diff --git a/advisories/github-reviewed/2018/06/GHSA-vwjc-q9px-r9vq/GHSA-vwjc-q9px-r9vq.json b/advisories/github-reviewed/2018/06/GHSA-vwjc-q9px-r9vq/GHSA-vwjc-q9px-r9vq.json index d92c67ab5fc..74639326159 100644 --- a/advisories/github-reviewed/2018/06/GHSA-vwjc-q9px-r9vq/GHSA-vwjc-q9px-r9vq.json +++ b/advisories/github-reviewed/2018/06/GHSA-vwjc-q9px-r9vq/GHSA-vwjc-q9px-r9vq.json @@ -8,9 +8,7 @@ ], "summary": "Denial of Service in ecstatic", "details": "Versions of `ecstatic` prior to 1.4.0 are affected by a denial of service vulnerability when certain input strings are sent via the `Last-Modified` or `If-Modified-Since` headers.\n\nParsing certain inputs with `new Date()` or `Date.parse()` cases v8 to crash. As ecstatic passes the value of the affected headers into one of these functions, sending certain inputs via one of the headers will cause the server to crash.\n\n\n\n## Recommendation\n\nUpdate to version 1.4.0 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2019/06/GHSA-h9x2-5rm7-x4gm/GHSA-h9x2-5rm7-x4gm.json b/advisories/github-reviewed/2019/06/GHSA-h9x2-5rm7-x4gm/GHSA-h9x2-5rm7-x4gm.json index 85f6def9e2d..2d4829c730f 100644 --- a/advisories/github-reviewed/2019/06/GHSA-h9x2-5rm7-x4gm/GHSA-h9x2-5rm7-x4gm.json +++ b/advisories/github-reviewed/2019/06/GHSA-h9x2-5rm7-x4gm/GHSA-h9x2-5rm7-x4gm.json @@ -8,9 +8,7 @@ ], "summary": "Insecure Comparison in secure-compare", "details": "Versions of `secure-compare` prior to 3.0.1 are affected by a vulnerability that results in the package always returning true when comparing two strings of the same length, despite differences in the contents of those strings.\n\n\n## Recommendation\n\nUpgrade to version 3.0.1 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/10/GHSA-fr26-qjc8-mvjx/GHSA-fr26-qjc8-mvjx.json b/advisories/github-reviewed/2021/10/GHSA-fr26-qjc8-mvjx/GHSA-fr26-qjc8-mvjx.json index a880da73a9a..2975da12575 100644 --- a/advisories/github-reviewed/2021/10/GHSA-fr26-qjc8-mvjx/GHSA-fr26-qjc8-mvjx.json +++ b/advisories/github-reviewed/2021/10/GHSA-fr26-qjc8-mvjx/GHSA-fr26-qjc8-mvjx.json @@ -3,9 +3,7 @@ "id": "GHSA-fr26-qjc8-mvjx", "modified": "2021-10-13T17:45:05Z", "published": "2021-10-13T18:56:12Z", - "aliases": [ - - ], + "aliases": [], "summary": "Possible route enumeration in production mode via RouteNotFoundError view in Vaadin 10, 11-14, and 15-19", "details": "Improper sanitization of path in default `RouteNotFoundError` view in `com.vaadin:flow-server` versions 1.0.0 through 1.0.14 (Vaadin 10.0.0 through 10.0.18), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.6.1 (Vaadin 14.0.0 through 14.6.1), and 3.0.0 through 6.0.9 (Vaadin 15.0.0 through 19.0.8) allows network attacker to enumerate all available routes via crafted HTTP request when application is running in production mode and no custom handler for `NotFoundException` is provided.", "severity": [ @@ -84,9 +82,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-10-13T17:45:05Z", diff --git a/advisories/github-reviewed/2021/10/GHSA-jfmf-w293-8xr8/GHSA-jfmf-w293-8xr8.json b/advisories/github-reviewed/2021/10/GHSA-jfmf-w293-8xr8/GHSA-jfmf-w293-8xr8.json index cb72f3b7865..b781667be64 100644 --- a/advisories/github-reviewed/2021/10/GHSA-jfmf-w293-8xr8/GHSA-jfmf-w293-8xr8.json +++ b/advisories/github-reviewed/2021/10/GHSA-jfmf-w293-8xr8/GHSA-jfmf-w293-8xr8.json @@ -3,9 +3,7 @@ "id": "GHSA-jfmf-w293-8xr8", "modified": "2021-10-13T17:43:34Z", "published": "2021-10-13T18:55:52Z", - "aliases": [ - - ], + "aliases": [], "summary": "Regular expression Denial of Service (ReDoS) in EmailValidator class in V7 compatibility module in Vaadin 8", "details": "Unsafe validation RegEx in `EmailValidator` component in `com.vaadin:vaadin-compatibility-server` versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.", "severity": [ @@ -53,9 +51,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2021-10-13T17:43:34Z", diff --git a/advisories/github-reviewed/2021/10/GHSA-w7x8-cq7r-g5g9/GHSA-w7x8-cq7r-g5g9.json b/advisories/github-reviewed/2021/10/GHSA-w7x8-cq7r-g5g9/GHSA-w7x8-cq7r-g5g9.json index 6c4753dcf2e..fdf7365d1e6 100644 --- a/advisories/github-reviewed/2021/10/GHSA-w7x8-cq7r-g5g9/GHSA-w7x8-cq7r-g5g9.json +++ b/advisories/github-reviewed/2021/10/GHSA-w7x8-cq7r-g5g9/GHSA-w7x8-cq7r-g5g9.json @@ -8,9 +8,7 @@ ], "summary": "Cross Site Scripting in Microweber", "details": "Cross Site Scripting (XSS). vulnerability exists in Microweber CMS 1.2.7 via the Login form, which could let a malicious user execute Javascript by Inserting code in the request form.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-364w-9g92-3grq/GHSA-364w-9g92-3grq.json b/advisories/github-reviewed/2021/11/GHSA-364w-9g92-3grq/GHSA-364w-9g92-3grq.json index 2bc7041809e..4b481be30fc 100644 --- a/advisories/github-reviewed/2021/11/GHSA-364w-9g92-3grq/GHSA-364w-9g92-3grq.json +++ b/advisories/github-reviewed/2021/11/GHSA-364w-9g92-3grq/GHSA-364w-9g92-3grq.json @@ -9,9 +9,7 @@ ], "summary": "Withdrawn: Laravel Framework does not sufficiently block the upload of executable PHP content.", "details": "# Withdrawn\n\nThis advisory has been withdrawn after the maintainers of Laravel noted this issue is not a security vulnerability with Laravel itself, but rather a userland issue.\n\n## Original CVE based description\n\nLaravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems based on Debian. In some use cases, this may be related to file-type validation for image upload (e.g., differences between getClientOriginalExtension and other approaches).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-5629-8855-gf4g/GHSA-5629-8855-gf4g.json b/advisories/github-reviewed/2021/11/GHSA-5629-8855-gf4g/GHSA-5629-8855-gf4g.json index c4968319076..13507eae9fc 100644 --- a/advisories/github-reviewed/2021/11/GHSA-5629-8855-gf4g/GHSA-5629-8855-gf4g.json +++ b/advisories/github-reviewed/2021/11/GHSA-5629-8855-gf4g/GHSA-5629-8855-gf4g.json @@ -3,9 +3,7 @@ "id": "GHSA-5629-8855-gf4g", "modified": "2021-11-17T21:07:30Z", "published": "2021-11-18T20:12:40Z", - "aliases": [ - - ], + "aliases": [], "summary": "Authentication Bypass by CSRF Weakness ", "details": "### Impact\nThe actual vulnerability has been discovered on `solidus_auth_devise`. See [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2) for details.\n\nThe security advisory here exists to provide an extra layer of security in the form of a monkey patch for users who don't update `solidus_auth_devise`. For this reason, it has been marked as low impact on this end.\n\n### Patches\nFor extra security, update `solidus_core` to versions `3.1.3`, `3.0.3` or `2.11.12`.\n\n### Workarounds\nLook at the workarounds described at [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2).\n\n### References\n- [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2).