diff --git a/advisories/github-reviewed/2019/10/GHSA-85rf-xh54-whp3/GHSA-85rf-xh54-whp3.json b/advisories/github-reviewed/2019/10/GHSA-85rf-xh54-whp3/GHSA-85rf-xh54-whp3.json index de61e3bf277..600ebd3d5c3 100644 --- a/advisories/github-reviewed/2019/10/GHSA-85rf-xh54-whp3/GHSA-85rf-xh54-whp3.json +++ b/advisories/github-reviewed/2019/10/GHSA-85rf-xh54-whp3/GHSA-85rf-xh54-whp3.json @@ -8,9 +8,7 @@ ], "summary": "Malicious URL drafting attack against iodines static file server may allow path traversal", "details": "### Impact\n\nA path traversal vulnerability was detected in iodine's static file service. This vulnerability effects any application running iodine's static file server on an effected iodine version.\n\nMalicious URL drafting may cause the static file server to attempt a response containing data from files that shouldn't be normally accessible from the public folder.\n\n### Patches\n\nThe vulnerability was patched in version 0.7.34. Please upgrade to the latest version.\n\n### Workarounds\n\nA possible workaround would be to disable the static file service and it's `X-Sendfile` support, sending static files using nginx or a source code solution (sending the data dynamically).\n\nHowever, it would be better to upgrade iodine to the latest version, as it also contains non-security related fixes.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email [Boaz Segev](https://github.com/boazsegev)", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2020/09/GHSA-r4m5-47cq-6qg8/GHSA-r4m5-47cq-6qg8.json b/advisories/github-reviewed/2020/09/GHSA-r4m5-47cq-6qg8/GHSA-r4m5-47cq-6qg8.json index 775ecb01701..76c8c44376d 100644 --- a/advisories/github-reviewed/2020/09/GHSA-r4m5-47cq-6qg8/GHSA-r4m5-47cq-6qg8.json +++ b/advisories/github-reviewed/2020/09/GHSA-r4m5-47cq-6qg8/GHSA-r4m5-47cq-6qg8.json @@ -3,14 +3,10 @@ "id": "GHSA-r4m5-47cq-6qg8", "modified": "2024-01-08T21:29:30Z", "published": "2020-09-04T17:25:13Z", - "aliases": [ - - ], + "aliases": [], "summary": "Server-Side Request Forgery in ftp-srv", "details": "All versions of `ftp-srv` from v1.0.0 onward to v4.3.3 are vulnerable to Server-Side Request Forgery (SSRF). The package fails to prevent remote clients to access other resources in the network, for example when connecting to the server through telnet. This allows attackers to access any network resources available to the server, including private resources in the hosting environment.\n\n\n## Recommendation\n\nUpgrade to patched versions\n`^2.19.6, ^3.1.2, ^4.3.4`\n\n## Workarounds\nBlacklisting the FTP Command PORT will prevent the server from exposing this behaviour through active connections until a fix is applied.\n\n```\nconst ftp = new FtpSrv({\n blacklist: ['PORT']\n});\n```", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/04/GHSA-6hgr-2g6q-3rmc/GHSA-6hgr-2g6q-3rmc.json b/advisories/github-reviewed/2021/04/GHSA-6hgr-2g6q-3rmc/GHSA-6hgr-2g6q-3rmc.json index 057af9de934..e9a78bee359 100644 --- a/advisories/github-reviewed/2021/04/GHSA-6hgr-2g6q-3rmc/GHSA-6hgr-2g6q-3rmc.json +++ b/advisories/github-reviewed/2021/04/GHSA-6hgr-2g6q-3rmc/GHSA-6hgr-2g6q-3rmc.json @@ -3,9 +3,7 @@ "id": "GHSA-6hgr-2g6q-3rmc", "modified": "2021-10-08T21:22:21Z", "published": "2021-04-22T16:11:26Z", - "aliases": [ - - ], + "aliases": [], "summary": "Server session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19", "details": "`Authentication.logout()` helper in `com.vaadin:flow-client` versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out.\n\n- https://vaadin.com/security/cve-2021-31408", "severity": [ diff --git a/advisories/github-reviewed/2021/07/GHSA-8h2g-r292-j8xh/GHSA-8h2g-r292-j8xh.json b/advisories/github-reviewed/2021/07/GHSA-8h2g-r292-j8xh/GHSA-8h2g-r292-j8xh.json index 3b39232434d..3f99c27962f 100644 --- a/advisories/github-reviewed/2021/07/GHSA-8h2g-r292-j8xh/GHSA-8h2g-r292-j8xh.json +++ b/advisories/github-reviewed/2021/07/GHSA-8h2g-r292-j8xh/GHSA-8h2g-r292-j8xh.json @@ -62,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2021-07-19T17:33:14Z", diff --git a/advisories/github-reviewed/2021/08/GHSA-q7cg-43mg-qp69/GHSA-q7cg-43mg-qp69.json b/advisories/github-reviewed/2021/08/GHSA-q7cg-43mg-qp69/GHSA-q7cg-43mg-qp69.json index 84c6a4d676f..b15badb6363 100644 --- a/advisories/github-reviewed/2021/08/GHSA-q7cg-43mg-qp69/GHSA-q7cg-43mg-qp69.json +++ b/advisories/github-reviewed/2021/08/GHSA-q7cg-43mg-qp69/GHSA-q7cg-43mg-qp69.json @@ -92,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-08-24T18:52:16Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-f2gq-p6qv-ccw4/GHSA-f2gq-p6qv-ccw4.json b/advisories/github-reviewed/2022/05/GHSA-f2gq-p6qv-ccw4/GHSA-f2gq-p6qv-ccw4.json index e3f1e37b4d1..233b72513bf 100644 --- a/advisories/github-reviewed/2022/05/GHSA-f2gq-p6qv-ccw4/GHSA-f2gq-p6qv-ccw4.json +++ b/advisories/github-reviewed/2022/05/GHSA-f2gq-p6qv-ccw4/GHSA-f2gq-p6qv-ccw4.json @@ -8,9 +8,7 @@ ], "summary": "Tomcat Vulnerable to Web Cache Poisoning", "details": "Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0) allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a \"Transfer-Encoding: chunked\" header and a Content-Length header, which causes Tomcat to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka \"HTTP Request Smuggling.\"", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -190,9 +188,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-09-18T23:42:52Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-qrcx-p4rr-g48h/GHSA-qrcx-p4rr-g48h.json b/advisories/github-reviewed/2022/05/GHSA-qrcx-p4rr-g48h/GHSA-qrcx-p4rr-g48h.json index eab316b0eb9..ef6b7034e54 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qrcx-p4rr-g48h/GHSA-qrcx-p4rr-g48h.json +++ b/advisories/github-reviewed/2022/05/GHSA-qrcx-p4rr-g48h/GHSA-qrcx-p4rr-g48h.json @@ -8,9 +8,7 @@ ], "summary": "Apache Tomcat allows remote attackers to read JSP source files", "details": "The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-vxf2-7rc3-pxmx/GHSA-vxf2-7rc3-pxmx.json b/advisories/github-reviewed/2022/05/GHSA-vxf2-7rc3-pxmx/GHSA-vxf2-7rc3-pxmx.json index 562f5a2c0aa..8f13f8a492b 100644 --- a/advisories/github-reviewed/2022/05/GHSA-vxf2-7rc3-pxmx/GHSA-vxf2-7rc3-pxmx.json +++ b/advisories/github-reviewed/2022/05/GHSA-vxf2-7rc3-pxmx/GHSA-vxf2-7rc3-pxmx.json @@ -8,9 +8,7 @@ ], "summary": "Cheetah Path Search Order Hijacking", "details": "Cheetah 0.9.15 and 0.9.16 searches the `/tmp` directory for modules before using the paths in the `PYTHONPATH` variable, which allows local users to execute arbitrary code via a malicious module in `/tmp/`.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-wcpc-f63g-x26q/GHSA-wcpc-f63g-x26q.json b/advisories/github-reviewed/2022/05/GHSA-wcpc-f63g-x26q/GHSA-wcpc-f63g-x26q.json index a72b1361604..3192d157451 100644 --- a/advisories/github-reviewed/2022/05/GHSA-wcpc-f63g-x26q/GHSA-wcpc-f63g-x26q.json +++ b/advisories/github-reviewed/2022/05/GHSA-wcpc-f63g-x26q/GHSA-wcpc-f63g-x26q.json @@ -8,9 +8,7 @@ ], "summary": "Py2Play Unpickles Untrusted Objects", "details": "Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-wxw2-2mx5-c5qf/GHSA-wxw2-2mx5-c5qf.json b/advisories/github-reviewed/2022/05/GHSA-wxw2-2mx5-c5qf/GHSA-wxw2-2mx5-c5qf.json index 57e5ddfdda6..76213006306 100644 --- a/advisories/github-reviewed/2022/05/GHSA-wxw2-2mx5-c5qf/GHSA-wxw2-2mx5-c5qf.json +++ b/advisories/github-reviewed/2022/05/GHSA-wxw2-2mx5-c5qf/GHSA-wxw2-2mx5-c5qf.json @@ -8,9 +8,7 @@ ], "summary": "Improper Input Validation in OpenSymphony XWork", "details": "ParametersInterceptor in OpenSymphony XWork 2.0.x before 2.0.6 and 2.1.x before 2.1.2, as used in Apache Struts and other products, does not properly restrict # (pound sign) references to context objects, which allows remote attackers to execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a \\u0023 representation for the # character.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/09/GHSA-6rx9-c2rh-3qv4/GHSA-6rx9-c2rh-3qv4.json b/advisories/github-reviewed/2023/09/GHSA-6rx9-c2rh-3qv4/GHSA-6rx9-c2rh-3qv4.json index 05bfb8477d2..9f9698e7409 100644 --- a/advisories/github-reviewed/2023/09/GHSA-6rx9-c2rh-3qv4/GHSA-6rx9-c2rh-3qv4.json +++ b/advisories/github-reviewed/2023/09/GHSA-6rx9-c2rh-3qv4/GHSA-6rx9-c2rh-3qv4.json @@ -54,9 +54,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-09-25T18:34:33Z", diff --git a/advisories/unreviewed/2022/01/GHSA-3f56-hcw5-g566/GHSA-3f56-hcw5-g566.json b/advisories/unreviewed/2022/01/GHSA-3f56-hcw5-g566/GHSA-3f56-hcw5-g566.json index 318a30b6d72..7337fbcf942 100644 --- a/advisories/unreviewed/2022/01/GHSA-3f56-hcw5-g566/GHSA-3f56-hcw5-g566.json +++ b/advisories/unreviewed/2022/01/GHSA-3f56-hcw5-g566/GHSA-3f56-hcw5-g566.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7756-hh2m-ccgc/GHSA-7756-hh2m-ccgc.json b/advisories/unreviewed/2022/01/GHSA-7756-hh2m-ccgc/GHSA-7756-hh2m-ccgc.json index 30d4ee299df..ceff8d9fd04 100644 --- a/advisories/unreviewed/2022/01/GHSA-7756-hh2m-ccgc/GHSA-7756-hh2m-ccgc.json +++ b/advisories/unreviewed/2022/01/GHSA-7756-hh2m-ccgc/GHSA-7756-hh2m-ccgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7g54-698x-rx4w/GHSA-7g54-698x-rx4w.json b/advisories/unreviewed/2022/01/GHSA-7g54-698x-rx4w/GHSA-7g54-698x-rx4w.json index 693b61e12b9..1a29bb938ae 100644 --- a/advisories/unreviewed/2022/01/GHSA-7g54-698x-rx4w/GHSA-7g54-698x-rx4w.json +++ b/advisories/unreviewed/2022/01/GHSA-7g54-698x-rx4w/GHSA-7g54-698x-rx4w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9h2j-gwj2-5xv5/GHSA-9h2j-gwj2-5xv5.json b/advisories/unreviewed/2022/01/GHSA-9h2j-gwj2-5xv5/GHSA-9h2j-gwj2-5xv5.json index 44ae5a368d4..5ed9186813f 100644 --- a/advisories/unreviewed/2022/01/GHSA-9h2j-gwj2-5xv5/GHSA-9h2j-gwj2-5xv5.json +++ b/advisories/unreviewed/2022/01/GHSA-9h2j-gwj2-5xv5/GHSA-9h2j-gwj2-5xv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h84v-2q95-638x/GHSA-h84v-2q95-638x.json b/advisories/unreviewed/2022/01/GHSA-h84v-2q95-638x/GHSA-h84v-2q95-638x.json index aba94bea6e7..4445669db78 100644 --- a/advisories/unreviewed/2022/01/GHSA-h84v-2q95-638x/GHSA-h84v-2q95-638x.json +++ b/advisories/unreviewed/2022/01/GHSA-h84v-2q95-638x/GHSA-h84v-2q95-638x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jp4c-q8r4-7qv2/GHSA-jp4c-q8r4-7qv2.json b/advisories/unreviewed/2022/01/GHSA-jp4c-q8r4-7qv2/GHSA-jp4c-q8r4-7qv2.json index a8149cbdefa..91de01dd893 100644 --- a/advisories/unreviewed/2022/01/GHSA-jp4c-q8r4-7qv2/GHSA-jp4c-q8r4-7qv2.json +++ b/advisories/unreviewed/2022/01/GHSA-jp4c-q8r4-7qv2/GHSA-jp4c-q8r4-7qv2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mh95-x4g6-p3xr/GHSA-mh95-x4g6-p3xr.json b/advisories/unreviewed/2022/01/GHSA-mh95-x4g6-p3xr/GHSA-mh95-x4g6-p3xr.json index 5f2e341ed30..057ca2add2d 100644 --- a/advisories/unreviewed/2022/01/GHSA-mh95-x4g6-p3xr/GHSA-mh95-x4g6-p3xr.json +++ b/advisories/unreviewed/2022/01/GHSA-mh95-x4g6-p3xr/GHSA-mh95-x4g6-p3xr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mpjj-m3fm-3jjf/GHSA-mpjj-m3fm-3jjf.json b/advisories/unreviewed/2022/01/GHSA-mpjj-m3fm-3jjf/GHSA-mpjj-m3fm-3jjf.json index 762bec79f3c..b21141d88ca 100644 --- a/advisories/unreviewed/2022/01/GHSA-mpjj-m3fm-3jjf/GHSA-mpjj-m3fm-3jjf.json +++ b/advisories/unreviewed/2022/01/GHSA-mpjj-m3fm-3jjf/GHSA-mpjj-m3fm-3jjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-p5f8-j4hp-99x6/GHSA-p5f8-j4hp-99x6.json b/advisories/unreviewed/2022/01/GHSA-p5f8-j4hp-99x6/GHSA-p5f8-j4hp-99x6.json index a73c3c945e0..972442ad29b 100644 --- a/advisories/unreviewed/2022/01/GHSA-p5f8-j4hp-99x6/GHSA-p5f8-j4hp-99x6.json +++ b/advisories/unreviewed/2022/01/GHSA-p5f8-j4hp-99x6/GHSA-p5f8-j4hp-99x6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-pcxw-5497-h47f/GHSA-pcxw-5497-h47f.json b/advisories/unreviewed/2022/01/GHSA-pcxw-5497-h47f/GHSA-pcxw-5497-h47f.json index 1a318ec0dc3..b6b378734ba 100644 --- a/advisories/unreviewed/2022/01/GHSA-pcxw-5497-h47f/GHSA-pcxw-5497-h47f.json +++ b/advisories/unreviewed/2022/01/GHSA-pcxw-5497-h47f/GHSA-pcxw-5497-h47f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-pm8g-q89h-c5rp/GHSA-pm8g-q89h-c5rp.json b/advisories/unreviewed/2022/01/GHSA-pm8g-q89h-c5rp/GHSA-pm8g-q89h-c5rp.json index 4516ed356c6..3eec7bfdcbc 100644 --- a/advisories/unreviewed/2022/01/GHSA-pm8g-q89h-c5rp/GHSA-pm8g-q89h-c5rp.json +++ b/advisories/unreviewed/2022/01/GHSA-pm8g-q89h-c5rp/GHSA-pm8g-q89h-c5rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qvcp-j6qr-88cc/GHSA-qvcp-j6qr-88cc.json b/advisories/unreviewed/2022/01/GHSA-qvcp-j6qr-88cc/GHSA-qvcp-j6qr-88cc.json index 3b324d112e9..c4c16b3b3e3 100644 --- a/advisories/unreviewed/2022/01/GHSA-qvcp-j6qr-88cc/GHSA-qvcp-j6qr-88cc.json +++ b/advisories/unreviewed/2022/01/GHSA-qvcp-j6qr-88cc/GHSA-qvcp-j6qr-88cc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-r22c-45h9-6v6v/GHSA-r22c-45h9-6v6v.json b/advisories/unreviewed/2022/01/GHSA-r22c-45h9-6v6v/GHSA-r22c-45h9-6v6v.json index 2287195750f..eed2e317ba6 100644 --- a/advisories/unreviewed/2022/01/GHSA-r22c-45h9-6v6v/GHSA-r22c-45h9-6v6v.json +++ b/advisories/unreviewed/2022/01/GHSA-r22c-45h9-6v6v/GHSA-r22c-45h9-6v6v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-rh4w-p52r-wx7r/GHSA-rh4w-p52r-wx7r.json b/advisories/unreviewed/2022/01/GHSA-rh4w-p52r-wx7r/GHSA-rh4w-p52r-wx7r.json index b93f3b44b75..86a79a4e0a9 100644 --- a/advisories/unreviewed/2022/01/GHSA-rh4w-p52r-wx7r/GHSA-rh4w-p52r-wx7r.json +++ b/advisories/unreviewed/2022/01/GHSA-rh4w-p52r-wx7r/GHSA-rh4w-p52r-wx7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-xjv4-5hjm-mw83/GHSA-xjv4-5hjm-mw83.json b/advisories/unreviewed/2022/01/GHSA-xjv4-5hjm-mw83/GHSA-xjv4-5hjm-mw83.json index e34ada2c486..cb16e909216 100644 --- a/advisories/unreviewed/2022/01/GHSA-xjv4-5hjm-mw83/GHSA-xjv4-5hjm-mw83.json +++ b/advisories/unreviewed/2022/01/GHSA-xjv4-5hjm-mw83/GHSA-xjv4-5hjm-mw83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-8xq6-74c8-gq55/GHSA-8xq6-74c8-gq55.json b/advisories/unreviewed/2022/03/GHSA-8xq6-74c8-gq55/GHSA-8xq6-74c8-gq55.json index 4b1994c1ae3..34a684ff6c4 100644 --- a/advisories/unreviewed/2022/03/GHSA-8xq6-74c8-gq55/GHSA-8xq6-74c8-gq55.json +++ b/advisories/unreviewed/2022/03/GHSA-8xq6-74c8-gq55/GHSA-8xq6-74c8-gq55.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-gw88-4vw3-v8vg/GHSA-gw88-4vw3-v8vg.json b/advisories/unreviewed/2022/03/GHSA-gw88-4vw3-v8vg/GHSA-gw88-4vw3-v8vg.json index cc86303e646..ea6183ec093 100644 --- a/advisories/unreviewed/2022/03/GHSA-gw88-4vw3-v8vg/GHSA-gw88-4vw3-v8vg.json +++ b/advisories/unreviewed/2022/03/GHSA-gw88-4vw3-v8vg/GHSA-gw88-4vw3-v8vg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-hgjm-5gpj-665w/GHSA-hgjm-5gpj-665w.json b/advisories/unreviewed/2022/03/GHSA-hgjm-5gpj-665w/GHSA-hgjm-5gpj-665w.json index 07fffd94b22..db357c64673 100644 --- a/advisories/unreviewed/2022/03/GHSA-hgjm-5gpj-665w/GHSA-hgjm-5gpj-665w.json +++ b/advisories/unreviewed/2022/03/GHSA-hgjm-5gpj-665w/GHSA-hgjm-5gpj-665w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-vrjw-84jq-hmx2/GHSA-vrjw-84jq-hmx2.json b/advisories/unreviewed/2022/03/GHSA-vrjw-84jq-hmx2/GHSA-vrjw-84jq-hmx2.json index df991a0185a..d92a8972eff 100644 --- a/advisories/unreviewed/2022/03/GHSA-vrjw-84jq-hmx2/GHSA-vrjw-84jq-hmx2.json +++ b/advisories/unreviewed/2022/03/GHSA-vrjw-84jq-hmx2/GHSA-vrjw-84jq-hmx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-x4hp-xw4r-mwcc/GHSA-x4hp-xw4r-mwcc.json b/advisories/unreviewed/2022/03/GHSA-x4hp-xw4r-mwcc/GHSA-x4hp-xw4r-mwcc.json index 7d04986d0d6..c7bf3f20f54 100644 --- a/advisories/unreviewed/2022/03/GHSA-x4hp-xw4r-mwcc/GHSA-x4hp-xw4r-mwcc.json +++ b/advisories/unreviewed/2022/03/GHSA-x4hp-xw4r-mwcc/GHSA-x4hp-xw4r-mwcc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2352-rh52-hv35/GHSA-2352-rh52-hv35.json b/advisories/unreviewed/2022/04/GHSA-2352-rh52-hv35/GHSA-2352-rh52-hv35.json index e24802c49e6..d742a7f8822 100644 --- a/advisories/unreviewed/2022/04/GHSA-2352-rh52-hv35/GHSA-2352-rh52-hv35.json +++ b/advisories/unreviewed/2022/04/GHSA-2352-rh52-hv35/GHSA-2352-rh52-hv35.json @@ -7,12 +7,8 @@ "CVE-2003-0488" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-39vh-jjf9-78jv/GHSA-39vh-jjf9-78jv.json b/advisories/unreviewed/2022/04/GHSA-39vh-jjf9-78jv/GHSA-39vh-jjf9-78jv.json index 81b1eb8b544..0f165ff41e6 100644 --- a/advisories/unreviewed/2022/04/GHSA-39vh-jjf9-78jv/GHSA-39vh-jjf9-78jv.json +++ b/advisories/unreviewed/2022/04/GHSA-39vh-jjf9-78jv/GHSA-39vh-jjf9-78jv.json @@ -7,12 +7,8 @@ "CVE-2003-0330" ], "details": "Buffer overflow in unknown versions of Maelstrom allows local users to execute arbitrary code via a long -player command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3hxg-qg6f-x2wp/GHSA-3hxg-qg6f-x2wp.json b/advisories/unreviewed/2022/04/GHSA-3hxg-qg6f-x2wp/GHSA-3hxg-qg6f-x2wp.json index 87ab353a37f..293040b8725 100644 --- a/advisories/unreviewed/2022/04/GHSA-3hxg-qg6f-x2wp/GHSA-3hxg-qg6f-x2wp.json +++ b/advisories/unreviewed/2022/04/GHSA-3hxg-qg6f-x2wp/GHSA-3hxg-qg6f-x2wp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-527w-2p3h-f677/GHSA-527w-2p3h-f677.json b/advisories/unreviewed/2022/04/GHSA-527w-2p3h-f677/GHSA-527w-2p3h-f677.json index c4f56ddf385..684a1461690 100644 --- a/advisories/unreviewed/2022/04/GHSA-527w-2p3h-f677/GHSA-527w-2p3h-f677.json +++ b/advisories/unreviewed/2022/04/GHSA-527w-2p3h-f677/GHSA-527w-2p3h-f677.json @@ -7,12 +7,8 @@ "CVE-2003-0494" ], "details": "password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5m56-348x-296j/GHSA-5m56-348x-296j.json b/advisories/unreviewed/2022/04/GHSA-5m56-348x-296j/GHSA-5m56-348x-296j.json index 0562529804e..e277874d385 100644 --- a/advisories/unreviewed/2022/04/GHSA-5m56-348x-296j/GHSA-5m56-348x-296j.json +++ b/advisories/unreviewed/2022/04/GHSA-5m56-348x-296j/GHSA-5m56-348x-296j.json @@ -7,12 +7,8 @@ "CVE-2003-0486" ], "details": "SQL injection vulnerability in viewtopic.php for phpBB 2.0.5 and earlier allows remote attackers to steal password hashes via the topic_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5v2w-8qrx-w2mh/GHSA-5v2w-8qrx-w2mh.json b/advisories/unreviewed/2022/04/GHSA-5v2w-8qrx-w2mh/GHSA-5v2w-8qrx-w2mh.json index 27b42d3c3a6..6945906b562 100644 --- a/advisories/unreviewed/2022/04/GHSA-5v2w-8qrx-w2mh/GHSA-5v2w-8qrx-w2mh.json +++ b/advisories/unreviewed/2022/04/GHSA-5v2w-8qrx-w2mh/GHSA-5v2w-8qrx-w2mh.json @@ -7,12 +7,8 @@ "CVE-2003-0477" ], "details": "wzdftpd 0.1rc4 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command without an argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6638-fxj7-773m/GHSA-6638-fxj7-773m.json b/advisories/unreviewed/2022/04/GHSA-6638-fxj7-773m/GHSA-6638-fxj7-773m.json index bb19bf7e9b3..984f1258292 100644 --- a/advisories/unreviewed/2022/04/GHSA-6638-fxj7-773m/GHSA-6638-fxj7-773m.json +++ b/advisories/unreviewed/2022/04/GHSA-6638-fxj7-773m/GHSA-6638-fxj7-773m.json @@ -7,12 +7,8 @@ "CVE-2003-0319" ], "details": "Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-666j-5q83-85fx/GHSA-666j-5q83-85fx.json b/advisories/unreviewed/2022/04/GHSA-666j-5q83-85fx/GHSA-666j-5q83-85fx.json index 3208b3f43e2..648b9c3cc79 100644 --- a/advisories/unreviewed/2022/04/GHSA-666j-5q83-85fx/GHSA-666j-5q83-85fx.json +++ b/advisories/unreviewed/2022/04/GHSA-666j-5q83-85fx/GHSA-666j-5q83-85fx.json @@ -7,12 +7,8 @@ "CVE-2003-0490" ], "details": "The installation of Dantz Retrospect Client 5.0.540 on MacOS X 10.2.6, and possibly other versions, creates critical directories and files with world-writable permissions, which allows local users to gain privileges as other users by replacing programs with malicious code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6jx5-24rh-6jrh/GHSA-6jx5-24rh-6jrh.json b/advisories/unreviewed/2022/04/GHSA-6jx5-24rh-6jrh/GHSA-6jx5-24rh-6jrh.json index 676ef2cfb0d..ef96fd5a9bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-6jx5-24rh-6jrh/GHSA-6jx5-24rh-6jrh.json +++ b/advisories/unreviewed/2022/04/GHSA-6jx5-24rh-6jrh/GHSA-6jx5-24rh-6jrh.json @@ -7,12 +7,8 @@ "CVE-2003-0320" ], "details": "header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to \"1\" and modifying the admin_root parameter to point to a URL that contains a Trojan horse header.inc.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6vj4-4vhx-fpg5/GHSA-6vj4-4vhx-fpg5.json b/advisories/unreviewed/2022/04/GHSA-6vj4-4vhx-fpg5/GHSA-6vj4-4vhx-fpg5.json index ff66f92431c..3b1fdd0b826 100644 --- a/advisories/unreviewed/2022/04/GHSA-6vj4-4vhx-fpg5/GHSA-6vj4-4vhx-fpg5.json +++ b/advisories/unreviewed/2022/04/GHSA-6vj4-4vhx-fpg5/GHSA-6vj4-4vhx-fpg5.json @@ -7,12 +7,8 @@ "CVE-2003-0483" ], "details": "Cross-site scripting (XSS) vulnerabilities in XMB Forum 1.8 Partagium allow remote attackers to insert arbitrary script via (1) the member parameter to member.php or (2) the action parameter to buddy.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6xvj-44vj-vq8r/GHSA-6xvj-44vj-vq8r.json b/advisories/unreviewed/2022/04/GHSA-6xvj-44vj-vq8r/GHSA-6xvj-44vj-vq8r.json index 5aafb1e6ed7..4182468ff2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-6xvj-44vj-vq8r/GHSA-6xvj-44vj-vq8r.json +++ b/advisories/unreviewed/2022/04/GHSA-6xvj-44vj-vq8r/GHSA-6xvj-44vj-vq8r.json @@ -7,12 +7,8 @@ "CVE-2003-0489" ], "details": "tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-75mq-57vc-998v/GHSA-75mq-57vc-998v.json b/advisories/unreviewed/2022/04/GHSA-75mq-57vc-998v/GHSA-75mq-57vc-998v.json index 6b9c09b438c..0f9b15037a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-75mq-57vc-998v/GHSA-75mq-57vc-998v.json +++ b/advisories/unreviewed/2022/04/GHSA-75mq-57vc-998v/GHSA-75mq-57vc-998v.json @@ -7,12 +7,8 @@ "CVE-2003-0480" ], "details": "VMware Workstation 4.0 for Linux allows local users to overwrite arbitrary files and gain privileges via \"symlink manipulation.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7g77-p258-35hg/GHSA-7g77-p258-35hg.json b/advisories/unreviewed/2022/04/GHSA-7g77-p258-35hg/GHSA-7g77-p258-35hg.json index 9c06dd10590..58545364f13 100644 --- a/advisories/unreviewed/2022/04/GHSA-7g77-p258-35hg/GHSA-7g77-p258-35hg.json +++ b/advisories/unreviewed/2022/04/GHSA-7g77-p258-35hg/GHSA-7g77-p258-35hg.json @@ -7,12 +7,8 @@ "CVE-2003-0476" ], "details": "The execve system call in Linux 2.4.x records the file descriptor of the executable process in the file table of the calling process, which allows local users to gain read access to restricted file descriptors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-88jf-xx4f-mf96/GHSA-88jf-xx4f-mf96.json b/advisories/unreviewed/2022/04/GHSA-88jf-xx4f-mf96/GHSA-88jf-xx4f-mf96.json index b4d132652da..1716db7dad2 100644 --- a/advisories/unreviewed/2022/04/GHSA-88jf-xx4f-mf96/GHSA-88jf-xx4f-mf96.json +++ b/advisories/unreviewed/2022/04/GHSA-88jf-xx4f-mf96/GHSA-88jf-xx4f-mf96.json @@ -7,12 +7,8 @@ "CVE-2003-0324" ], "details": "Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) userhost_cmd_returned function, or (2) Statusbar capability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9rqv-ch6p-mx45/GHSA-9rqv-ch6p-mx45.json b/advisories/unreviewed/2022/04/GHSA-9rqv-ch6p-mx45/GHSA-9rqv-ch6p-mx45.json index 48401290b73..5a6899a2ce4 100644 --- a/advisories/unreviewed/2022/04/GHSA-9rqv-ch6p-mx45/GHSA-9rqv-ch6p-mx45.json +++ b/advisories/unreviewed/2022/04/GHSA-9rqv-ch6p-mx45/GHSA-9rqv-ch6p-mx45.json @@ -7,12 +7,8 @@ "CVE-2003-0465" ], "details": "The kernel strncpy function in Linux 2.4 and 2.5 does not %NUL pad the buffer on architectures other than x86, as opposed to the expected behavior of strncpy as implemented in libc, which could lead to information leaks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cg2h-9xgj-xmrj/GHSA-cg2h-9xgj-xmrj.json b/advisories/unreviewed/2022/04/GHSA-cg2h-9xgj-xmrj/GHSA-cg2h-9xgj-xmrj.json index 378280d6b9b..9a701899592 100644 --- a/advisories/unreviewed/2022/04/GHSA-cg2h-9xgj-xmrj/GHSA-cg2h-9xgj-xmrj.json +++ b/advisories/unreviewed/2022/04/GHSA-cg2h-9xgj-xmrj/GHSA-cg2h-9xgj-xmrj.json @@ -7,12 +7,8 @@ "CVE-2003-0491" ], "details": "The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ch6w-3grm-g2jw/GHSA-ch6w-3grm-g2jw.json b/advisories/unreviewed/2022/04/GHSA-ch6w-3grm-g2jw/GHSA-ch6w-3grm-g2jw.json index eb79f1ca029..21b60dd0f28 100644 --- a/advisories/unreviewed/2022/04/GHSA-ch6w-3grm-g2jw/GHSA-ch6w-3grm-g2jw.json +++ b/advisories/unreviewed/2022/04/GHSA-ch6w-3grm-g2jw/GHSA-ch6w-3grm-g2jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cjgx-q6hf-5frq/GHSA-cjgx-q6hf-5frq.json b/advisories/unreviewed/2022/04/GHSA-cjgx-q6hf-5frq/GHSA-cjgx-q6hf-5frq.json index 20ee9460810..1b28b354daf 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjgx-q6hf-5frq/GHSA-cjgx-q6hf-5frq.json +++ b/advisories/unreviewed/2022/04/GHSA-cjgx-q6hf-5frq/GHSA-cjgx-q6hf-5frq.json @@ -7,12 +7,8 @@ "CVE-2003-0474" ], "details": "Directory traversal vulnerability in iWeb Server allows remote attackers to read arbitrary files via an HTTP request containing .. sequences, a different vulnerability than CVE-2003-0475.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cp4w-x93q-r38r/GHSA-cp4w-x93q-r38r.json b/advisories/unreviewed/2022/04/GHSA-cp4w-x93q-r38r/GHSA-cp4w-x93q-r38r.json index 257dbbb65bf..a545e2b26dd 100644 --- a/advisories/unreviewed/2022/04/GHSA-cp4w-x93q-r38r/GHSA-cp4w-x93q-r38r.json +++ b/advisories/unreviewed/2022/04/GHSA-cp4w-x93q-r38r/GHSA-cp4w-x93q-r38r.json @@ -7,12 +7,8 @@ "CVE-2003-0321" ], "details": "Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names, which are not properly handled by the functions (1) send_ctcp, (2) cannot_join_channel, (3) cluster, (4) BX_compress_modes, (5) handle_oper_vision, and (6) ban_it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fmqg-fc8m-gp7f/GHSA-fmqg-fc8m-gp7f.json b/advisories/unreviewed/2022/04/GHSA-fmqg-fc8m-gp7f/GHSA-fmqg-fc8m-gp7f.json index 6655a229a75..9a84ffd4bc9 100644 --- a/advisories/unreviewed/2022/04/GHSA-fmqg-fc8m-gp7f/GHSA-fmqg-fc8m-gp7f.json +++ b/advisories/unreviewed/2022/04/GHSA-fmqg-fc8m-gp7f/GHSA-fmqg-fc8m-gp7f.json @@ -7,12 +7,8 @@ "CVE-2003-0479" ], "details": "Cross-site scripting (XSS) vulnerability in the guestbook for WebBBS allows remote attackers to insert arbitrary web script via the (1) Name, (2) Email, or (3) Message fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fp3w-7m6x-5h2v/GHSA-fp3w-7m6x-5h2v.json b/advisories/unreviewed/2022/04/GHSA-fp3w-7m6x-5h2v/GHSA-fp3w-7m6x-5h2v.json index b2614835060..0339e94c92a 100644 --- a/advisories/unreviewed/2022/04/GHSA-fp3w-7m6x-5h2v/GHSA-fp3w-7m6x-5h2v.json +++ b/advisories/unreviewed/2022/04/GHSA-fp3w-7m6x-5h2v/GHSA-fp3w-7m6x-5h2v.json @@ -7,12 +7,8 @@ "CVE-2003-0471" ], "details": "Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h89c-476v-mx5m/GHSA-h89c-476v-mx5m.json b/advisories/unreviewed/2022/04/GHSA-h89c-476v-mx5m/GHSA-h89c-476v-mx5m.json index 8c6e2f5a2a1..b3edbd88c2f 100644 --- a/advisories/unreviewed/2022/04/GHSA-h89c-476v-mx5m/GHSA-h89c-476v-mx5m.json +++ b/advisories/unreviewed/2022/04/GHSA-h89c-476v-mx5m/GHSA-h89c-476v-mx5m.json @@ -7,12 +7,8 @@ "CVE-2003-0335" ], "details": "rc.M in Slackware 9.0 calls quotacheck with the -M option, which causes the filesystem to be remounted and possibly reset security-relevant mount flags such as nosuid, nodev, and noexec.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hhh4-2vgc-rxh8/GHSA-hhh4-2vgc-rxh8.json b/advisories/unreviewed/2022/04/GHSA-hhh4-2vgc-rxh8/GHSA-hhh4-2vgc-rxh8.json index cb90684c9b7..b0bc7411226 100644 --- a/advisories/unreviewed/2022/04/GHSA-hhh4-2vgc-rxh8/GHSA-hhh4-2vgc-rxh8.json +++ b/advisories/unreviewed/2022/04/GHSA-hhh4-2vgc-rxh8/GHSA-hhh4-2vgc-rxh8.json @@ -7,12 +7,8 @@ "CVE-2003-0482" ], "details": "TUTOS 1.1 allows remote attackers to execute arbitrary code by uploading the code using file_new.php, then directly accessing the uploaded code via a request to the repository containing the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hhj4-5xrg-7qr8/GHSA-hhj4-5xrg-7qr8.json b/advisories/unreviewed/2022/04/GHSA-hhj4-5xrg-7qr8/GHSA-hhj4-5xrg-7qr8.json index 6bd515f913c..59d709f91d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-hhj4-5xrg-7qr8/GHSA-hhj4-5xrg-7qr8.json +++ b/advisories/unreviewed/2022/04/GHSA-hhj4-5xrg-7qr8/GHSA-hhj4-5xrg-7qr8.json @@ -7,12 +7,8 @@ "CVE-2003-0470" ], "details": "Buffer overflow in the \"RuFSI Utility Class\" ActiveX control (aka \"RuFSI Registry Information Class\"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hmr6-6xw9-xh5j/GHSA-hmr6-6xw9-xh5j.json b/advisories/unreviewed/2022/04/GHSA-hmr6-6xw9-xh5j/GHSA-hmr6-6xw9-xh5j.json index b8a765d4759..3f666f8cd95 100644 --- a/advisories/unreviewed/2022/04/GHSA-hmr6-6xw9-xh5j/GHSA-hmr6-6xw9-xh5j.json +++ b/advisories/unreviewed/2022/04/GHSA-hmr6-6xw9-xh5j/GHSA-hmr6-6xw9-xh5j.json @@ -7,12 +7,8 @@ "CVE-2003-0492" ], "details": "Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hxp4-3p94-hq9w/GHSA-hxp4-3p94-hq9w.json b/advisories/unreviewed/2022/04/GHSA-hxp4-3p94-hq9w/GHSA-hxp4-3p94-hq9w.json index 1bb18e23f3d..9e6850b3ca3 100644 --- a/advisories/unreviewed/2022/04/GHSA-hxp4-3p94-hq9w/GHSA-hxp4-3p94-hq9w.json +++ b/advisories/unreviewed/2022/04/GHSA-hxp4-3p94-hq9w/GHSA-hxp4-3p94-hq9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j3xm-4xhv-p2mf/GHSA-j3xm-4xhv-p2mf.json b/advisories/unreviewed/2022/04/GHSA-j3xm-4xhv-p2mf/GHSA-j3xm-4xhv-p2mf.json index 6273ca9c1ce..bb4288eeb8d 100644 --- a/advisories/unreviewed/2022/04/GHSA-j3xm-4xhv-p2mf/GHSA-j3xm-4xhv-p2mf.json +++ b/advisories/unreviewed/2022/04/GHSA-j3xm-4xhv-p2mf/GHSA-j3xm-4xhv-p2mf.json @@ -7,12 +7,8 @@ "CVE-2003-0481" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to insert arbitrary web script, as demonstrated using the msg parameter to file_select.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jw4h-pj32-w7hf/GHSA-jw4h-pj32-w7hf.json b/advisories/unreviewed/2022/04/GHSA-jw4h-pj32-w7hf/GHSA-jw4h-pj32-w7hf.json index 4b53835bbfa..c78933c4a9f 100644 --- a/advisories/unreviewed/2022/04/GHSA-jw4h-pj32-w7hf/GHSA-jw4h-pj32-w7hf.json +++ b/advisories/unreviewed/2022/04/GHSA-jw4h-pj32-w7hf/GHSA-jw4h-pj32-w7hf.json @@ -7,12 +7,8 @@ "CVE-2003-0331" ], "details": "SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m4f4-g7p6-xr6g/GHSA-m4f4-g7p6-xr6g.json b/advisories/unreviewed/2022/04/GHSA-m4f4-g7p6-xr6g/GHSA-m4f4-g7p6-xr6g.json index 89f40c3a383..d6c3d17d263 100644 --- a/advisories/unreviewed/2022/04/GHSA-m4f4-g7p6-xr6g/GHSA-m4f4-g7p6-xr6g.json +++ b/advisories/unreviewed/2022/04/GHSA-m4f4-g7p6-xr6g/GHSA-m4f4-g7p6-xr6g.json @@ -7,12 +7,8 @@ "CVE-2003-0493" ], "details": "Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mgq6-38vw-89v9/GHSA-mgq6-38vw-89v9.json b/advisories/unreviewed/2022/04/GHSA-mgq6-38vw-89v9/GHSA-mgq6-38vw-89v9.json index ff65e242f13..97603b0509d 100644 --- a/advisories/unreviewed/2022/04/GHSA-mgq6-38vw-89v9/GHSA-mgq6-38vw-89v9.json +++ b/advisories/unreviewed/2022/04/GHSA-mgq6-38vw-89v9/GHSA-mgq6-38vw-89v9.json @@ -7,12 +7,8 @@ "CVE-2003-0322" ], "details": "Integer overflow in BitchX IRC client 1.0-0c19 and earlier allows remote malicious IRC servers to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mmch-5xx5-rhrx/GHSA-mmch-5xx5-rhrx.json b/advisories/unreviewed/2022/04/GHSA-mmch-5xx5-rhrx/GHSA-mmch-5xx5-rhrx.json index 526830f0a77..e02da7293b0 100644 --- a/advisories/unreviewed/2022/04/GHSA-mmch-5xx5-rhrx/GHSA-mmch-5xx5-rhrx.json +++ b/advisories/unreviewed/2022/04/GHSA-mmch-5xx5-rhrx/GHSA-mmch-5xx5-rhrx.json @@ -7,12 +7,8 @@ "CVE-2003-0323" ], "details": "Multiple buffer overflows in ircII 20020912 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by (1) ctcp_buffer, (2) cannot_join_channel, (3) status_make_printable for Statusbar drawing, (4) create_server_list, and possibly other functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p8pr-mx9r-9jjx/GHSA-p8pr-mx9r-9jjx.json b/advisories/unreviewed/2022/04/GHSA-p8pr-mx9r-9jjx/GHSA-p8pr-mx9r-9jjx.json index 2a114783083..6f2d02a8d69 100644 --- a/advisories/unreviewed/2022/04/GHSA-p8pr-mx9r-9jjx/GHSA-p8pr-mx9r-9jjx.json +++ b/advisories/unreviewed/2022/04/GHSA-p8pr-mx9r-9jjx/GHSA-p8pr-mx9r-9jjx.json @@ -7,12 +7,8 @@ "CVE-2003-0468" ], "details": "Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct \"bounce scans\" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a \"!\" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q554-wwwv-mpv6/GHSA-q554-wwwv-mpv6.json b/advisories/unreviewed/2022/04/GHSA-q554-wwwv-mpv6/GHSA-q554-wwwv-mpv6.json index 7f3d87182d6..ec5e9c4d51b 100644 --- a/advisories/unreviewed/2022/04/GHSA-q554-wwwv-mpv6/GHSA-q554-wwwv-mpv6.json +++ b/advisories/unreviewed/2022/04/GHSA-q554-wwwv-mpv6/GHSA-q554-wwwv-mpv6.json @@ -7,12 +7,8 @@ "CVE-2003-0485" ], "details": "Buffer overflow in Progress 4GL Compiler 9.1D06 and earlier allows attackers to execute arbitrary code via source code containing a long, invalid data type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q698-95rj-9cwq/GHSA-q698-95rj-9cwq.json b/advisories/unreviewed/2022/04/GHSA-q698-95rj-9cwq/GHSA-q698-95rj-9cwq.json index 41426f3b324..7efbacd43fd 100644 --- a/advisories/unreviewed/2022/04/GHSA-q698-95rj-9cwq/GHSA-q698-95rj-9cwq.json +++ b/advisories/unreviewed/2022/04/GHSA-q698-95rj-9cwq/GHSA-q698-95rj-9cwq.json @@ -7,12 +7,8 @@ "CVE-2003-0475" ], "details": "Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences (\"%5c%2e%2e\"), a different vulnerability than CVE-2003-0474.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v352-gc7j-mw97/GHSA-v352-gc7j-mw97.json b/advisories/unreviewed/2022/04/GHSA-v352-gc7j-mw97/GHSA-v352-gc7j-mw97.json index 10f80271fca..4e46cddddf1 100644 --- a/advisories/unreviewed/2022/04/GHSA-v352-gc7j-mw97/GHSA-v352-gc7j-mw97.json +++ b/advisories/unreviewed/2022/04/GHSA-v352-gc7j-mw97/GHSA-v352-gc7j-mw97.json @@ -7,12 +7,8 @@ "CVE-2003-0487" ], "details": "Multiple buffer overflows in Kerio MailServer 5.6.3 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a long showuser parameter in the do_subscribe module, (2) a long folder parameter in the add_acl module, (3) a long folder parameter in the list module, and (4) a long user parameter in the do_map module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v3pr-j5pv-5cfq/GHSA-v3pr-j5pv-5cfq.json b/advisories/unreviewed/2022/04/GHSA-v3pr-j5pv-5cfq/GHSA-v3pr-j5pv-5cfq.json index 7d8d0afeece..69a24a41c43 100644 --- a/advisories/unreviewed/2022/04/GHSA-v3pr-j5pv-5cfq/GHSA-v3pr-j5pv-5cfq.json +++ b/advisories/unreviewed/2022/04/GHSA-v3pr-j5pv-5cfq/GHSA-v3pr-j5pv-5cfq.json @@ -7,12 +7,8 @@ "CVE-2003-0495" ], "details": "Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vh7h-gpp8-jfqq/GHSA-vh7h-gpp8-jfqq.json b/advisories/unreviewed/2022/04/GHSA-vh7h-gpp8-jfqq/GHSA-vh7h-gpp8-jfqq.json index 8129b019173..d1248af649b 100644 --- a/advisories/unreviewed/2022/04/GHSA-vh7h-gpp8-jfqq/GHSA-vh7h-gpp8-jfqq.json +++ b/advisories/unreviewed/2022/04/GHSA-vh7h-gpp8-jfqq/GHSA-vh7h-gpp8-jfqq.json @@ -7,12 +7,8 @@ "CVE-2003-0469" ], "details": "Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long \"align\" argument in an HR tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vjmg-pv3r-m3hc/GHSA-vjmg-pv3r-m3hc.json b/advisories/unreviewed/2022/04/GHSA-vjmg-pv3r-m3hc/GHSA-vjmg-pv3r-m3hc.json index 40c8fe1ea0f..fc64717aeec 100644 --- a/advisories/unreviewed/2022/04/GHSA-vjmg-pv3r-m3hc/GHSA-vjmg-pv3r-m3hc.json +++ b/advisories/unreviewed/2022/04/GHSA-vjmg-pv3r-m3hc/GHSA-vjmg-pv3r-m3hc.json @@ -7,12 +7,8 @@ "CVE-2003-0309" ], "details": "Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the \"File Download Dialog Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vm23-3g7r-34fm/GHSA-vm23-3g7r-34fm.json b/advisories/unreviewed/2022/04/GHSA-vm23-3g7r-34fm/GHSA-vm23-3g7r-34fm.json index 7235e904529..2e7677e5e0d 100644 --- a/advisories/unreviewed/2022/04/GHSA-vm23-3g7r-34fm/GHSA-vm23-3g7r-34fm.json +++ b/advisories/unreviewed/2022/04/GHSA-vm23-3g7r-34fm/GHSA-vm23-3g7r-34fm.json @@ -7,12 +7,8 @@ "CVE-2003-0327" ], "details": "Sybase Adaptive Server Enterprise (ASE) 12.5 allows remote attackers to cause a denial of service (hang) via a remote password array with an invalid length, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vmvq-p42h-6w86/GHSA-vmvq-p42h-6w86.json b/advisories/unreviewed/2022/04/GHSA-vmvq-p42h-6w86/GHSA-vmvq-p42h-6w86.json index ba31a0bbc60..4a43dff6b2f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vmvq-p42h-6w86/GHSA-vmvq-p42h-6w86.json +++ b/advisories/unreviewed/2022/04/GHSA-vmvq-p42h-6w86/GHSA-vmvq-p42h-6w86.json @@ -7,12 +7,8 @@ "CVE-2003-0484" ], "details": "Cross-site scripting (XSS) vulnerability in viewtopic.php for phpBB allows remote attackers to insert arbitrary web script via the topic_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wpq2-cr26-cxjh/GHSA-wpq2-cr26-cxjh.json b/advisories/unreviewed/2022/04/GHSA-wpq2-cr26-cxjh/GHSA-wpq2-cr26-cxjh.json index 8a636b92f23..51ba91023f9 100644 --- a/advisories/unreviewed/2022/04/GHSA-wpq2-cr26-cxjh/GHSA-wpq2-cr26-cxjh.json +++ b/advisories/unreviewed/2022/04/GHSA-wpq2-cr26-cxjh/GHSA-wpq2-cr26-cxjh.json @@ -7,12 +7,8 @@ "CVE-2003-0329" ], "details": "CesarFTP 0.99g stores user names and passwords in plaintext in the settings.ini file, which could allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wv87-rv7f-cw5v/GHSA-wv87-rv7f-cw5v.json b/advisories/unreviewed/2022/04/GHSA-wv87-rv7f-cw5v/GHSA-wv87-rv7f-cw5v.json index 87f56c02796..648cdcf2e10 100644 --- a/advisories/unreviewed/2022/04/GHSA-wv87-rv7f-cw5v/GHSA-wv87-rv7f-cw5v.json +++ b/advisories/unreviewed/2022/04/GHSA-wv87-rv7f-cw5v/GHSA-wv87-rv7f-cw5v.json @@ -7,12 +7,8 @@ "CVE-2003-0467" ], "details": "Unknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIG_IP_NF_NAT_FTP or CONFIG_IP_NF_NAT_IRC is enabled, or the ip_nat_ftp or ip_nat_irc modules are loaded, allows remote attackers to cause a denial of service (crash) in systems using NAT, possibly due to an integer signedness error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wwh4-wjhp-4xrg/GHSA-wwh4-wjhp-4xrg.json b/advisories/unreviewed/2022/04/GHSA-wwh4-wjhp-4xrg/GHSA-wwh4-wjhp-4xrg.json index abe3fd60ab1..ab5a3ebfdf4 100644 --- a/advisories/unreviewed/2022/04/GHSA-wwh4-wjhp-4xrg/GHSA-wwh4-wjhp-4xrg.json +++ b/advisories/unreviewed/2022/04/GHSA-wwh4-wjhp-4xrg/GHSA-wwh4-wjhp-4xrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-x5mp-frp8-x862/GHSA-x5mp-frp8-x862.json b/advisories/unreviewed/2022/04/GHSA-x5mp-frp8-x862/GHSA-x5mp-frp8-x862.json index 2f11d7672a6..d355c4d18e0 100644 --- a/advisories/unreviewed/2022/04/GHSA-x5mp-frp8-x862/GHSA-x5mp-frp8-x862.json +++ b/advisories/unreviewed/2022/04/GHSA-x5mp-frp8-x862/GHSA-x5mp-frp8-x862.json @@ -7,12 +7,8 @@ "CVE-2003-0325" ], "details": "Buffer overflow in Maelstrom 3.0.6, 3.0.5, and earlier allows local users to execute arbitrary code via a long -server command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x8p3-6q69-f8pw/GHSA-x8p3-6q69-f8pw.json b/advisories/unreviewed/2022/04/GHSA-x8p3-6q69-f8pw/GHSA-x8p3-6q69-f8pw.json index 5c8427ffeb6..18cacda1838 100644 --- a/advisories/unreviewed/2022/04/GHSA-x8p3-6q69-f8pw/GHSA-x8p3-6q69-f8pw.json +++ b/advisories/unreviewed/2022/04/GHSA-x8p3-6q69-f8pw/GHSA-x8p3-6q69-f8pw.json @@ -7,12 +7,8 @@ "CVE-2003-0478" ], "details": "Format string vulnerability in (1) Bahamut IRCd 1.4.35 and earlier, and other IRC daemons based on Bahamut including (2) digatech 1.2.1, (3) methane 0.1.1, (4) AndromedeIRCd 1.2.3-Release, and (5) ircd-RU, when running in debug mode, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request containing format strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xfmh-g5xw-2c2j/GHSA-xfmh-g5xw-2c2j.json b/advisories/unreviewed/2022/04/GHSA-xfmh-g5xw-2c2j/GHSA-xfmh-g5xw-2c2j.json index a2f939ada6d..8ead794c7df 100644 --- a/advisories/unreviewed/2022/04/GHSA-xfmh-g5xw-2c2j/GHSA-xfmh-g5xw-2c2j.json +++ b/advisories/unreviewed/2022/04/GHSA-xfmh-g5xw-2c2j/GHSA-xfmh-g5xw-2c2j.json @@ -7,12 +7,8 @@ "CVE-2003-0326" ], "details": "Integer overflow in parse_decode_path() of slocate may allow attackers to execute arbitrary code via a LOCATE_PATH with a large number of \":\" (colon) characters, whose count is used in a call to malloc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-245p-293f-hm6f/GHSA-245p-293f-hm6f.json b/advisories/unreviewed/2022/05/GHSA-245p-293f-hm6f/GHSA-245p-293f-hm6f.json index 0b2747acd4e..36de551b5d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-245p-293f-hm6f/GHSA-245p-293f-hm6f.json +++ b/advisories/unreviewed/2022/05/GHSA-245p-293f-hm6f/GHSA-245p-293f-hm6f.json @@ -7,12 +7,8 @@ "CVE-2019-11215" ], "details": "In Combodo iTop 2.2.0 through 2.6.0, if the configuration file is writable, then execution of arbitrary code can be accomplished by calling ajax.dataloader with a maliciously crafted payload. Many conditions can place the configuration file into a writable state: during installation; during upgrade; in certain cases, an error during modification of the file from the web interface leaves the file writable (can be triggered with XSS); a race condition can be triggered by the hub-connector module (community version only from 2.4.1 to 2.6.0); or editing the file in a CLI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-24jv-89r5-6fvm/GHSA-24jv-89r5-6fvm.json b/advisories/unreviewed/2022/05/GHSA-24jv-89r5-6fvm/GHSA-24jv-89r5-6fvm.json index 6aa66179452..b9b8a1bc814 100644 --- a/advisories/unreviewed/2022/05/GHSA-24jv-89r5-6fvm/GHSA-24jv-89r5-6fvm.json +++ b/advisories/unreviewed/2022/05/GHSA-24jv-89r5-6fvm/GHSA-24jv-89r5-6fvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2659-8c39-25mv/GHSA-2659-8c39-25mv.json b/advisories/unreviewed/2022/05/GHSA-2659-8c39-25mv/GHSA-2659-8c39-25mv.json index abd3c9a10f8..8cd080a90bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-2659-8c39-25mv/GHSA-2659-8c39-25mv.json +++ b/advisories/unreviewed/2022/05/GHSA-2659-8c39-25mv/GHSA-2659-8c39-25mv.json @@ -7,12 +7,8 @@ "CVE-2019-4596" ], "details": "IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167879.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26hm-gghq-x5rr/GHSA-26hm-gghq-x5rr.json b/advisories/unreviewed/2022/05/GHSA-26hm-gghq-x5rr/GHSA-26hm-gghq-x5rr.json index 00fe2ff29c8..81d6a60ce81 100644 --- a/advisories/unreviewed/2022/05/GHSA-26hm-gghq-x5rr/GHSA-26hm-gghq-x5rr.json +++ b/advisories/unreviewed/2022/05/GHSA-26hm-gghq-x5rr/GHSA-26hm-gghq-x5rr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-283w-893j-25h8/GHSA-283w-893j-25h8.json b/advisories/unreviewed/2022/05/GHSA-283w-893j-25h8/GHSA-283w-893j-25h8.json index bc7cb6baa39..ce82421cec2 100644 --- a/advisories/unreviewed/2022/05/GHSA-283w-893j-25h8/GHSA-283w-893j-25h8.json +++ b/advisories/unreviewed/2022/05/GHSA-283w-893j-25h8/GHSA-283w-893j-25h8.json @@ -7,12 +7,8 @@ "CVE-2020-3750" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2843-q9jg-f7rg/GHSA-2843-q9jg-f7rg.json b/advisories/unreviewed/2022/05/GHSA-2843-q9jg-f7rg/GHSA-2843-q9jg-f7rg.json index 97e5f3631f4..1b9d7193134 100644 --- a/advisories/unreviewed/2022/05/GHSA-2843-q9jg-f7rg/GHSA-2843-q9jg-f7rg.json +++ b/advisories/unreviewed/2022/05/GHSA-2843-q9jg-f7rg/GHSA-2843-q9jg-f7rg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2844-744m-4h35/GHSA-2844-744m-4h35.json b/advisories/unreviewed/2022/05/GHSA-2844-744m-4h35/GHSA-2844-744m-4h35.json index b8a033bb58e..60921a01a8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2844-744m-4h35/GHSA-2844-744m-4h35.json +++ b/advisories/unreviewed/2022/05/GHSA-2844-744m-4h35/GHSA-2844-744m-4h35.json @@ -7,12 +7,8 @@ "CVE-2020-8848" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9407.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-286p-xm2q-ghvg/GHSA-286p-xm2q-ghvg.json b/advisories/unreviewed/2022/05/GHSA-286p-xm2q-ghvg/GHSA-286p-xm2q-ghvg.json index a48acb2322f..489960c9f6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-286p-xm2q-ghvg/GHSA-286p-xm2q-ghvg.json +++ b/advisories/unreviewed/2022/05/GHSA-286p-xm2q-ghvg/GHSA-286p-xm2q-ghvg.json @@ -7,12 +7,8 @@ "CVE-2020-3861" ], "details": "The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may gain access to protected parts of the file system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28j5-v67p-rr85/GHSA-28j5-v67p-rr85.json b/advisories/unreviewed/2022/05/GHSA-28j5-v67p-rr85/GHSA-28j5-v67p-rr85.json index fda90a147b0..1a488c6ec2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-28j5-v67p-rr85/GHSA-28j5-v67p-rr85.json +++ b/advisories/unreviewed/2022/05/GHSA-28j5-v67p-rr85/GHSA-28j5-v67p-rr85.json @@ -7,12 +7,8 @@ "CVE-2020-1858" ], "details": "Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2c2q-v642-37w6/GHSA-2c2q-v642-37w6.json b/advisories/unreviewed/2022/05/GHSA-2c2q-v642-37w6/GHSA-2c2q-v642-37w6.json index 12d7a448de0..62606f7af77 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c2q-v642-37w6/GHSA-2c2q-v642-37w6.json +++ b/advisories/unreviewed/2022/05/GHSA-2c2q-v642-37w6/GHSA-2c2q-v642-37w6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2crv-pj7h-4r9x/GHSA-2crv-pj7h-4r9x.json b/advisories/unreviewed/2022/05/GHSA-2crv-pj7h-4r9x/GHSA-2crv-pj7h-4r9x.json index 93825e48252..c15ca233497 100644 --- a/advisories/unreviewed/2022/05/GHSA-2crv-pj7h-4r9x/GHSA-2crv-pj7h-4r9x.json +++ b/advisories/unreviewed/2022/05/GHSA-2crv-pj7h-4r9x/GHSA-2crv-pj7h-4r9x.json @@ -7,12 +7,8 @@ "CVE-2020-7450" ], "details": "In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2cxp-92q3-3pw5/GHSA-2cxp-92q3-3pw5.json b/advisories/unreviewed/2022/05/GHSA-2cxp-92q3-3pw5/GHSA-2cxp-92q3-3pw5.json index e1aa5a0555e..ffa56368cff 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cxp-92q3-3pw5/GHSA-2cxp-92q3-3pw5.json +++ b/advisories/unreviewed/2022/05/GHSA-2cxp-92q3-3pw5/GHSA-2cxp-92q3-3pw5.json @@ -7,12 +7,8 @@ "CVE-2020-9337" ], "details": "In GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fx2-v8hh-86v7/GHSA-2fx2-v8hh-86v7.json b/advisories/unreviewed/2022/05/GHSA-2fx2-v8hh-86v7/GHSA-2fx2-v8hh-86v7.json index 6161797ed0c..5d3bab499ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fx2-v8hh-86v7/GHSA-2fx2-v8hh-86v7.json +++ b/advisories/unreviewed/2022/05/GHSA-2fx2-v8hh-86v7/GHSA-2fx2-v8hh-86v7.json @@ -7,12 +7,8 @@ "CVE-2016-4606" ], "details": "Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2grm-pxpf-4j6v/GHSA-2grm-pxpf-4j6v.json b/advisories/unreviewed/2022/05/GHSA-2grm-pxpf-4j6v/GHSA-2grm-pxpf-4j6v.json index e41566de172..11f23e4b117 100644 --- a/advisories/unreviewed/2022/05/GHSA-2grm-pxpf-4j6v/GHSA-2grm-pxpf-4j6v.json +++ b/advisories/unreviewed/2022/05/GHSA-2grm-pxpf-4j6v/GHSA-2grm-pxpf-4j6v.json @@ -7,12 +7,8 @@ "CVE-2020-9012" ], "details": "A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2hf9-vh2r-j6vp/GHSA-2hf9-vh2r-j6vp.json b/advisories/unreviewed/2022/05/GHSA-2hf9-vh2r-j6vp/GHSA-2hf9-vh2r-j6vp.json index 35100ffcbab..73ede8e636f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hf9-vh2r-j6vp/GHSA-2hf9-vh2r-j6vp.json +++ b/advisories/unreviewed/2022/05/GHSA-2hf9-vh2r-j6vp/GHSA-2hf9-vh2r-j6vp.json @@ -7,12 +7,8 @@ "CVE-2015-0258" ], "details": "Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before 2.1 allow remote authenticated users to execute arbitrary code by uploading a file with a (1) .php3, (2) .php4, (3) .php5, or (4) .phtml extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jvm-wg52-7h4f/GHSA-2jvm-wg52-7h4f.json b/advisories/unreviewed/2022/05/GHSA-2jvm-wg52-7h4f/GHSA-2jvm-wg52-7h4f.json index d64f630ec33..af80adbacad 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jvm-wg52-7h4f/GHSA-2jvm-wg52-7h4f.json +++ b/advisories/unreviewed/2022/05/GHSA-2jvm-wg52-7h4f/GHSA-2jvm-wg52-7h4f.json @@ -7,12 +7,8 @@ "CVE-2020-5532" ], "details": "ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mw2-m8pw-m382/GHSA-2mw2-m8pw-m382.json b/advisories/unreviewed/2022/05/GHSA-2mw2-m8pw-m382/GHSA-2mw2-m8pw-m382.json index 1ae51926bc7..30d45537587 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mw2-m8pw-m382/GHSA-2mw2-m8pw-m382.json +++ b/advisories/unreviewed/2022/05/GHSA-2mw2-m8pw-m382/GHSA-2mw2-m8pw-m382.json @@ -7,12 +7,8 @@ "CVE-2020-0743" ], "details": "An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0749, CVE-2020-0750.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qmc-7r7p-g995/GHSA-2qmc-7r7p-g995.json b/advisories/unreviewed/2022/05/GHSA-2qmc-7r7p-g995/GHSA-2qmc-7r7p-g995.json index b17cc95e032..b1afcc0b190 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qmc-7r7p-g995/GHSA-2qmc-7r7p-g995.json +++ b/advisories/unreviewed/2022/05/GHSA-2qmc-7r7p-g995/GHSA-2qmc-7r7p-g995.json @@ -7,12 +7,8 @@ "CVE-2015-5617" ], "details": "SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2r9w-r7qj-682x/GHSA-2r9w-r7qj-682x.json b/advisories/unreviewed/2022/05/GHSA-2r9w-r7qj-682x/GHSA-2r9w-r7qj-682x.json index 0b7304fd4f6..7b3cd716455 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r9w-r7qj-682x/GHSA-2r9w-r7qj-682x.json +++ b/advisories/unreviewed/2022/05/GHSA-2r9w-r7qj-682x/GHSA-2r9w-r7qj-682x.json @@ -7,12 +7,8 @@ "CVE-2020-3827" ], "details": "A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. Viewing a maliciously crafted JPEG file may lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rx6-frrg-fjf2/GHSA-2rx6-frrg-fjf2.json b/advisories/unreviewed/2022/05/GHSA-2rx6-frrg-fjf2/GHSA-2rx6-frrg-fjf2.json index eeb2ee067b9..584a4fbbfea 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rx6-frrg-fjf2/GHSA-2rx6-frrg-fjf2.json +++ b/advisories/unreviewed/2022/05/GHSA-2rx6-frrg-fjf2/GHSA-2rx6-frrg-fjf2.json @@ -7,12 +7,8 @@ "CVE-2020-8847" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPEG2000 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9414.