Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-04-09 21:32:15 +00:00
parent 6f661092d0
commit 27683ebb2a
67 changed files with 1349 additions and 69 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rvjj-5hjr-3fjf",
-  "modified": "2022-04-30T18:09:47Z",
+  "modified": "2025-04-09T21:30:32Z",
  "published": "2022-04-30T18:09:47Z",
  "aliases": [
    "CVE-1999-0012"
  ],
  "details": "Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -20,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-290"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f6gm-jc8c-7qrm",
-  "modified": "2023-01-06T18:30:20Z",
+  "modified": "2025-04-09T21:30:33Z",
  "published": "2022-12-29T00:30:35Z",
  "aliases": [
    "CVE-2022-4778"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gcm2-9m6w-m6mj",
-  "modified": "2023-01-04T18:31:00Z",
+  "modified": "2025-04-09T21:30:33Z",
  "published": "2022-12-23T00:30:24Z",
  "aliases": [
    "CVE-2022-4662"
@@ -19,10 +19,18 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4662"
    },
+    {
+      "type": "WEB",
+      "url": "https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org"
+    },
    {
      "type": "WEB",
      "url": "https://lore.kernel.org/all/20220913140355.910732567@linuxfoundation.org"
    },
+    {
+      "type": "WEB",
+      "url": "https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com"
+    },
    {
      "type": "WEB",
      "url": "https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA@mail.gmail.com"
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3x9f-9pxv-q52x",
-  "modified": "2023-01-12T18:30:29Z",
+  "modified": "2025-04-09T21:30:35Z",
  "published": "2023-01-06T21:30:41Z",
  "aliases": [
    "CVE-2022-47975"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7j4m-g687-74qh",
-  "modified": "2023-01-12T18:30:28Z",
+  "modified": "2025-04-09T21:30:35Z",
  "published": "2023-01-06T21:30:41Z",
  "aliases": [
    "CVE-2022-46762"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-693"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-9749-rqrj-vcqj",
-  "modified": "2023-01-11T21:30:39Z",
+  "modified": "2025-04-09T21:30:34Z",
  "published": "2023-01-06T06:30:25Z",
  "aliases": [
    "CVE-2022-42979"
@@ -19,6 +19,10 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-42979"
    },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/%40jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8"
+    },
    {
      "type": "WEB",
      "url": "https://medium.com/@jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8"
@@ -26,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-200",
      "CWE-295"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g5qm-9vfh-g7wg",
-  "modified": "2023-01-12T18:30:28Z",
+  "modified": "2025-04-09T21:30:35Z",
  "published": "2023-01-06T21:30:41Z",
  "aliases": [
    "CVE-2022-46761"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-276"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gr48-q88f-726j",
-  "modified": "2023-01-12T18:30:29Z",
+  "modified": "2025-04-09T21:30:35Z",
  "published": "2023-01-06T21:30:41Z",
  "aliases": [
    "CVE-2022-47974"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-287"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-79",
      "CWE-89"
    ],
    "severity": "CRITICAL",
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-120",
      "CWE-787"
    ],
    "severity": "HIGH",
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-190"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qg4g-qvgv-f8q2",
-  "modified": "2023-01-12T18:30:29Z",
+  "modified": "2025-04-09T21:30:35Z",
  "published": "2023-01-06T21:30:41Z",
  "aliases": [
    "CVE-2022-47976"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-287"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2c4f-g4mj-r79j",
-  "modified": "2024-03-05T12:30:33Z",
+  "modified": "2025-04-09T21:30:59Z",
  "published": "2024-03-05T12:30:33Z",
  "aliases": [
    "CVE-2023-5457"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-pr9m-x2x5-mj6q",
-  "modified": "2025-03-21T21:31:33Z",
+  "modified": "2025-04-09T21:31:00Z",
  "published": "2024-03-31T21:30:35Z",
  "aliases": [
    "CVE-2024-31108"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-x749-jjp7-3hjp",
-  "modified": "2024-03-05T12:30:32Z",
+  "modified": "2025-04-09T21:30:59Z",
  "published": "2024-03-05T12:30:32Z",
  "aliases": [
    "CVE-2023-45594"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3297-hxj5-867g",
-  "modified": "2025-03-04T18:33:43Z",
+  "modified": "2025-04-09T21:31:04Z",
  "published": "2025-03-04T18:33:43Z",
  "aliases": [
    "CVE-2025-26091"
  ],
  "details": "A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'name' parameter when creating a new password in the \"My Passwords\" page.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -20,8 +25,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-03-04T17:15:18Z"
@@ -46,7 +46,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-89"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-28gr-56hr-prp6",
-  "modified": "2025-04-04T15:31:15Z",
+  "modified": "2025-04-09T21:31:05Z",
  "published": "2025-04-02T15:31:36Z",
  "aliases": [
    "CVE-2025-2786"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:3607"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:3740"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2025-2786"
--- a/Show More
+++ b/Show More