\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [solidus_auth_devise](https://github.com/solidusio/solidus_auth_devise/issues) or a discussion in [solidus](https://github.com/solidusio/solidus/discussions)\n* Email us at [security@solidus.io](mailto:security@soliidus.io)\n* Contact the core team on [Slack](http://slack.solidus.io/)\n", "severity": [ diff --git a/advisories/github-reviewed/2021/11/GHSA-77vh-xpmg-72qh/GHSA-77vh-xpmg-72qh.json b/advisories/github-reviewed/2021/11/GHSA-77vh-xpmg-72qh/GHSA-77vh-xpmg-72qh.json index 1530af815e9..d9e5db07c36 100644 --- a/advisories/github-reviewed/2021/11/GHSA-77vh-xpmg-72qh/GHSA-77vh-xpmg-72qh.json +++ b/advisories/github-reviewed/2021/11/GHSA-77vh-xpmg-72qh/GHSA-77vh-xpmg-72qh.json @@ -3,9 +3,7 @@ "id": "GHSA-77vh-xpmg-72qh", "modified": "2021-11-24T19:43:35Z", "published": "2021-11-18T16:02:41Z", - "aliases": [ - - ], + "aliases": [], "summary": "Clarify `mediaType` handling", "details": "### Impact\nIn the OCI Image Specification version 1.0.1 and prior, manifest and index documents are not self-describing and documents with a single digest could be interpreted as either a manifest or an index.\n\n### Patches\nThe Image Specification will be updated to recommend that both manifest and index documents contain a `mediaType` field to identify the type of document.\nRelease [v1.0.2](https://github.com/opencontainers/image-spec/releases/tag/v1.0.2) includes these updates.\n\n### Workarounds\nSoftware attempting to deserialize an ambiguous document may reject the document if it contains both “manifests” and “layers” fields or “manifests” and “config” fields.\n\n### References\nhttps://github.com/opencontainers/distribution-spec/security/advisories/GHSA-mc8v-mgrf-8f4m\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in https://github.com/opencontainers/image-spec\n* Email us at [security@opencontainers.org](mailto:security@opencontainers.org)\n* https://github.com/opencontainers/image-spec/commits/v1.0.2\n", "severity": [ diff --git a/advisories/github-reviewed/2021/11/GHSA-gqpw-9q54-9x28/GHSA-gqpw-9q54-9x28.json b/advisories/github-reviewed/2021/11/GHSA-gqpw-9q54-9x28/GHSA-gqpw-9q54-9x28.json index 2b8e77a5a63..9272ff9a69e 100644 --- a/advisories/github-reviewed/2021/11/GHSA-gqpw-9q54-9x28/GHSA-gqpw-9q54-9x28.json +++ b/advisories/github-reviewed/2021/11/GHSA-gqpw-9q54-9x28/GHSA-gqpw-9q54-9x28.json @@ -8,9 +8,7 @@ ], "summary": "Server-Side Request Forgery in Concrete CMS", "details": "Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system to be vulnerable to SSRF attacks on the private LAN to servers by reading files from the local LAN. An attacker can pivot in the private LAN and exploit local network appsandb.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-jcjx-c3j3-44pr/GHSA-jcjx-c3j3-44pr.json b/advisories/github-reviewed/2021/11/GHSA-jcjx-c3j3-44pr/GHSA-jcjx-c3j3-44pr.json index 17d4cab6b2d..aebd6b5ada1 100644 --- a/advisories/github-reviewed/2021/11/GHSA-jcjx-c3j3-44pr/GHSA-jcjx-c3j3-44pr.json +++ b/advisories/github-reviewed/2021/11/GHSA-jcjx-c3j3-44pr/GHSA-jcjx-c3j3-44pr.json @@ -3,14 +3,10 @@ "id": "GHSA-jcjx-c3j3-44pr", "modified": "2021-11-08T21:09:02Z", "published": "2021-11-10T16:44:12Z", - "aliases": [ - - ], + "aliases": [], "summary": "Insufficient Session Expiration in @cyyynthia/tokenize", "details": "### Impact\nA bug introduced in version 1.1.0 made Tokenize generate faulty tokens with NaN as a generation date. As a result, tokens would not properly expire and remain valid regardless of the `lastTokenReset` field.\n\n### Patches\nVersion 1.1.3 contains a patch that'll invalidate these faulty tokens and make new ones behave as expected.\n\n### Workarounds\nNone. Tokens do not hold the necessary information to perform invalidation anymore.\n\n### References\nPR #1\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [github.com/cyyynthia/tokenize](https://github.com/cyyynthia/tokenize)\n* Email us at [cynthia@cynthia.dev](mailto:cynthia@cynthia.dev)\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-m2v2-8227-59f5/GHSA-m2v2-8227-59f5.json b/advisories/github-reviewed/2021/11/GHSA-m2v2-8227-59f5/GHSA-m2v2-8227-59f5.json index da45cf00a71..cbe957ce5e5 100644 --- a/advisories/github-reviewed/2021/11/GHSA-m2v2-8227-59f5/GHSA-m2v2-8227-59f5.json +++ b/advisories/github-reviewed/2021/11/GHSA-m2v2-8227-59f5/GHSA-m2v2-8227-59f5.json @@ -8,9 +8,7 @@ ], "summary": "Exposure of sensitive information in concrete5/core", "details": "In Concrete CMS (formerly concrete 5) below 8.5.7, IDOR Allows Unauthenticated User to Access Restricted Files If Allowed to Add Message to a Conversation.To remediate this, a check was added to verify a user has permissions to view files before attaching the files to a message in \"add / edit message”.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-mcxr-fx5f-96qq/GHSA-mcxr-fx5f-96qq.json b/advisories/github-reviewed/2021/11/GHSA-mcxr-fx5f-96qq/GHSA-mcxr-fx5f-96qq.json index 076fd440d6b..483dc1229a9 100644 --- a/advisories/github-reviewed/2021/11/GHSA-mcxr-fx5f-96qq/GHSA-mcxr-fx5f-96qq.json +++ b/advisories/github-reviewed/2021/11/GHSA-mcxr-fx5f-96qq/GHSA-mcxr-fx5f-96qq.json @@ -8,9 +8,7 @@ ], "summary": "Server-Side Request Forgery in Concrete CMS", "details": "Concrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-qm7x-rc44-rrqw/GHSA-qm7x-rc44-rrqw.json b/advisories/github-reviewed/2021/11/GHSA-qm7x-rc44-rrqw/GHSA-qm7x-rc44-rrqw.json index 1611938cf7a..876b5991a02 100644 --- a/advisories/github-reviewed/2021/11/GHSA-qm7x-rc44-rrqw/GHSA-qm7x-rc44-rrqw.json +++ b/advisories/github-reviewed/2021/11/GHSA-qm7x-rc44-rrqw/GHSA-qm7x-rc44-rrqw.json @@ -3,14 +3,10 @@ "id": "GHSA-qm7x-rc44-rrqw", "modified": "2021-11-04T19:46:00Z", "published": "2021-11-08T18:07:42Z", - "aliases": [ - - ], + "aliases": [], "summary": "Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)", "details": "### Impact\nIn certain configurations, Apollo Server serves the client-side web app \"GraphQL Playground\" from the same web server that executes GraphQL operations. This web app has access to cookies and other credentials associated with the web server's operations. There is a cross-site scripting vulnerability in GraphQL Playground that allows for arbitrary JavaScript code execution in your web server's origin. If a user clicks a specially crafted link to your GraphQL Playground page served by Apollo Server, an attacker can steal cookies and other private browser data.\n\nDetails of the underlying GraphQL Playground vulnerability are available in [this `graphql-playground` advisory](https://github.com/graphql/graphql-playground/security/advisories/GHSA-59r9-6jp6-jcm7). (A [similar vulnerability](https://github.com/graphql/graphiql/security/advisories/GHSA-x4r7-m2q9-69c8) exists in the related `graphiql` project.) This advisory focuses on identifying whether *Apollo Server* installations are vulnerable and mitigating the vulnerability in Apollo Server; see the other advisories for details on the XSS vulnerability itself.\n\nThe impact of this vulnerability is more severe if (as is common) your GraphQL server's origin URL is an origin that is used to store sensitive data such as cookies.