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v47-vh6m-54xv/GHSA-2v47-vh6m-54xv.json b/advisories/unreviewed/2022/05/GHSA-2v47-vh6m-54xv/GHSA-2v47-vh6m-54xv.json index ae899ccc5a9..85a4504d097 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v47-vh6m-54xv/GHSA-2v47-vh6m-54xv.json +++ b/advisories/unreviewed/2022/05/GHSA-2v47-vh6m-54xv/GHSA-2v47-vh6m-54xv.json @@ -7,12 +7,8 @@ "CVE-2019-19196" ], "details": "The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices accepts a pairing request with a key size greater than 16 bytes, allowing an attacker in radio range to cause a buffer overflow and denial of service (crash) via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v7g-r6qx-cv4h/GHSA-2v7g-r6qx-cv4h.json b/advisories/unreviewed/2022/05/GHSA-2v7g-r6qx-cv4h/GHSA-2v7g-r6qx-cv4h.json index b948897fc2d..bc1cc6361f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v7g-r6qx-cv4h/GHSA-2v7g-r6qx-cv4h.json +++ b/advisories/unreviewed/2022/05/GHSA-2v7g-r6qx-cv4h/GHSA-2v7g-r6qx-cv4h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vp7-qv46-68wp/GHSA-2vp7-qv46-68wp.json b/advisories/unreviewed/2022/05/GHSA-2vp7-qv46-68wp/GHSA-2vp7-qv46-68wp.json index 5ec674c0781..f3f49ffaf9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vp7-qv46-68wp/GHSA-2vp7-qv46-68wp.json +++ b/advisories/unreviewed/2022/05/GHSA-2vp7-qv46-68wp/GHSA-2vp7-qv46-68wp.json @@ -7,12 +7,8 @@ "CVE-2020-9338" ], "details": "SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vw7-qgh3-r4pc/GHSA-2vw7-qgh3-r4pc.json b/advisories/unreviewed/2022/05/GHSA-2vw7-qgh3-r4pc/GHSA-2vw7-qgh3-r4pc.json index 5db642281ab..a283d094ba1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vw7-qgh3-r4pc/GHSA-2vw7-qgh3-r4pc.json +++ b/advisories/unreviewed/2022/05/GHSA-2vw7-qgh3-r4pc/GHSA-2vw7-qgh3-r4pc.json @@ -7,12 +7,8 @@ "CVE-2020-9382" ], "details": "An issue was discovered in the Widgets extension through 1.4.0 for MediaWiki. Improper title sanitization allowed for the execution of any wiki page as a widget (as defined by this extension) via MediaWiki's {{#widget:}} parser function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vx7-8vwr-vppx/GHSA-2vx7-8vwr-vppx.json b/advisories/unreviewed/2022/05/GHSA-2vx7-8vwr-vppx/GHSA-2vx7-8vwr-vppx.json index d4c65744a08..72182251fcb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vx7-8vwr-vppx/GHSA-2vx7-8vwr-vppx.json +++ b/advisories/unreviewed/2022/05/GHSA-2vx7-8vwr-vppx/GHSA-2vx7-8vwr-vppx.json @@ -7,12 +7,8 @@ "CVE-2020-3725" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2x3w-f554-wxw8/GHSA-2x3w-f554-wxw8.json b/advisories/unreviewed/2022/05/GHSA-2x3w-f554-wxw8/GHSA-2x3w-f554-wxw8.json index e3089030d57..c77215b401d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x3w-f554-wxw8/GHSA-2x3w-f554-wxw8.json +++ b/advisories/unreviewed/2022/05/GHSA-2x3w-f554-wxw8/GHSA-2x3w-f554-wxw8.json @@ -7,12 +7,8 @@ "CVE-2020-3738" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2x46-5pjx-vpjx/GHSA-2x46-5pjx-vpjx.json b/advisories/unreviewed/2022/05/GHSA-2x46-5pjx-vpjx/GHSA-2x46-5pjx-vpjx.json index 5dd48059dc0..202e2f68213 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x46-5pjx-vpjx/GHSA-2x46-5pjx-vpjx.json +++ b/advisories/unreviewed/2022/05/GHSA-2x46-5pjx-vpjx/GHSA-2x46-5pjx-vpjx.json @@ -7,12 +7,8 @@ "CVE-2020-8953" ], "details": "OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-32c8-2q94-9pqj/GHSA-32c8-2q94-9pqj.json b/advisories/unreviewed/2022/05/GHSA-32c8-2q94-9pqj/GHSA-32c8-2q94-9pqj.json index 93d1c750aac..a13ea0def95 100644 --- a/advisories/unreviewed/2022/05/GHSA-32c8-2q94-9pqj/GHSA-32c8-2q94-9pqj.json +++ b/advisories/unreviewed/2022/05/GHSA-32c8-2q94-9pqj/GHSA-32c8-2q94-9pqj.json @@ -7,12 +7,8 @@ "CVE-2019-17228" ], "details": "includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3363-v6ff-866r/GHSA-3363-v6ff-866r.json b/advisories/unreviewed/2022/05/GHSA-3363-v6ff-866r/GHSA-3363-v6ff-866r.json index 452136ab59f..c4aa2c30715 100644 --- a/advisories/unreviewed/2022/05/GHSA-3363-v6ff-866r/GHSA-3363-v6ff-866r.json +++ b/advisories/unreviewed/2022/05/GHSA-3363-v6ff-866r/GHSA-3363-v6ff-866r.json @@ -7,12 +7,8 @@ "CVE-2020-3724" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33c5-xpjg-3vv5/GHSA-33c5-xpjg-3vv5.json b/advisories/unreviewed/2022/05/GHSA-33c5-xpjg-3vv5/GHSA-33c5-xpjg-3vv5.json index 12d785366b7..733d6ca0f5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-33c5-xpjg-3vv5/GHSA-33c5-xpjg-3vv5.json +++ b/advisories/unreviewed/2022/05/GHSA-33c5-xpjg-3vv5/GHSA-33c5-xpjg-3vv5.json @@ -7,12 +7,8 @@ "CVE-2018-8878" ], "details": "Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the custom_id variable on the blocking.asp page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3448-wp7r-84q4/GHSA-3448-wp7r-84q4.json b/advisories/unreviewed/2022/05/GHSA-3448-wp7r-84q4/GHSA-3448-wp7r-84q4.json index 13b292357ed..8516d53ba6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3448-wp7r-84q4/GHSA-3448-wp7r-84q4.json +++ b/advisories/unreviewed/2022/05/GHSA-3448-wp7r-84q4/GHSA-3448-wp7r-84q4.json @@ -7,12 +7,8 @@ "CVE-2020-0026" ], "details": "In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-140419401", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35c5-gv44-r3q7/GHSA-35c5-gv44-r3q7.json b/advisories/unreviewed/2022/05/GHSA-35c5-gv44-r3q7/GHSA-35c5-gv44-r3q7.json index 6098997d22e..78dddf0512d 100644 --- a/advisories/unreviewed/2022/05/GHSA-35c5-gv44-r3q7/GHSA-35c5-gv44-r3q7.json +++ b/advisories/unreviewed/2022/05/GHSA-35c5-gv44-r3q7/GHSA-35c5-gv44-r3q7.json @@ -7,12 +7,8 @@ "CVE-2020-3747" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35v9-jfrh-47jx/GHSA-35v9-jfrh-47jx.json b/advisories/unreviewed/2022/05/GHSA-35v9-jfrh-47jx/GHSA-35v9-jfrh-47jx.json index 4e96a613b40..4f177356170 100644 --- a/advisories/unreviewed/2022/05/GHSA-35v9-jfrh-47jx/GHSA-35v9-jfrh-47jx.json +++ b/advisories/unreviewed/2022/05/GHSA-35v9-jfrh-47jx/GHSA-35v9-jfrh-47jx.json @@ -7,12 +7,8 @@ "CVE-2020-3739" ], "details": "Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3742-g66h-97pc/GHSA-3742-g66h-97pc.json b/advisories/unreviewed/2022/05/GHSA-3742-g66h-97pc/GHSA-3742-g66h-97pc.json index ae2c5da3459..b8841f3d67a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3742-g66h-97pc/GHSA-3742-g66h-97pc.json +++ b/advisories/unreviewed/2022/05/GHSA-3742-g66h-97pc/GHSA-3742-g66h-97pc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37hw-m3rc-6ww4/GHSA-37hw-m3rc-6ww4.json b/advisories/unreviewed/2022/05/GHSA-37hw-m3rc-6ww4/GHSA-37hw-m3rc-6ww4.json index b18f272e1a0..adf73316717 100644 --- a/advisories/unreviewed/2022/05/GHSA-37hw-m3rc-6ww4/GHSA-37hw-m3rc-6ww4.json +++ b/advisories/unreviewed/2022/05/GHSA-37hw-m3rc-6ww4/GHSA-37hw-m3rc-6ww4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37vm-m2gx-6h3h/GHSA-37vm-m2gx-6h3h.json b/advisories/unreviewed/2022/05/GHSA-37vm-m2gx-6h3h/GHSA-37vm-m2gx-6h3h.json index d92344b42c3..cddba7e0f29 100644 --- a/advisories/unreviewed/2022/05/GHSA-37vm-m2gx-6h3h/GHSA-37vm-m2gx-6h3h.json +++ b/advisories/unreviewed/2022/05/GHSA-37vm-m2gx-6h3h/GHSA-37vm-m2gx-6h3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3863-h4xw-2xv3/GHSA-3863-h4xw-2xv3.json b/advisories/unreviewed/2022/05/GHSA-3863-h4xw-2xv3/GHSA-3863-h4xw-2xv3.json index 49b5ab820c0..3445ee00b91 100644 --- a/advisories/unreviewed/2022/05/GHSA-3863-h4xw-2xv3/GHSA-3863-h4xw-2xv3.json +++ b/advisories/unreviewed/2022/05/GHSA-3863-h4xw-2xv3/GHSA-3863-h4xw-2xv3.json @@ -7,12 +7,8 @@ "CVE-2020-9365" ], "details": "An issue was discovered in Pure-FTPd 1.0.49. An out-of-bounds (OOB) read has been detected in the pure_strcmp function in utils.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3923-gv2c-8fvh/GHSA-3923-gv2c-8fvh.json b/advisories/unreviewed/2022/05/GHSA-3923-gv2c-8fvh/GHSA-3923-gv2c-8fvh.json index 0d89cda75d9..ec7ef258f8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3923-gv2c-8fvh/GHSA-3923-gv2c-8fvh.json +++ b/advisories/unreviewed/2022/05/GHSA-3923-gv2c-8fvh/GHSA-3923-gv2c-8fvh.json @@ -7,12 +7,8 @@ "CVE-2020-9339" ], "details": "SOPlanning 1.45 allows XSS via the Name or Comment to status.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-393h-j526-4h79/GHSA-393h-j526-4h79.json b/advisories/unreviewed/2022/05/GHSA-393h-j526-4h79/GHSA-393h-j526-4h79.json index 88aa42abb49..45a462fa64d 100644 --- a/advisories/unreviewed/2022/05/GHSA-393h-j526-4h79/GHSA-393h-j526-4h79.json +++ b/advisories/unreviewed/2022/05/GHSA-393h-j526-4h79/GHSA-393h-j526-4h79.json @@ -7,12 +7,8 @@ "CVE-2019-12510" ], "details": "In NETGEAR Nighthawk X10-R900 prior to 1.0.4.26, an attacker may bypass all authentication checks on the device's \"NETGEAR Genie\" SOAP API (\"/soap/server_sa\") by supplying a malicious X-Forwarded-For header of the device's LAN IP address (192.168.1.1) in every request. As a result, an attacker may modify almost all of the device's settings and view various configuration settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-39p5-5v55-q2j7/GHSA-39p5-5v55-q2j7.json b/advisories/unreviewed/2022/05/GHSA-39p5-5v55-q2j7/GHSA-39p5-5v55-q2j7.json index 0f60a5c6b68..7a53bffbd13 100644 --- a/advisories/unreviewed/2022/05/GHSA-39p5-5v55-q2j7/GHSA-39p5-5v55-q2j7.json +++ b/advisories/unreviewed/2022/05/GHSA-39p5-5v55-q2j7/GHSA-39p5-5v55-q2j7.json @@ -7,12 +7,8 @@ "CVE-2020-3159" ], "details": "A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-39vh-5vp8-mrhx/GHSA-39vh-5vp8-mrhx.json b/advisories/unreviewed/2022/05/GHSA-39vh-5vp8-mrhx/GHSA-39vh-5vp8-mrhx.json index a98f1eedfbf..336bf7cf9f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-39vh-5vp8-mrhx/GHSA-39vh-5vp8-mrhx.json +++ b/advisories/unreviewed/2022/05/GHSA-39vh-5vp8-mrhx/GHSA-39vh-5vp8-mrhx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3cc2-9qw3-rg33/GHSA-3cc2-9qw3-rg33.json b/advisories/unreviewed/2022/05/GHSA-3cc2-9qw3-rg33/GHSA-3cc2-9qw3-rg33.json index 209ef70be04..a4cd91fb82d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cc2-9qw3-rg33/GHSA-3cc2-9qw3-rg33.json +++ b/advisories/unreviewed/2022/05/GHSA-3cc2-9qw3-rg33/GHSA-3cc2-9qw3-rg33.json @@ -7,12 +7,8 @@ "CVE-2020-9020" ], "details": "Iteris Vantage Velocity Field Unit 2.3.1, 2.4.2, and 3.0 devices allow the injection of OS commands into cgi-bin/timeconfig.py via shell metacharacters in the NTP Server field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cvr-q9wg-jwqw/GHSA-3cvr-q9wg-jwqw.json b/advisories/unreviewed/2022/05/GHSA-3cvr-q9wg-jwqw/GHSA-3cvr-q9wg-jwqw.json index 85cde44eb49..a9214a3d9df 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cvr-q9wg-jwqw/GHSA-3cvr-q9wg-jwqw.json +++ b/advisories/unreviewed/2022/05/GHSA-3cvr-q9wg-jwqw/GHSA-3cvr-q9wg-jwqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3g4g-934h-pjq7/GHSA-3g4g-934h-pjq7.json b/advisories/unreviewed/2022/05/GHSA-3g4g-934h-pjq7/GHSA-3g4g-934h-pjq7.json index 58ab6ddc099..7a8164ac1bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g4g-934h-pjq7/GHSA-3g4g-934h-pjq7.json +++ b/advisories/unreviewed/2022/05/GHSA-3g4g-934h-pjq7/GHSA-3g4g-934h-pjq7.json @@ -7,12 +7,8 @@ "CVE-2020-9342" ], "details": "The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Protection For Salesforce, Email and Server Security, and Internet GateKeeper.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3g68-p942-4533/GHSA-3g68-p942-4533.json b/advisories/unreviewed/2022/05/GHSA-3g68-p942-4533/GHSA-3g68-p942-4533.json index ebd35c9bf8a..ce147017709 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g68-p942-4533/GHSA-3g68-p942-4533.json +++ b/advisories/unreviewed/2022/05/GHSA-3g68-p942-4533/GHSA-3g68-p942-4533.json @@ -7,12 +7,8 @@ "CVE-2019-3695" ], "details": "A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Development Tools 15-SP1, SUSE Linux Enterprise Module for Open Buildservice Development Tools 15, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1 allows the user pcp to run code as root by placing it into /var/log/pcp/configs.sh This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise High Performance Computing 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Module for Development Tools 15-SP1 pcp versions prior to 4.3.1-3.5.3. SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server 15-LTSS pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Server for SAP 15 pcp versions prior to 3.11.9-5.8.1. SUSE Linux Enterprise Software Development Kit 12-SP4 pcp versions prior to 3.11.9-6.14.1. SUSE Linux Enterprise Software Development Kit 12-SP5 pcp versions prior to 3.11.9-6.14.1. openSUSE Leap 15.1 pcp versions prior to 4.3.1-lp151.2.3.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3j3h-76gf-gffm/GHSA-3j3h-76gf-gffm.json b/advisories/unreviewed/2022/05/GHSA-3j3h-76gf-gffm/GHSA-3j3h-76gf-gffm.json index 73c1dad8682..ef2885cfdf4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j3h-76gf-gffm/GHSA-3j3h-76gf-gffm.json +++ b/advisories/unreviewed/2022/05/GHSA-3j3h-76gf-gffm/GHSA-3j3h-76gf-gffm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mv5-rjm2-qwx6/GHSA-3mv5-rjm2-qwx6.json b/advisories/unreviewed/2022/05/GHSA-3mv5-rjm2-qwx6/GHSA-3mv5-rjm2-qwx6.json index 3873e0d59ea..af289b5405c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mv5-rjm2-qwx6/GHSA-3mv5-rjm2-qwx6.json +++ b/advisories/unreviewed/2022/05/GHSA-3mv5-rjm2-qwx6/GHSA-3mv5-rjm2-qwx6.json @@ -7,12 +7,8 @@ "CVE-2019-6193" ], "details": "An information disclosure vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow unauthenticated access to some configuration files which may contain usernames, license keys, IP addresses, and encrypted password hashes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3p28-9cmp-jwr5/GHSA-3p28-9cmp-jwr5.json b/advisories/unreviewed/2022/05/GHSA-3p28-9cmp-jwr5/GHSA-3p28-9cmp-jwr5.json index 78719cb4a5c..5edb1dd9374 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p28-9cmp-jwr5/GHSA-3p28-9cmp-jwr5.json +++ b/advisories/unreviewed/2022/05/GHSA-3p28-9cmp-jwr5/GHSA-3p28-9cmp-jwr5.json @@ -7,12 +7,8 @@ "CVE-2020-9268" ], "details": "SoPlanning 1.45 is vulnerable to SQL Injection in the OrderBy clause, as demonstrated by the projets.php?order=nom_createur&by= substring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3pw8-m4pc-4r7g/GHSA-3pw8-m4pc-4r7g.json b/advisories/unreviewed/2022/05/GHSA-3pw8-m4pc-4r7g/GHSA-3pw8-m4pc-4r7g.json index 854fa25b434..620f24a2caa 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pw8-m4pc-4r7g/GHSA-3pw8-m4pc-4r7g.json +++ b/advisories/unreviewed/2022/05/GHSA-3pw8-m4pc-4r7g/GHSA-3pw8-m4pc-4r7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q29-89cr-qgvj/GHSA-3q29-89cr-qgvj.json b/advisories/unreviewed/2022/05/GHSA-3q29-89cr-qgvj/GHSA-3q29-89cr-qgvj.json index 385fad420e0..9ef98496552 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q29-89cr-qgvj/GHSA-3q29-89cr-qgvj.json +++ b/advisories/unreviewed/2022/05/GHSA-3q29-89cr-qgvj/GHSA-3q29-89cr-qgvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r3g-prmp-4m5w/GHSA-3r3g-prmp-4m5w.json b/advisories/unreviewed/2022/05/GHSA-3r3g-prmp-4m5w/GHSA-3r3g-prmp-4m5w.json index 26d9c6791b5..efb1c07b61c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r3g-prmp-4m5w/GHSA-3r3g-prmp-4m5w.json +++ b/advisories/unreviewed/2022/05/GHSA-3r3g-prmp-4m5w/GHSA-3r3g-prmp-4m5w.json @@ -7,12 +7,8 @@ "CVE-2020-5825" ], "details": "Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to an arbitrary file write vulnerability, which is a type of issue whereby an attacker is able to overwrite existing files on the resident system without proper privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r65-3cmq-g2q2/GHSA-3r65-3cmq-g2q2.json b/advisories/unreviewed/2022/05/GHSA-3r65-3cmq-g2q2/GHSA-3r65-3cmq-g2q2.json index a3d22acef5b..178ea24d207 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r65-3cmq-g2q2/GHSA-3r65-3cmq-g2q2.json +++ b/advisories/unreviewed/2022/05/GHSA-3r65-3cmq-g2q2/GHSA-3r65-3cmq-g2q2.json @@ -7,12 +7,8 @@ "CVE-2020-0757" ], "details": "An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka 'Windows SSH Elevation of Privilege Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w5f-gpqh-rrhw/GHSA-3w5f-gpqh-rrhw.json b/advisories/unreviewed/2022/05/GHSA-3w5f-gpqh-rrhw/GHSA-3w5f-gpqh-rrhw.json index 0e128fca14b..a9f828f986b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w5f-gpqh-rrhw/GHSA-3w5f-gpqh-rrhw.json +++ b/advisories/unreviewed/2022/05/GHSA-3w5f-gpqh-rrhw/GHSA-3w5f-gpqh-rrhw.json @@ -7,12 +7,8 @@ "CVE-2017-16900" ], "details": "Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3wq2-f93g-wx78/GHSA-3wq2-f93g-wx78.json b/advisories/unreviewed/2022/05/GHSA-3wq2-f93g-wx78/GHSA-3wq2-f93g-wx78.json index 0d2a1302811..1b5cf3acf1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wq2-f93g-wx78/GHSA-3wq2-f93g-wx78.json +++ b/advisories/unreviewed/2022/05/GHSA-3wq2-f93g-wx78/GHSA-3wq2-f93g-wx78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wwh-3w44-g9jf/GHSA-3wwh-3w44-g9jf.json b/advisories/unreviewed/2022/05/GHSA-3wwh-3w44-g9jf/GHSA-3wwh-3w44-g9jf.json index c76fc603813..588f482512e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wwh-3w44-g9jf/GHSA-3wwh-3w44-g9jf.json +++ b/advisories/unreviewed/2022/05/GHSA-3wwh-3w44-g9jf/GHSA-3wwh-3w44-g9jf.json @@ -7,12 +7,8 @@ "CVE-2020-3753" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-432g-39xc-whrc/GHSA-432g-39xc-whrc.json b/advisories/unreviewed/2022/05/GHSA-432g-39xc-whrc/GHSA-432g-39xc-whrc.json index 1a213bc6650..db35a72e073 100644 --- a/advisories/unreviewed/2022/05/GHSA-432g-39xc-whrc/GHSA-432g-39xc-whrc.json +++ b/advisories/unreviewed/2022/05/GHSA-432g-39xc-whrc/GHSA-432g-39xc-whrc.json @@ -7,12 +7,8 @@ "CVE-2020-7252" ], "details": "Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43jm-m89h-jc6p/GHSA-43jm-m89h-jc6p.json b/advisories/unreviewed/2022/05/GHSA-43jm-m89h-jc6p/GHSA-43jm-m89h-jc6p.json index b4bf36f6846..c64abff4c87 100644 --- a/advisories/unreviewed/2022/05/GHSA-43jm-m89h-jc6p/GHSA-43jm-m89h-jc6p.json +++ b/advisories/unreviewed/2022/05/GHSA-43jm-m89h-jc6p/GHSA-43jm-m89h-jc6p.json @@ -7,12 +7,8 @@ "CVE-2020-5823" ], "details": "Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43wf-f579-3w62/GHSA-43wf-f579-3w62.json b/advisories/unreviewed/2022/05/GHSA-43wf-f579-3w62/GHSA-43wf-f579-3w62.json index f3f54bde2cd..69d3a20616b 100644 --- a/advisories/unreviewed/2022/05/GHSA-43wf-f579-3w62/GHSA-43wf-f579-3w62.json +++ b/advisories/unreviewed/2022/05/GHSA-43wf-f579-3w62/GHSA-43wf-f579-3w62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4448-cxrj-jccx/GHSA-4448-cxrj-jccx.json b/advisories/unreviewed/2022/05/GHSA-4448-cxrj-jccx/GHSA-4448-cxrj-jccx.json index ed199df36f7..c92c415c64c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4448-cxrj-jccx/GHSA-4448-cxrj-jccx.json +++ b/advisories/unreviewed/2022/05/GHSA-4448-cxrj-jccx/GHSA-4448-cxrj-jccx.json @@ -7,12 +7,8 @@ "CVE-2019-17333" ], "details": "The Web server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows authenticated users to perform stored cross-site scripting (XSS) attacks. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.1.fixS and below, versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, and 5.9.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-446h-xh8r-vwqx/GHSA-446h-xh8r-vwqx.json b/advisories/unreviewed/2022/05/GHSA-446h-xh8r-vwqx/GHSA-446h-xh8r-vwqx.json index f6d2cd2beca..e35269163ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-446h-xh8r-vwqx/GHSA-446h-xh8r-vwqx.json +++ b/advisories/unreviewed/2022/05/GHSA-446h-xh8r-vwqx/GHSA-446h-xh8r-vwqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44c7-hc99-224f/GHSA-44c7-hc99-224f.json b/advisories/unreviewed/2022/05/GHSA-44c7-hc99-224f/GHSA-44c7-hc99-224f.json index 35303419b92..d8d996df452 100644 --- a/advisories/unreviewed/2022/05/GHSA-44c7-hc99-224f/GHSA-44c7-hc99-224f.json +++ b/advisories/unreviewed/2022/05/GHSA-44c7-hc99-224f/GHSA-44c7-hc99-224f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44rm-95c5-h9cw/GHSA-44rm-95c5-h9cw.json b/advisories/unreviewed/2022/05/GHSA-44rm-95c5-h9cw/GHSA-44rm-95c5-h9cw.json index 6e75962b9e0..84467c14971 100644 --- a/advisories/unreviewed/2022/05/GHSA-44rm-95c5-h9cw/GHSA-44rm-95c5-h9cw.json +++ b/advisories/unreviewed/2022/05/GHSA-44rm-95c5-h9cw/GHSA-44rm-95c5-h9cw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-462r-6q25-mwgw/GHSA-462r-6q25-mwgw.json b/advisories/unreviewed/2022/05/GHSA-462r-6q25-mwgw/GHSA-462r-6q25-mwgw.json index 8288ccce4b8..7f7e445a4b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-462r-6q25-mwgw/GHSA-462r-6q25-mwgw.json +++ b/advisories/unreviewed/2022/05/GHSA-462r-6q25-mwgw/GHSA-462r-6q25-mwgw.json @@ -7,12 +7,8 @@ "CVE-2020-1791" ], "details": "HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-46v5-27x8-pxv8/GHSA-46v5-27x8-pxv8.json b/advisories/unreviewed/2022/05/GHSA-46v5-27x8-pxv8/GHSA-46v5-27x8-pxv8.json index 3e2d22c80e8..ffbe422f59c 100644 --- a/advisories/unreviewed/2022/05/GHSA-46v5-27x8-pxv8/GHSA-46v5-27x8-pxv8.json +++ b/advisories/unreviewed/2022/05/GHSA-46v5-27x8-pxv8/GHSA-46v5-27x8-pxv8.json @@ -7,12 +7,8 @@ "CVE-2020-8854" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of JPEG files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9606.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46v6-rwf6-m6p5/GHSA-46v6-rwf6-m6p5.json b/advisories/unreviewed/2022/05/GHSA-46v6-rwf6-m6p5/GHSA-46v6-rwf6-m6p5.json index b86bab68e2f..533e89e46e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-46v6-rwf6-m6p5/GHSA-46v6-rwf6-m6p5.json +++ b/advisories/unreviewed/2022/05/GHSA-46v6-rwf6-m6p5/GHSA-46v6-rwf6-m6p5.json @@ -7,12 +7,8 @@ "CVE-2019-19987" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An attacker can exploit the vulnerability to abuse functionalities such as change password, add user, add privilege, and so on.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-47fx-mr2m-65rq/GHSA-47fx-mr2m-65rq.json b/advisories/unreviewed/2022/05/GHSA-47fx-mr2m-65rq/GHSA-47fx-mr2m-65rq.json index bcf19f92d48..4ea06de86a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-47fx-mr2m-65rq/GHSA-47fx-mr2m-65rq.json +++ b/advisories/unreviewed/2022/05/GHSA-47fx-mr2m-65rq/GHSA-47fx-mr2m-65rq.json @@ -7,12 +7,8 @@ "CVE-2020-5534" ], "details": "Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48m2-x37h-9f4w/GHSA-48m2-x37h-9f4w.json b/advisories/unreviewed/2022/05/GHSA-48m2-x37h-9f4w/GHSA-48m2-x37h-9f4w.json index db8bbcd8882..de4fe74bc07 100644 --- a/advisories/unreviewed/2022/05/GHSA-48m2-x37h-9f4w/GHSA-48m2-x37h-9f4w.json +++ b/advisories/unreviewed/2022/05/GHSA-48m2-x37h-9f4w/GHSA-48m2-x37h-9f4w.json @@ -7,12 +7,8 @@ "CVE-2019-19993" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48x3-vgp6-cxw2/GHSA-48x3-vgp6-cxw2.json b/advisories/unreviewed/2022/05/GHSA-48x3-vgp6-cxw2/GHSA-48x3-vgp6-cxw2.json index 6c0b1ceb0a1..809f5985b85 100644 --- a/advisories/unreviewed/2022/05/GHSA-48x3-vgp6-cxw2/GHSA-48x3-vgp6-cxw2.json +++ b/advisories/unreviewed/2022/05/GHSA-48x3-vgp6-cxw2/GHSA-48x3-vgp6-cxw2.json @@ -7,12 +7,8 @@ "CVE-2020-5524" ], "details": "Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48xc-xhjj-x9r7/GHSA-48xc-xhjj-x9r7.json b/advisories/unreviewed/2022/05/GHSA-48xc-xhjj-x9r7/GHSA-48xc-xhjj-x9r7.json index 7663d808870..e942eaa794c 100644 --- a/advisories/unreviewed/2022/05/GHSA-48xc-xhjj-x9r7/GHSA-48xc-xhjj-x9r7.json +++ b/advisories/unreviewed/2022/05/GHSA-48xc-xhjj-x9r7/GHSA-48xc-xhjj-x9r7.json @@ -7,12 +7,8 @@ "CVE-2019-13966" ], "details": "In iTop through 2.6.0, an XSS payload can be delivered in certain fields (such as icon) of the XML file used to build the dashboard. This is similar to CVE-2015-6544 (which is only about the dashboard title).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4969-q73g-ghxm/GHSA-4969-q73g-ghxm.json b/advisories/unreviewed/2022/05/GHSA-4969-q73g-ghxm/GHSA-4969-q73g-ghxm.json index ded23c4c0de..49d42bb7362 100644 --- a/advisories/unreviewed/2022/05/GHSA-4969-q73g-ghxm/GHSA-4969-q73g-ghxm.json +++ b/advisories/unreviewed/2022/05/GHSA-4969-q73g-ghxm/GHSA-4969-q73g-ghxm.json @@ -7,12 +7,8 @@ "CVE-2019-13965" ], "details": "Because of a lack of sanitization around error messages, multiple Reflective XSS issues exist in iTop through 2.6.0 via the param_file parameter to webservices/export.php, webservices/cron.php, or env-production/itop-backup/backup.php. By default, any XSS sent to the administrator can be transformed to remote command execution because of CVE-2018-10642 (still working through 2.6.0) The Reflective XSS can also become a stored XSS within the same account because of another vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4c4v-jcwm-2qpx/GHSA-4c4v-jcwm-2qpx.json b/advisories/unreviewed/2022/05/GHSA-4c4v-jcwm-2qpx/GHSA-4c4v-jcwm-2qpx.json index eab2c9d3b74..c76f32d3564 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c4v-jcwm-2qpx/GHSA-4c4v-jcwm-2qpx.json +++ b/advisories/unreviewed/2022/05/GHSA-4c4v-jcwm-2qpx/GHSA-4c4v-jcwm-2qpx.json @@ -7,12 +7,8 @@ "CVE-2019-19371" ], "details": "A cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attacker to conduct a reflected cross-site scripting (XSS) attack due to insufficient validation in the join meeting interface. A successful exploit could allow an attacker to execute arbitrary scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cr9-4w76-xfjw/GHSA-4cr9-4w76-xfjw.json b/advisories/unreviewed/2022/05/GHSA-4cr9-4w76-xfjw/GHSA-4cr9-4w76-xfjw.json index 33de5bbe37f..ce17d1b8261 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cr9-4w76-xfjw/GHSA-4cr9-4w76-xfjw.json +++ b/advisories/unreviewed/2022/05/GHSA-4cr9-4w76-xfjw/GHSA-4cr9-4w76-xfjw.json @@ -7,12 +7,8 @@ "CVE-2019-16302" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event types: HOST_MOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4crh-825x-hjw2/GHSA-4crh-825x-hjw2.json b/advisories/unreviewed/2022/05/GHSA-4crh-825x-hjw2/GHSA-4crh-825x-hjw2.json index 47a626a26da..3011863ea7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4crh-825x-hjw2/GHSA-4crh-825x-hjw2.json +++ b/advisories/unreviewed/2022/05/GHSA-4crh-825x-hjw2/GHSA-4crh-825x-hjw2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4h2c-q38x-3cmx/GHSA-4h2c-q38x-3cmx.json b/advisories/unreviewed/2022/05/GHSA-4h2c-q38x-3cmx/GHSA-4h2c-q38x-3cmx.json index e1c4cb40e90..a3df0a25089 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h2c-q38x-3cmx/GHSA-4h2c-q38x-3cmx.json +++ b/advisories/unreviewed/2022/05/GHSA-4h2c-q38x-3cmx/GHSA-4h2c-q38x-3cmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jr7-rvm2-mwgx/GHSA-4jr7-rvm2-mwgx.json b/advisories/unreviewed/2022/05/GHSA-4jr7-rvm2-mwgx/GHSA-4jr7-rvm2-mwgx.json index dc4f5eb752e..e5704800417 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jr7-rvm2-mwgx/GHSA-4jr7-rvm2-mwgx.json +++ b/advisories/unreviewed/2022/05/GHSA-4jr7-rvm2-mwgx/GHSA-4jr7-rvm2-mwgx.json @@ -7,12 +7,8 @@ "CVE-2020-0738" ], "details": "A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4p9q-r6vf-q2pr/GHSA-4p9q-r6vf-q2pr.json b/advisories/unreviewed/2022/05/GHSA-4p9q-r6vf-q2pr/GHSA-4p9q-r6vf-q2pr.json index 2f70a938549..82605247c9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p9q-r6vf-q2pr/GHSA-4p9q-r6vf-q2pr.json +++ b/advisories/unreviewed/2022/05/GHSA-4p9q-r6vf-q2pr/GHSA-4p9q-r6vf-q2pr.json @@ -7,12 +7,8 @@ "CVE-2020-7209" ], "details": "LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4q95-v5vg-fjc2/GHSA-4q95-v5vg-fjc2.json b/advisories/unreviewed/2022/05/GHSA-4q95-v5vg-fjc2/GHSA-4q95-v5vg-fjc2.json index c68e76870ee..e9bcc8eb4a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q95-v5vg-fjc2/GHSA-4q95-v5vg-fjc2.json +++ b/advisories/unreviewed/2022/05/GHSA-4q95-v5vg-fjc2/GHSA-4q95-v5vg-fjc2.json @@ -7,12 +7,8 @@ "CVE-2020-9267" ], "details": "SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary user creation via process/xajax_server.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qrf-c84f-cqrh/GHSA-4qrf-c84f-cqrh.json b/advisories/unreviewed/2022/05/GHSA-4qrf-c84f-cqrh/GHSA-4qrf-c84f-cqrh.json index 33d2ce2e80d..2391d454a14 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qrf-c84f-cqrh/GHSA-4qrf-c84f-cqrh.json +++ b/advisories/unreviewed/2022/05/GHSA-4qrf-c84f-cqrh/GHSA-4qrf-c84f-cqrh.json @@ -7,12 +7,8 @@ "CVE-2020-5828" ], "details": "Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r96-hw22-hhc7/GHSA-4r96-hw22-hhc7.json b/advisories/unreviewed/2022/05/GHSA-4r96-hw22-hhc7/GHSA-4r96-hw22-hhc7.json index e3da98fe967..acf71db8e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r96-hw22-hhc7/GHSA-4r96-hw22-hhc7.json +++ b/advisories/unreviewed/2022/05/GHSA-4r96-hw22-hhc7/GHSA-4r96-hw22-hhc7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4vj8-gm22-w794/GHSA-4vj8-gm22-w794.json b/advisories/unreviewed/2022/05/GHSA-4vj8-gm22-w794/GHSA-4vj8-gm22-w794.json index 6e93fd3a2b4..41190cfb933 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vj8-gm22-w794/GHSA-4vj8-gm22-w794.json +++ b/advisories/unreviewed/2022/05/GHSA-4vj8-gm22-w794/GHSA-4vj8-gm22-w794.json @@ -7,12 +7,8 @@ "CVE-2020-9393" ], "details": "An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wxj-r835-5f6x/GHSA-4wxj-r835-5f6x.json b/advisories/unreviewed/2022/05/GHSA-4wxj-r835-5f6x/GHSA-4wxj-r835-5f6x.json index 2c3d10f2cf2..167056b983b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wxj-r835-5f6x/GHSA-4wxj-r835-5f6x.json +++ b/advisories/unreviewed/2022/05/GHSA-4wxj-r835-5f6x/GHSA-4wxj-r835-5f6x.json @@ -7,12 +7,8 @@ "CVE-2020-8891" ], "details": "An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xf3-wpm7-j6c9/GHSA-4xf3-wpm7-j6c9.json b/advisories/unreviewed/2022/05/GHSA-4xf3-wpm7-j6c9/GHSA-4xf3-wpm7-j6c9.json index a61ccb21e73..10b04809e7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xf3-wpm7-j6c9/GHSA-4xf3-wpm7-j6c9.json +++ b/advisories/unreviewed/2022/05/GHSA-4xf3-wpm7-j6c9/GHSA-4xf3-wpm7-j6c9.json @@ -7,12 +7,8 @@ "CVE-2020-0754" ], "details": "An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0753.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-536j-cvcw-6cqq/GHSA-536j-cvcw-6cqq.json b/advisories/unreviewed/2022/05/GHSA-536j-cvcw-6cqq/GHSA-536j-cvcw-6cqq.json index 9cddd3761a9..728a59764cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-536j-cvcw-6cqq/GHSA-536j-cvcw-6cqq.json +++ b/advisories/unreviewed/2022/05/GHSA-536j-cvcw-6cqq/GHSA-536j-cvcw-6cqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53cp-g76q-98c6/GHSA-53cp-g76q-98c6.json b/advisories/unreviewed/2022/05/GHSA-53cp-g76q-98c6/GHSA-53cp-g76q-98c6.json index b854dc48e77..38d5c6ac80e 100644 --- a/advisories/unreviewed/2022/05/GHSA-53cp-g76q-98c6/GHSA-53cp-g76q-98c6.json +++ b/advisories/unreviewed/2022/05/GHSA-53cp-g76q-98c6/GHSA-53cp-g76q-98c6.json @@ -7,12 +7,8 @@ "CVE-2019-19452" ], "details": "A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers (including low integrity processes) can exploit this to gain NT AUTHORITY\\SYSTEM privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53j5-53wj-w2fg/GHSA-53j5-53wj-w2fg.json b/advisories/unreviewed/2022/05/GHSA-53j5-53wj-w2fg/GHSA-53j5-53wj-w2fg.json index d50bd2c0d9e..8f0376adf19 100644 --- a/advisories/unreviewed/2022/05/GHSA-53j5-53wj-w2fg/GHSA-53j5-53wj-w2fg.json +++ b/advisories/unreviewed/2022/05/GHSA-53j5-53wj-w2fg/GHSA-53j5-53wj-w2fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54cq-p5rp-9fcp/GHSA-54cq-p5rp-9fcp.json b/advisories/unreviewed/2022/05/GHSA-54cq-p5rp-9fcp/GHSA-54cq-p5rp-9fcp.json index c73e51d0bb5..158e419a597 100644 --- a/advisories/unreviewed/2022/05/GHSA-54cq-p5rp-9fcp/GHSA-54cq-p5rp-9fcp.json +++ b/advisories/unreviewed/2022/05/GHSA-54cq-p5rp-9fcp/GHSA-54cq-p5rp-9fcp.json @@ -7,12 +7,8 @@ "CVE-2020-8857" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of form Annotation objects within AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9862.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54r5-wg44-vhhq/GHSA-54r5-wg44-vhhq.json b/advisories/unreviewed/2022/05/GHSA-54r5-wg44-vhhq/GHSA-54r5-wg44-vhhq.json index 0aa539f8117..c2308fb3840 100644 --- a/advisories/unreviewed/2022/05/GHSA-54r5-wg44-vhhq/GHSA-54r5-wg44-vhhq.json +++ b/advisories/unreviewed/2022/05/GHSA-54r5-wg44-vhhq/GHSA-54r5-wg44-vhhq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54w5-fqwp-fvm2/GHSA-54w5-fqwp-fvm2.json b/advisories/unreviewed/2022/05/GHSA-54w5-fqwp-fvm2/GHSA-54w5-fqwp-fvm2.json index 96b71e85855..68cac16b2cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-54w5-fqwp-fvm2/GHSA-54w5-fqwp-fvm2.json +++ b/advisories/unreviewed/2022/05/GHSA-54w5-fqwp-fvm2/GHSA-54w5-fqwp-fvm2.json @@ -7,12 +7,8 @@ "CVE-2020-5326" ], "details": "Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-555v-24ph-xqcc/GHSA-555v-24ph-xqcc.json b/advisories/unreviewed/2022/05/GHSA-555v-24ph-xqcc/GHSA-555v-24ph-xqcc.json index 539366a025e..342231eb25e 100644 --- a/advisories/unreviewed/2022/05/GHSA-555v-24ph-xqcc/GHSA-555v-24ph-xqcc.json +++ b/advisories/unreviewed/2022/05/GHSA-555v-24ph-xqcc/GHSA-555v-24ph-xqcc.json @@ -7,12 +7,8 @@ "CVE-2020-3154" ], "details": "A vulnerability in the web UI of Cisco Cloud Web Security (CWS) could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this vulnerability sending malicious requests to the affected device. An exploit could allow the attacker to modify values on or return values from the underlying database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-568g-vvx2-2rr3/GHSA-568g-vvx2-2rr3.json b/advisories/unreviewed/2022/05/GHSA-568g-vvx2-2rr3/GHSA-568g-vvx2-2rr3.json index ebc03038f1e..b987c234db1 100644 --- a/advisories/unreviewed/2022/05/GHSA-568g-vvx2-2rr3/GHSA-568g-vvx2-2rr3.json +++ b/advisories/unreviewed/2022/05/GHSA-568g-vvx2-2rr3/GHSA-568g-vvx2-2rr3.json @@ -7,12 +7,8 @@ "CVE-2020-3765" ], "details": "Adobe After Effects versions 16.1.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56jq-wf2p-g55v/GHSA-56jq-wf2p-g55v.json b/advisories/unreviewed/2022/05/GHSA-56jq-wf2p-g55v/GHSA-56jq-wf2p-g55v.json index c65ee71aa70..07710d88c84 100644 --- a/advisories/unreviewed/2022/05/GHSA-56jq-wf2p-g55v/GHSA-56jq-wf2p-g55v.json +++ b/advisories/unreviewed/2022/05/GHSA-56jq-wf2p-g55v/GHSA-56jq-wf2p-g55v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56mw-mj26-xm7x/GHSA-56mw-mj26-xm7x.json b/advisories/unreviewed/2022/05/GHSA-56mw-mj26-xm7x/GHSA-56mw-mj26-xm7x.json index 9778913e196..b7354f5ebce 100644 --- a/advisories/unreviewed/2022/05/GHSA-56mw-mj26-xm7x/GHSA-56mw-mj26-xm7x.json +++ b/advisories/unreviewed/2022/05/GHSA-56mw-mj26-xm7x/GHSA-56mw-mj26-xm7x.json @@ -7,12 +7,8 @@ "CVE-2020-3751" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58g2-q7jf-hhpw/GHSA-58g2-q7jf-hhpw.json b/advisories/unreviewed/2022/05/GHSA-58g2-q7jf-hhpw/GHSA-58g2-q7jf-hhpw.json index 3dc181789b1..e043d91f1e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-58g2-q7jf-hhpw/GHSA-58g2-q7jf-hhpw.json +++ b/advisories/unreviewed/2022/05/GHSA-58g2-q7jf-hhpw/GHSA-58g2-q7jf-hhpw.json @@ -7,12 +7,8 @@ "CVE-2019-4429" ], "details": "IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162886.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58mq-67r3-jpgf/GHSA-58mq-67r3-jpgf.json b/advisories/unreviewed/2022/05/GHSA-58mq-67r3-jpgf/GHSA-58mq-67r3-jpgf.json index af0436eb86d..5c79f37d863 100644 --- a/advisories/unreviewed/2022/05/GHSA-58mq-67r3-jpgf/GHSA-58mq-67r3-jpgf.json +++ b/advisories/unreviewed/2022/05/GHSA-58mq-67r3-jpgf/GHSA-58mq-67r3-jpgf.json @@ -7,12 +7,8 @@ "CVE-2020-8997" ], "details": "Abbott FreeStyle Libre 14-day before February 2020 and FreeStyle Libre 2 before February 2020 allow remote attackers to enable write access via a specific NFC unlock command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5ch4-c735-4f8x/GHSA-5ch4-c735-4f8x.json b/advisories/unreviewed/2022/05/GHSA-5ch4-c735-4f8x/GHSA-5ch4-c735-4f8x.json index 0101cb99309..cb456a42a3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ch4-c735-4f8x/GHSA-5ch4-c735-4f8x.json +++ b/advisories/unreviewed/2022/05/GHSA-5ch4-c735-4f8x/GHSA-5ch4-c735-4f8x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f97-p8qf-7px9/GHSA-5f97-p8qf-7px9.json b/advisories/unreviewed/2022/05/GHSA-5f97-p8qf-7px9/GHSA-5f97-p8qf-7px9.json index 34a5817cba3..1394aae23e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f97-p8qf-7px9/GHSA-5f97-p8qf-7px9.json +++ b/advisories/unreviewed/2022/05/GHSA-5f97-p8qf-7px9/GHSA-5f97-p8qf-7px9.json @@ -7,12 +7,8 @@ "CVE-2020-6188" ], "details": "VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5fj4-62hp-5pfc/GHSA-5fj4-62hp-5pfc.json b/advisories/unreviewed/2022/05/GHSA-5fj4-62hp-5pfc/GHSA-5fj4-62hp-5pfc.json index bb38b839d8c..0ea47b4cf28 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fj4-62hp-5pfc/GHSA-5fj4-62hp-5pfc.json +++ b/advisories/unreviewed/2022/05/GHSA-5fj4-62hp-5pfc/GHSA-5fj4-62hp-5pfc.json @@ -7,12 +7,8 @@ "CVE-2019-11867" ], "details": "Realtek NDIS driver rt640x64.sys, file version 10.1.505.2015, fails to do any size checking on an input buffer from user space, which the driver assumes has a size greater than zero bytes. To exploit this vulnerability, an attacker must send an IRP with a system buffer size of 0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j2v-4h3v-gg93/GHSA-5j2v-4h3v-gg93.json b/advisories/unreviewed/2022/05/GHSA-5j2v-4h3v-gg93/GHSA-5j2v-4h3v-gg93.json index e7e4c9633cf..8b3b7065628 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j2v-4h3v-gg93/GHSA-5j2v-4h3v-gg93.json +++ b/advisories/unreviewed/2022/05/GHSA-5j2v-4h3v-gg93/GHSA-5j2v-4h3v-gg93.json @@ -7,12 +7,8 @@ "CVE-2015-7507" ], "details": "libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a crafted color table to the (1) bmp_decode_rgb or (2) bmp_decode_rle function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jxq-g8ww-8q6w/GHSA-5jxq-g8ww-8q6w.json b/advisories/unreviewed/2022/05/GHSA-5jxq-g8ww-8q6w/GHSA-5jxq-g8ww-8q6w.json index 6018e00dd98..2cd54d19365 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jxq-g8ww-8q6w/GHSA-5jxq-g8ww-8q6w.json +++ b/advisories/unreviewed/2022/05/GHSA-5jxq-g8ww-8q6w/GHSA-5jxq-g8ww-8q6w.json @@ -7,12 +7,8 @@ "CVE-2020-4204" ], "details": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges. IBM X-Force ID: 174960.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m62-v4v4-45h6/GHSA-5m62-v4v4-45h6.json b/advisories/unreviewed/2022/05/GHSA-5m62-v4v4-45h6/GHSA-5m62-v4v4-45h6.json index b0b8ba9720d..43920f1ae6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m62-v4v4-45h6/GHSA-5m62-v4v4-45h6.json +++ b/advisories/unreviewed/2022/05/GHSA-5m62-v4v4-45h6/GHSA-5m62-v4v4-45h6.json @@ -7,12 +7,8 @@ "CVE-2020-1790" ], "details": "GaussDB 200 with version of 6.5.1 have a command injection vulnerability. The software constructs part of a command using external input from users, but the software does not sufficiently validate the user input. Successful exploit could allow the attacker to inject certain commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pqq-xg2c-5rm6/GHSA-5pqq-xg2c-5rm6.json b/advisories/unreviewed/2022/05/GHSA-5pqq-xg2c-5rm6/GHSA-5pqq-xg2c-5rm6.json index 3d31d9903de..bce073db9fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pqq-xg2c-5rm6/GHSA-5pqq-xg2c-5rm6.json +++ b/advisories/unreviewed/2022/05/GHSA-5pqq-xg2c-5rm6/GHSA-5pqq-xg2c-5rm6.json @@ -7,12 +7,8 @@ "CVE-2020-6970" ], "details": "A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5q32-25m8-9487/GHSA-5q32-25m8-9487.json b/advisories/unreviewed/2022/05/GHSA-5q32-25m8-9487/GHSA-5q32-25m8-9487.json index 5ee3c84bf54..728d569538c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q32-25m8-9487/GHSA-5q32-25m8-9487.json +++ b/advisories/unreviewed/2022/05/GHSA-5q32-25m8-9487/GHSA-5q32-25m8-9487.json @@ -7,12 +7,8 @@ "CVE-2020-9033" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to authlog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qr7-8ch4-q94w/GHSA-5qr7-8ch4-q94w.json b/advisories/unreviewed/2022/05/GHSA-5qr7-8ch4-q94w/GHSA-5qr7-8ch4-q94w.json index 3278379eb26..00c94902034 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qr7-8ch4-q94w/GHSA-5qr7-8ch4-q94w.json +++ b/advisories/unreviewed/2022/05/GHSA-5qr7-8ch4-q94w/GHSA-5qr7-8ch4-q94w.json @@ -7,12 +7,8 @@ "CVE-2020-7251" ], "details": "Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5r3x-vm4v-f628/GHSA-5r3x-vm4v-f628.json b/advisories/unreviewed/2022/05/GHSA-5r3x-vm4v-f628/GHSA-5r3x-vm4v-f628.json index 66c5bf30447..7d8f3e59724 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r3x-vm4v-f628/GHSA-5r3x-vm4v-f628.json +++ b/advisories/unreviewed/2022/05/GHSA-5r3x-vm4v-f628/GHSA-5r3x-vm4v-f628.json @@ -7,12 +7,8 @@ "CVE-2020-6395" ], "details": "Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v2v-rv23-5w86/GHSA-5v2v-rv23-5w86.json b/advisories/unreviewed/2022/05/GHSA-5v2v-rv23-5w86/GHSA-5v2v-rv23-5w86.json index cf569632200..7e2a1cafca9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v2v-rv23-5w86/GHSA-5v2v-rv23-5w86.json +++ b/advisories/unreviewed/2022/05/GHSA-5v2v-rv23-5w86/GHSA-5v2v-rv23-5w86.json @@ -7,12 +7,8 @@ "CVE-2020-3735" ], "details": "Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5whr-rqf9-f363/GHSA-5whr-rqf9-f363.json b/advisories/unreviewed/2022/05/GHSA-5whr-rqf9-f363/GHSA-5whr-rqf9-f363.json index bf9297c0326..99cb7363380 100644 --- a/advisories/unreviewed/2022/05/GHSA-5whr-rqf9-f363/GHSA-5whr-rqf9-f363.json +++ b/advisories/unreviewed/2022/05/GHSA-5whr-rqf9-f363/GHSA-5whr-rqf9-f363.json @@ -7,12 +7,8 @@ "CVE-2020-3722" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x22-w79m-34gq/GHSA-5x22-w79m-34gq.json b/advisories/unreviewed/2022/05/GHSA-5x22-w79m-34gq/GHSA-5x22-w79m-34gq.json index 0b9529a4a22..bfbec6976de 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x22-w79m-34gq/GHSA-5x22-w79m-34gq.json +++ b/advisories/unreviewed/2022/05/GHSA-5x22-w79m-34gq/GHSA-5x22-w79m-34gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xj6-qf3f-5qcj/GHSA-5xj6-qf3f-5qcj.json b/advisories/unreviewed/2022/05/GHSA-5xj6-qf3f-5qcj/GHSA-5xj6-qf3f-5qcj.json index 12038446e11..1ad221ac950 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xj6-qf3f-5qcj/GHSA-5xj6-qf3f-5qcj.json +++ b/advisories/unreviewed/2022/05/GHSA-5xj6-qf3f-5qcj/GHSA-5xj6-qf3f-5qcj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6267-49mh-p6x2/GHSA-6267-49mh-p6x2.json b/advisories/unreviewed/2022/05/GHSA-6267-49mh-p6x2/GHSA-6267-49mh-p6x2.json index db4dde8a920..8934a084f42 100644 --- a/advisories/unreviewed/2022/05/GHSA-6267-49mh-p6x2/GHSA-6267-49mh-p6x2.json +++ b/advisories/unreviewed/2022/05/GHSA-6267-49mh-p6x2/GHSA-6267-49mh-p6x2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6336-8g34-24q8/GHSA-6336-8g34-24q8.json b/advisories/unreviewed/2022/05/GHSA-6336-8g34-24q8/GHSA-6336-8g34-24q8.json index 97bb60d2560..8a23d6c7e1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6336-8g34-24q8/GHSA-6336-8g34-24q8.json +++ b/advisories/unreviewed/2022/05/GHSA-6336-8g34-24q8/GHSA-6336-8g34-24q8.json @@ -7,12 +7,8 @@ "CVE-2020-0745" ], "details": "An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0792.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63gj-7hwv-5q69/GHSA-63gj-7hwv-5q69.json b/advisories/unreviewed/2022/05/GHSA-63gj-7hwv-5q69/GHSA-63gj-7hwv-5q69.json index 1b5ddd7f9f0..094263f5eb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-63gj-7hwv-5q69/GHSA-63gj-7hwv-5q69.json +++ b/advisories/unreviewed/2022/05/GHSA-63gj-7hwv-5q69/GHSA-63gj-7hwv-5q69.json @@ -7,12 +7,8 @@ "CVE-2020-8768" ], "details": "An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-64hg-wgfm-6c25/GHSA-64hg-wgfm-6c25.json b/advisories/unreviewed/2022/05/GHSA-64hg-wgfm-6c25/GHSA-64hg-wgfm-6c25.json index ec93229d655..6e218ae52c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-64hg-wgfm-6c25/GHSA-64hg-wgfm-6c25.json +++ b/advisories/unreviewed/2022/05/GHSA-64hg-wgfm-6c25/GHSA-64hg-wgfm-6c25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66px-g893-98mj/GHSA-66px-g893-98mj.json b/advisories/unreviewed/2022/05/GHSA-66px-g893-98mj/GHSA-66px-g893-98mj.json index b0915df9186..7ffea6839c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-66px-g893-98mj/GHSA-66px-g893-98mj.json +++ b/advisories/unreviewed/2022/05/GHSA-66px-g893-98mj/GHSA-66px-g893-98mj.json @@ -7,12 +7,8 @@ "CVE-2020-9545" ], "details": "Pale Moon 28.8.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66r9-jcx4-7f35/GHSA-66r9-jcx4-7f35.json b/advisories/unreviewed/2022/05/GHSA-66r9-jcx4-7f35/GHSA-66r9-jcx4-7f35.json index d2776a97cca..9169ea3e00a 100644 --- a/advisories/unreviewed/2022/05/GHSA-66r9-jcx4-7f35/GHSA-66r9-jcx4-7f35.json +++ b/advisories/unreviewed/2022/05/GHSA-66r9-jcx4-7f35/GHSA-66r9-jcx4-7f35.json @@ -7,12 +7,8 @@ "CVE-2019-18183" ], "details": "pacman before 5.2 is vulnerable to arbitrary command injection in lib/libalpm/sync.c in the apply_deltas() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable the non-default delta feature and retrieve an attacker-controlled crafted database and delta file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6727-mj2x-7w6w/GHSA-6727-mj2x-7w6w.json b/advisories/unreviewed/2022/05/GHSA-6727-mj2x-7w6w/GHSA-6727-mj2x-7w6w.json index 37b71392096..3c07a2bc9a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-6727-mj2x-7w6w/GHSA-6727-mj2x-7w6w.json +++ b/advisories/unreviewed/2022/05/GHSA-6727-mj2x-7w6w/GHSA-6727-mj2x-7w6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-676m-3h9r-639c/GHSA-676m-3h9r-639c.json b/advisories/unreviewed/2022/05/GHSA-676m-3h9r-639c/GHSA-676m-3h9r-639c.json index ce055faf137..d35d998956b 100644 --- a/advisories/unreviewed/2022/05/GHSA-676m-3h9r-639c/GHSA-676m-3h9r-639c.json +++ b/advisories/unreviewed/2022/05/GHSA-676m-3h9r-639c/GHSA-676m-3h9r-639c.json @@ -7,12 +7,8 @@ "CVE-2020-0753" ], "details": "An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-678h-c4mf-x2hm/GHSA-678h-c4mf-x2hm.json b/advisories/unreviewed/2022/05/GHSA-678h-c4mf-x2hm/GHSA-678h-c4mf-x2hm.json index f8406c54597..a646c7db157 100644 --- a/advisories/unreviewed/2022/05/GHSA-678h-c4mf-x2hm/GHSA-678h-c4mf-x2hm.json +++ b/advisories/unreviewed/2022/05/GHSA-678h-c4mf-x2hm/GHSA-678h-c4mf-x2hm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-683p-wqpr-jwpc/GHSA-683p-wqpr-jwpc.json b/advisories/unreviewed/2022/05/GHSA-683p-wqpr-jwpc/GHSA-683p-wqpr-jwpc.json index 8761970961f..7bdb68c5b64 100644 --- a/advisories/unreviewed/2022/05/GHSA-683p-wqpr-jwpc/GHSA-683p-wqpr-jwpc.json +++ b/advisories/unreviewed/2022/05/GHSA-683p-wqpr-jwpc/GHSA-683p-wqpr-jwpc.json @@ -7,12 +7,8 @@ "CVE-2020-9270" ], "details": "ICE Hrm 26.2.0 is vulnerable to CSRF that leads to password reset via service.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68jq-f8j4-qrjp/GHSA-68jq-f8j4-qrjp.json b/advisories/unreviewed/2022/05/GHSA-68jq-f8j4-qrjp/GHSA-68jq-f8j4-qrjp.json index 96cbd8c614b..22496b91a72 100644 --- a/advisories/unreviewed/2022/05/GHSA-68jq-f8j4-qrjp/GHSA-68jq-f8j4-qrjp.json +++ b/advisories/unreviewed/2022/05/GHSA-68jq-f8j4-qrjp/GHSA-68jq-f8j4-qrjp.json @@ -7,12 +7,8 @@ "CVE-2019-18863" ], "details": "A key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900 SIP series phones, versions 5.1.0.2051 SP2 and earlier, could allow an attacker to launch a man-in-the-middle attack when SRTP is used in a call. A successful exploit may allow the attacker to intercept sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69hc-w7p9-9v7x/GHSA-69hc-w7p9-9v7x.json b/advisories/unreviewed/2022/05/GHSA-69hc-w7p9-9v7x/GHSA-69hc-w7p9-9v7x.json index e4ec31dc5dc..6c5848aa843 100644 --- a/advisories/unreviewed/2022/05/GHSA-69hc-w7p9-9v7x/GHSA-69hc-w7p9-9v7x.json +++ b/advisories/unreviewed/2022/05/GHSA-69hc-w7p9-9v7x/GHSA-69hc-w7p9-9v7x.json @@ -7,12 +7,8 @@ "CVE-2020-3943" ], "details": "vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) uses a JMX RMI service which is not securely configured. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to execute arbitrary code in vRealize Operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c5r-p4fm-m785/GHSA-6c5r-p4fm-m785.json b/advisories/unreviewed/2022/05/GHSA-6c5r-p4fm-m785/GHSA-6c5r-p4fm-m785.json index 05385100942..5069d75c139 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c5r-p4fm-m785/GHSA-6c5r-p4fm-m785.json +++ b/advisories/unreviewed/2022/05/GHSA-6c5r-p4fm-m785/GHSA-6c5r-p4fm-m785.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6frc-m84r-4j3r/GHSA-6frc-m84r-4j3r.json b/advisories/unreviewed/2022/05/GHSA-6frc-m84r-4j3r/GHSA-6frc-m84r-4j3r.json index 47ca42bd684..a2736fa7191 100644 --- a/advisories/unreviewed/2022/05/GHSA-6frc-m84r-4j3r/GHSA-6frc-m84r-4j3r.json +++ b/advisories/unreviewed/2022/05/GHSA-6frc-m84r-4j3r/GHSA-6frc-m84r-4j3r.json @@ -7,12 +7,8 @@ "CVE-2020-3112" ], "details": "A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this vulnerability by authenticating with a low-privilege account and sending a crafted request to the API. A successful exploit could allow the attacker to interact with the API with administrative privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6hjj-8mx7-m633/GHSA-6hjj-8mx7-m633.json b/advisories/unreviewed/2022/05/GHSA-6hjj-8mx7-m633/GHSA-6hjj-8mx7-m633.json index 020c494e37e..0d988da8dae 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hjj-8mx7-m633/GHSA-6hjj-8mx7-m633.json +++ b/advisories/unreviewed/2022/05/GHSA-6hjj-8mx7-m633/GHSA-6hjj-8mx7-m633.json @@ -7,12 +7,8 @@ "CVE-2019-19758" ], "details": "A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6hxp-m66g-3m84/GHSA-6hxp-m66g-3m84.json b/advisories/unreviewed/2022/05/GHSA-6hxp-m66g-3m84/GHSA-6hxp-m66g-3m84.json index 5a87b905121..7e600c75a41 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hxp-m66g-3m84/GHSA-6hxp-m66g-3m84.json +++ b/advisories/unreviewed/2022/05/GHSA-6hxp-m66g-3m84/GHSA-6hxp-m66g-3m84.json @@ -7,12 +7,8 @@ "CVE-2020-0747" ], "details": "An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0659.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jrf-2v62-hpgg/GHSA-6jrf-2v62-hpgg.json b/advisories/unreviewed/2022/05/GHSA-6jrf-2v62-hpgg/GHSA-6jrf-2v62-hpgg.json index 0a361867200..e77a25b2511 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jrf-2v62-hpgg/GHSA-6jrf-2v62-hpgg.json +++ b/advisories/unreviewed/2022/05/GHSA-6jrf-2v62-hpgg/GHSA-6jrf-2v62-hpgg.json @@ -7,12 +7,8 @@ "CVE-2020-1828" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m79-m28g-39mr/GHSA-6m79-m28g-39mr.json b/advisories/unreviewed/2022/05/GHSA-6m79-m28g-39mr/GHSA-6m79-m28g-39mr.json index dff318fbc88..9620d5b5ed4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m79-m28g-39mr/GHSA-6m79-m28g-39mr.json +++ b/advisories/unreviewed/2022/05/GHSA-6m79-m28g-39mr/GHSA-6m79-m28g-39mr.json @@ -7,12 +7,8 @@ "CVE-2019-3670" ], "details": "Remote Code Execution vulnerability in the web interface in McAfee Web Advisor (WA) 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p3x-3gq4-7jfv/GHSA-6p3x-3gq4-7jfv.json b/advisories/unreviewed/2022/05/GHSA-6p3x-3gq4-7jfv/GHSA-6p3x-3gq4-7jfv.json index 4259d6fd396..cce0aa52c55 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p3x-3gq4-7jfv/GHSA-6p3x-3gq4-7jfv.json +++ b/advisories/unreviewed/2022/05/GHSA-6p3x-3gq4-7jfv/GHSA-6p3x-3gq4-7jfv.json @@ -7,12 +7,8 @@ "CVE-2020-0725" ], "details": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0726, CVE-2020-0731.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6ph5-9c4g-3958/GHSA-6ph5-9c4g-3958.json b/advisories/unreviewed/2022/05/GHSA-6ph5-9c4g-3958/GHSA-6ph5-9c4g-3958.json index 7f48adf68dd..db022612717 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ph5-9c4g-3958/GHSA-6ph5-9c4g-3958.json +++ b/advisories/unreviewed/2022/05/GHSA-6ph5-9c4g-3958/GHSA-6ph5-9c4g-3958.json @@ -7,12 +7,8 @@ "CVE-2020-3729" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6pph-69rg-fpw6/GHSA-6pph-69rg-fpw6.json b/advisories/unreviewed/2022/05/GHSA-6pph-69rg-fpw6/GHSA-6pph-69rg-fpw6.json index 58e589488e7..d67ef7587d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pph-69rg-fpw6/GHSA-6pph-69rg-fpw6.json +++ b/advisories/unreviewed/2022/05/GHSA-6pph-69rg-fpw6/GHSA-6pph-69rg-fpw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q93-673p-9879/GHSA-6q93-673p-9879.json b/advisories/unreviewed/2022/05/GHSA-6q93-673p-9879/GHSA-6q93-673p-9879.json index 9e38e1d2d68..263ca7a68f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q93-673p-9879/GHSA-6q93-673p-9879.json +++ b/advisories/unreviewed/2022/05/GHSA-6q93-673p-9879/GHSA-6q93-673p-9879.json @@ -7,12 +7,8 @@ "CVE-2020-1872" ], "details": "Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r4h-q33h-6j2h/GHSA-6r4h-q33h-6j2h.json b/advisories/unreviewed/2022/05/GHSA-6r4h-q33h-6j2h/GHSA-6r4h-q33h-6j2h.json index 694ad18556e..55508731296 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r4h-q33h-6j2h/GHSA-6r4h-q33h-6j2h.json +++ b/advisories/unreviewed/2022/05/GHSA-6r4h-q33h-6j2h/GHSA-6r4h-q33h-6j2h.json @@ -7,12 +7,8 @@ "CVE-2020-3760" ], "details": "Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vr7-cx9r-8cjr/GHSA-6vr7-cx9r-8cjr.json b/advisories/unreviewed/2022/05/GHSA-6vr7-cx9r-8cjr/GHSA-6vr7-cx9r-8cjr.json index 1ff8a91ebbb..ed6a82a5a92 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vr7-cx9r-8cjr/GHSA-6vr7-cx9r-8cjr.json +++ b/advisories/unreviewed/2022/05/GHSA-6vr7-cx9r-8cjr/GHSA-6vr7-cx9r-8cjr.json @@ -7,12 +7,8 @@ "CVE-2015-7505" ], "details": "Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted LZW stream in a GIF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w3r-59v2-xcqg/GHSA-6w3r-59v2-xcqg.json b/advisories/unreviewed/2022/05/GHSA-6w3r-59v2-xcqg/GHSA-6w3r-59v2-xcqg.json index c1d3f3bec8c..8a4e2dc8724 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w3r-59v2-xcqg/GHSA-6w3r-59v2-xcqg.json +++ b/advisories/unreviewed/2022/05/GHSA-6w3r-59v2-xcqg/GHSA-6w3r-59v2-xcqg.json @@ -7,12 +7,8 @@ "CVE-2020-4211" ], "details": "IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175022.