page Templates. This restriction avoids file system access, for example via the 'os' module. But some of the untrusted modules are available indirectly through Python modules that are available for direct use.\n\nBy default, you need to have the Manager role to add or edit Zope Page Templates through the web. Only sites that allow untrusted users to add/edit Zope Page Templates through the web are at risk.\n\n### Patches\nThe problem has been fixed in Zope 5.21 and 4.6.1.\n\n### Workarounds\nThe workaround is the same as for https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36: A site administrator can restrict adding/editing Zope Page Templates through the web using the standard Zope user/role permission mechanisms. Untrusted users should not be assigned the Zope Manager role and adding/editing Zope Page Templates through the web should be restricted to trusted users only.\n\n### References\n* [The previous advisory (GHSA-5pr9-v234-jw36)](https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36)\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in the [Zope issue tracker](https://github.com/zopefoundation/Zope/issues)\n* Email us at [security@plone.org](mailto:security@plone.org)\n", @@ -29,7 +29,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "5.0.0" + "introduced": "5.0" }, { "fixed": "5.2.1" diff --git a/advisories/github-reviewed/2022/05/GHSA-j6m4-frxh-p4x8/GHSA-j6m4-frxh-p4x8.json b/advisories/github-reviewed/2022/05/GHSA-j6m4-frxh-p4x8/GHSA-j6m4-frxh-p4x8.json index f90697f1914..ccce8dc4e73 100644 --- a/advisories/github-reviewed/2022/05/GHSA-j6m4-frxh-p4x8/GHSA-j6m4-frxh-p4x8.json +++ b/advisories/github-reviewed/2022/05/GHSA-j6m4-frxh-p4x8/GHSA-j6m4-frxh-p4x8.json @@ -8,9 +8,7 @@ ], "summary": "Zope Object Database Denial of Service vulnerability", "details": "Race condition in `ZEO/StorageServer.py` in Zope Object Database (ZODB) before 3.10.0a2 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected return value of None, an unexpected value of None for the address, or an ECONNABORTED, EAGAIN, or EWOULDBLOCK error, a related issue to CVE-2010-3492.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json b/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json index 84d6ca63725..90167cbe372 100644 --- a/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json +++ b/advisories/github-reviewed/2022/05/GHSA-m52m-2qpx-9j4j/GHSA-m52m-2qpx-9j4j.json @@ -85,9 +85,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2024-04-22T18:59:10Z", diff --git a/advisories/github-reviewed/2022/09/GHSA-3f7h-mf4q-vrm4/GHSA-3f7h-mf4q-vrm4.json b/advisories/github-reviewed/2022/09/GHSA-3f7h-mf4q-vrm4/GHSA-3f7h-mf4q-vrm4.json index f31609eed98..df978f5a54a 100644 --- a/advisories/github-reviewed/2022/09/GHSA-3f7h-mf4q-vrm4/GHSA-3f7h-mf4q-vrm4.json +++ b/advisories/github-reviewed/2022/09/GHSA-3f7h-mf4q-vrm4/GHSA-3f7h-mf4q-vrm4.json @@ -85,9 +85,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-09-20T21:21:07Z", diff --git a/advisories/github-reviewed/2022/12/GHSA-m3q4-7qmj-657m/GHSA-m3q4-7qmj-657m.json b/advisories/github-reviewed/2022/12/GHSA-m3q4-7qmj-657m/GHSA-m3q4-7qmj-657m.json index 361f2e1c390..cf0493f0518 100644 --- a/advisories/github-reviewed/2022/12/GHSA-m3q4-7qmj-657m/GHSA-m3q4-7qmj-657m.json +++ b/advisories/github-reviewed/2022/12/GHSA-m3q4-7qmj-657m/GHSA-m3q4-7qmj-657m.json @@ -8,9 +8,7 @@ ], "summary": "OpenFGA Authorization Bypass", "details": "### Overview\nDuring our internal security assessment, it was discovered that OpenFGA versions v0.3.0 is vulnerable to authorization bypass under certain conditions.\n\n### Am I Affected?\nYou are affected by this vulnerability if **all** of the following applies:\n\n1. You are using OpenFGA v0.3.0\n2. You created a model using modeling language v1.1 that applies a type restriction to an object e.g. `define viewer: [user]`\n3. You created tuples based on the aforementioned model, e.g. `document:1#viewer@user:jon`\n4. You updated the previous model by adding a new type and replacing the previous restriction with the newly added type e.g. `define viewer: [employee]`\n5. You use the tuples created against the first model (step 3) and issue checks against the updated model e.g. `user=user:jon, relation=viewer, object:document:1`\n\n### How to fix that?\nUpgrade to version v0.3.1\n\n### Backward Compatibility\nThis update is backward compatible.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/12/GHSA-xxfx-w2rw-gh63/GHSA-xxfx-w2rw-gh63.json b/advisories/github-reviewed/2022/12/GHSA-xxfx-w2rw-gh63/GHSA-xxfx-w2rw-gh63.json index 0335d28389c..0811ffaf285 100644 --- a/advisories/github-reviewed/2022/12/GHSA-xxfx-w2rw-gh63/GHSA-xxfx-w2rw-gh63.json +++ b/advisories/github-reviewed/2022/12/GHSA-xxfx-w2rw-gh63/GHSA-xxfx-w2rw-gh63.json @@ -8,9 +8,7 @@ ], "summary": "csaf-poc/csaf_distribution Cross-site Scripting vulnerability", "details": "The csaf_provider package before 0.8.2 allows XSS via a crafted CSAF document uploaded as text/html. The endpoint upload allows valid CSAF advisories (JSON format) to be uploaded with Content-Type text/html and filenames ending in .html. When subsequently accessed via web browser, these advisories are served and interpreted as HTML pages. Such uploaded advisories can contain JavaScript code that will execute within the browser context of users inspecting the advisory.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/04/GHSA-qvc4-78gw-pv8p/GHSA-qvc4-78gw-pv8p.json b/advisories/github-reviewed/2023/04/GHSA-qvc4-78gw-pv8p/GHSA-qvc4-78gw-pv8p.json index 008e8ee6623..6567450f388 100644 --- a/advisories/github-reviewed/2023/04/GHSA-qvc4-78gw-pv8p/GHSA-qvc4-78gw-pv8p.json +++ b/advisories/github-reviewed/2023/04/GHSA-qvc4-78gw-pv8p/GHSA-qvc4-78gw-pv8p.json @@ -3,14 +3,10 @@ "id": "GHSA-qvc4-78gw-pv8p", "modified": "2023-04-24T16:47:24Z", "published": "2023-04-24T16:47:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Adverserial use of `make_bitflags!` macro can cause undefined behavior", "details": "The macro relied on an expression of the form `Enum::Variant` always being a\nvariant of the enum. However, it may also be an associated integer constant, in\nwhich case there's no guarantee that the value of said constant consists only of\nbits valid for this bitflag type.\n\nThus, code like this could create an invalid `BitFlags`, which would cause\niterating over it to trigger undefined behavior. As the debug formatter\ninternally iterates over the value, it is also affected.\n\n```rust\nuse enumflags2::{bitflags, make_bitflags};\n\n#[bitflags]\n#[repr(u8)]\n#[derive(Copy, Clone, Debug)]\nenum Test {\n A = 1,\n B = 2,\n}\n\nimpl Test {\n const C: u8 = 69;\n}\n\nfn main() {\n let x = make_bitflags!(Test::{C});\n // printing or iterating over x is UB\n}\n```\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-04-24T16:47:24Z", diff --git a/advisories/github-reviewed/2023/05/GHSA-g35x-j6jj-8g7j/GHSA-g35x-j6jj-8g7j.json b/advisories/github-reviewed/2023/05/GHSA-g35x-j6jj-8g7j/GHSA-g35x-j6jj-8g7j.json index 2ad5d3da32b..a5640088c00 100644 --- a/advisories/github-reviewed/2023/05/GHSA-g35x-j6jj-8g7j/GHSA-g35x-j6jj-8g7j.json +++ b/advisories/github-reviewed/2023/05/GHSA-g35x-j6jj-8g7j/GHSA-g35x-j6jj-8g7j.json @@ -3,9 +3,7 @@ "id": "GHSA-g35x-j6jj-8g7j", "modified": "2023-05-02T16:51:25Z", "published": "2023-05-02T16:51:25Z", - "aliases": [ - - ], + "aliases": [], "summary": "@mittwald/kubernetes's secret contents leaked via debug logging", "details": "### Impact\n\nWhen debug logging is enabled (via `DEBUG` environment variable), the Kubernetes client may log all response bodies into the debug log -- including sensitive data from `Secret` resources.\n\nWhen running in a Kubernetes cluster, this might expose sensitive information to users who are _not_ authorised to access secrets, but have access to Pod logs (either directly using kubectl, or by Pod logs being shipped elsewhere).\n\n### Patches\nUpgrade to 3.5.0 or newer.\n\n### Workarounds\nDisable debug logging entirely, or exclude the `kubernetes:client` debug item (for example, using `DEBUG=*,-kubernetes:client`).\n\n### References\n\n- https://cwe.mitre.org/data/definitions/532.html\n", "severity": [ diff --git a/advisories/github-reviewed/2023/05/GHSA-m6m9-gr85-79vm/GHSA-m6m9-gr85-79vm.json b/advisories/github-reviewed/2023/05/GHSA-m6m9-gr85-79vm/GHSA-m6m9-gr85-79vm.json index 184060c8e87..72f853f22bc 100644 --- a/advisories/github-reviewed/2023/05/GHSA-m6m9-gr85-79vm/GHSA-m6m9-gr85-79vm.json +++ b/advisories/github-reviewed/2023/05/GHSA-m6m9-gr85-79vm/GHSA-m6m9-gr85-79vm.json @@ -8,9 +8,7 @@ ], "summary": "Pimcore Cross-site Scripting (XSS) in name field of Custom Reports", "details": "### Impact\nThis vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites.\n\n### Patches\nUpdate to version 10.5.21 or apply this patch manually:\nhttps://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7.patch\n\n### Workarounds\nApply patches manually:\nhttps://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7.patch\n\n### References\nhttps://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6/\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-05-10T21:26:32Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-qfc5-6r3j-jj22/GHSA-qfc5-6r3j-jj22.json b/advisories/github-reviewed/2023/06/GHSA-qfc5-6r3j-jj22/GHSA-qfc5-6r3j-jj22.json index c986daa0043..76ee5373e18 100644 --- a/advisories/github-reviewed/2023/06/GHSA-qfc5-6r3j-jj22/GHSA-qfc5-6r3j-jj22.json +++ b/advisories/github-reviewed/2023/06/GHSA-qfc5-6r3j-jj22/GHSA-qfc5-6r3j-jj22.json @@ -3,14 +3,10 @@ "id": "GHSA-qfc5-6r3j-jj22", "modified": "2023-07-05T19:52:13Z", "published": "2023-06-02T17:11:58Z", - "aliases": [ - - ], + "aliases": [], "summary": "Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt", "details": "# x/crisis does NOT cause chain halt\n\n### Impact\nIf an invariant check fails on a Cosmos SDK network and a transaction is sent to the `x/crisis` module to halt the chain, the chain does not halt. All versions of the `x/crisis` module is affected on all versions of the Cosmos SDK.\n\n### Details\nThe `x/crisis` module is supposed to allow anyone to halt a chain in the event of a violated invariant by sending a `MsgVerifyInvariant` with the name of the invariant. Processing this message is supposed to cause the nodes to panic. However, because the panic is within a transaction, it is caught by the SDK’s built-in panic-recovery machinery and just treated as a normal “invalid” transaction (ie. it returns a non-zero abci Code). Thus the `x/crisis` transactions don’t actually cause chains to halt. If there is an invariant violation, it can be confirmed with an `x/crisis` transaction, but it won’t cause any nodes to halt, they will just continue processing blocks.\n\nThat said, any node running with `start --inv-check-period X` will actually panic when it runs the periodic check (though it will still not panic just by processing an `x/crisis` transaction). Since this panic is located in EndBlock, it is not caught by the panic-recovery machinery and does actually crash the node. Presumably few if any nodes actually run with this in production because of how long the invariant checks take, and this runs all of them every `X` blocks.\n\n### Patches\nNo patches will be released.\n\nThe `x/crisis` module was originally intended to allow chains to halt rather than continue with some unknown behaviour in the case of an invariant violation (safety over liveness). However, as chains mature, and especially as the potential [cost of halting increases](https://github.com/osmosis-labs/osmosis/issues/570), chains should consider carefully what invariants they really want to halt for, and what invariants are just sort of helpful sanity checks, but may not be worth halting for.\n\nIn some cases, chains have already broken the invariant calculations but have dealt with the consequences off-chain or during development. Halting these chains would be counter-productive.\n\nThe SDK team is working on new modules that allow chain developers to fine-tune the chain invariants and the necessary actions.\n\nHence, the decision was made that the `x/crisis` module will not be patched for chain halts. The module will be deprecated when new modules take over its responsibilities.\n\n### Workarounds\nIn case of a valid invariant check failure that requires a chain halt, the network validators are encouraged to coordinate off-chain for network halts. This has been an already established process for security patches.\n\n### References\nSDK developer epic about invariant checking: https://github.com/cosmos/cosmos-sdk/issues/15706\nPublic report: https://github.com/cosmos/cosmos-sdk/issues/15325", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-06-02T17:11:58Z", diff --git a/advisories/github-reviewed/2024/11/GHSA-8495-4g3g-x7pr/GHSA-8495-4g3g-x7pr.json b/advisories/github-reviewed/2024/11/GHSA-8495-4g3g-x7pr/GHSA-8495-4g3g-x7pr.json index fc9800e5612..dd80b559d46 100644 --- a/advisories/github-reviewed/2024/11/GHSA-8495-4g3g-x7pr/GHSA-8495-4g3g-x7pr.json +++ b/advisories/github-reviewed/2024/11/GHSA-8495-4g3g-x7pr/GHSA-8495-4g3g-x7pr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8495-4g3g-x7pr", - "modified": "2024-11-19T20:48:59Z", + "modified": "2024-11-19T20:49:40Z", "published": "2024-11-18T21:02:32Z", "aliases": [ "CVE-2024-52304" @@ -9,10 +9,6 @@ "summary": "aiohttp allows request smuggling due to incorrect parsing of chunk extensions", "details": "### Summary\nThe Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions.\n\n### Impact\nIf a pure Python version of aiohttp is installed (i.e. without the usual C extensions) or `AIOHTTP_NO_EXTENSIONS` is enabled, then an attacker may be able to execute a request smuggling attack to bypass certain firewalls or proxy protections.\n\n-----\n\nPatch: https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71", "severity": [ - { - "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N" - }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" diff --git a/advisories/unreviewed/2022/04/GHSA-2458-q378-h4hg/GHSA-2458-q378-h4hg.json b/advisories/unreviewed/2022/04/GHSA-2458-q378-h4hg/GHSA-2458-q378-h4hg.json index 91d90d9baca..1dbacf66c6e 100644 --- a/advisories/unreviewed/2022/04/GHSA-2458-q378-h4hg/GHSA-2458-q378-h4hg.json +++ b/advisories/unreviewed/2022/04/GHSA-2458-q378-h4hg/GHSA-2458-q378-h4hg.json @@ -7,12 +7,8 @@ "CVE-2002-2419" ], "details": "Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-46v6-92ch-v3xp/GHSA-46v6-92ch-v3xp.json b/advisories/unreviewed/2022/04/GHSA-46v6-92ch-v3xp/GHSA-46v6-92ch-v3xp.json index 5cf263c8843..20aa09e1322 100644 --- a/advisories/unreviewed/2022/04/GHSA-46v6-92ch-v3xp/GHSA-46v6-92ch-v3xp.json +++ b/advisories/unreviewed/2022/04/GHSA-46v6-92ch-v3xp/GHSA-46v6-92ch-v3xp.json @@ -7,12 +7,8 @@ "CVE-2002-2410" ], "details": "openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-76v7-f945-pwp9/GHSA-76v7-f945-pwp9.json b/advisories/unreviewed/2022/04/GHSA-76v7-f945-pwp9/GHSA-76v7-f945-pwp9.json index aeb46ffb290..66f380de477 100644 --- a/advisories/unreviewed/2022/04/GHSA-76v7-f945-pwp9/GHSA-76v7-f945-pwp9.json +++ b/advisories/unreviewed/2022/04/GHSA-76v7-f945-pwp9/GHSA-76v7-f945-pwp9.json @@ -7,12 +7,8 @@ "CVE-2002-2396" ], "details": "Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7p6f-p6c9-77rf/GHSA-7p6f-p6c9-77rf.json b/advisories/unreviewed/2022/04/GHSA-7p6f-p6c9-77rf/GHSA-7p6f-p6c9-77rf.json index 7a1977f21a7..eee4b3aa621 100644 --- a/advisories/unreviewed/2022/04/GHSA-7p6f-p6c9-77rf/GHSA-7p6f-p6c9-77rf.json +++ b/advisories/unreviewed/2022/04/GHSA-7p6f-p6c9-77rf/GHSA-7p6f-p6c9-77rf.json @@ -7,12 +7,8 @@ "CVE-2002-2406" ], "details": "Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-88wh-x3h2-w976/GHSA-88wh-x3h2-w976.json b/advisories/unreviewed/2022/04/GHSA-88wh-x3h2-w976/GHSA-88wh-x3h2-w976.json index b12441599c1..c6ddd9308b1 100644 --- a/advisories/unreviewed/2022/04/GHSA-88wh-x3h2-w976/GHSA-88wh-x3h2-w976.json +++ b/advisories/unreviewed/2022/04/GHSA-88wh-x3h2-w976/GHSA-88wh-x3h2-w976.json @@ -7,12 +7,8 @@ "CVE-2002-2399" ], "details": "Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cr68-36xq-733g/GHSA-cr68-36xq-733g.json b/advisories/unreviewed/2022/04/GHSA-cr68-36xq-733g/GHSA-cr68-36xq-733g.json index 8138ce3ea0f..9768eff02fd 100644 --- a/advisories/unreviewed/2022/04/GHSA-cr68-36xq-733g/GHSA-cr68-36xq-733g.json +++ b/advisories/unreviewed/2022/04/GHSA-cr68-36xq-733g/GHSA-cr68-36xq-733g.json @@ -7,12 +7,8 @@ "CVE-2002-2409" ], "details": "Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-crw4-ccw9-44m3/GHSA-crw4-ccw9-44m3.json b/advisories/unreviewed/2022/04/GHSA-crw4-ccw9-44m3/GHSA-crw4-ccw9-44m3.json index e005a498911..034e8d157d3 100644 --- a/advisories/unreviewed/2022/04/GHSA-crw4-ccw9-44m3/GHSA-crw4-ccw9-44m3.json +++ b/advisories/unreviewed/2022/04/GHSA-crw4-ccw9-44m3/GHSA-crw4-ccw9-44m3.json @@ -7,12 +7,8 @@ "CVE-2002-2394" ], "details": "InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f47h-hr72-5959/GHSA-f47h-hr72-5959.json b/advisories/unreviewed/2022/04/GHSA-f47h-hr72-5959/GHSA-f47h-hr72-5959.json index 03d2dde8d3c..3bcb669a003 100644 --- a/advisories/unreviewed/2022/04/GHSA-f47h-hr72-5959/GHSA-f47h-hr72-5959.json +++ b/advisories/unreviewed/2022/04/GHSA-f47h-hr72-5959/GHSA-f47h-hr72-5959.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g98v-rw9m-98w8/GHSA-g98v-rw9m-98w8.json b/advisories/unreviewed/2022/04/GHSA-g98v-rw9m-98w8/GHSA-g98v-rw9m-98w8.json index 18d085b0391..c5f792d8cc4 100644 --- a/advisories/unreviewed/2022/04/GHSA-g98v-rw9m-98w8/GHSA-g98v-rw9m-98w8.json +++ b/advisories/unreviewed/2022/04/GHSA-g98v-rw9m-98w8/GHSA-g98v-rw9m-98w8.json @@ -7,12 +7,8 @@ "CVE-2002-2403" ], "details": "Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via \"...\", \"....\", \".....