\n\nIn order for this vulnerability to affect your Apollo Server installation, it must actually serve GraphQL Playground. The integration between Apollo Server and GraphQL Playground is different in Apollo Server 2 and Apollo Server 3. You can tell which version of Apollo Server you are running by looking at the version of the [package from which you import the `ApolloServer` class](https://www.apollographql.com/docs/apollo-server/integrations/middleware/): this may be `apollo-server`, `apollo-server-express`, `apollo-server-lambda`, etc.\n\n#### Apollo Server 3\n\nApollo Server 3 does not serve GraphQL Playground by default. It has a [landing page plugin system](https://www.apollographql.com/docs/apollo-server/api/plugin/landing-pages/) and the default plugin is a simple splash page that is not vulnerable to this exploit, linking to Apollo Sandbox Explorer. (We chose to change the default because GraphQL Playground is not actively maintained.)\n\nIf you are running Apollo Server 3, then you are *only* vulnerable if you *explicitly* import the [`ApolloServerPluginLandingPageGraphQLPlayground`](https://www.apollographql.com/docs/apollo-server/api/plugin/landing-pages/#graphql-playground-landing-page) plugin and pass it to your `ApolloServer`'s constructor in the `plugins` array. Otherwise, this advisory does not apply to your server.\n\n#### Apollo Server 2\n\nApollo Server 2 serves GraphQL Playground by default, unless the `NODE_ENV` environment variable is set to `production`, or if you explicitly configure it via the `playground` option to the `ApolloServer` constructor.\n\nYour Apollo Server 2 installation is vulnerable if *any* of the following is true:\n- You pass `playground: true` to the `ApolloServer` constructor\n- You pass some other object like `playground: {title: \"Title\"}` to the `ApolloServer` constructor\n- You do *not* pass any `playground` option to the `ApolloServer` constructor, *and* the `NODE_ENV` environment variable is *not* set to `production`\n\n#### Apollo Server 1\n\nApollo Server 1 included `graphiql` instead of `graphql-playground`. `graphiql` isn't automatically enabled in Apollo Server 1: you have to explicitly call a function such as `graphiqlExpress` to enable it. Because Apollo Server 1 is not commonly used, we have not done a detailed examination of whether the integration between Apollo Server 1 and `graphiql` is vulnerable to a similar exploit. If you are still using Apollo Server 1, we recommend you disable `graphiql` by removing the `graphiqlExpress` call, and then upgrade to a newer version of Apollo Server.\n\n### Patches and workarounds\n\nThere are several approaches you can take to ensure that your server is not vulnerable to this issue.\n\n#### Upgrade Apollo Server\n\nThe vulnerability has been patched in Apollo Server 2.25.3 and Apollo Server 3.4.1. To get the patch, upgrade your [Apollo Server entry point package](https://www.apollographql.com/docs/apollo-server/integrations/middleware/) to one of the fixed versions; this package may be `apollo-server`, `apollo-server-express`, `apollo-server-lambda`, etc. Additionally, if you depend directly on `apollo-server-core` in your `package.json`, make sure that you upgrade it to the same version.\n\n#### Upgrade Playground version only\n\nIf upgrading to the latest version of Apollo Server 2 or 3 quickly will be challenging, you can configure your current version of Apollo Server to serve the latest version of the GraphQL Playground app. This will pin your app to serve a specific version of GraphQL Playground and you will not receive updates to it when you upgrade Apollo Server later, but this may be acceptable because GraphQL Playground is not actively maintained.\n\nThe way to do this depends on what version of Apollo Server you're using and if you're already configuring GraphQL Playground.\n\n- **Apollo Server 3**: If you are using Apollo Server 3, then you are only vulnerable if your serve explicitly calls [`ApolloServerPluginLandingPageGraphQLPlayground`](https://www.apollographql.com/docs/apollo-server/api/plugin/landing-pages/#graphql-playground-landing-page) and passes it to the Apollo Server constructor in the `plugins` array. Add the option `version: '1.7.42'` to this call, so it looks like:\n```\nplugins: [ApolloServerPluginLandingPageGraphQLPlayground({version: '1.7.42'})]\n```\n- **Apollo Server 2 with no explicit `playground` option**: If you are using Apollo Server 2 and do not currently pass the `playground` option to `new ApolloServer`, add a `playground` option like so: \n```\nnew ApolloServer({ playground: process.env.NODE_ENV === 'production' ? false : { version: '1.7.42' } })\n```\n- **Apollo Server 2 with `playground: true` or `playground: {x, y, z}`**: If you are using Apollo Server 2 and currently pass `true` or an object to `new ApolloServer`, pass the `version` option under the `playground` option like so:\n```\nnew ApolloServer({ playground: { version: '1.7.42', x, y, z } })\n```\n\n#### Disable GraphQL Playground\n\nIf upgrading Apollo Server or GraphQL Playground is challenging, you can also disable GraphQL Playground.\n\nIn Apollo Server 3, remove the call to `ApolloServerPluginLandingPageGraphQLPlayground` from your `ApolloServer` constructor's `plugins` array. This will replace GraphQL Playground with a simple splash page. See [the landing page plugins docs](https://www.apollographql.com/docs/apollo-server/api/plugin/landing-pages/) for details.\n\nIn Apollo Server 2, add `playground: false` to your `ApolloServer` constructor: `new ApolloServer({ playground: false })`. This will replace GraphQL Playground with an attempt to execute a GraphQL operation, which will likely display an error in the browser.\n\nIf you disable GraphQL Playground, any users who rely on it to execute GraphQL operations will need an alternative, such as the [Apollo Studio Explorer's account-free Sandbox](https://www.apollographql.com/docs/studio/explorer/#account-free-sandbox).\n\n### Credit\n\nThis vulnerability was discovered by @Ry0taK. Thank you!\n\nThe fix to GraphQL Playground was developed by @acao and @glasser with help from @imolorhe, @divyenduz, and @benjie.\n\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Read the [`graphql-playground` advisory](https://github.com/graphql/graphql-playground/security/advisories/GHSA-59r9-6jp6-jcm7)\n* Open an issue in [the `apollo-server` repo](https://github.com/apollographql/apollo-server/)\n* If the issue involves confidential information, email us at [security@apollographql.com](mailto:security@apollographql.com)\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-rhf5-f553-xg82/GHSA-rhf5-f553-xg82.json b/advisories/github-reviewed/2021/11/GHSA-rhf5-f553-xg82/GHSA-rhf5-f553-xg82.json index 034c04a2d15..177a8b804d1 100644 --- a/advisories/github-reviewed/2021/11/GHSA-rhf5-f553-xg82/GHSA-rhf5-f553-xg82.json +++ b/advisories/github-reviewed/2021/11/GHSA-rhf5-f553-xg82/GHSA-rhf5-f553-xg82.json @@ -8,9 +8,7 @@ ], "summary": "Password exposure in concrete5/core", "details": "Unauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in view_inline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations were put in place a. restricting file types for view_inline to images only b. putting a warning in the file manager to advise users.