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wh8-fh9f-pc2g/GHSA-6wh8-fh9f-pc2g.json b/advisories/unreviewed/2022/05/GHSA-6wh8-fh9f-pc2g/GHSA-6wh8-fh9f-pc2g.json index bc77131a23a..e275d0003bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wh8-fh9f-pc2g/GHSA-6wh8-fh9f-pc2g.json +++ b/advisories/unreviewed/2022/05/GHSA-6wh8-fh9f-pc2g/GHSA-6wh8-fh9f-pc2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6x3p-68p4-c4vg/GHSA-6x3p-68p4-c4vg.json b/advisories/unreviewed/2022/05/GHSA-6x3p-68p4-c4vg/GHSA-6x3p-68p4-c4vg.json index 0180a5ebda3..5db4ae8e1d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x3p-68p4-c4vg/GHSA-6x3p-68p4-c4vg.json +++ b/advisories/unreviewed/2022/05/GHSA-6x3p-68p4-c4vg/GHSA-6x3p-68p4-c4vg.json @@ -7,12 +7,8 @@ "CVE-2020-4196" ], "details": "IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174907.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6x6g-g85v-c2cj/GHSA-6x6g-g85v-c2cj.json b/advisories/unreviewed/2022/05/GHSA-6x6g-g85v-c2cj/GHSA-6x6g-g85v-c2cj.json index dfe41dfdce7..f51bf0830af 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x6g-g85v-c2cj/GHSA-6x6g-g85v-c2cj.json +++ b/advisories/unreviewed/2022/05/GHSA-6x6g-g85v-c2cj/GHSA-6x6g-g85v-c2cj.json @@ -7,12 +7,8 @@ "CVE-2020-4212" ], "details": "IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175023.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6xf9-38qw-rvjg/GHSA-6xf9-38qw-rvjg.json b/advisories/unreviewed/2022/05/GHSA-6xf9-38qw-rvjg/GHSA-6xf9-38qw-rvjg.json index 027633947e0..cb196d83921 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xf9-38qw-rvjg/GHSA-6xf9-38qw-rvjg.json +++ b/advisories/unreviewed/2022/05/GHSA-6xf9-38qw-rvjg/GHSA-6xf9-38qw-rvjg.json @@ -7,12 +7,8 @@ "CVE-2020-6191" ], "details": "SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6xfg-823w-w33f/GHSA-6xfg-823w-w33f.json b/advisories/unreviewed/2022/05/GHSA-6xfg-823w-w33f/GHSA-6xfg-823w-w33f.json index 7cdf7b2c06d..e7ef9561825 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xfg-823w-w33f/GHSA-6xfg-823w-w33f.json +++ b/advisories/unreviewed/2022/05/GHSA-6xfg-823w-w33f/GHSA-6xfg-823w-w33f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6xgq-4x8w-m5rr/GHSA-6xgq-4x8w-m5rr.json b/advisories/unreviewed/2022/05/GHSA-6xgq-4x8w-m5rr/GHSA-6xgq-4x8w-m5rr.json index 02c118c65ed..4aba2f5a53a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xgq-4x8w-m5rr/GHSA-6xgq-4x8w-m5rr.json +++ b/advisories/unreviewed/2022/05/GHSA-6xgq-4x8w-m5rr/GHSA-6xgq-4x8w-m5rr.json @@ -7,12 +7,8 @@ "CVE-2019-4583" ], "details": "IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 167289.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7554-j89c-fh4v/GHSA-7554-j89c-fh4v.json b/advisories/unreviewed/2022/05/GHSA-7554-j89c-fh4v/GHSA-7554-j89c-fh4v.json index ee1cf9e11ea..4e9569247fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7554-j89c-fh4v/GHSA-7554-j89c-fh4v.json +++ b/advisories/unreviewed/2022/05/GHSA-7554-j89c-fh4v/GHSA-7554-j89c-fh4v.json @@ -7,12 +7,8 @@ "CVE-2020-8844" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG files within CovertToPDF. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-756f-h55r-pvqq/GHSA-756f-h55r-pvqq.json b/advisories/unreviewed/2022/05/GHSA-756f-h55r-pvqq/GHSA-756f-h55r-pvqq.json index cd89c41bd86..5d1cb2a8816 100644 --- a/advisories/unreviewed/2022/05/GHSA-756f-h55r-pvqq/GHSA-756f-h55r-pvqq.json +++ b/advisories/unreviewed/2022/05/GHSA-756f-h55r-pvqq/GHSA-756f-h55r-pvqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-759p-vg2c-395m/GHSA-759p-vg2c-395m.json b/advisories/unreviewed/2022/05/GHSA-759p-vg2c-395m/GHSA-759p-vg2c-395m.json index 4396f7ddaaf..75af0e3092c 100644 --- a/advisories/unreviewed/2022/05/GHSA-759p-vg2c-395m/GHSA-759p-vg2c-395m.json +++ b/advisories/unreviewed/2022/05/GHSA-759p-vg2c-395m/GHSA-759p-vg2c-395m.json @@ -7,12 +7,8 @@ "CVE-2020-4230" ], "details": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-759q-wfqr-9x82/GHSA-759q-wfqr-9x82.json b/advisories/unreviewed/2022/05/GHSA-759q-wfqr-9x82/GHSA-759q-wfqr-9x82.json index 9ba65505092..0fcb18d3e0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-759q-wfqr-9x82/GHSA-759q-wfqr-9x82.json +++ b/advisories/unreviewed/2022/05/GHSA-759q-wfqr-9x82/GHSA-759q-wfqr-9x82.json @@ -7,12 +7,8 @@ "CVE-2020-3163" ], "details": "A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the affected software improperly manages resources when processing inbound Live Data traffic. An attacker could exploit this vulnerability by sending multiple crafted Live Data packets to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could result in a stack overflow and cause the affected device to reload, resulting in a DoS condition. Note: The Live Data port in Cisco Unified Contact Center Enterprise devices allows only a single TCP connection. To exploit this vulnerability, an attacker would have to send crafted packets to an affected device before a legitimate Live Data client establishes a connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7678-jffh-g884/GHSA-7678-jffh-g884.json b/advisories/unreviewed/2022/05/GHSA-7678-jffh-g884/GHSA-7678-jffh-g884.json index b478c92478d..6d4d404c498 100644 --- a/advisories/unreviewed/2022/05/GHSA-7678-jffh-g884/GHSA-7678-jffh-g884.json +++ b/advisories/unreviewed/2022/05/GHSA-7678-jffh-g884/GHSA-7678-jffh-g884.json @@ -7,12 +7,8 @@ "CVE-2020-4198" ], "details": "IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 174909.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-768x-v9g3-hv4m/GHSA-768x-v9g3-hv4m.json b/advisories/unreviewed/2022/05/GHSA-768x-v9g3-hv4m/GHSA-768x-v9g3-hv4m.json index 78360f57e85..3627f7561b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-768x-v9g3-hv4m/GHSA-768x-v9g3-hv4m.json +++ b/advisories/unreviewed/2022/05/GHSA-768x-v9g3-hv4m/GHSA-768x-v9g3-hv4m.json @@ -7,12 +7,8 @@ "CVE-2020-4200" ], "details": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated attacker to send specially crafted commands to cause a denial of service. IBM X-Force ID: 174914.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-76w4-c3w3-fpg6/GHSA-76w4-c3w3-fpg6.json b/advisories/unreviewed/2022/05/GHSA-76w4-c3w3-fpg6/GHSA-76w4-c3w3-fpg6.json index 66523bf5b2e..a4f5e67118d 100644 --- a/advisories/unreviewed/2022/05/GHSA-76w4-c3w3-fpg6/GHSA-76w4-c3w3-fpg6.json +++ b/advisories/unreviewed/2022/05/GHSA-76w4-c3w3-fpg6/GHSA-76w4-c3w3-fpg6.json @@ -7,12 +7,8 @@ "CVE-2020-3756" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a stack exhaustion vulnerability. Successful exploitation could lead to memory leak .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-777c-xcpc-mxhx/GHSA-777c-xcpc-mxhx.json b/advisories/unreviewed/2022/05/GHSA-777c-xcpc-mxhx/GHSA-777c-xcpc-mxhx.json index 41fcc28f50e..71ac22e6909 100644 --- a/advisories/unreviewed/2022/05/GHSA-777c-xcpc-mxhx/GHSA-777c-xcpc-mxhx.json +++ b/advisories/unreviewed/2022/05/GHSA-777c-xcpc-mxhx/GHSA-777c-xcpc-mxhx.json @@ -7,12 +7,8 @@ "CVE-2020-9024" ], "details": "Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have world-writable permissions for the /root/cleardata.pl (executed as root by crond) and /root/loadperl.sh (executed as root at boot time) scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77f6-cvfq-78rh/GHSA-77f6-cvfq-78rh.json b/advisories/unreviewed/2022/05/GHSA-77f6-cvfq-78rh/GHSA-77f6-cvfq-78rh.json index c5f828a2855..eb90570f577 100644 --- a/advisories/unreviewed/2022/05/GHSA-77f6-cvfq-78rh/GHSA-77f6-cvfq-78rh.json +++ b/advisories/unreviewed/2022/05/GHSA-77f6-cvfq-78rh/GHSA-77f6-cvfq-78rh.json @@ -7,12 +7,8 @@ "CVE-2019-4745" ], "details": "IBM Maximo Asset Management 7.6.1.0 could allow a remote attacker to disclose sensitive information to an authenticated user due to disclosing path information in the URL. IBM X-Force ID: 172883.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-78cx-cxhf-fjh9/GHSA-78cx-cxhf-fjh9.json b/advisories/unreviewed/2022/05/GHSA-78cx-cxhf-fjh9/GHSA-78cx-cxhf-fjh9.json index a72af69f020..6d1d190d796 100644 --- a/advisories/unreviewed/2022/05/GHSA-78cx-cxhf-fjh9/GHSA-78cx-cxhf-fjh9.json +++ b/advisories/unreviewed/2022/05/GHSA-78cx-cxhf-fjh9/GHSA-78cx-cxhf-fjh9.json @@ -7,12 +7,8 @@ "CVE-2020-8802" ], "details": "SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7993-f8m8-vmv3/GHSA-7993-f8m8-vmv3.json b/advisories/unreviewed/2022/05/GHSA-7993-f8m8-vmv3/GHSA-7993-f8m8-vmv3.json index 0febcb36058..9f2d444639a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7993-f8m8-vmv3/GHSA-7993-f8m8-vmv3.json +++ b/advisories/unreviewed/2022/05/GHSA-7993-f8m8-vmv3/GHSA-7993-f8m8-vmv3.json @@ -7,12 +7,8 @@ "CVE-2020-6389" ], "details": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-79v3-cg9r-f55q/GHSA-79v3-cg9r-f55q.json b/advisories/unreviewed/2022/05/GHSA-79v3-cg9r-f55q/GHSA-79v3-cg9r-f55q.json index 7ab8af06405..c9619df350e 100644 --- a/advisories/unreviewed/2022/05/GHSA-79v3-cg9r-f55q/GHSA-79v3-cg9r-f55q.json +++ b/advisories/unreviewed/2022/05/GHSA-79v3-cg9r-f55q/GHSA-79v3-cg9r-f55q.json @@ -7,12 +7,8 @@ "CVE-2020-1693" ], "details": "A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint. An unauthenticated remote attacker could use this flaw to retrieve the content of certain files and trigger a denial of service, or in certain circumstances, execute arbitrary code on the Spacewalk server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7g5r-3c9x-4h45/GHSA-7g5r-3c9x-4h45.json b/advisories/unreviewed/2022/05/GHSA-7g5r-3c9x-4h45/GHSA-7g5r-3c9x-4h45.json index a9b9db5ccab..26af217d7df 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g5r-3c9x-4h45/GHSA-7g5r-3c9x-4h45.json +++ b/advisories/unreviewed/2022/05/GHSA-7g5r-3c9x-4h45/GHSA-7g5r-3c9x-4h45.json @@ -7,12 +7,8 @@ "CVE-2019-20046" ], "details": "The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue than CVE-2019-16879 and CVE-2019-20045.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7gqr-46m6-5qj9/GHSA-7gqr-46m6-5qj9.json b/advisories/unreviewed/2022/05/GHSA-7gqr-46m6-5qj9/GHSA-7gqr-46m6-5qj9.json index 02ca3247f0d..5787048bd92 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gqr-46m6-5qj9/GHSA-7gqr-46m6-5qj9.json +++ b/advisories/unreviewed/2022/05/GHSA-7gqr-46m6-5qj9/GHSA-7gqr-46m6-5qj9.json @@ -7,12 +7,8 @@ "CVE-2020-3720" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q5w-gw6h-9g37/GHSA-7q5w-gw6h-9g37.json b/advisories/unreviewed/2022/05/GHSA-7q5w-gw6h-9g37/GHSA-7q5w-gw6h-9g37.json index df63138f8ee..6d53279108a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q5w-gw6h-9g37/GHSA-7q5w-gw6h-9g37.json +++ b/advisories/unreviewed/2022/05/GHSA-7q5w-gw6h-9g37/GHSA-7q5w-gw6h-9g37.json @@ -7,12 +7,8 @@ "CVE-2020-8612" ], "details": "In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execute arbitrary code in a victim's browser, aka XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7qwj-rq2v-gm66/GHSA-7qwj-rq2v-gm66.json b/advisories/unreviewed/2022/05/GHSA-7qwj-rq2v-gm66/GHSA-7qwj-rq2v-gm66.json index d4e077ad4f2..d362235d9be 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qwj-rq2v-gm66/GHSA-7qwj-rq2v-gm66.json +++ b/advisories/unreviewed/2022/05/GHSA-7qwj-rq2v-gm66/GHSA-7qwj-rq2v-gm66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r29-2mx5-wh83/GHSA-7r29-2mx5-wh83.json b/advisories/unreviewed/2022/05/GHSA-7r29-2mx5-wh83/GHSA-7r29-2mx5-wh83.json index a39e42c4cbe..89929aa8052 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r29-2mx5-wh83/GHSA-7r29-2mx5-wh83.json +++ b/advisories/unreviewed/2022/05/GHSA-7r29-2mx5-wh83/GHSA-7r29-2mx5-wh83.json @@ -7,12 +7,8 @@ "CVE-2018-21032" ], "details": "A vulnerability in Hitachi Command Suite prior to 8.7.1-00 and Hitachi Automation Director prior to 8.5.0-00 allow authenticated remote users to expose technical information through error messages. Hitachi Command Suite includes Hitachi Device Manager and Hitachi Compute Systems Manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w63-rpf8-69q7/GHSA-7w63-rpf8-69q7.json b/advisories/unreviewed/2022/05/GHSA-7w63-rpf8-69q7/GHSA-7w63-rpf8-69q7.json index 56c5b955ee9..90c2e685694 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w63-rpf8-69q7/GHSA-7w63-rpf8-69q7.json +++ b/advisories/unreviewed/2022/05/GHSA-7w63-rpf8-69q7/GHSA-7w63-rpf8-69q7.json @@ -7,12 +7,8 @@ "CVE-2020-9006" ], "details": "The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in the sgImportPopups function in sg_popup_ajax.php) via PHP Deserialization on attacker-controlled data with the attachmentUrl POST variable. This allows creation of an arbitrary WordPress Administrator account, leading to possible Remote Code Execution because Administrators can run PHP code on Wordpress instances. (This issue has been fixed in the 3.x branch of popup-builder.)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xrm-qq9q-mphg/GHSA-7xrm-qq9q-mphg.json b/advisories/unreviewed/2022/05/GHSA-7xrm-qq9q-mphg/GHSA-7xrm-qq9q-mphg.json index ddb1c3815ce..5f203603d21 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xrm-qq9q-mphg/GHSA-7xrm-qq9q-mphg.json +++ b/advisories/unreviewed/2022/05/GHSA-7xrm-qq9q-mphg/GHSA-7xrm-qq9q-mphg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83jw-q574-9vc6/GHSA-83jw-q574-9vc6.json b/advisories/unreviewed/2022/05/GHSA-83jw-q574-9vc6/GHSA-83jw-q574-9vc6.json index f3c73d07e3c..6c50f79a32a 100644 --- a/advisories/unreviewed/2022/05/GHSA-83jw-q574-9vc6/GHSA-83jw-q574-9vc6.json +++ b/advisories/unreviewed/2022/05/GHSA-83jw-q574-9vc6/GHSA-83jw-q574-9vc6.json @@ -7,12 +7,8 @@ "CVE-2020-9398" ], "details": "ISPConfig before 3.1.15p3, when the undocumented reverse_proxy_panel_allowed=sites option is manually enabled, allows SQL Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83pc-j9gm-v4c6/GHSA-83pc-j9gm-v4c6.json b/advisories/unreviewed/2022/05/GHSA-83pc-j9gm-v4c6/GHSA-83pc-j9gm-v4c6.json index 7bd628dd69a..82b773b9b68 100644 --- a/advisories/unreviewed/2022/05/GHSA-83pc-j9gm-v4c6/GHSA-83pc-j9gm-v4c6.json +++ b/advisories/unreviewed/2022/05/GHSA-83pc-j9gm-v4c6/GHSA-83pc-j9gm-v4c6.json @@ -7,12 +7,8 @@ "CVE-2020-3736" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-85h5-jgxc-3hpj/GHSA-85h5-jgxc-3hpj.json b/advisories/unreviewed/2022/05/GHSA-85h5-jgxc-3hpj/GHSA-85h5-jgxc-3hpj.json index 789bdd7b3d7..8bf467e96a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-85h5-jgxc-3hpj/GHSA-85h5-jgxc-3hpj.json +++ b/advisories/unreviewed/2022/05/GHSA-85h5-jgxc-3hpj/GHSA-85h5-jgxc-3hpj.json @@ -7,12 +7,8 @@ "CVE-2019-20456" ], "details": "Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escalation via DLL hijacking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87hr-6cw6-rj3c/GHSA-87hr-6cw6-rj3c.json b/advisories/unreviewed/2022/05/GHSA-87hr-6cw6-rj3c/GHSA-87hr-6cw6-rj3c.json index 21d0c786e30..067faf28e93 100644 --- a/advisories/unreviewed/2022/05/GHSA-87hr-6cw6-rj3c/GHSA-87hr-6cw6-rj3c.json +++ b/advisories/unreviewed/2022/05/GHSA-87hr-6cw6-rj3c/GHSA-87hr-6cw6-rj3c.json @@ -7,12 +7,8 @@ "CVE-2015-7747" ], "details": "Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted remote attackers to cause a denial of service (program crash) or possibly execute arbitrary code via a crafted audio file, as demonstrated by sixteen-stereo-to-eight-mono.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8844-xm63-xpv5/GHSA-8844-xm63-xpv5.json b/advisories/unreviewed/2022/05/GHSA-8844-xm63-xpv5/GHSA-8844-xm63-xpv5.json index c71dbed396d..8fc41c4e349 100644 --- a/advisories/unreviewed/2022/05/GHSA-8844-xm63-xpv5/GHSA-8844-xm63-xpv5.json +++ b/advisories/unreviewed/2022/05/GHSA-8844-xm63-xpv5/GHSA-8844-xm63-xpv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-89wm-r5xh-m98j/GHSA-89wm-r5xh-m98j.json b/advisories/unreviewed/2022/05/GHSA-89wm-r5xh-m98j/GHSA-89wm-r5xh-m98j.json index 8bdaab0a019..b8b4e420f59 100644 --- a/advisories/unreviewed/2022/05/GHSA-89wm-r5xh-m98j/GHSA-89wm-r5xh-m98j.json +++ b/advisories/unreviewed/2022/05/GHSA-89wm-r5xh-m98j/GHSA-89wm-r5xh-m98j.json @@ -7,12 +7,8 @@ "CVE-2020-8804" ], "details": "SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8chx-524m-jwvh/GHSA-8chx-524m-jwvh.json b/advisories/unreviewed/2022/05/GHSA-8chx-524m-jwvh/GHSA-8chx-524m-jwvh.json index 9dade63051c..4b14eb0ef29 100644 --- a/advisories/unreviewed/2022/05/GHSA-8chx-524m-jwvh/GHSA-8chx-524m-jwvh.json +++ b/advisories/unreviewed/2022/05/GHSA-8chx-524m-jwvh/GHSA-8chx-524m-jwvh.json @@ -7,12 +7,8 @@ "CVE-2020-3114" ], "details": "A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link while having an active session on an affected device. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the targeted user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f2r-x3fm-9qm9/GHSA-8f2r-x3fm-9qm9.json b/advisories/unreviewed/2022/05/GHSA-8f2r-x3fm-9qm9/GHSA-8f2r-x3fm-9qm9.json index 34c53a081ed..d52671d9035 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f2r-x3fm-9qm9/GHSA-8f2r-x3fm-9qm9.json +++ b/advisories/unreviewed/2022/05/GHSA-8f2r-x3fm-9qm9/GHSA-8f2r-x3fm-9qm9.json @@ -7,12 +7,8 @@ "CVE-2020-0749" ], "details": "An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0750.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8f32-635r-wf8j/GHSA-8f32-635r-wf8j.json b/advisories/unreviewed/2022/05/GHSA-8f32-635r-wf8j/GHSA-8f32-635r-wf8j.json index f2ab8117c6e..551889605fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f32-635r-wf8j/GHSA-8f32-635r-wf8j.json +++ b/advisories/unreviewed/2022/05/GHSA-8f32-635r-wf8j/GHSA-8f32-635r-wf8j.json @@ -7,12 +7,8 @@ "CVE-2019-20045" ], "details": "The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. Specially crafted malicious packets could cause disconnection of active authentic connections or reboot of device. This is a different issue than CVE-2019-16879 and CVE-2019-20046.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8g5w-xh3j-7w3x/GHSA-8g5w-xh3j-7w3x.json b/advisories/unreviewed/2022/05/GHSA-8g5w-xh3j-7w3x/GHSA-8g5w-xh3j-7w3x.json index 62c9685d433..c2a30e1034e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g5w-xh3j-7w3x/GHSA-8g5w-xh3j-7w3x.json +++ b/advisories/unreviewed/2022/05/GHSA-8g5w-xh3j-7w3x/GHSA-8g5w-xh3j-7w3x.json @@ -7,12 +7,8 @@ "CVE-2020-1853" ], "details": "GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8gvc-95pj-x5r8/GHSA-8gvc-95pj-x5r8.json b/advisories/unreviewed/2022/05/GHSA-8gvc-95pj-x5r8/GHSA-8gvc-95pj-x5r8.json index 47f209209d6..54524df9e8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gvc-95pj-x5r8/GHSA-8gvc-95pj-x5r8.json +++ b/advisories/unreviewed/2022/05/GHSA-8gvc-95pj-x5r8/GHSA-8gvc-95pj-x5r8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h2v-25vm-v6j2/GHSA-8h2v-25vm-v6j2.json b/advisories/unreviewed/2022/05/GHSA-8h2v-25vm-v6j2/GHSA-8h2v-25vm-v6j2.json index 823d647b82d..0debe585a28 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h2v-25vm-v6j2/GHSA-8h2v-25vm-v6j2.json +++ b/advisories/unreviewed/2022/05/GHSA-8h2v-25vm-v6j2/GHSA-8h2v-25vm-v6j2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hpm-7f4v-97xg/GHSA-8hpm-7f4v-97xg.json b/advisories/unreviewed/2022/05/GHSA-8hpm-7f4v-97xg/GHSA-8hpm-7f4v-97xg.json index 4a3153d4336..de1a72e9ab3 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hpm-7f4v-97xg/GHSA-8hpm-7f4v-97xg.json +++ b/advisories/unreviewed/2022/05/GHSA-8hpm-7f4v-97xg/GHSA-8hpm-7f4v-97xg.json @@ -7,12 +7,8 @@ "CVE-2020-8843" ], "details": "An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a source equal to ingress. To exploit this vulnerability, someone has to encode a source.uid in this header. This feature is disabled by default in Istio 1.3 and 1.4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j42-mv6v-2hw2/GHSA-8j42-mv6v-2hw2.json b/advisories/unreviewed/2022/05/GHSA-8j42-mv6v-2hw2/GHSA-8j42-mv6v-2hw2.json index cf08e9e8da2..7033ffe5db2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j42-mv6v-2hw2/GHSA-8j42-mv6v-2hw2.json +++ b/advisories/unreviewed/2022/05/GHSA-8j42-mv6v-2hw2/GHSA-8j42-mv6v-2hw2.json @@ -7,12 +7,8 @@ "CVE-2019-4752" ], "details": "IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 173348.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jj4-q2p9-qvq9/GHSA-8jj4-q2p9-qvq9.json b/advisories/unreviewed/2022/05/GHSA-8jj4-q2p9-qvq9/GHSA-8jj4-q2p9-qvq9.json index f4db813e808..cbc1bbec806 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jj4-q2p9-qvq9/GHSA-8jj4-q2p9-qvq9.json +++ b/advisories/unreviewed/2022/05/GHSA-8jj4-q2p9-qvq9/GHSA-8jj4-q2p9-qvq9.json @@ -7,12 +7,8 @@ "CVE-2020-9030" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to the syslog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jmq-q75q-rmj9/GHSA-8jmq-q75q-rmj9.json b/advisories/unreviewed/2022/05/GHSA-8jmq-q75q-rmj9/GHSA-8jmq-q75q-rmj9.json index 0652c87259d..6c95e890cfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jmq-q75q-rmj9/GHSA-8jmq-q75q-rmj9.json +++ b/advisories/unreviewed/2022/05/GHSA-8jmq-q75q-rmj9/GHSA-8jmq-q75q-rmj9.json @@ -7,12 +7,8 @@ "CVE-2016-1000005" ], "details": "mcrypt_get_block_size did not enforce that the provided \"module\" parameter was a string, leading to type confusion if other types of data were passed in. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 (inclusive), and all versions between 3.13.0 and 3.14.1 (inclusive).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8m27-48h2-7f6h/GHSA-8m27-48h2-7f6h.json b/advisories/unreviewed/2022/05/GHSA-8m27-48h2-7f6h/GHSA-8m27-48h2-7f6h.json index d9d27c63299..094b2bcd4f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m27-48h2-7f6h/GHSA-8m27-48h2-7f6h.json +++ b/advisories/unreviewed/2022/05/GHSA-8m27-48h2-7f6h/GHSA-8m27-48h2-7f6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m33-q7cw-67gr/GHSA-8m33-q7cw-67gr.json b/advisories/unreviewed/2022/05/GHSA-8m33-q7cw-67gr/GHSA-8m33-q7cw-67gr.json index dd16c83f99c..370fb9fa5d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m33-q7cw-67gr/GHSA-8m33-q7cw-67gr.json +++ b/advisories/unreviewed/2022/05/GHSA-8m33-q7cw-67gr/GHSA-8m33-q7cw-67gr.json @@ -7,12 +7,8 @@ "CVE-2020-8849" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPEG2000 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9413.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8m56-4v6j-q5p8/GHSA-8m56-4v6j-q5p8.json b/advisories/unreviewed/2022/05/GHSA-8m56-4v6j-q5p8/GHSA-8m56-4v6j-q5p8.json index 61c3db0631a..2fd62fde393 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m56-4v6j-q5p8/GHSA-8m56-4v6j-q5p8.json +++ b/advisories/unreviewed/2022/05/GHSA-8m56-4v6j-q5p8/GHSA-8m56-4v6j-q5p8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mx8-vqqf-jvh9/GHSA-8mx8-vqqf-jvh9.json b/advisories/unreviewed/2022/05/GHSA-8mx8-vqqf-jvh9/GHSA-8mx8-vqqf-jvh9.json index 8d6db273838..6b52775b27c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mx8-vqqf-jvh9/GHSA-8mx8-vqqf-jvh9.json +++ b/advisories/unreviewed/2022/05/GHSA-8mx8-vqqf-jvh9/GHSA-8mx8-vqqf-jvh9.json @@ -7,12 +7,8 @@ "CVE-2019-19988" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the filesystem via /common/vam_editXml.php in the web interface. The vulnerable PHP page checks none of these: the parameter that identifies the file name to be created, the destination path, or the extension. Thus, an attacker can manipulate the file name to create any type of file within the filesystem with arbitrary content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8phc-x6hp-m8fj/GHSA-8phc-x6hp-m8fj.json b/advisories/unreviewed/2022/05/GHSA-8phc-x6hp-m8fj/GHSA-8phc-x6hp-m8fj.json index d77cf622975..e88c6308c49 100644 --- a/advisories/unreviewed/2022/05/GHSA-8phc-x6hp-m8fj/GHSA-8phc-x6hp-m8fj.json +++ b/advisories/unreviewed/2022/05/GHSA-8phc-x6hp-m8fj/GHSA-8phc-x6hp-m8fj.json @@ -7,12 +7,8 @@ "CVE-2020-9264" ], "details": "ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antivirus, Cyber Security Pro (macOS), Cyber Security (macOS), Mobile Security for Android, Smart TV Security, and NOD32 Antivirus 4 for Linux Desktop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qrp-hmq9-5pcx/GHSA-8qrp-hmq9-5pcx.json b/advisories/unreviewed/2022/05/GHSA-8qrp-hmq9-5pcx/GHSA-8qrp-hmq9-5pcx.json index 484a770febe..8fe8ada1abc 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qrp-hmq9-5pcx/GHSA-8qrp-hmq9-5pcx.json +++ b/advisories/unreviewed/2022/05/GHSA-8qrp-hmq9-5pcx/GHSA-8qrp-hmq9-5pcx.json @@ -7,12 +7,8 @@ "CVE-2020-8858" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4.1. Authentication is required to exploit this vulnerability. The specific flaw exists within the DestIP parameter within MainPing.asp. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-9552.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8r9q-v9vq-pqrf/GHSA-8r9q-v9vq-pqrf.json b/advisories/unreviewed/2022/05/GHSA-8r9q-v9vq-pqrf/GHSA-8r9q-v9vq-pqrf.json index 7d6d27badd5..f5c531a7a0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r9q-v9vq-pqrf/GHSA-8r9q-v9vq-pqrf.json +++ b/advisories/unreviewed/2022/05/GHSA-8r9q-v9vq-pqrf/GHSA-8r9q-v9vq-pqrf.json @@ -7,12 +7,8 @@ "CVE-2020-3746" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v3r-gw3g-qx4m/GHSA-8v3r-gw3g-qx4m.json b/advisories/unreviewed/2022/05/GHSA-8v3r-gw3g-qx4m/GHSA-8v3r-gw3g-qx4m.json index ef8d593608a..fcd25628931 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v3r-gw3g-qx4m/GHSA-8v3r-gw3g-qx4m.json +++ b/advisories/unreviewed/2022/05/GHSA-8v3r-gw3g-qx4m/GHSA-8v3r-gw3g-qx4m.json @@ -7,12 +7,8 @@ "CVE-2020-6845" ], "details": "An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8v5r-37pf-c2mr/GHSA-8v5r-37pf-c2mr.json b/advisories/unreviewed/2022/05/GHSA-8v5r-37pf-c2mr/GHSA-8v5r-37pf-c2mr.json index e7da865df47..b3593337519 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v5r-37pf-c2mr/GHSA-8v5r-37pf-c2mr.json +++ b/advisories/unreviewed/2022/05/GHSA-8v5r-37pf-c2mr/GHSA-8v5r-37pf-c2mr.json @@ -7,12 +7,8 @@ "CVE-2020-8801" ], "details": "SuiteCRM through 7.11.11 allows PHAR Deserialization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8wh4-6822-h89q/GHSA-8wh4-6822-h89q.json b/advisories/unreviewed/2022/05/GHSA-8wh4-6822-h89q/GHSA-8wh4-6822-h89q.json index 257da6322f5..cefaaaf2dc4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wh4-6822-h89q/GHSA-8wh4-6822-h89q.json +++ b/advisories/unreviewed/2022/05/GHSA-8wh4-6822-h89q/GHSA-8wh4-6822-h89q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xh8-884j-fggj/GHSA-8xh8-884j-fggj.json b/advisories/unreviewed/2022/05/GHSA-8xh8-884j-fggj/GHSA-8xh8-884j-fggj.json index 668848f9910..1795f9df55f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xh8-884j-fggj/GHSA-8xh8-884j-fggj.json +++ b/advisories/unreviewed/2022/05/GHSA-8xh8-884j-fggj/GHSA-8xh8-884j-fggj.json @@ -7,12 +7,8 @@ "CVE-2020-0030" ], "details": "In binder_thread_release of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-145286050References: Upstream kernel", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-924j-9954-rvrv/GHSA-924j-9954-rvrv.json b/advisories/unreviewed/2022/05/GHSA-924j-9954-rvrv/GHSA-924j-9954-rvrv.json index fa24bed11a4..4d88f394de7 100644 --- a/advisories/unreviewed/2022/05/GHSA-924j-9954-rvrv/GHSA-924j-9954-rvrv.json +++ b/advisories/unreviewed/2022/05/GHSA-924j-9954-rvrv/GHSA-924j-9954-rvrv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9423-j6rv-rhp5/GHSA-9423-j6rv-rhp5.json b/advisories/unreviewed/2022/05/GHSA-9423-j6rv-rhp5/GHSA-9423-j6rv-rhp5.json index 51d9fed7334..098aaa155ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-9423-j6rv-rhp5/GHSA-9423-j6rv-rhp5.json +++ b/advisories/unreviewed/2022/05/GHSA-9423-j6rv-rhp5/GHSA-9423-j6rv-rhp5.json @@ -7,12 +7,8 @@ "CVE-2019-12825" ], "details": "Unauthorized Access to the Container Registry of other groups was discovered in GitLab Enterprise 12.0.0-pre. In other words, authenticated remote attackers can read Docker registries of other groups. When a legitimate user changes the path of a group, Docker registries are not adapted, leaving them in the old namespace. They are not protected and are available to all other users with no previous access to the repo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9468-5fg2-67xr/GHSA-9468-5fg2-67xr.json b/advisories/unreviewed/2022/05/GHSA-9468-5fg2-67xr/GHSA-9468-5fg2-67xr.json index 9aa86214edd..f1f42d27881 100644 --- a/advisories/unreviewed/2022/05/GHSA-9468-5fg2-67xr/GHSA-9468-5fg2-67xr.json +++ b/advisories/unreviewed/2022/05/GHSA-9468-5fg2-67xr/GHSA-9468-5fg2-67xr.json @@ -7,12 +7,8 @@ "CVE-2020-3944" ], "details": "vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) has an improper trust store configuration leading to authentication bypass. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may be able to bypass Adapter authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-94rg-gqv4-f554/GHSA-94rg-gqv4-f554.json b/advisories/unreviewed/2022/05/GHSA-94rg-gqv4-f554/GHSA-94rg-gqv4-f554.json index edb0d310426..3e62098b811 100644 --- a/advisories/unreviewed/2022/05/GHSA-94rg-gqv4-f554/GHSA-94rg-gqv4-f554.json +++ b/advisories/unreviewed/2022/05/GHSA-94rg-gqv4-f554/GHSA-94rg-gqv4-f554.json @@ -7,12 +7,8 @@ "CVE-2020-9017" ], "details": "LiteCart through 2.2.1 allows CSV injection via a customer's profile.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-965w-xmc8-fjj4/GHSA-965w-xmc8-fjj4.json b/advisories/unreviewed/2022/05/GHSA-965w-xmc8-fjj4/GHSA-965w-xmc8-fjj4.json index e2393df73c8..dc2315b96e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-965w-xmc8-fjj4/GHSA-965w-xmc8-fjj4.json +++ b/advisories/unreviewed/2022/05/GHSA-965w-xmc8-fjj4/GHSA-965w-xmc8-fjj4.json @@ -7,12 +7,8 @@ "CVE-2020-6387" ], "details": "Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-966p-7vwg-6gpj/GHSA-966p-7vwg-6gpj.json b/advisories/unreviewed/2022/05/GHSA-966p-7vwg-6gpj/GHSA-966p-7vwg-6gpj.json index fb1b91c1f9d..b6b4f376834 100644 --- a/advisories/unreviewed/2022/05/GHSA-966p-7vwg-6gpj/GHSA-966p-7vwg-6gpj.json +++ b/advisories/unreviewed/2022/05/GHSA-966p-7vwg-6gpj/GHSA-966p-7vwg-6gpj.json @@ -7,12 +7,8 @@ "CVE-2020-7907" ], "details": "In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96jq-mvwr-8h4g/GHSA-96jq-mvwr-8h4g.json b/advisories/unreviewed/2022/05/GHSA-96jq-mvwr-8h4g/GHSA-96jq-mvwr-8h4g.json index 09df0fe1e95..9758266dcc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-96jq-mvwr-8h4g/GHSA-96jq-mvwr-8h4g.json +++ b/advisories/unreviewed/2022/05/GHSA-96jq-mvwr-8h4g/GHSA-96jq-mvwr-8h4g.json @@ -7,12 +7,8 @@ "CVE-2020-3160" ], "details": "A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition for users of XMPP conferencing applications. Other applications and processes are unaffected. The vulnerability is due to improper input validation of XMPP packets. An attacker could exploit this vulnerability by sending crafted XMPP packets to an affected device. An exploit could allow the attacker to cause process crashes and a DoS condition for XMPP conferencing applications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-979g-pggf-hwp2/GHSA-979g-pggf-hwp2.json b/advisories/unreviewed/2022/05/GHSA-979g-pggf-hwp2/GHSA-979g-pggf-hwp2.json index 384ce4a1555..a3fd3278490 100644 --- a/advisories/unreviewed/2022/05/GHSA-979g-pggf-hwp2/GHSA-979g-pggf-hwp2.json +++ b/advisories/unreviewed/2022/05/GHSA-979g-pggf-hwp2/GHSA-979g-pggf-hwp2.json @@ -7,12 +7,8 @@ "CVE-2020-1882" ], "details": "Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9882-28wj-g67p/GHSA-9882-28wj-g67p.json b/advisories/unreviewed/2022/05/GHSA-9882-28wj-g67p/GHSA-9882-28wj-g67p.json index ef1765d4f96..295bf48d08e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9882-28wj-g67p/GHSA-9882-28wj-g67p.json +++ b/advisories/unreviewed/2022/05/GHSA-9882-28wj-g67p/GHSA-9882-28wj-g67p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98r9-mgjw-46jp/GHSA-98r9-mgjw-46jp.json b/advisories/unreviewed/2022/05/GHSA-98r9-mgjw-46jp/GHSA-98r9-mgjw-46jp.json index 7114b8b27cb..096d91c6a36 100644 --- a/advisories/unreviewed/2022/05/GHSA-98r9-mgjw-46jp/GHSA-98r9-mgjw-46jp.json +++ b/advisories/unreviewed/2022/05/GHSA-98r9-mgjw-46jp/GHSA-98r9-mgjw-46jp.json @@ -7,12 +7,8 @@ "CVE-2019-19194" ], "details": "The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key (LTK) if an out-of-order link-layer encryption request is received during Secure Connections pairing. An attacker in radio range can have arbitrary read/write access to protected GATT service data, cause a device crash, or possibly control a device's function by establishing an encrypted session with the zero LTK.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fgp-mfm2-3437/GHSA-9fgp-mfm2-3437.json b/advisories/unreviewed/2022/05/GHSA-9fgp-mfm2-3437/GHSA-9fgp-mfm2-3437.json index 512fa6de32e..4293962c175 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fgp-mfm2-3437/GHSA-9fgp-mfm2-3437.json +++ b/advisories/unreviewed/2022/05/GHSA-9fgp-mfm2-3437/GHSA-9fgp-mfm2-3437.json @@ -7,12 +7,8 @@ "CVE-2020-3745" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fh2-8rwx-v758/GHSA-9fh2-8rwx-v758.json b/advisories/unreviewed/2022/05/GHSA-9fh2-8rwx-v758/GHSA-9fh2-8rwx-v758.json index 874c67f2469..672ede3b82f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fh2-8rwx-v758/GHSA-9fh2-8rwx-v758.json +++ b/advisories/unreviewed/2022/05/GHSA-9fh2-8rwx-v758/GHSA-9fh2-8rwx-v758.json @@ -7,12 +7,8 @@ "CVE-2020-9003" ], "details": "A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary JavaScript code that is viewed by other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9g6m-wjrr-69cm/GHSA-9g6m-wjrr-69cm.json b/advisories/unreviewed/2022/05/GHSA-9g6m-wjrr-69cm/GHSA-9g6m-wjrr-69cm.json index 16d7e5a6049..126892a0fef 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g6m-wjrr-69cm/GHSA-9g6m-wjrr-69cm.json +++ b/advisories/unreviewed/2022/05/GHSA-9g6m-wjrr-69cm/GHSA-9g6m-wjrr-69cm.json @@ -7,12 +7,8 @@ "CVE-2015-7567" ], "details": "SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the \"passwordreset&token\" parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9g7f-qqq7-j65j/GHSA-9g7f-qqq7-j65j.json b/advisories/unreviewed/2022/05/GHSA-9g7f-qqq7-j65j/GHSA-9g7f-qqq7-j65j.json index 8313dea9ba8..7ac2889e029 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g7f-qqq7-j65j/GHSA-9g7f-qqq7-j65j.json +++ b/advisories/unreviewed/2022/05/GHSA-9g7f-qqq7-j65j/GHSA-9g7f-qqq7-j65j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g94-m2hg-vj88/GHSA-9g94-m2hg-vj88.json b/advisories/unreviewed/2022/05/GHSA-9g94-m2hg-vj88/GHSA-9g94-m2hg-vj88.json index c2f3da3e436..68deca048a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g94-m2hg-vj88/GHSA-9g94-m2hg-vj88.json +++ b/advisories/unreviewed/2022/05/GHSA-9g94-m2hg-vj88/GHSA-9g94-m2hg-vj88.json @@ -7,12 +7,8 @@ "CVE-2019-18238" ], "details": "Moxa ioLogik 2542-HSPA Series Controllers and IOs, and IOxpress Configuration Utility ioLogik 2500 series firmware, Version 3.0 or lower IOxpress configuration utility, Version 2.3.0 or lower. Sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9gm6-wwwg-m956/GHSA-9gm6-wwwg-m956.json b/advisories/unreviewed/2022/05/GHSA-9gm6-wwwg-m956/GHSA-9gm6-wwwg-m956.json index d53f0d55ce2..b80f7afa175 100644 --- a/advisories/unreviewed/2022/05/GHSA-9gm6-wwwg-m956/GHSA-9gm6-wwwg-m956.json +++ b/advisories/unreviewed/2022/05/GHSA-9gm6-wwwg-m956/GHSA-9gm6-wwwg-m956.json @@ -7,12 +7,8 @@ "CVE-2020-1816" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Denial of Service (DoS) vulnerability. Due to improper processing of specific IPSEC packets, remote attackers can send constructed IPSEC packets to affected devices to exploit this vulnerability. Successful exploit could cause the IPSec function of the affected device abnormal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h36-xfgg-w797/GHSA-9h36-xfgg-w797.json b/advisories/unreviewed/2022/05/GHSA-9h36-xfgg-w797/GHSA-9h36-xfgg-w797.json index 1c3171c2099..7341ba0af45 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h36-xfgg-w797/GHSA-9h36-xfgg-w797.json +++ b/advisories/unreviewed/2022/05/GHSA-9h36-xfgg-w797/GHSA-9h36-xfgg-w797.json @@ -7,12 +7,8 @@ "CVE-2020-8846" ], "details": "This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of text field objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9400.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hw9-68x2-c9mc/GHSA-9hw9-68x2-c9mc.json b/advisories/unreviewed/2022/05/GHSA-9hw9-68x2-c9mc/GHSA-9hw9-68x2-c9mc.json index 4ecfb45bc1f..80667f68e5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hw9-68x2-c9mc/GHSA-9hw9-68x2-c9mc.json +++ b/advisories/unreviewed/2022/05/GHSA-9hw9-68x2-c9mc/GHSA-9hw9-68x2-c9mc.json @@ -7,12 +7,8 @@ "CVE-2020-9025" ], "details": "Iteris Vantage Velocity Field Unit 2.4.2 devices have multiple stored XSS issues in all parameters of the Start Data Viewer feature of the /cgi-bin/loaddata.py script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9jf2-hppg-5whm/GHSA-9jf2-hppg-5whm.json b/advisories/unreviewed/2022/05/GHSA-9jf2-hppg-5whm/GHSA-9jf2-hppg-5whm.json index b9afb841f38..3ec60552b13 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jf2-hppg-5whm/GHSA-9jf2-hppg-5whm.json +++ b/advisories/unreviewed/2022/05/GHSA-9jf2-hppg-5whm/GHSA-9jf2-hppg-5whm.json @@ -7,12 +7,8 @@ "CVE-2020-3749" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m3f-27xq-x4j5/GHSA-9m3f-27xq-x4j5.json b/advisories/unreviewed/2022/05/GHSA-9m3f-27xq-x4j5/GHSA-9m3f-27xq-x4j5.json index a1b70c38cea..8dd709b6d70 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m3f-27xq-x4j5/GHSA-9m3f-27xq-x4j5.json +++ b/advisories/unreviewed/2022/05/GHSA-9m3f-27xq-x4j5/GHSA-9m3f-27xq-x4j5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m68-695p-w4rv/GHSA-9m68-695p-w4rv.json b/advisories/unreviewed/2022/05/GHSA-9m68-695p-w4rv/GHSA-9m68-695p-w4rv.json index 902f3a69c20..bb91bc2a27b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m68-695p-w4rv/GHSA-9m68-695p-w4rv.json +++ b/advisories/unreviewed/2022/05/GHSA-9m68-695p-w4rv/GHSA-9m68-695p-w4rv.json @@ -7,12 +7,8 @@ "CVE-2020-0737" ], "details": "An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0739.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9ph4-cmpw-4gmf/GHSA-9ph4-cmpw-4gmf.json b/advisories/unreviewed/2022/05/GHSA-9ph4-cmpw-4gmf/GHSA-9ph4-cmpw-4gmf.json index 343c3a4b656..4a95b4973d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9ph4-cmpw-4gmf/GHSA-9ph4-cmpw-4gmf.json +++ b/advisories/unreviewed/2022/05/GHSA-9ph4-cmpw-4gmf/GHSA-9ph4-cmpw-4gmf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9prc-mv9q-2crp/GHSA-9prc-mv9q-2crp.json b/advisories/unreviewed/2022/05/GHSA-9prc-mv9q-2crp/GHSA-9prc-mv9q-2crp.json index 686f72ba67b..8fe4114062a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9prc-mv9q-2crp/GHSA-9prc-mv9q-2crp.json +++ b/advisories/unreviewed/2022/05/GHSA-9prc-mv9q-2crp/GHSA-9prc-mv9q-2crp.json @@ -7,12 +7,8 @@ "CVE-2020-3871" ], "details": "A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code with kernel privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q2m-66p7-cw4v/GHSA-9q2m-66p7-cw4v.json b/advisories/unreviewed/2022/05/GHSA-9q2m-66p7-cw4v/GHSA-9q2m-66p7-cw4v.json index d1f8ce113df..540957e3f33 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q2m-66p7-cw4v/GHSA-9q2m-66p7-cw4v.json +++ b/advisories/unreviewed/2022/05/GHSA-9q2m-66p7-cw4v/GHSA-9q2m-66p7-cw4v.json @@ -7,12 +7,8 @@ "CVE-2019-15875" ], "details": "In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p6, due to incorrect initialization of a stack data structure, core dump files may contain up to 20 bytes of kernel data previously stored on the stack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9q6j-4fr7-7x67/GHSA-9q6j-4fr7-7x67.json b/advisories/unreviewed/2022/05/GHSA-9q6j-4fr7-7x67/GHSA-9q6j-4fr7-7x67.json index d41d4d2b60d..96abfd64439 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q6j-4fr7-7x67/GHSA-9q6j-4fr7-7x67.json +++ b/advisories/unreviewed/2022/05/GHSA-9q6j-4fr7-7x67/GHSA-9q6j-4fr7-7x67.json @@ -7,12 +7,8 @@ "CVE-2020-3138" ], "details": "A vulnerability in the upgrade component of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to install a malicious file when upgrading. The vulnerability is due to insufficient signature validation. An attacker could exploit this vulnerability by providing a crafted upgrade file. A successful exploit could allow the attacker to upload crafted code to the affected device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9r2g-r54v-5426/GHSA-9r2g-r54v-5426.json b/advisories/unreviewed/2022/05/GHSA-9r2g-r54v-5426/GHSA-9r2g-r54v-5426.json index 5736e270b63..eb124917466 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r2g-r54v-5426/GHSA-9r2g-r54v-5426.json +++ b/advisories/unreviewed/2022/05/GHSA-9r2g-r54v-5426/GHSA-9r2g-r54v-5426.json @@ -7,12 +7,8 @@ "CVE-2020-3867" ], "details": "A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to universal cross site scripting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r48-45jv-qjj7/GHSA-9r48-45jv-qjj7.json b/advisories/unreviewed/2022/05/GHSA-9r48-45jv-qjj7/GHSA-9r48-45jv-qjj7.json index 8313d524056..5af332b64b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r48-45jv-qjj7/GHSA-9r48-45jv-qjj7.json +++ b/advisories/unreviewed/2022/05/GHSA-9r48-45jv-qjj7/GHSA-9r48-45jv-qjj7.json @@ -7,12 +7,8 @@ "CVE-2020-3741" ], "details": "Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. Successful exploitation could lead to denial-of-service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9v2m-whxm-wgp7/GHSA-9v2m-whxm-wgp7.json b/advisories/unreviewed/2022/05/GHSA-9v2m-whxm-wgp7/GHSA-9v2m-whxm-wgp7.json index 636f8d34d5a..52575cf037d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v2m-whxm-wgp7/GHSA-9v2m-whxm-wgp7.json +++ b/advisories/unreviewed/2022/05/GHSA-9v2m-whxm-wgp7/GHSA-9v2m-whxm-wgp7.json @@ -7,12 +7,8 @@ "CVE-2020-5821" ], "details": "Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may be susceptible to a DLL injection vulnerability, which is a type of issue whereby an individual attempts to execute their own code in place of legitimate code as a means to perform an exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vj8-fr5m-q39w/GHSA-9vj8-fr5m-q39w.json b/advisories/unreviewed/2022/05/GHSA-9vj8-fr5m-q39w/GHSA-9vj8-fr5m-q39w.json index 73c562c2e15..510791fb3d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vj8-fr5m-q39w/GHSA-9vj8-fr5m-q39w.json +++ b/advisories/unreviewed/2022/05/GHSA-9vj8-fr5m-q39w/GHSA-9vj8-fr5m-q39w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w6m-chrx-c6v2/GHSA-9w6m-chrx-c6v2.json b/advisories/unreviewed/2022/05/GHSA-9w6m-chrx-c6v2/GHSA-9w6m-chrx-c6v2.json index d02840888df..19d633cb0f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w6m-chrx-c6v2/GHSA-9w6m-chrx-c6v2.json +++ b/advisories/unreviewed/2022/05/GHSA-9w6m-chrx-c6v2/GHSA-9w6m-chrx-c6v2.json @@ -7,12 +7,8 @@ "CVE-2020-9329" ], "details": "Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wfj-vqgr-qfpp/GHSA-9wfj-vqgr-qfpp.json b/advisories/unreviewed/2022/05/GHSA-9wfj-vqgr-qfpp/GHSA-9wfj-vqgr-qfpp.json index 0bd4e84d775..5649a703315 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wfj-vqgr-qfpp/GHSA-9wfj-vqgr-qfpp.json +++ b/advisories/unreviewed/2022/05/GHSA-9wfj-vqgr-qfpp/GHSA-9wfj-vqgr-qfpp.json @@ -7,12 +7,8 @@ "CVE-2020-9269" ], "details": "SOPlanning 1.45 is vulnerable to authenticated SQL Injection that leads to command execution via the users parameter, as demonstrated by export_ical.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wr3-8f4c-6rjh/GHSA-9wr3-8f4c-6rjh.json b/advisories/unreviewed/2022/05/GHSA-9wr3-8f4c-6rjh/GHSA-9wr3-8f4c-6rjh.json index 700195ec2e2..3365137d619 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wr3-8f4c-6rjh/GHSA-9wr3-8f4c-6rjh.json +++ b/advisories/unreviewed/2022/05/GHSA-9wr3-8f4c-6rjh/GHSA-9wr3-8f4c-6rjh.json @@ -7,12 +7,8 @@ "CVE-2020-9540" ], "details": "Sophos HitmanPro.Alert before build 861 allows local elevation of privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9x5h-34f3-92qm/GHSA-9x5h-34f3-92qm.json b/advisories/unreviewed/2022/05/GHSA-9x5h-34f3-92qm/GHSA-9x5h-34f3-92qm.json index 09e178e9f5b..a53d363dff6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x5h-34f3-92qm/GHSA-9x5h-34f3-92qm.json +++ b/advisories/unreviewed/2022/05/GHSA-9x5h-34f3-92qm/GHSA-9x5h-34f3-92qm.json @@ -7,12 +7,8 @@ "CVE-2020-1976" ], "details": "A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c2p4-cjxh-qw87/GHSA-c2p4-cjxh-qw87.json b/advisories/unreviewed/2022/05/GHSA-c2p4-cjxh-qw87/GHSA-c2p4-cjxh-qw87.json index 607dece1fd3..e52932c5992 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2p4-cjxh-qw87/GHSA-c2p4-cjxh-qw87.json +++ b/advisories/unreviewed/2022/05/GHSA-c2p4-cjxh-qw87/GHSA-c2p4-cjxh-qw87.json @@ -7,12 +7,8 @@ "CVE-2019-20480" ], "details": "In MIELE XGW 3000 ZigBee Gateway before 2.4.0, a malicious website visited by an authenticated admin user or a malicious mail is allowed to make arbitrary changes in the \"admin panel\" because there is no CSRF protection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3mf-3753-8v7f/GHSA-c3mf-3753-8v7f.json b/advisories/unreviewed/2022/05/GHSA-c3mf-3753-8v7f/GHSA-c3mf-3753-8v7f.json index 37ea35a58e3..d6863481c15 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3mf-3753-8v7f/GHSA-c3mf-3753-8v7f.json +++ b/advisories/unreviewed/2022/05/GHSA-c3mf-3753-8v7f/GHSA-c3mf-3753-8v7f.json @@ -7,12 +7,8 @@ "CVE-2020-8950" ], "details": "The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\\AMD\\PPC\\upload and then creating a symbolic link in %PROGRAMDATA%\\AMD\\PPC\\temp that points to an arbitrary folder with an arbitrary file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5q3-grp9-wgrh/GHSA-c5q3-grp9-wgrh.json b/advisories/unreviewed/2022/05/GHSA-c5q3-grp9-wgrh/GHSA-c5q3-grp9-wgrh.json index f15a951b823..7b9c973724f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5q3-grp9-wgrh/GHSA-c5q3-grp9-wgrh.json +++ b/advisories/unreviewed/2022/05/GHSA-c5q3-grp9-wgrh/GHSA-c5q3-grp9-wgrh.json @@ -7,12 +7,8 @@ "CVE-2020-3170" ], "details": "A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the Cisco NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c6pc-x7w4-jm3x/GHSA-c6pc-x7w4-jm3x.json b/advisories/unreviewed/2022/05/GHSA-c6pc-x7w4-jm3x/GHSA-c6pc-x7w4-jm3x.json index 58a37629f84..ed1bd5b130d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6pc-x7w4-jm3x/GHSA-c6pc-x7w4-jm3x.json +++ b/advisories/unreviewed/2022/05/GHSA-c6pc-x7w4-jm3x/GHSA-c6pc-x7w4-jm3x.json @@ -7,12 +7,8 @@ "CVE-2020-9027" ], "details": "ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c743-639c-676m/GHSA-c743-639c-676m.json b/advisories/unreviewed/2022/05/GHSA-c743-639c-676m/GHSA-c743-639c-676m.json index b28a253a5ea..09ad50e91aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-c743-639c-676m/GHSA-c743-639c-676m.json +++ b/advisories/unreviewed/2022/05/GHSA-c743-639c-676m/GHSA-c743-639c-676m.json @@ -7,12 +7,8 @@ "CVE-2020-6184" ], "details": "Under certain conditions, ABAP Online Community in SAP NetWeaver (SAP_BASIS version 7.40) and SAP S/4HANA (SAP_BASIS versions 7.50, 7.51, 7.52, 7.53, 7.54), does not sufficiently encode user-controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c7rr-rw9g-m6r2/GHSA-c7rr-rw9g-m6r2.json b/advisories/unreviewed/2022/05/GHSA-c7rr-rw9g-m6r2/GHSA-c7rr-rw9g-m6r2.json index f698faf0cf0..c2dfcd1d7a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7rr-rw9g-m6r2/GHSA-c7rr-rw9g-m6r2.json +++ b/advisories/unreviewed/2022/05/GHSA-c7rr-rw9g-m6r2/GHSA-c7rr-rw9g-m6r2.json @@ -7,12 +7,8 @@ "CVE-2019-19989" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user without checking for user identity and authorization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c85x-hq3f-wfrq/GHSA-c85x-hq3f-wfrq.json b/advisories/unreviewed/2022/05/GHSA-c85x-hq3f-wfrq/GHSA-c85x-hq3f-wfrq.json index 364f23dec36..a40df79744b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c85x-hq3f-wfrq/GHSA-c85x-hq3f-wfrq.json +++ b/advisories/unreviewed/2022/05/GHSA-c85x-hq3f-wfrq/GHSA-c85x-hq3f-wfrq.json @@ -7,12 +7,8 @@ "CVE-2020-8861" ], "details": "This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of cookies. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9554.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8j4-f748-pvx6/GHSA-c8j4-f748-pvx6.json b/advisories/unreviewed/2022/05/GHSA-c8j4-f748-pvx6/GHSA-c8j4-f748-pvx6.json index e60c0fee523..aa5a126759d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8j4-f748-pvx6/GHSA-c8j4-f748-pvx6.json +++ b/advisories/unreviewed/2022/05/GHSA-c8j4-f748-pvx6/GHSA-c8j4-f748-pvx6.json @@ -7,12 +7,8 @@ "CVE-2020-5830" ], "details": "Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ccgr-hfcp-wj34/GHSA-ccgr-hfcp-wj34.json b/advisories/unreviewed/2022/05/GHSA-ccgr-hfcp-wj34/GHSA-ccgr-hfcp-wj34.json index b7ade10faf9..43c2b5fcc54 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccgr-hfcp-wj34/GHSA-ccgr-hfcp-wj34.json +++ b/advisories/unreviewed/2022/05/GHSA-ccgr-hfcp-wj34/GHSA-ccgr-hfcp-wj34.json @@ -7,12 +7,8 @@ "CVE-2019-6194" ], "details": "An XML External Entity (XXE) processing vulnerability was reported in Lenovo XClarity Administrator (LXCA) versions prior to 2.6.6 that could allow information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfph-9cg2-p9hf/GHSA-cfph-9cg2-p9hf.json b/advisories/unreviewed/2022/05/GHSA-cfph-9cg2-p9hf/GHSA-cfph-9cg2-p9hf.json index 7f57d10e0ab..0139bcc89da 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfph-9cg2-p9hf/GHSA-cfph-9cg2-p9hf.json +++ b/advisories/unreviewed/2022/05/GHSA-cfph-9cg2-p9hf/GHSA-cfph-9cg2-p9hf.json @@ -7,12 +7,8 @@ "CVE-2020-8855" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the fxhtml2pdf.exe module. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9560.