\", and other multiple dot sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gg96-fm78-8496/GHSA-gg96-fm78-8496.json b/advisories/unreviewed/2022/04/GHSA-gg96-fm78-8496/GHSA-gg96-fm78-8496.json index bc5a0c46782..7d761d0ee6c 100644 --- a/advisories/unreviewed/2022/04/GHSA-gg96-fm78-8496/GHSA-gg96-fm78-8496.json +++ b/advisories/unreviewed/2022/04/GHSA-gg96-fm78-8496/GHSA-gg96-fm78-8496.json @@ -7,12 +7,8 @@ "CVE-2002-2408" ], "details": "Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h4w5-cff9-3fv9/GHSA-h4w5-cff9-3fv9.json b/advisories/unreviewed/2022/04/GHSA-h4w5-cff9-3fv9/GHSA-h4w5-cff9-3fv9.json index 9e70b2ad8b4..7b8e12e036a 100644 --- a/advisories/unreviewed/2022/04/GHSA-h4w5-cff9-3fv9/GHSA-h4w5-cff9-3fv9.json +++ b/advisories/unreviewed/2022/04/GHSA-h4w5-cff9-3fv9/GHSA-h4w5-cff9-3fv9.json @@ -7,12 +7,8 @@ "CVE-2002-2401" ], "details": "NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hc22-wgv5-gxhw/GHSA-hc22-wgv5-gxhw.json b/advisories/unreviewed/2022/04/GHSA-hc22-wgv5-gxhw/GHSA-hc22-wgv5-gxhw.json index cdad50762d5..90563c46370 100644 --- a/advisories/unreviewed/2022/04/GHSA-hc22-wgv5-gxhw/GHSA-hc22-wgv5-gxhw.json +++ b/advisories/unreviewed/2022/04/GHSA-hc22-wgv5-gxhw/GHSA-hc22-wgv5-gxhw.json @@ -7,12 +7,8 @@ "CVE-2002-2400" ], "details": "Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mw24-9hgh-hwg4/GHSA-mw24-9hgh-hwg4.json b/advisories/unreviewed/2022/04/GHSA-mw24-9hgh-hwg4/GHSA-mw24-9hgh-hwg4.json index 6aaa320ac2e..c29680b6977 100644 --- a/advisories/unreviewed/2022/04/GHSA-mw24-9hgh-hwg4/GHSA-mw24-9hgh-hwg4.json +++ b/advisories/unreviewed/2022/04/GHSA-mw24-9hgh-hwg4/GHSA-mw24-9hgh-hwg4.json @@ -7,12 +7,8 @@ "CVE-2002-2378" ], "details": "Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-pcfc-x6j3-rfq2/GHSA-pcfc-x6j3-rfq2.json b/advisories/unreviewed/2022/04/GHSA-pcfc-x6j3-rfq2/GHSA-pcfc-x6j3-rfq2.json index 6335719b59c..6e3e0468018 100644 --- a/advisories/unreviewed/2022/04/GHSA-pcfc-x6j3-rfq2/GHSA-pcfc-x6j3-rfq2.json +++ b/advisories/unreviewed/2022/04/GHSA-pcfc-x6j3-rfq2/GHSA-pcfc-x6j3-rfq2.json @@ -7,12 +7,8 @@ "CVE-2002-2407" ], "details": "Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pxpc-v6qp-jr58/GHSA-pxpc-v6qp-jr58.json b/advisories/unreviewed/2022/04/GHSA-pxpc-v6qp-jr58/GHSA-pxpc-v6qp-jr58.json index 34087501a8b..2a745baefd7 100644 --- a/advisories/unreviewed/2022/04/GHSA-pxpc-v6qp-jr58/GHSA-pxpc-v6qp-jr58.json +++ b/advisories/unreviewed/2022/04/GHSA-pxpc-v6qp-jr58/GHSA-pxpc-v6qp-jr58.json @@ -7,12 +7,8 @@ "CVE-2002-2421" ], "details": "acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qgq9-f53g-r2wq/GHSA-qgq9-f53g-r2wq.json b/advisories/unreviewed/2022/04/GHSA-qgq9-f53g-r2wq/GHSA-qgq9-f53g-r2wq.json index 726eca26522..5288041aeb2 100644 --- a/advisories/unreviewed/2022/04/GHSA-qgq9-f53g-r2wq/GHSA-qgq9-f53g-r2wq.json +++ b/advisories/unreviewed/2022/04/GHSA-qgq9-f53g-r2wq/GHSA-qgq9-f53g-r2wq.json @@ -7,12 +7,8 @@ "CVE-2002-2412" ], "details": "Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qx7c-rg3g-8mqh/GHSA-qx7c-rg3g-8mqh.json b/advisories/unreviewed/2022/04/GHSA-qx7c-rg3g-8mqh/GHSA-qx7c-rg3g-8mqh.json index 20e55a92eee..d4255fe5ad1 100644 --- a/advisories/unreviewed/2022/04/GHSA-qx7c-rg3g-8mqh/GHSA-qx7c-rg3g-8mqh.json +++ b/advisories/unreviewed/2022/04/GHSA-qx7c-rg3g-8mqh/GHSA-qx7c-rg3g-8mqh.json @@ -7,12 +7,8 @@ "CVE-2002-2405" ], "details": "Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r54v-wfmq-86f6/GHSA-r54v-wfmq-86f6.json b/advisories/unreviewed/2022/04/GHSA-r54v-wfmq-86f6/GHSA-r54v-wfmq-86f6.json index 8ae97ac15fe..ae53c389a89 100644 --- a/advisories/unreviewed/2022/04/GHSA-r54v-wfmq-86f6/GHSA-r54v-wfmq-86f6.json +++ b/advisories/unreviewed/2022/04/GHSA-r54v-wfmq-86f6/GHSA-r54v-wfmq-86f6.json @@ -7,12 +7,8 @@ "CVE-2002-2413" ], "details": "WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rj3h-c6mh-jvvx/GHSA-rj3h-c6mh-jvvx.json b/advisories/unreviewed/2022/04/GHSA-rj3h-c6mh-jvvx/GHSA-rj3h-c6mh-jvvx.json index 7e5454c22e6..b8daed0a9ce 100644 --- a/advisories/unreviewed/2022/04/GHSA-rj3h-c6mh-jvvx/GHSA-rj3h-c6mh-jvvx.json +++ b/advisories/unreviewed/2022/04/GHSA-rj3h-c6mh-jvvx/GHSA-rj3h-c6mh-jvvx.json @@ -7,12 +7,8 @@ "CVE-2002-2398" ], "details": "The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wx25-xrm6-8wmf/GHSA-wx25-xrm6-8wmf.json b/advisories/unreviewed/2022/04/GHSA-wx25-xrm6-8wmf/GHSA-wx25-xrm6-8wmf.json index e48bdead231..b6864ddc391 100644 --- a/advisories/unreviewed/2022/04/GHSA-wx25-xrm6-8wmf/GHSA-wx25-xrm6-8wmf.json +++ b/advisories/unreviewed/2022/04/GHSA-wx25-xrm6-8wmf/GHSA-wx25-xrm6-8wmf.json @@ -7,12 +7,8 @@ "CVE-2002-2411" ], "details": "Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-225j-rc3h-9r34/GHSA-225j-rc3h-9r34.json b/advisories/unreviewed/2022/05/GHSA-225j-rc3h-9r34/GHSA-225j-rc3h-9r34.json index ebc20ac6e68..162ada5e82b 100644 --- a/advisories/unreviewed/2022/05/GHSA-225j-rc3h-9r34/GHSA-225j-rc3h-9r34.json +++ b/advisories/unreviewed/2022/05/GHSA-225j-rc3h-9r34/GHSA-225j-rc3h-9r34.json @@ -7,12 +7,8 @@ "CVE-2021-34553" ], "details": "Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24mx-5rm6-qcm5/GHSA-24mx-5rm6-qcm5.json b/advisories/unreviewed/2022/05/GHSA-24mx-5rm6-qcm5/GHSA-24mx-5rm6-qcm5.json index 2445d836ab6..1acc2490b67 100644 --- a/advisories/unreviewed/2022/05/GHSA-24mx-5rm6-qcm5/GHSA-24mx-5rm6-qcm5.json +++ b/advisories/unreviewed/2022/05/GHSA-24mx-5rm6-qcm5/GHSA-24mx-5rm6-qcm5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25p3-2r5q-956q/GHSA-25p3-2r5q-956q.json b/advisories/unreviewed/2022/05/GHSA-25p3-2r5q-956q/GHSA-25p3-2r5q-956q.json index 2724f154b6c..490b1f4a07a 100644 --- a/advisories/unreviewed/2022/05/GHSA-25p3-2r5q-956q/GHSA-25p3-2r5q-956q.json +++ b/advisories/unreviewed/2022/05/GHSA-25p3-2r5q-956q/GHSA-25p3-2r5q-956q.json @@ -7,12 +7,8 @@ "CVE-2005-0147" ], "details": "Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-25pg-vq6c-7vfw/GHSA-25pg-vq6c-7vfw.json b/advisories/unreviewed/2022/05/GHSA-25pg-vq6c-7vfw/GHSA-25pg-vq6c-7vfw.json index 92cb5c534aa..479cf0fb694 100644 --- a/advisories/unreviewed/2022/05/GHSA-25pg-vq6c-7vfw/GHSA-25pg-vq6c-7vfw.json +++ b/advisories/unreviewed/2022/05/GHSA-25pg-vq6c-7vfw/GHSA-25pg-vq6c-7vfw.json @@ -7,12 +7,8 @@ "CVE-2021-0528" ], "details": "In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195266", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26vc-7jr9-jq6g/GHSA-26vc-7jr9-jq6g.json b/advisories/unreviewed/2022/05/GHSA-26vc-7jr9-jq6g/GHSA-26vc-7jr9-jq6g.json index 402a375524b..e80ec93b5c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-26vc-7jr9-jq6g/GHSA-26vc-7jr9-jq6g.json +++ b/advisories/unreviewed/2022/05/GHSA-26vc-7jr9-jq6g/GHSA-26vc-7jr9-jq6g.json @@ -7,12 +7,8 @@ "CVE-2021-34388" ], "details": "Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might allow an attacker to control all the RAM after the heap block, leading to denial of service or code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26vp-298r-fj8f/GHSA-26vp-298r-fj8f.json b/advisories/unreviewed/2022/05/GHSA-26vp-298r-fj8f/GHSA-26vp-298r-fj8f.json index 4795e5774ac..e4295784358 100644 --- a/advisories/unreviewed/2022/05/GHSA-26vp-298r-fj8f/GHSA-26vp-298r-fj8f.json +++ b/advisories/unreviewed/2022/05/GHSA-26vp-298r-fj8f/GHSA-26vp-298r-fj8f.json @@ -7,12 +7,8 @@ "CVE-2021-0533" ], "details": "In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193932", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-272h-q2v7-f686/GHSA-272h-q2v7-f686.json b/advisories/unreviewed/2022/05/GHSA-272h-q2v7-f686/GHSA-272h-q2v7-f686.json index 015595ddad4..4f0e7b46b5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-272h-q2v7-f686/GHSA-272h-q2v7-f686.json +++ b/advisories/unreviewed/2022/05/GHSA-272h-q2v7-f686/GHSA-272h-q2v7-f686.json @@ -7,12 +7,8 @@ "CVE-2021-29965" ], "details": "A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fgh-m45q-cgrh/GHSA-2fgh-m45q-cgrh.json b/advisories/unreviewed/2022/05/GHSA-2fgh-m45q-cgrh/GHSA-2fgh-m45q-cgrh.json index b54f643ec6b..939022b8c2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fgh-m45q-cgrh/GHSA-2fgh-m45q-cgrh.json +++ b/advisories/unreviewed/2022/05/GHSA-2fgh-m45q-cgrh/GHSA-2fgh-m45q-cgrh.json @@ -7,12 +7,8 @@ "CVE-2005-0145" ], "details": "Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Javascript to bypass the file download prompt when the user uses the Alt-click feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2h49-jxxh-7v6v/GHSA-2h49-jxxh-7v6v.json b/advisories/unreviewed/2022/05/GHSA-2h49-jxxh-7v6v/GHSA-2h49-jxxh-7v6v.json index a7efdb47f34..507fe22297a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h49-jxxh-7v6v/GHSA-2h49-jxxh-7v6v.json +++ b/advisories/unreviewed/2022/05/GHSA-2h49-jxxh-7v6v/GHSA-2h49-jxxh-7v6v.json @@ -7,12 +7,8 @@ "CVE-2020-21783" ], "details": "In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h68-mcf3-8qvh/GHSA-2h68-mcf3-8qvh.json b/advisories/unreviewed/2022/05/GHSA-2h68-mcf3-8qvh/GHSA-2h68-mcf3-8qvh.json index 9d98eb7c415..a1d347688de 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h68-mcf3-8qvh/GHSA-2h68-mcf3-8qvh.json +++ b/advisories/unreviewed/2022/05/GHSA-2h68-mcf3-8qvh/GHSA-2h68-mcf3-8qvh.json @@ -7,12 +7,8 @@ "CVE-2021-20742" ], "details": "Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m87-9x7m-6v4q/GHSA-2m87-9x7m-6v4q.json b/advisories/unreviewed/2022/05/GHSA-2m87-9x7m-6v4q/GHSA-2m87-9x7m-6v4q.json index 742a1340d1e..04aafa97fe5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m87-9x7m-6v4q/GHSA-2m87-9x7m-6v4q.json +++ b/advisories/unreviewed/2022/05/GHSA-2m87-9x7m-6v4q/GHSA-2m87-9x7m-6v4q.json @@ -7,12 +7,8 @@ "CVE-2009-0581" ], "details": "Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mm4-wmfr-3ffm/GHSA-2mm4-wmfr-3ffm.json b/advisories/unreviewed/2022/05/GHSA-2mm4-wmfr-3ffm/GHSA-2mm4-wmfr-3ffm.json index 67a724d46d7..a6308f3494d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mm4-wmfr-3ffm/GHSA-2mm4-wmfr-3ffm.json +++ b/advisories/unreviewed/2022/05/GHSA-2mm4-wmfr-3ffm/GHSA-2mm4-wmfr-3ffm.json @@ -7,12 +7,8 @@ "CVE-2020-4885" ], "details": "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of Db2 due to a race condition of a symbolic link,. IBM X-Force ID: 190909.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r29-995v-5xhv/GHSA-2r29-995v-5xhv.json b/advisories/unreviewed/2022/05/GHSA-2r29-995v-5xhv/GHSA-2r29-995v-5xhv.json index 771037b9482..965fdd38f4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r29-995v-5xhv/GHSA-2r29-995v-5xhv.json +++ b/advisories/unreviewed/2022/05/GHSA-2r29-995v-5xhv/GHSA-2r29-995v-5xhv.json @@ -7,12 +7,8 @@ "CVE-2021-27658" ], "details": "exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r4j-x5mr-ch9c/GHSA-2r4j-x5mr-ch9c.json b/advisories/unreviewed/2022/05/GHSA-2r4j-x5mr-ch9c/GHSA-2r4j-x5mr-ch9c.json index b5b362d3910..1c7c69f817e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r4j-x5mr-ch9c/GHSA-2r4j-x5mr-ch9c.json +++ b/advisories/unreviewed/2022/05/GHSA-2r4j-x5mr-ch9c/GHSA-2r4j-x5mr-ch9c.json @@ -7,12 +7,8 @@ "CVE-2005-0173" ], "details": "squid_ldap_auth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists (ACLs) via a username with a space at the beginning or end, which is ignored by the LDAP server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rh7-mhq6-qpjv/GHSA-2rh7-mhq6-qpjv.json b/advisories/unreviewed/2022/05/GHSA-2rh7-mhq6-qpjv/GHSA-2rh7-mhq6-qpjv.json index 90f776fb400..eee48f027d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rh7-mhq6-qpjv/GHSA-2rh7-mhq6-qpjv.json +++ b/advisories/unreviewed/2022/05/GHSA-2rh7-mhq6-qpjv/GHSA-2rh7-mhq6-qpjv.json @@ -7,12 +7,8 @@ "CVE-2005-0319" ], "details": "Direct remote injection vulnerability in modalfram.wdm in Alt-N WebAdmin 3.0.4 allows remote attackers to load external webpages that appear to come from the WebAdmin server, which allows remote attackers to inject arbitrary HTML or web script to facilitate cross-site scripting (XSS) and phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rv8-xmpq-rpfx/GHSA-2rv8-xmpq-rpfx.json b/advisories/unreviewed/2022/05/GHSA-2rv8-xmpq-rpfx/GHSA-2rv8-xmpq-rpfx.json index 8eee611d824..6d07c6ebb1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rv8-xmpq-rpfx/GHSA-2rv8-xmpq-rpfx.json +++ b/advisories/unreviewed/2022/05/GHSA-2rv8-xmpq-rpfx/GHSA-2rv8-xmpq-rpfx.json @@ -7,12 +7,8 @@ "CVE-2005-0175" ], "details": "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vp6-mvmx-fxh9/GHSA-2vp6-mvmx-fxh9.json b/advisories/unreviewed/2022/05/GHSA-2vp6-mvmx-fxh9/GHSA-2vp6-mvmx-fxh9.json index d36a23a6fca..78356985059 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vp6-mvmx-fxh9/GHSA-2vp6-mvmx-fxh9.json +++ b/advisories/unreviewed/2022/05/GHSA-2vp6-mvmx-fxh9/GHSA-2vp6-mvmx-fxh9.json @@ -7,12 +7,8 @@ "CVE-2021-29955" ], "details": "A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. (A related vulnerability, Speculative Code Store Bypass (SCSB), did not affect Firefox.). This vulnerability affects Firefox ESR < 78.9 and Firefox < 87.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x58-77jw-wgpw/GHSA-2x58-77jw-wgpw.json b/advisories/unreviewed/2022/05/GHSA-2x58-77jw-wgpw/GHSA-2x58-77jw-wgpw.json index 076634b6469..04b8ea7d7b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x58-77jw-wgpw/GHSA-2x58-77jw-wgpw.json +++ b/advisories/unreviewed/2022/05/GHSA-2x58-77jw-wgpw/GHSA-2x58-77jw-wgpw.json @@ -7,12 +7,8 @@ "CVE-2005-0149" ], "details": "Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-327q-g658-jj5v/GHSA-327q-g658-jj5v.json b/advisories/unreviewed/2022/05/GHSA-327q-g658-jj5v/GHSA-327q-g658-jj5v.json index ed7b3a79150..d5b42248fcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-327q-g658-jj5v/GHSA-327q-g658-jj5v.json +++ b/advisories/unreviewed/2022/05/GHSA-327q-g658-jj5v/GHSA-327q-g658-jj5v.json @@ -7,12 +7,8 @@ "CVE-2021-33185" ], "details": "SerenityOS contains a buffer overflow in the set_range test in TestBitmap which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37c3-xqfq-pgfj/GHSA-37c3-xqfq-pgfj.json b/advisories/unreviewed/2022/05/GHSA-37c3-xqfq-pgfj/GHSA-37c3-xqfq-pgfj.json index 863093ab929..c16ae8785df 100644 --- a/advisories/unreviewed/2022/05/GHSA-37c3-xqfq-pgfj/GHSA-37c3-xqfq-pgfj.json +++ b/advisories/unreviewed/2022/05/GHSA-37c3-xqfq-pgfj/GHSA-37c3-xqfq-pgfj.json @@ -7,12 +7,8 @@ "CVE-2021-29952" ], "details": "When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code. This vulnerability affects Firefox < 88.0.1 and Firefox for Android < 88.1.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37jr-rxv8-wwqj/GHSA-37jr-rxv8-wwqj.json b/advisories/unreviewed/2022/05/GHSA-37jr-rxv8-wwqj/GHSA-37jr-rxv8-wwqj.json index df2d4ddb9ef..5a3d3b2934d 100644 --- a/advisories/unreviewed/2022/05/GHSA-37jr-rxv8-wwqj/GHSA-37jr-rxv8-wwqj.json +++ b/advisories/unreviewed/2022/05/GHSA-37jr-rxv8-wwqj/GHSA-37jr-rxv8-wwqj.json @@ -7,12 +7,8 @@ "CVE-2021-0535" ], "details": "In wpas_ctrl_msg_queue_timeout of ctrl_iface_unix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168314741", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39qf-gxpw-7vqf/GHSA-39qf-gxpw-7vqf.json b/advisories/unreviewed/2022/05/GHSA-39qf-gxpw-7vqf/GHSA-39qf-gxpw-7vqf.json index 145811fa509..e628a260987 100644 --- a/advisories/unreviewed/2022/05/GHSA-39qf-gxpw-7vqf/GHSA-39qf-gxpw-7vqf.json +++ b/advisories/unreviewed/2022/05/GHSA-39qf-gxpw-7vqf/GHSA-39qf-gxpw-7vqf.json @@ -7,12 +7,8 @@ "CVE-2005-0100" ], "details": "Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gp2-fxr9-ph7v/GHSA-3gp2-fxr9-ph7v.json b/advisories/unreviewed/2022/05/GHSA-3gp2-fxr9-ph7v/GHSA-3gp2-fxr9-ph7v.json index 7e0fe7ee3c9..d4d8bab37af 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gp2-fxr9-ph7v/GHSA-3gp2-fxr9-ph7v.json +++ b/advisories/unreviewed/2022/05/GHSA-3gp2-fxr9-ph7v/GHSA-3gp2-fxr9-ph7v.json @@ -7,12 +7,8 @@ "CVE-2020-18657" ], "details": "Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mqp-7m9g-rqcq/GHSA-3mqp-7m9g-rqcq.json b/advisories/unreviewed/2022/05/GHSA-3mqp-7m9g-rqcq/GHSA-3mqp-7m9g-rqcq.json index 448f06b37b4..30dd6997e07 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mqp-7m9g-rqcq/GHSA-3mqp-7m9g-rqcq.json +++ b/advisories/unreviewed/2022/05/GHSA-3mqp-7m9g-rqcq/GHSA-3mqp-7m9g-rqcq.json @@ -7,12 +7,8 @@ "CVE-2021-0516" ], "details": "In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181660448", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pj2-rvj5-6646/GHSA-3pj2-rvj5-6646.json b/advisories/unreviewed/2022/05/GHSA-3pj2-rvj5-6646/GHSA-3pj2-rvj5-6646.json index cd3accb5a3f..c3de0e481e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pj2-rvj5-6646/GHSA-3pj2-rvj5-6646.json +++ b/advisories/unreviewed/2022/05/GHSA-3pj2-rvj5-6646/GHSA-3pj2-rvj5-6646.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qqg-5x4c-6frh/GHSA-3qqg-5x4c-6frh.json b/advisories/unreviewed/2022/05/GHSA-3qqg-5x4c-6frh/GHSA-3qqg-5x4c-6frh.json index c87072dd484..c78193b2b42 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qqg-5x4c-6frh/GHSA-3qqg-5x4c-6frh.json +++ b/advisories/unreviewed/2022/05/GHSA-3qqg-5x4c-6frh/GHSA-3qqg-5x4c-6frh.json @@ -7,12 +7,8 @@ "CVE-2005-0306" ], "details": "MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rwx-rphm-m3g7/GHSA-3rwx-rphm-m3g7.json b/advisories/unreviewed/2022/05/GHSA-3rwx-rphm-m3g7/GHSA-3rwx-rphm-m3g7.json index 74a262b3d30..8177df13483 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rwx-rphm-m3g7/GHSA-3rwx-rphm-m3g7.json +++ b/advisories/unreviewed/2022/05/GHSA-3rwx-rphm-m3g7/GHSA-3rwx-rphm-m3g7.json @@ -7,12 +7,8 @@ "CVE-2021-0558" ], "details": "In fillMainDataBuf of pvmp3_framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173473906", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3vc4-p4vg-f376/GHSA-3vc4-p4vg-f376.json b/advisories/unreviewed/2022/05/GHSA-3vc4-p4vg-f376/GHSA-3vc4-p4vg-f376.json index 75e76e5b780..80445ad19a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vc4-p4vg-f376/GHSA-3vc4-p4vg-f376.json +++ b/advisories/unreviewed/2022/05/GHSA-3vc4-p4vg-f376/GHSA-3vc4-p4vg-f376.json @@ -7,12 +7,8 @@ "CVE-2005-0194" ], "details": "Squid 2.5, when processing the configuration file, parses empty Access Control Lists (ACLs), including proxy_auth ACLs without defined auth schemes, in a way that effectively removes arguments, which could allow remote attackers to bypass intended ACLs if the administrator ignores the parser warnings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vg9-7c42-3mxf/GHSA-3vg9-7c42-3mxf.json b/advisories/unreviewed/2022/05/GHSA-3vg9-7c42-3mxf/GHSA-3vg9-7c42-3mxf.json index efa1f7da470..8638ee6e251 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vg9-7c42-3mxf/GHSA-3vg9-7c42-3mxf.json +++ b/advisories/unreviewed/2022/05/GHSA-3vg9-7c42-3mxf/GHSA-3vg9-7c42-3mxf.json @@ -7,12 +7,8 @@ "CVE-2005-0116" ], "details": "AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir parameter to aswtats.