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-v935-pqmr-g8v9/GHSA-v935-pqmr-g8v9.json b/advisories/github-reviewed/2021/11/GHSA-v935-pqmr-g8v9/GHSA-v935-pqmr-g8v9.json index 2a7f5333955..420fa7fe9ba 100644 --- a/advisories/github-reviewed/2021/11/GHSA-v935-pqmr-g8v9/GHSA-v935-pqmr-g8v9.json +++ b/advisories/github-reviewed/2021/11/GHSA-v935-pqmr-g8v9/GHSA-v935-pqmr-g8v9.json @@ -3,14 +3,10 @@ "id": "GHSA-v935-pqmr-g8v9", "modified": "2021-11-03T15:02:32Z", "published": "2021-11-03T17:36:04Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unexpected panics in num-bigint", "details": "### Impact\n\nTwo scenarios were reported where `BigInt` and `BigUint` multiplication may unexpectedly panic.\n\n- The internal `mac3` function did not expect the possibility of non-empty all-zero inputs, leading to an `unwrap()` panic.\n- A buffer was allocated with less capacity than needed for an intermediate result, leading to an assertion panic.\n\nRust panics can either cause stack unwinding or program abort, depending on the application configuration. In some settings, an unexpected panic may constitute a denial-of-service vulnerability.\n\n### Patches\nBoth problems were introduced in version 0.4.1, and are fixed in version 0.4.3.\n\n### For more information\nIf you have any questions or comments about this advisory, please open an issue in the [num-bigint](https://github.com/rust-num/num-bigint) repo.\n\n### Acknowledgements\nThanks to Guido Vranken and Arvid Norberg for privately reporting these issues to the author.\n\n### References\n* [GHSA-v935-pqmr-g8v9](https://github.com/rust-num/num-bigint/security/advisories/GHSA-v935-pqmr-g8v9)\n* [num-bigint#228](https://github.com/rust-num/num-bigint/pull/228)\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/11/GHSA-wmpv-c2jp-j2xg/GHSA-wmpv-c2jp-j2xg.json b/advisories/github-reviewed/2021/11/GHSA-wmpv-c2jp-j2xg/GHSA-wmpv-c2jp-j2xg.json index b8e7dbb5d5d..19010b79cd3 100644 --- a/advisories/github-reviewed/2021/11/GHSA-wmpv-c2jp-j2xg/GHSA-wmpv-c2jp-j2xg.json +++ b/advisories/github-reviewed/2021/11/GHSA-wmpv-c2jp-j2xg/GHSA-wmpv-c2jp-j2xg.json @@ -3,14 +3,10 @@ "id": "GHSA-wmpv-c2jp-j2xg", "modified": "2021-11-15T22:27:38Z", "published": "2021-11-15T23:28:18Z", - "aliases": [ - - ], + "aliases": [], "summary": "ERC1155Supply vulnerability in OpenZeppelin Contracts", "details": "When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the `ERC1155Supply` extension, total supply is not updated until after the callback, thus during the callback the reported total supply is lower than the real number of tokens in circulation.\n\n### Impact\nIf a system relies on accurately reported supply, an attacker may be able to mint tokens and invoke that system after receiving the token balance but before the supply is updated.\n\n### Patches\nA fix is included in version 4.3.3 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`.\n\n### Workarounds\nIf accurate supply is relevant, do not mint tokens to untrusted receivers.\n\n### Credits\nThe issue was identified and reported by @ChainSecurityAudits.\n\n### For more information\nRead [TotalSupply Inconsistency in ERC1155 NFT Tokens](https://medium.com/chainsecurity/totalsupply-inconsistency-in-erc1155-nft-tokens-8f8e3b29f5aa) by @ChainSecurityAudits for a more detailed breakdown.\n\nIf you have any questions or comments about this advisory, email us at security@openzeppelin.com.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -62,9 +58,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2021-11-15T22:27:38Z", diff --git a/advisories/github-reviewed/2021/12/GHSA-ff45-7prw-58vj/GHSA-ff45-7prw-58vj.json b/advisories/github-reviewed/2021/12/GHSA-ff45-7prw-58vj/GHSA-ff45-7prw-58vj.json index 484383dab76..b53c97b600f 100644 --- a/advisories/github-reviewed/2021/12/GHSA-ff45-7prw-58vj/GHSA-ff45-7prw-58vj.json +++ b/advisories/github-reviewed/2021/12/GHSA-ff45-7prw-58vj/GHSA-ff45-7prw-58vj.json @@ -9,9 +9,7 @@ ], "summary": "OS Command injection in docker-cli-js", "details": "# Withdrawn\n\nAfter reviewing this CVE, and [this response from the maintainer](https://github.com/Quobject/docker-cli-js/issues/22#issuecomment-967760940), we have withdrawn this advisory.\n\n# Original CVE description\n\nThis affects all versions of package docker-cli-js. If the command parameter of the Docker.command method can at least be partially controlled by a user, they will be in a position to execute any arbitrary OS commands on the host system. ", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/11/GHSA-446q-xxg5-3vhh/GHSA-446q-xxg5-3vhh.json b/advisories/github-reviewed/2022/11/GHSA-446q-xxg5-3vhh/GHSA-446q-xxg5-3vhh.json index 03f349e16b1..7f1dee33954 100644 --- a/advisories/github-reviewed/2022/11/GHSA-446q-xxg5-3vhh/GHSA-446q-xxg5-3vhh.json +++ b/advisories/github-reviewed/2022/11/GHSA-446q-xxg5-3vhh/GHSA-446q-xxg5-3vhh.json @@ -3,14 +3,10 @@ "id": "GHSA-446q-xxg5-3vhh", "modified": "2022-11-10T23:57:04Z", "published": "2022-11-10T23:57:04Z", - "aliases": [ - - ], + "aliases": [], "summary": "eZ Platform users with the Company admin role can assign any role to any user", "details": "Critical severity. Users with the Company admin role (introduced by the company account feature in v4) can assign any role to any user. This also applies to any other user that has the role / assign policy. Any subtree limitation in place does not have any effect.\n\nThe role / assign policy is typically only given to administrators, which limits the scope in most cases, but please verify who has this policy in your installaton. The fix ensures that subtree limitations are working as intended.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-11-10T23:57:04Z", diff --git a/advisories/github-reviewed/2022/12/GHSA-5wvv-q5fv-2388/GHSA-5wvv-q5fv-2388.json b/advisories/github-reviewed/2022/12/GHSA-5wvv-q5fv-2388/GHSA-5wvv-q5fv-2388.json index e6216a84a8d..a2e7617f30a 100644 --- a/advisories/github-reviewed/2022/12/GHSA-5wvv-q5fv-2388/GHSA-5wvv-q5fv-2388.json +++ b/advisories/github-reviewed/2022/12/GHSA-5wvv-q5fv-2388/GHSA-5wvv-q5fv-2388.json @@ -3,14 +3,10 @@ "id": "GHSA-5wvv-q5fv-2388", "modified": "2022-12-30T16:57:28Z", "published": "2022-12-30T16:57:28Z", - "aliases": [ - - ], + "aliases": [], "summary": "hyper-staticfile's location header incorporates user input, allowing open redirect", "details": "When `hyper-staticfile` performs a redirect for a directory request (e.g. a request for `/dir` that redirects to `/dir/`), the `Location` header value was derived from user input (the request path), simply appending a slash. The intent was to perform an origin-relative redirect, but specific inputs allowed performing a scheme-relative redirect instead.\n\nAn attacker could craft a special URL that would appear to be for the correct domain, but immediately redirects to a malicious domain. Such a URL can benefit phishing attacks, for example an innocent looking link in an email.