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgc7-wrh2-gfjh/GHSA-cgc7-wrh2-gfjh.json b/advisories/unreviewed/2022/05/GHSA-cgc7-wrh2-gfjh/GHSA-cgc7-wrh2-gfjh.json index 0b1f894187b..54d4e721368 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgc7-wrh2-gfjh/GHSA-cgc7-wrh2-gfjh.json +++ b/advisories/unreviewed/2022/05/GHSA-cgc7-wrh2-gfjh/GHSA-cgc7-wrh2-gfjh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgvr-gqmc-qgvf/GHSA-cgvr-gqmc-qgvf.json b/advisories/unreviewed/2022/05/GHSA-cgvr-gqmc-qgvf/GHSA-cgvr-gqmc-qgvf.json index 842fb8ccee8..d224c87bad4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgvr-gqmc-qgvf/GHSA-cgvr-gqmc-qgvf.json +++ b/advisories/unreviewed/2022/05/GHSA-cgvr-gqmc-qgvf/GHSA-cgvr-gqmc-qgvf.json @@ -7,12 +7,8 @@ "CVE-2020-8850" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPEG2000 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9415.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chxg-v5fx-95h2/GHSA-chxg-v5fx-95h2.json b/advisories/unreviewed/2022/05/GHSA-chxg-v5fx-95h2/GHSA-chxg-v5fx-95h2.json index 794ec5c6bd5..87566f515ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-chxg-v5fx-95h2/GHSA-chxg-v5fx-95h2.json +++ b/advisories/unreviewed/2022/05/GHSA-chxg-v5fx-95h2/GHSA-chxg-v5fx-95h2.json @@ -7,12 +7,8 @@ "CVE-2020-3933" ], "details": "Secom Co. Dr.ID, a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cj2j-q546-99j2/GHSA-cj2j-q546-99j2.json b/advisories/unreviewed/2022/05/GHSA-cj2j-q546-99j2/GHSA-cj2j-q546-99j2.json index a80000957e1..44f91896ac7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj2j-q546-99j2/GHSA-cj2j-q546-99j2.json +++ b/advisories/unreviewed/2022/05/GHSA-cj2j-q546-99j2/GHSA-cj2j-q546-99j2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjhj-43w6-8wrx/GHSA-cjhj-43w6-8wrx.json b/advisories/unreviewed/2022/05/GHSA-cjhj-43w6-8wrx/GHSA-cjhj-43w6-8wrx.json index ae96743dae3..3ac77599d8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjhj-43w6-8wrx/GHSA-cjhj-43w6-8wrx.json +++ b/advisories/unreviewed/2022/05/GHSA-cjhj-43w6-8wrx/GHSA-cjhj-43w6-8wrx.json @@ -7,12 +7,8 @@ "CVE-2019-14652" ], "details": "explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjj9-qqr7-74qh/GHSA-cjj9-qqr7-74qh.json b/advisories/unreviewed/2022/05/GHSA-cjj9-qqr7-74qh/GHSA-cjj9-qqr7-74qh.json index 2519f805e9e..b043eb4fed4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjj9-qqr7-74qh/GHSA-cjj9-qqr7-74qh.json +++ b/advisories/unreviewed/2022/05/GHSA-cjj9-qqr7-74qh/GHSA-cjj9-qqr7-74qh.json @@ -7,12 +7,8 @@ "CVE-2020-5829" ], "details": "Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cp7m-qccx-qc2g/GHSA-cp7m-qccx-qc2g.json b/advisories/unreviewed/2022/05/GHSA-cp7m-qccx-qc2g/GHSA-cp7m-qccx-qc2g.json index b8cfcedd938..57ca0194c6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp7m-qccx-qc2g/GHSA-cp7m-qccx-qc2g.json +++ b/advisories/unreviewed/2022/05/GHSA-cp7m-qccx-qc2g/GHSA-cp7m-qccx-qc2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq3q-r72f-439p/GHSA-cq3q-r72f-439p.json b/advisories/unreviewed/2022/05/GHSA-cq3q-r72f-439p/GHSA-cq3q-r72f-439p.json index 0121150cf1e..fa92101459c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq3q-r72f-439p/GHSA-cq3q-r72f-439p.json +++ b/advisories/unreviewed/2022/05/GHSA-cq3q-r72f-439p/GHSA-cq3q-r72f-439p.json @@ -7,12 +7,8 @@ "CVE-2020-6973" ], "details": "Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cr2m-4x82-8gw2/GHSA-cr2m-4x82-8gw2.json b/advisories/unreviewed/2022/05/GHSA-cr2m-4x82-8gw2/GHSA-cr2m-4x82-8gw2.json index fa0cdc97e7b..412a73ab595 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr2m-4x82-8gw2/GHSA-cr2m-4x82-8gw2.json +++ b/advisories/unreviewed/2022/05/GHSA-cr2m-4x82-8gw2/GHSA-cr2m-4x82-8gw2.json @@ -7,12 +7,8 @@ "CVE-2019-12513" ], "details": "In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, by sending a DHCP discover request containing a malicious hostname field, an attacker may execute stored XSS attacks against this device. When the malicious DHCP request is received, the device will generate a log entry containing the malicious hostname. This log entry may then be viewed at Advanced settings->Administration->Logs to trigger the exploit. Although this value is inserted into a textarea tag, converted to all-caps, and limited in length, attacks are still possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cr52-r63c-m5wh/GHSA-cr52-r63c-m5wh.json b/advisories/unreviewed/2022/05/GHSA-cr52-r63c-m5wh/GHSA-cr52-r63c-m5wh.json index d57d644e82b..2bab2b65160 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr52-r63c-m5wh/GHSA-cr52-r63c-m5wh.json +++ b/advisories/unreviewed/2022/05/GHSA-cr52-r63c-m5wh/GHSA-cr52-r63c-m5wh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvw3-9vqh-r4q9/GHSA-cvw3-9vqh-r4q9.json b/advisories/unreviewed/2022/05/GHSA-cvw3-9vqh-r4q9/GHSA-cvw3-9vqh-r4q9.json index 31fb5e97339..399d99b5b11 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvw3-9vqh-r4q9/GHSA-cvw3-9vqh-r4q9.json +++ b/advisories/unreviewed/2022/05/GHSA-cvw3-9vqh-r4q9/GHSA-cvw3-9vqh-r4q9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cw54-pxxw-878x/GHSA-cw54-pxxw-878x.json b/advisories/unreviewed/2022/05/GHSA-cw54-pxxw-878x/GHSA-cw54-pxxw-878x.json index da061e7c481..233a4928419 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw54-pxxw-878x/GHSA-cw54-pxxw-878x.json +++ b/advisories/unreviewed/2022/05/GHSA-cw54-pxxw-878x/GHSA-cw54-pxxw-878x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cx85-qpwq-2q82/GHSA-cx85-qpwq-2q82.json b/advisories/unreviewed/2022/05/GHSA-cx85-qpwq-2q82/GHSA-cx85-qpwq-2q82.json index 0e4af026b53..d623e828df7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx85-qpwq-2q82/GHSA-cx85-qpwq-2q82.json +++ b/advisories/unreviewed/2022/05/GHSA-cx85-qpwq-2q82/GHSA-cx85-qpwq-2q82.json @@ -7,12 +7,8 @@ "CVE-2019-16298" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxxj-3g4f-v79g/GHSA-cxxj-3g4f-v79g.json b/advisories/unreviewed/2022/05/GHSA-cxxj-3g4f-v79g/GHSA-cxxj-3g4f-v79g.json index 39971c872a8..a5201b8e344 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxxj-3g4f-v79g/GHSA-cxxj-3g4f-v79g.json +++ b/advisories/unreviewed/2022/05/GHSA-cxxj-3g4f-v79g/GHSA-cxxj-3g4f-v79g.json @@ -7,12 +7,8 @@ "CVE-2020-8959" ], "details": "Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2fv-9wwx-88fh/GHSA-f2fv-9wwx-88fh.json b/advisories/unreviewed/2022/05/GHSA-f2fv-9wwx-88fh/GHSA-f2fv-9wwx-88fh.json index 312a4a2e21e..d76053fd37c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2fv-9wwx-88fh/GHSA-f2fv-9wwx-88fh.json +++ b/advisories/unreviewed/2022/05/GHSA-f2fv-9wwx-88fh/GHSA-f2fv-9wwx-88fh.json @@ -7,12 +7,8 @@ "CVE-2019-5613" ], "details": "In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2g3-jvxc-j7qc/GHSA-f2g3-jvxc-j7qc.json b/advisories/unreviewed/2022/05/GHSA-f2g3-jvxc-j7qc/GHSA-f2g3-jvxc-j7qc.json index 48e08afc5c1..51b5b37f527 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2g3-jvxc-j7qc/GHSA-f2g3-jvxc-j7qc.json +++ b/advisories/unreviewed/2022/05/GHSA-f2g3-jvxc-j7qc/GHSA-f2g3-jvxc-j7qc.json @@ -7,12 +7,8 @@ "CVE-2020-9394" ], "details": "An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. It allows CSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5pg-467w-p7f7/GHSA-f5pg-467w-p7f7.json b/advisories/unreviewed/2022/05/GHSA-f5pg-467w-p7f7/GHSA-f5pg-467w-p7f7.json index 205347286ea..daba87c328b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5pg-467w-p7f7/GHSA-f5pg-467w-p7f7.json +++ b/advisories/unreviewed/2022/05/GHSA-f5pg-467w-p7f7/GHSA-f5pg-467w-p7f7.json @@ -7,12 +7,8 @@ "CVE-2020-4135" ], "details": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to send specially crafted packets to cause a denial of service from excessive memory usage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f6v9-h9q5-53pg/GHSA-f6v9-h9q5-53pg.json b/advisories/unreviewed/2022/05/GHSA-f6v9-h9q5-53pg/GHSA-f6v9-h9q5-53pg.json index 89652cb8fb8..4872dc6ccee 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6v9-h9q5-53pg/GHSA-f6v9-h9q5-53pg.json +++ b/advisories/unreviewed/2022/05/GHSA-f6v9-h9q5-53pg/GHSA-f6v9-h9q5-53pg.json @@ -7,12 +7,8 @@ "CVE-2020-3748" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f76g-j63q-xwx8/GHSA-f76g-j63q-xwx8.json b/advisories/unreviewed/2022/05/GHSA-f76g-j63q-xwx8/GHSA-f76g-j63q-xwx8.json index bea78dea893..1ea1eb8808c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f76g-j63q-xwx8/GHSA-f76g-j63q-xwx8.json +++ b/advisories/unreviewed/2022/05/GHSA-f76g-j63q-xwx8/GHSA-f76g-j63q-xwx8.json @@ -7,12 +7,8 @@ "CVE-2020-3759" ], "details": "Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. Successful exploitation could lead to information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f77w-22mg-cg9g/GHSA-f77w-22mg-cg9g.json b/advisories/unreviewed/2022/05/GHSA-f77w-22mg-cg9g/GHSA-f77w-22mg-cg9g.json index b4e9fbc84f6..37a3996acd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-f77w-22mg-cg9g/GHSA-f77w-22mg-cg9g.json +++ b/advisories/unreviewed/2022/05/GHSA-f77w-22mg-cg9g/GHSA-f77w-22mg-cg9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f842-f48h-9639/GHSA-f842-f48h-9639.json b/advisories/unreviewed/2022/05/GHSA-f842-f48h-9639/GHSA-f842-f48h-9639.json index 517e52692ee..d341b03d461 100644 --- a/advisories/unreviewed/2022/05/GHSA-f842-f48h-9639/GHSA-f842-f48h-9639.json +++ b/advisories/unreviewed/2022/05/GHSA-f842-f48h-9639/GHSA-f842-f48h-9639.json @@ -7,12 +7,8 @@ "CVE-2020-9005" ], "details": "meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code execution or denial of service by creating a gaming server with a crafted map, and inviting a victim to this server. A GetValue call is mishandled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f87c-43qm-25hg/GHSA-f87c-43qm-25hg.json b/advisories/unreviewed/2022/05/GHSA-f87c-43qm-25hg/GHSA-f87c-43qm-25hg.json index 16cc3b023bb..832a0b40cc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-f87c-43qm-25hg/GHSA-f87c-43qm-25hg.json +++ b/advisories/unreviewed/2022/05/GHSA-f87c-43qm-25hg/GHSA-f87c-43qm-25hg.json @@ -7,12 +7,8 @@ "CVE-2020-9340" ], "details": "fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f89f-x4qh-9gfp/GHSA-f89f-x4qh-9gfp.json b/advisories/unreviewed/2022/05/GHSA-f89f-x4qh-9gfp/GHSA-f89f-x4qh-9gfp.json index 98c8aa2c40d..f33245623f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f89f-x4qh-9gfp/GHSA-f89f-x4qh-9gfp.json +++ b/advisories/unreviewed/2022/05/GHSA-f89f-x4qh-9gfp/GHSA-f89f-x4qh-9gfp.json @@ -7,12 +7,8 @@ "CVE-2020-3743" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8pw-hvh2-9x9f/GHSA-f8pw-hvh2-9x9f.json b/advisories/unreviewed/2022/05/GHSA-f8pw-hvh2-9x9f/GHSA-f8pw-hvh2-9x9f.json index 880c04871a7..f2cd289bdcc 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8pw-hvh2-9x9f/GHSA-f8pw-hvh2-9x9f.json +++ b/advisories/unreviewed/2022/05/GHSA-f8pw-hvh2-9x9f/GHSA-f8pw-hvh2-9x9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f94h-gmg7-c6gw/GHSA-f94h-gmg7-c6gw.json b/advisories/unreviewed/2022/05/GHSA-f94h-gmg7-c6gw/GHSA-f94h-gmg7-c6gw.json index db3279cdb37..0fcaf5d2527 100644 --- a/advisories/unreviewed/2022/05/GHSA-f94h-gmg7-c6gw/GHSA-f94h-gmg7-c6gw.json +++ b/advisories/unreviewed/2022/05/GHSA-f94h-gmg7-c6gw/GHSA-f94h-gmg7-c6gw.json @@ -7,12 +7,8 @@ "CVE-2019-18182" ], "details": "pacman before 5.2 is vulnerable to arbitrary command injection in conf.c in the download_with_xfercommand() function. This can be exploited when unsigned databases are used. To exploit the vulnerability, the user must enable a non-default XferCommand and retrieve an attacker-controlled crafted database and package.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc8q-rw6q-9xfh/GHSA-fc8q-rw6q-9xfh.json b/advisories/unreviewed/2022/05/GHSA-fc8q-rw6q-9xfh/GHSA-fc8q-rw6q-9xfh.json index d3c76314dc5..3ed552ab8c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc8q-rw6q-9xfh/GHSA-fc8q-rw6q-9xfh.json +++ b/advisories/unreviewed/2022/05/GHSA-fc8q-rw6q-9xfh/GHSA-fc8q-rw6q-9xfh.json @@ -7,12 +7,8 @@ "CVE-2020-0748" ], "details": "An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0755, CVE-2020-0756.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcj2-vhxh-rf9h/GHSA-fcj2-vhxh-rf9h.json b/advisories/unreviewed/2022/05/GHSA-fcj2-vhxh-rf9h/GHSA-fcj2-vhxh-rf9h.json index 790c06305a5..413cc291416 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcj2-vhxh-rf9h/GHSA-fcj2-vhxh-rf9h.json +++ b/advisories/unreviewed/2022/05/GHSA-fcj2-vhxh-rf9h/GHSA-fcj2-vhxh-rf9h.json @@ -7,12 +7,8 @@ "CVE-2020-9266" ], "details": "SOPlanning 1.45 is vulnerable to a CSRF attack that allows for arbitrary changing of the admin password via process/xajax_server.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcx3-q2fc-3hrw/GHSA-fcx3-q2fc-3hrw.json b/advisories/unreviewed/2022/05/GHSA-fcx3-q2fc-3hrw/GHSA-fcx3-q2fc-3hrw.json index cc77b0fbbce..fa3e9a6d158 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcx3-q2fc-3hrw/GHSA-fcx3-q2fc-3hrw.json +++ b/advisories/unreviewed/2022/05/GHSA-fcx3-q2fc-3hrw/GHSA-fcx3-q2fc-3hrw.json @@ -7,12 +7,8 @@ "CVE-2020-9366" ], "details": "A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcxv-v8cw-52px/GHSA-fcxv-v8cw-52px.json b/advisories/unreviewed/2022/05/GHSA-fcxv-v8cw-52px/GHSA-fcxv-v8cw-52px.json index 9b76db77f60..35dc8747d07 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcxv-v8cw-52px/GHSA-fcxv-v8cw-52px.json +++ b/advisories/unreviewed/2022/05/GHSA-fcxv-v8cw-52px/GHSA-fcxv-v8cw-52px.json @@ -7,12 +7,8 @@ "CVE-2019-17643" ], "details": "An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via an unauthenticated direct request for include/monitoring/recurrentDowntime/GetXMLHost4Services.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ff6j-m9jm-v653/GHSA-ff6j-m9jm-v653.json b/advisories/unreviewed/2022/05/GHSA-ff6j-m9jm-v653/GHSA-ff6j-m9jm-v653.json index 22013285d94..3d715c6aaac 100644 --- a/advisories/unreviewed/2022/05/GHSA-ff6j-m9jm-v653/GHSA-ff6j-m9jm-v653.json +++ b/advisories/unreviewed/2022/05/GHSA-ff6j-m9jm-v653/GHSA-ff6j-m9jm-v653.json @@ -7,12 +7,8 @@ "CVE-2019-18352" ], "details": "Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ffg9-hxvw-8899/GHSA-ffg9-hxvw-8899.json b/advisories/unreviewed/2022/05/GHSA-ffg9-hxvw-8899/GHSA-ffg9-hxvw-8899.json index 7d5b00d3edf..95388a8d6a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffg9-hxvw-8899/GHSA-ffg9-hxvw-8899.json +++ b/advisories/unreviewed/2022/05/GHSA-ffg9-hxvw-8899/GHSA-ffg9-hxvw-8899.json @@ -7,12 +7,8 @@ "CVE-2019-4640" ], "details": "IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffqg-m22j-5p83/GHSA-ffqg-m22j-5p83.json b/advisories/unreviewed/2022/05/GHSA-ffqg-m22j-5p83/GHSA-ffqg-m22j-5p83.json index 8ba9071afdb..e4384fb3750 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffqg-m22j-5p83/GHSA-ffqg-m22j-5p83.json +++ b/advisories/unreviewed/2022/05/GHSA-ffqg-m22j-5p83/GHSA-ffqg-m22j-5p83.json @@ -7,12 +7,8 @@ "CVE-2020-5531" ], "details": "Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fj94-48jv-pg96/GHSA-fj94-48jv-pg96.json b/advisories/unreviewed/2022/05/GHSA-fj94-48jv-pg96/GHSA-fj94-48jv-pg96.json index a455b353776..685b33ab1e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj94-48jv-pg96/GHSA-fj94-48jv-pg96.json +++ b/advisories/unreviewed/2022/05/GHSA-fj94-48jv-pg96/GHSA-fj94-48jv-pg96.json @@ -7,12 +7,8 @@ "CVE-2020-9350" ], "details": "Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjhf-r69q-mp58/GHSA-fjhf-r69q-mp58.json b/advisories/unreviewed/2022/05/GHSA-fjhf-r69q-mp58/GHSA-fjhf-r69q-mp58.json index 7e17e57ea3c..47da7ef314b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjhf-r69q-mp58/GHSA-fjhf-r69q-mp58.json +++ b/advisories/unreviewed/2022/05/GHSA-fjhf-r69q-mp58/GHSA-fjhf-r69q-mp58.json @@ -7,12 +7,8 @@ "CVE-2020-8852" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPEG2000 files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-9416.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjq9-2cmr-75cm/GHSA-fjq9-2cmr-75cm.json b/advisories/unreviewed/2022/05/GHSA-fjq9-2cmr-75cm/GHSA-fjq9-2cmr-75cm.json index bc297e2aff3..bbe21db6de7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjq9-2cmr-75cm/GHSA-fjq9-2cmr-75cm.json +++ b/advisories/unreviewed/2022/05/GHSA-fjq9-2cmr-75cm/GHSA-fjq9-2cmr-75cm.json @@ -7,12 +7,8 @@ "CVE-2018-16994" ], "details": "An issue was discovered on PHOENIX CONTACT AXL F BK PN <=1.0.4, AXL F BK ETH <= 1.12, and AXL F BK ETH XC <= 1.11 devices. Incorrect handling of a request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. Authentication of the request is not required.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmgv-rqvg-5pqf/GHSA-fmgv-rqvg-5pqf.json b/advisories/unreviewed/2022/05/GHSA-fmgv-rqvg-5pqf/GHSA-fmgv-rqvg-5pqf.json index da446ea8135..b2e64efdbd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmgv-rqvg-5pqf/GHSA-fmgv-rqvg-5pqf.json +++ b/advisories/unreviewed/2022/05/GHSA-fmgv-rqvg-5pqf/GHSA-fmgv-rqvg-5pqf.json @@ -7,12 +7,8 @@ "CVE-2020-10057" ], "details": "GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This issue exists because of an incomplete fix for CVE-2015-2680, in which \"token\" is used as a CSRF protection mechanism, but without validation that \"token\" is associated with an administrative user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq48-7x6v-77vv/GHSA-fq48-7x6v-77vv.json b/advisories/unreviewed/2022/05/GHSA-fq48-7x6v-77vv/GHSA-fq48-7x6v-77vv.json index 9bcfe2ada18..ffa89ba3ddc 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq48-7x6v-77vv/GHSA-fq48-7x6v-77vv.json +++ b/advisories/unreviewed/2022/05/GHSA-fq48-7x6v-77vv/GHSA-fq48-7x6v-77vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqgj-5pph-hqh3/GHSA-fqgj-5pph-hqh3.json b/advisories/unreviewed/2022/05/GHSA-fqgj-5pph-hqh3/GHSA-fqgj-5pph-hqh3.json index 2cbb45b5cfc..99e12def577 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqgj-5pph-hqh3/GHSA-fqgj-5pph-hqh3.json +++ b/advisories/unreviewed/2022/05/GHSA-fqgj-5pph-hqh3/GHSA-fqgj-5pph-hqh3.json @@ -7,12 +7,8 @@ "CVE-2020-4197" ], "details": "IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174908.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqh4-x256-62fm/GHSA-fqh4-x256-62fm.json b/advisories/unreviewed/2022/05/GHSA-fqh4-x256-62fm/GHSA-fqh4-x256-62fm.json index b12b630d2f8..745b4fe1ca2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqh4-x256-62fm/GHSA-fqh4-x256-62fm.json +++ b/advisories/unreviewed/2022/05/GHSA-fqh4-x256-62fm/GHSA-fqh4-x256-62fm.json @@ -7,12 +7,8 @@ "CVE-2019-18846" ], "details": "OX App Suite through 7.10.2 allows SSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr6x-3vx5-3qj2/GHSA-fr6x-3vx5-3qj2.json b/advisories/unreviewed/2022/05/GHSA-fr6x-3vx5-3qj2/GHSA-fr6x-3vx5-3qj2.json index 491cb4ca205..3c17950f7d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr6x-3vx5-3qj2/GHSA-fr6x-3vx5-3qj2.json +++ b/advisories/unreviewed/2022/05/GHSA-fr6x-3vx5-3qj2/GHSA-fr6x-3vx5-3qj2.json @@ -7,12 +7,8 @@ "CVE-2020-8949" ], "details": "Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary OS commands via shell metacharacters in a ping operation, as demonstrated by the cgi-bin/webui/admin/tools/app_ping/diag_ping/; substring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fw82-qm5f-g359/GHSA-fw82-qm5f-g359.json b/advisories/unreviewed/2022/05/GHSA-fw82-qm5f-g359/GHSA-fw82-qm5f-g359.json index cf55cf9c6fa..cd2f0cb8a2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw82-qm5f-g359/GHSA-fw82-qm5f-g359.json +++ b/advisories/unreviewed/2022/05/GHSA-fw82-qm5f-g359/GHSA-fw82-qm5f-g359.json @@ -7,12 +7,8 @@ "CVE-2019-16297" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fx9c-gghh-f7ww/GHSA-fx9c-gghh-f7ww.json b/advisories/unreviewed/2022/05/GHSA-fx9c-gghh-f7ww/GHSA-fx9c-gghh-f7ww.json index a6d3604c175..ac08339c4de 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx9c-gghh-f7ww/GHSA-fx9c-gghh-f7ww.json +++ b/advisories/unreviewed/2022/05/GHSA-fx9c-gghh-f7ww/GHSA-fx9c-gghh-f7ww.json @@ -7,12 +7,8 @@ "CVE-2020-8803" ], "details": "SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g292-5fg6-fchh/GHSA-g292-5fg6-fchh.json b/advisories/unreviewed/2022/05/GHSA-g292-5fg6-fchh/GHSA-g292-5fg6-fchh.json index 9bc16e343f1..831d68b1161 100644 --- a/advisories/unreviewed/2022/05/GHSA-g292-5fg6-fchh/GHSA-g292-5fg6-fchh.json +++ b/advisories/unreviewed/2022/05/GHSA-g292-5fg6-fchh/GHSA-g292-5fg6-fchh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -95,9 +93,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3r9-j55g-jg8j/GHSA-g3r9-j55g-jg8j.json b/advisories/unreviewed/2022/05/GHSA-g3r9-j55g-jg8j/GHSA-g3r9-j55g-jg8j.json index 5c8212d6420..e446891276d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3r9-j55g-jg8j/GHSA-g3r9-j55g-jg8j.json +++ b/advisories/unreviewed/2022/05/GHSA-g3r9-j55g-jg8j/GHSA-g3r9-j55g-jg8j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3w4-c7gj-jc69/GHSA-g3w4-c7gj-jc69.json b/advisories/unreviewed/2022/05/GHSA-g3w4-c7gj-jc69/GHSA-g3w4-c7gj-jc69.json index 63636a6da29..86287ecbe33 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3w4-c7gj-jc69/GHSA-g3w4-c7gj-jc69.json +++ b/advisories/unreviewed/2022/05/GHSA-g3w4-c7gj-jc69/GHSA-g3w4-c7gj-jc69.json @@ -7,12 +7,8 @@ "CVE-2020-8011" ], "details": "CA Unified Infrastructure Management (Nimsoft/UIM) 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash the Controller service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g42v-6w5w-rwfh/GHSA-g42v-6w5w-rwfh.json b/advisories/unreviewed/2022/05/GHSA-g42v-6w5w-rwfh/GHSA-g42v-6w5w-rwfh.json index 66ad824643f..4fab5fb7703 100644 --- a/advisories/unreviewed/2022/05/GHSA-g42v-6w5w-rwfh/GHSA-g42v-6w5w-rwfh.json +++ b/advisories/unreviewed/2022/05/GHSA-g42v-6w5w-rwfh/GHSA-g42v-6w5w-rwfh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g6ff-gpgf-hp75/GHSA-g6ff-gpgf-hp75.json b/advisories/unreviewed/2022/05/GHSA-g6ff-gpgf-hp75/GHSA-g6ff-gpgf-hp75.json index b965be54851..af14502dee8 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6ff-gpgf-hp75/GHSA-g6ff-gpgf-hp75.json +++ b/advisories/unreviewed/2022/05/GHSA-g6ff-gpgf-hp75/GHSA-g6ff-gpgf-hp75.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7r6-6487-7hm5/GHSA-g7r6-6487-7hm5.json b/advisories/unreviewed/2022/05/GHSA-g7r6-6487-7hm5/GHSA-g7r6-6487-7hm5.json index 27ba94bc931..043b29c8ee7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7r6-6487-7hm5/GHSA-g7r6-6487-7hm5.json +++ b/advisories/unreviewed/2022/05/GHSA-g7r6-6487-7hm5/GHSA-g7r6-6487-7hm5.json @@ -7,12 +7,8 @@ "CVE-2019-4741" ], "details": "IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g7xc-58w4-v854/GHSA-g7xc-58w4-v854.json b/advisories/unreviewed/2022/05/GHSA-g7xc-58w4-v854/GHSA-g7xc-58w4-v854.json index e6dbf6e6753..22fe8218861 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7xc-58w4-v854/GHSA-g7xc-58w4-v854.json +++ b/advisories/unreviewed/2022/05/GHSA-g7xc-58w4-v854/GHSA-g7xc-58w4-v854.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7xx-c9x7-78fj/GHSA-g7xx-c9x7-78fj.json b/advisories/unreviewed/2022/05/GHSA-g7xx-c9x7-78fj/GHSA-g7xx-c9x7-78fj.json index 542e0db4e53..8d8fbeee38f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7xx-c9x7-78fj/GHSA-g7xx-c9x7-78fj.json +++ b/advisories/unreviewed/2022/05/GHSA-g7xx-c9x7-78fj/GHSA-g7xx-c9x7-78fj.json @@ -7,12 +7,8 @@ "CVE-2019-14688" ], "details": "Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8pv-3wx7-2cq4/GHSA-g8pv-3wx7-2cq4.json b/advisories/unreviewed/2022/05/GHSA-g8pv-3wx7-2cq4/GHSA-g8pv-3wx7-2cq4.json index 5b61a541c84..2af44d05a37 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8pv-3wx7-2cq4/GHSA-g8pv-3wx7-2cq4.json +++ b/advisories/unreviewed/2022/05/GHSA-g8pv-3wx7-2cq4/GHSA-g8pv-3wx7-2cq4.json @@ -7,12 +7,8 @@ "CVE-2020-4161" ], "details": "IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a denial of service due to incorrect handling of certain commands. IBM X-Force ID: 174341.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8q4-vx2r-28r6/GHSA-g8q4-vx2r-28r6.json b/advisories/unreviewed/2022/05/GHSA-g8q4-vx2r-28r6/GHSA-g8q4-vx2r-28r6.json index 6d98bac969d..8d7b1427ab7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8q4-vx2r-28r6/GHSA-g8q4-vx2r-28r6.json +++ b/advisories/unreviewed/2022/05/GHSA-g8q4-vx2r-28r6/GHSA-g8q4-vx2r-28r6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gc67-c7w8-76pc/GHSA-gc67-c7w8-76pc.json b/advisories/unreviewed/2022/05/GHSA-gc67-c7w8-76pc/GHSA-gc67-c7w8-76pc.json index 60a75fa3fe0..644287e1923 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc67-c7w8-76pc/GHSA-gc67-c7w8-76pc.json +++ b/advisories/unreviewed/2022/05/GHSA-gc67-c7w8-76pc/GHSA-gc67-c7w8-76pc.json @@ -7,12 +7,8 @@ "CVE-2019-6190" ], "details": "Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcm9-2h5w-j7x9/GHSA-gcm9-2h5w-j7x9.json b/advisories/unreviewed/2022/05/GHSA-gcm9-2h5w-j7x9/GHSA-gcm9-2h5w-j7x9.json index f7a352d8588..efabb7ea14c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcm9-2h5w-j7x9/GHSA-gcm9-2h5w-j7x9.json +++ b/advisories/unreviewed/2022/05/GHSA-gcm9-2h5w-j7x9/GHSA-gcm9-2h5w-j7x9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcw6-hgr2-5922/GHSA-gcw6-hgr2-5922.json b/advisories/unreviewed/2022/05/GHSA-gcw6-hgr2-5922/GHSA-gcw6-hgr2-5922.json index 42f0250607d..baf7806764f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcw6-hgr2-5922/GHSA-gcw6-hgr2-5922.json +++ b/advisories/unreviewed/2022/05/GHSA-gcw6-hgr2-5922/GHSA-gcw6-hgr2-5922.json @@ -7,12 +7,8 @@ "CVE-2020-9031" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to daemonlog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf9h-xgqf-wjrr/GHSA-gf9h-xgqf-wjrr.json b/advisories/unreviewed/2022/05/GHSA-gf9h-xgqf-wjrr/GHSA-gf9h-xgqf-wjrr.json index 20863889ecf..2671858fdb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf9h-xgqf-wjrr/GHSA-gf9h-xgqf-wjrr.json +++ b/advisories/unreviewed/2022/05/GHSA-gf9h-xgqf-wjrr/GHSA-gf9h-xgqf-wjrr.json @@ -7,12 +7,8 @@ "CVE-2020-8988" ], "details": "The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers (after using root access to make a copy of the local database) to discover login credentials and voting history via an offline brute-force approach.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg4q-f7gv-2qww/GHSA-gg4q-f7gv-2qww.json b/advisories/unreviewed/2022/05/GHSA-gg4q-f7gv-2qww/GHSA-gg4q-f7gv-2qww.json index 56be2209da6..adefe0252dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg4q-f7gv-2qww/GHSA-gg4q-f7gv-2qww.json +++ b/advisories/unreviewed/2022/05/GHSA-gg4q-f7gv-2qww/GHSA-gg4q-f7gv-2qww.json @@ -7,12 +7,8 @@ "CVE-2019-13967" ], "details": "iTop 2.2.0 through 2.6.0 allows remote attackers to cause a denial of service (application outage) via many requests to launch a compile operation. The requests use the pages/exec.php?exec_env=production&exec_module=itop-hub-connector&exec_page=ajax.php&operation=compile URI. This only affects the community version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gghj-9rfx-j4r7/GHSA-gghj-9rfx-j4r7.json b/advisories/unreviewed/2022/05/GHSA-gghj-9rfx-j4r7/GHSA-gghj-9rfx-j4r7.json index 4cbd9930c23..4b431931e38 100644 --- a/advisories/unreviewed/2022/05/GHSA-gghj-9rfx-j4r7/GHSA-gghj-9rfx-j4r7.json +++ b/advisories/unreviewed/2022/05/GHSA-gghj-9rfx-j4r7/GHSA-gghj-9rfx-j4r7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggpf-8579-4r92/GHSA-ggpf-8579-4r92.json b/advisories/unreviewed/2022/05/GHSA-ggpf-8579-4r92/GHSA-ggpf-8579-4r92.json index e3b4f3f3012..b31fad5959d 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggpf-8579-4r92/GHSA-ggpf-8579-4r92.json +++ b/advisories/unreviewed/2022/05/GHSA-ggpf-8579-4r92/GHSA-ggpf-8579-4r92.json @@ -7,12 +7,8 @@ "CVE-2020-3165" ], "details": "A vulnerability in the implementation of Border Gateway Protocol (BGP) Message Digest 5 (MD5) authentication in Cisco NX-OS Software could allow an unauthenticated, remote attacker to bypass MD5 authentication and establish a BGP connection with the device. The vulnerability occurs because the BGP MD5 authentication is bypassed if the peer does not have MD5 authentication configured, the NX-OS device does have BGP MD5 authentication configured, and the NX-OS BGP virtual routing and forwarding (VRF) name is configured to be greater than 19 characters. An attacker could exploit this vulnerability by attempting to establish a BGP session with the NX-OS peer. A successful exploit could allow the attacker to establish a BGP session with the NX-OS device without MD5 authentication. The Cisco implementation of the BGP protocol accepts incoming BGP traffic only from explicitly configured peers. To exploit this vulnerability, an attacker must send the malicious packets over a TCP connection that appears to come from a trusted BGP peer. To do so, the attacker must obtain information about the BGP peers in the affected system’s trusted network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggq3-wm6p-j59q/GHSA-ggq3-wm6p-j59q.json b/advisories/unreviewed/2022/05/GHSA-ggq3-wm6p-j59q/GHSA-ggq3-wm6p-j59q.json index 397f5d886ba..6a42fdc0cc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggq3-wm6p-j59q/GHSA-ggq3-wm6p-j59q.json +++ b/advisories/unreviewed/2022/05/GHSA-ggq3-wm6p-j59q/GHSA-ggq3-wm6p-j59q.json @@ -7,12 +7,8 @@ "CVE-2020-3875" ], "details": "A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ghrj-cc5f-5vjq/GHSA-ghrj-cc5f-5vjq.json b/advisories/unreviewed/2022/05/GHSA-ghrj-cc5f-5vjq/GHSA-ghrj-cc5f-5vjq.json index 89636bd2cb9..ce59c9e9077 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghrj-cc5f-5vjq/GHSA-ghrj-cc5f-5vjq.json +++ b/advisories/unreviewed/2022/05/GHSA-ghrj-cc5f-5vjq/GHSA-ghrj-cc5f-5vjq.json @@ -7,12 +7,8 @@ "CVE-2019-19865" ], "details": "Atos Unify OpenScape UC Web Client 1.0 allows XSS. An attacker could exploit this by convincing an authenticated user to inject arbitrary JavaScript code in the Profile Name field. A browser would execute this stored XSS payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gmvq-p9xp-93v3/GHSA-gmvq-p9xp-93v3.json b/advisories/unreviewed/2022/05/GHSA-gmvq-p9xp-93v3/GHSA-gmvq-p9xp-93v3.json index 5a8aa0ef482..4ecb267692b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmvq-p9xp-93v3/GHSA-gmvq-p9xp-93v3.json +++ b/advisories/unreviewed/2022/05/GHSA-gmvq-p9xp-93v3/GHSA-gmvq-p9xp-93v3.json @@ -7,12 +7,8 @@ "CVE-2019-4726" ], "details": "IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 172363.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gpf5-7vrh-q24p/GHSA-gpf5-7vrh-q24p.json b/advisories/unreviewed/2022/05/GHSA-gpf5-7vrh-q24p/GHSA-gpf5-7vrh-q24p.json index 4b8376f83de..3f9665b4184 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpf5-7vrh-q24p/GHSA-gpf5-7vrh-q24p.json +++ b/advisories/unreviewed/2022/05/GHSA-gpf5-7vrh-q24p/GHSA-gpf5-7vrh-q24p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq63-j356-8hj4/GHSA-gq63-j356-8hj4.json b/advisories/unreviewed/2022/05/GHSA-gq63-j356-8hj4/GHSA-gq63-j356-8hj4.json index 7e9278cf5b9..9725e16016c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq63-j356-8hj4/GHSA-gq63-j356-8hj4.json +++ b/advisories/unreviewed/2022/05/GHSA-gq63-j356-8hj4/GHSA-gq63-j356-8hj4.json @@ -7,12 +7,8 @@ "CVE-2020-1857" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authenticated attacker can exploit this vulnerability through a series of operations. Successful exploitation may cause information leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqxg-xxxj-j4x4/GHSA-gqxg-xxxj-j4x4.json b/advisories/unreviewed/2022/05/GHSA-gqxg-xxxj-j4x4/GHSA-gqxg-xxxj-j4x4.json index 30ae884d704..71b16b68c28 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqxg-xxxj-j4x4/GHSA-gqxg-xxxj-j4x4.json +++ b/advisories/unreviewed/2022/05/GHSA-gqxg-xxxj-j4x4/GHSA-gqxg-xxxj-j4x4.json @@ -7,12 +7,8 @@ "CVE-2020-3728" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gv23-pf6p-p973/GHSA-gv23-pf6p-p973.json b/advisories/unreviewed/2022/05/GHSA-gv23-pf6p-p973/GHSA-gv23-pf6p-p973.json index 224b97229b6..4ccec1fd881 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv23-pf6p-p973/GHSA-gv23-pf6p-p973.json +++ b/advisories/unreviewed/2022/05/GHSA-gv23-pf6p-p973/GHSA-gv23-pf6p-p973.json @@ -7,12 +7,8 @@ "CVE-2020-6844" ], "details": "In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gv24-vhxm-xr5j/GHSA-gv24-vhxm-xr5j.json b/advisories/unreviewed/2022/05/GHSA-gv24-vhxm-xr5j/GHSA-gv24-vhxm-xr5j.json index f89e2877a14..78835ce916a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv24-vhxm-xr5j/GHSA-gv24-vhxm-xr5j.json +++ b/advisories/unreviewed/2022/05/GHSA-gv24-vhxm-xr5j/GHSA-gv24-vhxm-xr5j.json @@ -7,12 +7,8 @@ "CVE-2019-19757" ], "details": "An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered a Document Object Model (DOM) based cross-site scripting vulnerability in versions prior to 2.6.6 that could allow JavaScript code to be executed in the user's web browser if a specially crafted link is visited. The JavaScript code is executed on the user's system, not executed on LXCA itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvmv-7rg8-v686/GHSA-gvmv-7rg8-v686.json b/advisories/unreviewed/2022/05/GHSA-gvmv-7rg8-v686/GHSA-gvmv-7rg8-v686.json index ba4e665539a..19f47621f57 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvmv-7rg8-v686/GHSA-gvmv-7rg8-v686.json +++ b/advisories/unreviewed/2022/05/GHSA-gvmv-7rg8-v686/GHSA-gvmv-7rg8-v686.json @@ -7,12 +7,8 @@ "CVE-2020-1814" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability. An authenticated attacker may do some special operations in the affected products in some special scenarios to exploit the vulnerability. Due to improper race conditions of different operations, successful exploit will lead to Dangling pointer dereference, causing some service abnormal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvvc-pv9r-rg5q/GHSA-gvvc-pv9r-rg5q.json b/advisories/unreviewed/2022/05/GHSA-gvvc-pv9r-rg5q/GHSA-gvvc-pv9r-rg5q.json index 3efe3029038..13056201a04 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvvc-pv9r-rg5q/GHSA-gvvc-pv9r-rg5q.json +++ b/advisories/unreviewed/2022/05/GHSA-gvvc-pv9r-rg5q/GHSA-gvvc-pv9r-rg5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx6x-fhpp-hw29/GHSA-gx6x-fhpp-hw29.json b/advisories/unreviewed/2022/05/GHSA-gx6x-fhpp-hw29/GHSA-gx6x-fhpp-hw29.json index ab8c6519e35..064486a311b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx6x-fhpp-hw29/GHSA-gx6x-fhpp-hw29.json +++ b/advisories/unreviewed/2022/05/GHSA-gx6x-fhpp-hw29/GHSA-gx6x-fhpp-hw29.json @@ -7,12 +7,8 @@ "CVE-2020-3866" ], "details": "This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2fw-qh29-9jv7/GHSA-h2fw-qh29-9jv7.json b/advisories/unreviewed/2022/05/GHSA-h2fw-qh29-9jv7/GHSA-h2fw-qh29-9jv7.json index 63773a24877..118dd447125 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2fw-qh29-9jv7/GHSA-h2fw-qh29-9jv7.json +++ b/advisories/unreviewed/2022/05/GHSA-h2fw-qh29-9jv7/GHSA-h2fw-qh29-9jv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h34j-f5r2-pcx7/GHSA-h34j-f5r2-pcx7.json b/advisories/unreviewed/2022/05/GHSA-h34j-f5r2-pcx7/GHSA-h34j-f5r2-pcx7.json index a81e6ef9ac9..44b68169622 100644 --- a/advisories/unreviewed/2022/05/GHSA-h34j-f5r2-pcx7/GHSA-h34j-f5r2-pcx7.json +++ b/advisories/unreviewed/2022/05/GHSA-h34j-f5r2-pcx7/GHSA-h34j-f5r2-pcx7.json @@ -7,12 +7,8 @@ "CVE-2019-20474" ], "details": "An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role (read-only access) to use and abuse it. One of the abuses allows performing network and port scan operations of the localhost or the hosts on the same network segment, aka SSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3cp-w4mh-hq4h/GHSA-h3cp-w4mh-hq4h.json b/advisories/unreviewed/2022/05/GHSA-h3cp-w4mh-hq4h/GHSA-h3cp-w4mh-hq4h.json index 0b3e0662ec9..c8f51d3907f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3cp-w4mh-hq4h/GHSA-h3cp-w4mh-hq4h.json +++ b/advisories/unreviewed/2022/05/GHSA-h3cp-w4mh-hq4h/GHSA-h3cp-w4mh-hq4h.json @@ -7,12 +7,8 @@ "CVE-2020-5324" ], "details": "Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h6jw-qxf7-j32c/GHSA-h6jw-qxf7-j32c.json b/advisories/unreviewed/2022/05/GHSA-h6jw-qxf7-j32c/GHSA-h6jw-qxf7-j32c.json index dc6cd86322f..9bea2be6f8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6jw-qxf7-j32c/GHSA-h6jw-qxf7-j32c.json +++ b/advisories/unreviewed/2022/05/GHSA-h6jw-qxf7-j32c/GHSA-h6jw-qxf7-j32c.json @@ -7,12 +7,8 @@ "CVE-2020-7208" ], "details": "LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9q8-53pc-hhxf/GHSA-h9q8-53pc-hhxf.json b/advisories/unreviewed/2022/05/GHSA-h9q8-53pc-hhxf/GHSA-h9q8-53pc-hhxf.json index 35adf6e98f0..17e17e19cb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9q8-53pc-hhxf/GHSA-h9q8-53pc-hhxf.json +++ b/advisories/unreviewed/2022/05/GHSA-h9q8-53pc-hhxf/GHSA-h9q8-53pc-hhxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc5v-wjvp-fwvr/GHSA-hc5v-wjvp-fwvr.json b/advisories/unreviewed/2022/05/GHSA-hc5v-wjvp-fwvr/GHSA-hc5v-wjvp-fwvr.json index 2f959b4609d..7e508987c86 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc5v-wjvp-fwvr/GHSA-hc5v-wjvp-fwvr.json +++ b/advisories/unreviewed/2022/05/GHSA-hc5v-wjvp-fwvr/GHSA-hc5v-wjvp-fwvr.json @@ -7,12 +7,8 @@ "CVE-2020-3732" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hc8h-w648-573p/GHSA-hc8h-w648-573p.json b/advisories/unreviewed/2022/05/GHSA-hc8h-w648-573p/GHSA-hc8h-w648-573p.json index 0a2f7851abd..79d571a1e84 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc8h-w648-573p/GHSA-hc8h-w648-573p.json +++ b/advisories/unreviewed/2022/05/GHSA-hc8h-w648-573p/GHSA-hc8h-w648-573p.json @@ -7,12 +7,8 @@ "CVE-2020-1888" ], "details": "Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcfg-mxgg-w8v8/GHSA-hcfg-mxgg-w8v8.json b/advisories/unreviewed/2022/05/GHSA-hcfg-mxgg-w8v8/GHSA-hcfg-mxgg-w8v8.json index baaa328e5e4..94b998a3673 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcfg-mxgg-w8v8/GHSA-hcfg-mxgg-w8v8.json +++ b/advisories/unreviewed/2022/05/GHSA-hcfg-mxgg-w8v8/GHSA-hcfg-mxgg-w8v8.json @@ -7,12 +7,8 @@ "CVE-2020-0736" ], "details": "An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcm2-338g-vfjg/GHSA-hcm2-338g-vfjg.json b/advisories/unreviewed/2022/05/GHSA-hcm2-338g-vfjg/GHSA-hcm2-338g-vfjg.json index ae996808e0d..7ca8edf0702 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcm2-338g-vfjg/GHSA-hcm2-338g-vfjg.json +++ b/advisories/unreviewed/2022/05/GHSA-hcm2-338g-vfjg/GHSA-hcm2-338g-vfjg.json @@ -7,12 +7,8 @@ "CVE-2019-17274" ], "details": "NetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x prior to 13.1P1 were shipped with a default account enabled that could allow unauthorized arbitrary command execution via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfq3-jj47-22qg/GHSA-hfq3-jj47-22qg.json b/advisories/unreviewed/2022/05/GHSA-hfq3-jj47-22qg/GHSA-hfq3-jj47-22qg.json index 77c5a9fdc13..3d9a308889a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfq3-jj47-22qg/GHSA-hfq3-jj47-22qg.json +++ b/advisories/unreviewed/2022/05/GHSA-hfq3-jj47-22qg/GHSA-hfq3-jj47-22qg.json @@ -7,12 +7,8 @@ "CVE-2020-8611" ], "details": "In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database via the REST API. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hh56-wcx8-mr6r/GHSA-hh56-wcx8-mr6r.json b/advisories/unreviewed/2022/05/GHSA-hh56-wcx8-mr6r/GHSA-hh56-wcx8-mr6r.json index 8c6106d36d9..c76a5caf262 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh56-wcx8-mr6r/GHSA-hh56-wcx8-mr6r.json +++ b/advisories/unreviewed/2022/05/GHSA-hh56-wcx8-mr6r/GHSA-hh56-wcx8-mr6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhjr-6r38-mjch/GHSA-hhjr-6r38-mjch.json b/advisories/unreviewed/2022/05/GHSA-hhjr-6r38-mjch/GHSA-hhjr-6r38-mjch.json index 6e78a06443a..118183fd07a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhjr-6r38-mjch/GHSA-hhjr-6r38-mjch.json +++ b/advisories/unreviewed/2022/05/GHSA-hhjr-6r38-mjch/GHSA-hhjr-6r38-mjch.json @@ -7,12 +7,8 @@ "CVE-2019-19792" ], "details": "A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hj2v-r6vv-m6mj/GHSA-hj2v-r6vv-m6mj.json b/advisories/unreviewed/2022/05/GHSA-hj2v-r6vv-m6mj/GHSA-hj2v-r6vv-m6mj.json index 801bd0939c7..8838d8e3741 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj2v-r6vv-m6mj/GHSA-hj2v-r6vv-m6mj.json +++ b/advisories/unreviewed/2022/05/GHSA-hj2v-r6vv-m6mj/GHSA-hj2v-r6vv-m6mj.json @@ -7,12 +7,8 @@ "CVE-2015-1425" ], "details": "JAKWEB Gecko CMS has Multiple Input Validation Vulnerabilities", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjg7-m3h5-gp6v/GHSA-hjg7-m3h5-gp6v.json b/advisories/unreviewed/2022/05/GHSA-hjg7-m3h5-gp6v/GHSA-hjg7-m3h5-gp6v.json index d88ca55f265..3411204e33e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjg7-m3h5-gp6v/GHSA-hjg7-m3h5-gp6v.json +++ b/advisories/unreviewed/2022/05/GHSA-hjg7-m3h5-gp6v/GHSA-hjg7-m3h5-gp6v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjmp-9h2r-483q/GHSA-hjmp-9h2r-483q.json b/advisories/unreviewed/2022/05/GHSA-hjmp-9h2r-483q/GHSA-hjmp-9h2r-483q.json index b9d3b509100..11ff03dcd14 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjmp-9h2r-483q/GHSA-hjmp-9h2r-483q.json +++ b/advisories/unreviewed/2022/05/GHSA-hjmp-9h2r-483q/GHSA-hjmp-9h2r-483q.json @@ -7,12 +7,8 @@ "CVE-2020-1830" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This causes 1 byte out-of-bound read, compromising normal service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmh4-r5p6-2v44/GHSA-hmh4-r5p6-2v44.json b/advisories/unreviewed/2022/05/GHSA-hmh4-r5p6-2v44/GHSA-hmh4-r5p6-2v44.json index 309afa3af94..3c863a34d63 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmh4-r5p6-2v44/GHSA-hmh4-r5p6-2v44.json +++ b/advisories/unreviewed/2022/05/GHSA-hmh4-r5p6-2v44/GHSA-hmh4-r5p6-2v44.json @@ -7,12 +7,8 @@ "CVE-2020-9021" ], "details": "Post Oak AWAM Bluetooth Field Device 7400v2.08.21.2018, 7800SD.2015.1.16, 2011.3, 7400v2.02.01.2019, and 7800SD.2012.12.5 is vulnerable to injections of operating system commands through timeconfig.py via shell metacharacters in the htmlNtpServer parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmjr-69rr-r925/GHSA-hmjr-69rr-r925.json b/advisories/unreviewed/2022/05/GHSA-hmjr-69rr-r925/GHSA-hmjr-69rr-r925.json index a8b2cead38e..02c32d95351 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmjr-69rr-r925/GHSA-hmjr-69rr-r925.json +++ b/advisories/unreviewed/2022/05/GHSA-hmjr-69rr-r925/GHSA-hmjr-69rr-r925.json @@ -7,12 +7,8 @@ "CVE-2020-3945" ], "details": "vRealize Operations for Horizon Adapter (6.7.x prior to 6.7.1 and 6.6.x prior to 6.6.1) contains an information disclosure vulnerability due to incorrect pairing implementation between the vRealize Operations for Horizon Adapter and Horizon View. An unauthenticated remote attacker who has network access to vRealize Operations, with the Horizon Adapter running, may obtain sensitive information", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmw3-c3g9-px9f/GHSA-hmw3-c3g9-px9f.json b/advisories/unreviewed/2022/05/GHSA-hmw3-c3g9-px9f/GHSA-hmw3-c3g9-px9f.json index cba76f0b369..cb9e2ae7bec 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmw3-c3g9-px9f/GHSA-hmw3-c3g9-px9f.json +++ b/advisories/unreviewed/2022/05/GHSA-hmw3-c3g9-px9f/GHSA-hmw3-c3g9-px9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmxq-86pg-vvrh/GHSA-hmxq-86pg-vvrh.json b/advisories/unreviewed/2022/05/GHSA-hmxq-86pg-vvrh/GHSA-hmxq-86pg-vvrh.json index cc1c0abcf85..1b1b80a0240 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmxq-86pg-vvrh/GHSA-hmxq-86pg-vvrh.json +++ b/advisories/unreviewed/2022/05/GHSA-hmxq-86pg-vvrh/GHSA-hmxq-86pg-vvrh.json @@ -7,12 +7,8 @@ "CVE-2020-9330" ], "details": "Certain Xerox WorkCentre printers before 073.xxx.000.02300 do not require the user to reenter or validate LDAP bind credentials when changing the LDAP connector IP address. A malicious actor who gains access to affected devices (e.g., by using default credentials) can change the LDAP connection IP address to a system owned by the actor without knowledge of the LDAP bind credentials. After changing the LDAP connection IP address, subsequent authentication attempts will result in the printer sending plaintext LDAP (Active Directory) credentials to the actor. Although the credentials may belong to a non-privileged user, organizations frequently use privileged service accounts to bind to Active Directory. The attacker gains a foothold on the Active Directory domain at a minimum, and may use the credentials to take over control of the Active Directory domain. This affects 3655*, 3655i*, 58XX*, 58XXi*, 59XX*, 59XXi*, 6655**, 6655i**, 72XX*, 72XXi*, 78XX**, 78XXi**, 7970**, 7970i**, EC7836**, and EC7856** devices.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hp33-89x2-8rvm/GHSA-hp33-89x2-8rvm.json b/advisories/unreviewed/2022/05/GHSA-hp33-89x2-8rvm/GHSA-hp33-89x2-8rvm.json index c87e67ef049..3cf80b747e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp33-89x2-8rvm/GHSA-hp33-89x2-8rvm.json +++ b/advisories/unreviewed/2022/05/GHSA-hp33-89x2-8rvm/GHSA-hp33-89x2-8rvm.json @@ -7,12 +7,8 @@ "CVE-2020-8851" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of JPG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9406.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hprw-m99v-ppgf/GHSA-hprw-m99v-ppgf.json b/advisories/unreviewed/2022/05/GHSA-hprw-m99v-ppgf/GHSA-hprw-m99v-ppgf.json index 46c2186d427..4e4fdb2d6df 100644 --- a/advisories/unreviewed/2022/05/GHSA-hprw-m99v-ppgf/GHSA-hprw-m99v-ppgf.json +++ b/advisories/unreviewed/2022/05/GHSA-hprw-m99v-ppgf/GHSA-hprw-m99v-ppgf.json @@ -7,12 +7,8 @@ "CVE-2019-14598" ], "details": "Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hq9q-3r42-xq2p/GHSA-hq9q-3r42-xq2p.json b/advisories/unreviewed/2022/05/GHSA-hq9q-3r42-xq2p/GHSA-hq9q-3r42-xq2p.json index b346c748852..f8defb60a71 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq9q-3r42-xq2p/GHSA-hq9q-3r42-xq2p.json +++ b/advisories/unreviewed/2022/05/GHSA-hq9q-3r42-xq2p/GHSA-hq9q-3r42-xq2p.json @@ -7,12 +7,8 @@ "CVE-2020-0726" ], "details": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0731.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqfh-jh33-mj7r/GHSA-hqfh-jh33-mj7r.json b/advisories/unreviewed/2022/05/GHSA-hqfh-jh33-mj7r/GHSA-hqfh-jh33-mj7r.json index a15b8b55a32..1fc97054197 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqfh-jh33-mj7r/GHSA-hqfh-jh33-mj7r.json +++ b/advisories/unreviewed/2022/05/GHSA-hqfh-jh33-mj7r/GHSA-hqfh-jh33-mj7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqgf-37rq-g39g/GHSA-hqgf-37rq-g39g.json b/advisories/unreviewed/2022/05/GHSA-hqgf-37rq-g39g/GHSA-hqgf-37rq-g39g.json index 90b21b13a74..4e0149855fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqgf-37rq-g39g/GHSA-hqgf-37rq-g39g.json +++ b/advisories/unreviewed/2022/05/GHSA-hqgf-37rq-g39g/GHSA-hqgf-37rq-g39g.json @@ -7,12 +7,8 @@ "CVE-2016-1000004" ], "details": "Insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 (inclusive), and all versions between 3.13.0 and 3.14.1 (inclusive).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hw3j-wm48-xvw6/GHSA-hw3j-wm48-xvw6.json b/advisories/unreviewed/2022/05/GHSA-hw3j-wm48-xvw6/GHSA-hw3j-wm48-xvw6.json index f724101a9bc..9678a61dfa9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw3j-wm48-xvw6/GHSA-hw3j-wm48-xvw6.json +++ b/advisories/unreviewed/2022/05/GHSA-hw3j-wm48-xvw6/GHSA-hw3j-wm48-xvw6.json @@ -7,12 +7,8 @@ "CVE-2015-6970" ], "details": "The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwhv-mrgv-pxg6/GHSA-hwhv-mrgv-pxg6.json b/advisories/unreviewed/2022/05/GHSA-hwhv-mrgv-pxg6/GHSA-hwhv-mrgv-pxg6.json index 0135a7ec082..8ac2b4fecda 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwhv-mrgv-pxg6/GHSA-hwhv-mrgv-pxg6.json +++ b/advisories/unreviewed/2022/05/GHSA-hwhv-mrgv-pxg6/GHSA-hwhv-mrgv-pxg6.json @@ -7,12 +7,8 @@ "CVE-2020-8996" ], "details": "AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwx6-5mwj-gm4q/GHSA-hwx6-5mwj-gm4q.json b/advisories/unreviewed/2022/05/GHSA-hwx6-5mwj-gm4q/GHSA-hwx6-5mwj-gm4q.json index 979db30a332..92e528e228b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwx6-5mwj-gm4q/GHSA-hwx6-5mwj-gm4q.json +++ b/advisories/unreviewed/2022/05/GHSA-hwx6-5mwj-gm4q/GHSA-hwx6-5mwj-gm4q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxgv-f94v-h963/GHSA-hxgv-f94v-h963.json b/advisories/unreviewed/2022/05/GHSA-hxgv-f94v-h963/GHSA-hxgv-f94v-h963.json index c1d3ed72239..a68e1d346fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxgv-f94v-h963/GHSA-hxgv-f94v-h963.json +++ b/advisories/unreviewed/2022/05/GHSA-hxgv-f94v-h963/GHSA-hxgv-f94v-h963.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxxc-q83m-jxjh/GHSA-hxxc-q83m-jxjh.json b/advisories/unreviewed/2022/05/GHSA-hxxc-q83m-jxjh/GHSA-hxxc-q83m-jxjh.json index 5163e9267da..bff9c8af2c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxxc-q83m-jxjh/GHSA-hxxc-q83m-jxjh.json +++ b/advisories/unreviewed/2022/05/GHSA-hxxc-q83m-jxjh/GHSA-hxxc-q83m-jxjh.json @@ -7,12 +7,8 @@ "CVE-2020-8951" ], "details": "Fiserv Accurate Reconciliation 2.19.0 allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j2wg-qg38-9vmr/GHSA-j2wg-qg38-9vmr.json b/advisories/unreviewed/2022/05/GHSA-j2wg-qg38-9vmr/GHSA-j2wg-qg38-9vmr.json index 0fac05e2888..fc6d7836c73 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2wg-qg38-9vmr/GHSA-j2wg-qg38-9vmr.json +++ b/advisories/unreviewed/2022/05/GHSA-j2wg-qg38-9vmr/GHSA-j2wg-qg38-9vmr.json @@ -7,12 +7,8 @@ "CVE-2020-6975" ], "details": "Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j2x2-7857-rm23/GHSA-j2x2-7857-rm23.json b/advisories/unreviewed/2022/05/GHSA-j2x2-7857-rm23/GHSA-j2x2-7857-rm23.json index 15bb74ca3b3..5481706e47b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2x2-7857-rm23/GHSA-j2x2-7857-rm23.json +++ b/advisories/unreviewed/2022/05/GHSA-j2x2-7857-rm23/GHSA-j2x2-7857-rm23.json @@ -7,12 +7,8 @@ "CVE-2020-9039" ], "details": "Couchbase Server 4.x and 5.x before 6.0.0 has Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j369-xxv2-vw8f/GHSA-j369-xxv2-vw8f.json b/advisories/unreviewed/2022/05/GHSA-j369-xxv2-vw8f/GHSA-j369-xxv2-vw8f.json index d16917a8ce1..4c035b391e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-j369-xxv2-vw8f/GHSA-j369-xxv2-vw8f.json +++ b/advisories/unreviewed/2022/05/GHSA-j369-xxv2-vw8f/GHSA-j369-xxv2-vw8f.json @@ -7,12 +7,8 @@ "CVE-2020-3742" ], "details": "Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3g7-g3xg-4w98/GHSA-j3g7-g3xg-4w98.json b/advisories/unreviewed/2022/05/GHSA-j3g7-g3xg-4w98/GHSA-j3g7-g3xg-4w98.json index 8a2be4dfe4e..7ea9309c446 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3g7-g3xg-4w98/GHSA-j3g7-g3xg-4w98.json +++ b/advisories/unreviewed/2022/05/GHSA-j3g7-g3xg-4w98/GHSA-j3g7-g3xg-4w98.json @@ -7,12 +7,8 @@ "CVE-2020-8860" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the baseband processor. Was ZDI-CAN-9658.