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wp7-mj2q-x6q3/GHSA-3wp7-mj2q-x6q3.json b/advisories/unreviewed/2022/05/GHSA-3wp7-mj2q-x6q3/GHSA-3wp7-mj2q-x6q3.json index 642ed6a2a4f..198b278a18b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wp7-mj2q-x6q3/GHSA-3wp7-mj2q-x6q3.json +++ b/advisories/unreviewed/2022/05/GHSA-3wp7-mj2q-x6q3/GHSA-3wp7-mj2q-x6q3.json @@ -7,12 +7,8 @@ "CVE-2021-31660" ], "details": "RIOT-OS 2021.01 before commit 85da504d2dc30188b89f44c3276fc5a25b31251f contains a buffer overflow which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42r7-php7-668w/GHSA-42r7-php7-668w.json b/advisories/unreviewed/2022/05/GHSA-42r7-php7-668w/GHSA-42r7-php7-668w.json index d9fc30b026b..2e7d7b42767 100644 --- a/advisories/unreviewed/2022/05/GHSA-42r7-php7-668w/GHSA-42r7-php7-668w.json +++ b/advisories/unreviewed/2022/05/GHSA-42r7-php7-668w/GHSA-42r7-php7-668w.json @@ -7,12 +7,8 @@ "CVE-2005-0201" ], "details": "D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-45wj-63p8-7r9j/GHSA-45wj-63p8-7r9j.json b/advisories/unreviewed/2022/05/GHSA-45wj-63p8-7r9j/GHSA-45wj-63p8-7r9j.json index 27837977d53..14b50d120f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-45wj-63p8-7r9j/GHSA-45wj-63p8-7r9j.json +++ b/advisories/unreviewed/2022/05/GHSA-45wj-63p8-7r9j/GHSA-45wj-63p8-7r9j.json @@ -7,12 +7,8 @@ "CVE-2005-0092" ], "details": "Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when running on x86 with the hugemem kernel, allows local users to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46j9-2j4r-83q6/GHSA-46j9-2j4r-83q6.json b/advisories/unreviewed/2022/05/GHSA-46j9-2j4r-83q6/GHSA-46j9-2j4r-83q6.json index 9675ad5464b..faec9ed0c03 100644 --- a/advisories/unreviewed/2022/05/GHSA-46j9-2j4r-83q6/GHSA-46j9-2j4r-83q6.json +++ b/advisories/unreviewed/2022/05/GHSA-46j9-2j4r-83q6/GHSA-46j9-2j4r-83q6.json @@ -7,12 +7,8 @@ "CVE-2021-34809" ], "details": "Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-473c-wh3w-ppx8/GHSA-473c-wh3w-ppx8.json b/advisories/unreviewed/2022/05/GHSA-473c-wh3w-ppx8/GHSA-473c-wh3w-ppx8.json index b5201d3b993..9af24d91f2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-473c-wh3w-ppx8/GHSA-473c-wh3w-ppx8.json +++ b/advisories/unreviewed/2022/05/GHSA-473c-wh3w-ppx8/GHSA-473c-wh3w-ppx8.json @@ -7,12 +7,8 @@ "CVE-2021-34810" ], "details": "Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-47xw-cmcm-mpqp/GHSA-47xw-cmcm-mpqp.json b/advisories/unreviewed/2022/05/GHSA-47xw-cmcm-mpqp/GHSA-47xw-cmcm-mpqp.json index 280db6fc826..e65a503e647 100644 --- a/advisories/unreviewed/2022/05/GHSA-47xw-cmcm-mpqp/GHSA-47xw-cmcm-mpqp.json +++ b/advisories/unreviewed/2022/05/GHSA-47xw-cmcm-mpqp/GHSA-47xw-cmcm-mpqp.json @@ -7,12 +7,8 @@ "CVE-2005-0083" ], "details": "MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-487r-hmj9-h7h2/GHSA-487r-hmj9-h7h2.json b/advisories/unreviewed/2022/05/GHSA-487r-hmj9-h7h2/GHSA-487r-hmj9-h7h2.json index 65335302d61..1933b9f3bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-487r-hmj9-h7h2/GHSA-487r-hmj9-h7h2.json +++ b/advisories/unreviewed/2022/05/GHSA-487r-hmj9-h7h2/GHSA-487r-hmj9-h7h2.json @@ -7,12 +7,8 @@ "CVE-2021-29084" ], "details": "Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4g58-p6wm-2vf3/GHSA-4g58-p6wm-2vf3.json b/advisories/unreviewed/2022/05/GHSA-4g58-p6wm-2vf3/GHSA-4g58-p6wm-2vf3.json index 3542aea749f..ee9f94bf59d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g58-p6wm-2vf3/GHSA-4g58-p6wm-2vf3.json +++ b/advisories/unreviewed/2022/05/GHSA-4g58-p6wm-2vf3/GHSA-4g58-p6wm-2vf3.json @@ -7,12 +7,8 @@ "CVE-2021-0517" ], "details": "In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179053823", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4g63-gwp6-h4r5/GHSA-4g63-gwp6-h4r5.json b/advisories/unreviewed/2022/05/GHSA-4g63-gwp6-h4r5/GHSA-4g63-gwp6-h4r5.json index a674ed93610..b9d244efdc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g63-gwp6-h4r5/GHSA-4g63-gwp6-h4r5.json +++ b/advisories/unreviewed/2022/05/GHSA-4g63-gwp6-h4r5/GHSA-4g63-gwp6-h4r5.json @@ -7,12 +7,8 @@ "CVE-2021-20737" ], "details": "Improper authentication vulnerability in GROWI versions prior to v4.2.20 allows a remote attacker to view the unauthorized pages without access privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hfp-85fh-2g4f/GHSA-4hfp-85fh-2g4f.json b/advisories/unreviewed/2022/05/GHSA-4hfp-85fh-2g4f/GHSA-4hfp-85fh-2g4f.json index 793c330e9cf..e0fe4c3902c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hfp-85fh-2g4f/GHSA-4hfp-85fh-2g4f.json +++ b/advisories/unreviewed/2022/05/GHSA-4hfp-85fh-2g4f/GHSA-4hfp-85fh-2g4f.json @@ -7,12 +7,8 @@ "CVE-2021-33186" ], "details": "SerenityOS in test-crypto.cpp contains a stack buffer overflow which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4q9f-96v5-4x47/GHSA-4q9f-96v5-4x47.json b/advisories/unreviewed/2022/05/GHSA-4q9f-96v5-4x47/GHSA-4q9f-96v5-4x47.json index a244b259b82..4c9c9d86e2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q9f-96v5-4x47/GHSA-4q9f-96v5-4x47.json +++ b/advisories/unreviewed/2022/05/GHSA-4q9f-96v5-4x47/GHSA-4q9f-96v5-4x47.json @@ -7,12 +7,8 @@ "CVE-2005-0185" ], "details": "Stack-based buffer overflow in NodeManager Professional 2.00 allows remote attackers to execute arbitrary commands via a LinkDown-Trap packet that contains a long OCTET-STRING in the Trap variable-bindings field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qf8-mc6q-42cr/GHSA-4qf8-mc6q-42cr.json b/advisories/unreviewed/2022/05/GHSA-4qf8-mc6q-42cr/GHSA-4qf8-mc6q-42cr.json index bfd19544572..9c5cfa455e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qf8-mc6q-42cr/GHSA-4qf8-mc6q-42cr.json +++ b/advisories/unreviewed/2022/05/GHSA-4qf8-mc6q-42cr/GHSA-4qf8-mc6q-42cr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r65-6rvv-8vhw/GHSA-4r65-6rvv-8vhw.json b/advisories/unreviewed/2022/05/GHSA-4r65-6rvv-8vhw/GHSA-4r65-6rvv-8vhw.json index d36bae3bd6c..9e977db1712 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r65-6rvv-8vhw/GHSA-4r65-6rvv-8vhw.json +++ b/advisories/unreviewed/2022/05/GHSA-4r65-6rvv-8vhw/GHSA-4r65-6rvv-8vhw.json @@ -7,12 +7,8 @@ "CVE-2021-31662" ], "details": "RIOT-OS 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe contains a buffer overflow which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4rcm-jqm5-f725/GHSA-4rcm-jqm5-f725.json b/advisories/unreviewed/2022/05/GHSA-4rcm-jqm5-f725/GHSA-4rcm-jqm5-f725.json index 46a502bb7b4..c85ef828532 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rcm-jqm5-f725/GHSA-4rcm-jqm5-f725.json +++ b/advisories/unreviewed/2022/05/GHSA-4rcm-jqm5-f725/GHSA-4rcm-jqm5-f725.json @@ -7,12 +7,8 @@ "CVE-2005-0082" ], "details": "The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4v94-29mp-g6pq/GHSA-4v94-29mp-g6pq.json b/advisories/unreviewed/2022/05/GHSA-4v94-29mp-g6pq/GHSA-4v94-29mp-g6pq.json index 9cd12481338..a8dcfd0448a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v94-29mp-g6pq/GHSA-4v94-29mp-g6pq.json +++ b/advisories/unreviewed/2022/05/GHSA-4v94-29mp-g6pq/GHSA-4v94-29mp-g6pq.json @@ -7,12 +7,8 @@ "CVE-2021-34393" ], "details": "Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4vjv-jxgw-m54w/GHSA-4vjv-jxgw-m54w.json b/advisories/unreviewed/2022/05/GHSA-4vjv-jxgw-m54w/GHSA-4vjv-jxgw-m54w.json index f1e3574926b..745fb2b0eec 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vjv-jxgw-m54w/GHSA-4vjv-jxgw-m54w.json +++ b/advisories/unreviewed/2022/05/GHSA-4vjv-jxgw-m54w/GHSA-4vjv-jxgw-m54w.json @@ -7,12 +7,8 @@ "CVE-2005-0112" ], "details": "The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xhm-pcpf-389c/GHSA-4xhm-pcpf-389c.json b/advisories/unreviewed/2022/05/GHSA-4xhm-pcpf-389c/GHSA-4xhm-pcpf-389c.json index 5e4b5709281..efb9dd1c293 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xhm-pcpf-389c/GHSA-4xhm-pcpf-389c.json +++ b/advisories/unreviewed/2022/05/GHSA-4xhm-pcpf-389c/GHSA-4xhm-pcpf-389c.json @@ -7,12 +7,8 @@ "CVE-2005-0088" ], "details": "The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52q6-3x8h-v328/GHSA-52q6-3x8h-v328.json b/advisories/unreviewed/2022/05/GHSA-52q6-3x8h-v328/GHSA-52q6-3x8h-v328.json index 4905bcd56e4..ae9dc9fde62 100644 --- a/advisories/unreviewed/2022/05/GHSA-52q6-3x8h-v328/GHSA-52q6-3x8h-v328.json +++ b/advisories/unreviewed/2022/05/GHSA-52q6-3x8h-v328/GHSA-52q6-3x8h-v328.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54fm-v4q3-3hpp/GHSA-54fm-v4q3-3hpp.json b/advisories/unreviewed/2022/05/GHSA-54fm-v4q3-3hpp/GHSA-54fm-v4q3-3hpp.json index 4f9a248ae97..e64b0f8109f 100644 --- a/advisories/unreviewed/2022/05/GHSA-54fm-v4q3-3hpp/GHSA-54fm-v4q3-3hpp.json +++ b/advisories/unreviewed/2022/05/GHSA-54fm-v4q3-3hpp/GHSA-54fm-v4q3-3hpp.json @@ -7,12 +7,8 @@ "CVE-2020-18666" ], "details": "Cross Site Scripting (XSS) vulnerability WebPort <=1.19.1 via the connection name parameter in type-conn.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54jh-gr2j-w5jp/GHSA-54jh-gr2j-w5jp.json b/advisories/unreviewed/2022/05/GHSA-54jh-gr2j-w5jp/GHSA-54jh-gr2j-w5jp.json index dc9d745aa4d..16b452f6c8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-54jh-gr2j-w5jp/GHSA-54jh-gr2j-w5jp.json +++ b/advisories/unreviewed/2022/05/GHSA-54jh-gr2j-w5jp/GHSA-54jh-gr2j-w5jp.json @@ -7,12 +7,8 @@ "CVE-2021-35438" ], "details": "phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets/ipcalc-result.php and app/tools/ip-calculator/result.php of the IP calculator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56w6-634g-9pc2/GHSA-56w6-634g-9pc2.json b/advisories/unreviewed/2022/05/GHSA-56w6-634g-9pc2/GHSA-56w6-634g-9pc2.json index f19d0fd872e..f2417a3d17a 100644 --- a/advisories/unreviewed/2022/05/GHSA-56w6-634g-9pc2/GHSA-56w6-634g-9pc2.json +++ b/advisories/unreviewed/2022/05/GHSA-56w6-634g-9pc2/GHSA-56w6-634g-9pc2.json @@ -7,12 +7,8 @@ "CVE-2005-0179" ], "details": "Linux kernel 2.4.x and 2.6.x allows local users to cause a denial of service (CPU and memory consumption) and bypass RLIM_MEMLOCK limits via the mlockall call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5c3g-m9wm-47j8/GHSA-5c3g-m9wm-47j8.json b/advisories/unreviewed/2022/05/GHSA-5c3g-m9wm-47j8/GHSA-5c3g-m9wm-47j8.json index 647a1d513a3..ad3cf8b5f12 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c3g-m9wm-47j8/GHSA-5c3g-m9wm-47j8.json +++ b/advisories/unreviewed/2022/05/GHSA-5c3g-m9wm-47j8/GHSA-5c3g-m9wm-47j8.json @@ -7,12 +7,8 @@ "CVE-2021-0525" ], "details": "In memory management driver, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193929", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c5r-8fp8-5g68/GHSA-5c5r-8fp8-5g68.json b/advisories/unreviewed/2022/05/GHSA-5c5r-8fp8-5g68/GHSA-5c5r-8fp8-5g68.json index 79c35716f95..4a62d9fa30d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c5r-8fp8-5g68/GHSA-5c5r-8fp8-5g68.json +++ b/advisories/unreviewed/2022/05/GHSA-5c5r-8fp8-5g68/GHSA-5c5r-8fp8-5g68.json @@ -7,12 +7,8 @@ "CVE-2021-20744" ], "details": "Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fpx-ww3h-p9hw/GHSA-5fpx-ww3h-p9hw.json b/advisories/unreviewed/2022/05/GHSA-5fpx-ww3h-p9hw/GHSA-5fpx-ww3h-p9hw.json index a56c2896c48..9c80ac47479 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fpx-ww3h-p9hw/GHSA-5fpx-ww3h-p9hw.json +++ b/advisories/unreviewed/2022/05/GHSA-5fpx-ww3h-p9hw/GHSA-5fpx-ww3h-p9hw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gr3-hcq9-fp58/GHSA-5gr3-hcq9-fp58.json b/advisories/unreviewed/2022/05/GHSA-5gr3-hcq9-fp58/GHSA-5gr3-hcq9-fp58.json index c6cedc23ea4..0163268a0e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gr3-hcq9-fp58/GHSA-5gr3-hcq9-fp58.json +++ b/advisories/unreviewed/2022/05/GHSA-5gr3-hcq9-fp58/GHSA-5gr3-hcq9-fp58.json @@ -7,12 +7,8 @@ "CVE-2021-0529" ], "details": "In memory management driver, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195268", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5h3c-qqwc-xg6r/GHSA-5h3c-qqwc-xg6r.json b/advisories/unreviewed/2022/05/GHSA-5h3c-qqwc-xg6r/GHSA-5h3c-qqwc-xg6r.json index e41262e6099..cd0740637f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5h3c-qqwc-xg6r/GHSA-5h3c-qqwc-xg6r.json +++ b/advisories/unreviewed/2022/05/GHSA-5h3c-qqwc-xg6r/GHSA-5h3c-qqwc-xg6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pc3-x247-jxch/GHSA-5pc3-x247-jxch.json b/advisories/unreviewed/2022/05/GHSA-5pc3-x247-jxch/GHSA-5pc3-x247-jxch.json index d4e5c15030e..dc2053c8180 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pc3-x247-jxch/GHSA-5pc3-x247-jxch.json +++ b/advisories/unreviewed/2022/05/GHSA-5pc3-x247-jxch/GHSA-5pc3-x247-jxch.json @@ -7,12 +7,8 @@ "CVE-2021-23998" ], "details": "Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pc4-m6cr-g3jj/GHSA-5pc4-m6cr-g3jj.json b/advisories/unreviewed/2022/05/GHSA-5pc4-m6cr-g3jj/GHSA-5pc4-m6cr-g3jj.json index b217990e1ae..7787398bcbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pc4-m6cr-g3jj/GHSA-5pc4-m6cr-g3jj.json +++ b/advisories/unreviewed/2022/05/GHSA-5pc4-m6cr-g3jj/GHSA-5pc4-m6cr-g3jj.json @@ -7,12 +7,8 @@ "CVE-2021-0527" ], "details": "In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185193931", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q34-v6j2-j4rj/GHSA-5q34-v6j2-j4rj.json b/advisories/unreviewed/2022/05/GHSA-5q34-v6j2-j4rj/GHSA-5q34-v6j2-j4rj.json index ad548fdcc39..24f72d5100a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q34-v6j2-j4rj/GHSA-5q34-v6j2-j4rj.json +++ b/advisories/unreviewed/2022/05/GHSA-5q34-v6j2-j4rj/GHSA-5q34-v6j2-j4rj.json @@ -7,12 +7,8 @@ "CVE-2005-0313" ], "details": "Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote authenticated users to read, create, or delete arbitrary directories and files via the IMAP commands (3) CREATE, (4) EXAMINE, (5) SELECT, or (6) DELETE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5q95-qxxg-m7v4/GHSA-5q95-qxxg-m7v4.json b/advisories/unreviewed/2022/05/GHSA-5q95-qxxg-m7v4/GHSA-5q95-qxxg-m7v4.json index ea474b98bd2..3db3219095c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q95-qxxg-m7v4/GHSA-5q95-qxxg-m7v4.json +++ b/advisories/unreviewed/2022/05/GHSA-5q95-qxxg-m7v4/GHSA-5q95-qxxg-m7v4.json @@ -7,12 +7,8 @@ "CVE-2021-34392" ], "details": "Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qqj-9rmr-mpf8/GHSA-5qqj-9rmr-mpf8.json b/advisories/unreviewed/2022/05/GHSA-5qqj-9rmr-mpf8/GHSA-5qqj-9rmr-mpf8.json index 772bddb9e06..34bf098506d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qqj-9rmr-mpf8/GHSA-5qqj-9rmr-mpf8.json +++ b/advisories/unreviewed/2022/05/GHSA-5qqj-9rmr-mpf8/GHSA-5qqj-9rmr-mpf8.json @@ -7,12 +7,8 @@ "CVE-2021-20741" ], "details": "Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and earlier and Hitachi Application Server V10 Manual (UNIX) version 10-11-01 and earlier) allows a remote attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5v6x-7gxg-5hfg/GHSA-5v6x-7gxg-5hfg.json b/advisories/unreviewed/2022/05/GHSA-5v6x-7gxg-5hfg/GHSA-5v6x-7gxg-5hfg.json index bc1ba4d3e16..08c6cab86e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v6x-7gxg-5hfg/GHSA-5v6x-7gxg-5hfg.json +++ b/advisories/unreviewed/2022/05/GHSA-5v6x-7gxg-5hfg/GHSA-5v6x-7gxg-5hfg.json @@ -7,12 +7,8 @@ "CVE-2005-0104" ], "details": "Cross-site scripting (XSS) vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via certain integer variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v9p-7pr9-r9pm/GHSA-5v9p-7pr9-r9pm.json b/advisories/unreviewed/2022/05/GHSA-5v9p-7pr9-r9pm/GHSA-5v9p-7pr9-r9pm.json index fdef41611ad..29847ea025a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v9p-7pr9-r9pm/GHSA-5v9p-7pr9-r9pm.json +++ b/advisories/unreviewed/2022/05/GHSA-5v9p-7pr9-r9pm/GHSA-5v9p-7pr9-r9pm.json @@ -7,12 +7,8 @@ "CVE-2021-29957" ], "details": "If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird < 78.10.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vw8-r55w-f4q4/GHSA-5vw8-r55w-f4q4.json b/advisories/unreviewed/2022/05/GHSA-5vw8-r55w-f4q4/GHSA-5vw8-r55w-f4q4.json index 6aa8cd8f4da..fd1bb9f219a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vw8-r55w-f4q4/GHSA-5vw8-r55w-f4q4.json +++ b/advisories/unreviewed/2022/05/GHSA-5vw8-r55w-f4q4/GHSA-5vw8-r55w-f4q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wf8-mf9h-53x2/GHSA-5wf8-mf9h-53x2.json b/advisories/unreviewed/2022/05/GHSA-5wf8-mf9h-53x2/GHSA-5wf8-mf9h-53x2.json index 6114d7a53bc..3593e82c7c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wf8-mf9h-53x2/GHSA-5wf8-mf9h-53x2.json +++ b/advisories/unreviewed/2022/05/GHSA-5wf8-mf9h-53x2/GHSA-5wf8-mf9h-53x2.json @@ -7,12 +7,8 @@ "CVE-2020-17759" ], "details": "An issue was found in the Evernote client for Windows 10, 7, and 2008 in the protocol handler. This enables attackers for arbitrary command execution if the user clicks on a specially crafted URL. AKA: WINNOTE-19941.