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/12/GHSA-gfgm-chr3-x6px/GHSA-gfgm-chr3-x6px.json b/advisories/github-reviewed/2022/12/GHSA-gfgm-chr3-x6px/GHSA-gfgm-chr3-x6px.json index 41a1235bc2d..dfb72b16a08 100644 --- a/advisories/github-reviewed/2022/12/GHSA-gfgm-chr3-x6px/GHSA-gfgm-chr3-x6px.json +++ b/advisories/github-reviewed/2022/12/GHSA-gfgm-chr3-x6px/GHSA-gfgm-chr3-x6px.json @@ -3,14 +3,10 @@ "id": "GHSA-gfgm-chr3-x6px", "modified": "2022-12-30T17:48:30Z", "published": "2022-12-30T17:48:30Z", - "aliases": [ - - ], + "aliases": [], "summary": "prettytable-rs: Force cast a &Vec to &[T] may lead to undefined behavior", "details": "In function `Table::as_ref`, a reference of vector is force cast to slice. There are multiple problems here:\n1. To guarantee the size is correct, we have to first do `Vec::shrink_to_fit`. The function requires a mutable reference, so we have to force cast from immutable to mutable, which is undefined behavior (UB).\n2. Even if (1) is sound, `&Vec` and `&[T]` still might not have the same layout. Treating them equally may lead to undefinted behavior (UB).\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-12-30T17:48:30Z", diff --git a/advisories/github-reviewed/2022/12/GHSA-q2fj-6h62-59m2/GHSA-q2fj-6h62-59m2.json b/advisories/github-reviewed/2022/12/GHSA-q2fj-6h62-59m2/GHSA-q2fj-6h62-59m2.json index 04903e4f68d..24bff0c3f60 100644 --- a/advisories/github-reviewed/2022/12/GHSA-q2fj-6h62-59m2/GHSA-q2fj-6h62-59m2.json +++ b/advisories/github-reviewed/2022/12/GHSA-q2fj-6h62-59m2/GHSA-q2fj-6h62-59m2.json @@ -3,9 +3,7 @@ "id": "GHSA-q2fj-6h62-59m2", "modified": "2022-12-30T22:13:59Z", "published": "2022-12-30T22:13:59Z", - "aliases": [ - - ], + "aliases": [], "summary": "Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue", "details": "### Impact\n\nIf you are using the **Apiman Vert.x Gateway** prior to Apiman 3.0.0.Final, a connection caching issue in Hazelcast could allow an unauthenticated, remote attacker to access and manipulate data in the cluster with another authenticated connection's identity.\n\nHazelcast is a transitive dependency of the Apiman Vert.x Gateway.\n\nThe precise risk is difficult to quantify at this juncture as plugins deployed by users may make use of Hazelcast in a different manner to the main Apiman codebase.\n\nIf any of your custom Apiman plugins specify Hazelcast dependencies, you should also bump these versions. \n\nHint: an easy way to track Apiman dependency versions is to use `apiman-parent`.\n\nIf you use the Apiman Tomcat or WildFly Gateway this does not affect you.\n\n### Patches\n\nUpgrade to **Apiman 3.0.0.Final or later**.\n\nIf you are using an older version of Apiman and need to remain on that version, contact to your Apiman support provider for advice/long-term support.\n\n### Workarounds\n\nNone (other than doing your own build).\n\n### References\n\n* https://github.com/advisories/GHSA-c5hg-mr8r-f6jp", "severity": [ @@ -73,9 +71,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-12-30T22:13:59Z", diff --git a/advisories/github-reviewed/2023/02/GHSA-mhgm-52vg-pvvc/GHSA-mhgm-52vg-pvvc.json b/advisories/github-reviewed/2023/02/GHSA-mhgm-52vg-pvvc/GHSA-mhgm-52vg-pvvc.json index 98412147007..ae48e3e57b8 100644 --- a/advisories/github-reviewed/2023/02/GHSA-mhgm-52vg-pvvc/GHSA-mhgm-52vg-pvvc.json +++ b/advisories/github-reviewed/2023/02/GHSA-mhgm-52vg-pvvc/GHSA-mhgm-52vg-pvvc.json @@ -3,14 +3,10 @@ "id": "GHSA-mhgm-52vg-pvvc", "modified": "2023-02-16T14:12:04Z", "published": "2023-02-16T14:12:04Z", - "aliases": [ - - ], + "aliases": [], "summary": "Privilege escalation in Strongbox", "details": "### Impact\nAn attacker with read-only access to a Strongbox secret could craft a valid encrypted secret (same id/version). It also makes the audit logs from KMS less useful. The issue is caused by a bug in the underlying AWS Encryption SDK.\n\nBy default, the encrypted secrets are stored in DynamoDB and an attacker with read-only access would not be able to write the encrypted secret to DynamoDB. So in practice the impact should be limited for most users.\n\nStrongbox supports storing data in files as an alternative to DynamoDB. If the attacker had write access to where the files are stored they could make the attack work end-to-end. Similarly, any custom storage backend could also be affected.\n\nIn order to be backwards compatible Strongbox will not make use of key commitments (another improvement to the AWS Encryption SDK). Strongbox enforces that only one KMS key can be used, and it must match the expected one. This means that an attacker needs write access to both KMS and DynamoDB (or other storage backend) to stage an attack, which is not a scenario Strongbox is designed to protect against.\n\n### Patches\nFixed in version 0.5.0.\n\n### Workarounds\nNone\n\n### References\n- https://github.com/aws/aws-encryption-sdk-java/security/advisories/GHSA-55xh-53m6-936r\n- https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/concepts.html#key-commitment", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/05/GHSA-mj6p-3pc9-wf5m/GHSA-mj6p-3pc9-wf5m.json b/advisories/github-reviewed/2023/05/GHSA-mj6p-3pc9-wf5m/GHSA-mj6p-3pc9-wf5m.json index 35464322ff7..1862ac94360 100644 --- a/advisories/github-reviewed/2023/05/GHSA-mj6p-3pc9-wf5m/GHSA-mj6p-3pc9-wf5m.json +++ b/advisories/github-reviewed/2023/05/GHSA-mj6p-3pc9-wf5m/GHSA-mj6p-3pc9-wf5m.json @@ -8,9 +8,7 @@ ], "summary": "proxy denial of service vulnerability", "details": "A remote attacker can trigger a denial of service in the `socket.remoteAddress` variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/06/GHSA-25mx-8f3v-8wh7/GHSA-25mx-8f3v-8wh7.json b/advisories/github-reviewed/2023/06/GHSA-25mx-8f3v-8wh7/GHSA-25mx-8f3v-8wh7.json index bdd098dc618..14b8cc38d0f 100644 --- a/advisories/github-reviewed/2023/06/GHSA-25mx-8f3v-8wh7/GHSA-25mx-8f3v-8wh7.json +++ b/advisories/github-reviewed/2023/06/GHSA-25mx-8f3v-8wh7/GHSA-25mx-8f3v-8wh7.json @@ -3,14 +3,10 @@ "id": "GHSA-25mx-8f3v-8wh7", "modified": "2023-06-06T01:58:04Z", "published": "2023-06-06T01:58:04Z", - "aliases": [ - - ], + "aliases": [], "summary": "sequoia-openpgp vulnerable to out-of-bounds array access leading to panic", "details": "Affected versions of the crate have several bugs where attacker-controlled input can result in the use of an out-of-bound array index. Rust detects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it is not possible for an attacker to read from or write to the application's address space.