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j532-9r4m-g288/GHSA-j532-9r4m-g288.json b/advisories/unreviewed/2022/05/GHSA-j532-9r4m-g288/GHSA-j532-9r4m-g288.json index c45a5cb8603..e128ee1c444 100644 --- a/advisories/unreviewed/2022/05/GHSA-j532-9r4m-g288/GHSA-j532-9r4m-g288.json +++ b/advisories/unreviewed/2022/05/GHSA-j532-9r4m-g288/GHSA-j532-9r4m-g288.json @@ -7,12 +7,8 @@ "CVE-2020-9341" ], "details": "CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j58x-5m9c-f2g5/GHSA-j58x-5m9c-f2g5.json b/advisories/unreviewed/2022/05/GHSA-j58x-5m9c-f2g5/GHSA-j58x-5m9c-f2g5.json index a99628d5f53..944db68d8b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j58x-5m9c-f2g5/GHSA-j58x-5m9c-f2g5.json +++ b/advisories/unreviewed/2022/05/GHSA-j58x-5m9c-f2g5/GHSA-j58x-5m9c-f2g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j62c-4x7j-342x/GHSA-j62c-4x7j-342x.json b/advisories/unreviewed/2022/05/GHSA-j62c-4x7j-342x/GHSA-j62c-4x7j-342x.json index 99e99a7b971..8f2619e35a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j62c-4x7j-342x/GHSA-j62c-4x7j-342x.json +++ b/advisories/unreviewed/2022/05/GHSA-j62c-4x7j-342x/GHSA-j62c-4x7j-342x.json @@ -7,12 +7,8 @@ "CVE-2020-6977" ], "details": "A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, resulting in access to the underlying operating system. Affected devices include the following GE Ultrasound Products: Vivid products - all versions; LOGIQ - all versions not including LOGIQ 100 Pro; Voluson - all versions; Versana Essential - all versions; Invenia ABUS Scan station - all versions; Venue - all versions not including Venue 40 R1-3 and Venue 50 R4-5", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j85r-37ch-rchw/GHSA-j85r-37ch-rchw.json b/advisories/unreviewed/2022/05/GHSA-j85r-37ch-rchw/GHSA-j85r-37ch-rchw.json index 874fae65b14..00f203eb684 100644 --- a/advisories/unreviewed/2022/05/GHSA-j85r-37ch-rchw/GHSA-j85r-37ch-rchw.json +++ b/advisories/unreviewed/2022/05/GHSA-j85r-37ch-rchw/GHSA-j85r-37ch-rchw.json @@ -7,12 +7,8 @@ "CVE-2015-7508" ], "details": "Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the last row of RLE data in a crafted BMP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j879-hg9w-v5qv/GHSA-j879-hg9w-v5qv.json b/advisories/unreviewed/2022/05/GHSA-j879-hg9w-v5qv/GHSA-j879-hg9w-v5qv.json index 734756b82bc..3d95d366d70 100644 --- a/advisories/unreviewed/2022/05/GHSA-j879-hg9w-v5qv/GHSA-j879-hg9w-v5qv.json +++ b/advisories/unreviewed/2022/05/GHSA-j879-hg9w-v5qv/GHSA-j879-hg9w-v5qv.json @@ -7,12 +7,8 @@ "CVE-2020-9273" ], "details": "In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel. This triggers a use-after-free in alloc_pool in pool.c, and possible remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8jm-xpp4-34xm/GHSA-j8jm-xpp4-34xm.json b/advisories/unreviewed/2022/05/GHSA-j8jm-xpp4-34xm/GHSA-j8jm-xpp4-34xm.json index 675abd0e8ea..d81894e2bf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8jm-xpp4-34xm/GHSA-j8jm-xpp4-34xm.json +++ b/advisories/unreviewed/2022/05/GHSA-j8jm-xpp4-34xm/GHSA-j8jm-xpp4-34xm.json @@ -7,12 +7,8 @@ "CVE-2020-3877" ], "details": "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j988-q3vx-6wph/GHSA-j988-q3vx-6wph.json b/advisories/unreviewed/2022/05/GHSA-j988-q3vx-6wph/GHSA-j988-q3vx-6wph.json index 9184f2370a4..95d9c1c8d7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j988-q3vx-6wph/GHSA-j988-q3vx-6wph.json +++ b/advisories/unreviewed/2022/05/GHSA-j988-q3vx-6wph/GHSA-j988-q3vx-6wph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9q2-5fvv-rjgp/GHSA-j9q2-5fvv-rjgp.json b/advisories/unreviewed/2022/05/GHSA-j9q2-5fvv-rjgp/GHSA-j9q2-5fvv-rjgp.json index ccf4e22e68a..63acaded412 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9q2-5fvv-rjgp/GHSA-j9q2-5fvv-rjgp.json +++ b/advisories/unreviewed/2022/05/GHSA-j9q2-5fvv-rjgp/GHSA-j9q2-5fvv-rjgp.json @@ -7,12 +7,8 @@ "CVE-2020-8633" ], "details": "An issue was discovered in Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7. When grantors revoked a shared calendar in Outlook, the calendar stayed mounted and accessible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jc25-c7hj-7p6j/GHSA-jc25-c7hj-7p6j.json b/advisories/unreviewed/2022/05/GHSA-jc25-c7hj-7p6j/GHSA-jc25-c7hj-7p6j.json index 2ff51d5f121..0febe0e21a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc25-c7hj-7p6j/GHSA-jc25-c7hj-7p6j.json +++ b/advisories/unreviewed/2022/05/GHSA-jc25-c7hj-7p6j/GHSA-jc25-c7hj-7p6j.json @@ -7,12 +7,8 @@ "CVE-2020-9007" ], "details": "Codoforum 4.8.8 allows self-XSS via the title of a new topic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jc4f-rwqg-j6mh/GHSA-jc4f-rwqg-j6mh.json b/advisories/unreviewed/2022/05/GHSA-jc4f-rwqg-j6mh/GHSA-jc4f-rwqg-j6mh.json index 02f5d67ea93..a7caf37aaab 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc4f-rwqg-j6mh/GHSA-jc4f-rwqg-j6mh.json +++ b/advisories/unreviewed/2022/05/GHSA-jc4f-rwqg-j6mh/GHSA-jc4f-rwqg-j6mh.json @@ -7,12 +7,8 @@ "CVE-2020-9013" ], "details": "Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcjp-9xp8-pch4/GHSA-jcjp-9xp8-pch4.json b/advisories/unreviewed/2022/05/GHSA-jcjp-9xp8-pch4/GHSA-jcjp-9xp8-pch4.json index b7549642b1e..218d60049e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcjp-9xp8-pch4/GHSA-jcjp-9xp8-pch4.json +++ b/advisories/unreviewed/2022/05/GHSA-jcjp-9xp8-pch4/GHSA-jcjp-9xp8-pch4.json @@ -7,12 +7,8 @@ "CVE-2020-3764" ], "details": "Adobe Media Encoder versions 14.0 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcr2-44h4-65m5/GHSA-jcr2-44h4-65m5.json b/advisories/unreviewed/2022/05/GHSA-jcr2-44h4-65m5/GHSA-jcr2-44h4-65m5.json index 43a6e1a457d..bc2887e5dfd 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcr2-44h4-65m5/GHSA-jcr2-44h4-65m5.json +++ b/advisories/unreviewed/2022/05/GHSA-jcr2-44h4-65m5/GHSA-jcr2-44h4-65m5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf9q-xch5-mcwx/GHSA-jf9q-xch5-mcwx.json b/advisories/unreviewed/2022/05/GHSA-jf9q-xch5-mcwx/GHSA-jf9q-xch5-mcwx.json index 857cb15beec..6798e3621a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf9q-xch5-mcwx/GHSA-jf9q-xch5-mcwx.json +++ b/advisories/unreviewed/2022/05/GHSA-jf9q-xch5-mcwx/GHSA-jf9q-xch5-mcwx.json @@ -7,12 +7,8 @@ "CVE-2020-8614" ], "details": "An issue was discovered on Askey AP4000W TDC_V1.01.003 devices. An attacker can perform Remote Code Execution (RCE) by sending a specially crafted network packer to the bd_svr service listening on TCP port 54188.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jhf8-8fwr-38xr/GHSA-jhf8-8fwr-38xr.json b/advisories/unreviewed/2022/05/GHSA-jhf8-8fwr-38xr/GHSA-jhf8-8fwr-38xr.json index 5ab97d0ad60..0a2b93a86ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhf8-8fwr-38xr/GHSA-jhf8-8fwr-38xr.json +++ b/advisories/unreviewed/2022/05/GHSA-jhf8-8fwr-38xr/GHSA-jhf8-8fwr-38xr.json @@ -7,12 +7,8 @@ "CVE-2020-0744" ], "details": "An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka 'Windows GDI Information Disclosure Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jjgf-8279-h8cq/GHSA-jjgf-8279-h8cq.json b/advisories/unreviewed/2022/05/GHSA-jjgf-8279-h8cq/GHSA-jjgf-8279-h8cq.json index ffbdb7d5e35..36761a4216f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjgf-8279-h8cq/GHSA-jjgf-8279-h8cq.json +++ b/advisories/unreviewed/2022/05/GHSA-jjgf-8279-h8cq/GHSA-jjgf-8279-h8cq.json @@ -7,12 +7,8 @@ "CVE-2020-8962" ], "details": "A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jjw9-m7w7-qm6w/GHSA-jjw9-m7w7-qm6w.json b/advisories/unreviewed/2022/05/GHSA-jjw9-m7w7-qm6w/GHSA-jjw9-m7w7-qm6w.json index 0ac8862e495..e478b32a1f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjw9-m7w7-qm6w/GHSA-jjw9-m7w7-qm6w.json +++ b/advisories/unreviewed/2022/05/GHSA-jjw9-m7w7-qm6w/GHSA-jjw9-m7w7-qm6w.json @@ -7,12 +7,8 @@ "CVE-2016-3181" ], "details": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-3182. Reason: This candidate is a duplicate of CVE-2016-3182. Notes: All CVE users should reference CVE-2016-3182 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmrg-8g97-ffpv/GHSA-jmrg-8g97-ffpv.json b/advisories/unreviewed/2022/05/GHSA-jmrg-8g97-ffpv/GHSA-jmrg-8g97-ffpv.json index 312457f491b..4ec8ab32fd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmrg-8g97-ffpv/GHSA-jmrg-8g97-ffpv.json +++ b/advisories/unreviewed/2022/05/GHSA-jmrg-8g97-ffpv/GHSA-jmrg-8g97-ffpv.json @@ -7,12 +7,8 @@ "CVE-2019-16299" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types: HOST_ADDED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqg2-qc32-f57h/GHSA-jqg2-qc32-f57h.json b/advisories/unreviewed/2022/05/GHSA-jqg2-qc32-f57h/GHSA-jqg2-qc32-f57h.json index a67cab41013..a4b6cfb1a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqg2-qc32-f57h/GHSA-jqg2-qc32-f57h.json +++ b/advisories/unreviewed/2022/05/GHSA-jqg2-qc32-f57h/GHSA-jqg2-qc32-f57h.json @@ -7,12 +7,8 @@ "CVE-2019-4703" ], "details": "IBM Spectrum Protect Plus 10.1.0 and 10.5.0, when protecting Microsoft SQL or Microsoft Exchange, could allow an attacker with intimate knowledge of the system to obtain highly sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jrfq-vg4j-g2rf/GHSA-jrfq-vg4j-g2rf.json b/advisories/unreviewed/2022/05/GHSA-jrfq-vg4j-g2rf/GHSA-jrfq-vg4j-g2rf.json index 8f1be2db09b..19938bf946e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrfq-vg4j-g2rf/GHSA-jrfq-vg4j-g2rf.json +++ b/advisories/unreviewed/2022/05/GHSA-jrfq-vg4j-g2rf/GHSA-jrfq-vg4j-g2rf.json @@ -7,12 +7,8 @@ "CVE-2020-3762" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to arbitrary file system write.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvfv-f89h-p57p/GHSA-jvfv-f89h-p57p.json b/advisories/unreviewed/2022/05/GHSA-jvfv-f89h-p57p/GHSA-jvfv-f89h-p57p.json index 594b52de5e8..09e8a4bccd5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvfv-f89h-p57p/GHSA-jvfv-f89h-p57p.json +++ b/advisories/unreviewed/2022/05/GHSA-jvfv-f89h-p57p/GHSA-jvfv-f89h-p57p.json @@ -7,12 +7,8 @@ "CVE-2020-1856" ], "details": "Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw7x-vhw7-qf2r/GHSA-jw7x-vhw7-qf2r.json b/advisories/unreviewed/2022/05/GHSA-jw7x-vhw7-qf2r/GHSA-jw7x-vhw7-qf2r.json index 8c76686d524..94cf85c2279 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw7x-vhw7-qf2r/GHSA-jw7x-vhw7-qf2r.json +++ b/advisories/unreviewed/2022/05/GHSA-jw7x-vhw7-qf2r/GHSA-jw7x-vhw7-qf2r.json @@ -7,12 +7,8 @@ "CVE-2020-6968" ], "details": "Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxcg-2g7w-v53p/GHSA-jxcg-2g7w-v53p.json b/advisories/unreviewed/2022/05/GHSA-jxcg-2g7w-v53p/GHSA-jxcg-2g7w-v53p.json index 8c2f6c89df1..a60c5848a48 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxcg-2g7w-v53p/GHSA-jxcg-2g7w-v53p.json +++ b/advisories/unreviewed/2022/05/GHSA-jxcg-2g7w-v53p/GHSA-jxcg-2g7w-v53p.json @@ -7,12 +7,8 @@ "CVE-2020-8427" ], "details": "Kaseya Traverse before 9.5.20 allows OS command injection attacks against user accounts, associated with a Netflow Top Applications reporting API call. This is exploitable by an authenticated attacker who submits a modified JSON field within POST data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2cf-xghm-rxmc/GHSA-m2cf-xghm-rxmc.json b/advisories/unreviewed/2022/05/GHSA-m2cf-xghm-rxmc/GHSA-m2cf-xghm-rxmc.json index 428fa210d12..c27ed098345 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2cf-xghm-rxmc/GHSA-m2cf-xghm-rxmc.json +++ b/advisories/unreviewed/2022/05/GHSA-m2cf-xghm-rxmc/GHSA-m2cf-xghm-rxmc.json @@ -7,12 +7,8 @@ "CVE-2020-8793" ], "details": "OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m462-grgg-59g3/GHSA-m462-grgg-59g3.json b/advisories/unreviewed/2022/05/GHSA-m462-grgg-59g3/GHSA-m462-grgg-59g3.json index 608074737b5..164d82970ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-m462-grgg-59g3/GHSA-m462-grgg-59g3.json +++ b/advisories/unreviewed/2022/05/GHSA-m462-grgg-59g3/GHSA-m462-grgg-59g3.json @@ -7,12 +7,8 @@ "CVE-2020-0752" ], "details": "An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0735.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m46c-jxp2-97p9/GHSA-m46c-jxp2-97p9.json b/advisories/unreviewed/2022/05/GHSA-m46c-jxp2-97p9/GHSA-m46c-jxp2-97p9.json index c03afca1e0b..253c7db3b34 100644 --- a/advisories/unreviewed/2022/05/GHSA-m46c-jxp2-97p9/GHSA-m46c-jxp2-97p9.json +++ b/advisories/unreviewed/2022/05/GHSA-m46c-jxp2-97p9/GHSA-m46c-jxp2-97p9.json @@ -7,12 +7,8 @@ "CVE-2020-5525" ], "details": "Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4qw-fm6j-8h62/GHSA-m4qw-fm6j-8h62.json b/advisories/unreviewed/2022/05/GHSA-m4qw-fm6j-8h62/GHSA-m4qw-fm6j-8h62.json index 4d4bd28707f..239ab024f23 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4qw-fm6j-8h62/GHSA-m4qw-fm6j-8h62.json +++ b/advisories/unreviewed/2022/05/GHSA-m4qw-fm6j-8h62/GHSA-m4qw-fm6j-8h62.json @@ -7,12 +7,8 @@ "CVE-2019-20481" ], "details": "In MIELE XGW 3000 ZigBee Gateway before 2.4.0, the Password Change Function does not require knowledge of the old password. This can be exploited in conjunction with CVE-2019-20480.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5jh-r2qv-j26j/GHSA-m5jh-r2qv-j26j.json b/advisories/unreviewed/2022/05/GHSA-m5jh-r2qv-j26j/GHSA-m5jh-r2qv-j26j.json index 099e19562b5..a7a76da2652 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5jh-r2qv-j26j/GHSA-m5jh-r2qv-j26j.json +++ b/advisories/unreviewed/2022/05/GHSA-m5jh-r2qv-j26j/GHSA-m5jh-r2qv-j26j.json @@ -7,12 +7,8 @@ "CVE-2020-9385" ], "details": "A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in add_on in upcean.c, when called from eanx in upcean.c during EAN barcode generation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m6cf-g9vq-wjwm/GHSA-m6cf-g9vq-wjwm.json b/advisories/unreviewed/2022/05/GHSA-m6cf-g9vq-wjwm/GHSA-m6cf-g9vq-wjwm.json index 6c086bd9eac..b39dfe1f650 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6cf-g9vq-wjwm/GHSA-m6cf-g9vq-wjwm.json +++ b/advisories/unreviewed/2022/05/GHSA-m6cf-g9vq-wjwm/GHSA-m6cf-g9vq-wjwm.json @@ -7,12 +7,8 @@ "CVE-2020-1975" ], "details": "Missing XML validation vulnerability in the PAN-OS web interface on Palo Alto Networks PAN-OS software allows authenticated users to inject arbitrary XML that results in privilege escalation. This issue affects PAN-OS 8.1 versions earlier than PAN-OS 8.1.12 and PAN-OS 9.0 versions earlier than PAN-OS 9.0.6. This issue does not affect PAN-OS 7.1, PAN-OS 8.0, or PAN-OS 9.1 or later versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m72r-m3rm-547r/GHSA-m72r-m3rm-547r.json b/advisories/unreviewed/2022/05/GHSA-m72r-m3rm-547r/GHSA-m72r-m3rm-547r.json index d5926f47239..3d073730094 100644 --- a/advisories/unreviewed/2022/05/GHSA-m72r-m3rm-547r/GHSA-m72r-m3rm-547r.json +++ b/advisories/unreviewed/2022/05/GHSA-m72r-m3rm-547r/GHSA-m72r-m3rm-547r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m7q6-6cr7-23gp/GHSA-m7q6-6cr7-23gp.json b/advisories/unreviewed/2022/05/GHSA-m7q6-6cr7-23gp/GHSA-m7q6-6cr7-23gp.json index 333a43f4f40..fbd7b8e9790 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7q6-6cr7-23gp/GHSA-m7q6-6cr7-23gp.json +++ b/advisories/unreviewed/2022/05/GHSA-m7q6-6cr7-23gp/GHSA-m7q6-6cr7-23gp.json @@ -7,12 +7,8 @@ "CVE-2020-8845" ], "details": "This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of watermarks in AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9358.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m87p-28g3-v6m6/GHSA-m87p-28g3-v6m6.json b/advisories/unreviewed/2022/05/GHSA-m87p-28g3-v6m6/GHSA-m87p-28g3-v6m6.json index 50c2f88cb25..8bd67cfa048 100644 --- a/advisories/unreviewed/2022/05/GHSA-m87p-28g3-v6m6/GHSA-m87p-28g3-v6m6.json +++ b/advisories/unreviewed/2022/05/GHSA-m87p-28g3-v6m6/GHSA-m87p-28g3-v6m6.json @@ -7,12 +7,8 @@ "CVE-2020-8856" ], "details": "This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of watermarks. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9640.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m8q8-334f-8qxg/GHSA-m8q8-334f-8qxg.json b/advisories/unreviewed/2022/05/GHSA-m8q8-334f-8qxg/GHSA-m8q8-334f-8qxg.json index f9e5fbe0eb0..f92acb7197b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8q8-334f-8qxg/GHSA-m8q8-334f-8qxg.json +++ b/advisories/unreviewed/2022/05/GHSA-m8q8-334f-8qxg/GHSA-m8q8-334f-8qxg.json @@ -7,12 +7,8 @@ "CVE-2020-1893" ], "details": "Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9cq-wcff-6m72/GHSA-m9cq-wcff-6m72.json b/advisories/unreviewed/2022/05/GHSA-m9cq-wcff-6m72/GHSA-m9cq-wcff-6m72.json index a7a8889f240..2d8ded3b7d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9cq-wcff-6m72/GHSA-m9cq-wcff-6m72.json +++ b/advisories/unreviewed/2022/05/GHSA-m9cq-wcff-6m72/GHSA-m9cq-wcff-6m72.json @@ -7,12 +7,8 @@ "CVE-2020-5400" ], "details": "Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unauthorized access to resources protected by such credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mc36-63q6-5xvj/GHSA-mc36-63q6-5xvj.json b/advisories/unreviewed/2022/05/GHSA-mc36-63q6-5xvj/GHSA-mc36-63q6-5xvj.json index cbec231ca36..110588f707c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc36-63q6-5xvj/GHSA-mc36-63q6-5xvj.json +++ b/advisories/unreviewed/2022/05/GHSA-mc36-63q6-5xvj/GHSA-mc36-63q6-5xvj.json @@ -7,12 +7,8 @@ "CVE-2020-4213" ], "details": "IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system. By using a specially crafted HTTP command, an attacker could exploit this vulnerability to execute arbitrary command on the system. IBM X-Force ID: 175024.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcvp-2m55-3f69/GHSA-mcvp-2m55-3f69.json b/advisories/unreviewed/2022/05/GHSA-mcvp-2m55-3f69/GHSA-mcvp-2m55-3f69.json index 57d91eedc3b..e7d6ac772c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcvp-2m55-3f69/GHSA-mcvp-2m55-3f69.json +++ b/advisories/unreviewed/2022/05/GHSA-mcvp-2m55-3f69/GHSA-mcvp-2m55-3f69.json @@ -7,12 +7,8 @@ "CVE-2020-3734" ], "details": "Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfxm-33mp-3rqj/GHSA-mfxm-33mp-3rqj.json b/advisories/unreviewed/2022/05/GHSA-mfxm-33mp-3rqj/GHSA-mfxm-33mp-3rqj.json index c74d4dfeafa..8aaa6aa57cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfxm-33mp-3rqj/GHSA-mfxm-33mp-3rqj.json +++ b/advisories/unreviewed/2022/05/GHSA-mfxm-33mp-3rqj/GHSA-mfxm-33mp-3rqj.json @@ -7,12 +7,8 @@ "CVE-2020-5530" ], "details": "Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mgg9-26cw-p92x/GHSA-mgg9-26cw-p92x.json b/advisories/unreviewed/2022/05/GHSA-mgg9-26cw-p92x/GHSA-mgg9-26cw-p92x.json index 4a4a162060e..9d5b61ce2cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgg9-26cw-p92x/GHSA-mgg9-26cw-p92x.json +++ b/advisories/unreviewed/2022/05/GHSA-mgg9-26cw-p92x/GHSA-mgg9-26cw-p92x.json @@ -7,12 +7,8 @@ "CVE-2020-9308" ], "details": "archive_read_support_format_rar5.c in libarchive before 3.4.2 attempts to unpack a RAR5 file with an invalid or corrupted header (such as a header size of zero), leading to a SIGSEGV or possibly unspecified other impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjf6-gmwv-grxx/GHSA-mjf6-gmwv-grxx.json b/advisories/unreviewed/2022/05/GHSA-mjf6-gmwv-grxx/GHSA-mjf6-gmwv-grxx.json index d2a459c6039..ecfda4d7d67 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjf6-gmwv-grxx/GHSA-mjf6-gmwv-grxx.json +++ b/advisories/unreviewed/2022/05/GHSA-mjf6-gmwv-grxx/GHSA-mjf6-gmwv-grxx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjgx-fpvr-qh28/GHSA-mjgx-fpvr-qh28.json b/advisories/unreviewed/2022/05/GHSA-mjgx-fpvr-qh28/GHSA-mjgx-fpvr-qh28.json index 4a2c85e5e66..a6f4a481403 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjgx-fpvr-qh28/GHSA-mjgx-fpvr-qh28.json +++ b/advisories/unreviewed/2022/05/GHSA-mjgx-fpvr-qh28/GHSA-mjgx-fpvr-qh28.json @@ -7,12 +7,8 @@ "CVE-2019-19608" ], "details": "A SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the registeredList.cgi page. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mq63-35pw-h66r/GHSA-mq63-35pw-h66r.json b/advisories/unreviewed/2022/05/GHSA-mq63-35pw-h66r/GHSA-mq63-35pw-h66r.json index d172b3138a2..99d33aa668e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq63-35pw-h66r/GHSA-mq63-35pw-h66r.json +++ b/advisories/unreviewed/2022/05/GHSA-mq63-35pw-h66r/GHSA-mq63-35pw-h66r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mq7f-7h9f-7344/GHSA-mq7f-7h9f-7344.json b/advisories/unreviewed/2022/05/GHSA-mq7f-7h9f-7344/GHSA-mq7f-7h9f-7344.json index c29d9bcacc9..d5ab27a58e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq7f-7h9f-7344/GHSA-mq7f-7h9f-7344.json +++ b/advisories/unreviewed/2022/05/GHSA-mq7f-7h9f-7344/GHSA-mq7f-7h9f-7344.json @@ -7,12 +7,8 @@ "CVE-2020-3754" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqxr-gww5-9jhp/GHSA-mqxr-gww5-9jhp.json b/advisories/unreviewed/2022/05/GHSA-mqxr-gww5-9jhp/GHSA-mqxr-gww5-9jhp.json index 6f5e7a6ef80..6bb3b801db3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqxr-gww5-9jhp/GHSA-mqxr-gww5-9jhp.json +++ b/advisories/unreviewed/2022/05/GHSA-mqxr-gww5-9jhp/GHSA-mqxr-gww5-9jhp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr58-cvxc-4qf5/GHSA-mr58-cvxc-4qf5.json b/advisories/unreviewed/2022/05/GHSA-mr58-cvxc-4qf5/GHSA-mr58-cvxc-4qf5.json index 43f3ed63f62..9216d0c4f5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr58-cvxc-4qf5/GHSA-mr58-cvxc-4qf5.json +++ b/advisories/unreviewed/2022/05/GHSA-mr58-cvxc-4qf5/GHSA-mr58-cvxc-4qf5.json @@ -7,12 +7,8 @@ "CVE-2020-9336" ], "details": "fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrpp-2fxx-mj68/GHSA-mrpp-2fxx-mj68.json b/advisories/unreviewed/2022/05/GHSA-mrpp-2fxx-mj68/GHSA-mrpp-2fxx-mj68.json index 13cb3f7cd27..a018b91f0ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrpp-2fxx-mj68/GHSA-mrpp-2fxx-mj68.json +++ b/advisories/unreviewed/2022/05/GHSA-mrpp-2fxx-mj68/GHSA-mrpp-2fxx-mj68.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvx2-hxjc-7fjw/GHSA-mvx2-hxjc-7fjw.json b/advisories/unreviewed/2022/05/GHSA-mvx2-hxjc-7fjw/GHSA-mvx2-hxjc-7fjw.json index b10ffbb1e00..e0070e22bc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvx2-hxjc-7fjw/GHSA-mvx2-hxjc-7fjw.json +++ b/advisories/unreviewed/2022/05/GHSA-mvx2-hxjc-7fjw/GHSA-mvx2-hxjc-7fjw.json @@ -7,12 +7,8 @@ "CVE-2020-1977" ], "details": "Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw97-4r24-9ggw/GHSA-mw97-4r24-9ggw.json b/advisories/unreviewed/2022/05/GHSA-mw97-4r24-9ggw/GHSA-mw97-4r24-9ggw.json index e9a1ccd30f2..94f99dae363 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw97-4r24-9ggw/GHSA-mw97-4r24-9ggw.json +++ b/advisories/unreviewed/2022/05/GHSA-mw97-4r24-9ggw/GHSA-mw97-4r24-9ggw.json @@ -7,12 +7,8 @@ "CVE-2020-6378" ], "details": "Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwm8-xq92-vxfq/GHSA-mwm8-xq92-vxfq.json b/advisories/unreviewed/2022/05/GHSA-mwm8-xq92-vxfq/GHSA-mwm8-xq92-vxfq.json index 50e6158a1b6..072678891b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwm8-xq92-vxfq/GHSA-mwm8-xq92-vxfq.json +++ b/advisories/unreviewed/2022/05/GHSA-mwm8-xq92-vxfq/GHSA-mwm8-xq92-vxfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mx32-h9pq-4mhr/GHSA-mx32-h9pq-4mhr.json b/advisories/unreviewed/2022/05/GHSA-mx32-h9pq-4mhr/GHSA-mx32-h9pq-4mhr.json index 5c395bb675f..af242ae0f3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mx32-h9pq-4mhr/GHSA-mx32-h9pq-4mhr.json +++ b/advisories/unreviewed/2022/05/GHSA-mx32-h9pq-4mhr/GHSA-mx32-h9pq-4mhr.json @@ -7,12 +7,8 @@ "CVE-2020-0742" ], "details": "An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0743, CVE-2020-0749, CVE-2020-0750.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxg6-6xh7-6x8r/GHSA-mxg6-6xh7-6x8r.json b/advisories/unreviewed/2022/05/GHSA-mxg6-6xh7-6x8r/GHSA-mxg6-6xh7-6x8r.json index 7db95e99dd2..977508cbb6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxg6-6xh7-6x8r/GHSA-mxg6-6xh7-6x8r.json +++ b/advisories/unreviewed/2022/05/GHSA-mxg6-6xh7-6x8r/GHSA-mxg6-6xh7-6x8r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxxh-w2ww-44fp/GHSA-mxxh-w2ww-44fp.json b/advisories/unreviewed/2022/05/GHSA-mxxh-w2ww-44fp/GHSA-mxxh-w2ww-44fp.json index 64fbfe98beb..61a92732bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxxh-w2ww-44fp/GHSA-mxxh-w2ww-44fp.json +++ b/advisories/unreviewed/2022/05/GHSA-mxxh-w2ww-44fp/GHSA-mxxh-w2ww-44fp.json @@ -7,12 +7,8 @@ "CVE-2020-9374" ], "details": "On TP-Link TL-WR849N 0.9.1 4.16 devices, a remote command execution vulnerability in the diagnostics area can be exploited when an attacker sends specific shell metacharacters to the panel's traceroute feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3v4-35p5-g693/GHSA-p3v4-35p5-g693.json b/advisories/unreviewed/2022/05/GHSA-p3v4-35p5-g693/GHSA-p3v4-35p5-g693.json index 7a09630ef0a..b552555da97 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3v4-35p5-g693/GHSA-p3v4-35p5-g693.json +++ b/advisories/unreviewed/2022/05/GHSA-p3v4-35p5-g693/GHSA-p3v4-35p5-g693.json @@ -7,12 +7,8 @@ "CVE-2020-3113" ], "details": "A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p3vq-v25w-6m97/GHSA-p3vq-v25w-6m97.json b/advisories/unreviewed/2022/05/GHSA-p3vq-v25w-6m97/GHSA-p3vq-v25w-6m97.json index 04c357dce6f..0ae940e7494 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3vq-v25w-6m97/GHSA-p3vq-v25w-6m97.json +++ b/advisories/unreviewed/2022/05/GHSA-p3vq-v25w-6m97/GHSA-p3vq-v25w-6m97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p48p-8wh6-cj6f/GHSA-p48p-8wh6-cj6f.json b/advisories/unreviewed/2022/05/GHSA-p48p-8wh6-cj6f/GHSA-p48p-8wh6-cj6f.json index d067968f720..62e459534e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-p48p-8wh6-cj6f/GHSA-p48p-8wh6-cj6f.json +++ b/advisories/unreviewed/2022/05/GHSA-p48p-8wh6-cj6f/GHSA-p48p-8wh6-cj6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5jp-pq7c-j82g/GHSA-p5jp-pq7c-j82g.json b/advisories/unreviewed/2022/05/GHSA-p5jp-pq7c-j82g/GHSA-p5jp-pq7c-j82g.json index 93445cfbfaf..9e4f89d19af 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5jp-pq7c-j82g/GHSA-p5jp-pq7c-j82g.json +++ b/advisories/unreviewed/2022/05/GHSA-p5jp-pq7c-j82g/GHSA-p5jp-pq7c-j82g.json @@ -7,12 +7,8 @@ "CVE-2020-6190" ], "details": "Certain vulnerable endpoints in SAP NetWeaver AS Java (Heap Dump Application), versions 7.30, 7.31, 7.40, 7.50, provide valuable information about the system like hostname, server node and installation path that could be misused by an attacker leading to Information Disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p659-r6ph-r5x8/GHSA-p659-r6ph-r5x8.json b/advisories/unreviewed/2022/05/GHSA-p659-r6ph-r5x8/GHSA-p659-r6ph-r5x8.json index 561d57965e4..fcbab3b41d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p659-r6ph-r5x8/GHSA-p659-r6ph-r5x8.json +++ b/advisories/unreviewed/2022/05/GHSA-p659-r6ph-r5x8/GHSA-p659-r6ph-r5x8.json @@ -7,12 +7,8 @@ "CVE-2020-1841" ], "details": "Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6xg-495q-mfqw/GHSA-p6xg-495q-mfqw.json b/advisories/unreviewed/2022/05/GHSA-p6xg-495q-mfqw/GHSA-p6xg-495q-mfqw.json index e160bad0b6f..ab89ece0636 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6xg-495q-mfqw/GHSA-p6xg-495q-mfqw.json +++ b/advisories/unreviewed/2022/05/GHSA-p6xg-495q-mfqw/GHSA-p6xg-495q-mfqw.json @@ -7,12 +7,8 @@ "CVE-2020-1843" ], "details": "Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p76r-g8wg-qg8m/GHSA-p76r-g8wg-qg8m.json b/advisories/unreviewed/2022/05/GHSA-p76r-g8wg-qg8m/GHSA-p76r-g8wg-qg8m.json index aec4b5e30c4..a2e79f0b8b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-p76r-g8wg-qg8m/GHSA-p76r-g8wg-qg8m.json +++ b/advisories/unreviewed/2022/05/GHSA-p76r-g8wg-qg8m/GHSA-p76r-g8wg-qg8m.json @@ -7,12 +7,8 @@ "CVE-2019-16336" ], "details": "The Bluetooth Low Energy implementation in Cypress PSoC 4 BLE component 3.61 and earlier processes data channel frames with a payload length larger than the configured link layer maximum RX payload size, which allows attackers (in radio range) to cause a denial of service (crash) via a crafted BLE Link Layer frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7f9-cm57-hjf2/GHSA-p7f9-cm57-hjf2.json b/advisories/unreviewed/2022/05/GHSA-p7f9-cm57-hjf2/GHSA-p7f9-cm57-hjf2.json index 6e13ee3ae6c..22e3a353eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7f9-cm57-hjf2/GHSA-p7f9-cm57-hjf2.json +++ b/advisories/unreviewed/2022/05/GHSA-p7f9-cm57-hjf2/GHSA-p7f9-cm57-hjf2.json @@ -7,12 +7,8 @@ "CVE-2020-0562" ], "details": "Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7x9-6ppp-rh82/GHSA-p7x9-6ppp-rh82.json b/advisories/unreviewed/2022/05/GHSA-p7x9-6ppp-rh82/GHSA-p7x9-6ppp-rh82.json index feff83eb7fa..75c08c642f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7x9-6ppp-rh82/GHSA-p7x9-6ppp-rh82.json +++ b/advisories/unreviewed/2022/05/GHSA-p7x9-6ppp-rh82/GHSA-p7x9-6ppp-rh82.json @@ -7,12 +7,8 @@ "CVE-2020-0732" ], "details": "An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0709.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p85c-9hm6-fw2q/GHSA-p85c-9hm6-fw2q.json b/advisories/unreviewed/2022/05/GHSA-p85c-9hm6-fw2q/GHSA-p85c-9hm6-fw2q.json index b959985cf64..48f689d6695 100644 --- a/advisories/unreviewed/2022/05/GHSA-p85c-9hm6-fw2q/GHSA-p85c-9hm6-fw2q.json +++ b/advisories/unreviewed/2022/05/GHSA-p85c-9hm6-fw2q/GHSA-p85c-9hm6-fw2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p8cx-rv78-q879/GHSA-p8cx-rv78-q879.json b/advisories/unreviewed/2022/05/GHSA-p8cx-rv78-q879/GHSA-p8cx-rv78-q879.json index 611bac53582..8e2b20c2672 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8cx-rv78-q879/GHSA-p8cx-rv78-q879.json +++ b/advisories/unreviewed/2022/05/GHSA-p8cx-rv78-q879/GHSA-p8cx-rv78-q879.json @@ -7,12 +7,8 @@ "CVE-2020-8601" ], "details": "Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcc6-9jm9-hfp4/GHSA-pcc6-9jm9-hfp4.json b/advisories/unreviewed/2022/05/GHSA-pcc6-9jm9-hfp4/GHSA-pcc6-9jm9-hfp4.json index ad8fed69f08..261c03913ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcc6-9jm9-hfp4/GHSA-pcc6-9jm9-hfp4.json +++ b/advisories/unreviewed/2022/05/GHSA-pcc6-9jm9-hfp4/GHSA-pcc6-9jm9-hfp4.json @@ -7,12 +7,8 @@ "CVE-2020-3757" ], "details": "Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgr8-3m3p-r5jv/GHSA-pgr8-3m3p-r5jv.json b/advisories/unreviewed/2022/05/GHSA-pgr8-3m3p-r5jv/GHSA-pgr8-3m3p-r5jv.json index 62996a46c75..c1f6ecb6e0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgr8-3m3p-r5jv/GHSA-pgr8-3m3p-r5jv.json +++ b/advisories/unreviewed/2022/05/GHSA-pgr8-3m3p-r5jv/GHSA-pgr8-3m3p-r5jv.json @@ -7,12 +7,8 @@ "CVE-2020-9271" ], "details": "ICE Hrm 26.2.0 is vulnerable to CSRF that leads to user creation via service.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ph9c-5f5m-xhgq/GHSA-ph9c-5f5m-xhgq.json b/advisories/unreviewed/2022/05/GHSA-ph9c-5f5m-xhgq/GHSA-ph9c-5f5m-xhgq.json index c63698e82eb..6fde06d0f65 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph9c-5f5m-xhgq/GHSA-ph9c-5f5m-xhgq.json +++ b/advisories/unreviewed/2022/05/GHSA-ph9c-5f5m-xhgq/GHSA-ph9c-5f5m-xhgq.json @@ -7,12 +7,8 @@ "CVE-2020-1789" ], "details": "Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21(SP3) have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the authentication and do certain operations by a weak credential.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjf7-66cm-jgpj/GHSA-pjf7-66cm-jgpj.json b/advisories/unreviewed/2022/05/GHSA-pjf7-66cm-jgpj/GHSA-pjf7-66cm-jgpj.json index 77ee7624064..a4d1a8b6b79 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjf7-66cm-jgpj/GHSA-pjf7-66cm-jgpj.json +++ b/advisories/unreviewed/2022/05/GHSA-pjf7-66cm-jgpj/GHSA-pjf7-66cm-jgpj.json @@ -7,12 +7,8 @@ "CVE-2020-6177" ], "details": "SAP Mobile Platform, version 3.0, does not sufficiently validate an XML document accepted from an untrusted source which could lead to partial denial of service. Since SAP Mobile Platform does not allow External-Entity resolving, there is no issue of leaking content of files on the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm66-94r7-2xrg/GHSA-pm66-94r7-2xrg.json b/advisories/unreviewed/2022/05/GHSA-pm66-94r7-2xrg/GHSA-pm66-94r7-2xrg.json index 9cc743fbdde..b6cf5e2fa75 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm66-94r7-2xrg/GHSA-pm66-94r7-2xrg.json +++ b/advisories/unreviewed/2022/05/GHSA-pm66-94r7-2xrg/GHSA-pm66-94r7-2xrg.json @@ -7,12 +7,8 @@ "CVE-2020-3860" ], "details": "A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pm7m-5qqg-f3fw/GHSA-pm7m-5qqg-f3fw.json b/advisories/unreviewed/2022/05/GHSA-pm7m-5qqg-f3fw/GHSA-pm7m-5qqg-f3fw.json index 5b753a41103..c73ea0fa790 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm7m-5qqg-f3fw/GHSA-pm7m-5qqg-f3fw.json +++ b/advisories/unreviewed/2022/05/GHSA-pm7m-5qqg-f3fw/GHSA-pm7m-5qqg-f3fw.json @@ -7,12 +7,8 @@ "CVE-2020-9026" ], "details": "ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm9m-j33x-2wcx/GHSA-pm9m-j33x-2wcx.json b/advisories/unreviewed/2022/05/GHSA-pm9m-j33x-2wcx/GHSA-pm9m-j33x-2wcx.json index 4e43fd9807b..1dfb1dd5b7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm9m-j33x-2wcx/GHSA-pm9m-j33x-2wcx.json +++ b/advisories/unreviewed/2022/05/GHSA-pm9m-j33x-2wcx/GHSA-pm9m-j33x-2wcx.json @@ -7,12 +7,8 @@ "CVE-2020-9355" ], "details": "danfruehauf NetworkManager-ssh before 1.2.11 allows privilege escalation because extra options are mishandled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pm9r-6vcg-hv7c/GHSA-pm9r-6vcg-hv7c.json b/advisories/unreviewed/2022/05/GHSA-pm9r-6vcg-hv7c/GHSA-pm9r-6vcg-hv7c.json index c322b1e9d9f..28d36c15532 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm9r-6vcg-hv7c/GHSA-pm9r-6vcg-hv7c.json +++ b/advisories/unreviewed/2022/05/GHSA-pm9r-6vcg-hv7c/GHSA-pm9r-6vcg-hv7c.json @@ -7,12 +7,8 @@ "CVE-2020-0750" ], "details": "An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0740, CVE-2020-0741, CVE-2020-0742, CVE-2020-0743, CVE-2020-0749.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmqj-x24q-7m6p/GHSA-pmqj-x24q-7m6p.json b/advisories/unreviewed/2022/05/GHSA-pmqj-x24q-7m6p/GHSA-pmqj-x24q-7m6p.json index c3c03a32abb..9c1b44925f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmqj-x24q-7m6p/GHSA-pmqj-x24q-7m6p.json +++ b/advisories/unreviewed/2022/05/GHSA-pmqj-x24q-7m6p/GHSA-pmqj-x24q-7m6p.json @@ -7,12 +7,8 @@ "CVE-2020-1811" ], "details": "GaussDB 200 with version of 6.5.1 have a command injection vulnerability. Due to insufficient input validation, remote attackers with low permissions could exploit this vulnerability by sending crafted commands to the affected device. Successful exploit could allow an attacker to execute commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pp58-r9xv-2h9p/GHSA-pp58-r9xv-2h9p.json b/advisories/unreviewed/2022/05/GHSA-pp58-r9xv-2h9p/GHSA-pp58-r9xv-2h9p.json index 6c58dcbf21f..67b16038959 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp58-r9xv-2h9p/GHSA-pp58-r9xv-2h9p.json +++ b/advisories/unreviewed/2022/05/GHSA-pp58-r9xv-2h9p/GHSA-pp58-r9xv-2h9p.json @@ -7,12 +7,8 @@ "CVE-2020-9022" ], "details": "An issue was discovered on Xirrus XR520, XR620, XR2436, and XH2-120 devices. The cgi-bin/ViewPage.cgi user parameter allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ppcq-248q-f293/GHSA-ppcq-248q-f293.json b/advisories/unreviewed/2022/05/GHSA-ppcq-248q-f293/GHSA-ppcq-248q-f293.json index 7e1f9c9c4c4..97b9cb5fe24 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppcq-248q-f293/GHSA-ppcq-248q-f293.json +++ b/advisories/unreviewed/2022/05/GHSA-ppcq-248q-f293/GHSA-ppcq-248q-f293.json @@ -7,12 +7,8 @@ "CVE-2020-3731" ], "details": "Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pq64-838x-3vmj/GHSA-pq64-838x-3vmj.json b/advisories/unreviewed/2022/05/GHSA-pq64-838x-3vmj/GHSA-pq64-838x-3vmj.json index 7ed914538ec..fc2127a1503 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq64-838x-3vmj/GHSA-pq64-838x-3vmj.json +++ b/advisories/unreviewed/2022/05/GHSA-pq64-838x-3vmj/GHSA-pq64-838x-3vmj.json @@ -7,12 +7,8 @@ "CVE-2015-7506" ], "details": "The gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted LZW stream in a GIF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pr6p-jqr4-vpw7/GHSA-pr6p-jqr4-vpw7.json b/advisories/unreviewed/2022/05/GHSA-pr6p-jqr4-vpw7/GHSA-pr6p-jqr4-vpw7.json index 77323c63ee6..86352b0de4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr6p-jqr4-vpw7/GHSA-pr6p-jqr4-vpw7.json +++ b/advisories/unreviewed/2022/05/GHSA-pr6p-jqr4-vpw7/GHSA-pr6p-jqr4-vpw7.json @@ -7,12 +7,8 @@ "CVE-2020-8960" ], "details": "Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prhv-f6q7-4g7p/GHSA-prhv-f6q7-4g7p.json b/advisories/unreviewed/2022/05/GHSA-prhv-f6q7-4g7p/GHSA-prhv-f6q7-4g7p.json index 0502706adc7..8b8d41ea6cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-prhv-f6q7-4g7p/GHSA-prhv-f6q7-4g7p.json +++ b/advisories/unreviewed/2022/05/GHSA-prhv-f6q7-4g7p/GHSA-prhv-f6q7-4g7p.json @@ -7,12 +7,8 @@ "CVE-2020-8824" ], "details": "Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pw37-9grr-qqxj/GHSA-pw37-9grr-qqxj.json b/advisories/unreviewed/2022/05/GHSA-pw37-9grr-qqxj/GHSA-pw37-9grr-qqxj.json index c102ecb7f76..c88a8f56435 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw37-9grr-qqxj/GHSA-pw37-9grr-qqxj.json +++ b/advisories/unreviewed/2022/05/GHSA-pw37-9grr-qqxj/GHSA-pw37-9grr-qqxj.json @@ -7,12 +7,8 @@ "CVE-2020-9043" ], "details": "The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connection key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw4f-4jh7-3j6p/GHSA-pw4f-4jh7-3j6p.json b/advisories/unreviewed/2022/05/GHSA-pw4f-4jh7-3j6p/GHSA-pw4f-4jh7-3j6p.json index c445b7dae8c..53f15984fd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw4f-4jh7-3j6p/GHSA-pw4f-4jh7-3j6p.json +++ b/advisories/unreviewed/2022/05/GHSA-pw4f-4jh7-3j6p/GHSA-pw4f-4jh7-3j6p.json @@ -7,12 +7,8 @@ "CVE-2020-9318" ], "details": "Red Gate SQL Monitor 9.0.13 through 9.2.14 allows an administrative user to perform a SQL injection attack by configuring the SNMP alert settings in the UI. This is fixed in 9.2.15.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwcf-p9qx-3948/GHSA-pwcf-p9qx-3948.json b/advisories/unreviewed/2022/05/GHSA-pwcf-p9qx-3948/GHSA-pwcf-p9qx-3948.json index 033b283cb27..cb81acfb2d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwcf-p9qx-3948/GHSA-pwcf-p9qx-3948.json +++ b/advisories/unreviewed/2022/05/GHSA-pwcf-p9qx-3948/GHSA-pwcf-p9qx-3948.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwqp-hgvp-g76x/GHSA-pwqp-hgvp-g76x.json b/advisories/unreviewed/2022/05/GHSA-pwqp-hgvp-g76x/GHSA-pwqp-hgvp-g76x.json index 136ca368af9..b75f2c1a54e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwqp-hgvp-g76x/GHSA-pwqp-hgvp-g76x.json +++ b/advisories/unreviewed/2022/05/GHSA-pwqp-hgvp-g76x/GHSA-pwqp-hgvp-g76x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwwh-9mwx-42h3/GHSA-pwwh-9mwx-42h3.json b/advisories/unreviewed/2022/05/GHSA-pwwh-9mwx-42h3/GHSA-pwwh-9mwx-42h3.json index e7433371d54..1edbc21ab73 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwwh-9mwx-42h3/GHSA-pwwh-9mwx-42h3.json +++ b/advisories/unreviewed/2022/05/GHSA-pwwh-9mwx-42h3/GHSA-pwwh-9mwx-42h3.json @@ -7,12 +7,8 @@ "CVE-2019-4000" ], "details": "Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2hg-9256-vrxm/GHSA-q2hg-9256-vrxm.json b/advisories/unreviewed/2022/05/GHSA-q2hg-9256-vrxm/GHSA-q2hg-9256-vrxm.json index a0f6e200922..8796f071927 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2hg-9256-vrxm/GHSA-q2hg-9256-vrxm.json +++ b/advisories/unreviewed/2022/05/GHSA-q2hg-9256-vrxm/GHSA-q2hg-9256-vrxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2vj-q3hr-h9m7/GHSA-q2vj-q3hr-h9m7.json b/advisories/unreviewed/2022/05/GHSA-q2vj-q3hr-h9m7/GHSA-q2vj-q3hr-h9m7.json index 256efb456e8..c3e0ce97b85 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2vj-q3hr-h9m7/GHSA-q2vj-q3hr-h9m7.json +++ b/advisories/unreviewed/2022/05/GHSA-q2vj-q3hr-h9m7/GHSA-q2vj-q3hr-h9m7.json @@ -7,12 +7,8 @@ "CVE-2019-19879" ], "details": "HashiCorp Sentinel up to 0.10.1 incorrectly parsed negation in certain policy expressions. Fixed in 0.10.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q3pf-qwv7-gj5j/GHSA-q3pf-qwv7-gj5j.json b/advisories/unreviewed/2022/05/GHSA-q3pf-qwv7-gj5j/GHSA-q3pf-qwv7-gj5j.json index 4a410fd652e..0bbfee2c7be 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3pf-qwv7-gj5j/GHSA-q3pf-qwv7-gj5j.json +++ b/advisories/unreviewed/2022/05/GHSA-q3pf-qwv7-gj5j/GHSA-q3pf-qwv7-gj5j.json @@ -7,12 +7,8 @@ "CVE-2020-8862" ], "details": "This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the lack of proper password checking. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-10082.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q483-wcf8-3hjc/GHSA-q483-wcf8-3hjc.json b/advisories/unreviewed/2022/05/GHSA-q483-wcf8-3hjc/GHSA-q483-wcf8-3hjc.json index 3393d279b05..aa6b92ba80c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q483-wcf8-3hjc/GHSA-q483-wcf8-3hjc.json +++ b/advisories/unreviewed/2022/05/GHSA-q483-wcf8-3hjc/GHSA-q483-wcf8-3hjc.json @@ -7,12 +7,8 @@ "CVE-2020-1704" ], "details": "An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in the openshift/istio-kialia-rhel7-operator-container. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4jx-p8j7-6rvw/GHSA-q4jx-p8j7-6rvw.json b/advisories/unreviewed/2022/05/GHSA-q4jx-p8j7-6rvw/GHSA-q4jx-p8j7-6rvw.json index 3515401a8e7..6a27a69da3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4jx-p8j7-6rvw/GHSA-q4jx-p8j7-6rvw.json +++ b/advisories/unreviewed/2022/05/GHSA-q4jx-p8j7-6rvw/GHSA-q4jx-p8j7-6rvw.json @@ -7,12 +7,8 @@ "CVE-2020-9265" ], "details": "phpMyChat-Plus 1.98 is vulnerable to multiple SQL injections against the deluser.php Delete User functionality, as demonstrated by pmc_username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q5h4-crfg-8c2v/GHSA-q5h4-crfg-8c2v.json b/advisories/unreviewed/2022/05/GHSA-q5h4-crfg-8c2v/GHSA-q5h4-crfg-8c2v.json index 0b1aec85687..0b20ddaf4c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5h4-crfg-8c2v/GHSA-q5h4-crfg-8c2v.json +++ b/advisories/unreviewed/2022/05/GHSA-q5h4-crfg-8c2v/GHSA-q5h4-crfg-8c2v.json @@ -7,12 +7,8 @@ "CVE-2015-0749" ], "details": "A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q5qp-pg7v-4wp3/GHSA-q5qp-pg7v-4wp3.json b/advisories/unreviewed/2022/05/GHSA-q5qp-pg7v-4wp3/GHSA-q5qp-pg7v-4wp3.json index bb325072dec..7c165e3da8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5qp-pg7v-4wp3/GHSA-q5qp-pg7v-4wp3.json +++ b/advisories/unreviewed/2022/05/GHSA-q5qp-pg7v-4wp3/GHSA-q5qp-pg7v-4wp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6cx-g4rm-cc6q/GHSA-q6cx-g4rm-cc6q.json b/advisories/unreviewed/2022/05/GHSA-q6cx-g4rm-cc6q/GHSA-q6cx-g4rm-cc6q.json index cecbb224a47..c9dd437fad7 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6cx-g4rm-cc6q/GHSA-q6cx-g4rm-cc6q.json +++ b/advisories/unreviewed/2022/05/GHSA-q6cx-g4rm-cc6q/GHSA-q6cx-g4rm-cc6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6rp-fxm7-mjq8/GHSA-q6rp-fxm7-mjq8.json b/advisories/unreviewed/2022/05/GHSA-q6rp-fxm7-mjq8/GHSA-q6rp-fxm7-mjq8.json index c5b369e610b..ed89c623930 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6rp-fxm7-mjq8/GHSA-q6rp-fxm7-mjq8.json +++ b/advisories/unreviewed/2022/05/GHSA-q6rp-fxm7-mjq8/GHSA-q6rp-fxm7-mjq8.json @@ -7,12 +7,8 @@ "CVE-2019-12863" ], "details": "SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) allows Stored HTML Injection by administrators via the Web Console Settings screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7w4-5343-4hqw/GHSA-q7w4-5343-4hqw.json b/advisories/unreviewed/2022/05/GHSA-q7w4-5343-4hqw/GHSA-q7w4-5343-4hqw.json index a05e3377c7c..0fa6018e46c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7w4-5343-4hqw/GHSA-q7w4-5343-4hqw.json +++ b/advisories/unreviewed/2022/05/GHSA-q7w4-5343-4hqw/GHSA-q7w4-5343-4hqw.json @@ -7,12 +7,8 @@ "CVE-2019-4537" ], "details": "IBM WebSphere Service Registry and Repository 8.5 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 165593.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q96x-24cf-mf7c/GHSA-q96x-24cf-mf7c.json b/advisories/unreviewed/2022/05/GHSA-q96x-24cf-mf7c/GHSA-q96x-24cf-mf7c.json index 84aab6856c5..117eb7c1622 100644 --- a/advisories/unreviewed/2022/05/GHSA-q96x-24cf-mf7c/GHSA-q96x-24cf-mf7c.json +++ b/advisories/unreviewed/2022/05/GHSA-q96x-24cf-mf7c/GHSA-q96x-24cf-mf7c.json @@ -7,12 +7,8 @@ "CVE-2019-19134" ], "details": "The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based tokens or to launch other attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9m6-p2jj-vgjv/GHSA-q9m6-p2jj-vgjv.json b/advisories/unreviewed/2022/05/GHSA-q9m6-p2jj-vgjv/GHSA-q9m6-p2jj-vgjv.json index fa6c02c4fe6..ad0f4acab3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9m6-p2jj-vgjv/GHSA-q9m6-p2jj-vgjv.json +++ b/advisories/unreviewed/2022/05/GHSA-q9m6-p2jj-vgjv/GHSA-q9m6-p2jj-vgjv.json @@ -7,12 +7,8 @@ "CVE-2019-17644" ], "details": "An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for include/configuration/configObject/host/refreshMacroAjax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9r3-hg6h-9wvh/GHSA-q9r3-hg6h-9wvh.json b/advisories/unreviewed/2022/05/GHSA-q9r3-hg6h-9wvh/GHSA-q9r3-hg6h-9wvh.json index e367d178849..5bce50aa326 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9r3-hg6h-9wvh/GHSA-q9r3-hg6h-9wvh.json +++ b/advisories/unreviewed/2022/05/GHSA-q9r3-hg6h-9wvh/GHSA-q9r3-hg6h-9wvh.json @@ -7,12 +7,8 @@ "CVE-2020-3730" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc6w-j34c-8p2x/GHSA-qc6w-j34c-8p2x.json b/advisories/unreviewed/2022/05/GHSA-qc6w-j34c-8p2x/GHSA-qc6w-j34c-8p2x.json index 37dcb6dacc3..cb73da27df1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc6w-j34c-8p2x/GHSA-qc6w-j34c-8p2x.json +++ b/advisories/unreviewed/2022/05/GHSA-qc6w-j34c-8p2x/GHSA-qc6w-j34c-8p2x.json @@ -7,12 +7,8 @@ "CVE-2019-19192" ], "details": "The Bluetooth Low Energy implementation on STMicroelectronics BLE Stack through 1.3.1 for STM32WB5x devices does not properly handle consecutive Attribute Protocol (ATT) requests on reception, allowing attackers in radio range to cause an event deadlock or crash via crafted packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc97-89j6-hccc/GHSA-qc97-89j6-hccc.json b/advisories/unreviewed/2022/05/GHSA-qc97-89j6-hccc/GHSA-qc97-89j6-hccc.json index 9509713f51c..acc968db8d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc97-89j6-hccc/GHSA-qc97-89j6-hccc.json +++ b/advisories/unreviewed/2022/05/GHSA-qc97-89j6-hccc/GHSA-qc97-89j6-hccc.json @@ -7,12 +7,8 @@ "CVE-2019-19694" ], "details": "The Trend Micro Security 2019 (15.0.0.1163 and below) consumer family of products is vulnerable to a denial of service (DoS) attack in which a malicious actor could manipulate a key file at a certain time during the system startup process to disable the product's malware protection functions or the entire product completely..", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qf3c-cpvg-3663/GHSA-qf3c-cpvg-3663.json b/advisories/unreviewed/2022/05/GHSA-qf3c-cpvg-3663/GHSA-qf3c-cpvg-3663.json index 192ba01a481..7c6a2e6e6d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf3c-cpvg-3663/GHSA-qf3c-cpvg-3663.json +++ b/advisories/unreviewed/2022/05/GHSA-qf3c-cpvg-3663/GHSA-qf3c-cpvg-3663.json @@ -7,12 +7,8 @@ "CVE-2015-6922" ], "details": "Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qf65-mvpw-q4qp/GHSA-qf65-mvpw-q4qp.json b/advisories/unreviewed/2022/05/GHSA-qf65-mvpw-q4qp/GHSA-qf65-mvpw-q4qp.json index 1cecd9e8fe2..350364c174f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf65-mvpw-q4qp/GHSA-qf65-mvpw-q4qp.json +++ b/advisories/unreviewed/2022/05/GHSA-qf65-mvpw-q4qp/GHSA-qf65-mvpw-q4qp.json @@ -7,12 +7,8 @@ "CVE-2019-16300" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qf75-pqfj-8jc9/GHSA-qf75-pqfj-8jc9.json b/advisories/unreviewed/2022/05/GHSA-qf75-pqfj-8jc9/GHSA-qf75-pqfj-8jc9.json index 62f83ef69a0..8076bef37d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf75-pqfj-8jc9/GHSA-qf75-pqfj-8jc9.json +++ b/advisories/unreviewed/2022/05/GHSA-qf75-pqfj-8jc9/GHSA-qf75-pqfj-8jc9.json @@ -7,12 +7,8 @@ "CVE-2020-0746" ], "details": "An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Information Disclosure Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfxw-56c6-7pjg/GHSA-qfxw-56c6-7pjg.json b/advisories/unreviewed/2022/05/GHSA-qfxw-56c6-7pjg/GHSA-qfxw-56c6-7pjg.json index df5f960eeb9..eb36aefe1a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfxw-56c6-7pjg/GHSA-qfxw-56c6-7pjg.json +++ b/advisories/unreviewed/2022/05/GHSA-qfxw-56c6-7pjg/GHSA-qfxw-56c6-7pjg.json @@ -7,12 +7,8 @@ "CVE-2020-7796" ], "details": "Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhf2-73w2-gwfh/GHSA-qhf2-73w2-gwfh.json b/advisories/unreviewed/2022/05/GHSA-qhf2-73w2-gwfh/GHSA-qhf2-73w2-gwfh.json index 52f17a8ff65..b6d66be3d71 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhf2-73w2-gwfh/GHSA-qhf2-73w2-gwfh.json +++ b/advisories/unreviewed/2022/05/GHSA-qhf2-73w2-gwfh/GHSA-qhf2-73w2-gwfh.json @@ -7,12 +7,8 @@ "CVE-2016-1000109" ], "details": "HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. This issue affects HHVM versions prior to 3.9.6, all versions between 3.10.0 and 3.12.4 (inclusive), and all versions between 3.13.0 and 3.14.2 (inclusive).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qhfv-hfvw-jqhq/GHSA-qhfv-hfvw-jqhq.json b/advisories/unreviewed/2022/05/GHSA-qhfv-hfvw-jqhq/GHSA-qhfv-hfvw-jqhq.json index 6e5a0563a58..91af70d2723 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhfv-hfvw-jqhq/GHSA-qhfv-hfvw-jqhq.json +++ b/advisories/unreviewed/2022/05/GHSA-qhfv-hfvw-jqhq/GHSA-qhfv-hfvw-jqhq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhr4-cgf5-cv23/GHSA-qhr4-cgf5-cv23.json b/advisories/unreviewed/2022/05/GHSA-qhr4-cgf5-cv23/GHSA-qhr4-cgf5-cv23.json index e7d05f89230..b03746b207f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhr4-cgf5-cv23/GHSA-qhr4-cgf5-cv23.json +++ b/advisories/unreviewed/2022/05/GHSA-qhr4-cgf5-cv23/GHSA-qhr4-cgf5-cv23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm4j-8w3w-3x7v/GHSA-qm4j-8w3w-3x7v.json b/advisories/unreviewed/2022/05/GHSA-qm4j-8w3w-3x7v/GHSA-qm4j-8w3w-3x7v.json index 3cdc99eccef..f5ad492689b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm4j-8w3w-3x7v/GHSA-qm4j-8w3w-3x7v.json +++ b/advisories/unreviewed/2022/05/GHSA-qm4j-8w3w-3x7v/GHSA-qm4j-8w3w-3x7v.json @@ -7,12 +7,8 @@ "CVE-2020-3872" ], "details": "A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qmhm-wffc-pxh9/GHSA-qmhm-wffc-pxh9.json b/advisories/unreviewed/2022/05/GHSA-qmhm-wffc-pxh9/GHSA-qmhm-wffc-pxh9.json index a893d555fa6..5a744978f12 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmhm-wffc-pxh9/GHSA-qmhm-wffc-pxh9.json +++ b/advisories/unreviewed/2022/05/GHSA-qmhm-wffc-pxh9/GHSA-qmhm-wffc-pxh9.json @@ -7,12 +7,8 @@ "CVE-2020-8800" ], "details": "SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qpf3-prqh-vf6g/GHSA-qpf3-prqh-vf6g.json b/advisories/unreviewed/2022/05/GHSA-qpf3-prqh-vf6g/GHSA-qpf3-prqh-vf6g.json index ec352cf7105..e689e3a8869 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpf3-prqh-vf6g/GHSA-qpf3-prqh-vf6g.json +++ b/advisories/unreviewed/2022/05/GHSA-qpf3-prqh-vf6g/GHSA-qpf3-prqh-vf6g.json @@ -7,12 +7,8 @@ "CVE-2019-4427" ], "details": "IBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorithm to generate a installer with malicious software inside. IBM X-Force ID: 162773.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqf9-xgg2-qrxx/GHSA-qqf9-xgg2-qrxx.json b/advisories/unreviewed/2022/05/GHSA-qqf9-xgg2-qrxx/GHSA-qqf9-xgg2-qrxx.json index edeb1acc5a1..5d547b146cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqf9-xgg2-qrxx/GHSA-qqf9-xgg2-qrxx.json +++ b/advisories/unreviewed/2022/05/GHSA-qqf9-xgg2-qrxx/GHSA-qqf9-xgg2-qrxx.json @@ -7,12 +7,8 @@ "CVE-2020-3168" ], "details": "A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module (VSM) to become inaccessible to users through the CLI. The vulnerability is due to improper resource allocation during failed CLI login attempts when login parameters that are part of the Secure Login Enhancements capability are configured on an affected device. An attacker could exploit this vulnerability by performing a high amount of login attempts against the affected device. A successful exploit could cause the affected device to become inaccessible to other users, resulting in a denial of service (DoS) condition requiring a manual power cycle of the VSM to recover.