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-64j6-qhj9-rrxj/GHSA-64j6-qhj9-rrxj.json b/advisories/unreviewed/2022/05/GHSA-64j6-qhj9-rrxj/GHSA-64j6-qhj9-rrxj.json index d82021d4c8b..5669b9f92e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-64j6-qhj9-rrxj/GHSA-64j6-qhj9-rrxj.json +++ b/advisories/unreviewed/2022/05/GHSA-64j6-qhj9-rrxj/GHSA-64j6-qhj9-rrxj.json @@ -7,12 +7,8 @@ "CVE-2005-0078" ], "details": "The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-664m-x4hw-rr54/GHSA-664m-x4hw-rr54.json b/advisories/unreviewed/2022/05/GHSA-664m-x4hw-rr54/GHSA-664m-x4hw-rr54.json index d85525c2d03..3758c612fdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-664m-x4hw-rr54/GHSA-664m-x4hw-rr54.json +++ b/advisories/unreviewed/2022/05/GHSA-664m-x4hw-rr54/GHSA-664m-x4hw-rr54.json @@ -7,12 +7,8 @@ "CVE-2005-0326" ], "details": "pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-666g-rqqj-3462/GHSA-666g-rqqj-3462.json b/advisories/unreviewed/2022/05/GHSA-666g-rqqj-3462/GHSA-666g-rqqj-3462.json index 07ef074bde9..f4721a501f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-666g-rqqj-3462/GHSA-666g-rqqj-3462.json +++ b/advisories/unreviewed/2022/05/GHSA-666g-rqqj-3462/GHSA-666g-rqqj-3462.json @@ -7,12 +7,8 @@ "CVE-2021-21574" ], "details": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-672r-q8mg-g4w9/GHSA-672r-q8mg-g4w9.json b/advisories/unreviewed/2022/05/GHSA-672r-q8mg-g4w9/GHSA-672r-q8mg-g4w9.json index 8da1a83f5a6..27c8a88450b 100644 --- a/advisories/unreviewed/2022/05/GHSA-672r-q8mg-g4w9/GHSA-672r-q8mg-g4w9.json +++ b/advisories/unreviewed/2022/05/GHSA-672r-q8mg-g4w9/GHSA-672r-q8mg-g4w9.json @@ -7,12 +7,8 @@ "CVE-2005-0079" ], "details": "Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the desktop session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-67ww-vw8q-pgg5/GHSA-67ww-vw8q-pgg5.json b/advisories/unreviewed/2022/05/GHSA-67ww-vw8q-pgg5/GHSA-67ww-vw8q-pgg5.json index e2733200351..f217d6bc878 100644 --- a/advisories/unreviewed/2022/05/GHSA-67ww-vw8q-pgg5/GHSA-67ww-vw8q-pgg5.json +++ b/advisories/unreviewed/2022/05/GHSA-67ww-vw8q-pgg5/GHSA-67ww-vw8q-pgg5.json @@ -7,12 +7,8 @@ "CVE-2005-0315" ], "details": "The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68f8-7q4q-vfpm/GHSA-68f8-7q4q-vfpm.json b/advisories/unreviewed/2022/05/GHSA-68f8-7q4q-vfpm/GHSA-68f8-7q4q-vfpm.json index 14309aaa4b2..2245daec3f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-68f8-7q4q-vfpm/GHSA-68f8-7q4q-vfpm.json +++ b/advisories/unreviewed/2022/05/GHSA-68f8-7q4q-vfpm/GHSA-68f8-7q4q-vfpm.json @@ -7,12 +7,8 @@ "CVE-2021-34069" ], "details": "Divide-by-zero bug in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68px-55q2-4wr8/GHSA-68px-55q2-4wr8.json b/advisories/unreviewed/2022/05/GHSA-68px-55q2-4wr8/GHSA-68px-55q2-4wr8.json index 3adbbc1c79b..bf34b19179a 100644 --- a/advisories/unreviewed/2022/05/GHSA-68px-55q2-4wr8/GHSA-68px-55q2-4wr8.json +++ b/advisories/unreviewed/2022/05/GHSA-68px-55q2-4wr8/GHSA-68px-55q2-4wr8.json @@ -7,12 +7,8 @@ "CVE-2021-34071" ], "details": "Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fpf-rm62-frrc/GHSA-6fpf-rm62-frrc.json b/advisories/unreviewed/2022/05/GHSA-6fpf-rm62-frrc/GHSA-6fpf-rm62-frrc.json index 2d797edf0be..76667f6801a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fpf-rm62-frrc/GHSA-6fpf-rm62-frrc.json +++ b/advisories/unreviewed/2022/05/GHSA-6fpf-rm62-frrc/GHSA-6fpf-rm62-frrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g7g-h4hh-5mw5/GHSA-6g7g-h4hh-5mw5.json b/advisories/unreviewed/2022/05/GHSA-6g7g-h4hh-5mw5/GHSA-6g7g-h4hh-5mw5.json index 39aa05acb53..b84b11aa587 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g7g-h4hh-5mw5/GHSA-6g7g-h4hh-5mw5.json +++ b/advisories/unreviewed/2022/05/GHSA-6g7g-h4hh-5mw5/GHSA-6g7g-h4hh-5mw5.json @@ -7,12 +7,8 @@ "CVE-2005-0124" ], "details": "The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause a denial of service (crash) or execute arbitrary code via negative vi.in_size or vi.out_size values, which may trigger a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6h2p-3jmw-582j/GHSA-6h2p-3jmw-582j.json b/advisories/unreviewed/2022/05/GHSA-6h2p-3jmw-582j/GHSA-6h2p-3jmw-582j.json index 161826d4e1a..64b084e682a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h2p-3jmw-582j/GHSA-6h2p-3jmw-582j.json +++ b/advisories/unreviewed/2022/05/GHSA-6h2p-3jmw-582j/GHSA-6h2p-3jmw-582j.json @@ -7,12 +7,8 @@ "CVE-2005-0080" ], "details": "The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on whether the e-mail address is subscribed to a private list, which allows remote attackers to determine the list membership for a given e-mail address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6h9h-w393-9gcp/GHSA-6h9h-w393-9gcp.json b/advisories/unreviewed/2022/05/GHSA-6h9h-w393-9gcp/GHSA-6h9h-w393-9gcp.json index 93bc2300c8c..45e7b955eff 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h9h-w393-9gcp/GHSA-6h9h-w393-9gcp.json +++ b/advisories/unreviewed/2022/05/GHSA-6h9h-w393-9gcp/GHSA-6h9h-w393-9gcp.json @@ -7,12 +7,8 @@ "CVE-2021-27659" ], "details": "exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mgf-v5gc-vgc7/GHSA-6mgf-v5gc-vgc7.json b/advisories/unreviewed/2022/05/GHSA-6mgf-v5gc-vgc7/GHSA-6mgf-v5gc-vgc7.json index ef803c0e8b3..74860f0abe3 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mgf-v5gc-vgc7/GHSA-6mgf-v5gc-vgc7.json +++ b/advisories/unreviewed/2022/05/GHSA-6mgf-v5gc-vgc7/GHSA-6mgf-v5gc-vgc7.json @@ -7,12 +7,8 @@ "CVE-2021-29964" ], "details": "A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mvg-c283-q7q6/GHSA-6mvg-c283-q7q6.json b/advisories/unreviewed/2022/05/GHSA-6mvg-c283-q7q6/GHSA-6mvg-c283-q7q6.json index 40bd319d06a..419f16306cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mvg-c283-q7q6/GHSA-6mvg-c283-q7q6.json +++ b/advisories/unreviewed/2022/05/GHSA-6mvg-c283-q7q6/GHSA-6mvg-c283-q7q6.json @@ -7,12 +7,8 @@ "CVE-2005-0087" ], "details": "The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6pq3-8569-3687/GHSA-6pq3-8569-3687.json b/advisories/unreviewed/2022/05/GHSA-6pq3-8569-3687/GHSA-6pq3-8569-3687.json index 3408860f334..bc2e40fe928 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pq3-8569-3687/GHSA-6pq3-8569-3687.json +++ b/advisories/unreviewed/2022/05/GHSA-6pq3-8569-3687/GHSA-6pq3-8569-3687.json @@ -7,12 +7,8 @@ "CVE-2021-0555" ], "details": "In RenderStruct of protostream_objectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179161711", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qcm-43w7-jxg6/GHSA-6qcm-43w7-jxg6.json b/advisories/unreviewed/2022/05/GHSA-6qcm-43w7-jxg6/GHSA-6qcm-43w7-jxg6.json index d73c0d45abf..6c049a30300 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qcm-43w7-jxg6/GHSA-6qcm-43w7-jxg6.json +++ b/advisories/unreviewed/2022/05/GHSA-6qcm-43w7-jxg6/GHSA-6qcm-43w7-jxg6.json @@ -7,12 +7,8 @@ "CVE-2005-0151" ], "details": "Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qjw-qgr8-m5c4/GHSA-6qjw-qgr8-m5c4.json b/advisories/unreviewed/2022/05/GHSA-6qjw-qgr8-m5c4/GHSA-6qjw-qgr8-m5c4.json index 3d783ffde5e..8feaf80c101 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qjw-qgr8-m5c4/GHSA-6qjw-qgr8-m5c4.json +++ b/advisories/unreviewed/2022/05/GHSA-6qjw-qgr8-m5c4/GHSA-6qjw-qgr8-m5c4.json @@ -7,12 +7,8 @@ "CVE-2021-34389" ], "details": "Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check leads to a memory leak of a portion of the heap situated after a stream buffer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rwq-388v-8mmp/GHSA-6rwq-388v-8mmp.json b/advisories/unreviewed/2022/05/GHSA-6rwq-388v-8mmp/GHSA-6rwq-388v-8mmp.json index 24e65362123..9e8e7025c5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rwq-388v-8mmp/GHSA-6rwq-388v-8mmp.json +++ b/advisories/unreviewed/2022/05/GHSA-6rwq-388v-8mmp/GHSA-6rwq-388v-8mmp.json @@ -7,12 +7,8 @@ "CVE-2021-0532" ], "details": "In memory management driver, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185196177", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6w9w-v5mc-3h2j/GHSA-6w9w-v5mc-3h2j.json b/advisories/unreviewed/2022/05/GHSA-6w9w-v5mc-3h2j/GHSA-6w9w-v5mc-3h2j.json index 1d9f92fc4d0..d522d9c0484 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w9w-v5mc-3h2j/GHSA-6w9w-v5mc-3h2j.json +++ b/advisories/unreviewed/2022/05/GHSA-6w9w-v5mc-3h2j/GHSA-6w9w-v5mc-3h2j.json @@ -7,12 +7,8 @@ "CVE-2005-0193" ], "details": "Buffer overflow in the (1) -v and (2) -a switches in mRouter in iSync 1.5 in Mac OS X 10.3.7 and earlier allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6wgp-m8wf-9325/GHSA-6wgp-m8wf-9325.json b/advisories/unreviewed/2022/05/GHSA-6wgp-m8wf-9325/GHSA-6wgp-m8wf-9325.json index 7ead389fa84..3f2e6c755a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wgp-m8wf-9325/GHSA-6wgp-m8wf-9325.json +++ b/advisories/unreviewed/2022/05/GHSA-6wgp-m8wf-9325/GHSA-6wgp-m8wf-9325.json @@ -7,12 +7,8 @@ "CVE-2005-0148" ], "details": "Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72gx-7v6f-2rr9/GHSA-72gx-7v6f-2rr9.json b/advisories/unreviewed/2022/05/GHSA-72gx-7v6f-2rr9/GHSA-72gx-7v6f-2rr9.json index 7f352dc4c84..cd12db7fd8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-72gx-7v6f-2rr9/GHSA-72gx-7v6f-2rr9.json +++ b/advisories/unreviewed/2022/05/GHSA-72gx-7v6f-2rr9/GHSA-72gx-7v6f-2rr9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cpc-3c6p-38qh/GHSA-7cpc-3c6p-38qh.json b/advisories/unreviewed/2022/05/GHSA-7cpc-3c6p-38qh/GHSA-7cpc-3c6p-38qh.json index 5e4adad90d0..c0008a0fd1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cpc-3c6p-38qh/GHSA-7cpc-3c6p-38qh.json +++ b/advisories/unreviewed/2022/05/GHSA-7cpc-3c6p-38qh/GHSA-7cpc-3c6p-38qh.json @@ -7,12 +7,8 @@ "CVE-2021-25656" ], "details": "Stored XSS injection vulnerabilities were discovered in the Avaya Aura Experience Portal Web management which could allow an authenticated user to potentially disclose sensitive information. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jg3-xhjc-3m75/GHSA-7jg3-xhjc-3m75.json b/advisories/unreviewed/2022/05/GHSA-7jg3-xhjc-3m75/GHSA-7jg3-xhjc-3m75.json index 29b7d33fd4e..7c4438a49e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jg3-xhjc-3m75/GHSA-7jg3-xhjc-3m75.json +++ b/advisories/unreviewed/2022/05/GHSA-7jg3-xhjc-3m75/GHSA-7jg3-xhjc-3m75.json @@ -7,12 +7,8 @@ "CVE-2005-0308" ], "details": "Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or export function name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7v34-qmrf-6vq8/GHSA-7v34-qmrf-6vq8.json b/advisories/unreviewed/2022/05/GHSA-7v34-qmrf-6vq8/GHSA-7v34-qmrf-6vq8.json index c4dbacd8f16..1afe87db4ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v34-qmrf-6vq8/GHSA-7v34-qmrf-6vq8.json +++ b/advisories/unreviewed/2022/05/GHSA-7v34-qmrf-6vq8/GHSA-7v34-qmrf-6vq8.json @@ -7,12 +7,8 @@ "CVE-2021-32243" ], "details": "FOGProject v1.5.9 is affected by a File Upload RCE (Authenticated).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wg5-v5xw-j9f6/GHSA-7wg5-v5xw-j9f6.json b/advisories/unreviewed/2022/05/GHSA-7wg5-v5xw-j9f6/GHSA-7wg5-v5xw-j9f6.json index 835def4ea19..cec0d903cb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wg5-v5xw-j9f6/GHSA-7wg5-v5xw-j9f6.json +++ b/advisories/unreviewed/2022/05/GHSA-7wg5-v5xw-j9f6/GHSA-7wg5-v5xw-j9f6.json @@ -7,12 +7,8 @@ "CVE-2005-0174" ], "details": "Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7x6v-w562-gm77/GHSA-7x6v-w562-gm77.json b/advisories/unreviewed/2022/05/GHSA-7x6v-w562-gm77/GHSA-7x6v-w562-gm77.json index acee70534db..8e087cb11c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x6v-w562-gm77/GHSA-7x6v-w562-gm77.json +++ b/advisories/unreviewed/2022/05/GHSA-7x6v-w562-gm77/GHSA-7x6v-w562-gm77.json @@ -7,12 +7,8 @@ "CVE-2020-20391" ], "details": "Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xgh-mp43-jp2c/GHSA-7xgh-mp43-jp2c.json b/advisories/unreviewed/2022/05/GHSA-7xgh-mp43-jp2c/GHSA-7xgh-mp43-jp2c.json index 28972dae285..6ec831eb346 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xgh-mp43-jp2c/GHSA-7xgh-mp43-jp2c.json +++ b/advisories/unreviewed/2022/05/GHSA-7xgh-mp43-jp2c/GHSA-7xgh-mp43-jp2c.json @@ -7,12 +7,8 @@ "CVE-2005-0209" ], "details": "Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-87jx-4wq7-9wr5/GHSA-87jx-4wq7-9wr5.json b/advisories/unreviewed/2022/05/GHSA-87jx-4wq7-9wr5/GHSA-87jx-4wq7-9wr5.json index 99743be1da8..faa6f25c1e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-87jx-4wq7-9wr5/GHSA-87jx-4wq7-9wr5.json +++ b/advisories/unreviewed/2022/05/GHSA-87jx-4wq7-9wr5/GHSA-87jx-4wq7-9wr5.json @@ -7,12 +7,8 @@ "CVE-2005-0202" ], "details": "Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbitrary files via \".../....///\" sequences, which are not properly cleansed by regular expressions that are intended to remove \"../\" and \"./\" sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87qc-xcg5-22xv/GHSA-87qc-xcg5-22xv.json b/advisories/unreviewed/2022/05/GHSA-87qc-xcg5-22xv/GHSA-87qc-xcg5-22xv.json index ebcd064182c..9c369b6356c 100644 --- a/advisories/unreviewed/2022/05/GHSA-87qc-xcg5-22xv/GHSA-87qc-xcg5-22xv.json +++ b/advisories/unreviewed/2022/05/GHSA-87qc-xcg5-22xv/GHSA-87qc-xcg5-22xv.json @@ -7,12 +7,8 @@ "CVE-2005-0118" ], "details": "helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to read the recovered files of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-88p3-h3gw-7xj6/GHSA-88p3-h3gw-7xj6.json b/advisories/unreviewed/2022/05/GHSA-88p3-h3gw-7xj6/GHSA-88p3-h3gw-7xj6.json index 1f3fd3b7697..892cfb213ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-88p3-h3gw-7xj6/GHSA-88p3-h3gw-7xj6.json +++ b/advisories/unreviewed/2022/05/GHSA-88p3-h3gw-7xj6/GHSA-88p3-h3gw-7xj6.json @@ -7,12 +7,8 @@ "CVE-2021-29968" ], "details": "When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89wh-w7hc-jhpc/GHSA-89wh-w7hc-jhpc.json b/advisories/unreviewed/2022/05/GHSA-89wh-w7hc-jhpc/GHSA-89wh-w7hc-jhpc.json index 2fd5cf6daba..edc653baa01 100644 --- a/advisories/unreviewed/2022/05/GHSA-89wh-w7hc-jhpc/GHSA-89wh-w7hc-jhpc.json +++ b/advisories/unreviewed/2022/05/GHSA-89wh-w7hc-jhpc/GHSA-89wh-w7hc-jhpc.json @@ -7,12 +7,8 @@ "CVE-2021-34387" ], "details": "The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is otherwise mapped read only.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8f38-4m5j-j72v/GHSA-8f38-4m5j-j72v.json b/advisories/unreviewed/2022/05/GHSA-8f38-4m5j-j72v/GHSA-8f38-4m5j-j72v.json index 6f64c5f3e9e..b1783f37af4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f38-4m5j-j72v/GHSA-8f38-4m5j-j72v.json +++ b/advisories/unreviewed/2022/05/GHSA-8f38-4m5j-j72v/GHSA-8f38-4m5j-j72v.json @@ -7,12 +7,8 @@ "CVE-2005-0189" ], "details": "Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f62-jh9f-ffg5/GHSA-8f62-jh9f-ffg5.json b/advisories/unreviewed/2022/05/GHSA-8f62-jh9f-ffg5/GHSA-8f62-jh9f-ffg5.json index 144bdbc2362..acc667c94ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f62-jh9f-ffg5/GHSA-8f62-jh9f-ffg5.json +++ b/advisories/unreviewed/2022/05/GHSA-8f62-jh9f-ffg5/GHSA-8f62-jh9f-ffg5.json @@ -7,12 +7,8 @@ "CVE-2005-0143" ], "details": "Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8gr4-jgmh-5g8w/GHSA-8gr4-jgmh-5g8w.json b/advisories/unreviewed/2022/05/GHSA-8gr4-jgmh-5g8w/GHSA-8gr4-jgmh-5g8w.json index 762cec4d36b..223f9daa752 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gr4-jgmh-5g8w/GHSA-8gr4-jgmh-5g8w.json +++ b/advisories/unreviewed/2022/05/GHSA-8gr4-jgmh-5g8w/GHSA-8gr4-jgmh-5g8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p47-83g5-grhh/GHSA-8p47-83g5-grhh.json b/advisories/unreviewed/2022/05/GHSA-8p47-83g5-grhh/GHSA-8p47-83g5-grhh.json index 5db58eaa988..780665682b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p47-83g5-grhh/GHSA-8p47-83g5-grhh.json +++ b/advisories/unreviewed/2022/05/GHSA-8p47-83g5-grhh/GHSA-8p47-83g5-grhh.json @@ -7,12 +7,8 @@ "CVE-2005-0069" ], "details": "The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8pcw-jr9p-76hj/GHSA-8pcw-jr9p-76hj.json b/advisories/unreviewed/2022/05/GHSA-8pcw-jr9p-76hj/GHSA-8pcw-jr9p-76hj.json index 5117ef5205a..844ee651f8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pcw-jr9p-76hj/GHSA-8pcw-jr9p-76hj.json +++ b/advisories/unreviewed/2022/05/GHSA-8pcw-jr9p-76hj/GHSA-8pcw-jr9p-76hj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rpf-vwv9-2wfm/GHSA-8rpf-vwv9-2wfm.json b/advisories/unreviewed/2022/05/GHSA-8rpf-vwv9-2wfm/GHSA-8rpf-vwv9-2wfm.json index ea2b6a8c461..1e44cbcac5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rpf-vwv9-2wfm/GHSA-8rpf-vwv9-2wfm.json +++ b/advisories/unreviewed/2022/05/GHSA-8rpf-vwv9-2wfm/GHSA-8rpf-vwv9-2wfm.json @@ -7,12 +7,8 @@ "CVE-2021-34397" ], "details": "Bootloader contains a vulnerability in NVIDIA MB2, which may cause free-the-wrong-heap, which may lead to limited denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vmw-7m92-qcrr/GHSA-8vmw-7m92-qcrr.json b/advisories/unreviewed/2022/05/GHSA-8vmw-7m92-qcrr/GHSA-8vmw-7m92-qcrr.json index 1562f4a7662..e8cff3778e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vmw-7m92-qcrr/GHSA-8vmw-7m92-qcrr.json +++ b/advisories/unreviewed/2022/05/GHSA-8vmw-7m92-qcrr/GHSA-8vmw-7m92-qcrr.json @@ -7,12 +7,8 @@ "CVE-2005-0320" ], "details": "Multiple cross-site scripting vulnerabilities in MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to login.html, (2) accountid parameter to accountsettings_add.html, or the (3) note, (4) title, and (5) location fields to calendar.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8xph-hh2v-cx4g/GHSA-8xph-hh2v-cx4g.json b/advisories/unreviewed/2022/05/GHSA-8xph-hh2v-cx4g/GHSA-8xph-hh2v-cx4g.json index 88a697c1ddb..c9c28bd1617 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xph-hh2v-cx4g/GHSA-8xph-hh2v-cx4g.json +++ b/advisories/unreviewed/2022/05/GHSA-8xph-hh2v-cx4g/GHSA-8xph-hh2v-cx4g.json @@ -7,12 +7,8 @@ "CVE-2020-18664" ], "details": "Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98vg-cwwq-ccc6/GHSA-98vg-cwwq-ccc6.json b/advisories/unreviewed/2022/05/GHSA-98vg-cwwq-ccc6/GHSA-98vg-cwwq-ccc6.json index 49663fce96e..a6372248471 100644 --- a/advisories/unreviewed/2022/05/GHSA-98vg-cwwq-ccc6/GHSA-98vg-cwwq-ccc6.json +++ b/advisories/unreviewed/2022/05/GHSA-98vg-cwwq-ccc6/GHSA-98vg-cwwq-ccc6.json @@ -7,12 +7,8 @@ "CVE-2005-0322" ], "details": "MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98x2-x9v8-mc67/GHSA-98x2-x9v8-mc67.json b/advisories/unreviewed/2022/05/GHSA-98x2-x9v8-mc67/GHSA-98x2-x9v8-mc67.json index 9cb3c9078c4..7d4cbdcf7c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-98x2-x9v8-mc67/GHSA-98x2-x9v8-mc67.json +++ b/advisories/unreviewed/2022/05/GHSA-98x2-x9v8-mc67/GHSA-98x2-x9v8-mc67.json @@ -7,12 +7,8 @@ "CVE-2005-0182" ], "details": "The mod_dosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-994h-6rhw-f376/GHSA-994h-6rhw-f376.json b/advisories/unreviewed/2022/05/GHSA-994h-6rhw-f376/GHSA-994h-6rhw-f376.json index ebc8e4a9d1e..74fb5df521d 100644 --- a/advisories/unreviewed/2022/05/GHSA-994h-6rhw-f376/GHSA-994h-6rhw-f376.json +++ b/advisories/unreviewed/2022/05/GHSA-994h-6rhw-f376/GHSA-994h-6rhw-f376.json @@ -7,12 +7,8 @@ "CVE-2021-29960" ], "details": "Firefox used to cache the last filename used for printing a file. When generating a filename for printing, Firefox usually suggests the web page title. The caching and suggestion techniques combined may have lead to the title of a website visited during private browsing mode being stored on disk. This vulnerability affects Firefox < 89.