\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -93,9 +89,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-06-06T01:58:04Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-29mf-62xx-28jq/GHSA-29mf-62xx-28jq.json b/advisories/github-reviewed/2023/06/GHSA-29mf-62xx-28jq/GHSA-29mf-62xx-28jq.json index f1d462a9211..ff0a2f67f9c 100644 --- a/advisories/github-reviewed/2023/06/GHSA-29mf-62xx-28jq/GHSA-29mf-62xx-28jq.json +++ b/advisories/github-reviewed/2023/06/GHSA-29mf-62xx-28jq/GHSA-29mf-62xx-28jq.json @@ -3,14 +3,10 @@ "id": "GHSA-29mf-62xx-28jq", "modified": "2023-06-06T01:58:41Z", "published": "2023-06-06T01:58:41Z", - "aliases": [ - - ], + "aliases": [], "summary": "buffered-reader vulnerable to out-of-bounds array access leading to panic", "details": "Affected versions of the crate have a bug where attacker-controlled input can result in the use of an out-of-bound array index. Rust\ndetects the use of the out-of-bound index and causes the application to panic. An attacker may be able to use this to cause a denial-of-service. However, it is not possible for an attacker to read from or write to the application's address space.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -74,9 +70,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-06-06T01:58:41Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-5fm9-h728-fwpj/GHSA-5fm9-h728-fwpj.json b/advisories/github-reviewed/2023/06/GHSA-5fm9-h728-fwpj/GHSA-5fm9-h728-fwpj.json index 6717173e8d8..861da791236 100644 --- a/advisories/github-reviewed/2023/06/GHSA-5fm9-h728-fwpj/GHSA-5fm9-h728-fwpj.json +++ b/advisories/github-reviewed/2023/06/GHSA-5fm9-h728-fwpj/GHSA-5fm9-h728-fwpj.json @@ -3,14 +3,10 @@ "id": "GHSA-5fm9-h728-fwpj", "modified": "2023-06-06T02:06:23Z", "published": "2023-06-06T02:06:23Z", - "aliases": [ - - ], + "aliases": [], "summary": "trust-dns vulnerable to Remote Attackers causing Denial-of-Service (packet loops) with crafted DNS packets", "details": "trust-dns and trust-dns-server are vulnerable to remotely triggered denial-of-service attacks, consuming both network and CPU resources.\nDNS messages with the QR=1 bit set are responded to with a `FormErr` response.\nThis allows creating a traffic loop, in which these `FormErr` responses are sent nonstop between vulnerable servers.\n\nThere are two scenarios how this can be exploited: 1) Create a loop between two instances of trust-dns, consuming network resources, or 2) consuming the CPU of a single instance.\n\nWith two instances *A* and *B* an attacker sends a DNS query with a spoofed source IP address to *A*.\n*A* replies with a `FormErr` to *B*.\nNow both servers with ping-pong the message back and forth until by chance the packet is dropped in the network.\nMultiple spoofed packets can be sent by the attacker, increasing resource consumption.\n\nA single server can get locked up replying to itself.\nSame setup as above, but now *A* sends the reply to itself.\nThe packet is sent out as fast as the CPU and network stack manage.\nThis locks up a CPU core.\nMultiple packets from the attacker consume multiple CPU cores.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -66,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-06-06T02:06:23Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-7c94-gvvj-r3mg/GHSA-7c94-gvvj-r3mg.json b/advisories/github-reviewed/2023/06/GHSA-7c94-gvvj-r3mg/GHSA-7c94-gvvj-r3mg.json index 3a64f9a5705..e33a958b570 100644 --- a/advisories/github-reviewed/2023/06/GHSA-7c94-gvvj-r3mg/GHSA-7c94-gvvj-r3mg.json +++ b/advisories/github-reviewed/2023/06/GHSA-7c94-gvvj-r3mg/GHSA-7c94-gvvj-r3mg.json @@ -3,14 +3,10 @@ "id": "GHSA-7c94-gvvj-r3mg", "modified": "2023-06-05T20:36:58Z", "published": "2023-06-05T20:36:58Z", - "aliases": [ - - ], + "aliases": [], "summary": "cheqd-node affected by Inter-blockchain Communication (IBC) protocol \"Huckleberry\" vulnerability", "details": "### Impact\nThis vulnerability affects the [`ibc-go` package for those running full nodes, dubbed \"Huckleberry\"](https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731). According to their advisory:\n\n> This issue is low-severity in general, and it has a low impact and likelihood of exploitation. Depending on how a full node is architected, this issue could potentially yield a high or critical severity vulnerability.\n\nThere is no vulnerability in the DID/resource modules for cheqd-node.\n\n### Patches\nNode operators are requested to upgrade to [cheqd-node v1.4.2](https://github.com/cheqd/cheqd-node/releases/tag/v1.4.2). This is a non-state breaking release, and does not require a coordinated upgrade across all node operators.\n\n### Workarounds\nNo. Node operators are recommended to upgrade to the latest release version.\n\n### References\n- [\"Huckleberry\" IBC security advisory](https://forum.cosmos.network/t/ibc-security-advisory-huckleberry/10731)\n- [`ibc-go` v6.1.1 release notes](https://github.com/cosmos/ibc-go/releases/tag/v6.1.1)\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -59,9 +55,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-06-05T20:36:58Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-h87r-f4vc-mchv/GHSA-h87r-f4vc-mchv.json b/advisories/github-reviewed/2023/06/GHSA-h87r-f4vc-mchv/GHSA-h87r-f4vc-mchv.json index 548474bb137..f4b4ba468be 100644 --- a/advisories/github-reviewed/2023/06/GHSA-h87r-f4vc-mchv/GHSA-h87r-f4vc-mchv.json +++ b/advisories/github-reviewed/2023/06/GHSA-h87r-f4vc-mchv/GHSA-h87r-f4vc-mchv.json @@ -3,9 +3,7 @@ "id": "GHSA-h87r-f4vc-mchv", "modified": "2023-06-06T01:51:09Z", "published": "2023-06-06T01:51:09Z", - "aliases": [ - - ], + "aliases": [], "summary": "PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash", "details": "### Impact\nIn 4.18.0, the network handling of inventories was completely revamped. Due to this, a bug was introduced which allowed players to request that the server drop more of an item than they had available in their hotbar.\n\nThis did not lead to any duplication issues, but instead led to a server crash, and is believed to have been exploited in the wild.\n\n### Patches\nThis was fixed in 58974765a68f63a9968a7ff3a06f584ff2ee08d2, which was released in 4.18.1.\n\n### Workarounds\nHandle `InventoryTransactionPacket` in `DataPacketReceiveEvent`, and verify that the item count dropped isn't more than the available item count. However, it's complicated to do this, so it's not recommended.", "severity": [ @@ -54,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-06-06T01:51:09Z", diff --git a/advisories/github-reviewed/2023/12/GHSA-v7hc-87jc-qrrr/GHSA-v7hc-87jc-qrrr.json b/advisories/github-reviewed/2023/12/GHSA-v7hc-87jc-qrrr/GHSA-v7hc-87jc-qrrr.json index d03a93e3824..6d7639cb492 100644 --- a/advisories/github-reviewed/2023/12/GHSA-v7hc-87jc-qrrr/GHSA-v7hc-87jc-qrrr.json +++ b/advisories/github-reviewed/2023/12/GHSA-v7hc-87jc-qrrr/GHSA-v7hc-87jc-qrrr.json @@ -3,14 +3,10 @@ "id": "GHSA-v7hc-87jc-qrrr", "modified": "2023-12-06T19:19:35Z", "published": "2023-12-06T19:19:35Z", - "aliases": [ - - ], + "aliases": [], "summary": "eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations", "details": "### Impact\n\nThe eventing-github cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as a Slowloris‬ ‭attack.\n\n### Patches\n\nFix in `v1.12.1` and `v1.11.3`\n\n### Credits\n\nThe vulnerability was reported by Ada Logics during an ongoing security audit of Knative involving Ada Logics, the Knative maintainers, OSTIF and CNCF.