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqr8-vww9-h837/GHSA-qqr8-vww9-h837.json b/advisories/unreviewed/2022/05/GHSA-qqr8-vww9-h837/GHSA-qqr8-vww9-h837.json index 00117264260..fe6dee5581f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqr8-vww9-h837/GHSA-qqr8-vww9-h837.json +++ b/advisories/unreviewed/2022/05/GHSA-qqr8-vww9-h837/GHSA-qqr8-vww9-h837.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qv54-r855-f5j8/GHSA-qv54-r855-f5j8.json b/advisories/unreviewed/2022/05/GHSA-qv54-r855-f5j8/GHSA-qv54-r855-f5j8.json index d9cdee4a8a0..12936dba4fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-qv54-r855-f5j8/GHSA-qv54-r855-f5j8.json +++ b/advisories/unreviewed/2022/05/GHSA-qv54-r855-f5j8/GHSA-qv54-r855-f5j8.json @@ -7,12 +7,8 @@ "CVE-2020-3155" ], "details": "A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices and Cisco collaboration endpoints if the products meet the conditions described in the Vulnerable Products section. The vulnerability is due to a lack of validation of the SSL server certificate received when establishing a connection to a Cisco Webex video device or a Cisco collaboration endpoint. An attacker could exploit this vulnerability by using man in the middle (MITM) techniques to intercept the traffic between the affected client and an endpoint, and then using a forged certificate to impersonate the endpoint. Depending on the configuration of the endpoint, an exploit could allow the attacker to view presentation content shared on it, modify any content being presented by the victim, or have access to call controls. This vulnerability does not affect cloud registered collaboration endpoints.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvcr-mg85-mjgg/GHSA-qvcr-mg85-mjgg.json b/advisories/unreviewed/2022/05/GHSA-qvcr-mg85-mjgg/GHSA-qvcr-mg85-mjgg.json index 372dde8c5c4..bd0f9343e21 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvcr-mg85-mjgg/GHSA-qvcr-mg85-mjgg.json +++ b/advisories/unreviewed/2022/05/GHSA-qvcr-mg85-mjgg/GHSA-qvcr-mg85-mjgg.json @@ -7,12 +7,8 @@ "CVE-2020-3158" ], "details": "A vulnerability in the High Availability (HA) service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password and is not under the control of the system administrator. An attacker could exploit this vulnerability by using this default account to connect to the affected system. A successful exploit could allow the attacker to obtain read and write access to system data, including the configuration of an affected device. The attacker would gain access to a sensitive portion of the system, but the attacker would not have full administrative rights to control the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2q2-3638-2qp4/GHSA-r2q2-3638-2qp4.json b/advisories/unreviewed/2022/05/GHSA-r2q2-3638-2qp4/GHSA-r2q2-3638-2qp4.json index e36e63b0a08..c7f2d2abca4 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2q2-3638-2qp4/GHSA-r2q2-3638-2qp4.json +++ b/advisories/unreviewed/2022/05/GHSA-r2q2-3638-2qp4/GHSA-r2q2-3638-2qp4.json @@ -7,12 +7,8 @@ "CVE-2020-9272" ], "details": "ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2qf-75cq-8rxc/GHSA-r2qf-75cq-8rxc.json b/advisories/unreviewed/2022/05/GHSA-r2qf-75cq-8rxc/GHSA-r2qf-75cq-8rxc.json index 14d04386700..d9c61e3bc6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2qf-75cq-8rxc/GHSA-r2qf-75cq-8rxc.json +++ b/advisories/unreviewed/2022/05/GHSA-r2qf-75cq-8rxc/GHSA-r2qf-75cq-8rxc.json @@ -7,12 +7,8 @@ "CVE-2020-1892" ], "details": "Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2qx-grq5-8x3g/GHSA-r2qx-grq5-8x3g.json b/advisories/unreviewed/2022/05/GHSA-r2qx-grq5-8x3g/GHSA-r2qx-grq5-8x3g.json index c273e87dd1b..794b921cce0 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2qx-grq5-8x3g/GHSA-r2qx-grq5-8x3g.json +++ b/advisories/unreviewed/2022/05/GHSA-r2qx-grq5-8x3g/GHSA-r2qx-grq5-8x3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3c8-x93q-f6vm/GHSA-r3c8-x93q-f6vm.json b/advisories/unreviewed/2022/05/GHSA-r3c8-x93q-f6vm/GHSA-r3c8-x93q-f6vm.json index 661a625f9d4..ed009a455b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3c8-x93q-f6vm/GHSA-r3c8-x93q-f6vm.json +++ b/advisories/unreviewed/2022/05/GHSA-r3c8-x93q-f6vm/GHSA-r3c8-x93q-f6vm.json @@ -7,12 +7,8 @@ "CVE-2020-0719" ], "details": "An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4fr-75hr-j5cq/GHSA-r4fr-75hr-j5cq.json b/advisories/unreviewed/2022/05/GHSA-r4fr-75hr-j5cq/GHSA-r4fr-75hr-j5cq.json index 82baa14d1ec..17cdfcc60a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4fr-75hr-j5cq/GHSA-r4fr-75hr-j5cq.json +++ b/advisories/unreviewed/2022/05/GHSA-r4fr-75hr-j5cq/GHSA-r4fr-75hr-j5cq.json @@ -7,12 +7,8 @@ "CVE-2020-9034" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4p9-4g64-q7xc/GHSA-r4p9-4g64-q7xc.json b/advisories/unreviewed/2022/05/GHSA-r4p9-4g64-q7xc/GHSA-r4p9-4g64-q7xc.json index 2ced552831f..dc379ef4e86 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4p9-4g64-q7xc/GHSA-r4p9-4g64-q7xc.json +++ b/advisories/unreviewed/2022/05/GHSA-r4p9-4g64-q7xc/GHSA-r4p9-4g64-q7xc.json @@ -7,12 +7,8 @@ "CVE-2020-1855" ], "details": "Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r659-m5mg-23ch/GHSA-r659-m5mg-23ch.json b/advisories/unreviewed/2022/05/GHSA-r659-m5mg-23ch/GHSA-r659-m5mg-23ch.json index 4507213abff..3b4ed1385eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-r659-m5mg-23ch/GHSA-r659-m5mg-23ch.json +++ b/advisories/unreviewed/2022/05/GHSA-r659-m5mg-23ch/GHSA-r659-m5mg-23ch.json @@ -7,12 +7,8 @@ "CVE-2020-8594" ], "details": "The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6h8-jc2c-86jf/GHSA-r6h8-jc2c-86jf.json b/advisories/unreviewed/2022/05/GHSA-r6h8-jc2c-86jf/GHSA-r6h8-jc2c-86jf.json index 5a951497f0c..e03e876c475 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6h8-jc2c-86jf/GHSA-r6h8-jc2c-86jf.json +++ b/advisories/unreviewed/2022/05/GHSA-r6h8-jc2c-86jf/GHSA-r6h8-jc2c-86jf.json @@ -7,12 +7,8 @@ "CVE-2020-3171" ], "details": "A vulnerability in the local management (local-mgmt) CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted arguments to specific commands. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects, the injected commands are executed with root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7wh-r6rc-3qm5/GHSA-r7wh-r6rc-3qm5.json b/advisories/unreviewed/2022/05/GHSA-r7wh-r6rc-3qm5/GHSA-r7wh-r6rc-3qm5.json index cdcd49f374f..ff98495af7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7wh-r6rc-3qm5/GHSA-r7wh-r6rc-3qm5.json +++ b/advisories/unreviewed/2022/05/GHSA-r7wh-r6rc-3qm5/GHSA-r7wh-r6rc-3qm5.json @@ -7,12 +7,8 @@ "CVE-2020-8989" ], "details": "In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different lengths of the metadata across the available voting choices, which makes it easier for remote attackers to discover this voter's choice by sniffing the network. For example, a small amount of sniffed data may indicate that a vote was cast for the candidate with the least metadata. An active man-in-the-middle attacker can leverage this behavior to disrupt voters' abilities to vote for a candidate opposed by the attacker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r895-r5c8-hvhp/GHSA-r895-r5c8-hvhp.json b/advisories/unreviewed/2022/05/GHSA-r895-r5c8-hvhp/GHSA-r895-r5c8-hvhp.json index da84445aab7..ab60acc90e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-r895-r5c8-hvhp/GHSA-r895-r5c8-hvhp.json +++ b/advisories/unreviewed/2022/05/GHSA-r895-r5c8-hvhp/GHSA-r895-r5c8-hvhp.json @@ -7,12 +7,8 @@ "CVE-2020-1827" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r8fj-gpx6-mcf6/GHSA-r8fj-gpx6-mcf6.json b/advisories/unreviewed/2022/05/GHSA-r8fj-gpx6-mcf6/GHSA-r8fj-gpx6-mcf6.json index 0cf4866dc0d..f2cf94b7387 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8fj-gpx6-mcf6/GHSA-r8fj-gpx6-mcf6.json +++ b/advisories/unreviewed/2022/05/GHSA-r8fj-gpx6-mcf6/GHSA-r8fj-gpx6-mcf6.json @@ -7,12 +7,8 @@ "CVE-2019-19992" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vam_editXml.php doesn't check the parameter that identifies the file name to be read. Thus, an attacker can manipulate the file name to access a potentially sensitive file within the filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r99m-j698-9778/GHSA-r99m-j698-9778.json b/advisories/unreviewed/2022/05/GHSA-r99m-j698-9778/GHSA-r99m-j698-9778.json index d179369b8b8..6673847ae39 100644 --- a/advisories/unreviewed/2022/05/GHSA-r99m-j698-9778/GHSA-r99m-j698-9778.json +++ b/advisories/unreviewed/2022/05/GHSA-r99m-j698-9778/GHSA-r99m-j698-9778.json @@ -7,12 +7,8 @@ "CVE-2020-1815" ], "details": "Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a memory leak vulnerability. The software does not sufficiently track and release allocated memory while parse certain message, the attacker sends the message continuously that could consume remaining memory. Successful exploit could cause memory exhaust.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9wv-87cr-24pw/GHSA-r9wv-87cr-24pw.json b/advisories/unreviewed/2022/05/GHSA-r9wv-87cr-24pw/GHSA-r9wv-87cr-24pw.json index 5c70a77eff4..d37319089d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9wv-87cr-24pw/GHSA-r9wv-87cr-24pw.json +++ b/advisories/unreviewed/2022/05/GHSA-r9wv-87cr-24pw/GHSA-r9wv-87cr-24pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rc7x-cfxf-7qxv/GHSA-rc7x-cfxf-7qxv.json b/advisories/unreviewed/2022/05/GHSA-rc7x-cfxf-7qxv/GHSA-rc7x-cfxf-7qxv.json index d7903e8467e..72d4cb9791b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rc7x-cfxf-7qxv/GHSA-rc7x-cfxf-7qxv.json +++ b/advisories/unreviewed/2022/05/GHSA-rc7x-cfxf-7qxv/GHSA-rc7x-cfxf-7qxv.json @@ -7,12 +7,8 @@ "CVE-2019-4457" ], "details": "IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rcx8-6xcx-7vh9/GHSA-rcx8-6xcx-7vh9.json b/advisories/unreviewed/2022/05/GHSA-rcx8-6xcx-7vh9/GHSA-rcx8-6xcx-7vh9.json index a9e6532b91a..b59a464e12d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcx8-6xcx-7vh9/GHSA-rcx8-6xcx-7vh9.json +++ b/advisories/unreviewed/2022/05/GHSA-rcx8-6xcx-7vh9/GHSA-rcx8-6xcx-7vh9.json @@ -7,12 +7,8 @@ "CVE-2020-1829" ], "details": "Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfjr-ggwm-vm7m/GHSA-rfjr-ggwm-vm7m.json b/advisories/unreviewed/2022/05/GHSA-rfjr-ggwm-vm7m/GHSA-rfjr-ggwm-vm7m.json index 23f22fb8db1..3c66922e6b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfjr-ggwm-vm7m/GHSA-rfjr-ggwm-vm7m.json +++ b/advisories/unreviewed/2022/05/GHSA-rfjr-ggwm-vm7m/GHSA-rfjr-ggwm-vm7m.json @@ -7,12 +7,8 @@ "CVE-2020-3721" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfr7-5wcc-v3x3/GHSA-rfr7-5wcc-v3x3.json b/advisories/unreviewed/2022/05/GHSA-rfr7-5wcc-v3x3/GHSA-rfr7-5wcc-v3x3.json index d2fa3126f83..54419b3011a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfr7-5wcc-v3x3/GHSA-rfr7-5wcc-v3x3.json +++ b/advisories/unreviewed/2022/05/GHSA-rfr7-5wcc-v3x3/GHSA-rfr7-5wcc-v3x3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfwm-gjv2-882q/GHSA-rfwm-gjv2-882q.json b/advisories/unreviewed/2022/05/GHSA-rfwm-gjv2-882q/GHSA-rfwm-gjv2-882q.json index 279dd6bde96..1429f1235e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfwm-gjv2-882q/GHSA-rfwm-gjv2-882q.json +++ b/advisories/unreviewed/2022/05/GHSA-rfwm-gjv2-882q/GHSA-rfwm-gjv2-882q.json @@ -7,12 +7,8 @@ "CVE-2020-0755" ], "details": "An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0756.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgr9-724v-h4h3/GHSA-rgr9-724v-h4h3.json b/advisories/unreviewed/2022/05/GHSA-rgr9-724v-h4h3/GHSA-rgr9-724v-h4h3.json index 1fd99515fd6..a7447f8ebbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgr9-724v-h4h3/GHSA-rgr9-724v-h4h3.json +++ b/advisories/unreviewed/2022/05/GHSA-rgr9-724v-h4h3/GHSA-rgr9-724v-h4h3.json @@ -7,12 +7,8 @@ "CVE-2020-9032" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to kernlog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh2q-c54f-9crg/GHSA-rh2q-c54f-9crg.json b/advisories/unreviewed/2022/05/GHSA-rh2q-c54f-9crg/GHSA-rh2q-c54f-9crg.json index 625142d28e5..828daa91d9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh2q-c54f-9crg/GHSA-rh2q-c54f-9crg.json +++ b/advisories/unreviewed/2022/05/GHSA-rh2q-c54f-9crg/GHSA-rh2q-c54f-9crg.json @@ -7,12 +7,8 @@ "CVE-2020-3744" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhgf-c9m6-xg7c/GHSA-rhgf-c9m6-xg7c.json b/advisories/unreviewed/2022/05/GHSA-rhgf-c9m6-xg7c/GHSA-rhgf-c9m6-xg7c.json index 8a5339b5f3d..85f63d455d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhgf-c9m6-xg7c/GHSA-rhgf-c9m6-xg7c.json +++ b/advisories/unreviewed/2022/05/GHSA-rhgf-c9m6-xg7c/GHSA-rhgf-c9m6-xg7c.json @@ -7,12 +7,8 @@ "CVE-2020-5533" ], "details": "Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rhr4-r5j8-5jjq/GHSA-rhr4-r5j8-5jjq.json b/advisories/unreviewed/2022/05/GHSA-rhr4-r5j8-5jjq/GHSA-rhr4-r5j8-5jjq.json index bca48d546d6..eca97a3a75e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhr4-r5j8-5jjq/GHSA-rhr4-r5j8-5jjq.json +++ b/advisories/unreviewed/2022/05/GHSA-rhr4-r5j8-5jjq/GHSA-rhr4-r5j8-5jjq.json @@ -7,12 +7,8 @@ "CVE-2020-8964" ], "details": "TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to bypass authentication by placing t3axs=TiMEtOOlsj7G3xMm52wB in a t3.cgi request, aka a \"hardcoded cookie.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rhvj-gv4v-wvcv/GHSA-rhvj-gv4v-wvcv.json b/advisories/unreviewed/2022/05/GHSA-rhvj-gv4v-wvcv/GHSA-rhvj-gv4v-wvcv.json index b9c5ca72060..2abb407bf11 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhvj-gv4v-wvcv/GHSA-rhvj-gv4v-wvcv.json +++ b/advisories/unreviewed/2022/05/GHSA-rhvj-gv4v-wvcv/GHSA-rhvj-gv4v-wvcv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rp3c-qq44-v9fp/GHSA-rp3c-qq44-v9fp.json b/advisories/unreviewed/2022/05/GHSA-rp3c-qq44-v9fp/GHSA-rp3c-qq44-v9fp.json index 3d80abc5f0a..5051b170de3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp3c-qq44-v9fp/GHSA-rp3c-qq44-v9fp.json +++ b/advisories/unreviewed/2022/05/GHSA-rp3c-qq44-v9fp/GHSA-rp3c-qq44-v9fp.json @@ -7,12 +7,8 @@ "CVE-2020-8946" ], "details": "Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/sys_log_clean.cgi log_3g_type parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rp5h-fhc8-hqfx/GHSA-rp5h-fhc8-hqfx.json b/advisories/unreviewed/2022/05/GHSA-rp5h-fhc8-hqfx/GHSA-rp5h-fhc8-hqfx.json index 7bac9db8dae..71b881fbaae 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp5h-fhc8-hqfx/GHSA-rp5h-fhc8-hqfx.json +++ b/advisories/unreviewed/2022/05/GHSA-rp5h-fhc8-hqfx/GHSA-rp5h-fhc8-hqfx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rp5q-hh57-wxgx/GHSA-rp5q-hh57-wxgx.json b/advisories/unreviewed/2022/05/GHSA-rp5q-hh57-wxgx/GHSA-rp5q-hh57-wxgx.json index ac6c0b12029..d70f30a778d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp5q-hh57-wxgx/GHSA-rp5q-hh57-wxgx.json +++ b/advisories/unreviewed/2022/05/GHSA-rp5q-hh57-wxgx/GHSA-rp5q-hh57-wxgx.json @@ -7,12 +7,8 @@ "CVE-2019-3404" ], "details": "By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication. This affects 360 router P0 and F5C.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rp93-mq8m-97gw/GHSA-rp93-mq8m-97gw.json b/advisories/unreviewed/2022/05/GHSA-rp93-mq8m-97gw/GHSA-rp93-mq8m-97gw.json index 8b4adbbe3d2..b7839a2a2ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp93-mq8m-97gw/GHSA-rp93-mq8m-97gw.json +++ b/advisories/unreviewed/2022/05/GHSA-rp93-mq8m-97gw/GHSA-rp93-mq8m-97gw.json @@ -7,12 +7,8 @@ "CVE-2020-3723" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpjx-w3gx-pgp2/GHSA-rpjx-w3gx-pgp2.json b/advisories/unreviewed/2022/05/GHSA-rpjx-w3gx-pgp2/GHSA-rpjx-w3gx-pgp2.json index c59e53fcacb..36b4b2db642 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpjx-w3gx-pgp2/GHSA-rpjx-w3gx-pgp2.json +++ b/advisories/unreviewed/2022/05/GHSA-rpjx-w3gx-pgp2/GHSA-rpjx-w3gx-pgp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rprc-6fr2-45v9/GHSA-rprc-6fr2-45v9.json b/advisories/unreviewed/2022/05/GHSA-rprc-6fr2-45v9/GHSA-rprc-6fr2-45v9.json index ef4ff6a05d0..7de69111a41 100644 --- a/advisories/unreviewed/2022/05/GHSA-rprc-6fr2-45v9/GHSA-rprc-6fr2-45v9.json +++ b/advisories/unreviewed/2022/05/GHSA-rprc-6fr2-45v9/GHSA-rprc-6fr2-45v9.json @@ -7,12 +7,8 @@ "CVE-2020-9354" ], "details": "An issue was discovered in SmartClient 12.0. The Remote Procedure Call (RPC) saveFile provided by the console functionality on the /tools/developerConsoleOperations.jsp (or /isomorphic/IDACall) URL allows an unauthenticated attacker to overwrite files via vectors involving an XML comment and /.. path traversal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpv4-4xh7-p4f6/GHSA-rpv4-4xh7-p4f6.json b/advisories/unreviewed/2022/05/GHSA-rpv4-4xh7-p4f6/GHSA-rpv4-4xh7-p4f6.json index e7455f5d842..3cb96ad7d6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpv4-4xh7-p4f6/GHSA-rpv4-4xh7-p4f6.json +++ b/advisories/unreviewed/2022/05/GHSA-rpv4-4xh7-p4f6/GHSA-rpv4-4xh7-p4f6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrfh-vr5f-gm86/GHSA-rrfh-vr5f-gm86.json b/advisories/unreviewed/2022/05/GHSA-rrfh-vr5f-gm86/GHSA-rrfh-vr5f-gm86.json index 1d3269185bd..4ad5c9e2c0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrfh-vr5f-gm86/GHSA-rrfh-vr5f-gm86.json +++ b/advisories/unreviewed/2022/05/GHSA-rrfh-vr5f-gm86/GHSA-rrfh-vr5f-gm86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrvx-f88m-c779/GHSA-rrvx-f88m-c779.json b/advisories/unreviewed/2022/05/GHSA-rrvx-f88m-c779/GHSA-rrvx-f88m-c779.json index 71ee23ce110..695a5a6731a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrvx-f88m-c779/GHSA-rrvx-f88m-c779.json +++ b/advisories/unreviewed/2022/05/GHSA-rrvx-f88m-c779/GHSA-rrvx-f88m-c779.json @@ -7,12 +7,8 @@ "CVE-2020-8990" ], "details": "Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rrw9-w2gg-fc6m/GHSA-rrw9-w2gg-fc6m.json b/advisories/unreviewed/2022/05/GHSA-rrw9-w2gg-fc6m/GHSA-rrw9-w2gg-fc6m.json index a8f501e476e..6ffc1cba4f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrw9-w2gg-fc6m/GHSA-rrw9-w2gg-fc6m.json +++ b/advisories/unreviewed/2022/05/GHSA-rrw9-w2gg-fc6m/GHSA-rrw9-w2gg-fc6m.json @@ -7,12 +7,8 @@ "CVE-2020-3856" ], "details": "A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted string may lead to heap corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv56-hq65-5hgg/GHSA-rv56-hq65-5hgg.json b/advisories/unreviewed/2022/05/GHSA-rv56-hq65-5hgg/GHSA-rv56-hq65-5hgg.json index 1cbab72b8b2..6f33790d98b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv56-hq65-5hgg/GHSA-rv56-hq65-5hgg.json +++ b/advisories/unreviewed/2022/05/GHSA-rv56-hq65-5hgg/GHSA-rv56-hq65-5hgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvm9-vjh6-7fhr/GHSA-rvm9-vjh6-7fhr.json b/advisories/unreviewed/2022/05/GHSA-rvm9-vjh6-7fhr/GHSA-rvm9-vjh6-7fhr.json index 682e42709de..19b3ac0347c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvm9-vjh6-7fhr/GHSA-rvm9-vjh6-7fhr.json +++ b/advisories/unreviewed/2022/05/GHSA-rvm9-vjh6-7fhr/GHSA-rvm9-vjh6-7fhr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v237-v8f4-gj29/GHSA-v237-v8f4-gj29.json b/advisories/unreviewed/2022/05/GHSA-v237-v8f4-gj29/GHSA-v237-v8f4-gj29.json index 3f9963fdf9d..1cbc246c26d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v237-v8f4-gj29/GHSA-v237-v8f4-gj29.json +++ b/advisories/unreviewed/2022/05/GHSA-v237-v8f4-gj29/GHSA-v237-v8f4-gj29.json @@ -7,12 +7,8 @@ "CVE-2020-3156" ], "details": "A vulnerability in the logging component of Cisco Identity Services Engine could allow an unauthenticated remote attacker to conduct cross-site scripting attacks. The vulnerability is due to the improper validation of endpoint data stored in logs used by the web-based interface. An attacker could exploit this vulnerability by sending malicious endpoint data to the targeted system. An exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v2mf-949v-6qrh/GHSA-v2mf-949v-6qrh.json b/advisories/unreviewed/2022/05/GHSA-v2mf-949v-6qrh/GHSA-v2mf-949v-6qrh.json index 54767edcb68..3f6459214aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2mf-949v-6qrh/GHSA-v2mf-949v-6qrh.json +++ b/advisories/unreviewed/2022/05/GHSA-v2mf-949v-6qrh/GHSA-v2mf-949v-6qrh.json @@ -7,12 +7,8 @@ "CVE-2020-3173" ], "details": "A vulnerability in the local management (local-mgmt) CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by including crafted arguments to specific commands on the local management CLI. A successful exploit could allow the attacker to execute arbitrary commands on the underlying OS with the privileges of the currently logged-in user for all affected platforms excluding Cisco UCS 6400 Series Fabric Interconnects. On Cisco UCS 6400 Series Fabric Interconnects, the injected commands are executed with root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v54x-qq77-866f/GHSA-v54x-qq77-866f.json b/advisories/unreviewed/2022/05/GHSA-v54x-qq77-866f/GHSA-v54x-qq77-866f.json index 0514240c665..6324b3a50d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-v54x-qq77-866f/GHSA-v54x-qq77-866f.json +++ b/advisories/unreviewed/2022/05/GHSA-v54x-qq77-866f/GHSA-v54x-qq77-866f.json @@ -7,12 +7,8 @@ "CVE-2020-8518" ], "details": "Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v783-rccm-cpr3/GHSA-v783-rccm-cpr3.json b/advisories/unreviewed/2022/05/GHSA-v783-rccm-cpr3/GHSA-v783-rccm-cpr3.json index ceadab42d6c..f963db28c0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v783-rccm-cpr3/GHSA-v783-rccm-cpr3.json +++ b/advisories/unreviewed/2022/05/GHSA-v783-rccm-cpr3/GHSA-v783-rccm-cpr3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7jr-wfqh-v962/GHSA-v7jr-wfqh-v962.json b/advisories/unreviewed/2022/05/GHSA-v7jr-wfqh-v962/GHSA-v7jr-wfqh-v962.json index 8f9c1535434..185781e7245 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7jr-wfqh-v962/GHSA-v7jr-wfqh-v962.json +++ b/advisories/unreviewed/2022/05/GHSA-v7jr-wfqh-v962/GHSA-v7jr-wfqh-v962.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7w4-x8mq-35m8/GHSA-v7w4-x8mq-35m8.json b/advisories/unreviewed/2022/05/GHSA-v7w4-x8mq-35m8/GHSA-v7w4-x8mq-35m8.json index 7af965a7d51..8d55291dbf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7w4-x8mq-35m8/GHSA-v7w4-x8mq-35m8.json +++ b/advisories/unreviewed/2022/05/GHSA-v7w4-x8mq-35m8/GHSA-v7w4-x8mq-35m8.json @@ -7,12 +7,8 @@ "CVE-2020-1842" ], "details": "Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v83w-q967-3rgv/GHSA-v83w-q967-3rgv.json b/advisories/unreviewed/2022/05/GHSA-v83w-q967-3rgv/GHSA-v83w-q967-3rgv.json index 3198926be27..dea26512244 100644 --- a/advisories/unreviewed/2022/05/GHSA-v83w-q967-3rgv/GHSA-v83w-q967-3rgv.json +++ b/advisories/unreviewed/2022/05/GHSA-v83w-q967-3rgv/GHSA-v83w-q967-3rgv.json @@ -7,12 +7,8 @@ "CVE-2020-3763" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to arbitrary file system write.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v96x-8xcv-qqxp/GHSA-v96x-8xcv-qqxp.json b/advisories/unreviewed/2022/05/GHSA-v96x-8xcv-qqxp/GHSA-v96x-8xcv-qqxp.json index 3defe8c953d..e3fa95280b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-v96x-8xcv-qqxp/GHSA-v96x-8xcv-qqxp.json +++ b/advisories/unreviewed/2022/05/GHSA-v96x-8xcv-qqxp/GHSA-v96x-8xcv-qqxp.json @@ -7,12 +7,8 @@ "CVE-2020-8981" ], "details": "A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings permit it). This is related to CVE-2018-16362.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vf7f-rm6p-4f56/GHSA-vf7f-rm6p-4f56.json b/advisories/unreviewed/2022/05/GHSA-vf7f-rm6p-4f56/GHSA-vf7f-rm6p-4f56.json index 210b6eb3979..8055f17a936 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf7f-rm6p-4f56/GHSA-vf7f-rm6p-4f56.json +++ b/advisories/unreviewed/2022/05/GHSA-vf7f-rm6p-4f56/GHSA-vf7f-rm6p-4f56.json @@ -7,12 +7,8 @@ "CVE-2020-1812" ], "details": "HUAWEI P30 smartphones with versions earlier than 10.0.0.173(C00E73R1P11) have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit could allow the attacker to bypass the authentication to perform unauthorized operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vg66-2m2c-p54v/GHSA-vg66-2m2c-p54v.json b/advisories/unreviewed/2022/05/GHSA-vg66-2m2c-p54v/GHSA-vg66-2m2c-p54v.json index 57445b0180a..6768f3a8340 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg66-2m2c-p54v/GHSA-vg66-2m2c-p54v.json +++ b/advisories/unreviewed/2022/05/GHSA-vg66-2m2c-p54v/GHSA-vg66-2m2c-p54v.json @@ -7,12 +7,8 @@ "CVE-2020-9379" ], "details": "The Software Development Kit of the MiContact Center Business with Site Based Security 8.0 through 9.0.1.0 before KB496276 allows an authenticated user to access sensitive information. A successful exploit could allow unauthorized access to user conversations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgcv-58jw-xrwf/GHSA-vgcv-58jw-xrwf.json b/advisories/unreviewed/2022/05/GHSA-vgcv-58jw-xrwf/GHSA-vgcv-58jw-xrwf.json index e04156f9531..b0b615a81bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgcv-58jw-xrwf/GHSA-vgcv-58jw-xrwf.json +++ b/advisories/unreviewed/2022/05/GHSA-vgcv-58jw-xrwf/GHSA-vgcv-58jw-xrwf.json @@ -7,12 +7,8 @@ "CVE-2020-8795" ], "details": "In GitLab Enterprise Edition (EE) 12.5.0 through 12.7.5, sharing a group with a group could grant project access to unauthorized users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgpp-7j95-7pmj/GHSA-vgpp-7j95-7pmj.json b/advisories/unreviewed/2022/05/GHSA-vgpp-7j95-7pmj/GHSA-vgpp-7j95-7pmj.json index 4a9c0901114..23449a50c26 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgpp-7j95-7pmj/GHSA-vgpp-7j95-7pmj.json +++ b/advisories/unreviewed/2022/05/GHSA-vgpp-7j95-7pmj/GHSA-vgpp-7j95-7pmj.json @@ -7,12 +7,8 @@ "CVE-2015-2923" ], "details": "The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit value in a Router Advertisement (RA) message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgw4-h4gp-jff3/GHSA-vgw4-h4gp-jff3.json b/advisories/unreviewed/2022/05/GHSA-vgw4-h4gp-jff3/GHSA-vgw4-h4gp-jff3.json index a709d21c1b5..498e30e0bf1 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgw4-h4gp-jff3/GHSA-vgw4-h4gp-jff3.json +++ b/advisories/unreviewed/2022/05/GHSA-vgw4-h4gp-jff3/GHSA-vgw4-h4gp-jff3.json @@ -7,12 +7,8 @@ "CVE-2019-19994" ], "details": "An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vh29-pqch-824r/GHSA-vh29-pqch-824r.json b/advisories/unreviewed/2022/05/GHSA-vh29-pqch-824r/GHSA-vh29-pqch-824r.json index c29c4e82d4e..7443ad542d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-vh29-pqch-824r/GHSA-vh29-pqch-824r.json +++ b/advisories/unreviewed/2022/05/GHSA-vh29-pqch-824r/GHSA-vh29-pqch-824r.json @@ -7,12 +7,8 @@ "CVE-2019-4392" ], "details": "HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhf5-cv54-qp4m/GHSA-vhf5-cv54-qp4m.json b/advisories/unreviewed/2022/05/GHSA-vhf5-cv54-qp4m/GHSA-vhf5-cv54-qp4m.json index 79ed615c34c..530fb40be44 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhf5-cv54-qp4m/GHSA-vhf5-cv54-qp4m.json +++ b/advisories/unreviewed/2022/05/GHSA-vhf5-cv54-qp4m/GHSA-vhf5-cv54-qp4m.json @@ -7,12 +7,8 @@ "CVE-2018-14705" ], "details": "In Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing the device over the network may interact with and control these applications. This not only poses a severe risk to the availability of these applications, but also poses severe risks to the confidentiality and integrity of data stored within the applications and the device itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhfr-653c-g79j/GHSA-vhfr-653c-g79j.json b/advisories/unreviewed/2022/05/GHSA-vhfr-653c-g79j/GHSA-vhfr-653c-g79j.json index f920e080f93..3aa87e54789 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhfr-653c-g79j/GHSA-vhfr-653c-g79j.json +++ b/advisories/unreviewed/2022/05/GHSA-vhfr-653c-g79j/GHSA-vhfr-653c-g79j.json @@ -7,12 +7,8 @@ "CVE-2020-6380" ], "details": "Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted Chrome Extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vj69-jmfq-4mjc/GHSA-vj69-jmfq-4mjc.json b/advisories/unreviewed/2022/05/GHSA-vj69-jmfq-4mjc/GHSA-vj69-jmfq-4mjc.json index 0d01b2f1b6a..0487a6e3113 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj69-jmfq-4mjc/GHSA-vj69-jmfq-4mjc.json +++ b/advisories/unreviewed/2022/05/GHSA-vj69-jmfq-4mjc/GHSA-vj69-jmfq-4mjc.json @@ -7,12 +7,8 @@ "CVE-2019-18902" ], "details": "A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or potentially code execution. This issue affects: SUSE Linux Enterprise Server 12 wicked versions prior to 0.6.60-3.5.1. SUSE Linux Enterprise Server 15 wicked versions prior to 0.6.60-3.21.1. openSUSE Leap 15.1 wicked versions prior to 0.6.60-lp151.2.6.1. openSUSE Factory wicked versions prior to 0.6.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vjph-xp4h-fpjw/GHSA-vjph-xp4h-fpjw.json b/advisories/unreviewed/2022/05/GHSA-vjph-xp4h-fpjw/GHSA-vjph-xp4h-fpjw.json index 5f039e58e38..907134b1db2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjph-xp4h-fpjw/GHSA-vjph-xp4h-fpjw.json +++ b/advisories/unreviewed/2022/05/GHSA-vjph-xp4h-fpjw/GHSA-vjph-xp4h-fpjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjwv-69q3-5cwr/GHSA-vjwv-69q3-5cwr.json b/advisories/unreviewed/2022/05/GHSA-vjwv-69q3-5cwr/GHSA-vjwv-69q3-5cwr.json index 53a9c08eb58..dede8b4f125 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjwv-69q3-5cwr/GHSA-vjwv-69q3-5cwr.json +++ b/advisories/unreviewed/2022/05/GHSA-vjwv-69q3-5cwr/GHSA-vjwv-69q3-5cwr.json @@ -7,12 +7,8 @@ "CVE-2020-0727" ], "details": "An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vm6r-vj53-f533/GHSA-vm6r-vj53-f533.json b/advisories/unreviewed/2022/05/GHSA-vm6r-vj53-f533/GHSA-vm6r-vj53-f533.json index d408753d6c2..9fb1ca66367 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm6r-vj53-f533/GHSA-vm6r-vj53-f533.json +++ b/advisories/unreviewed/2022/05/GHSA-vm6r-vj53-f533/GHSA-vm6r-vj53-f533.json @@ -7,12 +7,8 @@ "CVE-2020-3755" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vm6v-h528-jqgf/GHSA-vm6v-h528-jqgf.json b/advisories/unreviewed/2022/05/GHSA-vm6v-h528-jqgf/GHSA-vm6v-h528-jqgf.json index 8391c8bd679..e78a5765d9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm6v-h528-jqgf/GHSA-vm6v-h528-jqgf.json +++ b/advisories/unreviewed/2022/05/GHSA-vm6v-h528-jqgf/GHSA-vm6v-h528-jqgf.json @@ -7,12 +7,8 @@ "CVE-2020-9019" ], "details": "The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmf7-x639-h3q3/GHSA-vmf7-x639-h3q3.json b/advisories/unreviewed/2022/05/GHSA-vmf7-x639-h3q3/GHSA-vmf7-x639-h3q3.json index 85d7515cfa9..14a4d1e55cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmf7-x639-h3q3/GHSA-vmf7-x639-h3q3.json +++ b/advisories/unreviewed/2022/05/GHSA-vmf7-x639-h3q3/GHSA-vmf7-x639-h3q3.json @@ -7,12 +7,8 @@ "CVE-2020-0792" ], "details": "An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0745.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmg5-8mj7-8fr8/GHSA-vmg5-8mj7-8fr8.json b/advisories/unreviewed/2022/05/GHSA-vmg5-8mj7-8fr8/GHSA-vmg5-8mj7-8fr8.json index 2dc4889f112..69a7afa24db 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmg5-8mj7-8fr8/GHSA-vmg5-8mj7-8fr8.json +++ b/advisories/unreviewed/2022/05/GHSA-vmg5-8mj7-8fr8/GHSA-vmg5-8mj7-8fr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmhm-f3xf-hv75/GHSA-vmhm-f3xf-hv75.json b/advisories/unreviewed/2022/05/GHSA-vmhm-f3xf-hv75/GHSA-vmhm-f3xf-hv75.json index 0979b4f81a4..b8404cf8118 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmhm-f3xf-hv75/GHSA-vmhm-f3xf-hv75.json +++ b/advisories/unreviewed/2022/05/GHSA-vmhm-f3xf-hv75/GHSA-vmhm-f3xf-hv75.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmrm-4m37-6c43/GHSA-vmrm-4m37-6c43.json b/advisories/unreviewed/2022/05/GHSA-vmrm-4m37-6c43/GHSA-vmrm-4m37-6c43.json index 4c74a583460..b3782d78ca3 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmrm-4m37-6c43/GHSA-vmrm-4m37-6c43.json +++ b/advisories/unreviewed/2022/05/GHSA-vmrm-4m37-6c43/GHSA-vmrm-4m37-6c43.json @@ -7,12 +7,8 @@ "CVE-2019-16301" ], "details": "An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event types: HOST_MOVED. In combination with other applications, this could lead to the absence of intended code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpm7-cjq2-97fg/GHSA-vpm7-cjq2-97fg.json b/advisories/unreviewed/2022/05/GHSA-vpm7-cjq2-97fg/GHSA-vpm7-cjq2-97fg.json index 52b26749940..5f0f963b3f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpm7-cjq2-97fg/GHSA-vpm7-cjq2-97fg.json +++ b/advisories/unreviewed/2022/05/GHSA-vpm7-cjq2-97fg/GHSA-vpm7-cjq2-97fg.json @@ -7,12 +7,8 @@ "CVE-2020-0759" ], "details": "A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vq58-6hwm-6qx4/GHSA-vq58-6hwm-6qx4.json b/advisories/unreviewed/2022/05/GHSA-vq58-6hwm-6qx4/GHSA-vq58-6hwm-6qx4.json index 7906fde3456..2a7274e2305 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq58-6hwm-6qx4/GHSA-vq58-6hwm-6qx4.json +++ b/advisories/unreviewed/2022/05/GHSA-vq58-6hwm-6qx4/GHSA-vq58-6hwm-6qx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqv8-6rvx-qwf6/GHSA-vqv8-6rvx-qwf6.json b/advisories/unreviewed/2022/05/GHSA-vqv8-6rvx-qwf6/GHSA-vqv8-6rvx-qwf6.json index 2fdfba9641a..789e3561e50 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqv8-6rvx-qwf6/GHSA-vqv8-6rvx-qwf6.json +++ b/advisories/unreviewed/2022/05/GHSA-vqv8-6rvx-qwf6/GHSA-vqv8-6rvx-qwf6.json @@ -7,12 +7,8 @@ "CVE-2019-19741" ], "details": "Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's executable file instead of its in-memory process (which can be significantly different from the executable file due to, for example, DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the pipe communication directly via WriteFileEx(), this can be bypassed by hooking the EVP_EncryptUpdate() function of libeay32.dll. The pipe takes the command CreateDirectory to create a directory and adjust the directory DACL. Calls to this function can be intercepted, the directory and the DACL can be replaced, and the manipulated DACL is written. Arbitrary DACL write is further achieved by creating a hardlink in a user-controlled directory that points to (for example) a service binary. The DACL is then written to this service binary, which results in escalation of privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vvf2-x5cg-wpgx/GHSA-vvf2-x5cg-wpgx.json b/advisories/unreviewed/2022/05/GHSA-vvf2-x5cg-wpgx/GHSA-vvf2-x5cg-wpgx.json index c2e7de6daca..ed979a492f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvf2-x5cg-wpgx/GHSA-vvf2-x5cg-wpgx.json +++ b/advisories/unreviewed/2022/05/GHSA-vvf2-x5cg-wpgx/GHSA-vvf2-x5cg-wpgx.json @@ -7,12 +7,8 @@ "CVE-2019-4597" ], "details": "IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 167880.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vwch-7j7j-p95x/GHSA-vwch-7j7j-p95x.json b/advisories/unreviewed/2022/05/GHSA-vwch-7j7j-p95x/GHSA-vwch-7j7j-p95x.json index 30814d0409f..0482f4b7028 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwch-7j7j-p95x/GHSA-vwch-7j7j-p95x.json +++ b/advisories/unreviewed/2022/05/GHSA-vwch-7j7j-p95x/GHSA-vwch-7j7j-p95x.json @@ -7,12 +7,8 @@ "CVE-2015-6589" ], "details": "Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to write to and execute arbitrary files due to insufficient restrictions in file paths to json.ashx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxjc-fx83-gm4p/GHSA-vxjc-fx83-gm4p.json b/advisories/unreviewed/2022/05/GHSA-vxjc-fx83-gm4p/GHSA-vxjc-fx83-gm4p.json index 457e0e10f03..094bcee26f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxjc-fx83-gm4p/GHSA-vxjc-fx83-gm4p.json +++ b/advisories/unreviewed/2022/05/GHSA-vxjc-fx83-gm4p/GHSA-vxjc-fx83-gm4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w38w-pq32-vgxm/GHSA-w38w-pq32-vgxm.json b/advisories/unreviewed/2022/05/GHSA-w38w-pq32-vgxm/GHSA-w38w-pq32-vgxm.json index d29a666c8c2..7e0654bc76e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w38w-pq32-vgxm/GHSA-w38w-pq32-vgxm.json +++ b/advisories/unreviewed/2022/05/GHSA-w38w-pq32-vgxm/GHSA-w38w-pq32-vgxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -59,9 +57,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4v4-69x7-832c/GHSA-w4v4-69x7-832c.json b/advisories/unreviewed/2022/05/GHSA-w4v4-69x7-832c/GHSA-w4v4-69x7-832c.json index 47a68e3afbb..b1126c98a5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4v4-69x7-832c/GHSA-w4v4-69x7-832c.json +++ b/advisories/unreviewed/2022/05/GHSA-w4v4-69x7-832c/GHSA-w4v4-69x7-832c.json @@ -7,12 +7,8 @@ "CVE-2015-0565" ], "details": "NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6v6-c9pm-2p53/GHSA-w6v6-c9pm-2p53.json b/advisories/unreviewed/2022/05/GHSA-w6v6-c9pm-2p53/GHSA-w6v6-c9pm-2p53.json index 53e91a5a608..56b2e9adc75 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6v6-c9pm-2p53/GHSA-w6v6-c9pm-2p53.json +++ b/advisories/unreviewed/2022/05/GHSA-w6v6-c9pm-2p53/GHSA-w6v6-c9pm-2p53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w88v-7x97-pgv3/GHSA-w88v-7x97-pgv3.json b/advisories/unreviewed/2022/05/GHSA-w88v-7x97-pgv3/GHSA-w88v-7x97-pgv3.json index 57e1d727a3a..d1217b2cf1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w88v-7x97-pgv3/GHSA-w88v-7x97-pgv3.json +++ b/advisories/unreviewed/2022/05/GHSA-w88v-7x97-pgv3/GHSA-w88v-7x97-pgv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8gx-3wmm-9f69/GHSA-w8gx-3wmm-9f69.json b/advisories/unreviewed/2022/05/GHSA-w8gx-3wmm-9f69/GHSA-w8gx-3wmm-9f69.json index 218cbce6900..12c7e6de9bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8gx-3wmm-9f69/GHSA-w8gx-3wmm-9f69.json +++ b/advisories/unreviewed/2022/05/GHSA-w8gx-3wmm-9f69/GHSA-w8gx-3wmm-9f69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9fx-5hwq-7jrx/GHSA-w9fx-5hwq-7jrx.json b/advisories/unreviewed/2022/05/GHSA-w9fx-5hwq-7jrx/GHSA-w9fx-5hwq-7jrx.json index 24846899c94..0a05d82f16c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9fx-5hwq-7jrx/GHSA-w9fx-5hwq-7jrx.json +++ b/advisories/unreviewed/2022/05/GHSA-w9fx-5hwq-7jrx/GHSA-w9fx-5hwq-7jrx.json @@ -7,12 +7,8 @@ "CVE-2020-9335" ], "details": "Multiple stored XSS vulnerabilities exist in the 10Web Photo Gallery plugin before 1.5.46 WordPress. Successful exploitation of this vulnerability would allow a authenticated admin user to inject arbitrary JavaScript code that is viewed by other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wc75-qwvc-4c44/GHSA-wc75-qwvc-4c44.json b/advisories/unreviewed/2022/05/GHSA-wc75-qwvc-4c44/GHSA-wc75-qwvc-4c44.json index 2a2fc980d03..3e5e2fb7d46 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc75-qwvc-4c44/GHSA-wc75-qwvc-4c44.json +++ b/advisories/unreviewed/2022/05/GHSA-wc75-qwvc-4c44/GHSA-wc75-qwvc-4c44.json @@ -7,12 +7,8 @@ "CVE-2020-5827" ], "details": "Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wf2g-ww4q-859v/GHSA-wf2g-ww4q-859v.json b/advisories/unreviewed/2022/05/GHSA-wf2g-ww4q-859v/GHSA-wf2g-ww4q-859v.json index e8eeda5e7e7..ae8b0d006b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wf2g-ww4q-859v/GHSA-wf2g-ww4q-859v.json +++ b/advisories/unreviewed/2022/05/GHSA-wf2g-ww4q-859v/GHSA-wf2g-ww4q-859v.json @@ -7,12 +7,8 @@ "CVE-2016-3182" ], "details": "The color_esycc_to_rgb function in bin/common/color.c in OpenJPEG before 2.1.1 allows attackers to cause a denial of service (memory corruption) via a crafted jpeg 2000 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wf7v-v54q-4q9x/GHSA-wf7v-v54q-4q9x.json b/advisories/unreviewed/2022/05/GHSA-wf7v-v54q-4q9x/GHSA-wf7v-v54q-4q9x.json index 9d1e7cf335e..aa26c32b00b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wf7v-v54q-4q9x/GHSA-wf7v-v54q-4q9x.json +++ b/advisories/unreviewed/2022/05/GHSA-wf7v-v54q-4q9x/GHSA-wf7v-v54q-4q9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgcr-4fm9-rf2f/GHSA-wgcr-4fm9-rf2f.json b/advisories/unreviewed/2022/05/GHSA-wgcr-4fm9-rf2f/GHSA-wgcr-4fm9-rf2f.json index d9f08664842..83aa661c9bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgcr-4fm9-rf2f/GHSA-wgcr-4fm9-rf2f.json +++ b/advisories/unreviewed/2022/05/GHSA-wgcr-4fm9-rf2f/GHSA-wgcr-4fm9-rf2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wggh-x2ch-8rhx/GHSA-wggh-x2ch-8rhx.json b/advisories/unreviewed/2022/05/GHSA-wggh-x2ch-8rhx/GHSA-wggh-x2ch-8rhx.json index ec62d9ebf9d..93bf1efe522 100644 --- a/advisories/unreviewed/2022/05/GHSA-wggh-x2ch-8rhx/GHSA-wggh-x2ch-8rhx.json +++ b/advisories/unreviewed/2022/05/GHSA-wggh-x2ch-8rhx/GHSA-wggh-x2ch-8rhx.json @@ -7,12 +7,8 @@ "CVE-2019-11189" ], "details": "Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply that causes the host mobility application to remove existing access control flow denial rules in the network. The access control application does not re-install flow deny rules, so the attacker can bypass the intended access control policy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wj8f-vwpr-gq38/GHSA-wj8f-vwpr-gq38.json b/advisories/unreviewed/2022/05/GHSA-wj8f-vwpr-gq38/GHSA-wj8f-vwpr-gq38.json index 5406b8cc5da..841ab66e81d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj8f-vwpr-gq38/GHSA-wj8f-vwpr-gq38.json +++ b/advisories/unreviewed/2022/05/GHSA-wj8f-vwpr-gq38/GHSA-wj8f-vwpr-gq38.json @@ -7,12 +7,8 @@ "CVE-2019-4431" ], "details": "IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmp4-2x9h-3x8f/GHSA-wmp4-2x9h-3x8f.json b/advisories/unreviewed/2022/05/GHSA-wmp4-2x9h-3x8f/GHSA-wmp4-2x9h-3x8f.json index e498b49aa18..36aae40e600 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmp4-2x9h-3x8f/GHSA-wmp4-2x9h-3x8f.json +++ b/advisories/unreviewed/2022/05/GHSA-wmp4-2x9h-3x8f/GHSA-wmp4-2x9h-3x8f.json @@ -7,12 +7,8 @@ "CVE-2019-12512" ], "details": "In NETGEAR Nighthawk X10-R900 prior to 1.0.4.24, an attacker may execute stored XSS attacks against this device by supplying a malicious X-Forwarded-For header while performing an incorrect login attempt. The value supplied by this header will be inserted into administrative logs, found at Advanced settings->Administration->Logs, and may trigger when the page is viewed. Although this value is inserted into a textarea tag, the attack simply needs to supply a closing textarea tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmq3-487m-c7r3/GHSA-wmq3-487m-c7r3.json b/advisories/unreviewed/2022/05/GHSA-wmq3-487m-c7r3/GHSA-wmq3-487m-c7r3.json index df23b09f14a..71c6343e826 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmq3-487m-c7r3/GHSA-wmq3-487m-c7r3.json +++ b/advisories/unreviewed/2022/05/GHSA-wmq3-487m-c7r3/GHSA-wmq3-487m-c7r3.json @@ -7,12 +7,8 @@ "CVE-2019-12954" ], "details": "SolarWinds Network Performance Monitor (Orion Platform 2018, NPM 12.3, NetPath 1.1.3) allows XSS by authenticated users via a crafted onerror attribute of a VIDEO element in an action for an ALERT.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmrh-48xq-4cvm/GHSA-wmrh-48xq-4cvm.json b/advisories/unreviewed/2022/05/GHSA-wmrh-48xq-4cvm/GHSA-wmrh-48xq-4cvm.json index b965fbd38d4..5b58ec8ed28 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmrh-48xq-4cvm/GHSA-wmrh-48xq-4cvm.json +++ b/advisories/unreviewed/2022/05/GHSA-wmrh-48xq-4cvm/GHSA-wmrh-48xq-4cvm.json @@ -7,12 +7,8 @@ "CVE-2020-3175" ], "details": "A vulnerability in the resource handling system of Cisco NX-OS Software for Cisco MDS 9000 Series Multilayer Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource usage control. An attacker could exploit this vulnerability by sending traffic to the management interface (mgmt0) of an affected device at very high rates. An exploit could allow the attacker to cause unexpected behaviors such as high CPU usage, process crashes, or even full system reboots of an affected device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpqw-8rxf-9cw7/GHSA-wpqw-8rxf-9cw7.json b/advisories/unreviewed/2022/05/GHSA-wpqw-8rxf-9cw7/GHSA-wpqw-8rxf-9cw7.json index f65c0ad2678..bbe63ee826d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpqw-8rxf-9cw7/GHSA-wpqw-8rxf-9cw7.json +++ b/advisories/unreviewed/2022/05/GHSA-wpqw-8rxf-9cw7/GHSA-wpqw-8rxf-9cw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wq2w-2wpp-5hhm/GHSA-wq2w-2wpp-5hhm.json b/advisories/unreviewed/2022/05/GHSA-wq2w-2wpp-5hhm/GHSA-wq2w-2wpp-5hhm.json index c5b92ba98bd..fde63a5a7d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wq2w-2wpp-5hhm/GHSA-wq2w-2wpp-5hhm.json +++ b/advisories/unreviewed/2022/05/GHSA-wq2w-2wpp-5hhm/GHSA-wq2w-2wpp-5hhm.json @@ -7,12 +7,8 @@ "CVE-2020-0756" ], "details": "An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application.The security update addresses the vulnerability by correcting how the service handles objects in memory., aka 'Windows Key Isolation Service Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0675, CVE-2020-0676, CVE-2020-0677, CVE-2020-0748, CVE-2020-0755.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr3w-xwj9-q2gq/GHSA-wr3w-xwj9-q2gq.json b/advisories/unreviewed/2022/05/GHSA-wr3w-xwj9-q2gq/GHSA-wr3w-xwj9-q2gq.json index 457e5152224..c869547e00a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr3w-xwj9-q2gq/GHSA-wr3w-xwj9-q2gq.json +++ b/advisories/unreviewed/2022/05/GHSA-wr3w-xwj9-q2gq/GHSA-wr3w-xwj9-q2gq.json @@ -7,12 +7,8 @@ "CVE-2020-3859" ], "details": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to an iOS device may be able to access contacts from the lock screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wv8m-7x77-q9c7/GHSA-wv8m-7x77-q9c7.json b/advisories/unreviewed/2022/05/GHSA-wv8m-7x77-q9c7/GHSA-wv8m-7x77-q9c7.json index 901c10212b7..72beac36839 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv8m-7x77-q9c7/GHSA-wv8m-7x77-q9c7.json +++ b/advisories/unreviewed/2022/05/GHSA-wv8m-7x77-q9c7/GHSA-wv8m-7x77-q9c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwgw-2cr5-prh3/GHSA-wwgw-2cr5-prh3.json b/advisories/unreviewed/2022/05/GHSA-wwgw-2cr5-prh3/GHSA-wwgw-2cr5-prh3.json index 6f86a9077be..43befc11894 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwgw-2cr5-prh3/GHSA-wwgw-2cr5-prh3.json +++ b/advisories/unreviewed/2022/05/GHSA-wwgw-2cr5-prh3/GHSA-wwgw-2cr5-prh3.json @@ -7,12 +7,8 @@ "CVE-2020-9023" ], "details": "Iteris Vantage Velocity Field Unit 2.3.1 and 2.4.2 devices have two users that are not documented and are configured with weak passwords (User bluetooth, password bluetooth; User eclipse, password eclipse). Also, bluetooth is the root password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-www8-gj5p-78p3/GHSA-www8-gj5p-78p3.json b/advisories/unreviewed/2022/05/GHSA-www8-gj5p-78p3/GHSA-www8-gj5p-78p3.json index 46ffb7f2745..73e74df44b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-www8-gj5p-78p3/GHSA-www8-gj5p-78p3.json +++ b/advisories/unreviewed/2022/05/GHSA-www8-gj5p-78p3/GHSA-www8-gj5p-78p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwwj-r429-82x9/GHSA-wwwj-r429-82x9.json b/advisories/unreviewed/2022/05/GHSA-wwwj-r429-82x9/GHSA-wwwj-r429-82x9.json index 04c97247f27..7c36a535857 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwwj-r429-82x9/GHSA-wwwj-r429-82x9.json +++ b/advisories/unreviewed/2022/05/GHSA-wwwj-r429-82x9/GHSA-wwwj-r429-82x9.json @@ -7,12 +7,8 @@ "CVE-2019-17275" ], "details": "OnCommand Cloud Manager versions prior to 3.8.0 are susceptible to arbitrary code execution by remote attackers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wxrr-j66m-55px/GHSA-wxrr-j66m-55px.json b/advisories/unreviewed/2022/05/GHSA-wxrr-j66m-55px/GHSA-wxrr-j66m-55px.json index c4dc6e98f02..9820813a862 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxrr-j66m-55px/GHSA-wxrr-j66m-55px.json +++ b/advisories/unreviewed/2022/05/GHSA-wxrr-j66m-55px/GHSA-wxrr-j66m-55px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x33r-9c3h-37vv/GHSA-x33r-9c3h-37vv.json b/advisories/unreviewed/2022/05/GHSA-x33r-9c3h-37vv/GHSA-x33r-9c3h-37vv.json index f6c5cccacad..35cdca5351c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x33r-9c3h-37vv/GHSA-x33r-9c3h-37vv.json +++ b/advisories/unreviewed/2022/05/GHSA-x33r-9c3h-37vv/GHSA-x33r-9c3h-37vv.json @@ -7,12 +7,8 @@ "CVE-2018-17058" ], "details": "An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs in FileUploader.aspx by using empty w and h parameters. This file may contain arbitrary aspx code that may be executed by accessing /Jec/ProductImages//. Accessing the file once uploaded does not require authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x39q-8mm3-jqpx/GHSA-x39q-8mm3-jqpx.json b/advisories/unreviewed/2022/05/GHSA-x39q-8mm3-jqpx/GHSA-x39q-8mm3-jqpx.json index 8bae81d2c36..9a8de8b0e57 100644 --- a/advisories/unreviewed/2022/05/GHSA-x39q-8mm3-jqpx/GHSA-x39q-8mm3-jqpx.json +++ b/advisories/unreviewed/2022/05/GHSA-x39q-8mm3-jqpx/GHSA-x39q-8mm3-jqpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3wx-m9w8-5wx6/GHSA-x3wx-m9w8-5wx6.json b/advisories/unreviewed/2022/05/GHSA-x3wx-m9w8-5wx6/GHSA-x3wx-m9w8-5wx6.json index c8ac63eaf1e..9468394f50a 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3wx-m9w8-5wx6/GHSA-x3wx-m9w8-5wx6.json +++ b/advisories/unreviewed/2022/05/GHSA-x3wx-m9w8-5wx6/GHSA-x3wx-m9w8-5wx6.json @@ -7,12 +7,8 @@ "CVE-2020-3733" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x4xv-pfvp-jg8m/GHSA-x4xv-pfvp-jg8m.json b/advisories/unreviewed/2022/05/GHSA-x4xv-pfvp-jg8m/GHSA-x4xv-pfvp-jg8m.json index d2cd2de23d6..78727cad9b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4xv-pfvp-jg8m/GHSA-x4xv-pfvp-jg8m.json +++ b/advisories/unreviewed/2022/05/GHSA-x4xv-pfvp-jg8m/GHSA-x4xv-pfvp-jg8m.json @@ -7,12 +7,8 @@ "CVE-2018-21033" ], "details": "A vulnerability in Hitachi Command Suite prior to 8.6.2-00, Hitachi Automation Director prior to 8.6.2-00 and Hitachi Infrastructure Analytics Advisor prior to 4.2.0-00 allow authenticated remote users to load an arbitrary Cascading Style Sheets (CSS) token sequence. Hitachi Command Suite includes Hitachi Device Manager, Hitachi Tiered Storage Manager, Hitachi Replication Manager, Hitachi Tuning Manager, Hitachi Global Link Manager and Hitachi Compute Systems Manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x659-43vv-626r/GHSA-x659-43vv-626r.json b/advisories/unreviewed/2022/05/GHSA-x659-43vv-626r/GHSA-x659-43vv-626r.json index a39fc11b67b..e3f12bddb44 100644 --- a/advisories/unreviewed/2022/05/GHSA-x659-43vv-626r/GHSA-x659-43vv-626r.json +++ b/advisories/unreviewed/2022/05/GHSA-x659-43vv-626r/GHSA-x659-43vv-626r.json @@ -7,12 +7,8 @@ "CVE-2020-8853" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of HTML files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9591.