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9977-6673-28cw/GHSA-9977-6673-28cw.json b/advisories/unreviewed/2022/05/GHSA-9977-6673-28cw/GHSA-9977-6673-28cw.json index 7959afdc028..97bb0375c14 100644 --- a/advisories/unreviewed/2022/05/GHSA-9977-6673-28cw/GHSA-9977-6673-28cw.json +++ b/advisories/unreviewed/2022/05/GHSA-9977-6673-28cw/GHSA-9977-6673-28cw.json @@ -7,12 +7,8 @@ "CVE-2021-29087" ], "details": "Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-999h-9h4m-785q/GHSA-999h-9h4m-785q.json b/advisories/unreviewed/2022/05/GHSA-999h-9h4m-785q/GHSA-999h-9h4m-785q.json index 7c1529e70a7..d10694021ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-999h-9h4m-785q/GHSA-999h-9h4m-785q.json +++ b/advisories/unreviewed/2022/05/GHSA-999h-9h4m-785q/GHSA-999h-9h4m-785q.json @@ -7,12 +7,8 @@ "CVE-2021-0554" ], "details": "In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-158482162", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c23-7q2q-7jv8/GHSA-9c23-7q2q-7jv8.json b/advisories/unreviewed/2022/05/GHSA-9c23-7q2q-7jv8/GHSA-9c23-7q2q-7jv8.json index 1a7059bbd7d..007c1641bd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c23-7q2q-7jv8/GHSA-9c23-7q2q-7jv8.json +++ b/advisories/unreviewed/2022/05/GHSA-9c23-7q2q-7jv8/GHSA-9c23-7q2q-7jv8.json @@ -7,12 +7,8 @@ "CVE-2005-0157" ], "details": "The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cjm-m5w9-r55j/GHSA-9cjm-m5w9-r55j.json b/advisories/unreviewed/2022/05/GHSA-9cjm-m5w9-r55j/GHSA-9cjm-m5w9-r55j.json index e675021dbe8..1612a8bcf32 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cjm-m5w9-r55j/GHSA-9cjm-m5w9-r55j.json +++ b/advisories/unreviewed/2022/05/GHSA-9cjm-m5w9-r55j/GHSA-9cjm-m5w9-r55j.json @@ -7,12 +7,8 @@ "CVE-2005-0305" ], "details": "CRLF injection vulnerability in users.php in Siteman 1.1.10 and earlier allows remote attackers to add arbitrary users and gain privileges via the line parameter in a docreate operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cmv-hm5q-pjcr/GHSA-9cmv-hm5q-pjcr.json b/advisories/unreviewed/2022/05/GHSA-9cmv-hm5q-pjcr/GHSA-9cmv-hm5q-pjcr.json index 72d22f1c98e..e78ac45fd5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cmv-hm5q-pjcr/GHSA-9cmv-hm5q-pjcr.json +++ b/advisories/unreviewed/2022/05/GHSA-9cmv-hm5q-pjcr/GHSA-9cmv-hm5q-pjcr.json @@ -7,12 +7,8 @@ "CVE-2005-0114" ], "details": "vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.122.000 and 5.x before 5.1.556.166 do not properly verify that the ServerPortName argument to the NtConnectPort function is a valid memory address, which allows local users to cause a denial of service (system crash) when ZoneAlarm attempts to dereference an invalid pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f2f-wxmh-4h2q/GHSA-9f2f-wxmh-4h2q.json b/advisories/unreviewed/2022/05/GHSA-9f2f-wxmh-4h2q/GHSA-9f2f-wxmh-4h2q.json index e81312abdfa..2eec951a388 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f2f-wxmh-4h2q/GHSA-9f2f-wxmh-4h2q.json +++ b/advisories/unreviewed/2022/05/GHSA-9f2f-wxmh-4h2q/GHSA-9f2f-wxmh-4h2q.json @@ -7,12 +7,8 @@ "CVE-2005-0075" ], "details": "prefs.php in SquirrelMail before 1.4.4, with register_globals enabled, allows remote attackers to inject local code into the SquirrelMail code via custom preference handlers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f36-9vf2-jjwh/GHSA-9f36-9vf2-jjwh.json b/advisories/unreviewed/2022/05/GHSA-9f36-9vf2-jjwh/GHSA-9f36-9vf2-jjwh.json index 41d3b97de20..915bc9516b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f36-9vf2-jjwh/GHSA-9f36-9vf2-jjwh.json +++ b/advisories/unreviewed/2022/05/GHSA-9f36-9vf2-jjwh/GHSA-9f36-9vf2-jjwh.json @@ -7,12 +7,8 @@ "CVE-2021-29777" ], "details": "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being dropped while being accessed in another session, could allow an authenticated user to cause a denial of srevice IBM X-Force ID: 203031.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hcc-ghrw-wvh2/GHSA-9hcc-ghrw-wvh2.json b/advisories/unreviewed/2022/05/GHSA-9hcc-ghrw-wvh2/GHSA-9hcc-ghrw-wvh2.json index 686ec3dc1d6..78e75e65728 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hcc-ghrw-wvh2/GHSA-9hcc-ghrw-wvh2.json +++ b/advisories/unreviewed/2022/05/GHSA-9hcc-ghrw-wvh2/GHSA-9hcc-ghrw-wvh2.json @@ -7,12 +7,8 @@ "CVE-2005-0195" ], "details": "Cisco IOS 12.0S through 12.3YH allows remote attackers to cause a denial of service (device restart) via a crafted IPv6 packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hhh-wwq4-2mmv/GHSA-9hhh-wwq4-2mmv.json b/advisories/unreviewed/2022/05/GHSA-9hhh-wwq4-2mmv/GHSA-9hhh-wwq4-2mmv.json index f056bcf0ef6..6bb3b119492 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hhh-wwq4-2mmv/GHSA-9hhh-wwq4-2mmv.json +++ b/advisories/unreviewed/2022/05/GHSA-9hhh-wwq4-2mmv/GHSA-9hhh-wwq4-2mmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jfx-pp3f-r7cj/GHSA-9jfx-pp3f-r7cj.json b/advisories/unreviewed/2022/05/GHSA-9jfx-pp3f-r7cj/GHSA-9jfx-pp3f-r7cj.json index b574f544154..60b9310d756 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jfx-pp3f-r7cj/GHSA-9jfx-pp3f-r7cj.json +++ b/advisories/unreviewed/2022/05/GHSA-9jfx-pp3f-r7cj/GHSA-9jfx-pp3f-r7cj.json @@ -7,12 +7,8 @@ "CVE-2021-21997" ], "details": "VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest operating system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9m96-26q9-qh73/GHSA-9m96-26q9-qh73.json b/advisories/unreviewed/2022/05/GHSA-9m96-26q9-qh73/GHSA-9m96-26q9-qh73.json index 0bd64eeb5e9..49c24701390 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m96-26q9-qh73/GHSA-9m96-26q9-qh73.json +++ b/advisories/unreviewed/2022/05/GHSA-9m96-26q9-qh73/GHSA-9m96-26q9-qh73.json @@ -7,12 +7,8 @@ "CVE-2020-18665" ], "details": "Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m9c-v62f-2wgh/GHSA-9m9c-v62f-2wgh.json b/advisories/unreviewed/2022/05/GHSA-9m9c-v62f-2wgh/GHSA-9m9c-v62f-2wgh.json index 5827b5045f5..fc9a34ba3ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m9c-v62f-2wgh/GHSA-9m9c-v62f-2wgh.json +++ b/advisories/unreviewed/2022/05/GHSA-9m9c-v62f-2wgh/GHSA-9m9c-v62f-2wgh.json @@ -7,12 +7,8 @@ "CVE-2005-0121" ], "details": "Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argument or (2) a long username as recorded in the USER environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9q6c-4f46-hgf2/GHSA-9q6c-4f46-hgf2.json b/advisories/unreviewed/2022/05/GHSA-9q6c-4f46-hgf2/GHSA-9q6c-4f46-hgf2.json index fd4533669e4..b86277e377e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q6c-4f46-hgf2/GHSA-9q6c-4f46-hgf2.json +++ b/advisories/unreviewed/2022/05/GHSA-9q6c-4f46-hgf2/GHSA-9q6c-4f46-hgf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qmv-39gp-vcq7/GHSA-9qmv-39gp-vcq7.json b/advisories/unreviewed/2022/05/GHSA-9qmv-39gp-vcq7/GHSA-9qmv-39gp-vcq7.json index 7f5956550ab..d352c5a02c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qmv-39gp-vcq7/GHSA-9qmv-39gp-vcq7.json +++ b/advisories/unreviewed/2022/05/GHSA-9qmv-39gp-vcq7/GHSA-9qmv-39gp-vcq7.json @@ -7,12 +7,8 @@ "CVE-2021-0523" ], "details": "In onCreate of WifiScanModeActivity.java, there is a possible way to enable Wi-Fi scanning without user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-174047492", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r2g-q765-cqvp/GHSA-9r2g-q765-cqvp.json b/advisories/unreviewed/2022/05/GHSA-9r2g-q765-cqvp/GHSA-9r2g-q765-cqvp.json index 437bdbcb303..7c5a1c49519 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r2g-q765-cqvp/GHSA-9r2g-q765-cqvp.json +++ b/advisories/unreviewed/2022/05/GHSA-9r2g-q765-cqvp/GHSA-9r2g-q765-cqvp.json @@ -7,12 +7,8 @@ "CVE-2021-31480" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12654.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r9j-4ggm-j47r/GHSA-9r9j-4ggm-j47r.json b/advisories/unreviewed/2022/05/GHSA-9r9j-4ggm-j47r/GHSA-9r9j-4ggm-j47r.json index cadb5e282b2..6c0e9468602 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r9j-4ggm-j47r/GHSA-9r9j-4ggm-j47r.json +++ b/advisories/unreviewed/2022/05/GHSA-9r9j-4ggm-j47r/GHSA-9r9j-4ggm-j47r.json @@ -7,12 +7,8 @@ "CVE-2021-0534" ], "details": "In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170639543", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rpw-q7rj-xfj9/GHSA-9rpw-q7rj-xfj9.json b/advisories/unreviewed/2022/05/GHSA-9rpw-q7rj-xfj9/GHSA-9rpw-q7rj-xfj9.json index eddfe85efbb..492df8b47c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rpw-q7rj-xfj9/GHSA-9rpw-q7rj-xfj9.json +++ b/advisories/unreviewed/2022/05/GHSA-9rpw-q7rj-xfj9/GHSA-9rpw-q7rj-xfj9.json @@ -7,12 +7,8 @@ "CVE-2005-0299" ], "details": "Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3wv-6q45-fpmm/GHSA-c3wv-6q45-fpmm.json b/advisories/unreviewed/2022/05/GHSA-c3wv-6q45-fpmm/GHSA-c3wv-6q45-fpmm.json index 25e2f0fc804..975dfb14ea7 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3wv-6q45-fpmm/GHSA-c3wv-6q45-fpmm.json +++ b/advisories/unreviewed/2022/05/GHSA-c3wv-6q45-fpmm/GHSA-c3wv-6q45-fpmm.json @@ -7,12 +7,8 @@ "CVE-2005-0307" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c448-842q-vf3p/GHSA-c448-842q-vf3p.json b/advisories/unreviewed/2022/05/GHSA-c448-842q-vf3p/GHSA-c448-842q-vf3p.json index a876b393947..d587149ed75 100644 --- a/advisories/unreviewed/2022/05/GHSA-c448-842q-vf3p/GHSA-c448-842q-vf3p.json +++ b/advisories/unreviewed/2022/05/GHSA-c448-842q-vf3p/GHSA-c448-842q-vf3p.json @@ -7,12 +7,8 @@ "CVE-2021-0556" ], "details": "In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172716941", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c549-7qq5-xm9g/GHSA-c549-7qq5-xm9g.json b/advisories/unreviewed/2022/05/GHSA-c549-7qq5-xm9g/GHSA-c549-7qq5-xm9g.json index bd4be5d89c9..f9b6ab75843 100644 --- a/advisories/unreviewed/2022/05/GHSA-c549-7qq5-xm9g/GHSA-c549-7qq5-xm9g.json +++ b/advisories/unreviewed/2022/05/GHSA-c549-7qq5-xm9g/GHSA-c549-7qq5-xm9g.json @@ -7,12 +7,8 @@ "CVE-2021-27487" ], "details": "ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6fv-7r7c-32q7/GHSA-c6fv-7r7c-32q7.json b/advisories/unreviewed/2022/05/GHSA-c6fv-7r7c-32q7/GHSA-c6fv-7r7c-32q7.json index b0007f674f7..0b86658108e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6fv-7r7c-32q7/GHSA-c6fv-7r7c-32q7.json +++ b/advisories/unreviewed/2022/05/GHSA-c6fv-7r7c-32q7/GHSA-c6fv-7r7c-32q7.json @@ -7,12 +7,8 @@ "CVE-2021-21737" ], "details": "A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7q8-63qc-28xc/GHSA-c7q8-63qc-28xc.json b/advisories/unreviewed/2022/05/GHSA-c7q8-63qc-28xc/GHSA-c7q8-63qc-28xc.json index f0a05103936..a8f96bfaaa5 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7q8-63qc-28xc/GHSA-c7q8-63qc-28xc.json +++ b/advisories/unreviewed/2022/05/GHSA-c7q8-63qc-28xc/GHSA-c7q8-63qc-28xc.json @@ -7,12 +7,8 @@ "CVE-2021-0509" ], "details": "In various functions of CryptoPlugin.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444161", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8r4-w8p2-gf3q/GHSA-c8r4-w8p2-gf3q.json b/advisories/unreviewed/2022/05/GHSA-c8r4-w8p2-gf3q/GHSA-c8r4-w8p2-gf3q.json index 762f713c660..53e0293e542 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8r4-w8p2-gf3q/GHSA-c8r4-w8p2-gf3q.json +++ b/advisories/unreviewed/2022/05/GHSA-c8r4-w8p2-gf3q/GHSA-c8r4-w8p2-gf3q.json @@ -7,12 +7,8 @@ "CVE-2005-0106" ], "details": "SSLeay.pm in libnet-ssleay-perl before 1.25 uses the /tmp/entropy file for entropy if a source is not set in the EGD_PATH variable, which allows local users to reduce the cryptographic strength of certain operations by modifying the file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8rj-rc4g-57v5/GHSA-c8rj-rc4g-57v5.json b/advisories/unreviewed/2022/05/GHSA-c8rj-rc4g-57v5/GHSA-c8rj-rc4g-57v5.json index 366147c1e03..55f69a89e2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8rj-rc4g-57v5/GHSA-c8rj-rc4g-57v5.json +++ b/advisories/unreviewed/2022/05/GHSA-c8rj-rc4g-57v5/GHSA-c8rj-rc4g-57v5.json @@ -7,12 +7,8 @@ "CVE-2005-0152" ], "details": "PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via \"URL manipulation.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8wg-rg36-89gm/GHSA-c8wg-rg36-89gm.json b/advisories/unreviewed/2022/05/GHSA-c8wg-rg36-89gm/GHSA-c8wg-rg36-89gm.json index e7655af048e..1208554fac2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8wg-rg36-89gm/GHSA-c8wg-rg36-89gm.json +++ b/advisories/unreviewed/2022/05/GHSA-c8wg-rg36-89gm/GHSA-c8wg-rg36-89gm.json @@ -7,12 +7,8 @@ "CVE-2021-29946" ], "details": "Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cc3f-9j5h-rjr3/GHSA-cc3f-9j5h-rjr3.json b/advisories/unreviewed/2022/05/GHSA-cc3f-9j5h-rjr3/GHSA-cc3f-9j5h-rjr3.json index cc130d78894..052dea6751c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc3f-9j5h-rjr3/GHSA-cc3f-9j5h-rjr3.json +++ b/advisories/unreviewed/2022/05/GHSA-cc3f-9j5h-rjr3/GHSA-cc3f-9j5h-rjr3.json @@ -7,12 +7,8 @@ "CVE-2020-21785" ], "details": "In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg6w-97rj-9hvv/GHSA-cg6w-97rj-9hvv.json b/advisories/unreviewed/2022/05/GHSA-cg6w-97rj-9hvv/GHSA-cg6w-97rj-9hvv.json index f03a5def7da..b4b7fd15e70 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg6w-97rj-9hvv/GHSA-cg6w-97rj-9hvv.json +++ b/advisories/unreviewed/2022/05/GHSA-cg6w-97rj-9hvv/GHSA-cg6w-97rj-9hvv.json @@ -7,12 +7,8 @@ "CVE-2021-29944" ], "details": "Lack of escaping allowed HTML injection when a webpage was viewed in Reader View. While a Content Security Policy prevents direct code execution, HTML injection is still possible. *Note: This issue only affected Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 88.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgp3-jhw9-6v3h/GHSA-cgp3-jhw9-6v3h.json b/advisories/unreviewed/2022/05/GHSA-cgp3-jhw9-6v3h/GHSA-cgp3-jhw9-6v3h.json index ed708867d1b..1b0e5a930c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgp3-jhw9-6v3h/GHSA-cgp3-jhw9-6v3h.json +++ b/advisories/unreviewed/2022/05/GHSA-cgp3-jhw9-6v3h/GHSA-cgp3-jhw9-6v3h.json @@ -7,12 +7,8 @@ "CVE-2005-0183" ], "details": "ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to execute arbitrary commands via shell metacharacters in a command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chj7-x4mx-v4qg/GHSA-chj7-x4mx-v4qg.json b/advisories/unreviewed/2022/05/GHSA-chj7-x4mx-v4qg/GHSA-chj7-x4mx-v4qg.json index b736a513886..0969ecece80 100644 --- a/advisories/unreviewed/2022/05/GHSA-chj7-x4mx-v4qg/GHSA-chj7-x4mx-v4qg.json +++ b/advisories/unreviewed/2022/05/GHSA-chj7-x4mx-v4qg/GHSA-chj7-x4mx-v4qg.json @@ -7,12 +7,8 @@ "CVE-2020-17752" ], "details": "Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin (MON).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmg3-7h79-mcrf/GHSA-cmg3-7h79-mcrf.json b/advisories/unreviewed/2022/05/GHSA-cmg3-7h79-mcrf/GHSA-cmg3-7h79-mcrf.json index 9ddc109a97c..cc1acde84ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmg3-7h79-mcrf/GHSA-cmg3-7h79-mcrf.json +++ b/advisories/unreviewed/2022/05/GHSA-cmg3-7h79-mcrf/GHSA-cmg3-7h79-mcrf.json @@ -7,12 +7,8 @@ "CVE-2005-0191" ], "details": "Off-by-one buffer overflow in the processing of tags in Real Metadata Package (RMP) files in RealPlayer 10.5 (6.0.12.1040) and earlier could allow remote attackers to execute arbitrary code via a long tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cp36-9jg5-jrv5/GHSA-cp36-9jg5-jrv5.json b/advisories/unreviewed/2022/05/GHSA-cp36-9jg5-jrv5/GHSA-cp36-9jg5-jrv5.json index 500cf7e9a30..12e3ed8940a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp36-9jg5-jrv5/GHSA-cp36-9jg5-jrv5.json +++ b/advisories/unreviewed/2022/05/GHSA-cp36-9jg5-jrv5/GHSA-cp36-9jg5-jrv5.json @@ -7,12 +7,8 @@ "CVE-2021-23994" ], "details": "A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpjh-h2xv-8gx6/GHSA-cpjh-h2xv-8gx6.json b/advisories/unreviewed/2022/05/GHSA-cpjh-h2xv-8gx6/GHSA-cpjh-h2xv-8gx6.json index 1af54198949..1cf56f628f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpjh-h2xv-8gx6/GHSA-cpjh-h2xv-8gx6.json +++ b/advisories/unreviewed/2022/05/GHSA-cpjh-h2xv-8gx6/GHSA-cpjh-h2xv-8gx6.json @@ -7,12 +7,8 @@ "CVE-2021-28977" ], "details": "Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq93-45xx-x7xj/GHSA-cq93-45xx-x7xj.json b/advisories/unreviewed/2022/05/GHSA-cq93-45xx-x7xj/GHSA-cq93-45xx-x7xj.json index 3ac96901e96..ed57f5ac0e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq93-45xx-x7xj/GHSA-cq93-45xx-x7xj.json +++ b/advisories/unreviewed/2022/05/GHSA-cq93-45xx-x7xj/GHSA-cq93-45xx-x7xj.json @@ -7,12 +7,8 @@ "CVE-2021-34068" ], "details": "Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f22c-rppr-jp86/GHSA-f22c-rppr-jp86.json b/advisories/unreviewed/2022/05/GHSA-f22c-rppr-jp86/GHSA-f22c-rppr-jp86.json index f4582a51fc7..cd53158b5b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f22c-rppr-jp86/GHSA-f22c-rppr-jp86.json +++ b/advisories/unreviewed/2022/05/GHSA-f22c-rppr-jp86/GHSA-f22c-rppr-jp86.json @@ -7,12 +7,8 @@ "CVE-2005-0133" ], "details": "ClamAV 0.80 and earlier allows remote attackers to cause a denial of service (clamd daemon crash) via a ZIP file with malformed headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f35q-xj7m-3cm8/GHSA-f35q-xj7m-3cm8.json b/advisories/unreviewed/2022/05/GHSA-f35q-xj7m-3cm8/GHSA-f35q-xj7m-3cm8.json index ea46ffb6d39..7b343bc805c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f35q-xj7m-3cm8/GHSA-f35q-xj7m-3cm8.json +++ b/advisories/unreviewed/2022/05/GHSA-f35q-xj7m-3cm8/GHSA-f35q-xj7m-3cm8.json @@ -7,12 +7,8 @@ "CVE-2005-0205" ], "details": "KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of file descriptors before executing kppp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f42p-h5g5-j3r9/GHSA-f42p-h5g5-j3r9.json b/advisories/unreviewed/2022/05/GHSA-f42p-h5g5-j3r9/GHSA-f42p-h5g5-j3r9.json index 40d8245cff2..15bd02d93ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-f42p-h5g5-j3r9/GHSA-f42p-h5g5-j3r9.json +++ b/advisories/unreviewed/2022/05/GHSA-f42p-h5g5-j3r9/GHSA-f42p-h5g5-j3r9.json @@ -7,12 +7,8 @@ "CVE-2005-0140" ], "details": "Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import library name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5hx-2mw6-fpj8/GHSA-f5hx-2mw6-fpj8.json b/advisories/unreviewed/2022/05/GHSA-f5hx-2mw6-fpj8/GHSA-f5hx-2mw6-fpj8.json index 3d1427627e8..24d867d2f99 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5hx-2mw6-fpj8/GHSA-f5hx-2mw6-fpj8.json +++ b/advisories/unreviewed/2022/05/GHSA-f5hx-2mw6-fpj8/GHSA-f5hx-2mw6-fpj8.json @@ -7,12 +7,8 @@ "CVE-2005-0095" ], "details": "The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WCCP messages with source addresses that are spoofed to reference Squid's home router and invalid WCCP_I_SEE_YOU cache numbers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f63p-j9vp-r6c4/GHSA-f63p-j9vp-r6c4.json b/advisories/unreviewed/2022/05/GHSA-f63p-j9vp-r6c4/GHSA-f63p-j9vp-r6c4.json index 3dcb294e382..7ba9db48605 100644 --- a/advisories/unreviewed/2022/05/GHSA-f63p-j9vp-r6c4/GHSA-f63p-j9vp-r6c4.json +++ b/advisories/unreviewed/2022/05/GHSA-f63p-j9vp-r6c4/GHSA-f63p-j9vp-r6c4.json @@ -7,12 +7,8 @@ "CVE-2005-0300" ], "details": "Directory traversal vulnerability in session.php in JSBoard 2.0.