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x66f-c2h2-88hh/GHSA-x66f-c2h2-88hh.json b/advisories/unreviewed/2022/05/GHSA-x66f-c2h2-88hh/GHSA-x66f-c2h2-88hh.json index 3792f00cbc4..3aeefa17567 100644 --- a/advisories/unreviewed/2022/05/GHSA-x66f-c2h2-88hh/GHSA-x66f-c2h2-88hh.json +++ b/advisories/unreviewed/2022/05/GHSA-x66f-c2h2-88hh/GHSA-x66f-c2h2-88hh.json @@ -7,12 +7,8 @@ "CVE-2020-6399" ], "details": "Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x6ph-8wfx-r85j/GHSA-x6ph-8wfx-r85j.json b/advisories/unreviewed/2022/05/GHSA-x6ph-8wfx-r85j/GHSA-x6ph-8wfx-r85j.json index 4f0566c0fa9..2c442f8de82 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6ph-8wfx-r85j/GHSA-x6ph-8wfx-r85j.json +++ b/advisories/unreviewed/2022/05/GHSA-x6ph-8wfx-r85j/GHSA-x6ph-8wfx-r85j.json @@ -7,12 +7,8 @@ "CVE-2020-3726" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x6wf-v6ph-h8xc/GHSA-x6wf-v6ph-h8xc.json b/advisories/unreviewed/2022/05/GHSA-x6wf-v6ph-h8xc/GHSA-x6wf-v6ph-h8xc.json index d2601893f4d..73e9850c075 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6wf-v6ph-h8xc/GHSA-x6wf-v6ph-h8xc.json +++ b/advisories/unreviewed/2022/05/GHSA-x6wf-v6ph-h8xc/GHSA-x6wf-v6ph-h8xc.json @@ -7,12 +7,8 @@ "CVE-2020-9028" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the \"User Creation, Deletion and Password Maintenance\" screen (when creating a new user).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8g5-2vwh-qjvj/GHSA-x8g5-2vwh-qjvj.json b/advisories/unreviewed/2022/05/GHSA-x8g5-2vwh-qjvj/GHSA-x8g5-2vwh-qjvj.json index ae6861bd0c9..750879b5120 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8g5-2vwh-qjvj/GHSA-x8g5-2vwh-qjvj.json +++ b/advisories/unreviewed/2022/05/GHSA-x8g5-2vwh-qjvj/GHSA-x8g5-2vwh-qjvj.json @@ -7,12 +7,8 @@ "CVE-2020-8963" ], "details": "TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the t3.cgi srmodel or srtime parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xcgh-7h3x-5g3r/GHSA-xcgh-7h3x-5g3r.json b/advisories/unreviewed/2022/05/GHSA-xcgh-7h3x-5g3r/GHSA-xcgh-7h3x-5g3r.json index 3984df084d4..da3bc3ec4d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcgh-7h3x-5g3r/GHSA-xcgh-7h3x-5g3r.json +++ b/advisories/unreviewed/2022/05/GHSA-xcgh-7h3x-5g3r/GHSA-xcgh-7h3x-5g3r.json @@ -7,12 +7,8 @@ "CVE-2020-3737" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf2j-pr94-q4g4/GHSA-xf2j-pr94-q4g4.json b/advisories/unreviewed/2022/05/GHSA-xf2j-pr94-q4g4/GHSA-xf2j-pr94-q4g4.json index cc6aef7bb1e..52f43f84b74 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf2j-pr94-q4g4/GHSA-xf2j-pr94-q4g4.json +++ b/advisories/unreviewed/2022/05/GHSA-xf2j-pr94-q4g4/GHSA-xf2j-pr94-q4g4.json @@ -7,12 +7,8 @@ "CVE-2020-9029" ], "details": "Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow Directory Traversal via the FileName parameter to messagelog.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg77-mvwp-crp2/GHSA-xg77-mvwp-crp2.json b/advisories/unreviewed/2022/05/GHSA-xg77-mvwp-crp2/GHSA-xg77-mvwp-crp2.json index 5ed642e097b..ce3a8f1efce 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg77-mvwp-crp2/GHSA-xg77-mvwp-crp2.json +++ b/advisories/unreviewed/2022/05/GHSA-xg77-mvwp-crp2/GHSA-xg77-mvwp-crp2.json @@ -7,12 +7,8 @@ "CVE-2019-20478" ], "details": "In ruamel.yaml through 0.16.7, the load method allows remote code execution if the application calls this method with an untrusted argument. In other words, this issue affects developers who are unaware of the need to use methods such as safe_load in these use cases.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgp3-wq65-cw2g/GHSA-xgp3-wq65-cw2g.json b/advisories/unreviewed/2022/05/GHSA-xgp3-wq65-cw2g/GHSA-xgp3-wq65-cw2g.json index 9b61ec0f614..4da14703aa9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgp3-wq65-cw2g/GHSA-xgp3-wq65-cw2g.json +++ b/advisories/unreviewed/2022/05/GHSA-xgp3-wq65-cw2g/GHSA-xgp3-wq65-cw2g.json @@ -7,12 +7,8 @@ "CVE-2020-3127" ], "details": "Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex recording that is stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a malicious ARF or WRF file to a user through a link or email attachment and persuading the user to open the file on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xhcj-87mg-4cx4/GHSA-xhcj-87mg-4cx4.json b/advisories/unreviewed/2022/05/GHSA-xhcj-87mg-4cx4/GHSA-xhcj-87mg-4cx4.json index 522eded739c..031167d01ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhcj-87mg-4cx4/GHSA-xhcj-87mg-4cx4.json +++ b/advisories/unreviewed/2022/05/GHSA-xhcj-87mg-4cx4/GHSA-xhcj-87mg-4cx4.json @@ -7,12 +7,8 @@ "CVE-2020-3132" ], "details": "A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of service (DoS) condition on an affected device. The vulnerability is due to inadequate parsing mechanisms for specific email body components. An attacker could exploit this vulnerability by sending a malicious email containing a high number of shortened URLs through an affected device. A successful exploit could allow the attacker to consume processing resources, causing a DoS condition on an affected device. To successfully exploit this vulnerability, certain conditions beyond the control of the attacker must occur.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xhmj-2p35-gj29/GHSA-xhmj-2p35-gj29.json b/advisories/unreviewed/2022/05/GHSA-xhmj-2p35-gj29/GHSA-xhmj-2p35-gj29.json index 0f7fe101cb8..6b8bf06271a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhmj-2p35-gj29/GHSA-xhmj-2p35-gj29.json +++ b/advisories/unreviewed/2022/05/GHSA-xhmj-2p35-gj29/GHSA-xhmj-2p35-gj29.json @@ -7,12 +7,8 @@ "CVE-2020-3740" ], "details": "Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhr6-cwm7-hfr4/GHSA-xhr6-cwm7-hfr4.json b/advisories/unreviewed/2022/05/GHSA-xhr6-cwm7-hfr4/GHSA-xhr6-cwm7-hfr4.json index 6de2e087008..da0618a96e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhr6-cwm7-hfr4/GHSA-xhr6-cwm7-hfr4.json +++ b/advisories/unreviewed/2022/05/GHSA-xhr6-cwm7-hfr4/GHSA-xhr6-cwm7-hfr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhxr-v65q-76hw/GHSA-xhxr-v65q-76hw.json b/advisories/unreviewed/2022/05/GHSA-xhxr-v65q-76hw/GHSA-xhxr-v65q-76hw.json index 73d1dd13225..a2af75e5323 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhxr-v65q-76hw/GHSA-xhxr-v65q-76hw.json +++ b/advisories/unreviewed/2022/05/GHSA-xhxr-v65q-76hw/GHSA-xhxr-v65q-76hw.json @@ -7,12 +7,8 @@ "CVE-2020-3727" ], "details": "Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xjj7-3469-hmrm/GHSA-xjj7-3469-hmrm.json b/advisories/unreviewed/2022/05/GHSA-xjj7-3469-hmrm/GHSA-xjj7-3469-hmrm.json index bf6ad8d42dd..8a35b67f539 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjj7-3469-hmrm/GHSA-xjj7-3469-hmrm.json +++ b/advisories/unreviewed/2022/05/GHSA-xjj7-3469-hmrm/GHSA-xjj7-3469-hmrm.json @@ -7,12 +7,8 @@ "CVE-2020-6193" ], "details": "SAP NetWeaver (Knowledge Management ICE Service), versions 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to execute malicious scripts leading to Reflected Cross-Site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xjwr-rqj7-94fv/GHSA-xjwr-rqj7-94fv.json b/advisories/unreviewed/2022/05/GHSA-xjwr-rqj7-94fv/GHSA-xjwr-rqj7-94fv.json index 1a261e742f5..640dc1b4b5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjwr-rqj7-94fv/GHSA-xjwr-rqj7-94fv.json +++ b/advisories/unreviewed/2022/05/GHSA-xjwr-rqj7-94fv/GHSA-xjwr-rqj7-94fv.json @@ -7,12 +7,8 @@ "CVE-2020-3752" ], "details": "Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm72-wm3m-qgm7/GHSA-xm72-wm3m-qgm7.json b/advisories/unreviewed/2022/05/GHSA-xm72-wm3m-qgm7/GHSA-xm72-wm3m-qgm7.json index 62a005e18e3..11907eb9da2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm72-wm3m-qgm7/GHSA-xm72-wm3m-qgm7.json +++ b/advisories/unreviewed/2022/05/GHSA-xm72-wm3m-qgm7/GHSA-xm72-wm3m-qgm7.json @@ -7,12 +7,8 @@ "CVE-2019-3999" ], "details": "Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xpxv-rfwh-rcfc/GHSA-xpxv-rfwh-rcfc.json b/advisories/unreviewed/2022/05/GHSA-xpxv-rfwh-rcfc/GHSA-xpxv-rfwh-rcfc.json index 36a5666371f..2b20ea057f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpxv-rfwh-rcfc/GHSA-xpxv-rfwh-rcfc.json +++ b/advisories/unreviewed/2022/05/GHSA-xpxv-rfwh-rcfc/GHSA-xpxv-rfwh-rcfc.json @@ -7,12 +7,8 @@ "CVE-2020-3153" ], "details": "A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xr2p-42gc-m46q/GHSA-xr2p-42gc-m46q.json b/advisories/unreviewed/2022/05/GHSA-xr2p-42gc-m46q/GHSA-xr2p-42gc-m46q.json index 7bf3619afb9..607f6b2b951 100644 --- a/advisories/unreviewed/2022/05/GHSA-xr2p-42gc-m46q/GHSA-xr2p-42gc-m46q.json +++ b/advisories/unreviewed/2022/05/GHSA-xr2p-42gc-m46q/GHSA-xr2p-42gc-m46q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xv64-jjpm-mgjv/GHSA-xv64-jjpm-mgjv.json b/advisories/unreviewed/2022/05/GHSA-xv64-jjpm-mgjv/GHSA-xv64-jjpm-mgjv.json index 3be2a1c8ae7..7193e06f3fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv64-jjpm-mgjv/GHSA-xv64-jjpm-mgjv.json +++ b/advisories/unreviewed/2022/05/GHSA-xv64-jjpm-mgjv/GHSA-xv64-jjpm-mgjv.json @@ -7,12 +7,8 @@ "CVE-2020-3924" ], "details": "DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xv6c-f5jj-3wwc/GHSA-xv6c-f5jj-3wwc.json b/advisories/unreviewed/2022/05/GHSA-xv6c-f5jj-3wwc/GHSA-xv6c-f5jj-3wwc.json index e362ce30581..f4eb1464d49 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv6c-f5jj-3wwc/GHSA-xv6c-f5jj-3wwc.json +++ b/advisories/unreviewed/2022/05/GHSA-xv6c-f5jj-3wwc/GHSA-xv6c-f5jj-3wwc.json @@ -7,12 +7,8 @@ "CVE-2020-3874" ], "details": "An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx38-8wp6-c2jw/GHSA-xx38-8wp6-c2jw.json b/advisories/unreviewed/2022/05/GHSA-xx38-8wp6-c2jw/GHSA-xx38-8wp6-c2jw.json index d2210065eab..5f620eaae64 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx38-8wp6-c2jw/GHSA-xx38-8wp6-c2jw.json +++ b/advisories/unreviewed/2022/05/GHSA-xx38-8wp6-c2jw/GHSA-xx38-8wp6-c2jw.json @@ -7,12 +7,8 @@ "CVE-2020-3865" ], "details": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-v9r8-94rw-wxff/GHSA-v9r8-94rw-wxff.json b/advisories/unreviewed/2022/12/GHSA-v9r8-94rw-wxff/GHSA-v9r8-94rw-wxff.json index edc44c74b1c..1288491f85b 100644 --- a/advisories/unreviewed/2022/12/GHSA-v9r8-94rw-wxff/GHSA-v9r8-94rw-wxff.json +++ b/advisories/unreviewed/2022/12/GHSA-v9r8-94rw-wxff/GHSA-v9r8-94rw-wxff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-vqc2-jf89-w6m6/GHSA-vqc2-jf89-w6m6.json b/advisories/unreviewed/2022/12/GHSA-vqc2-jf89-w6m6/GHSA-vqc2-jf89-w6m6.json index cd3cd73ec4b..ce7711d0383 100644 --- a/advisories/unreviewed/2022/12/GHSA-vqc2-jf89-w6m6/GHSA-vqc2-jf89-w6m6.json +++ b/advisories/unreviewed/2022/12/GHSA-vqc2-jf89-w6m6/GHSA-vqc2-jf89-w6m6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-2p25-c5jm-68vm/GHSA-2p25-c5jm-68vm.json b/advisories/unreviewed/2023/01/GHSA-2p25-c5jm-68vm/GHSA-2p25-c5jm-68vm.json index 245bc1dfb3b..ebc167d1349 100644 --- a/advisories/unreviewed/2023/01/GHSA-2p25-c5jm-68vm/GHSA-2p25-c5jm-68vm.json +++ b/advisories/unreviewed/2023/01/GHSA-2p25-c5jm-68vm/GHSA-2p25-c5jm-68vm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/01/GHSA-85jr-3p46-v54j/GHSA-85jr-3p46-v54j.json b/advisories/unreviewed/2023/01/GHSA-85jr-3p46-v54j/GHSA-85jr-3p46-v54j.json index cdf4399a9d5..b7fd5fb7be5 100644 --- a/advisories/unreviewed/2023/01/GHSA-85jr-3p46-v54j/GHSA-85jr-3p46-v54j.json +++ b/advisories/unreviewed/2023/01/GHSA-85jr-3p46-v54j/GHSA-85jr-3p46-v54j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-9qqj-2f7c-43ff/GHSA-9qqj-2f7c-43ff.json b/advisories/unreviewed/2023/01/GHSA-9qqj-2f7c-43ff/GHSA-9qqj-2f7c-43ff.json index 64eafd017b0..17ac224265f 100644 --- a/advisories/unreviewed/2023/01/GHSA-9qqj-2f7c-43ff/GHSA-9qqj-2f7c-43ff.json +++ b/advisories/unreviewed/2023/01/GHSA-9qqj-2f7c-43ff/GHSA-9qqj-2f7c-43ff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-r9w2-j342-fp5j/GHSA-r9w2-j342-fp5j.json b/advisories/unreviewed/2023/01/GHSA-r9w2-j342-fp5j/GHSA-r9w2-j342-fp5j.json index e5d488faf02..6a30fff1bac 100644 --- a/advisories/unreviewed/2023/01/GHSA-r9w2-j342-fp5j/GHSA-r9w2-j342-fp5j.json +++ b/advisories/unreviewed/2023/01/GHSA-r9w2-j342-fp5j/GHSA-r9w2-j342-fp5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-rq9c-34hq-jqg8/GHSA-rq9c-34hq-jqg8.json b/advisories/unreviewed/2023/01/GHSA-rq9c-34hq-jqg8/GHSA-rq9c-34hq-jqg8.json index 1281699d381..a60527d67b3 100644 --- a/advisories/unreviewed/2023/01/GHSA-rq9c-34hq-jqg8/GHSA-rq9c-34hq-jqg8.json +++ b/advisories/unreviewed/2023/01/GHSA-rq9c-34hq-jqg8/GHSA-rq9c-34hq-jqg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2652-m543-h3h5/GHSA-2652-m543-h3h5.json b/advisories/unreviewed/2023/02/GHSA-2652-m543-h3h5/GHSA-2652-m543-h3h5.json index c4a5f905fb2..c73c18538f4 100644 --- a/advisories/unreviewed/2023/02/GHSA-2652-m543-h3h5/GHSA-2652-m543-h3h5.json +++ b/advisories/unreviewed/2023/02/GHSA-2652-m543-h3h5/GHSA-2652-m543-h3h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2gg9-87cr-qr23/GHSA-2gg9-87cr-qr23.json b/advisories/unreviewed/2023/02/GHSA-2gg9-87cr-qr23/GHSA-2gg9-87cr-qr23.json index 40ca878fb4b..4e8ab2e5579 100644 --- a/advisories/unreviewed/2023/02/GHSA-2gg9-87cr-qr23/GHSA-2gg9-87cr-qr23.json +++ b/advisories/unreviewed/2023/02/GHSA-2gg9-87cr-qr23/GHSA-2gg9-87cr-qr23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2q49-5v6q-6qr6/GHSA-2q49-5v6q-6qr6.json b/advisories/unreviewed/2023/02/GHSA-2q49-5v6q-6qr6/GHSA-2q49-5v6q-6qr6.json index fdac5c9fa22..22401bf9932 100644 --- a/advisories/unreviewed/2023/02/GHSA-2q49-5v6q-6qr6/GHSA-2q49-5v6q-6qr6.json +++ b/advisories/unreviewed/2023/02/GHSA-2q49-5v6q-6qr6/GHSA-2q49-5v6q-6qr6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2wwc-hfmq-5q7x/GHSA-2wwc-hfmq-5q7x.json b/advisories/unreviewed/2023/02/GHSA-2wwc-hfmq-5q7x/GHSA-2wwc-hfmq-5q7x.json index 5055c34a75f..3a940e828ba 100644 --- a/advisories/unreviewed/2023/02/GHSA-2wwc-hfmq-5q7x/GHSA-2wwc-hfmq-5q7x.json +++ b/advisories/unreviewed/2023/02/GHSA-2wwc-hfmq-5q7x/GHSA-2wwc-hfmq-5q7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-33v4-r73r-584j/GHSA-33v4-r73r-584j.json b/advisories/unreviewed/2023/02/GHSA-33v4-r73r-584j/GHSA-33v4-r73r-584j.json index f39bd8f523b..2d9a4596f2c 100644 --- a/advisories/unreviewed/2023/02/GHSA-33v4-r73r-584j/GHSA-33v4-r73r-584j.json +++ b/advisories/unreviewed/2023/02/GHSA-33v4-r73r-584j/GHSA-33v4-r73r-584j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-3hmj-jp49-3cjx/GHSA-3hmj-jp49-3cjx.json b/advisories/unreviewed/2023/02/GHSA-3hmj-jp49-3cjx/GHSA-3hmj-jp49-3cjx.json index 3fa29333959..5b0cafdc5f0 100644 --- a/advisories/unreviewed/2023/02/GHSA-3hmj-jp49-3cjx/GHSA-3hmj-jp49-3cjx.json +++ b/advisories/unreviewed/2023/02/GHSA-3hmj-jp49-3cjx/GHSA-3hmj-jp49-3cjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-3mxw-j4x8-9xp2/GHSA-3mxw-j4x8-9xp2.json b/advisories/unreviewed/2023/02/GHSA-3mxw-j4x8-9xp2/GHSA-3mxw-j4x8-9xp2.json index a0d9f80d229..f31632d2d39 100644 --- a/advisories/unreviewed/2023/02/GHSA-3mxw-j4x8-9xp2/GHSA-3mxw-j4x8-9xp2.json +++ b/advisories/unreviewed/2023/02/GHSA-3mxw-j4x8-9xp2/GHSA-3mxw-j4x8-9xp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-3xxh-w577-324m/GHSA-3xxh-w577-324m.json b/advisories/unreviewed/2023/02/GHSA-3xxh-w577-324m/GHSA-3xxh-w577-324m.json index f7fa4aa9517..4d13a6e8e03 100644 --- a/advisories/unreviewed/2023/02/GHSA-3xxh-w577-324m/GHSA-3xxh-w577-324m.json +++ b/advisories/unreviewed/2023/02/GHSA-3xxh-w577-324m/GHSA-3xxh-w577-324m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4c5q-83qw-92cx/GHSA-4c5q-83qw-92cx.json b/advisories/unreviewed/2023/02/GHSA-4c5q-83qw-92cx/GHSA-4c5q-83qw-92cx.json index 2b8845f123b..2aea918c103 100644 --- a/advisories/unreviewed/2023/02/GHSA-4c5q-83qw-92cx/GHSA-4c5q-83qw-92cx.json +++ b/advisories/unreviewed/2023/02/GHSA-4c5q-83qw-92cx/GHSA-4c5q-83qw-92cx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4m8h-w9w3-cp2v/GHSA-4m8h-w9w3-cp2v.json b/advisories/unreviewed/2023/02/GHSA-4m8h-w9w3-cp2v/GHSA-4m8h-w9w3-cp2v.json index 56e1cb2df6b..278a076c157 100644 --- a/advisories/unreviewed/2023/02/GHSA-4m8h-w9w3-cp2v/GHSA-4m8h-w9w3-cp2v.json +++ b/advisories/unreviewed/2023/02/GHSA-4m8h-w9w3-cp2v/GHSA-4m8h-w9w3-cp2v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4p8v-g44f-p8hp/GHSA-4p8v-g44f-p8hp.json b/advisories/unreviewed/2023/02/GHSA-4p8v-g44f-p8hp/GHSA-4p8v-g44f-p8hp.json index 96155b82db8..9835b7af33b 100644 --- a/advisories/unreviewed/2023/02/GHSA-4p8v-g44f-p8hp/GHSA-4p8v-g44f-p8hp.json +++ b/advisories/unreviewed/2023/02/GHSA-4p8v-g44f-p8hp/GHSA-4p8v-g44f-p8hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4v3f-x74x-h275/GHSA-4v3f-x74x-h275.json b/advisories/unreviewed/2023/02/GHSA-4v3f-x74x-h275/GHSA-4v3f-x74x-h275.json index 73d8b2a4107..bfdf9588f93 100644 --- a/advisories/unreviewed/2023/02/GHSA-4v3f-x74x-h275/GHSA-4v3f-x74x-h275.json +++ b/advisories/unreviewed/2023/02/GHSA-4v3f-x74x-h275/GHSA-4v3f-x74x-h275.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-545v-3hf5-cppv/GHSA-545v-3hf5-cppv.json b/advisories/unreviewed/2023/02/GHSA-545v-3hf5-cppv/GHSA-545v-3hf5-cppv.json index d585ef5dcc0..6fa6e36f0a4 100644 --- a/advisories/unreviewed/2023/02/GHSA-545v-3hf5-cppv/GHSA-545v-3hf5-cppv.json +++ b/advisories/unreviewed/2023/02/GHSA-545v-3hf5-cppv/GHSA-545v-3hf5-cppv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-56xm-mjq3-vmvw/GHSA-56xm-mjq3-vmvw.json b/advisories/unreviewed/2023/02/GHSA-56xm-mjq3-vmvw/GHSA-56xm-mjq3-vmvw.json index 086fd86f824..29a94feb8f1 100644 --- a/advisories/unreviewed/2023/02/GHSA-56xm-mjq3-vmvw/GHSA-56xm-mjq3-vmvw.json +++ b/advisories/unreviewed/2023/02/GHSA-56xm-mjq3-vmvw/GHSA-56xm-mjq3-vmvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-572p-5872-3ffh/GHSA-572p-5872-3ffh.json b/advisories/unreviewed/2023/02/GHSA-572p-5872-3ffh/GHSA-572p-5872-3ffh.json index 15d1561ada2..56edb58f185 100644 --- a/advisories/unreviewed/2023/02/GHSA-572p-5872-3ffh/GHSA-572p-5872-3ffh.json +++ b/advisories/unreviewed/2023/02/GHSA-572p-5872-3ffh/GHSA-572p-5872-3ffh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6g49-f785-8862/GHSA-6g49-f785-8862.json b/advisories/unreviewed/2023/02/GHSA-6g49-f785-8862/GHSA-6g49-f785-8862.json index 0b9347631cd..752a1d58f0b 100644 --- a/advisories/unreviewed/2023/02/GHSA-6g49-f785-8862/GHSA-6g49-f785-8862.json +++ b/advisories/unreviewed/2023/02/GHSA-6g49-f785-8862/GHSA-6g49-f785-8862.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6gqv-38q3-6c47/GHSA-6gqv-38q3-6c47.json b/advisories/unreviewed/2023/02/GHSA-6gqv-38q3-6c47/GHSA-6gqv-38q3-6c47.json index 97189e5133a..28c0c0cbb7b 100644 --- a/advisories/unreviewed/2023/02/GHSA-6gqv-38q3-6c47/GHSA-6gqv-38q3-6c47.json +++ b/advisories/unreviewed/2023/02/GHSA-6gqv-38q3-6c47/GHSA-6gqv-38q3-6c47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6mv2-r5fw-xvx7/GHSA-6mv2-r5fw-xvx7.json b/advisories/unreviewed/2023/02/GHSA-6mv2-r5fw-xvx7/GHSA-6mv2-r5fw-xvx7.json index 7b232843a45..ebc86dc5beb 100644 --- a/advisories/unreviewed/2023/02/GHSA-6mv2-r5fw-xvx7/GHSA-6mv2-r5fw-xvx7.json +++ b/advisories/unreviewed/2023/02/GHSA-6mv2-r5fw-xvx7/GHSA-6mv2-r5fw-xvx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6pm6-jfxj-pqrf/GHSA-6pm6-jfxj-pqrf.json b/advisories/unreviewed/2023/02/GHSA-6pm6-jfxj-pqrf/GHSA-6pm6-jfxj-pqrf.json index e4ed90665b8..79379263242 100644 --- a/advisories/unreviewed/2023/02/GHSA-6pm6-jfxj-pqrf/GHSA-6pm6-jfxj-pqrf.json +++ b/advisories/unreviewed/2023/02/GHSA-6pm6-jfxj-pqrf/GHSA-6pm6-jfxj-pqrf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-73xq-fm46-h4hh/GHSA-73xq-fm46-h4hh.json b/advisories/unreviewed/2023/02/GHSA-73xq-fm46-h4hh/GHSA-73xq-fm46-h4hh.json index 71600978dd1..d3c585bde44 100644 --- a/advisories/unreviewed/2023/02/GHSA-73xq-fm46-h4hh/GHSA-73xq-fm46-h4hh.json +++ b/advisories/unreviewed/2023/02/GHSA-73xq-fm46-h4hh/GHSA-73xq-fm46-h4hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-75c8-7ffr-5p4j/GHSA-75c8-7ffr-5p4j.json b/advisories/unreviewed/2023/02/GHSA-75c8-7ffr-5p4j/GHSA-75c8-7ffr-5p4j.json index 9b926cf4dc0..88e26da86f9 100644 --- a/advisories/unreviewed/2023/02/GHSA-75c8-7ffr-5p4j/GHSA-75c8-7ffr-5p4j.json +++ b/advisories/unreviewed/2023/02/GHSA-75c8-7ffr-5p4j/GHSA-75c8-7ffr-5p4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-77p9-hq87-3pf9/GHSA-77p9-hq87-3pf9.json b/advisories/unreviewed/2023/02/GHSA-77p9-hq87-3pf9/GHSA-77p9-hq87-3pf9.json index 8d30ec4f145..be91027558a 100644 --- a/advisories/unreviewed/2023/02/GHSA-77p9-hq87-3pf9/GHSA-77p9-hq87-3pf9.json +++ b/advisories/unreviewed/2023/02/GHSA-77p9-hq87-3pf9/GHSA-77p9-hq87-3pf9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7844-j976-mqjq/GHSA-7844-j976-mqjq.json b/advisories/unreviewed/2023/02/GHSA-7844-j976-mqjq/GHSA-7844-j976-mqjq.json index 3c4bfe04684..5ea9eb9b4f5 100644 --- a/advisories/unreviewed/2023/02/GHSA-7844-j976-mqjq/GHSA-7844-j976-mqjq.json +++ b/advisories/unreviewed/2023/02/GHSA-7844-j976-mqjq/GHSA-7844-j976-mqjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-78h7-hg75-rwm2/GHSA-78h7-hg75-rwm2.json b/advisories/unreviewed/2023/02/GHSA-78h7-hg75-rwm2/GHSA-78h7-hg75-rwm2.json index f93374185bd..a6c62487330 100644 --- a/advisories/unreviewed/2023/02/GHSA-78h7-hg75-rwm2/GHSA-78h7-hg75-rwm2.json +++ b/advisories/unreviewed/2023/02/GHSA-78h7-hg75-rwm2/GHSA-78h7-hg75-rwm2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7cff-8p7q-7558/GHSA-7cff-8p7q-7558.json b/advisories/unreviewed/2023/02/GHSA-7cff-8p7q-7558/GHSA-7cff-8p7q-7558.json index 39d2126e0aa..54058107e1e 100644 --- a/advisories/unreviewed/2023/02/GHSA-7cff-8p7q-7558/GHSA-7cff-8p7q-7558.json +++ b/advisories/unreviewed/2023/02/GHSA-7cff-8p7q-7558/GHSA-7cff-8p7q-7558.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7pc3-hj79-39qj/GHSA-7pc3-hj79-39qj.json b/advisories/unreviewed/2023/02/GHSA-7pc3-hj79-39qj/GHSA-7pc3-hj79-39qj.json index f2e4492d699..bf46251b64c 100644 --- a/advisories/unreviewed/2023/02/GHSA-7pc3-hj79-39qj/GHSA-7pc3-hj79-39qj.json +++ b/advisories/unreviewed/2023/02/GHSA-7pc3-hj79-39qj/GHSA-7pc3-hj79-39qj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-8296-xh28-2r6c/GHSA-8296-xh28-2r6c.json b/advisories/unreviewed/2023/02/GHSA-8296-xh28-2r6c/GHSA-8296-xh28-2r6c.json index 08f878b63df..e0a82033177 100644 --- a/advisories/unreviewed/2023/02/GHSA-8296-xh28-2r6c/GHSA-8296-xh28-2r6c.json +++ b/advisories/unreviewed/2023/02/GHSA-8296-xh28-2r6c/GHSA-8296-xh28-2r6c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-85v6-97w4-xjxp/GHSA-85v6-97w4-xjxp.json b/advisories/unreviewed/2023/02/GHSA-85v6-97w4-xjxp/GHSA-85v6-97w4-xjxp.json index 4f815fc0232..4e18d7a9b90 100644 --- a/advisories/unreviewed/2023/02/GHSA-85v6-97w4-xjxp/GHSA-85v6-97w4-xjxp.json +++ b/advisories/unreviewed/2023/02/GHSA-85v6-97w4-xjxp/GHSA-85v6-97w4-xjxp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9ggx-97wx-426m/GHSA-9ggx-97wx-426m.json b/advisories/unreviewed/2023/02/GHSA-9ggx-97wx-426m/GHSA-9ggx-97wx-426m.json index 6c6145d3f2a..00ea49a390a 100644 --- a/advisories/unreviewed/2023/02/GHSA-9ggx-97wx-426m/GHSA-9ggx-97wx-426m.json +++ b/advisories/unreviewed/2023/02/GHSA-9ggx-97wx-426m/GHSA-9ggx-97wx-426m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9jfc-cmc5-x599/GHSA-9jfc-cmc5-x599.json b/advisories/unreviewed/2023/02/GHSA-9jfc-cmc5-x599/GHSA-9jfc-cmc5-x599.json index 3abd35529e5..3dcfdb22891 100644 --- a/advisories/unreviewed/2023/02/GHSA-9jfc-cmc5-x599/GHSA-9jfc-cmc5-x599.json +++ b/advisories/unreviewed/2023/02/GHSA-9jfc-cmc5-x599/GHSA-9jfc-cmc5-x599.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9mqm-5q47-gj7c/GHSA-9mqm-5q47-gj7c.json b/advisories/unreviewed/2023/02/GHSA-9mqm-5q47-gj7c/GHSA-9mqm-5q47-gj7c.json index 33c41eb80a1..651850e2b6f 100644 --- a/advisories/unreviewed/2023/02/GHSA-9mqm-5q47-gj7c/GHSA-9mqm-5q47-gj7c.json +++ b/advisories/unreviewed/2023/02/GHSA-9mqm-5q47-gj7c/GHSA-9mqm-5q47-gj7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-9pw7-mgcc-2x76/GHSA-9pw7-mgcc-2x76.json b/advisories/unreviewed/2023/02/GHSA-9pw7-mgcc-2x76/GHSA-9pw7-mgcc-2x76.json index 24fb0ce96ad..b0ae29fa6f7 100644 --- a/advisories/unreviewed/2023/02/GHSA-9pw7-mgcc-2x76/GHSA-9pw7-mgcc-2x76.json +++ b/advisories/unreviewed/2023/02/GHSA-9pw7-mgcc-2x76/GHSA-9pw7-mgcc-2x76.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9wmf-vw9q-pc64/GHSA-9wmf-vw9q-pc64.json b/advisories/unreviewed/2023/02/GHSA-9wmf-vw9q-pc64/GHSA-9wmf-vw9q-pc64.json index 1b1cf8b87e4..9192508daf3 100644 --- a/advisories/unreviewed/2023/02/GHSA-9wmf-vw9q-pc64/GHSA-9wmf-vw9q-pc64.json +++ b/advisories/unreviewed/2023/02/GHSA-9wmf-vw9q-pc64/GHSA-9wmf-vw9q-pc64.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c729-m2g9-m3xv/GHSA-c729-m2g9-m3xv.json b/advisories/unreviewed/2023/02/GHSA-c729-m2g9-m3xv/GHSA-c729-m2g9-m3xv.json index b15063f8099..f95efd1711e 100644 --- a/advisories/unreviewed/2023/02/GHSA-c729-m2g9-m3xv/GHSA-c729-m2g9-m3xv.json +++ b/advisories/unreviewed/2023/02/GHSA-c729-m2g9-m3xv/GHSA-c729-m2g9-m3xv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-c76f-v3ph-4jj4/GHSA-c76f-v3ph-4jj4.json b/advisories/unreviewed/2023/02/GHSA-c76f-v3ph-4jj4/GHSA-c76f-v3ph-4jj4.json index e342b87b3fe..d3edc3cd3dc 100644 --- a/advisories/unreviewed/2023/02/GHSA-c76f-v3ph-4jj4/GHSA-c76f-v3ph-4jj4.json +++ b/advisories/unreviewed/2023/02/GHSA-c76f-v3ph-4jj4/GHSA-c76f-v3ph-4jj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c7gh-cqxp-26p6/GHSA-c7gh-cqxp-26p6.json b/advisories/unreviewed/2023/02/GHSA-c7gh-cqxp-26p6/GHSA-c7gh-cqxp-26p6.json index c4f9d4a2345..c257f4a12c1 100644 --- a/advisories/unreviewed/2023/02/GHSA-c7gh-cqxp-26p6/GHSA-c7gh-cqxp-26p6.json +++ b/advisories/unreviewed/2023/02/GHSA-c7gh-cqxp-26p6/GHSA-c7gh-cqxp-26p6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-ch7m-946x-3x9p/GHSA-ch7m-946x-3x9p.json b/advisories/unreviewed/2023/02/GHSA-ch7m-946x-3x9p/GHSA-ch7m-946x-3x9p.json index 604dcf0f56f..fd8f70b2213 100644 --- a/advisories/unreviewed/2023/02/GHSA-ch7m-946x-3x9p/GHSA-ch7m-946x-3x9p.json +++ b/advisories/unreviewed/2023/02/GHSA-ch7m-946x-3x9p/GHSA-ch7m-946x-3x9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-f2p9-2wvm-g96h/GHSA-f2p9-2wvm-g96h.json b/advisories/unreviewed/2023/02/GHSA-f2p9-2wvm-g96h/GHSA-f2p9-2wvm-g96h.json index af3fb16cfe3..fa17e247069 100644 --- a/advisories/unreviewed/2023/02/GHSA-f2p9-2wvm-g96h/GHSA-f2p9-2wvm-g96h.json +++ b/advisories/unreviewed/2023/02/GHSA-f2p9-2wvm-g96h/GHSA-f2p9-2wvm-g96h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-f8h9-f9q4-496j/GHSA-f8h9-f9q4-496j.json b/advisories/unreviewed/2023/02/GHSA-f8h9-f9q4-496j/GHSA-f8h9-f9q4-496j.json index 710eebd0656..ea7c5d70102 100644 --- a/advisories/unreviewed/2023/02/GHSA-f8h9-f9q4-496j/GHSA-f8h9-f9q4-496j.json +++ b/advisories/unreviewed/2023/02/GHSA-f8h9-f9q4-496j/GHSA-f8h9-f9q4-496j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fq74-8wx7-rfjm/GHSA-fq74-8wx7-rfjm.json b/advisories/unreviewed/2023/02/GHSA-fq74-8wx7-rfjm/GHSA-fq74-8wx7-rfjm.json index 892f4866c06..737120f7091 100644 --- a/advisories/unreviewed/2023/02/GHSA-fq74-8wx7-rfjm/GHSA-fq74-8wx7-rfjm.json +++ b/advisories/unreviewed/2023/02/GHSA-fq74-8wx7-rfjm/GHSA-fq74-8wx7-rfjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fr8p-9xx7-rw2c/GHSA-fr8p-9xx7-rw2c.json b/advisories/unreviewed/2023/02/GHSA-fr8p-9xx7-rw2c/GHSA-fr8p-9xx7-rw2c.json index ed994b0f5a0..adb641261d7 100644 --- a/advisories/unreviewed/2023/02/GHSA-fr8p-9xx7-rw2c/GHSA-fr8p-9xx7-rw2c.json +++ b/advisories/unreviewed/2023/02/GHSA-fr8p-9xx7-rw2c/GHSA-fr8p-9xx7-rw2c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fvhh-vvvp-fpmh/GHSA-fvhh-vvvp-fpmh.json b/advisories/unreviewed/2023/02/GHSA-fvhh-vvvp-fpmh/GHSA-fvhh-vvvp-fpmh.json index eb2f42831d0..5390e00bc45 100644 --- a/advisories/unreviewed/2023/02/GHSA-fvhh-vvvp-fpmh/GHSA-fvhh-vvvp-fpmh.json +++ b/advisories/unreviewed/2023/02/GHSA-fvhh-vvvp-fpmh/GHSA-fvhh-vvvp-fpmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fvhj-r9j4-vw3h/GHSA-fvhj-r9j4-vw3h.json b/advisories/unreviewed/2023/02/GHSA-fvhj-r9j4-vw3h/GHSA-fvhj-r9j4-vw3h.json index c55a54c9dbf..8a87e080b80 100644 --- a/advisories/unreviewed/2023/02/GHSA-fvhj-r9j4-vw3h/GHSA-fvhj-r9j4-vw3h.json +++ b/advisories/unreviewed/2023/02/GHSA-fvhj-r9j4-vw3h/GHSA-fvhj-r9j4-vw3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-g55x-g3rw-j988/GHSA-g55x-g3rw-j988.json b/advisories/unreviewed/2023/02/GHSA-g55x-g3rw-j988/GHSA-g55x-g3rw-j988.json index 062db8daae7..41b1c0ef4e9 100644 --- a/advisories/unreviewed/2023/02/GHSA-g55x-g3rw-j988/GHSA-g55x-g3rw-j988.json +++ b/advisories/unreviewed/2023/02/GHSA-g55x-g3rw-j988/GHSA-g55x-g3rw-j988.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-g83v-r97j-8c96/GHSA-g83v-r97j-8c96.json b/advisories/unreviewed/2023/02/GHSA-g83v-r97j-8c96/GHSA-g83v-r97j-8c96.json index 18a9b425db1..1d8ab72313e 100644 --- a/advisories/unreviewed/2023/02/GHSA-g83v-r97j-8c96/GHSA-g83v-r97j-8c96.json +++ b/advisories/unreviewed/2023/02/GHSA-g83v-r97j-8c96/GHSA-g83v-r97j-8c96.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-gjq5-3p29-m546/GHSA-gjq5-3p29-m546.json b/advisories/unreviewed/2023/02/GHSA-gjq5-3p29-m546/GHSA-gjq5-3p29-m546.json index 098b3aba8aa..f128fdbe5c7 100644 --- a/advisories/unreviewed/2023/02/GHSA-gjq5-3p29-m546/GHSA-gjq5-3p29-m546.json +++ b/advisories/unreviewed/2023/02/GHSA-gjq5-3p29-m546/GHSA-gjq5-3p29-m546.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-grpp-r2vp-jqh9/GHSA-grpp-r2vp-jqh9.json b/advisories/unreviewed/2023/02/GHSA-grpp-r2vp-jqh9/GHSA-grpp-r2vp-jqh9.json index 883cd112632..575efbf8335 100644 --- a/advisories/unreviewed/2023/02/GHSA-grpp-r2vp-jqh9/GHSA-grpp-r2vp-jqh9.json +++ b/advisories/unreviewed/2023/02/GHSA-grpp-r2vp-jqh9/GHSA-grpp-r2vp-jqh9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-gx84-73xf-rvpg/GHSA-gx84-73xf-rvpg.json b/advisories/unreviewed/2023/02/GHSA-gx84-73xf-rvpg/GHSA-gx84-73xf-rvpg.json index 0dd5ba22431..b5e79536bf8 100644 --- a/advisories/unreviewed/2023/02/GHSA-gx84-73xf-rvpg/GHSA-gx84-73xf-rvpg.json +++ b/advisories/unreviewed/2023/02/GHSA-gx84-73xf-rvpg/GHSA-gx84-73xf-rvpg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h7pg-4329-rww5/GHSA-h7pg-4329-rww5.json b/advisories/unreviewed/2023/02/GHSA-h7pg-4329-rww5/GHSA-h7pg-4329-rww5.json index a3e08ac4cf0..519fcbf01cc 100644 --- a/advisories/unreviewed/2023/02/GHSA-h7pg-4329-rww5/GHSA-h7pg-4329-rww5.json +++ b/advisories/unreviewed/2023/02/GHSA-h7pg-4329-rww5/GHSA-h7pg-4329-rww5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h86q-32m7-8f9v/GHSA-h86q-32m7-8f9v.json b/advisories/unreviewed/2023/02/GHSA-h86q-32m7-8f9v/GHSA-h86q-32m7-8f9v.json index 09cd23dc01b..46ab5184d93 100644 --- a/advisories/unreviewed/2023/02/GHSA-h86q-32m7-8f9v/GHSA-h86q-32m7-8f9v.json +++ b/advisories/unreviewed/2023/02/GHSA-h86q-32m7-8f9v/GHSA-h86q-32m7-8f9v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h96x-hqpq-pwpv/GHSA-h96x-hqpq-pwpv.json b/advisories/unreviewed/2023/02/GHSA-h96x-hqpq-pwpv/GHSA-h96x-hqpq-pwpv.json index b5c28ec470a..4eb3af8a3de 100644 --- a/advisories/unreviewed/2023/02/GHSA-h96x-hqpq-pwpv/GHSA-h96x-hqpq-pwpv.json +++ b/advisories/unreviewed/2023/02/GHSA-h96x-hqpq-pwpv/GHSA-h96x-hqpq-pwpv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hg3h-cj8p-9jf6/GHSA-hg3h-cj8p-9jf6.json b/advisories/unreviewed/2023/02/GHSA-hg3h-cj8p-9jf6/GHSA-hg3h-cj8p-9jf6.json index 5039404e006..9cb8ae8a786 100644 --- a/advisories/unreviewed/2023/02/GHSA-hg3h-cj8p-9jf6/GHSA-hg3h-cj8p-9jf6.json +++ b/advisories/unreviewed/2023/02/GHSA-hg3h-cj8p-9jf6/GHSA-hg3h-cj8p-9jf6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hg9v-x2cw-787r/GHSA-hg9v-x2cw-787r.json b/advisories/unreviewed/2023/02/GHSA-hg9v-x2cw-787r/GHSA-hg9v-x2cw-787r.json index 3804cc9bb01..e81277b9045 100644 --- a/advisories/unreviewed/2023/02/GHSA-hg9v-x2cw-787r/GHSA-hg9v-x2cw-787r.json +++ b/advisories/unreviewed/2023/02/GHSA-hg9v-x2cw-787r/GHSA-hg9v-x2cw-787r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hjp2-wqhc-39hf/GHSA-hjp2-wqhc-39hf.json b/advisories/unreviewed/2023/02/GHSA-hjp2-wqhc-39hf/GHSA-hjp2-wqhc-39hf.json index 18cecf7780f..1e413ac3292 100644 --- a/advisories/unreviewed/2023/02/GHSA-hjp2-wqhc-39hf/GHSA-hjp2-wqhc-39hf.json +++ b/advisories/unreviewed/2023/02/GHSA-hjp2-wqhc-39hf/GHSA-hjp2-wqhc-39hf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hmvw-v43x-3g53/GHSA-hmvw-v43x-3g53.json b/advisories/unreviewed/2023/02/GHSA-hmvw-v43x-3g53/GHSA-hmvw-v43x-3g53.json index 11d89ebb46e..6264927d4b2 100644 --- a/advisories/unreviewed/2023/02/GHSA-hmvw-v43x-3g53/GHSA-hmvw-v43x-3g53.json +++ b/advisories/unreviewed/2023/02/GHSA-hmvw-v43x-3g53/GHSA-hmvw-v43x-3g53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hp6x-rrx2-386m/GHSA-hp6x-rrx2-386m.json b/advisories/unreviewed/2023/02/GHSA-hp6x-rrx2-386m/GHSA-hp6x-rrx2-386m.json index 0571e641a1a..1eaccf6a188 100644 --- a/advisories/unreviewed/2023/02/GHSA-hp6x-rrx2-386m/GHSA-hp6x-rrx2-386m.json +++ b/advisories/unreviewed/2023/02/GHSA-hp6x-rrx2-386m/GHSA-hp6x-rrx2-386m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hq37-597p-8qrg/GHSA-hq37-597p-8qrg.json b/advisories/unreviewed/2023/02/GHSA-hq37-597p-8qrg/GHSA-hq37-597p-8qrg.json index 31bb991c858..bd53fb88139 100644 --- a/advisories/unreviewed/2023/02/GHSA-hq37-597p-8qrg/GHSA-hq37-597p-8qrg.json +++ b/advisories/unreviewed/2023/02/GHSA-hq37-597p-8qrg/GHSA-hq37-597p-8qrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hqp7-82rq-x5hr/GHSA-hqp7-82rq-x5hr.json b/advisories/unreviewed/2023/02/GHSA-hqp7-82rq-x5hr/GHSA-hqp7-82rq-x5hr.json index dfb63dbf748..45f2231b11f 100644 --- a/advisories/unreviewed/2023/02/GHSA-hqp7-82rq-x5hr/GHSA-hqp7-82rq-x5hr.json +++ b/advisories/unreviewed/2023/02/GHSA-hqp7-82rq-x5hr/GHSA-hqp7-82rq-x5hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hw3p-w6g3-vfr2/GHSA-hw3p-w6g3-vfr2.json b/advisories/unreviewed/2023/02/GHSA-hw3p-w6g3-vfr2/GHSA-hw3p-w6g3-vfr2.json index b73f47ac4f4..1729c71ace1 100644 --- a/advisories/unreviewed/2023/02/GHSA-hw3p-w6g3-vfr2/GHSA-hw3p-w6g3-vfr2.json +++ b/advisories/unreviewed/2023/02/GHSA-hw3p-w6g3-vfr2/GHSA-hw3p-w6g3-vfr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hxq3-28qm-p5p4/GHSA-hxq3-28qm-p5p4.json b/advisories/unreviewed/2023/02/GHSA-hxq3-28qm-p5p4/GHSA-hxq3-28qm-p5p4.json index 3626268f0c1..b45f7a5c3d4 100644 --- a/advisories/unreviewed/2023/02/GHSA-hxq3-28qm-p5p4/GHSA-hxq3-28qm-p5p4.json +++ b/advisories/unreviewed/2023/02/GHSA-hxq3-28qm-p5p4/GHSA-hxq3-28qm-p5p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-j4x7-x2fm-q77j/GHSA-j4x7-x2fm-q77j.json b/advisories/unreviewed/2023/02/GHSA-j4x7-x2fm-q77j/GHSA-j4x7-x2fm-q77j.json index b0fc19088d2..c5807abe68a 100644 --- a/advisories/unreviewed/2023/02/GHSA-j4x7-x2fm-q77j/GHSA-j4x7-x2fm-q77j.json +++ b/advisories/unreviewed/2023/02/GHSA-j4x7-x2fm-q77j/GHSA-j4x7-x2fm-q77j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jpv9-4v9p-758r/GHSA-jpv9-4v9p-758r.json b/advisories/unreviewed/2023/02/GHSA-jpv9-4v9p-758r/GHSA-jpv9-4v9p-758r.json index 933ab799bb4..bad87c04f27 100644 --- a/advisories/unreviewed/2023/02/GHSA-jpv9-4v9p-758r/GHSA-jpv9-4v9p-758r.json +++ b/advisories/unreviewed/2023/02/GHSA-jpv9-4v9p-758r/GHSA-jpv9-4v9p-758r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jrrp-wvgf-hmfr/GHSA-jrrp-wvgf-hmfr.json b/advisories/unreviewed/2023/02/GHSA-jrrp-wvgf-hmfr/GHSA-jrrp-wvgf-hmfr.json index 496a40f22f2..c6bb82db046 100644 --- a/advisories/unreviewed/2023/02/GHSA-jrrp-wvgf-hmfr/GHSA-jrrp-wvgf-hmfr.json +++ b/advisories/unreviewed/2023/02/GHSA-jrrp-wvgf-hmfr/GHSA-jrrp-wvgf-hmfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jwrm-86h9-fvj6/GHSA-jwrm-86h9-fvj6.json b/advisories/unreviewed/2023/02/GHSA-jwrm-86h9-fvj6/GHSA-jwrm-86h9-fvj6.json index 880adaab155..cc5b646ca9f 100644 --- a/advisories/unreviewed/2023/02/GHSA-jwrm-86h9-fvj6/GHSA-jwrm-86h9-fvj6.json +++ b/advisories/unreviewed/2023/02/GHSA-jwrm-86h9-fvj6/GHSA-jwrm-86h9-fvj6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jx8m-g766-r6m8/GHSA-jx8m-g766-r6m8.json b/advisories/unreviewed/2023/02/GHSA-jx8m-g766-r6m8/GHSA-jx8m-g766-r6m8.json index 15bb55b643b..7df1d99fdd5 100644 --- a/advisories/unreviewed/2023/02/GHSA-jx8m-g766-r6m8/GHSA-jx8m-g766-r6m8.json +++ b/advisories/unreviewed/2023/02/GHSA-jx8m-g766-r6m8/GHSA-jx8m-g766-r6m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-m7cp-w3xh-qr3p/GHSA-m7cp-w3xh-qr3p.json b/advisories/unreviewed/2023/02/GHSA-m7cp-w3xh-qr3p/GHSA-m7cp-w3xh-qr3p.json index 92b5c73ef96..e8019d94448 100644 --- a/advisories/unreviewed/2023/02/GHSA-m7cp-w3xh-qr3p/GHSA-m7cp-w3xh-qr3p.json +++ b/advisories/unreviewed/2023/02/GHSA-m7cp-w3xh-qr3p/GHSA-m7cp-w3xh-qr3p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-m8gm-9m6q-6xm3/GHSA-m8gm-9m6q-6xm3.json b/advisories/unreviewed/2023/02/GHSA-m8gm-9m6q-6xm3/GHSA-m8gm-9m6q-6xm3.json index e5af9f34e3d..3d3330527f9 100644 --- a/advisories/unreviewed/2023/02/GHSA-m8gm-9m6q-6xm3/GHSA-m8gm-9m6q-6xm3.json +++ b/advisories/unreviewed/2023/02/GHSA-m8gm-9m6q-6xm3/GHSA-m8gm-9m6q-6xm3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mm2f-2cg5-2pwm/GHSA-mm2f-2cg5-2pwm.json b/advisories/unreviewed/2023/02/GHSA-mm2f-2cg5-2pwm/GHSA-mm2f-2cg5-2pwm.json index 0bf810c3598..940b525d995 100644 --- a/advisories/unreviewed/2023/02/GHSA-mm2f-2cg5-2pwm/GHSA-mm2f-2cg5-2pwm.json +++ b/advisories/unreviewed/2023/02/GHSA-mm2f-2cg5-2pwm/GHSA-mm2f-2cg5-2pwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mrrp-969g-jpwr/GHSA-mrrp-969g-jpwr.json b/advisories/unreviewed/2023/02/GHSA-mrrp-969g-jpwr/GHSA-mrrp-969g-jpwr.json index 644efcc036e..03ca26be738 100644 --- a/advisories/unreviewed/2023/02/GHSA-mrrp-969g-jpwr/GHSA-mrrp-969g-jpwr.json +++ b/advisories/unreviewed/2023/02/GHSA-mrrp-969g-jpwr/GHSA-mrrp-969g-jpwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-p3p2-pffj-3m5f/GHSA-p3p2-pffj-3m5f.json b/advisories/unreviewed/2023/02/GHSA-p3p2-pffj-3m5f/GHSA-p3p2-pffj-3m5f.json index 1831ecfe5d1..02644fccf74 100644 --- a/advisories/unreviewed/2023/02/GHSA-p3p2-pffj-3m5f/GHSA-p3p2-pffj-3m5f.json +++ b/advisories/unreviewed/2023/02/GHSA-p3p2-pffj-3m5f/GHSA-p3p2-pffj-3m5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-p586-5mqw-6f9x/GHSA-p586-5mqw-6f9x.json b/advisories/unreviewed/2023/02/GHSA-p586-5mqw-6f9x/GHSA-p586-5mqw-6f9x.json index 342e5fc8697..89b3ed742e6 100644 --- a/advisories/unreviewed/2023/02/GHSA-p586-5mqw-6f9x/GHSA-p586-5mqw-6f9x.json +++ b/advisories/unreviewed/2023/02/GHSA-p586-5mqw-6f9x/GHSA-p586-5mqw-6f9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-p8wr-66q2-pvj4/GHSA-p8wr-66q2-pvj4.json b/advisories/unreviewed/2023/02/GHSA-p8wr-66q2-pvj4/GHSA-p8wr-66q2-pvj4.json index 0f4101a2377..d971802e208 100644 --- a/advisories/unreviewed/2023/02/GHSA-p8wr-66q2-pvj4/GHSA-p8wr-66q2-pvj4.json +++ b/advisories/unreviewed/2023/02/GHSA-p8wr-66q2-pvj4/GHSA-p8wr-66q2-pvj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-q4vc-x2f4-45f6/GHSA-q4vc-x2f4-45f6.json b/advisories/unreviewed/2023/02/GHSA-q4vc-x2f4-45f6/GHSA-q4vc-x2f4-45f6.json index e2718023bce..4d428947b7a 100644 --- a/advisories/unreviewed/2023/02/GHSA-q4vc-x2f4-45f6/GHSA-q4vc-x2f4-45f6.json +++ b/advisories/unreviewed/2023/02/GHSA-q4vc-x2f4-45f6/GHSA-q4vc-x2f4-45f6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-q5g2-32hx-8j6c/GHSA-q5g2-32hx-8j6c.json b/advisories/unreviewed/2023/02/GHSA-q5g2-32hx-8j6c/GHSA-q5g2-32hx-8j6c.json index 023c3ec8a0b..b43d2bbc4f8 100644 --- a/advisories/unreviewed/2023/02/GHSA-q5g2-32hx-8j6c/GHSA-q5g2-32hx-8j6c.json +++ b/advisories/unreviewed/2023/02/GHSA-q5g2-32hx-8j6c/GHSA-q5g2-32hx-8j6c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-r92x-rh88-frqj/GHSA-r92x-rh88-frqj.json b/advisories/unreviewed/2023/02/GHSA-r92x-rh88-frqj/GHSA-r92x-rh88-frqj.json index 6c678a7263c..64ce8d194bb 100644 --- a/advisories/unreviewed/2023/02/GHSA-r92x-rh88-frqj/GHSA-r92x-rh88-frqj.json +++ b/advisories/unreviewed/2023/02/GHSA-r92x-rh88-frqj/GHSA-r92x-rh88-frqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rfgw-5vq3-wrjf/GHSA-rfgw-5vq3-wrjf.json b/advisories/unreviewed/2023/02/GHSA-rfgw-5vq3-wrjf/GHSA-rfgw-5vq3-wrjf.json index 95d63b46b13..5863bbe1d15 100644 --- a/advisories/unreviewed/2023/02/GHSA-rfgw-5vq3-wrjf/GHSA-rfgw-5vq3-wrjf.json +++ b/advisories/unreviewed/2023/02/GHSA-rfgw-5vq3-wrjf/GHSA-rfgw-5vq3-wrjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rp7h-gm2h-g8h8/GHSA-rp7h-gm2h-g8h8.json b/advisories/unreviewed/2023/02/GHSA-rp7h-gm2h-g8h8/GHSA-rp7h-gm2h-g8h8.json index aa5cc954d79..25191f5b6f9 100644 --- a/advisories/unreviewed/2023/02/GHSA-rp7h-gm2h-g8h8/GHSA-rp7h-gm2h-g8h8.json +++ b/advisories/unreviewed/2023/02/GHSA-rp7h-gm2h-g8h8/GHSA-rp7h-gm2h-g8h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rqh8-4mfx-r6p6/GHSA-rqh8-4mfx-r6p6.json b/advisories/unreviewed/2023/02/GHSA-rqh8-4mfx-r6p6/GHSA-rqh8-4mfx-r6p6.json index e87d99ca7f7..1d96661d61f 100644 --- a/advisories/unreviewed/2023/02/GHSA-rqh8-4mfx-r6p6/GHSA-rqh8-4mfx-r6p6.json +++ b/advisories/unreviewed/2023/02/GHSA-rqh8-4mfx-r6p6/GHSA-rqh8-4mfx-r6p6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rvwc-hj36-r9w5/GHSA-rvwc-hj36-r9w5.json b/advisories/unreviewed/2023/02/GHSA-rvwc-hj36-r9w5/GHSA-rvwc-hj36-r9w5.json index 0e88d0e8813..7e50443a4fd 100644 --- a/advisories/unreviewed/2023/02/GHSA-rvwc-hj36-r9w5/GHSA-rvwc-hj36-r9w5.json +++ b/advisories/unreviewed/2023/02/GHSA-rvwc-hj36-r9w5/GHSA-rvwc-hj36-r9w5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rxw5-8jw3-852x/GHSA-rxw5-8jw3-852x.json b/advisories/unreviewed/2023/02/GHSA-rxw5-8jw3-852x/GHSA-rxw5-8jw3-852x.json index 61fa5c0b56f..11995da414a 100644 --- a/advisories/unreviewed/2023/02/GHSA-rxw5-8jw3-852x/GHSA-rxw5-8jw3-852x.json +++ b/advisories/unreviewed/2023/02/GHSA-rxw5-8jw3-852x/GHSA-rxw5-8jw3-852x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-v7rm-4q4v-g333/GHSA-v7rm-4q4v-g333.json b/advisories/unreviewed/2023/02/GHSA-v7rm-4q4v-g333/GHSA-v7rm-4q4v-g333.json index e96691874a2..5ca455df2ea 100644 --- a/advisories/unreviewed/2023/02/GHSA-v7rm-4q4v-g333/GHSA-v7rm-4q4v-g333.json +++ b/advisories/unreviewed/2023/02/GHSA-v7rm-4q4v-g333/GHSA-v7rm-4q4v-g333.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-v8rr-9cww-2334/GHSA-v8rr-9cww-2334.json b/advisories/unreviewed/2023/02/GHSA-v8rr-9cww-2334/GHSA-v8rr-9cww-2334.json index 2aa76f296db..b500a2160f1 100644 --- a/advisories/unreviewed/2023/02/GHSA-v8rr-9cww-2334/GHSA-v8rr-9cww-2334.json +++ b/advisories/unreviewed/2023/02/GHSA-v8rr-9cww-2334/GHSA-v8rr-9cww-2334.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-vwqq-p7w6-hwg3/GHSA-vwqq-p7w6-hwg3.json b/advisories/unreviewed/2023/02/GHSA-vwqq-p7w6-hwg3/GHSA-vwqq-p7w6-hwg3.json index f7709721d25..7abbb319c8a 100644 --- a/advisories/unreviewed/2023/02/GHSA-vwqq-p7w6-hwg3/GHSA-vwqq-p7w6-hwg3.json +++ b/advisories/unreviewed/2023/02/GHSA-vwqq-p7w6-hwg3/GHSA-vwqq-p7w6-hwg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-w5cx-mrhg-jrxj/GHSA-w5cx-mrhg-jrxj.json b/advisories/unreviewed/2023/02/GHSA-w5cx-mrhg-jrxj/GHSA-w5cx-mrhg-jrxj.json index af01e704b17..7e0832257c7 100644 --- a/advisories/unreviewed/2023/02/GHSA-w5cx-mrhg-jrxj/GHSA-w5cx-mrhg-jrxj.json +++ b/advisories/unreviewed/2023/02/GHSA-w5cx-mrhg-jrxj/GHSA-w5cx-mrhg-jrxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wf3q-fv98-32hr/GHSA-wf3q-fv98-32hr.json b/advisories/unreviewed/2023/02/GHSA-wf3q-fv98-32hr/GHSA-wf3q-fv98-32hr.json index e41f27da8f2..09516c270c7 100644 --- a/advisories/unreviewed/2023/02/GHSA-wf3q-fv98-32hr/GHSA-wf3q-fv98-32hr.json +++ b/advisories/unreviewed/2023/02/GHSA-wf3q-fv98-32hr/GHSA-wf3q-fv98-32hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wgc6-2c2v-35r8/GHSA-wgc6-2c2v-35r8.json b/advisories/unreviewed/2023/02/GHSA-wgc6-2c2v-35r8/GHSA-wgc6-2c2v-35r8.json index 3a61c870ae3..d1d303b0cc3 100644 --- a/advisories/unreviewed/2023/02/GHSA-wgc6-2c2v-35r8/GHSA-wgc6-2c2v-35r8.json +++ b/advisories/unreviewed/2023/02/GHSA-wgc6-2c2v-35r8/GHSA-wgc6-2c2v-35r8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wh6h-cv93-v7rg/GHSA-wh6h-cv93-v7rg.json b/advisories/unreviewed/2023/02/GHSA-wh6h-cv93-v7rg/GHSA-wh6h-cv93-v7rg.json index 52d9f1c3634..a3271fa99e1 100644 --- a/advisories/unreviewed/2023/02/GHSA-wh6h-cv93-v7rg/GHSA-wh6h-cv93-v7rg.json +++ b/advisories/unreviewed/2023/02/GHSA-wh6h-cv93-v7rg/GHSA-wh6h-cv93-v7rg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wm4x-x4q5-34vq/GHSA-wm4x-x4q5-34vq.json b/advisories/unreviewed/2023/02/GHSA-wm4x-x4q5-34vq/GHSA-wm4x-x4q5-34vq.json index 0c45d1cad1c..701c361960f 100644 --- a/advisories/unreviewed/2023/02/GHSA-wm4x-x4q5-34vq/GHSA-wm4x-x4q5-34vq.json +++ b/advisories/unreviewed/2023/02/GHSA-wm4x-x4q5-34vq/GHSA-wm4x-x4q5-34vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wm7h-448h-cg4j/GHSA-wm7h-448h-cg4j.json b/advisories/unreviewed/2023/02/GHSA-wm7h-448h-cg4j/GHSA-wm7h-448h-cg4j.json index 6b2e5961608..54016212a05 100644 --- a/advisories/unreviewed/2023/02/GHSA-wm7h-448h-cg4j/GHSA-wm7h-448h-cg4j.json +++ b/advisories/unreviewed/2023/02/GHSA-wm7h-448h-cg4j/GHSA-wm7h-448h-cg4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wmwq-whw7-gm6q/GHSA-wmwq-whw7-gm6q.json b/advisories/unreviewed/2023/02/GHSA-wmwq-whw7-gm6q/GHSA-wmwq-whw7-gm6q.json index 09404b1414b..8ed249f419e 100644 --- a/advisories/unreviewed/2023/02/GHSA-wmwq-whw7-gm6q/GHSA-wmwq-whw7-gm6q.json +++ b/advisories/unreviewed/2023/02/GHSA-wmwq-whw7-gm6q/GHSA-wmwq-whw7-gm6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-x4mp-q79c-863h/GHSA-x4mp-q79c-863h.json b/advisories/unreviewed/2023/02/GHSA-x4mp-q79c-863h/GHSA-x4mp-q79c-863h.json index 98236c1488d..be76cc028f4 100644 --- a/advisories/unreviewed/2023/02/GHSA-x4mp-q79c-863h/GHSA-x4mp-q79c-863h.json +++ b/advisories/unreviewed/2023/02/GHSA-x4mp-q79c-863h/GHSA-x4mp-q79c-863h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-xcv2-hhcc-6pc8/GHSA-xcv2-hhcc-6pc8.json b/advisories/unreviewed/2023/02/GHSA-xcv2-hhcc-6pc8/GHSA-xcv2-hhcc-6pc8.json index 06772e11ad4..0948c4cd8d0 100644 --- a/advisories/unreviewed/2023/02/GHSA-xcv2-hhcc-6pc8/GHSA-xcv2-hhcc-6pc8.json +++ b/advisories/unreviewed/2023/02/GHSA-xcv2-hhcc-6pc8/GHSA-xcv2-hhcc-6pc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-xr6w-643f-4rpc/GHSA-xr6w-643f-4rpc.json b/advisories/unreviewed/2023/02/GHSA-xr6w-643f-4rpc/GHSA-xr6w-643f-4rpc.json index 5cca5a88b67..1dec216d184 100644 --- a/advisories/unreviewed/2023/02/GHSA-xr6w-643f-4rpc/GHSA-xr6w-643f-4rpc.json +++ b/advisories/unreviewed/2023/02/GHSA-xr6w-643f-4rpc/GHSA-xr6w-643f-4rpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-xx6m-c65f-7c53/GHSA-xx6m-c65f-7c53.json b/advisories/unreviewed/2023/02/GHSA-xx6m-c65f-7c53/GHSA-xx6m-c65f-7c53.json index b9c9fd92725..d1075ab69a7 100644 --- a/advisories/unreviewed/2023/02/GHSA-xx6m-c65f-7c53/GHSA-xx6m-c65f-7c53.json +++ b/advisories/unreviewed/2023/02/GHSA-xx6m-c65f-7c53/GHSA-xx6m-c65f-7c53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-22mx-qh6h-fcv2/GHSA-22mx-qh6h-fcv2.json b/advisories/unreviewed/2023/03/GHSA-22mx-qh6h-fcv2/GHSA-22mx-qh6h-fcv2.json index 0129a29d802..ab543979dd6 100644 --- a/advisories/unreviewed/2023/03/GHSA-22mx-qh6h-fcv2/GHSA-22mx-qh6h-fcv2.json +++ b/advisories/unreviewed/2023/03/GHSA-22mx-qh6h-fcv2/GHSA-22mx-qh6h-fcv2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-25w4-v727-mm22/GHSA-25w4-v727-mm22.json b/advisories/unreviewed/2023/03/GHSA-25w4-v727-mm22/GHSA-25w4-v727-mm22.json index e517e5fd023..70ce8d4519a 100644 --- a/advisories/unreviewed/2023/03/GHSA-25w4-v727-mm22/GHSA-25w4-v727-mm22.json +++ b/advisories/unreviewed/2023/03/GHSA-25w4-v727-mm22/GHSA-25w4-v727-mm22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-2rh7-34v8-5jg6/GHSA-2rh7-34v8-5jg6.json b/advisories/unreviewed/2023/03/GHSA-2rh7-34v8-5jg6/GHSA-2rh7-34v8-5jg6.json index 973d9662c54..8bc0796841f 100644 --- a/advisories/unreviewed/2023/03/GHSA-2rh7-34v8-5jg6/GHSA-2rh7-34v8-5jg6.json +++ b/advisories/unreviewed/2023/03/GHSA-2rh7-34v8-5jg6/GHSA-2rh7-34v8-5jg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-32mx-p774-gwx7/GHSA-32mx-p774-gwx7.json b/advisories/unreviewed/2023/03/GHSA-32mx-p774-gwx7/GHSA-32mx-p774-gwx7.json index f98976c499d..c63889a94e7 100644 --- a/advisories/unreviewed/2023/03/GHSA-32mx-p774-gwx7/GHSA-32mx-p774-gwx7.json +++ b/advisories/unreviewed/2023/03/GHSA-32mx-p774-gwx7/GHSA-32mx-p774-gwx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-33j9-x55f-349p/GHSA-33j9-x55f-349p.json b/advisories/unreviewed/2023/03/GHSA-33j9-x55f-349p/GHSA-33j9-x55f-349p.json index 55fa753041c..96070c1014a 100644 --- a/advisories/unreviewed/2023/03/GHSA-33j9-x55f-349p/GHSA-33j9-x55f-349p.json +++ b/advisories/unreviewed/2023/03/GHSA-33j9-x55f-349p/GHSA-33j9-x55f-349p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-3457-wmr8-rfxc/GHSA-3457-wmr8-rfxc.json b/advisories/unreviewed/2023/03/GHSA-3457-wmr8-rfxc/GHSA-3457-wmr8-rfxc.json index 83c72017890..af28e9e68bc 100644 --- a/advisories/unreviewed/2023/03/GHSA-3457-wmr8-rfxc/GHSA-3457-wmr8-rfxc.json +++ b/advisories/unreviewed/2023/03/GHSA-3457-wmr8-rfxc/GHSA-3457-wmr8-rfxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-39rw-9mj8-p737/GHSA-39rw-9mj8-p737.json b/advisories/unreviewed/2023/03/GHSA-39rw-9mj8-p737/GHSA-39rw-9mj8-p737.json index c4647196674..3cdabd7ff6a 100644 --- a/advisories/unreviewed/2023/03/GHSA-39rw-9mj8-p737/GHSA-39rw-9mj8-p737.json +++ b/advisories/unreviewed/2023/03/GHSA-39rw-9mj8-p737/GHSA-39rw-9mj8-p737.