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the table parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f7g6-2r8w-qfr2/GHSA-f7g6-2r8w-qfr2.json b/advisories/unreviewed/2022/05/GHSA-f7g6-2r8w-qfr2/GHSA-f7g6-2r8w-qfr2.json index 3ea73e1cb55..5c9bf0f9ec3 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7g6-2r8w-qfr2/GHSA-f7g6-2r8w-qfr2.json +++ b/advisories/unreviewed/2022/05/GHSA-f7g6-2r8w-qfr2/GHSA-f7g6-2r8w-qfr2.json @@ -7,12 +7,8 @@ "CVE-2021-28800" ], "details": "A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.3.6.1663 Build 20210504; versions prior to 4.3.3.1624 Build 20210416. This issue does not affect: QNAP Systems Inc. QTS 4.5.3. QNAP Systems Inc. QuTS hero h4.5.3. QNAP Systems Inc. QuTScloud c4.5.5.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fffc-44rw-ffvw/GHSA-fffc-44rw-ffvw.json b/advisories/unreviewed/2022/05/GHSA-fffc-44rw-ffvw/GHSA-fffc-44rw-ffvw.json index ddd674190be..00a3196f79f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fffc-44rw-ffvw/GHSA-fffc-44rw-ffvw.json +++ b/advisories/unreviewed/2022/05/GHSA-fffc-44rw-ffvw/GHSA-fffc-44rw-ffvw.json @@ -7,12 +7,8 @@ "CVE-2005-0135" ], "details": "The unw_unwind_to_user function in unwind.c on Itanium (ia64) architectures in Linux kernel 2.6 allows local users to cause a denial of service (system crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ffwp-x9qh-p236/GHSA-ffwp-x9qh-p236.json b/advisories/unreviewed/2022/05/GHSA-ffwp-x9qh-p236/GHSA-ffwp-x9qh-p236.json index 04c2425aa0e..df49a6e352d 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffwp-x9qh-p236/GHSA-ffwp-x9qh-p236.json +++ b/advisories/unreviewed/2022/05/GHSA-ffwp-x9qh-p236/GHSA-ffwp-x9qh-p236.json @@ -7,12 +7,8 @@ "CVE-2005-0310" ], "details": "Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4) formcontrol.php, or (5) file_modules.php, which reveals the path in an error message because the pathos_core_version variable is undefined.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fg2c-cfr9-9gw3/GHSA-fg2c-cfr9-9gw3.json b/advisories/unreviewed/2022/05/GHSA-fg2c-cfr9-9gw3/GHSA-fg2c-cfr9-9gw3.json index 00403b981fc..e2b12df3b39 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg2c-cfr9-9gw3/GHSA-fg2c-cfr9-9gw3.json +++ b/advisories/unreviewed/2022/05/GHSA-fg2c-cfr9-9gw3/GHSA-fg2c-cfr9-9gw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg53-7fcw-mx53/GHSA-fg53-7fcw-mx53.json b/advisories/unreviewed/2022/05/GHSA-fg53-7fcw-mx53/GHSA-fg53-7fcw-mx53.json index a72d5fc260c..a46970f2d97 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg53-7fcw-mx53/GHSA-fg53-7fcw-mx53.json +++ b/advisories/unreviewed/2022/05/GHSA-fg53-7fcw-mx53/GHSA-fg53-7fcw-mx53.json @@ -7,12 +7,8 @@ "CVE-2005-0162" ], "details": "Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0.9, and Openswan 2.x before 2.3.0, when compiled with XAUTH and PAM enabled, allows remote authenticated attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fg5x-5cvc-6wxg/GHSA-fg5x-5cvc-6wxg.json b/advisories/unreviewed/2022/05/GHSA-fg5x-5cvc-6wxg/GHSA-fg5x-5cvc-6wxg.json index 3bedfe7ded2..97b99088b22 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg5x-5cvc-6wxg/GHSA-fg5x-5cvc-6wxg.json +++ b/advisories/unreviewed/2022/05/GHSA-fg5x-5cvc-6wxg/GHSA-fg5x-5cvc-6wxg.json @@ -7,12 +7,8 @@ "CVE-2005-0158" ], "details": "Format string vulnerability in bidwatcher before 1.3.17 allows remote malicious web servers from eBay, or a spoofed eBay server, to cause a denial of service and possibly execute arbitrary code via certain responses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fhg4-xhw8-92hr/GHSA-fhg4-xhw8-92hr.json b/advisories/unreviewed/2022/05/GHSA-fhg4-xhw8-92hr/GHSA-fhg4-xhw8-92hr.json index 85b09e7ba9c..d95c4a16bcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhg4-xhw8-92hr/GHSA-fhg4-xhw8-92hr.json +++ b/advisories/unreviewed/2022/05/GHSA-fhg4-xhw8-92hr/GHSA-fhg4-xhw8-92hr.json @@ -7,12 +7,8 @@ "CVE-2020-4945" ], "details": "IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhpw-fqm4-g499/GHSA-fhpw-fqm4-g499.json b/advisories/unreviewed/2022/05/GHSA-fhpw-fqm4-g499/GHSA-fhpw-fqm4-g499.json index d9a4f076315..b1b1b34a6a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhpw-fqm4-g499/GHSA-fhpw-fqm4-g499.json +++ b/advisories/unreviewed/2022/05/GHSA-fhpw-fqm4-g499/GHSA-fhpw-fqm4-g499.json @@ -7,12 +7,8 @@ "CVE-2021-0559" ], "details": "In Lag_max of p_ol_wgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172312730", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhqj-wxhm-vfh3/GHSA-fhqj-wxhm-vfh3.json b/advisories/unreviewed/2022/05/GHSA-fhqj-wxhm-vfh3/GHSA-fhqj-wxhm-vfh3.json index 2916f602e02..49c0543c4ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhqj-wxhm-vfh3/GHSA-fhqj-wxhm-vfh3.json +++ b/advisories/unreviewed/2022/05/GHSA-fhqj-wxhm-vfh3/GHSA-fhqj-wxhm-vfh3.json @@ -7,12 +7,8 @@ "CVE-2005-0073" ], "details": "Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp2p-m8rg-2hfh/GHSA-fp2p-m8rg-2hfh.json b/advisories/unreviewed/2022/05/GHSA-fp2p-m8rg-2hfh/GHSA-fp2p-m8rg-2hfh.json index 1242fb89b99..e09400501ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp2p-m8rg-2hfh/GHSA-fp2p-m8rg-2hfh.json +++ b/advisories/unreviewed/2022/05/GHSA-fp2p-m8rg-2hfh/GHSA-fp2p-m8rg-2hfh.json @@ -7,12 +7,8 @@ "CVE-2005-0302" ], "details": "SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp58-4cw2-v55f/GHSA-fp58-4cw2-v55f.json b/advisories/unreviewed/2022/05/GHSA-fp58-4cw2-v55f/GHSA-fp58-4cw2-v55f.json index 3ee1a5de8ff..04941378cb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp58-4cw2-v55f/GHSA-fp58-4cw2-v55f.json +++ b/advisories/unreviewed/2022/05/GHSA-fp58-4cw2-v55f/GHSA-fp58-4cw2-v55f.json @@ -7,12 +7,8 @@ "CVE-2005-0103" ], "details": "PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fvmg-v5c3-236w/GHSA-fvmg-v5c3-236w.json b/advisories/unreviewed/2022/05/GHSA-fvmg-v5c3-236w/GHSA-fvmg-v5c3-236w.json index 14f1ca42884..8b86f935103 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvmg-v5c3-236w/GHSA-fvmg-v5c3-236w.json +++ b/advisories/unreviewed/2022/05/GHSA-fvmg-v5c3-236w/GHSA-fvmg-v5c3-236w.json @@ -7,12 +7,8 @@ "CVE-2005-0301" ], "details": "comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvpj-8g2h-49g9/GHSA-fvpj-8g2h-49g9.json b/advisories/unreviewed/2022/05/GHSA-fvpj-8g2h-49g9/GHSA-fvpj-8g2h-49g9.json index cf257c7dcbe..374290fd9ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvpj-8g2h-49g9/GHSA-fvpj-8g2h-49g9.json +++ b/advisories/unreviewed/2022/05/GHSA-fvpj-8g2h-49g9/GHSA-fvpj-8g2h-49g9.json @@ -7,12 +7,8 @@ "CVE-2021-31272" ], "details": "SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw42-8jqh-7ggh/GHSA-fw42-8jqh-7ggh.json b/advisories/unreviewed/2022/05/GHSA-fw42-8jqh-7ggh/GHSA-fw42-8jqh-7ggh.json index 0682f7c1d9b..ee74e44f0c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw42-8jqh-7ggh/GHSA-fw42-8jqh-7ggh.json +++ b/advisories/unreviewed/2022/05/GHSA-fw42-8jqh-7ggh/GHSA-fw42-8jqh-7ggh.json @@ -7,12 +7,8 @@ "CVE-2005-0192" ], "details": "Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g327-hh94-x2r8/GHSA-g327-hh94-x2r8.json b/advisories/unreviewed/2022/05/GHSA-g327-hh94-x2r8/GHSA-g327-hh94-x2r8.json index 22abce92c99..b248020ca7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g327-hh94-x2r8/GHSA-g327-hh94-x2r8.json +++ b/advisories/unreviewed/2022/05/GHSA-g327-hh94-x2r8/GHSA-g327-hh94-x2r8.json @@ -7,12 +7,8 @@ "CVE-2021-0507" ], "details": "In handle_rc_metamsg_cmd of btif_rc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181860042", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4q4-2gm9-m7gc/GHSA-g4q4-2gm9-m7gc.json b/advisories/unreviewed/2022/05/GHSA-g4q4-2gm9-m7gc/GHSA-g4q4-2gm9-m7gc.json index b52b71fbdcb..45146e8135c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4q4-2gm9-m7gc/GHSA-g4q4-2gm9-m7gc.json +++ b/advisories/unreviewed/2022/05/GHSA-g4q4-2gm9-m7gc/GHSA-g4q4-2gm9-m7gc.json @@ -7,12 +7,8 @@ "CVE-2005-0111" ], "details": "Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g5hr-2fx6-qfj5/GHSA-g5hr-2fx6-qfj5.json b/advisories/unreviewed/2022/05/GHSA-g5hr-2fx6-qfj5/GHSA-g5hr-2fx6-qfj5.json index d7e4c60b9aa..3d4f451b4e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5hr-2fx6-qfj5/GHSA-g5hr-2fx6-qfj5.json +++ b/advisories/unreviewed/2022/05/GHSA-g5hr-2fx6-qfj5/GHSA-g5hr-2fx6-qfj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g784-x97g-r6ww/GHSA-g784-x97g-r6ww.json b/advisories/unreviewed/2022/05/GHSA-g784-x97g-r6ww/GHSA-g784-x97g-r6ww.json index 8e3838d3863..cd2a7a5f5a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g784-x97g-r6ww/GHSA-g784-x97g-r6ww.json +++ b/advisories/unreviewed/2022/05/GHSA-g784-x97g-r6ww/GHSA-g784-x97g-r6ww.json @@ -7,12 +7,8 @@ "CVE-2021-21571" ], "details": "Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability using a person-in-the-middle attack which may lead to a denial of service and payload tampering.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g864-pr32-xwgr/GHSA-g864-pr32-xwgr.json b/advisories/unreviewed/2022/05/GHSA-g864-pr32-xwgr/GHSA-g864-pr32-xwgr.json index a491529d13b..e6de713023e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g864-pr32-xwgr/GHSA-g864-pr32-xwgr.json +++ b/advisories/unreviewed/2022/05/GHSA-g864-pr32-xwgr/GHSA-g864-pr32-xwgr.json @@ -7,12 +7,8 @@ "CVE-2005-0204" ], "details": "Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via the OUTS instruction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfx6-98p8-rj23/GHSA-gfx6-98p8-rj23.json b/advisories/unreviewed/2022/05/GHSA-gfx6-98p8-rj23/GHSA-gfx6-98p8-rj23.json index 4ffffad4e3e..804887440b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfx6-98p8-rj23/GHSA-gfx6-98p8-rj23.json +++ b/advisories/unreviewed/2022/05/GHSA-gfx6-98p8-rj23/GHSA-gfx6-98p8-rj23.json @@ -7,12 +7,8 @@ "CVE-2005-0097" ], "details": "The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3 message that triggers a NULL dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gj3c-pxvc-4hrg/GHSA-gj3c-pxvc-4hrg.json b/advisories/unreviewed/2022/05/GHSA-gj3c-pxvc-4hrg/GHSA-gj3c-pxvc-4hrg.json index 4a952a116bc..7b662a319ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj3c-pxvc-4hrg/GHSA-gj3c-pxvc-4hrg.json +++ b/advisories/unreviewed/2022/05/GHSA-gj3c-pxvc-4hrg/GHSA-gj3c-pxvc-4hrg.json @@ -7,12 +7,8 @@ "CVE-2005-0144" ], "details": "Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjq2-qj9q-x939/GHSA-gjq2-qj9q-x939.json b/advisories/unreviewed/2022/05/GHSA-gjq2-qj9q-x939/GHSA-gjq2-qj9q-x939.json index d9b38fbad78..5a477d59f07 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjq2-qj9q-x939/GHSA-gjq2-qj9q-x939.json +++ b/advisories/unreviewed/2022/05/GHSA-gjq2-qj9q-x939/GHSA-gjq2-qj9q-x939.json @@ -7,12 +7,8 @@ "CVE-2005-0160" ], "details": "Multiple buffer overflows in unace 1.2b allow attackers to execute arbitrary code via (1) 2 overflows in ACE archives, (2) a long command line argument, or (3) certain \"Ready for next volume\" messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gmrc-j4q4-6cv6/GHSA-gmrc-j4q4-6cv6.json b/advisories/unreviewed/2022/05/GHSA-gmrc-j4q4-6cv6/GHSA-gmrc-j4q4-6cv6.json index ebe34a7c49b..db0675efef9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmrc-j4q4-6cv6/GHSA-gmrc-j4q4-6cv6.json +++ b/advisories/unreviewed/2022/05/GHSA-gmrc-j4q4-6cv6/GHSA-gmrc-j4q4-6cv6.json @@ -7,12 +7,8 @@ "CVE-2020-21787" ], "details": "CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gv3h-5v7c-44c6/GHSA-gv3h-5v7c-44c6.json b/advisories/unreviewed/2022/05/GHSA-gv3h-5v7c-44c6/GHSA-gv3h-5v7c-44c6.json index 67597c18713..fe5d7f51654 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv3h-5v7c-44c6/GHSA-gv3h-5v7c-44c6.json +++ b/advisories/unreviewed/2022/05/GHSA-gv3h-5v7c-44c6/GHSA-gv3h-5v7c-44c6.json @@ -7,12 +7,8 @@ "CVE-2005-0086" ], "details": "Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvj2-v697-3r9g/GHSA-gvj2-v697-3r9g.json b/advisories/unreviewed/2022/05/GHSA-gvj2-v697-3r9g/GHSA-gvj2-v697-3r9g.json index cce7eeb2219..ae97989c79d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvj2-v697-3r9g/GHSA-gvj2-v697-3r9g.json +++ b/advisories/unreviewed/2022/05/GHSA-gvj2-v697-3r9g/GHSA-gvj2-v697-3r9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvj9-2445-v3c8/GHSA-gvj9-2445-v3c8.json b/advisories/unreviewed/2022/05/GHSA-gvj9-2445-v3c8/GHSA-gvj9-2445-v3c8.json index 29bb0313d73..77b0a7b5fff 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvj9-2445-v3c8/GHSA-gvj9-2445-v3c8.json +++ b/advisories/unreviewed/2022/05/GHSA-gvj9-2445-v3c8/GHSA-gvj9-2445-v3c8.json @@ -7,12 +7,8 @@ "CVE-2005-0137" ], "details": "Linux kernel 2.6 on Itanium (ia64) architectures allows local users to cause a denial of service via a \"missing Itanium syscall table entry.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gx5m-c6q5-vhp7/GHSA-gx5m-c6q5-vhp7.json b/advisories/unreviewed/2022/05/GHSA-gx5m-c6q5-vhp7/GHSA-gx5m-c6q5-vhp7.json index 93c1bc9ea72..8afa11c716d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx5m-c6q5-vhp7/GHSA-gx5m-c6q5-vhp7.json +++ b/advisories/unreviewed/2022/05/GHSA-gx5m-c6q5-vhp7/GHSA-gx5m-c6q5-vhp7.json @@ -7,12 +7,8 @@ "CVE-2021-0569" ], "details": "In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174045870", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx76-c3v5-v823/GHSA-gx76-c3v5-v823.json b/advisories/unreviewed/2022/05/GHSA-gx76-c3v5-v823/GHSA-gx76-c3v5-v823.json index b2d8db051cb..9136ae03af0 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx76-c3v5-v823/GHSA-gx76-c3v5-v823.json +++ b/advisories/unreviewed/2022/05/GHSA-gx76-c3v5-v823/GHSA-gx76-c3v5-v823.json @@ -7,12 +7,8 @@ "CVE-2005-0099" ], "details": "The SDL port of abuse (abuse-SDL) before 2.00 does not properly drop privileges before creating certain files, which allows local users to create or overwrite arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h42x-74c2-hxvc/GHSA-h42x-74c2-hxvc.json b/advisories/unreviewed/2022/05/GHSA-h42x-74c2-hxvc/GHSA-h42x-74c2-hxvc.json index 7fcc6270c5f..34891ccf87c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h42x-74c2-hxvc/GHSA-h42x-74c2-hxvc.json +++ b/advisories/unreviewed/2022/05/GHSA-h42x-74c2-hxvc/GHSA-h42x-74c2-hxvc.json @@ -7,12 +7,8 @@ "CVE-2021-23995" ], "details": "When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h49c-7rmj-5x4h/GHSA-h49c-7rmj-5x4h.json b/advisories/unreviewed/2022/05/GHSA-h49c-7rmj-5x4h/GHSA-h49c-7rmj-5x4h.json index c658ecd3dd0..798158ef7ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-h49c-7rmj-5x4h/GHSA-h49c-7rmj-5x4h.json +++ b/advisories/unreviewed/2022/05/GHSA-h49c-7rmj-5x4h/GHSA-h49c-7rmj-5x4h.json @@ -7,12 +7,8 @@ "CVE-2020-35760" ], "details": "bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4r4-pw7f-hp8j/GHSA-h4r4-pw7f-hp8j.json b/advisories/unreviewed/2022/05/GHSA-h4r4-pw7f-hp8j/GHSA-h4r4-pw7f-hp8j.json index 2d35d29210b..5fb8a96e414 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4r4-pw7f-hp8j/GHSA-h4r4-pw7f-hp8j.json +++ b/advisories/unreviewed/2022/05/GHSA-h4r4-pw7f-hp8j/GHSA-h4r4-pw7f-hp8j.json @@ -7,12 +7,8 @@ "CVE-2021-34811" ], "details": "Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h53f-v293-25qx/GHSA-h53f-v293-25qx.json b/advisories/unreviewed/2022/05/GHSA-h53f-v293-25qx/GHSA-h53f-v293-25qx.json index 8221ad330c2..7574f284960 100644 --- a/advisories/unreviewed/2022/05/GHSA-h53f-v293-25qx/GHSA-h53f-v293-25qx.json +++ b/advisories/unreviewed/2022/05/GHSA-h53f-v293-25qx/GHSA-h53f-v293-25qx.json @@ -7,12 +7,8 @@ "CVE-2005-0110" ], "details": "Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h737-8f7x-38jh/GHSA-h737-8f7x-38jh.json b/advisories/unreviewed/2022/05/GHSA-h737-8f7x-38jh/GHSA-h737-8f7x-38jh.json index a1c31b0e429..2339b2751d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h737-8f7x-38jh/GHSA-h737-8f7x-38jh.json +++ b/advisories/unreviewed/2022/05/GHSA-h737-8f7x-38jh/GHSA-h737-8f7x-38jh.json @@ -7,12 +7,8 @@ "CVE-2021-26461" ], "details": "Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution. ", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9j4-w52x-j7q2/GHSA-h9j4-w52x-j7q2.json b/advisories/unreviewed/2022/05/GHSA-h9j4-w52x-j7q2/GHSA-h9j4-w52x-j7q2.json index cdf31482d69..eeb5693e755 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9j4-w52x-j7q2/GHSA-h9j4-w52x-j7q2.json +++ b/advisories/unreviewed/2022/05/GHSA-h9j4-w52x-j7q2/GHSA-h9j4-w52x-j7q2.json @@ -7,12 +7,8 @@ "CVE-2005-0180" ], "details": "Multiple integer signedness errors in the sg_scsi_ioctl function in scsi_ioctl.c for Linux 2.6.x allow local users to read or modify kernel memory via negative integers in arguments to the scsi ioctl, which bypass a maximum length check before calling the copy_from_user and copy_to_user functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcwx-phqf-jfmw/GHSA-hcwx-phqf-jfmw.json b/advisories/unreviewed/2022/05/GHSA-hcwx-phqf-jfmw/GHSA-hcwx-phqf-jfmw.json index 572f74c086a..cb0bdad749b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcwx-phqf-jfmw/GHSA-hcwx-phqf-jfmw.json +++ b/advisories/unreviewed/2022/05/GHSA-hcwx-phqf-jfmw/GHSA-hcwx-phqf-jfmw.json @@ -7,12 +7,8 @@ "CVE-2021-25655" ], "details": "A vulnerability in the system Service Menu component of Avaya Aura Experience Portal may allow URL Redirection to any untrusted site through a crafted attack. Affected versions include 7.0 through 7.2.3 (without hotfix) and 8.0.0 (without hotfix).