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-3cvv-64cv-vrmx/GHSA-3cvv-64cv-vrmx.json b/advisories/unreviewed/2023/03/GHSA-3cvv-64cv-vrmx/GHSA-3cvv-64cv-vrmx.json index 302c4dd383c..379c9de70ac 100644 --- a/advisories/unreviewed/2023/03/GHSA-3cvv-64cv-vrmx/GHSA-3cvv-64cv-vrmx.json +++ b/advisories/unreviewed/2023/03/GHSA-3cvv-64cv-vrmx/GHSA-3cvv-64cv-vrmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-3fvg-68xh-vfxq/GHSA-3fvg-68xh-vfxq.json b/advisories/unreviewed/2023/03/GHSA-3fvg-68xh-vfxq/GHSA-3fvg-68xh-vfxq.json index de966529edf..5a2420ea8a6 100644 --- a/advisories/unreviewed/2023/03/GHSA-3fvg-68xh-vfxq/GHSA-3fvg-68xh-vfxq.json +++ b/advisories/unreviewed/2023/03/GHSA-3fvg-68xh-vfxq/GHSA-3fvg-68xh-vfxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-3gvp-4pqv-5jwr/GHSA-3gvp-4pqv-5jwr.json b/advisories/unreviewed/2023/03/GHSA-3gvp-4pqv-5jwr/GHSA-3gvp-4pqv-5jwr.json index 073b01b0634..38591ce1072 100644 --- a/advisories/unreviewed/2023/03/GHSA-3gvp-4pqv-5jwr/GHSA-3gvp-4pqv-5jwr.json +++ b/advisories/unreviewed/2023/03/GHSA-3gvp-4pqv-5jwr/GHSA-3gvp-4pqv-5jwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-3rw6-cqcq-m6xc/GHSA-3rw6-cqcq-m6xc.json b/advisories/unreviewed/2023/03/GHSA-3rw6-cqcq-m6xc/GHSA-3rw6-cqcq-m6xc.json index 83df2bb9041..4040253fc38 100644 --- a/advisories/unreviewed/2023/03/GHSA-3rw6-cqcq-m6xc/GHSA-3rw6-cqcq-m6xc.json +++ b/advisories/unreviewed/2023/03/GHSA-3rw6-cqcq-m6xc/GHSA-3rw6-cqcq-m6xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-4g7q-85r5-pm7w/GHSA-4g7q-85r5-pm7w.json b/advisories/unreviewed/2023/03/GHSA-4g7q-85r5-pm7w/GHSA-4g7q-85r5-pm7w.json index 01910f92d88..bfb5744ce7f 100644 --- a/advisories/unreviewed/2023/03/GHSA-4g7q-85r5-pm7w/GHSA-4g7q-85r5-pm7w.json +++ b/advisories/unreviewed/2023/03/GHSA-4g7q-85r5-pm7w/GHSA-4g7q-85r5-pm7w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-4pgp-cwxw-hv5p/GHSA-4pgp-cwxw-hv5p.json b/advisories/unreviewed/2023/03/GHSA-4pgp-cwxw-hv5p/GHSA-4pgp-cwxw-hv5p.json index b22451e8557..2a1b413e102 100644 --- a/advisories/unreviewed/2023/03/GHSA-4pgp-cwxw-hv5p/GHSA-4pgp-cwxw-hv5p.json +++ b/advisories/unreviewed/2023/03/GHSA-4pgp-cwxw-hv5p/GHSA-4pgp-cwxw-hv5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-4rpc-xhhq-h2cq/GHSA-4rpc-xhhq-h2cq.json b/advisories/unreviewed/2023/03/GHSA-4rpc-xhhq-h2cq/GHSA-4rpc-xhhq-h2cq.json index b82ad7146a4..e7a7f5de2df 100644 --- a/advisories/unreviewed/2023/03/GHSA-4rpc-xhhq-h2cq/GHSA-4rpc-xhhq-h2cq.json +++ b/advisories/unreviewed/2023/03/GHSA-4rpc-xhhq-h2cq/GHSA-4rpc-xhhq-h2cq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-4xfq-44x7-3w2q/GHSA-4xfq-44x7-3w2q.json b/advisories/unreviewed/2023/03/GHSA-4xfq-44x7-3w2q/GHSA-4xfq-44x7-3w2q.json index d45a72527fb..472acc37959 100644 --- a/advisories/unreviewed/2023/03/GHSA-4xfq-44x7-3w2q/GHSA-4xfq-44x7-3w2q.json +++ b/advisories/unreviewed/2023/03/GHSA-4xfq-44x7-3w2q/GHSA-4xfq-44x7-3w2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-535p-6x4h-f6px/GHSA-535p-6x4h-f6px.json b/advisories/unreviewed/2023/03/GHSA-535p-6x4h-f6px/GHSA-535p-6x4h-f6px.json index 5d6eb1e7d43..78153426297 100644 --- a/advisories/unreviewed/2023/03/GHSA-535p-6x4h-f6px/GHSA-535p-6x4h-f6px.json +++ b/advisories/unreviewed/2023/03/GHSA-535p-6x4h-f6px/GHSA-535p-6x4h-f6px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-5hhr-v562-5x3r/GHSA-5hhr-v562-5x3r.json b/advisories/unreviewed/2023/03/GHSA-5hhr-v562-5x3r/GHSA-5hhr-v562-5x3r.json index ca63dac2408..3f69eecf49c 100644 --- a/advisories/unreviewed/2023/03/GHSA-5hhr-v562-5x3r/GHSA-5hhr-v562-5x3r.json +++ b/advisories/unreviewed/2023/03/GHSA-5hhr-v562-5x3r/GHSA-5hhr-v562-5x3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-5mw2-8fj2-f2rc/GHSA-5mw2-8fj2-f2rc.json b/advisories/unreviewed/2023/03/GHSA-5mw2-8fj2-f2rc/GHSA-5mw2-8fj2-f2rc.json index b6a57e13373..0ac0d21fdd1 100644 --- a/advisories/unreviewed/2023/03/GHSA-5mw2-8fj2-f2rc/GHSA-5mw2-8fj2-f2rc.json +++ b/advisories/unreviewed/2023/03/GHSA-5mw2-8fj2-f2rc/GHSA-5mw2-8fj2-f2rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-5rvj-4rxp-67hv/GHSA-5rvj-4rxp-67hv.json b/advisories/unreviewed/2023/03/GHSA-5rvj-4rxp-67hv/GHSA-5rvj-4rxp-67hv.json index a3e61c55b9d..a95e083f66b 100644 --- a/advisories/unreviewed/2023/03/GHSA-5rvj-4rxp-67hv/GHSA-5rvj-4rxp-67hv.json +++ b/advisories/unreviewed/2023/03/GHSA-5rvj-4rxp-67hv/GHSA-5rvj-4rxp-67hv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-5v24-vjhg-w435/GHSA-5v24-vjhg-w435.json b/advisories/unreviewed/2023/03/GHSA-5v24-vjhg-w435/GHSA-5v24-vjhg-w435.json index fdfc10cd97d..d30f4cc89d5 100644 --- a/advisories/unreviewed/2023/03/GHSA-5v24-vjhg-w435/GHSA-5v24-vjhg-w435.json +++ b/advisories/unreviewed/2023/03/GHSA-5v24-vjhg-w435/GHSA-5v24-vjhg-w435.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-64mc-xq24-56f8/GHSA-64mc-xq24-56f8.json b/advisories/unreviewed/2023/03/GHSA-64mc-xq24-56f8/GHSA-64mc-xq24-56f8.json index f369cf774c4..ba0131b6c43 100644 --- a/advisories/unreviewed/2023/03/GHSA-64mc-xq24-56f8/GHSA-64mc-xq24-56f8.json +++ b/advisories/unreviewed/2023/03/GHSA-64mc-xq24-56f8/GHSA-64mc-xq24-56f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-68v9-m4mj-hq4h/GHSA-68v9-m4mj-hq4h.json b/advisories/unreviewed/2023/03/GHSA-68v9-m4mj-hq4h/GHSA-68v9-m4mj-hq4h.json index 213ed59e389..80d23f36ebb 100644 --- a/advisories/unreviewed/2023/03/GHSA-68v9-m4mj-hq4h/GHSA-68v9-m4mj-hq4h.json +++ b/advisories/unreviewed/2023/03/GHSA-68v9-m4mj-hq4h/GHSA-68v9-m4mj-hq4h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-6fr5-2xjv-gr58/GHSA-6fr5-2xjv-gr58.json b/advisories/unreviewed/2023/03/GHSA-6fr5-2xjv-gr58/GHSA-6fr5-2xjv-gr58.json index 620e04ac737..48cb164119d 100644 --- a/advisories/unreviewed/2023/03/GHSA-6fr5-2xjv-gr58/GHSA-6fr5-2xjv-gr58.json +++ b/advisories/unreviewed/2023/03/GHSA-6fr5-2xjv-gr58/GHSA-6fr5-2xjv-gr58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-6hgj-m62w-qp9h/GHSA-6hgj-m62w-qp9h.json b/advisories/unreviewed/2023/03/GHSA-6hgj-m62w-qp9h/GHSA-6hgj-m62w-qp9h.json index c11162f81fa..1d810d54daf 100644 --- a/advisories/unreviewed/2023/03/GHSA-6hgj-m62w-qp9h/GHSA-6hgj-m62w-qp9h.json +++ b/advisories/unreviewed/2023/03/GHSA-6hgj-m62w-qp9h/GHSA-6hgj-m62w-qp9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-7m4j-wfjv-chxw/GHSA-7m4j-wfjv-chxw.json b/advisories/unreviewed/2023/03/GHSA-7m4j-wfjv-chxw/GHSA-7m4j-wfjv-chxw.json index c167585cd54..0171aa659e3 100644 --- a/advisories/unreviewed/2023/03/GHSA-7m4j-wfjv-chxw/GHSA-7m4j-wfjv-chxw.json +++ b/advisories/unreviewed/2023/03/GHSA-7m4j-wfjv-chxw/GHSA-7m4j-wfjv-chxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-7q2h-f39x-vgg4/GHSA-7q2h-f39x-vgg4.json b/advisories/unreviewed/2023/03/GHSA-7q2h-f39x-vgg4/GHSA-7q2h-f39x-vgg4.json index f0796404d82..1925d6f36eb 100644 --- a/advisories/unreviewed/2023/03/GHSA-7q2h-f39x-vgg4/GHSA-7q2h-f39x-vgg4.json +++ b/advisories/unreviewed/2023/03/GHSA-7q2h-f39x-vgg4/GHSA-7q2h-f39x-vgg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-7r96-f699-x2h6/GHSA-7r96-f699-x2h6.json b/advisories/unreviewed/2023/03/GHSA-7r96-f699-x2h6/GHSA-7r96-f699-x2h6.json index 343e93dc1c9..e79e7da8f22 100644 --- a/advisories/unreviewed/2023/03/GHSA-7r96-f699-x2h6/GHSA-7r96-f699-x2h6.json +++ b/advisories/unreviewed/2023/03/GHSA-7r96-f699-x2h6/GHSA-7r96-f699-x2h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-7v8p-8pxw-6c4g/GHSA-7v8p-8pxw-6c4g.json b/advisories/unreviewed/2023/03/GHSA-7v8p-8pxw-6c4g/GHSA-7v8p-8pxw-6c4g.json index 5b4d06ebd4a..6f0a3474a82 100644 --- a/advisories/unreviewed/2023/03/GHSA-7v8p-8pxw-6c4g/GHSA-7v8p-8pxw-6c4g.json +++ b/advisories/unreviewed/2023/03/GHSA-7v8p-8pxw-6c4g/GHSA-7v8p-8pxw-6c4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8283-337p-pfcj/GHSA-8283-337p-pfcj.json b/advisories/unreviewed/2023/03/GHSA-8283-337p-pfcj/GHSA-8283-337p-pfcj.json index 9a6390241f6..5793dec42c8 100644 --- a/advisories/unreviewed/2023/03/GHSA-8283-337p-pfcj/GHSA-8283-337p-pfcj.json +++ b/advisories/unreviewed/2023/03/GHSA-8283-337p-pfcj/GHSA-8283-337p-pfcj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8c4g-m89h-8jvw/GHSA-8c4g-m89h-8jvw.json b/advisories/unreviewed/2023/03/GHSA-8c4g-m89h-8jvw/GHSA-8c4g-m89h-8jvw.json index 963b7fd45d3..3f77179dc42 100644 --- a/advisories/unreviewed/2023/03/GHSA-8c4g-m89h-8jvw/GHSA-8c4g-m89h-8jvw.json +++ b/advisories/unreviewed/2023/03/GHSA-8c4g-m89h-8jvw/GHSA-8c4g-m89h-8jvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8cpf-884g-6cr4/GHSA-8cpf-884g-6cr4.json b/advisories/unreviewed/2023/03/GHSA-8cpf-884g-6cr4/GHSA-8cpf-884g-6cr4.json index 98978a281bb..79901dfc33e 100644 --- a/advisories/unreviewed/2023/03/GHSA-8cpf-884g-6cr4/GHSA-8cpf-884g-6cr4.json +++ b/advisories/unreviewed/2023/03/GHSA-8cpf-884g-6cr4/GHSA-8cpf-884g-6cr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8j54-jp96-7993/GHSA-8j54-jp96-7993.json b/advisories/unreviewed/2023/03/GHSA-8j54-jp96-7993/GHSA-8j54-jp96-7993.json index 7cae6aaa84b..75f2c946c5d 100644 --- a/advisories/unreviewed/2023/03/GHSA-8j54-jp96-7993/GHSA-8j54-jp96-7993.json +++ b/advisories/unreviewed/2023/03/GHSA-8j54-jp96-7993/GHSA-8j54-jp96-7993.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8r24-rcxw-w7wx/GHSA-8r24-rcxw-w7wx.json b/advisories/unreviewed/2023/03/GHSA-8r24-rcxw-w7wx/GHSA-8r24-rcxw-w7wx.json index 2b93412e77a..532e1598d1f 100644 --- a/advisories/unreviewed/2023/03/GHSA-8r24-rcxw-w7wx/GHSA-8r24-rcxw-w7wx.json +++ b/advisories/unreviewed/2023/03/GHSA-8r24-rcxw-w7wx/GHSA-8r24-rcxw-w7wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8v3x-hqhc-3hqw/GHSA-8v3x-hqhc-3hqw.json b/advisories/unreviewed/2023/03/GHSA-8v3x-hqhc-3hqw/GHSA-8v3x-hqhc-3hqw.json index d24139b72c1..da70cc20eaa 100644 --- a/advisories/unreviewed/2023/03/GHSA-8v3x-hqhc-3hqw/GHSA-8v3x-hqhc-3hqw.json +++ b/advisories/unreviewed/2023/03/GHSA-8v3x-hqhc-3hqw/GHSA-8v3x-hqhc-3hqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-8vm8-c6hh-42j7/GHSA-8vm8-c6hh-42j7.json b/advisories/unreviewed/2023/03/GHSA-8vm8-c6hh-42j7/GHSA-8vm8-c6hh-42j7.json index 4fb836f30dd..9d7f82a7ed8 100644 --- a/advisories/unreviewed/2023/03/GHSA-8vm8-c6hh-42j7/GHSA-8vm8-c6hh-42j7.json +++ b/advisories/unreviewed/2023/03/GHSA-8vm8-c6hh-42j7/GHSA-8vm8-c6hh-42j7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-92xq-c68w-f8wx/GHSA-92xq-c68w-f8wx.json b/advisories/unreviewed/2023/03/GHSA-92xq-c68w-f8wx/GHSA-92xq-c68w-f8wx.json index 73b84c2916a..e34ee27d8f1 100644 --- a/advisories/unreviewed/2023/03/GHSA-92xq-c68w-f8wx/GHSA-92xq-c68w-f8wx.json +++ b/advisories/unreviewed/2023/03/GHSA-92xq-c68w-f8wx/GHSA-92xq-c68w-f8wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-9m72-gvff-h492/GHSA-9m72-gvff-h492.json b/advisories/unreviewed/2023/03/GHSA-9m72-gvff-h492/GHSA-9m72-gvff-h492.json index d7af3f293e9..8984a5edb0a 100644 --- a/advisories/unreviewed/2023/03/GHSA-9m72-gvff-h492/GHSA-9m72-gvff-h492.json +++ b/advisories/unreviewed/2023/03/GHSA-9m72-gvff-h492/GHSA-9m72-gvff-h492.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-9q3q-62hm-f2qh/GHSA-9q3q-62hm-f2qh.json b/advisories/unreviewed/2023/03/GHSA-9q3q-62hm-f2qh/GHSA-9q3q-62hm-f2qh.json index a8f863a9725..f5b18c1d7ed 100644 --- a/advisories/unreviewed/2023/03/GHSA-9q3q-62hm-f2qh/GHSA-9q3q-62hm-f2qh.json +++ b/advisories/unreviewed/2023/03/GHSA-9q3q-62hm-f2qh/GHSA-9q3q-62hm-f2qh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-9vpj-vwf5-wvcg/GHSA-9vpj-vwf5-wvcg.json b/advisories/unreviewed/2023/03/GHSA-9vpj-vwf5-wvcg/GHSA-9vpj-vwf5-wvcg.json index 14aaea4bdef..09b0c88d9d9 100644 --- a/advisories/unreviewed/2023/03/GHSA-9vpj-vwf5-wvcg/GHSA-9vpj-vwf5-wvcg.json +++ b/advisories/unreviewed/2023/03/GHSA-9vpj-vwf5-wvcg/GHSA-9vpj-vwf5-wvcg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-c3px-mgg3-7j37/GHSA-c3px-mgg3-7j37.json b/advisories/unreviewed/2023/03/GHSA-c3px-mgg3-7j37/GHSA-c3px-mgg3-7j37.json index 2f6d7b6ee9b..f599f2ce090 100644 --- a/advisories/unreviewed/2023/03/GHSA-c3px-mgg3-7j37/GHSA-c3px-mgg3-7j37.json +++ b/advisories/unreviewed/2023/03/GHSA-c3px-mgg3-7j37/GHSA-c3px-mgg3-7j37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-c7j2-766v-p4pp/GHSA-c7j2-766v-p4pp.json b/advisories/unreviewed/2023/03/GHSA-c7j2-766v-p4pp/GHSA-c7j2-766v-p4pp.json index 54a35a0d114..cd3366eab68 100644 --- a/advisories/unreviewed/2023/03/GHSA-c7j2-766v-p4pp/GHSA-c7j2-766v-p4pp.json +++ b/advisories/unreviewed/2023/03/GHSA-c7j2-766v-p4pp/GHSA-c7j2-766v-p4pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-c7j9-x83v-h3qp/GHSA-c7j9-x83v-h3qp.json b/advisories/unreviewed/2023/03/GHSA-c7j9-x83v-h3qp/GHSA-c7j9-x83v-h3qp.json index 9b243e31564..059f58e14c0 100644 --- a/advisories/unreviewed/2023/03/GHSA-c7j9-x83v-h3qp/GHSA-c7j9-x83v-h3qp.json +++ b/advisories/unreviewed/2023/03/GHSA-c7j9-x83v-h3qp/GHSA-c7j9-x83v-h3qp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-cc55-g3cv-hx93/GHSA-cc55-g3cv-hx93.json b/advisories/unreviewed/2023/03/GHSA-cc55-g3cv-hx93/GHSA-cc55-g3cv-hx93.json index 85a80dfdc27..f1cf71db926 100644 --- a/advisories/unreviewed/2023/03/GHSA-cc55-g3cv-hx93/GHSA-cc55-g3cv-hx93.json +++ b/advisories/unreviewed/2023/03/GHSA-cc55-g3cv-hx93/GHSA-cc55-g3cv-hx93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-f44q-mpr6-mggp/GHSA-f44q-mpr6-mggp.json b/advisories/unreviewed/2023/03/GHSA-f44q-mpr6-mggp/GHSA-f44q-mpr6-mggp.json index 7a28516193f..1d456ea65b6 100644 --- a/advisories/unreviewed/2023/03/GHSA-f44q-mpr6-mggp/GHSA-f44q-mpr6-mggp.json +++ b/advisories/unreviewed/2023/03/GHSA-f44q-mpr6-mggp/GHSA-f44q-mpr6-mggp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-fqgc-xggw-mh6h/GHSA-fqgc-xggw-mh6h.json b/advisories/unreviewed/2023/03/GHSA-fqgc-xggw-mh6h/GHSA-fqgc-xggw-mh6h.json index 141006c21dd..219e6a230b6 100644 --- a/advisories/unreviewed/2023/03/GHSA-fqgc-xggw-mh6h/GHSA-fqgc-xggw-mh6h.json +++ b/advisories/unreviewed/2023/03/GHSA-fqgc-xggw-mh6h/GHSA-fqgc-xggw-mh6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-fwvf-42p7-96jh/GHSA-fwvf-42p7-96jh.json b/advisories/unreviewed/2023/03/GHSA-fwvf-42p7-96jh/GHSA-fwvf-42p7-96jh.json index b37482ac8fb..e34139ae21d 100644 --- a/advisories/unreviewed/2023/03/GHSA-fwvf-42p7-96jh/GHSA-fwvf-42p7-96jh.json +++ b/advisories/unreviewed/2023/03/GHSA-fwvf-42p7-96jh/GHSA-fwvf-42p7-96jh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-gf22-w2wm-v44w/GHSA-gf22-w2wm-v44w.json b/advisories/unreviewed/2023/03/GHSA-gf22-w2wm-v44w/GHSA-gf22-w2wm-v44w.json index 58ef283abb5..5b0023f7354 100644 --- a/advisories/unreviewed/2023/03/GHSA-gf22-w2wm-v44w/GHSA-gf22-w2wm-v44w.json +++ b/advisories/unreviewed/2023/03/GHSA-gf22-w2wm-v44w/GHSA-gf22-w2wm-v44w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-gh6q-64q5-63q7/GHSA-gh6q-64q5-63q7.json b/advisories/unreviewed/2023/03/GHSA-gh6q-64q5-63q7/GHSA-gh6q-64q5-63q7.json index 8b0093b200c..eb8b797a0b3 100644 --- a/advisories/unreviewed/2023/03/GHSA-gh6q-64q5-63q7/GHSA-gh6q-64q5-63q7.json +++ b/advisories/unreviewed/2023/03/GHSA-gh6q-64q5-63q7/GHSA-gh6q-64q5-63q7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-gmpx-46vh-q9fp/GHSA-gmpx-46vh-q9fp.json b/advisories/unreviewed/2023/03/GHSA-gmpx-46vh-q9fp/GHSA-gmpx-46vh-q9fp.json index 4af8923814b..edad1f3bb3a 100644 --- a/advisories/unreviewed/2023/03/GHSA-gmpx-46vh-q9fp/GHSA-gmpx-46vh-q9fp.json +++ b/advisories/unreviewed/2023/03/GHSA-gmpx-46vh-q9fp/GHSA-gmpx-46vh-q9fp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-gvxv-225p-8442/GHSA-gvxv-225p-8442.json b/advisories/unreviewed/2023/03/GHSA-gvxv-225p-8442/GHSA-gvxv-225p-8442.json index d2e01e3b9e6..191d4faeea4 100644 --- a/advisories/unreviewed/2023/03/GHSA-gvxv-225p-8442/GHSA-gvxv-225p-8442.json +++ b/advisories/unreviewed/2023/03/GHSA-gvxv-225p-8442/GHSA-gvxv-225p-8442.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-h78g-xfxf-q2rf/GHSA-h78g-xfxf-q2rf.json b/advisories/unreviewed/2023/03/GHSA-h78g-xfxf-q2rf/GHSA-h78g-xfxf-q2rf.json index cd96cc414ff..17b661fe7e9 100644 --- a/advisories/unreviewed/2023/03/GHSA-h78g-xfxf-q2rf/GHSA-h78g-xfxf-q2rf.json +++ b/advisories/unreviewed/2023/03/GHSA-h78g-xfxf-q2rf/GHSA-h78g-xfxf-q2rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-h7jv-g726-r5x4/GHSA-h7jv-g726-r5x4.json b/advisories/unreviewed/2023/03/GHSA-h7jv-g726-r5x4/GHSA-h7jv-g726-r5x4.json index 0353df6b2b1..25eeabe24fe 100644 --- a/advisories/unreviewed/2023/03/GHSA-h7jv-g726-r5x4/GHSA-h7jv-g726-r5x4.json +++ b/advisories/unreviewed/2023/03/GHSA-h7jv-g726-r5x4/GHSA-h7jv-g726-r5x4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-hjvp-3h96-35mg/GHSA-hjvp-3h96-35mg.json b/advisories/unreviewed/2023/03/GHSA-hjvp-3h96-35mg/GHSA-hjvp-3h96-35mg.json index 21b77620e0e..35e81ecb51d 100644 --- a/advisories/unreviewed/2023/03/GHSA-hjvp-3h96-35mg/GHSA-hjvp-3h96-35mg.json +++ b/advisories/unreviewed/2023/03/GHSA-hjvp-3h96-35mg/GHSA-hjvp-3h96-35mg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-j3hg-g3v8-gq4p/GHSA-j3hg-g3v8-gq4p.json b/advisories/unreviewed/2023/03/GHSA-j3hg-g3v8-gq4p/GHSA-j3hg-g3v8-gq4p.json index 627c64d6ef1..7dfbcdc85f8 100644 --- a/advisories/unreviewed/2023/03/GHSA-j3hg-g3v8-gq4p/GHSA-j3hg-g3v8-gq4p.json +++ b/advisories/unreviewed/2023/03/GHSA-j3hg-g3v8-gq4p/GHSA-j3hg-g3v8-gq4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-jq6w-j2rm-c2qq/GHSA-jq6w-j2rm-c2qq.json b/advisories/unreviewed/2023/03/GHSA-jq6w-j2rm-c2qq/GHSA-jq6w-j2rm-c2qq.json index 7b85b687465..e74773fa2ee 100644 --- a/advisories/unreviewed/2023/03/GHSA-jq6w-j2rm-c2qq/GHSA-jq6w-j2rm-c2qq.json +++ b/advisories/unreviewed/2023/03/GHSA-jq6w-j2rm-c2qq/GHSA-jq6w-j2rm-c2qq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-jwq6-h4wr-9gcc/GHSA-jwq6-h4wr-9gcc.json b/advisories/unreviewed/2023/03/GHSA-jwq6-h4wr-9gcc/GHSA-jwq6-h4wr-9gcc.json index 948797ea097..02959687e8a 100644 --- a/advisories/unreviewed/2023/03/GHSA-jwq6-h4wr-9gcc/GHSA-jwq6-h4wr-9gcc.json +++ b/advisories/unreviewed/2023/03/GHSA-jwq6-h4wr-9gcc/GHSA-jwq6-h4wr-9gcc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-mc99-r3pp-6w3q/GHSA-mc99-r3pp-6w3q.json b/advisories/unreviewed/2023/03/GHSA-mc99-r3pp-6w3q/GHSA-mc99-r3pp-6w3q.json index 5bcbbf7c581..b946ea1a0b5 100644 --- a/advisories/unreviewed/2023/03/GHSA-mc99-r3pp-6w3q/GHSA-mc99-r3pp-6w3q.json +++ b/advisories/unreviewed/2023/03/GHSA-mc99-r3pp-6w3q/GHSA-mc99-r3pp-6w3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-mq8g-hxpm-gp2h/GHSA-mq8g-hxpm-gp2h.json b/advisories/unreviewed/2023/03/GHSA-mq8g-hxpm-gp2h/GHSA-mq8g-hxpm-gp2h.json index 5a2b94056ef..5a6d2a7f5d5 100644 --- a/advisories/unreviewed/2023/03/GHSA-mq8g-hxpm-gp2h/GHSA-mq8g-hxpm-gp2h.json +++ b/advisories/unreviewed/2023/03/GHSA-mq8g-hxpm-gp2h/GHSA-mq8g-hxpm-gp2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-mwfw-j98c-gjhg/GHSA-mwfw-j98c-gjhg.json b/advisories/unreviewed/2023/03/GHSA-mwfw-j98c-gjhg/GHSA-mwfw-j98c-gjhg.json index 53d4beffaa7..dafa0de8fdd 100644 --- a/advisories/unreviewed/2023/03/GHSA-mwfw-j98c-gjhg/GHSA-mwfw-j98c-gjhg.json +++ b/advisories/unreviewed/2023/03/GHSA-mwfw-j98c-gjhg/GHSA-mwfw-j98c-gjhg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-pgq7-29r8-3w67/GHSA-pgq7-29r8-3w67.json b/advisories/unreviewed/2023/03/GHSA-pgq7-29r8-3w67/GHSA-pgq7-29r8-3w67.json index 640ea82f375..562c9cb3883 100644 --- a/advisories/unreviewed/2023/03/GHSA-pgq7-29r8-3w67/GHSA-pgq7-29r8-3w67.json +++ b/advisories/unreviewed/2023/03/GHSA-pgq7-29r8-3w67/GHSA-pgq7-29r8-3w67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-pq46-vx2x-6fxf/GHSA-pq46-vx2x-6fxf.json b/advisories/unreviewed/2023/03/GHSA-pq46-vx2x-6fxf/GHSA-pq46-vx2x-6fxf.json index fee04e88674..6ca20e91206 100644 --- a/advisories/unreviewed/2023/03/GHSA-pq46-vx2x-6fxf/GHSA-pq46-vx2x-6fxf.json +++ b/advisories/unreviewed/2023/03/GHSA-pq46-vx2x-6fxf/GHSA-pq46-vx2x-6fxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-pq98-32f4-p86q/GHSA-pq98-32f4-p86q.json b/advisories/unreviewed/2023/03/GHSA-pq98-32f4-p86q/GHSA-pq98-32f4-p86q.json index b7a42287efc..18b9b6c4ac7 100644 --- a/advisories/unreviewed/2023/03/GHSA-pq98-32f4-p86q/GHSA-pq98-32f4-p86q.json +++ b/advisories/unreviewed/2023/03/GHSA-pq98-32f4-p86q/GHSA-pq98-32f4-p86q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-pxhh-wmfv-cgqj/GHSA-pxhh-wmfv-cgqj.json b/advisories/unreviewed/2023/03/GHSA-pxhh-wmfv-cgqj/GHSA-pxhh-wmfv-cgqj.json index 579ba498bf2..4c64609fb20 100644 --- a/advisories/unreviewed/2023/03/GHSA-pxhh-wmfv-cgqj/GHSA-pxhh-wmfv-cgqj.json +++ b/advisories/unreviewed/2023/03/GHSA-pxhh-wmfv-cgqj/GHSA-pxhh-wmfv-cgqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-q9wm-wgm2-w8g5/GHSA-q9wm-wgm2-w8g5.json b/advisories/unreviewed/2023/03/GHSA-q9wm-wgm2-w8g5/GHSA-q9wm-wgm2-w8g5.json index 62405e7bb8b..b948dce1613 100644 --- a/advisories/unreviewed/2023/03/GHSA-q9wm-wgm2-w8g5/GHSA-q9wm-wgm2-w8g5.json +++ b/advisories/unreviewed/2023/03/GHSA-q9wm-wgm2-w8g5/GHSA-q9wm-wgm2-w8g5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-qmcj-8g67-9633/GHSA-qmcj-8g67-9633.json b/advisories/unreviewed/2023/03/GHSA-qmcj-8g67-9633/GHSA-qmcj-8g67-9633.json index 697268f80ca..82bc6513b1c 100644 --- a/advisories/unreviewed/2023/03/GHSA-qmcj-8g67-9633/GHSA-qmcj-8g67-9633.json +++ b/advisories/unreviewed/2023/03/GHSA-qmcj-8g67-9633/GHSA-qmcj-8g67-9633.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-qw54-5h45-rmfr/GHSA-qw54-5h45-rmfr.json b/advisories/unreviewed/2023/03/GHSA-qw54-5h45-rmfr/GHSA-qw54-5h45-rmfr.json index a4e9f774895..9de011e9f87 100644 --- a/advisories/unreviewed/2023/03/GHSA-qw54-5h45-rmfr/GHSA-qw54-5h45-rmfr.json +++ b/advisories/unreviewed/2023/03/GHSA-qw54-5h45-rmfr/GHSA-qw54-5h45-rmfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-qxr3-x5gm-68pw/GHSA-qxr3-x5gm-68pw.json b/advisories/unreviewed/2023/03/GHSA-qxr3-x5gm-68pw/GHSA-qxr3-x5gm-68pw.json index a860e67ed4e..f0e58f897d5 100644 --- a/advisories/unreviewed/2023/03/GHSA-qxr3-x5gm-68pw/GHSA-qxr3-x5gm-68pw.json +++ b/advisories/unreviewed/2023/03/GHSA-qxr3-x5gm-68pw/GHSA-qxr3-x5gm-68pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-r5cq-cr9f-hpmh/GHSA-r5cq-cr9f-hpmh.json b/advisories/unreviewed/2023/03/GHSA-r5cq-cr9f-hpmh/GHSA-r5cq-cr9f-hpmh.json index 37ecc4b41e8..dbd145b5991 100644 --- a/advisories/unreviewed/2023/03/GHSA-r5cq-cr9f-hpmh/GHSA-r5cq-cr9f-hpmh.json +++ b/advisories/unreviewed/2023/03/GHSA-r5cq-cr9f-hpmh/GHSA-r5cq-cr9f-hpmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-rpgw-5pxp-r3mm/GHSA-rpgw-5pxp-r3mm.json b/advisories/unreviewed/2023/03/GHSA-rpgw-5pxp-r3mm/GHSA-rpgw-5pxp-r3mm.json index dcc8b92d260..5742b094e5e 100644 --- a/advisories/unreviewed/2023/03/GHSA-rpgw-5pxp-r3mm/GHSA-rpgw-5pxp-r3mm.json +++ b/advisories/unreviewed/2023/03/GHSA-rpgw-5pxp-r3mm/GHSA-rpgw-5pxp-r3mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-rqrp-jf3c-7j6j/GHSA-rqrp-jf3c-7j6j.json b/advisories/unreviewed/2023/03/GHSA-rqrp-jf3c-7j6j/GHSA-rqrp-jf3c-7j6j.json index e14e9ddb5d2..0879a8dcb14 100644 --- a/advisories/unreviewed/2023/03/GHSA-rqrp-jf3c-7j6j/GHSA-rqrp-jf3c-7j6j.json +++ b/advisories/unreviewed/2023/03/GHSA-rqrp-jf3c-7j6j/GHSA-rqrp-jf3c-7j6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-v4rx-wf4j-mpqv/GHSA-v4rx-wf4j-mpqv.json b/advisories/unreviewed/2023/03/GHSA-v4rx-wf4j-mpqv/GHSA-v4rx-wf4j-mpqv.json index c600ce9283a..2da5c5007ab 100644 --- a/advisories/unreviewed/2023/03/GHSA-v4rx-wf4j-mpqv/GHSA-v4rx-wf4j-mpqv.json +++ b/advisories/unreviewed/2023/03/GHSA-v4rx-wf4j-mpqv/GHSA-v4rx-wf4j-mpqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-v958-rf72-rpxh/GHSA-v958-rf72-rpxh.json b/advisories/unreviewed/2023/03/GHSA-v958-rf72-rpxh/GHSA-v958-rf72-rpxh.json index 617e975128c..27d849d329a 100644 --- a/advisories/unreviewed/2023/03/GHSA-v958-rf72-rpxh/GHSA-v958-rf72-rpxh.json +++ b/advisories/unreviewed/2023/03/GHSA-v958-rf72-rpxh/GHSA-v958-rf72-rpxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-vcxh-hfrr-5f7f/GHSA-vcxh-hfrr-5f7f.json b/advisories/unreviewed/2023/03/GHSA-vcxh-hfrr-5f7f/GHSA-vcxh-hfrr-5f7f.json index 6a0180ff103..35809456e8c 100644 --- a/advisories/unreviewed/2023/03/GHSA-vcxh-hfrr-5f7f/GHSA-vcxh-hfrr-5f7f.json +++ b/advisories/unreviewed/2023/03/GHSA-vcxh-hfrr-5f7f/GHSA-vcxh-hfrr-5f7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-vqph-c92x-4vh5/GHSA-vqph-c92x-4vh5.json b/advisories/unreviewed/2023/03/GHSA-vqph-c92x-4vh5/GHSA-vqph-c92x-4vh5.json index 3d207d2a00c..308db582548 100644 --- a/advisories/unreviewed/2023/03/GHSA-vqph-c92x-4vh5/GHSA-vqph-c92x-4vh5.json +++ b/advisories/unreviewed/2023/03/GHSA-vqph-c92x-4vh5/GHSA-vqph-c92x-4vh5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-vrv9-62rj-7748/GHSA-vrv9-62rj-7748.json b/advisories/unreviewed/2023/03/GHSA-vrv9-62rj-7748/GHSA-vrv9-62rj-7748.json index 4ee2a897559..6a02b834029 100644 --- a/advisories/unreviewed/2023/03/GHSA-vrv9-62rj-7748/GHSA-vrv9-62rj-7748.json +++ b/advisories/unreviewed/2023/03/GHSA-vrv9-62rj-7748/GHSA-vrv9-62rj-7748.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-vv4w-4mwj-jh73/GHSA-vv4w-4mwj-jh73.json b/advisories/unreviewed/2023/03/GHSA-vv4w-4mwj-jh73/GHSA-vv4w-4mwj-jh73.json index 9a3e3b6df74..fe36814ab3c 100644 --- a/advisories/unreviewed/2023/03/GHSA-vv4w-4mwj-jh73/GHSA-vv4w-4mwj-jh73.json +++ b/advisories/unreviewed/2023/03/GHSA-vv4w-4mwj-jh73/GHSA-vv4w-4mwj-jh73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-vw58-48c5-wrpp/GHSA-vw58-48c5-wrpp.json b/advisories/unreviewed/2023/03/GHSA-vw58-48c5-wrpp/GHSA-vw58-48c5-wrpp.json index 5de61ee1aaf..94ae369616f 100644 --- a/advisories/unreviewed/2023/03/GHSA-vw58-48c5-wrpp/GHSA-vw58-48c5-wrpp.json +++ b/advisories/unreviewed/2023/03/GHSA-vw58-48c5-wrpp/GHSA-vw58-48c5-wrpp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-w3w2-396g-wrc6/GHSA-w3w2-396g-wrc6.json b/advisories/unreviewed/2023/03/GHSA-w3w2-396g-wrc6/GHSA-w3w2-396g-wrc6.json index 5789e5a0fbf..3fd2b102910 100644 --- a/advisories/unreviewed/2023/03/GHSA-w3w2-396g-wrc6/GHSA-w3w2-396g-wrc6.json +++ b/advisories/unreviewed/2023/03/GHSA-w3w2-396g-wrc6/GHSA-w3w2-396g-wrc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-wr4f-qp59-pwr3/GHSA-wr4f-qp59-pwr3.json b/advisories/unreviewed/2023/03/GHSA-wr4f-qp59-pwr3/GHSA-wr4f-qp59-pwr3.json index 13043662105..8aabd656feb 100644 --- a/advisories/unreviewed/2023/03/GHSA-wr4f-qp59-pwr3/GHSA-wr4f-qp59-pwr3.json +++ b/advisories/unreviewed/2023/03/GHSA-wr4f-qp59-pwr3/GHSA-wr4f-qp59-pwr3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xfx9-7343-fmvv/GHSA-xfx9-7343-fmvv.json b/advisories/unreviewed/2023/03/GHSA-xfx9-7343-fmvv/GHSA-xfx9-7343-fmvv.json index 6e5cf5cf5a1..20c994b3a3d 100644 --- a/advisories/unreviewed/2023/03/GHSA-xfx9-7343-fmvv/GHSA-xfx9-7343-fmvv.json +++ b/advisories/unreviewed/2023/03/GHSA-xfx9-7343-fmvv/GHSA-xfx9-7343-fmvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xg6w-8fxx-mqf6/GHSA-xg6w-8fxx-mqf6.json b/advisories/unreviewed/2023/03/GHSA-xg6w-8fxx-mqf6/GHSA-xg6w-8fxx-mqf6.json index 56c84d6a1d4..710b601ba46 100644 --- a/advisories/unreviewed/2023/03/GHSA-xg6w-8fxx-mqf6/GHSA-xg6w-8fxx-mqf6.json +++ b/advisories/unreviewed/2023/03/GHSA-xg6w-8fxx-mqf6/GHSA-xg6w-8fxx-mqf6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xh44-7m8v-gqg4/GHSA-xh44-7m8v-gqg4.json b/advisories/unreviewed/2023/03/GHSA-xh44-7m8v-gqg4/GHSA-xh44-7m8v-gqg4.json index 54815958b30..d561e2273c6 100644 --- a/advisories/unreviewed/2023/03/GHSA-xh44-7m8v-gqg4/GHSA-xh44-7m8v-gqg4.json +++ b/advisories/unreviewed/2023/03/GHSA-xh44-7m8v-gqg4/GHSA-xh44-7m8v-gqg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xj23-999w-7m54/GHSA-xj23-999w-7m54.json b/advisories/unreviewed/2023/03/GHSA-xj23-999w-7m54/GHSA-xj23-999w-7m54.json index 59ee7152c9d..c4eece28511 100644 --- a/advisories/unreviewed/2023/03/GHSA-xj23-999w-7m54/GHSA-xj23-999w-7m54.json +++ b/advisories/unreviewed/2023/03/GHSA-xj23-999w-7m54/GHSA-xj23-999w-7m54.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xw5c-xwc7-95gf/GHSA-xw5c-xwc7-95gf.json b/advisories/unreviewed/2023/03/GHSA-xw5c-xwc7-95gf/GHSA-xw5c-xwc7-95gf.json index 236478c9e0a..e227b80e8f3 100644 --- a/advisories/unreviewed/2023/03/GHSA-xw5c-xwc7-95gf/GHSA-xw5c-xwc7-95gf.json +++ b/advisories/unreviewed/2023/03/GHSA-xw5c-xwc7-95gf/GHSA-xw5c-xwc7-95gf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-6qw9-cqm2-283v/GHSA-6qw9-cqm2-283v.json b/advisories/unreviewed/2023/04/GHSA-6qw9-cqm2-283v/GHSA-6qw9-cqm2-283v.json index c1196368cd2..aa298cd3bd1 100644 --- a/advisories/unreviewed/2023/04/GHSA-6qw9-cqm2-283v/GHSA-6qw9-cqm2-283v.json +++ b/advisories/unreviewed/2023/04/GHSA-6qw9-cqm2-283v/GHSA-6qw9-cqm2-283v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-7jrm-37ff-g3mp/GHSA-7jrm-37ff-g3mp.json b/advisories/unreviewed/2023/04/GHSA-7jrm-37ff-g3mp/GHSA-7jrm-37ff-g3mp.json index bd2191ee752..fe26b88641d 100644 --- a/advisories/unreviewed/2023/04/GHSA-7jrm-37ff-g3mp/GHSA-7jrm-37ff-g3mp.json +++ b/advisories/unreviewed/2023/04/GHSA-7jrm-37ff-g3mp/GHSA-7jrm-37ff-g3mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-8prw-4fc3-cjf2/GHSA-8prw-4fc3-cjf2.json b/advisories/unreviewed/2023/04/GHSA-8prw-4fc3-cjf2/GHSA-8prw-4fc3-cjf2.json index 68314e864fe..03ff0354693 100644 --- a/advisories/unreviewed/2023/04/GHSA-8prw-4fc3-cjf2/GHSA-8prw-4fc3-cjf2.json +++ b/advisories/unreviewed/2023/04/GHSA-8prw-4fc3-cjf2/GHSA-8prw-4fc3-cjf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-hxpr-67mw-jh59/GHSA-hxpr-67mw-jh59.json b/advisories/unreviewed/2023/04/GHSA-hxpr-67mw-jh59/GHSA-hxpr-67mw-jh59.json index c6d7520c50a..21235a8b196 100644 --- a/advisories/unreviewed/2023/04/GHSA-hxpr-67mw-jh59/GHSA-hxpr-67mw-jh59.json +++ b/advisories/unreviewed/2023/04/GHSA-hxpr-67mw-jh59/GHSA-hxpr-67mw-jh59.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/05/GHSA-98rg-4fmq-frpj/GHSA-98rg-4fmq-frpj.json b/advisories/unreviewed/2023/05/GHSA-98rg-4fmq-frpj/GHSA-98rg-4fmq-frpj.json index 1a0dec50bd3..750f85b65ce 100644 --- a/advisories/unreviewed/2023/05/GHSA-98rg-4fmq-frpj/GHSA-98rg-4fmq-frpj.json +++ b/advisories/unreviewed/2023/05/GHSA-98rg-4fmq-frpj/GHSA-98rg-4fmq-frpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/05/GHSA-c57m-8jqr-v2wc/GHSA-c57m-8jqr-v2wc.json b/advisories/unreviewed/2023/05/GHSA-c57m-8jqr-v2wc/GHSA-c57m-8jqr-v2wc.json index 1af5d530d52..7277206f4ac 100644 --- a/advisories/unreviewed/2023/05/GHSA-c57m-8jqr-v2wc/GHSA-c57m-8jqr-v2wc.json +++ b/advisories/unreviewed/2023/05/GHSA-c57m-8jqr-v2wc/GHSA-c57m-8jqr-v2wc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json index 08fbd180258..0889f44de7b 100644 --- a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json +++ b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/06/GHSA-j46h-rhfq-fcxj/GHSA-j46h-rhfq-fcxj.json b/advisories/unreviewed/2023/06/GHSA-j46h-rhfq-fcxj/GHSA-j46h-rhfq-fcxj.json index 1c68fab8c9d..3478707f1fb 100644 --- a/advisories/unreviewed/2023/06/GHSA-j46h-rhfq-fcxj/GHSA-j46h-rhfq-fcxj.json +++ b/advisories/unreviewed/2023/06/GHSA-j46h-rhfq-fcxj/GHSA-j46h-rhfq-fcxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-xr4v-w2h4-8wmq/GHSA-xr4v-w2h4-8wmq.json b/advisories/unreviewed/2023/08/GHSA-xr4v-w2h4-8wmq/GHSA-xr4v-w2h4-8wmq.json index fb155e615cf..94f69a8a234 100644 --- a/advisories/unreviewed/2023/08/GHSA-xr4v-w2h4-8wmq/GHSA-xr4v-w2h4-8wmq.json +++ b/advisories/unreviewed/2023/08/GHSA-xr4v-w2h4-8wmq/GHSA-xr4v-w2h4-8wmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-3f2j-57ff-r6p5/GHSA-3f2j-57ff-r6p5.json b/advisories/unreviewed/2023/09/GHSA-3f2j-57ff-r6p5/GHSA-3f2j-57ff-r6p5.json index f13041dabbe..4199f545c4d 100644 --- a/advisories/unreviewed/2023/09/GHSA-3f2j-57ff-r6p5/GHSA-3f2j-57ff-r6p5.json +++ b/advisories/unreviewed/2023/09/GHSA-3f2j-57ff-r6p5/GHSA-3f2j-57ff-r6p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/09/GHSA-86c6-5vcx-3893/GHSA-86c6-5vcx-3893.json b/advisories/unreviewed/2023/09/GHSA-86c6-5vcx-3893/GHSA-86c6-5vcx-3893.json index a8b3f22cb8a..6d9f08848a4 100644 --- a/advisories/unreviewed/2023/09/GHSA-86c6-5vcx-3893/GHSA-86c6-5vcx-3893.json +++ b/advisories/unreviewed/2023/09/GHSA-86c6-5vcx-3893/GHSA-86c6-5vcx-3893.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-cpvg-3p8x-hcjm/GHSA-cpvg-3p8x-hcjm.json b/advisories/unreviewed/2023/09/GHSA-cpvg-3p8x-hcjm/GHSA-cpvg-3p8x-hcjm.json index 76bca0290d3..34b7550c190 100644 --- a/advisories/unreviewed/2023/09/GHSA-cpvg-3p8x-hcjm/GHSA-cpvg-3p8x-hcjm.json +++ b/advisories/unreviewed/2023/09/GHSA-cpvg-3p8x-hcjm/GHSA-cpvg-3p8x-hcjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-hhrh-69hc-fgg7/GHSA-hhrh-69hc-fgg7.json b/advisories/unreviewed/2023/09/GHSA-hhrh-69hc-fgg7/GHSA-hhrh-69hc-fgg7.json index fd4be211a09..a9268494523 100644 --- a/advisories/unreviewed/2023/09/GHSA-hhrh-69hc-fgg7/GHSA-hhrh-69hc-fgg7.json +++ b/advisories/unreviewed/2023/09/GHSA-hhrh-69hc-fgg7/GHSA-hhrh-69hc-fgg7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-4hwj-mwvm-vc26/GHSA-4hwj-mwvm-vc26.json b/advisories/unreviewed/2023/10/GHSA-4hwj-mwvm-vc26/GHSA-4hwj-mwvm-vc26.json index 33ef06d5b21..09d2ef00ad8 100644 --- a/advisories/unreviewed/2023/10/GHSA-4hwj-mwvm-vc26/GHSA-4hwj-mwvm-vc26.json +++ b/advisories/unreviewed/2023/10/GHSA-4hwj-mwvm-vc26/GHSA-4hwj-mwvm-vc26.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-vf42-37cv-443p/GHSA-vf42-37cv-443p.json b/advisories/unreviewed/2023/10/GHSA-vf42-37cv-443p/GHSA-vf42-37cv-443p.json index 0d3399caf4c..17a8e4d9666 100644 --- a/advisories/unreviewed/2023/10/GHSA-vf42-37cv-443p/GHSA-vf42-37cv-443p.json +++ b/advisories/unreviewed/2023/10/GHSA-vf42-37cv-443p/GHSA-vf42-37cv-443p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-2x7x-86wq-p8fq/GHSA-2x7x-86wq-p8fq.json b/advisories/unreviewed/2023/11/GHSA-2x7x-86wq-p8fq/GHSA-2x7x-86wq-p8fq.json index 25799a3944e..9ec46d96cc6 100644 --- a/advisories/unreviewed/2023/11/GHSA-2x7x-86wq-p8fq/GHSA-2x7x-86wq-p8fq.json +++ b/advisories/unreviewed/2023/11/GHSA-2x7x-86wq-p8fq/GHSA-2x7x-86wq-p8fq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-35c4-9r57-7gqj/GHSA-35c4-9r57-7gqj.json b/advisories/unreviewed/2023/11/GHSA-35c4-9r57-7gqj/GHSA-35c4-9r57-7gqj.json index b9c8d3b8151..7203264b4f1 100644 --- a/advisories/unreviewed/2023/11/GHSA-35c4-9r57-7gqj/GHSA-35c4-9r57-7gqj.json +++ b/advisories/unreviewed/2023/11/GHSA-35c4-9r57-7gqj/GHSA-35c4-9r57-7gqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-39xr-x89f-x723/GHSA-39xr-x89f-x723.json b/advisories/unreviewed/2023/11/GHSA-39xr-x89f-x723/GHSA-39xr-x89f-x723.json index 3832909ef05..78954b3eb93 100644 --- a/advisories/unreviewed/2023/11/GHSA-39xr-x89f-x723/GHSA-39xr-x89f-x723.json +++ b/advisories/unreviewed/2023/11/GHSA-39xr-x89f-x723/GHSA-39xr-x89f-x723.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-3wg4-x8pv-x63w/GHSA-3wg4-x8pv-x63w.json b/advisories/unreviewed/2023/11/GHSA-3wg4-x8pv-x63w/GHSA-3wg4-x8pv-x63w.json index 746621c3a31..52e9c58a789 100644 --- a/advisories/unreviewed/2023/11/GHSA-3wg4-x8pv-x63w/GHSA-3wg4-x8pv-x63w.json +++ b/advisories/unreviewed/2023/11/GHSA-3wg4-x8pv-x63w/GHSA-3wg4-x8pv-x63w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4gvh-59m6-2637/GHSA-4gvh-59m6-2637.json b/advisories/unreviewed/2023/11/GHSA-4gvh-59m6-2637/GHSA-4gvh-59m6-2637.json index f5d87a91c3a..0e95bdb1b11 100644 --- a/advisories/unreviewed/2023/11/GHSA-4gvh-59m6-2637/GHSA-4gvh-59m6-2637.json +++ b/advisories/unreviewed/2023/11/GHSA-4gvh-59m6-2637/GHSA-4gvh-59m6-2637.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4jjc-6xj9-r5q6/GHSA-4jjc-6xj9-r5q6.json b/advisories/unreviewed/2023/11/GHSA-4jjc-6xj9-r5q6/GHSA-4jjc-6xj9-r5q6.json index 06c4130bc40..e970ad354ee 100644 --- a/advisories/unreviewed/2023/11/GHSA-4jjc-6xj9-r5q6/GHSA-4jjc-6xj9-r5q6.json +++ b/advisories/unreviewed/2023/11/GHSA-4jjc-6xj9-r5q6/GHSA-4jjc-6xj9-r5q6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-4qmr-wpcp-38w7/GHSA-4qmr-wpcp-38w7.json b/advisories/unreviewed/2023/11/GHSA-4qmr-wpcp-38w7/GHSA-4qmr-wpcp-38w7.json index 8839293f1fd..c0360e654a5 100644 --- a/advisories/unreviewed/2023/11/GHSA-4qmr-wpcp-38w7/GHSA-4qmr-wpcp-38w7.json +++ b/advisories/unreviewed/2023/11/GHSA-4qmr-wpcp-38w7/GHSA-4qmr-wpcp-38w7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-53p5-5jfp-q577/GHSA-53p5-5jfp-q577.json b/advisories/unreviewed/2023/11/GHSA-53p5-5jfp-q577/GHSA-53p5-5jfp-q577.json index 30043db98db..10480938877 100644 --- a/advisories/unreviewed/2023/11/GHSA-53p5-5jfp-q577/GHSA-53p5-5jfp-q577.json +++ b/advisories/unreviewed/2023/11/GHSA-53p5-5jfp-q577/GHSA-53p5-5jfp-q577.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-59x7-fjc6-6prx/GHSA-59x7-fjc6-6prx.json b/advisories/unreviewed/2023/11/GHSA-59x7-fjc6-6prx/GHSA-59x7-fjc6-6prx.json index 5983d2e57d4..55f56a695ae 100644 --- a/advisories/unreviewed/2023/11/GHSA-59x7-fjc6-6prx/GHSA-59x7-fjc6-6prx.json +++ b/advisories/unreviewed/2023/11/GHSA-59x7-fjc6-6prx/GHSA-59x7-fjc6-6prx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5gr2-8w66-g9j9/GHSA-5gr2-8w66-g9j9.json b/advisories/unreviewed/2023/11/GHSA-5gr2-8w66-g9j9/GHSA-5gr2-8w66-g9j9.json index ea51ecedb77..ad7157fce15 100644 --- a/advisories/unreviewed/2023/11/GHSA-5gr2-8w66-g9j9/GHSA-5gr2-8w66-g9j9.json +++ b/advisories/unreviewed/2023/11/GHSA-5gr2-8w66-g9j9/GHSA-5gr2-8w66-g9j9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5mg9-6pvc-cw48/GHSA-5mg9-6pvc-cw48.json b/advisories/unreviewed/2023/11/GHSA-5mg9-6pvc-cw48/GHSA-5mg9-6pvc-cw48.json index ff3a8276133..3c7659c840b 100644 --- a/advisories/unreviewed/2023/11/GHSA-5mg9-6pvc-cw48/GHSA-5mg9-6pvc-cw48.json +++ b/advisories/unreviewed/2023/11/GHSA-5mg9-6pvc-cw48/GHSA-5mg9-6pvc-cw48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5wjq-vf48-v99g/GHSA-5wjq-vf48-v99g.json b/advisories/unreviewed/2023/11/GHSA-5wjq-vf48-v99g/GHSA-5wjq-vf48-v99g.json index ba273ed5507..7eed7ed07d5 100644 --- a/advisories/unreviewed/2023/11/GHSA-5wjq-vf48-v99g/GHSA-5wjq-vf48-v99g.json +++ b/advisories/unreviewed/2023/11/GHSA-5wjq-vf48-v99g/GHSA-5wjq-vf48-v99g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-66pm-7m3q-gh7c/GHSA-66pm-7m3q-gh7c.json b/advisories/unreviewed/2023/11/GHSA-66pm-7m3q-gh7c/GHSA-66pm-7m3q-gh7c.json index 1c04e831f51..7187c9f9db0 100644 --- a/advisories/unreviewed/2023/11/GHSA-66pm-7m3q-gh7c/GHSA-66pm-7m3q-gh7c.json +++ b/advisories/unreviewed/2023/11/GHSA-66pm-7m3q-gh7c/GHSA-66pm-7m3q-gh7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-674m-h5xx-v6gp/GHSA-674m-h5xx-v6gp.json b/advisories/unreviewed/2023/11/GHSA-674m-h5xx-v6gp/GHSA-674m-h5xx-v6gp.json index 75e19d6f76f..dab61842f22 100644 --- a/advisories/unreviewed/2023/11/GHSA-674m-h5xx-v6gp/GHSA-674m-h5xx-v6gp.json +++ b/advisories/unreviewed/2023/11/GHSA-674m-h5xx-v6gp/GHSA-674m-h5xx-v6gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-744h-wr4m-3wwg/GHSA-744h-wr4m-3wwg.json b/advisories/unreviewed/2023/11/GHSA-744h-wr4m-3wwg/GHSA-744h-wr4m-3wwg.json index 9b68dbe09a1..19bccaca9c9 100644 --- a/advisories/unreviewed/2023/11/GHSA-744h-wr4m-3wwg/GHSA-744h-wr4m-3wwg.json +++ b/advisories/unreviewed/2023/11/GHSA-744h-wr4m-3wwg/GHSA-744h-wr4m-3wwg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-7q8c-wgc5-qrph/GHSA-7q8c-wgc5-qrph.json b/advisories/unreviewed/2023/11/GHSA-7q8c-wgc5-qrph/GHSA-7q8c-wgc5-qrph.json index 08c608b521c..b4b441a62c3 100644 --- a/advisories/unreviewed/2023/11/GHSA-7q8c-wgc5-qrph/GHSA-7q8c-wgc5-qrph.json +++ b/advisories/unreviewed/2023/11/GHSA-7q8c-wgc5-qrph/GHSA-7q8c-wgc5-qrph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-7w4h-76j5-gqgx/GHSA-7w4h-76j5-gqgx.json b/advisories/unreviewed/2023/11/GHSA-7w4h-76j5-gqgx/GHSA-7w4h-76j5-gqgx.json index 81bfab7c9c8..51a3e29010f 100644 --- a/advisories/unreviewed/2023/11/GHSA-7w4h-76j5-gqgx/GHSA-7w4h-76j5-gqgx.json +++ b/advisories/unreviewed/2023/11/GHSA-7w4h-76j5-gqgx/GHSA-7w4h-76j5-gqgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-876j-4j97-w5j7/GHSA-876j-4j97-w5j7.json b/advisories/unreviewed/2023/11/GHSA-876j-4j97-w5j7/GHSA-876j-4j97-w5j7.json index 66ffea1b78d..81169086b46 100644 --- a/advisories/unreviewed/2023/11/GHSA-876j-4j97-w5j7/GHSA-876j-4j97-w5j7.json +++ b/advisories/unreviewed/2023/11/GHSA-876j-4j97-w5j7/GHSA-876j-4j97-w5j7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-87hw-vpm8-xxh2/GHSA-87hw-vpm8-xxh2.json b/advisories/unreviewed/2023/11/GHSA-87hw-vpm8-xxh2/GHSA-87hw-vpm8-xxh2.json index 2aa829a9309..f6aeb6d4db8 100644 --- a/advisories/unreviewed/2023/11/GHSA-87hw-vpm8-xxh2/GHSA-87hw-vpm8-xxh2.json +++ b/advisories/unreviewed/2023/11/GHSA-87hw-vpm8-xxh2/GHSA-87hw-vpm8-xxh2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-8xvx-w4v2-926g/GHSA-8xvx-w4v2-926g.json b/advisories/unreviewed/2023/11/GHSA-8xvx-w4v2-926g/GHSA-8xvx-w4v2-926g.json index 5838d05d319..f1b176d5568 100644 --- a/advisories/unreviewed/2023/11/GHSA-8xvx-w4v2-926g/GHSA-8xvx-w4v2-926g.json +++ b/advisories/unreviewed/2023/11/GHSA-8xvx-w4v2-926g/GHSA-8xvx-w4v2-926g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9c6c-9p8c-7g7v/GHSA-9c6c-9p8c-7g7v.json b/advisories/unreviewed/2023/11/GHSA-9c6c-9p8c-7g7v/GHSA-9c6c-9p8c-7g7v.json index a3c526fab12..32f898a213e 100644 --- a/advisories/unreviewed/2023/11/GHSA-9c6c-9p8c-7g7v/GHSA-9c6c-9p8c-7g7v.json +++ b/advisories/unreviewed/2023/11/GHSA-9c6c-9p8c-7g7v/GHSA-9c6c-9p8c-7g7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9cm4-3grc-hcrr/GHSA-9cm4-3grc-hcrr.json b/advisories/unreviewed/2023/11/GHSA-9cm4-3grc-hcrr/GHSA-9cm4-3grc-hcrr.json index ea8b045ea26..35c2e33b7d1 100644 --- a/advisories/unreviewed/2023/11/GHSA-9cm4-3grc-hcrr/GHSA-9cm4-3grc-hcrr.json +++ b/advisories/unreviewed/2023/11/GHSA-9cm4-3grc-hcrr/GHSA-9cm4-3grc-hcrr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9f83-5mc2-p75r/GHSA-9f83-5mc2-p75r.json b/advisories/unreviewed/2023/11/GHSA-9f83-5mc2-p75r/GHSA-9f83-5mc2-p75r.json index c757d131839..1fe7fa71de7 100644 --- a/advisories/unreviewed/2023/11/GHSA-9f83-5mc2-p75r/GHSA-9f83-5mc2-p75r.json +++ b/advisories/unreviewed/2023/11/GHSA-9f83-5mc2-p75r/GHSA-9f83-5mc2-p75r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9mcp-r979-67vc/GHSA-9mcp-r979-67vc.json b/advisories/unreviewed/2023/11/GHSA-9mcp-r979-67vc/GHSA-9mcp-r979-67vc.json index 6f5b9af4788..9da8147f170 100644 --- a/advisories/unreviewed/2023/11/GHSA-9mcp-r979-67vc/GHSA-9mcp-r979-67vc.json +++ b/advisories/unreviewed/2023/11/GHSA-9mcp-r979-67vc/GHSA-9mcp-r979-67vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-9vh9-pgv9-hw48/GHSA-9vh9-pgv9-hw48.json b/advisories/unreviewed/2023/11/GHSA-9vh9-pgv9-hw48/GHSA-9vh9-pgv9-hw48.json index 013de94f4ff..939f728f705 100644 --- a/advisories/unreviewed/2023/11/GHSA-9vh9-pgv9-hw48/GHSA-9vh9-pgv9-hw48.json +++ b/advisories/unreviewed/2023/11/GHSA-9vh9-pgv9-hw48/GHSA-9vh9-pgv9-hw48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cc94-45q3-h8pp/GHSA-cc94-45q3-h8pp.json b/advisories/unreviewed/2023/11/GHSA-cc94-45q3-h8pp/GHSA-cc94-45q3-h8pp.json index bce3d1aed54..00276f0a0c3 100644 --- a/advisories/unreviewed/2023/11/GHSA-cc94-45q3-h8pp/GHSA-cc94-45q3-h8pp.json +++ b/advisories/unreviewed/2023/11/GHSA-cc94-45q3-h8pp/GHSA-cc94-45q3-h8pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cg22-2r83-3795/GHSA-cg22-2r83-3795.json b/advisories/unreviewed/2023/11/GHSA-cg22-2r83-3795/GHSA-cg22-2r83-3795.json index e929b56c64f..9765fca915e 100644 --- a/advisories/unreviewed/2023/11/GHSA-cg22-2r83-3795/GHSA-cg22-2r83-3795.json +++ b/advisories/unreviewed/2023/11/GHSA-cg22-2r83-3795/GHSA-cg22-2r83-3795.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-cv6h-7p3x-q58x/GHSA-cv6h-7p3x-q58x.json b/advisories/unreviewed/2023/11/GHSA-cv6h-7p3x-q58x/GHSA-cv6h-7p3x-q58x.json index fd73a5f95f0..6a37a96ebc9 100644 --- a/advisories/unreviewed/2023/11/GHSA-cv6h-7p3x-q58x/GHSA-cv6h-7p3x-q58x.json +++ b/advisories/unreviewed/2023/11/GHSA-cv6h-7p3x-q58x/GHSA-cv6h-7p3x-q58x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-fh45-j2m9-4mxm/GHSA-fh45-j2m9-4mxm.json b/advisories/unreviewed/2023/11/GHSA-fh45-j2m9-4mxm/GHSA-fh45-j2m9-4mxm.json index c04ed5abeae..aeb5a0a738a 100644 --- a/advisories/unreviewed/2023/11/GHSA-fh45-j2m9-4mxm/GHSA-fh45-j2m9-4mxm.json +++ b/advisories/unreviewed/2023/11/GHSA-fh45-j2m9-4mxm/GHSA-fh45-j2m9-4mxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-fjp6-hgv6-f8gw/GHSA-fjp6-hgv6-f8gw.json b/advisories/unreviewed/2023/11/GHSA-fjp6-hgv6-f8gw/GHSA-fjp6-hgv6-f8gw.json index 100a8750a48..723737b9d8c 100644 --- a/advisories/unreviewed/2023/11/GHSA-fjp6-hgv6-f8gw/GHSA-fjp6-hgv6-f8gw.json +++ b/advisories/unreviewed/2023/11/GHSA-fjp6-hgv6-f8gw/GHSA-fjp6-hgv6-f8gw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-g487-4fjg-h9j4/GHSA-g487-4fjg-h9j4.json b/advisories/unreviewed/2023/11/GHSA-g487-4fjg-h9j4/GHSA-g487-4fjg-h9j4.json index 35b7c6ee884..abf95186f20 100644 --- a/advisories/unreviewed/2023/11/GHSA-g487-4fjg-h9j4/GHSA-g487-4fjg-h9j4.json +++ b/advisories/unreviewed/2023/11/GHSA-g487-4fjg-h9j4/GHSA-g487-4fjg-h9j4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-g63g-r6gc-cxmv/GHSA-g63g-r6gc-cxmv.json b/advisories/unreviewed/2023/11/GHSA-g63g-r6gc-cxmv/GHSA-g63g-r6gc-cxmv.json index bf9d5f4cdd6..fe8859bc128 100644 --- a/advisories/unreviewed/2023/11/GHSA-g63g-r6gc-cxmv/GHSA-g63g-r6gc-cxmv.json +++ b/advisories/unreviewed/2023/11/GHSA-g63g-r6gc-cxmv/GHSA-g63g-r6gc-cxmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-hwcm-r27w-h6mp/GHSA-hwcm-r27w-h6mp.json b/advisories/unreviewed/2023/11/GHSA-hwcm-r27w-h6mp/GHSA-hwcm-r27w-h6mp.json index 98e2ba63f9c..93f4b8b9726 100644 --- a/advisories/unreviewed/2023/11/GHSA-hwcm-r27w-h6mp/GHSA-hwcm-r27w-h6mp.json +++ b/advisories/unreviewed/2023/11/GHSA-hwcm-r27w-h6mp/GHSA-hwcm-r27w-h6mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-jhm2-45hc-7q9f/GHSA-jhm2-45hc-7q9f.json b/advisories/unreviewed/2023/11/GHSA-jhm2-45hc-7q9f/GHSA-jhm2-45hc-7q9f.json index df60fc1ef0e..c54bb226f8e 100644 --- a/advisories/unreviewed/2023/11/GHSA-jhm2-45hc-7q9f/GHSA-jhm2-45hc-7q9f.json +++ b/advisories/unreviewed/2023/11/GHSA-jhm2-45hc-7q9f/GHSA-jhm2-45hc-7q9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-jm6v-mv47-p2gv/GHSA-jm6v-mv47-p2gv.json b/advisories/unreviewed/2023/11/GHSA-jm6v-mv47-p2gv/GHSA-jm6v-mv47-p2gv.json index e56148da6d4..0b157e17355 100644 --- a/advisories/unreviewed/2023/11/GHSA-jm6v-mv47-p2gv/GHSA-jm6v-mv47-p2gv.json +++ b/advisories/unreviewed/2023/11/GHSA-jm6v-mv47-p2gv/GHSA-jm6v-mv47-p2gv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-m2fj-pxhr-mx98/GHSA-m2fj-pxhr-mx98.json b/advisories/unreviewed/2023/11/GHSA-m2fj-pxhr-mx98/GHSA-m2fj-pxhr-mx98.json index 55b34b33b81..adb611d934d 100644 --- a/advisories/unreviewed/2023/11/GHSA-m2fj-pxhr-mx98/GHSA-m2fj-pxhr-mx98.json +++ b/advisories/unreviewed/2023/11/GHSA-m2fj-pxhr-mx98/GHSA-m2fj-pxhr-mx98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-m79h-5jh7-wrw2/GHSA-m79h-5jh7-wrw2.json b/advisories/unreviewed/2023/11/GHSA-m79h-5jh7-wrw2/GHSA-m79h-5jh7-wrw2.json index dc976eddb4a..24d7ed6fb0e 100644 --- a/advisories/unreviewed/2023/11/GHSA-m79h-5jh7-wrw2/GHSA-m79h-5jh7-wrw2.json +++ b/advisories/unreviewed/2023/11/GHSA-m79h-5jh7-wrw2/GHSA-m79h-5jh7-wrw2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-m86g-4hvg-8jxc/GHSA-m86g-4hvg-8jxc.json b/advisories/unreviewed/2023/11/GHSA-m86g-4hvg-8jxc/GHSA-m86g-4hvg-8jxc.json index 59a06255572..7963278dbad 100644 --- a/advisories/unreviewed/2023/11/GHSA-m86g-4hvg-8jxc/GHSA-m86g-4hvg-8jxc.json +++ b/advisories/unreviewed/2023/11/GHSA-m86g-4hvg-8jxc/GHSA-m86g-4hvg-8jxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-mqjf-65x6-cv76/GHSA-mqjf-65x6-cv76.json b/advisories/unreviewed/2023/11/GHSA-mqjf-65x6-cv76/GHSA-mqjf-65x6-cv76.json index 1c0c65aa2f5..4675db8bedb 100644 --- a/advisories/unreviewed/2023/11/GHSA-mqjf-65x6-cv76/GHSA-mqjf-65x6-cv76.json +++ b/advisories/unreviewed/2023/11/GHSA-mqjf-65x6-cv76/GHSA-mqjf-65x6-cv76.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-ph5g-9gmc-3jwr/GHSA-ph5g-9gmc-3jwr.json b/advisories/unreviewed/2023/11/GHSA-ph5g-9gmc-3jwr/GHSA-ph5g-9gmc-3jwr.json index 0af97cc4a65..fbacb39dce4 100644 --- a/advisories/unreviewed/2023/11/GHSA-ph5g-9gmc-3jwr/GHSA-ph5g-9gmc-3jwr.json +++ b/advisories/unreviewed/2023/11/GHSA-ph5g-9gmc-3jwr/GHSA-ph5g-9gmc-3jwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-q2jc-h887-p28w/GHSA-q2jc-h887-p28w.json b/advisories/unreviewed/2023/11/GHSA-q2jc-h887-p28w/GHSA-q2jc-h887-p28w.json index 6d7744feb7f..747cd29c502 100644 --- a/advisories/unreviewed/2023/11/GHSA-q2jc-h887-p28w/GHSA-q2jc-h887-p28w.json +++ b/advisories/unreviewed/2023/11/GHSA-q2jc-h887-p28w/GHSA-q2jc-h887-p28w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-q344-5vf7-24vx/GHSA-q344-5vf7-24vx.json b/advisories/unreviewed/2023/11/GHSA-q344-5vf7-24vx/GHSA-q344-5vf7-24vx.json index e149dd3e3bd..00e91b9208c 100644 --- a/advisories/unreviewed/2023/11/GHSA-q344-5vf7-24vx/GHSA-q344-5vf7-24vx.json +++ b/advisories/unreviewed/2023/11/GHSA-q344-5vf7-24vx/GHSA-q344-5vf7-24vx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-qf65-8m3f-8xxv/GHSA-qf65-8m3f-8xxv.json b/advisories/unreviewed/2023/11/GHSA-qf65-8m3f-8xxv/GHSA-qf65-8m3f-8xxv.json index 913669829f8..d8a5734f407 100644 --- a/advisories/unreviewed/2023/11/GHSA-qf65-8m3f-8xxv/GHSA-qf65-8m3f-8xxv.json +++ b/advisories/unreviewed/2023/11/GHSA-qf65-8m3f-8xxv/GHSA-qf65-8m3f-8xxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-r4qj-chpj-4jhw/GHSA-r4qj-chpj-4jhw.json b/advisories/unreviewed/2023/11/GHSA-r4qj-chpj-4jhw/GHSA-r4qj-chpj-4jhw.json index 8d702815110..59a03a03062 100644 --- a/advisories/unreviewed/2023/11/GHSA-r4qj-chpj-4jhw/GHSA-r4qj-chpj-4jhw.json +++ b/advisories/unreviewed/2023/11/GHSA-r4qj-chpj-4jhw/GHSA-r4qj-chpj-4jhw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rr72-v372-gvjf/GHSA-rr72-v372-gvjf.json b/advisories/unreviewed/2023/11/GHSA-rr72-v372-gvjf/GHSA-rr72-v372-gvjf.json index d0928dafb9c..3684f15f4b3 100644 --- a/advisories/unreviewed/2023/11/GHSA-rr72-v372-gvjf/GHSA-rr72-v372-gvjf.json +++ b/advisories/unreviewed/2023/11/GHSA-rr72-v372-gvjf/GHSA-rr72-v372-gvjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-v5f6-rpxq-xvg8/GHSA-v5f6-rpxq-xvg8.json b/advisories/unreviewed/2023/11/GHSA-v5f6-rpxq-xvg8/GHSA-v5f6-rpxq-xvg8.json index 101987a55c9..c64b8a9bed4 100644 --- a/advisories/unreviewed/2023/11/GHSA-v5f6-rpxq-xvg8/GHSA-v5f6-rpxq-xvg8.json +++ b/advisories/unreviewed/2023/11/GHSA-v5f6-rpxq-xvg8/GHSA-v5f6-rpxq-xvg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-v73c-376g-v9qj/GHSA-v73c-376g-v9qj.json b/advisories/unreviewed/2023/11/GHSA-v73c-376g-v9qj/GHSA-v73c-376g-v9qj.json index e008ec99a90..183ddda5eb2 100644 --- a/advisories/unreviewed/2023/11/GHSA-v73c-376g-v9qj/GHSA-v73c-376g-v9qj.json +++ b/advisories/unreviewed/2023/11/GHSA-v73c-376g-v9qj/GHSA-v73c-376g-v9qj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-vfv2-6xpw-mqmp/GHSA-vfv2-6xpw-mqmp.json b/advisories/unreviewed/2023/11/GHSA-vfv2-6xpw-mqmp/GHSA-vfv2-6xpw-mqmp.json index aeaedc72ea7..530c18d63ba 100644 --- a/advisories/unreviewed/2023/11/GHSA-vfv2-6xpw-mqmp/GHSA-vfv2-6xpw-mqmp.json +++ b/advisories/unreviewed/2023/11/GHSA-vfv2-6xpw-mqmp/GHSA-vfv2-6xpw-mqmp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-vhc9-98xp-277v/GHSA-vhc9-98xp-277v.json b/advisories/unreviewed/2023/11/GHSA-vhc9-98xp-277v/GHSA-vhc9-98xp-277v.json index c7367ab0a40..c0529d52c8a 100644 --- a/advisories/unreviewed/2023/11/GHSA-vhc9-98xp-277v/GHSA-vhc9-98xp-277v.json +++ b/advisories/unreviewed/2023/11/GHSA-vhc9-98xp-277v/GHSA-vhc9-98xp-277v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-vrjx-2rqq-2j39/GHSA-vrjx-2rqq-2j39.json b/advisories/unreviewed/2023/11/GHSA-vrjx-2rqq-2j39/GHSA-vrjx-2rqq-2j39.json index 2ffdffda026..5ffccf6895f 100644 --- a/advisories/unreviewed/2023/11/GHSA-vrjx-2rqq-2j39/GHSA-vrjx-2rqq-2j39.json +++ b/advisories/unreviewed/2023/11/GHSA-vrjx-2rqq-2j39/GHSA-vrjx-2rqq-2j39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-w6qw-76pv-8c27/GHSA-w6qw-76pv-8c27.json b/advisories/unreviewed/2023/11/GHSA-w6qw-76pv-8c27/GHSA-w6qw-76pv-8c27.json index d3abc78a8ab..d64f665641d 100644 --- a/advisories/unreviewed/2023/11/GHSA-w6qw-76pv-8c27/GHSA-w6qw-76pv-8c27.json +++ b/advisories/unreviewed/2023/11/GHSA-w6qw-76pv-8c27/GHSA-w6qw-76pv-8c27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-wwhh-cm65-x8qq/GHSA-wwhh-cm65-x8qq.json b/advisories/unreviewed/2023/11/GHSA-wwhh-cm65-x8qq/GHSA-wwhh-cm65-x8qq.json index f64e151165f..2f24e9b7e0a 100644 --- a/advisories/unreviewed/2023/11/GHSA-wwhh-cm65-x8qq/GHSA-wwhh-cm65-x8qq.json +++ b/advisories/unreviewed/2023/11/GHSA-wwhh-cm65-x8qq/GHSA-wwhh-cm65-x8qq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-xw85-vh2x-vg5q/GHSA-xw85-vh2x-vg5q.json b/advisories/unreviewed/2023/11/GHSA-xw85-vh2x-vg5q/GHSA-xw85-vh2x-vg5q.json index dfb19662eec..58ac942afe1 100644 --- a/advisories/unreviewed/2023/11/GHSA-xw85-vh2x-vg5q/GHSA-xw85-vh2x-vg5q.json +++ b/advisories/unreviewed/2023/11/GHSA-xw85-vh2x-vg5q/GHSA-xw85-vh2x-vg5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rvpg-mqjj-6hqp/GHSA-rvpg-mqjj-6hqp.json b/advisories/unreviewed/2024/04/GHSA-rvpg-mqjj-6hqp/GHSA-rvpg-mqjj-6hqp.json index 39d28a23a12..e915f7765d3 100644 --- a/advisories/unreviewed/2024/04/GHSA-rvpg-mqjj-6hqp/GHSA-rvpg-mqjj-6hqp.json +++ b/advisories/unreviewed/2024/04/GHSA-rvpg-mqjj-6hqp/GHSA-rvpg-mqjj-6hqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",