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfgg-vxpf-r2p5/GHSA-hfgg-vxpf-r2p5.json b/advisories/unreviewed/2022/05/GHSA-hfgg-vxpf-r2p5/GHSA-hfgg-vxpf-r2p5.json index 84ad6e9c334..f1572d80537 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfgg-vxpf-r2p5/GHSA-hfgg-vxpf-r2p5.json +++ b/advisories/unreviewed/2022/05/GHSA-hfgg-vxpf-r2p5/GHSA-hfgg-vxpf-r2p5.json @@ -7,12 +7,8 @@ "CVE-2005-0119" ], "details": "helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfjh-h3g2-p6m4/GHSA-hfjh-h3g2-p6m4.json b/advisories/unreviewed/2022/05/GHSA-hfjh-h3g2-p6m4/GHSA-hfjh-h3g2-p6m4.json index 042334a0049..9c3061a195a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfjh-h3g2-p6m4/GHSA-hfjh-h3g2-p6m4.json +++ b/advisories/unreviewed/2022/05/GHSA-hfjh-h3g2-p6m4/GHSA-hfjh-h3g2-p6m4.json @@ -7,12 +7,8 @@ "CVE-2021-32424" ], "details": "In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the router.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hg8v-hj76-3f4v/GHSA-hg8v-hj76-3f4v.json b/advisories/unreviewed/2022/05/GHSA-hg8v-hj76-3f4v/GHSA-hg8v-hj76-3f4v.json index 8d0e997e1ee..fee95935f10 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg8v-hj76-3f4v/GHSA-hg8v-hj76-3f4v.json +++ b/advisories/unreviewed/2022/05/GHSA-hg8v-hj76-3f4v/GHSA-hg8v-hj76-3f4v.json @@ -7,12 +7,8 @@ "CVE-2005-0186" ], "details": "Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hgj5-9jvf-p496/GHSA-hgj5-9jvf-p496.json b/advisories/unreviewed/2022/05/GHSA-hgj5-9jvf-p496/GHSA-hgj5-9jvf-p496.json index ed9b358b87a..861e7b1a1fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgj5-9jvf-p496/GHSA-hgj5-9jvf-p496.json +++ b/advisories/unreviewed/2022/05/GHSA-hgj5-9jvf-p496/GHSA-hgj5-9jvf-p496.json @@ -7,12 +7,8 @@ "CVE-2020-23962" ], "details": "A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the \"announcement_gonggao\" parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgwj-h89r-w966/GHSA-hgwj-h89r-w966.json b/advisories/unreviewed/2022/05/GHSA-hgwj-h89r-w966/GHSA-hgwj-h89r-w966.json index 3264cd4c9ac..8fe9a043e1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgwj-h89r-w966/GHSA-hgwj-h89r-w966.json +++ b/advisories/unreviewed/2022/05/GHSA-hgwj-h89r-w966/GHSA-hgwj-h89r-w966.json @@ -7,12 +7,8 @@ "CVE-2021-31663" ], "details": "RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj5j-mwv8-vhfp/GHSA-hj5j-mwv8-vhfp.json b/advisories/unreviewed/2022/05/GHSA-hj5j-mwv8-vhfp/GHSA-hj5j-mwv8-vhfp.json index 8302a296c57..be54ee97e8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj5j-mwv8-vhfp/GHSA-hj5j-mwv8-vhfp.json +++ b/advisories/unreviewed/2022/05/GHSA-hj5j-mwv8-vhfp/GHSA-hj5j-mwv8-vhfp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj7q-vpxf-qv3v/GHSA-hj7q-vpxf-qv3v.json b/advisories/unreviewed/2022/05/GHSA-hj7q-vpxf-qv3v/GHSA-hj7q-vpxf-qv3v.json index a43f5f90ab9..f7fb231ed01 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj7q-vpxf-qv3v/GHSA-hj7q-vpxf-qv3v.json +++ b/advisories/unreviewed/2022/05/GHSA-hj7q-vpxf-qv3v/GHSA-hj7q-vpxf-qv3v.json @@ -7,12 +7,8 @@ "CVE-2005-0200" ], "details": "TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2004-1386.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmfj-m422-4q96/GHSA-hmfj-m422-4q96.json b/advisories/unreviewed/2022/05/GHSA-hmfj-m422-4q96/GHSA-hmfj-m422-4q96.json index a5546ad23d3..7a477420162 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmfj-m422-4q96/GHSA-hmfj-m422-4q96.json +++ b/advisories/unreviewed/2022/05/GHSA-hmfj-m422-4q96/GHSA-hmfj-m422-4q96.json @@ -7,12 +7,8 @@ "CVE-2020-17753" ], "details": "An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmgm-m7mw-5pjv/GHSA-hmgm-m7mw-5pjv.json b/advisories/unreviewed/2022/05/GHSA-hmgm-m7mw-5pjv/GHSA-hmgm-m7mw-5pjv.json index 0addd6873b4..831e749842a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmgm-m7mw-5pjv/GHSA-hmgm-m7mw-5pjv.json +++ b/advisories/unreviewed/2022/05/GHSA-hmgm-m7mw-5pjv/GHSA-hmgm-m7mw-5pjv.json @@ -7,12 +7,8 @@ "CVE-2005-0117" ], "details": "Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hp43-m6jc-vrgr/GHSA-hp43-m6jc-vrgr.json b/advisories/unreviewed/2022/05/GHSA-hp43-m6jc-vrgr/GHSA-hp43-m6jc-vrgr.json index 28cc74e83ab..51ff81156da 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp43-m6jc-vrgr/GHSA-hp43-m6jc-vrgr.json +++ b/advisories/unreviewed/2022/05/GHSA-hp43-m6jc-vrgr/GHSA-hp43-m6jc-vrgr.json @@ -7,12 +7,8 @@ "CVE-2021-29962" ], "details": "Firefox for Android would become unstable and hard-to-recover when a website opened too many popups. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv4j-j5rr-rmfx/GHSA-hv4j-j5rr-rmfx.json b/advisories/unreviewed/2022/05/GHSA-hv4j-j5rr-rmfx/GHSA-hv4j-j5rr-rmfx.json index 1330d46af0f..719b7d4ed68 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv4j-j5rr-rmfx/GHSA-hv4j-j5rr-rmfx.json +++ b/advisories/unreviewed/2022/05/GHSA-hv4j-j5rr-rmfx/GHSA-hv4j-j5rr-rmfx.json @@ -7,12 +7,8 @@ "CVE-2005-0156" ], "details": "Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hw2c-7w6f-7v7f/GHSA-hw2c-7w6f-7v7f.json b/advisories/unreviewed/2022/05/GHSA-hw2c-7w6f-7v7f/GHSA-hw2c-7w6f-7v7f.json index 86c9e36d237..fa28c78b2cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw2c-7w6f-7v7f/GHSA-hw2c-7w6f-7v7f.json +++ b/advisories/unreviewed/2022/05/GHSA-hw2c-7w6f-7v7f/GHSA-hw2c-7w6f-7v7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwfh-2mgq-w44v/GHSA-hwfh-2mgq-w44v.json b/advisories/unreviewed/2022/05/GHSA-hwfh-2mgq-w44v/GHSA-hwfh-2mgq-w44v.json index e310aa1c948..81bed8361b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwfh-2mgq-w44v/GHSA-hwfh-2mgq-w44v.json +++ b/advisories/unreviewed/2022/05/GHSA-hwfh-2mgq-w44v/GHSA-hwfh-2mgq-w44v.json @@ -7,12 +7,8 @@ "CVE-2021-20743" ], "details": "Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxwp-5hw8-g4xg/GHSA-hxwp-5hw8-g4xg.json b/advisories/unreviewed/2022/05/GHSA-hxwp-5hw8-g4xg/GHSA-hxwp-5hw8-g4xg.json index f85f929f87b..288893ba138 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxwp-5hw8-g4xg/GHSA-hxwp-5hw8-g4xg.json +++ b/advisories/unreviewed/2022/05/GHSA-hxwp-5hw8-g4xg/GHSA-hxwp-5hw8-g4xg.json @@ -7,12 +7,8 @@ "CVE-2021-2322" ], "details": "Vulnerability in OpenGrok (component: Web App). Versions that are affected are 1.6.7 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise OpenGrok. Successful attacks of this vulnerability can result in takeover of OpenGrok. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4q9-8q9c-3wpj/GHSA-j4q9-8q9c-3wpj.json b/advisories/unreviewed/2022/05/GHSA-j4q9-8q9c-3wpj/GHSA-j4q9-8q9c-3wpj.json index 7128b11c04f..64e7a9043c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4q9-8q9c-3wpj/GHSA-j4q9-8q9c-3wpj.json +++ b/advisories/unreviewed/2022/05/GHSA-j4q9-8q9c-3wpj/GHSA-j4q9-8q9c-3wpj.json @@ -7,12 +7,8 @@ "CVE-2005-0127" ], "details": "Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifies the Ethernet hardware being used, which allows remote attackers to link mail messages to a particular machine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5gq-xp3x-x5f4/GHSA-j5gq-xp3x-x5f4.json b/advisories/unreviewed/2022/05/GHSA-j5gq-xp3x-x5f4/GHSA-j5gq-xp3x-x5f4.json index dcca86968b5..5f34c76850e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5gq-xp3x-x5f4/GHSA-j5gq-xp3x-x5f4.json +++ b/advisories/unreviewed/2022/05/GHSA-j5gq-xp3x-x5f4/GHSA-j5gq-xp3x-x5f4.json @@ -7,12 +7,8 @@ "CVE-2021-27489" ], "details": "ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6f5-q283-99vh/GHSA-j6f5-q283-99vh.json b/advisories/unreviewed/2022/05/GHSA-j6f5-q283-99vh/GHSA-j6f5-q283-99vh.json index d23648c127c..bc109e770dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6f5-q283-99vh/GHSA-j6f5-q283-99vh.json +++ b/advisories/unreviewed/2022/05/GHSA-j6f5-q283-99vh/GHSA-j6f5-q283-99vh.json @@ -7,12 +7,8 @@ "CVE-2005-0325" ], "details": "Xpand Rally 1.0.0.0 allows remote attackers or remote malicious game servers to cause a denial of service (application crash) via a packet with large values that are not properly handled in certain malloc or memcpy operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jff7-fm48-4mpp/GHSA-jff7-fm48-4mpp.json b/advisories/unreviewed/2022/05/GHSA-jff7-fm48-4mpp/GHSA-jff7-fm48-4mpp.json index 6d672e7e44d..878a4073271 100644 --- a/advisories/unreviewed/2022/05/GHSA-jff7-fm48-4mpp/GHSA-jff7-fm48-4mpp.json +++ b/advisories/unreviewed/2022/05/GHSA-jff7-fm48-4mpp/GHSA-jff7-fm48-4mpp.json @@ -7,12 +7,8 @@ "CVE-2005-0070" ], "details": "Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jgvh-5gxq-hwh4/GHSA-jgvh-5gxq-hwh4.json b/advisories/unreviewed/2022/05/GHSA-jgvh-5gxq-hwh4/GHSA-jgvh-5gxq-hwh4.json index bf1a1718c62..617269956b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgvh-5gxq-hwh4/GHSA-jgvh-5gxq-hwh4.json +++ b/advisories/unreviewed/2022/05/GHSA-jgvh-5gxq-hwh4/GHSA-jgvh-5gxq-hwh4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jj36-3392-jhm7/GHSA-jj36-3392-jhm7.json b/advisories/unreviewed/2022/05/GHSA-jj36-3392-jhm7/GHSA-jj36-3392-jhm7.json index 8eec9d5aff6..342e637a1c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj36-3392-jhm7/GHSA-jj36-3392-jhm7.json +++ b/advisories/unreviewed/2022/05/GHSA-jj36-3392-jhm7/GHSA-jj36-3392-jhm7.json @@ -7,12 +7,8 @@ "CVE-2005-0141" ], "details": "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links \"with a custom getter and toString method\" that are middle-clicked by the user to be opened in a new tab.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jj66-r59x-7j8w/GHSA-jj66-r59x-7j8w.json b/advisories/unreviewed/2022/05/GHSA-jj66-r59x-7j8w/GHSA-jj66-r59x-7j8w.json index db312c2978a..458974f73d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj66-r59x-7j8w/GHSA-jj66-r59x-7j8w.json +++ b/advisories/unreviewed/2022/05/GHSA-jj66-r59x-7j8w/GHSA-jj66-r59x-7j8w.json @@ -7,12 +7,8 @@ "CVE-2005-0198" ], "details": "A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmc2-x4g4-xmv9/GHSA-jmc2-x4g4-xmv9.json b/advisories/unreviewed/2022/05/GHSA-jmc2-x4g4-xmv9/GHSA-jmc2-x4g4-xmv9.json index 632b7dd556c..4747302d3c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmc2-x4g4-xmv9/GHSA-jmc2-x4g4-xmv9.json +++ b/advisories/unreviewed/2022/05/GHSA-jmc2-x4g4-xmv9/GHSA-jmc2-x4g4-xmv9.json @@ -7,12 +7,8 @@ "CVE-2005-0107" ], "details": "bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp38-q8w6-3xm3/GHSA-jp38-q8w6-3xm3.json b/advisories/unreviewed/2022/05/GHSA-jp38-q8w6-3xm3/GHSA-jp38-q8w6-3xm3.json index d45995dc165..533e00eccab 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp38-q8w6-3xm3/GHSA-jp38-q8w6-3xm3.json +++ b/advisories/unreviewed/2022/05/GHSA-jp38-q8w6-3xm3/GHSA-jp38-q8w6-3xm3.json @@ -7,12 +7,8 @@ "CVE-2005-0206" ], "details": "The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jx47-9fvf-f2pc/GHSA-jx47-9fvf-f2pc.json b/advisories/unreviewed/2022/05/GHSA-jx47-9fvf-f2pc/GHSA-jx47-9fvf-f2pc.json index 6a976e0d039..a9918aa3b5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx47-9fvf-f2pc/GHSA-jx47-9fvf-f2pc.json +++ b/advisories/unreviewed/2022/05/GHSA-jx47-9fvf-f2pc/GHSA-jx47-9fvf-f2pc.json @@ -7,12 +7,8 @@ "CVE-2005-0184" ], "details": "Directory traversal vulnerability in ftpfile in the Vacation plugin 0.15 and earlier for Squirrelmail allows local users to read arbitrary files via a .. (dot dot) in a get request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxff-g9w9-cmhx/GHSA-jxff-g9w9-cmhx.json b/advisories/unreviewed/2022/05/GHSA-jxff-g9w9-cmhx/GHSA-jxff-g9w9-cmhx.json index c3410991e86..5755a476808 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxff-g9w9-cmhx/GHSA-jxff-g9w9-cmhx.json +++ b/advisories/unreviewed/2022/05/GHSA-jxff-g9w9-cmhx/GHSA-jxff-g9w9-cmhx.json @@ -7,12 +7,8 @@ "CVE-2021-0510" ], "details": "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444622", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m32f-99jg-48x9/GHSA-m32f-99jg-48x9.json b/advisories/unreviewed/2022/05/GHSA-m32f-99jg-48x9/GHSA-m32f-99jg-48x9.json index f11e43ebb14..18613316236 100644 --- a/advisories/unreviewed/2022/05/GHSA-m32f-99jg-48x9/GHSA-m32f-99jg-48x9.json +++ b/advisories/unreviewed/2022/05/GHSA-m32f-99jg-48x9/GHSA-m32f-99jg-48x9.json @@ -7,12 +7,8 @@ "CVE-2021-29085" ], "details": "Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m63g-xhf4-q4g5/GHSA-m63g-xhf4-q4g5.json b/advisories/unreviewed/2022/05/GHSA-m63g-xhf4-q4g5/GHSA-m63g-xhf4-q4g5.json index 553fb59792a..889c61d37b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-m63g-xhf4-q4g5/GHSA-m63g-xhf4-q4g5.json +++ b/advisories/unreviewed/2022/05/GHSA-m63g-xhf4-q4g5/GHSA-m63g-xhf4-q4g5.json @@ -7,12 +7,8 @@ "CVE-2021-21573" ], "details": "Dell BIOSConnect feature contains a buffer overflow vulnerability. An authenticated malicious admin user with local access to the system may potentially exploit this vulnerability to run arbitrary code and bypass UEFI restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9jq-p64q-5v4g/GHSA-m9jq-p64q-5v4g.json b/advisories/unreviewed/2022/05/GHSA-m9jq-p64q-5v4g/GHSA-m9jq-p64q-5v4g.json index d012eb5df29..2b6ba31b86e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9jq-p64q-5v4g/GHSA-m9jq-p64q-5v4g.json +++ b/advisories/unreviewed/2022/05/GHSA-m9jq-p64q-5v4g/GHSA-m9jq-p64q-5v4g.json @@ -7,12 +7,8 @@ "CVE-2005-0161" ], "details": "Multiple directory traversal vulnerabilities in unace 1.2b allow attackers to overwrite arbitrary files via an ACE archive containing (1) ../ sequences or (2) absolute pathnames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9pj-67cf-px2x/GHSA-m9pj-67cf-px2x.json b/advisories/unreviewed/2022/05/GHSA-m9pj-67cf-px2x/GHSA-m9pj-67cf-px2x.json index 564cff5f175..b9f4e70236e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9pj-67cf-px2x/GHSA-m9pj-67cf-px2x.json +++ b/advisories/unreviewed/2022/05/GHSA-m9pj-67cf-px2x/GHSA-m9pj-67cf-px2x.json @@ -7,12 +7,8 @@ "CVE-2005-0177" ], "details": "nls_ascii.c in Linux before 2.6.8.1 uses an incorrect table size, which allows attackers to cause a denial of service (kernel crash) via a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mccm-p9hj-f8fq/GHSA-mccm-p9hj-f8fq.json b/advisories/unreviewed/2022/05/GHSA-mccm-p9hj-f8fq/GHSA-mccm-p9hj-f8fq.json index c3e1e00e41b..6194f08a535 100644 --- a/advisories/unreviewed/2022/05/GHSA-mccm-p9hj-f8fq/GHSA-mccm-p9hj-f8fq.json +++ b/advisories/unreviewed/2022/05/GHSA-mccm-p9hj-f8fq/GHSA-mccm-p9hj-f8fq.json @@ -7,12 +7,8 @@ "CVE-2020-18658" ], "details": "Cross Site Scriptiong (XSS) vulnerability in GetSimpleCMS <=3.3.15 via the timezone parameter to settings.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfx8-57jr-25r5/GHSA-mfx8-57jr-25r5.json b/advisories/unreviewed/2022/05/GHSA-mfx8-57jr-25r5/GHSA-mfx8-57jr-25r5.json index 14b285c874d..39c515de007 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfx8-57jr-25r5/GHSA-mfx8-57jr-25r5.json +++ b/advisories/unreviewed/2022/05/GHSA-mfx8-57jr-25r5/GHSA-mfx8-57jr-25r5.json @@ -7,12 +7,8 @@ "CVE-2005-0131" ], "details": "The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh39-3vjf-wpc8/GHSA-mh39-3vjf-wpc8.json b/advisories/unreviewed/2022/05/GHSA-mh39-3vjf-wpc8/GHSA-mh39-3vjf-wpc8.json index 3b6f8fafe13..839b47976bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh39-3vjf-wpc8/GHSA-mh39-3vjf-wpc8.json +++ b/advisories/unreviewed/2022/05/GHSA-mh39-3vjf-wpc8/GHSA-mh39-3vjf-wpc8.json @@ -7,12 +7,8 @@ "CVE-2021-32426" ], "details": "In TrendNet TW100-S4W1CA 2.3.32, it is possible to inject arbitrary JavaScript into the router's web interface via the \"echo\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhw4-w4wq-p4wx/GHSA-mhw4-w4wq-p4wx.json b/advisories/unreviewed/2022/05/GHSA-mhw4-w4wq-p4wx/GHSA-mhw4-w4wq-p4wx.json index 0fccfea0259..d0701cde5e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhw4-w4wq-p4wx/GHSA-mhw4-w4wq-p4wx.json +++ b/advisories/unreviewed/2022/05/GHSA-mhw4-w4wq-p4wx/GHSA-mhw4-w4wq-p4wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmfc-r494-fxhj/GHSA-mmfc-r494-fxhj.json b/advisories/unreviewed/2022/05/GHSA-mmfc-r494-fxhj/GHSA-mmfc-r494-fxhj.json index 5c5d4e1aa81..54d2cdca0e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmfc-r494-fxhj/GHSA-mmfc-r494-fxhj.json +++ b/advisories/unreviewed/2022/05/GHSA-mmfc-r494-fxhj/GHSA-mmfc-r494-fxhj.json @@ -7,12 +7,8 @@ "CVE-2005-0178" ], "details": "Race condition in the setsid function in Linux before 2.6.8.1 allows local users to cause a denial of service (crash) and possibly access portions of kernel memory, related to TTY changes, locking, and semaphores.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mprf-9g5r-6vxv/GHSA-mprf-9g5r-6vxv.json b/advisories/unreviewed/2022/05/GHSA-mprf-9g5r-6vxv/GHSA-mprf-9g5r-6vxv.json index 22c8a15d885..7681ef68924 100644 --- a/advisories/unreviewed/2022/05/GHSA-mprf-9g5r-6vxv/GHSA-mprf-9g5r-6vxv.json +++ b/advisories/unreviewed/2022/05/GHSA-mprf-9g5r-6vxv/GHSA-mprf-9g5r-6vxv.json @@ -7,12 +7,8 @@ "CVE-2021-34386" ], "details": "Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of count and size can overflow, which might lead to heap overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr8h-c247-6wp3/GHSA-mr8h-c247-6wp3.json b/advisories/unreviewed/2022/05/GHSA-mr8h-c247-6wp3/GHSA-mr8h-c247-6wp3.json index 8982a031989..501cd5763b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr8h-c247-6wp3/GHSA-mr8h-c247-6wp3.json +++ b/advisories/unreviewed/2022/05/GHSA-mr8h-c247-6wp3/GHSA-mr8h-c247-6wp3.json @@ -7,12 +7,8 @@ "CVE-2020-20389" ], "details": "Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvgp-292g-prp4/GHSA-mvgp-292g-prp4.json b/advisories/unreviewed/2022/05/GHSA-mvgp-292g-prp4/GHSA-mvgp-292g-prp4.json index 547ea4604ad..6edd54e5823 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvgp-292g-prp4/GHSA-mvgp-292g-prp4.json +++ b/advisories/unreviewed/2022/05/GHSA-mvgp-292g-prp4/GHSA-mvgp-292g-prp4.json @@ -7,12 +7,8 @@ "CVE-2005-0120" ], "details": "helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mwq9-wcfh-9w35/GHSA-mwq9-wcfh-9w35.json b/advisories/unreviewed/2022/05/GHSA-mwq9-wcfh-9w35/GHSA-mwq9-wcfh-9w35.json index dd3557195cb..26d38f4ae0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwq9-wcfh-9w35/GHSA-mwq9-wcfh-9w35.json +++ b/advisories/unreviewed/2022/05/GHSA-mwq9-wcfh-9w35/GHSA-mwq9-wcfh-9w35.json @@ -7,12 +7,8 @@ "CVE-2020-21316" ], "details": "A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary web script and stolen administrator cookies via the nickname parameter and gain access to the admin panel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p28q-g7cp-qp3q/GHSA-p28q-g7cp-qp3q.json b/advisories/unreviewed/2022/05/GHSA-p28q-g7cp-qp3q/GHSA-p28q-g7cp-qp3q.json index a0d2c8d246e..74a75108b05 100644 --- a/advisories/unreviewed/2022/05/GHSA-p28q-g7cp-qp3q/GHSA-p28q-g7cp-qp3q.json +++ b/advisories/unreviewed/2022/05/GHSA-p28q-g7cp-qp3q/GHSA-p28q-g7cp-qp3q.json @@ -7,12 +7,8 @@ "CVE-2005-0196" ], "details": "Cisco IOS 12.0 through 12.3YL, with BGP enabled and running the bgp log-neighbor-changes command, allows remote attackers to cause a denial of service (device reload) via a malformed BGP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2f5-76jq-f5vv/GHSA-p2f5-76jq-f5vv.json b/advisories/unreviewed/2022/05/GHSA-p2f5-76jq-f5vv/GHSA-p2f5-76jq-f5vv.json index 6c4b439ca72..19644a95a1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2f5-76jq-f5vv/GHSA-p2f5-76jq-f5vv.json +++ b/advisories/unreviewed/2022/05/GHSA-p2f5-76jq-f5vv/GHSA-p2f5-76jq-f5vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p377-w2fq-v7c4/GHSA-p377-w2fq-v7c4.json b/advisories/unreviewed/2022/05/GHSA-p377-w2fq-v7c4/GHSA-p377-w2fq-v7c4.json index 9601a66607f..b7ab4511448 100644 --- a/advisories/unreviewed/2022/05/GHSA-p377-w2fq-v7c4/GHSA-p377-w2fq-v7c4.json +++ b/advisories/unreviewed/2022/05/GHSA-p377-w2fq-v7c4/GHSA-p377-w2fq-v7c4.json @@ -7,12 +7,8 @@ "CVE-2005-0130" ], "details": "Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters in (1) channel names or (2) song names that are not properly quoted when the user runs IRC scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p37h-5749-6mgg/GHSA-p37h-5749-6mgg.json b/advisories/unreviewed/2022/05/GHSA-p37h-5749-6mgg/GHSA-p37h-5749-6mgg.json index b252575fce4..2b32f27499a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p37h-5749-6mgg/GHSA-p37h-5749-6mgg.json +++ b/advisories/unreviewed/2022/05/GHSA-p37h-5749-6mgg/GHSA-p37h-5749-6mgg.json @@ -7,12 +7,8 @@ "CVE-2005-0108" ], "details": "Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service (crash) via a RADIUS_REPLY_MESSAGE with a RADIUS attribute length of 1, which leads to a memcpy operation with a -1 length argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6j5-5ppm-w335/GHSA-p6j5-5ppm-w335.json b/advisories/unreviewed/2022/05/GHSA-p6j5-5ppm-w335/GHSA-p6j5-5ppm-w335.json index d1ccafdbe90..70dd027f3a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6j5-5ppm-w335/GHSA-p6j5-5ppm-w335.json +++ b/advisories/unreviewed/2022/05/GHSA-p6j5-5ppm-w335/GHSA-p6j5-5ppm-w335.json @@ -7,12 +7,8 @@ "CVE-2005-0197" ], "details": "Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p83x-xf7c-cprq/GHSA-p83x-xf7c-cprq.json b/advisories/unreviewed/2022/05/GHSA-p83x-xf7c-cprq/GHSA-p83x-xf7c-cprq.json index e63c9878628..d7332f428d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-p83x-xf7c-cprq/GHSA-p83x-xf7c-cprq.json +++ b/advisories/unreviewed/2022/05/GHSA-p83x-xf7c-cprq/GHSA-p83x-xf7c-cprq.json @@ -7,12 +7,8 @@ "CVE-2005-0096" ], "details": "Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (memory consumption).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc86-jmjr-hvxg/GHSA-pc86-jmjr-hvxg.json b/advisories/unreviewed/2022/05/GHSA-pc86-jmjr-hvxg/GHSA-pc86-jmjr-hvxg.json index a1fc5a86c7c..e44b55ef0af 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc86-jmjr-hvxg/GHSA-pc86-jmjr-hvxg.json +++ b/advisories/unreviewed/2022/05/GHSA-pc86-jmjr-hvxg/GHSA-pc86-jmjr-hvxg.json @@ -7,12 +7,8 @@ "CVE-2020-18660" ], "details": "GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pf5q-jr59-354r/GHSA-pf5q-jr59-354r.json b/advisories/unreviewed/2022/05/GHSA-pf5q-jr59-354r/GHSA-pf5q-jr59-354r.json index 36a19945a4f..1b0413b2b93 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf5q-jr59-354r/GHSA-pf5q-jr59-354r.json +++ b/advisories/unreviewed/2022/05/GHSA-pf5q-jr59-354r/GHSA-pf5q-jr59-354r.json @@ -7,12 +7,8 @@ "CVE-2005-0159" ], "details": "The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfw3-m738-qjww/GHSA-pfw3-m738-qjww.json b/advisories/unreviewed/2022/05/GHSA-pfw3-m738-qjww/GHSA-pfw3-m738-qjww.json index 0abf4815830..5671917254f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfw3-m738-qjww/GHSA-pfw3-m738-qjww.json +++ b/advisories/unreviewed/2022/05/GHSA-pfw3-m738-qjww/GHSA-pfw3-m738-qjww.json @@ -7,12 +7,8 @@ "CVE-2005-0146" ], "details": "Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates a middle-click event on systems for which a middle-click performs a paste operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ph2m-29xw-r5gc/GHSA-ph2m-29xw-r5gc.json b/advisories/unreviewed/2022/05/GHSA-ph2m-29xw-r5gc/GHSA-ph2m-29xw-r5gc.json index 581bf842e73..de4a61fe51b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph2m-29xw-r5gc/GHSA-ph2m-29xw-r5gc.json +++ b/advisories/unreviewed/2022/05/GHSA-ph2m-29xw-r5gc/GHSA-ph2m-29xw-r5gc.json @@ -7,12 +7,8 @@ "CVE-2005-0094" ], "details": "Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote malicious Gopher servers to cause a denial of service (crash) via crafted responses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phjq-x57m-mw68/GHSA-phjq-x57m-mw68.json b/advisories/unreviewed/2022/05/GHSA-phjq-x57m-mw68/GHSA-phjq-x57m-mw68.json index f325975712d..3f73ca29925 100644 --- a/advisories/unreviewed/2022/05/GHSA-phjq-x57m-mw68/GHSA-phjq-x57m-mw68.json +++ b/advisories/unreviewed/2022/05/GHSA-phjq-x57m-mw68/GHSA-phjq-x57m-mw68.json @@ -7,12 +7,8 @@ "CVE-2021-24382" ], "details": "The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back in the page, leading to a Stored Cross-Site Scripting issue. By default, only administrator users could access the affected functionality, limiting the exploitability of the vulnerability. However, some WordPress admins may allow lesser privileged users to access the plugin's functionality, in which case, privilege escalation could be performed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj38-fjfr-xp7q/GHSA-pj38-fjfr-xp7q.json b/advisories/unreviewed/2022/05/GHSA-pj38-fjfr-xp7q/GHSA-pj38-fjfr-xp7q.json index cc7d4d3646d..fa23cc04e14 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj38-fjfr-xp7q/GHSA-pj38-fjfr-xp7q.json +++ b/advisories/unreviewed/2022/05/GHSA-pj38-fjfr-xp7q/GHSA-pj38-fjfr-xp7q.json @@ -7,12 +7,8 @@ "CVE-2020-21786" ], "details": "In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pm79-ghmr-rxqx/GHSA-pm79-ghmr-rxqx.json b/advisories/unreviewed/2022/05/GHSA-pm79-ghmr-rxqx/GHSA-pm79-ghmr-rxqx.json index 01b47d77a39..249b050a738 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm79-ghmr-rxqx/GHSA-pm79-ghmr-rxqx.json +++ b/advisories/unreviewed/2022/05/GHSA-pm79-ghmr-rxqx/GHSA-pm79-ghmr-rxqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmm6-qxj3-9jr6/GHSA-pmm6-qxj3-9jr6.json b/advisories/unreviewed/2022/05/GHSA-pmm6-qxj3-9jr6/GHSA-pmm6-qxj3-9jr6.json index cd462cc0580..3920c72cfb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmm6-qxj3-9jr6/GHSA-pmm6-qxj3-9jr6.json +++ b/advisories/unreviewed/2022/05/GHSA-pmm6-qxj3-9jr6/GHSA-pmm6-qxj3-9jr6.json @@ -7,12 +7,8 @@ "CVE-2021-0520" ], "details": "In several functions of MemoryFileSystem.cpp and related files, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-176237595", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqrx-h8gf-58qg/GHSA-pqrx-h8gf-58qg.json b/advisories/unreviewed/2022/05/GHSA-pqrx-h8gf-58qg/GHSA-pqrx-h8gf-58qg.json index 39487f8bfe1..8e1f0e0a12f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqrx-h8gf-58qg/GHSA-pqrx-h8gf-58qg.json +++ b/advisories/unreviewed/2022/05/GHSA-pqrx-h8gf-58qg/GHSA-pqrx-h8gf-58qg.json @@ -7,12 +7,8 @@ "CVE-2005-0136" ], "details": "The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain \"ptrace corner cases\" that allow local users to cause a denial of service (crash) via crafted syscalls, possibly related to MCA/INIT, a different vulnerability than CVE-2005-1761.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwpg-xvgc-wfjh/GHSA-pwpg-xvgc-wfjh.json b/advisories/unreviewed/2022/05/GHSA-pwpg-xvgc-wfjh/GHSA-pwpg-xvgc-wfjh.json index b82c7526cba..ec754c0c514 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwpg-xvgc-wfjh/GHSA-pwpg-xvgc-wfjh.json +++ b/advisories/unreviewed/2022/05/GHSA-pwpg-xvgc-wfjh/GHSA-pwpg-xvgc-wfjh.json @@ -7,12 +7,8 @@ "CVE-2021-31664" ], "details": "RIOT-OS 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a contains a buffer overflow which could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxjr-cxmc-3gcg/GHSA-pxjr-cxmc-3gcg.json b/advisories/unreviewed/2022/05/GHSA-pxjr-cxmc-3gcg/GHSA-pxjr-cxmc-3gcg.json index 890cd01195e..1b8b3e02749 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxjr-cxmc-3gcg/GHSA-pxjr-cxmc-3gcg.json +++ b/advisories/unreviewed/2022/05/GHSA-pxjr-cxmc-3gcg/GHSA-pxjr-cxmc-3gcg.json @@ -7,12 +7,8 @@ "CVE-2005-0187" ], "details": "Stack-based buffer overflow in the SetSkin function in AtHoc toolbar allows remote attackers to execute arbitrary code via a long skin name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q42m-crgm-wgh5/GHSA-q42m-crgm-wgh5.json b/advisories/unreviewed/2022/05/GHSA-q42m-crgm-wgh5/GHSA-q42m-crgm-wgh5.json index f5c3da0e89e..e580ebd7bb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q42m-crgm-wgh5/GHSA-q42m-crgm-wgh5.json +++ b/advisories/unreviewed/2022/05/GHSA-q42m-crgm-wgh5/GHSA-q42m-crgm-wgh5.json @@ -7,12 +7,8 @@ "CVE-2021-0557" ], "details": "In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-179046129", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q449-wmj9-fjj4/GHSA-q449-wmj9-fjj4.json b/advisories/unreviewed/2022/05/GHSA-q449-wmj9-fjj4/GHSA-q449-wmj9-fjj4.json index 693728dad72..1c4a1cec2c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-q449-wmj9-fjj4/GHSA-q449-wmj9-fjj4.json +++ b/advisories/unreviewed/2022/05/GHSA-q449-wmj9-fjj4/GHSA-q449-wmj9-fjj4.json @@ -7,12 +7,8 @@ "CVE-2005-0142" ], "details": "Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q537-8p26-px2q/GHSA-q537-8p26-px2q.json b/advisories/unreviewed/2022/05/GHSA-q537-8p26-px2q/GHSA-q537-8p26-px2q.json index 72663e4d22c..6ad98f72033 100644 --- a/advisories/unreviewed/2022/05/GHSA-q537-8p26-px2q/GHSA-q537-8p26-px2q.json +++ b/advisories/unreviewed/2022/05/GHSA-q537-8p26-px2q/GHSA-q537-8p26-px2q.json @@ -7,12 +7,8 @@ "CVE-2005-0113" ], "details": "inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by inpview without dropping privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q689-c2qj-p625/GHSA-q689-c2qj-p625.json b/advisories/unreviewed/2022/05/GHSA-q689-c2qj-p625/GHSA-q689-c2qj-p625.json index 60b70e67758..b063ba09a97 100644 --- a/advisories/unreviewed/2022/05/GHSA-q689-c2qj-p625/GHSA-q689-c2qj-p625.json +++ b/advisories/unreviewed/2022/05/GHSA-q689-c2qj-p625/GHSA-q689-c2qj-p625.json @@ -7,12 +7,8 @@ "CVE-2021-31661" ], "details": "RIOT-OS 2021.01 before commit 609c9ada34da5546cffb632a98b7ba157c112658 contains a buffer overflow that could allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7gc-mpfg-847w/GHSA-q7gc-mpfg-847w.json b/advisories/unreviewed/2022/05/GHSA-q7gc-mpfg-847w/GHSA-q7gc-mpfg-847w.json index 6097c9f5946..c932ed87305 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7gc-mpfg-847w/GHSA-q7gc-mpfg-847w.json +++ b/advisories/unreviewed/2022/05/GHSA-q7gc-mpfg-847w/GHSA-q7gc-mpfg-847w.json @@ -7,12 +7,8 @@ "CVE-2021-0562" ], "details": "In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176084648", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q87w-m784-6jm8/GHSA-q87w-m784-6jm8.json b/advisories/unreviewed/2022/05/GHSA-q87w-m784-6jm8/GHSA-q87w-m784-6jm8.json index 3da3b61ba82..ff56676d8b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-q87w-m784-6jm8/GHSA-q87w-m784-6jm8.json +++ b/advisories/unreviewed/2022/05/GHSA-q87w-m784-6jm8/GHSA-q87w-m784-6jm8.json @@ -7,12 +7,8 @@ "CVE-2021-30553" ], "details": "Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q986-j2vp-cgg9/GHSA-q986-j2vp-cgg9.json b/advisories/unreviewed/2022/05/GHSA-q986-j2vp-cgg9/GHSA-q986-j2vp-cgg9.json index 1f4e36eb23b..b4bee7955f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q986-j2vp-cgg9/GHSA-q986-j2vp-cgg9.json +++ b/advisories/unreviewed/2022/05/GHSA-q986-j2vp-cgg9/GHSA-q986-j2vp-cgg9.json @@ -7,12 +7,8 @@ "CVE-2021-34067" ], "details": "Heap based buffer overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc5f-8hh2-6qh6/GHSA-qc5f-8hh2-6qh6.json b/advisories/unreviewed/2022/05/GHSA-qc5f-8hh2-6qh6/GHSA-qc5f-8hh2-6qh6.json index f923b3fe011..8614ae90acc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc5f-8hh2-6qh6/GHSA-qc5f-8hh2-6qh6.json +++ b/advisories/unreviewed/2022/05/GHSA-qc5f-8hh2-6qh6/GHSA-qc5f-8hh2-6qh6.json @@ -7,12 +7,8 @@ "CVE-2020-20392" ], "details": "SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjf6-h5cr-5f46/GHSA-qjf6-h5cr-5f46.json b/advisories/unreviewed/2022/05/GHSA-qjf6-h5cr-5f46/GHSA-qjf6-h5cr-5f46.json index 80c7ecd6b64..efc1e174f79 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjf6-h5cr-5f46/GHSA-qjf6-h5cr-5f46.json +++ b/advisories/unreviewed/2022/05/GHSA-qjf6-h5cr-5f46/GHSA-qjf6-h5cr-5f46.json @@ -7,12 +7,8 @@ "CVE-2020-18659" ], "details": "Cross Site Scripting vulnerability in GetSimpleCMS <=3.3.15 via the (1) sitename, (2) username, and (3) email parameters to /admin/setup.php", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpp8-f6hx-qhqr/GHSA-qpp8-f6hx-qhqr.json b/advisories/unreviewed/2022/05/GHSA-qpp8-f6hx-qhqr/GHSA-qpp8-f6hx-qhqr.json index 84dd93791d8..d8dedab3df0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpp8-f6hx-qhqr/GHSA-qpp8-f6hx-qhqr.json +++ b/advisories/unreviewed/2022/05/GHSA-qpp8-f6hx-qhqr/GHSA-qpp8-f6hx-qhqr.json @@ -7,12 +7,8 @@ "CVE-2005-0076" ], "details": "Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r283-h95m-m4ph/GHSA-r283-h95m-m4ph.json b/advisories/unreviewed/2022/05/GHSA-r283-h95m-m4ph/GHSA-r283-h95m-m4ph.json index 939a2b433f3..2180ad4ca2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r283-h95m-m4ph/GHSA-r283-h95m-m4ph.json +++ b/advisories/unreviewed/2022/05/GHSA-r283-h95m-m4ph/GHSA-r283-h95m-m4ph.json @@ -7,12 +7,8 @@ "CVE-2021-30552" ], "details": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5fg-xh73-gvjg/GHSA-r5fg-xh73-gvjg.json b/advisories/unreviewed/2022/05/GHSA-r5fg-xh73-gvjg/GHSA-r5fg-xh73-gvjg.json index 63667e2bdeb..5935b4d3696 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5fg-xh73-gvjg/GHSA-r5fg-xh73-gvjg.json +++ b/advisories/unreviewed/2022/05/GHSA-r5fg-xh73-gvjg/GHSA-r5fg-xh73-gvjg.json @@ -7,12 +7,8 @@ "CVE-2005-0190" ], "details": "Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r695-qc6q-3j2j/GHSA-r695-qc6q-3j2j.json b/advisories/unreviewed/2022/05/GHSA-r695-qc6q-3j2j/GHSA-r695-qc6q-3j2j.json index 16f81a4d92d..64815a701e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-r695-qc6q-3j2j/GHSA-r695-qc6q-3j2j.json +++ b/advisories/unreviewed/2022/05/GHSA-r695-qc6q-3j2j/GHSA-r695-qc6q-3j2j.json @@ -7,12 +7,8 @@ "CVE-2005-0105" ], "details": "Unknown vulnerability in typespeed 0.4.1 and earlier allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r755-mqqf-9x9x/GHSA-r755-mqqf-9x9x.json b/advisories/unreviewed/2022/05/GHSA-r755-mqqf-9x9x/GHSA-r755-mqqf-9x9x.json index ddaea36ec3a..e5ef7704319 100644 --- a/advisories/unreviewed/2022/05/GHSA-r755-mqqf-9x9x/GHSA-r755-mqqf-9x9x.json +++ b/advisories/unreviewed/2022/05/GHSA-r755-mqqf-9x9x/GHSA-r755-mqqf-9x9x.json @@ -7,12 +7,8 @@ "CVE-2005-0090" ], "details": "A regression error in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch omits an \"access check,\" which allows local users to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r848-g58f-v3hw/GHSA-r848-g58f-v3hw.json b/advisories/unreviewed/2022/05/GHSA-r848-g58f-v3hw/GHSA-r848-g58f-v3hw.json index 83c8adf37c1..de9e28841e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-r848-g58f-v3hw/GHSA-r848-g58f-v3hw.json +++ b/advisories/unreviewed/2022/05/GHSA-r848-g58f-v3hw/GHSA-r848-g58f-v3hw.json @@ -7,12 +7,8 @@ "CVE-2021-29961" ], "details": "When styling and rendering an oversized `