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/unreviewed/2021/11/GHSA-356x-mxw5-7m2m/GHSA-356x-mxw5-7m2m.json b/advisories/unreviewed/2021/11/GHSA-356x-mxw5-7m2m/GHSA-356x-mxw5-7m2m.json index a6789a19043..04d3ccaa40d 100644 --- a/advisories/unreviewed/2021/11/GHSA-356x-mxw5-7m2m/GHSA-356x-mxw5-7m2m.json +++ b/advisories/unreviewed/2021/11/GHSA-356x-mxw5-7m2m/GHSA-356x-mxw5-7m2m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-3mgj-25w6-9vm6/GHSA-3mgj-25w6-9vm6.json b/advisories/unreviewed/2021/11/GHSA-3mgj-25w6-9vm6/GHSA-3mgj-25w6-9vm6.json index 76e94b36e9e..92ba1f43c8d 100644 --- a/advisories/unreviewed/2021/11/GHSA-3mgj-25w6-9vm6/GHSA-3mgj-25w6-9vm6.json +++ b/advisories/unreviewed/2021/11/GHSA-3mgj-25w6-9vm6/GHSA-3mgj-25w6-9vm6.json @@ -7,12 +7,8 @@ "CVE-2021-23197" ], "details": "Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ;", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-6wv8-rx52-7p78/GHSA-6wv8-rx52-7p78.json b/advisories/unreviewed/2021/11/GHSA-6wv8-rx52-7p78/GHSA-6wv8-rx52-7p78.json index ec155a740e2..6272ee191ed 100644 --- a/advisories/unreviewed/2021/11/GHSA-6wv8-rx52-7p78/GHSA-6wv8-rx52-7p78.json +++ b/advisories/unreviewed/2021/11/GHSA-6wv8-rx52-7p78/GHSA-6wv8-rx52-7p78.json @@ -7,12 +7,8 @@ "CVE-2021-42114" ], "details": "Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips on affected memory modules using our Blacksmith fuzzer. The patterns generated by Blacksmith were able to trigger bitflips on all 40 PC-DDR4 DRAM devices in our test pool, which cover the three major DRAM manufacturers: Samsung, SK Hynix, and Micron. This means that, even when chips advertised as Rowhammer-free are used, attackers may still be able to exploit Rowhammer. For example, this enables privilege-escalation attacks against the kernel or binaries such as the sudo binary, and also triggering bit flips in RSA-2048 keys (e.g., SSH keys) to gain cross-tenant virtual-machine access. We can confirm that DRAM devices acquired in July 2020 with DRAM chips from all three major DRAM vendors (Samsung, SK Hynix, Micron) are affected by this vulnerability. For more details, please refer to our publication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/11/GHSA-85rf-rp2v-42mg/GHSA-85rf-rp2v-42mg.json b/advisories/unreviewed/2021/11/GHSA-85rf-rp2v-42mg/GHSA-85rf-rp2v-42mg.json index 1377fe9a19d..9570624fb97 100644 --- a/advisories/unreviewed/2021/11/GHSA-85rf-rp2v-42mg/GHSA-85rf-rp2v-42mg.json +++ b/advisories/unreviewed/2021/11/GHSA-85rf-rp2v-42mg/GHSA-85rf-rp2v-42mg.json @@ -7,12 +7,8 @@ "CVE-2021-43017" ], "details": "Adobe Creative Cloud version 5.5 (and earlier) are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker could leverage this vulnerability to achieve denial of service in the context of the user. User interaction is required before product installation to abuse this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-cx49-mv5g-vq92/GHSA-cx49-mv5g-vq92.json b/advisories/unreviewed/2021/11/GHSA-cx49-mv5g-vq92/GHSA-cx49-mv5g-vq92.json index f312c157db6..d15f762c2f3 100644 --- a/advisories/unreviewed/2021/11/GHSA-cx49-mv5g-vq92/GHSA-cx49-mv5g-vq92.json +++ b/advisories/unreviewed/2021/11/GHSA-cx49-mv5g-vq92/GHSA-cx49-mv5g-vq92.json @@ -7,12 +7,8 @@ "CVE-2021-42271" ], "details": "Adobe Animate version 21.0.9 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious BMP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-f55w-cgvw-gpqx/GHSA-f55w-cgvw-gpqx.json b/advisories/unreviewed/2021/11/GHSA-f55w-cgvw-gpqx/GHSA-f55w-cgvw-gpqx.json index 73aaabc83ad..1d9a9433cde 100644 --- a/advisories/unreviewed/2021/11/GHSA-f55w-cgvw-gpqx/GHSA-f55w-cgvw-gpqx.json +++ b/advisories/unreviewed/2021/11/GHSA-f55w-cgvw-gpqx/GHSA-f55w-cgvw-gpqx.json @@ -7,12 +7,8 @@ "CVE-2021-24847" ], "details": "The importFromRedirection AJAX action of the SEO Redirection Plugin – 301 Redirect Manager WordPress plugin before 8.2, available to any authenticated user, does not properly sanitise the offset parameter before using it in a SQL statement, leading an SQL injection when the redirection plugin is also installed", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-fg56-pqv7-fm98/GHSA-fg56-pqv7-fm98.json b/advisories/unreviewed/2021/11/GHSA-fg56-pqv7-fm98/GHSA-fg56-pqv7-fm98.json index 8029e7924df..903462d8635 100644 --- a/advisories/unreviewed/2021/11/GHSA-fg56-pqv7-fm98/GHSA-fg56-pqv7-fm98.json +++ b/advisories/unreviewed/2021/11/GHSA-fg56-pqv7-fm98/GHSA-fg56-pqv7-fm98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-g4wc-rmhv-rw6w/GHSA-g4wc-rmhv-rw6w.json b/advisories/unreviewed/2021/11/GHSA-g4wc-rmhv-rw6w/GHSA-g4wc-rmhv-rw6w.json index e121731840b..07e40102645 100644 --- a/advisories/unreviewed/2021/11/GHSA-g4wc-rmhv-rw6w/GHSA-g4wc-rmhv-rw6w.json +++ b/advisories/unreviewed/2021/11/GHSA-g4wc-rmhv-rw6w/GHSA-g4wc-rmhv-rw6w.json @@ -7,12 +7,8 @@ "CVE-2020-12903" ], "details": "Out of Bounds Write and Read in AMD Graphics Driver for Windows 10 in Escape 0x6002d03 may lead to escalation of privilege or denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-m56v-x7xr-772p/GHSA-m56v-x7xr-772p.json b/advisories/unreviewed/2021/11/GHSA-m56v-x7xr-772p/GHSA-m56v-x7xr-772p.json index fb9f2777a43..14f01a5d6d1 100644 --- a/advisories/unreviewed/2021/11/GHSA-m56v-x7xr-772p/GHSA-m56v-x7xr-772p.json +++ b/advisories/unreviewed/2021/11/GHSA-m56v-x7xr-772p/GHSA-m56v-x7xr-772p.json @@ -7,12 +7,8 @@ "CVE-2021-0158" ], "details": "Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-pg5c-prwq-r9cc/GHSA-pg5c-prwq-r9cc.json b/advisories/unreviewed/2021/11/GHSA-pg5c-prwq-r9cc/GHSA-pg5c-prwq-r9cc.json index 20faf78bf2c..cda260e28be 100644 --- a/advisories/unreviewed/2021/11/GHSA-pg5c-prwq-r9cc/GHSA-pg5c-prwq-r9cc.json +++ b/advisories/unreviewed/2021/11/GHSA-pg5c-prwq-r9cc/GHSA-pg5c-prwq-r9cc.json @@ -7,12 +7,8 @@ "CVE-2020-12904" ], "details": "Out of Bounds Read in AMD Graphics Driver for Windows 10 in Escape 0x3004203 may lead to arbitrary information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-qg7x-g66q-6pmh/GHSA-qg7x-g66q-6pmh.json b/advisories/unreviewed/2021/11/GHSA-qg7x-g66q-6pmh/GHSA-qg7x-g66q-6pmh.json index 10627396865..04181098182 100644 --- a/advisories/unreviewed/2021/11/GHSA-qg7x-g66q-6pmh/GHSA-qg7x-g66q-6pmh.json +++ b/advisories/unreviewed/2021/11/GHSA-qg7x-g66q-6pmh/GHSA-qg7x-g66q-6pmh.json @@ -7,12 +7,8 @@ "CVE-2021-26327" ], "details": "Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-vxp2-rm45-4pjg/GHSA-vxp2-rm45-4pjg.json b/advisories/unreviewed/2021/11/GHSA-vxp2-rm45-4pjg/GHSA-vxp2-rm45-4pjg.json index deced68d718..d3f1a6b205c 100644 --- a/advisories/unreviewed/2021/11/GHSA-vxp2-rm45-4pjg/GHSA-vxp2-rm45-4pjg.json +++ b/advisories/unreviewed/2021/11/GHSA-vxp2-rm45-4pjg/GHSA-vxp2-rm45-4pjg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-wqw8-8r4w-rccx/GHSA-wqw8-8r4w-rccx.json b/advisories/unreviewed/2021/11/GHSA-wqw8-8r4w-rccx/GHSA-wqw8-8r4w-rccx.json index f84a94b1e09..029868ef11d 100644 --- a/advisories/unreviewed/2021/11/GHSA-wqw8-8r4w-rccx/GHSA-wqw8-8r4w-rccx.json +++ b/advisories/unreviewed/2021/11/GHSA-wqw8-8r4w-rccx/GHSA-wqw8-8r4w-rccx.json @@ -7,12 +7,8 @@ "CVE-2021-42731" ], "details": "Adobe InDesign versions 16.4 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-xh4g-88qm-9p7r/GHSA-xh4g-88qm-9p7r.json b/advisories/unreviewed/2021/11/GHSA-xh4g-88qm-9p7r/GHSA-xh4g-88qm-9p7r.json index f3771344d98..db01f95ed29 100644 --- a/advisories/unreviewed/2021/11/GHSA-xh4g-88qm-9p7r/GHSA-xh4g-88qm-9p7r.json +++ b/advisories/unreviewed/2021/11/GHSA-xh4g-88qm-9p7r/GHSA-xh4g-88qm-9p7r.json @@ -7,12 +7,8 @@ "CVE-2021-32234" ], "details": "SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/11/GHSA-xp3r-c9h3-vjc7/GHSA-xp3r-c9h3-vjc7.json b/advisories/unreviewed/2021/11/GHSA-xp3r-c9h3-vjc7/GHSA-xp3r-c9h3-vjc7.json index 817a91a9219..e4fd6a4acd5 100644 --- a/advisories/unreviewed/2021/11/GHSA-xp3r-c9h3-vjc7/GHSA-xp3r-c9h3-vjc7.json +++ b/advisories/unreviewed/2021/11/GHSA-xp3r-c9h3-vjc7/GHSA-xp3r-c9h3-vjc7.json @@ -7,12 +7,8 @@ "CVE-2021-33071" ], "details": "Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-4jrj-gxg8-2frj/GHSA-4jrj-gxg8-2frj.json b/advisories/unreviewed/2022/02/GHSA-4jrj-gxg8-2frj/GHSA-4jrj-gxg8-2frj.json index 4f2014c260a..cf046e4bb3d 100644 --- a/advisories/unreviewed/2022/02/GHSA-4jrj-gxg8-2frj/GHSA-4jrj-gxg8-2frj.json +++ b/advisories/unreviewed/2022/02/GHSA-4jrj-gxg8-2frj/GHSA-4jrj-gxg8-2frj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-5r96-55w4-xch3/GHSA-5r96-55w4-xch3.json b/advisories/unreviewed/2022/02/GHSA-5r96-55w4-xch3/GHSA-5r96-55w4-xch3.json index 414a3fbd032..39ca2018342 100644 --- a/advisories/unreviewed/2022/02/GHSA-5r96-55w4-xch3/GHSA-5r96-55w4-xch3.json +++ b/advisories/unreviewed/2022/02/GHSA-5r96-55w4-xch3/GHSA-5r96-55w4-xch3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-8crm-4582-5p48/GHSA-8crm-4582-5p48.json b/advisories/unreviewed/2022/02/GHSA-8crm-4582-5p48/GHSA-8crm-4582-5p48.json index a8ee68e8ffd..fb2210357a6 100644 --- a/advisories/unreviewed/2022/02/GHSA-8crm-4582-5p48/GHSA-8crm-4582-5p48.json +++ b/advisories/unreviewed/2022/02/GHSA-8crm-4582-5p48/GHSA-8crm-4582-5p48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-9358-2j57-j7hg/GHSA-9358-2j57-j7hg.json b/advisories/unreviewed/2022/02/GHSA-9358-2j57-j7hg/GHSA-9358-2j57-j7hg.json index b090c0738e2..cae6443e092 100644 --- a/advisories/unreviewed/2022/02/GHSA-9358-2j57-j7hg/GHSA-9358-2j57-j7hg.json +++ b/advisories/unreviewed/2022/02/GHSA-9358-2j57-j7hg/GHSA-9358-2j57-j7hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-cwp3-mhhm-w8cr/GHSA-cwp3-mhhm-w8cr.json b/advisories/unreviewed/2022/02/GHSA-cwp3-mhhm-w8cr/GHSA-cwp3-mhhm-w8cr.json index 834f84a5634..693b3909641 100644 --- a/advisories/unreviewed/2022/02/GHSA-cwp3-mhhm-w8cr/GHSA-cwp3-mhhm-w8cr.json +++ b/advisories/unreviewed/2022/02/GHSA-cwp3-mhhm-w8cr/GHSA-cwp3-mhhm-w8cr.json @@ -7,12 +7,8 @@ "CVE-2021-23201" ], "details": "NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may allow a user with elevated privileges to generate valid microcode. This could lead to information disclosure, data corruption, or denial of service of the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-jpxp-6rp5-3wg3/GHSA-jpxp-6rp5-3wg3.json b/advisories/unreviewed/2022/02/GHSA-jpxp-6rp5-3wg3/GHSA-jpxp-6rp5-3wg3.json index 1cc24d56ef3..9d00409031d 100644 --- a/advisories/unreviewed/2022/02/GHSA-jpxp-6rp5-3wg3/GHSA-jpxp-6rp5-3wg3.json +++ b/advisories/unreviewed/2022/02/GHSA-jpxp-6rp5-3wg3/GHSA-jpxp-6rp5-3wg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-mv97-qj5h-25f3/GHSA-mv97-qj5h-25f3.json b/advisories/unreviewed/2022/02/GHSA-mv97-qj5h-25f3/GHSA-mv97-qj5h-25f3.json index 94866851c7b..e0969c0e796 100644 --- a/advisories/unreviewed/2022/02/GHSA-mv97-qj5h-25f3/GHSA-mv97-qj5h-25f3.json +++ b/advisories/unreviewed/2022/02/GHSA-mv97-qj5h-25f3/GHSA-mv97-qj5h-25f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-vchr-42h7-32xh/GHSA-vchr-42h7-32xh.json b/advisories/unreviewed/2022/02/GHSA-vchr-42h7-32xh/GHSA-vchr-42h7-32xh.json index 8f50779331b..d7f78df4442 100644 --- a/advisories/unreviewed/2022/02/GHSA-vchr-42h7-32xh/GHSA-vchr-42h7-32xh.json +++ b/advisories/unreviewed/2022/02/GHSA-vchr-42h7-32xh/GHSA-vchr-42h7-32xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2696-m9wq-rxcm/GHSA-2696-m9wq-rxcm.json b/advisories/unreviewed/2022/05/GHSA-2696-m9wq-rxcm/GHSA-2696-m9wq-rxcm.json index 8188f438e82..ca39346a9d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2696-m9wq-rxcm/GHSA-2696-m9wq-rxcm.json +++ b/advisories/unreviewed/2022/05/GHSA-2696-m9wq-rxcm/GHSA-2696-m9wq-rxcm.json @@ -7,12 +7,8 @@ "CVE-2009-1330" ], "details": "Stack-based buffer overflow in Easy RM to MP3 Converter allows remote attackers to execute arbitrary code via a long filename in a playlist (.pls) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26jr-v9qp-4w77/GHSA-26jr-v9qp-4w77.json b/advisories/unreviewed/2022/05/GHSA-26jr-v9qp-4w77/GHSA-26jr-v9qp-4w77.json index 494e8ca0c9b..1a51c8c29fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-26jr-v9qp-4w77/GHSA-26jr-v9qp-4w77.json +++ b/advisories/unreviewed/2022/05/GHSA-26jr-v9qp-4w77/GHSA-26jr-v9qp-4w77.json @@ -7,12 +7,8 @@ "CVE-2009-1263" ], "details": "SQL injection vulnerability in sub_commententry.php in the BookJoomlas (com_bookjoomlas) component 0.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the gbid parameter in a comment action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-275w-m9g6-w2cc/GHSA-275w-m9g6-w2cc.json b/advisories/unreviewed/2022/05/GHSA-275w-m9g6-w2cc/GHSA-275w-m9g6-w2cc.json index 1fd4578b3a5..216605ea836 100644 --- a/advisories/unreviewed/2022/05/GHSA-275w-m9g6-w2cc/GHSA-275w-m9g6-w2cc.json +++ b/advisories/unreviewed/2022/05/GHSA-275w-m9g6-w2cc/GHSA-275w-m9g6-w2cc.json @@ -7,12 +7,8 @@ "CVE-2009-1305" ], "details": "The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-28cw-qr46-rx46/GHSA-28cw-qr46-rx46.json b/advisories/unreviewed/2022/05/GHSA-28cw-qr46-rx46/GHSA-28cw-qr46-rx46.json index 1c5a5098c25..d76c90d4114 100644 --- a/advisories/unreviewed/2022/05/GHSA-28cw-qr46-rx46/GHSA-28cw-qr46-rx46.json +++ b/advisories/unreviewed/2022/05/GHSA-28cw-qr46-rx46/GHSA-28cw-qr46-rx46.json @@ -7,12 +7,8 @@ "CVE-2009-1272" ], "details": "The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x before 5.2.9 allows context-dependent attackers to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28m5-rq67-v9jp/GHSA-28m5-rq67-v9jp.json b/advisories/unreviewed/2022/05/GHSA-28m5-rq67-v9jp/GHSA-28m5-rq67-v9jp.json index 41e8e435532..95c5d9fb555 100644 --- a/advisories/unreviewed/2022/05/GHSA-28m5-rq67-v9jp/GHSA-28m5-rq67-v9jp.json +++ b/advisories/unreviewed/2022/05/GHSA-28m5-rq67-v9jp/GHSA-28m5-rq67-v9jp.json @@ -7,12 +7,8 @@ "CVE-2009-1407" ], "details": "Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28q8-3hq4-6hmv/GHSA-28q8-3hq4-6hmv.json b/advisories/unreviewed/2022/05/GHSA-28q8-3hq4-6hmv/GHSA-28q8-3hq4-6hmv.json index 62147ea9806..f4c04c64598 100644 --- a/advisories/unreviewed/2022/05/GHSA-28q8-3hq4-6hmv/GHSA-28q8-3hq4-6hmv.json +++ b/advisories/unreviewed/2022/05/GHSA-28q8-3hq4-6hmv/GHSA-28q8-3hq4-6hmv.json @@ -7,12 +7,8 @@ "CVE-2009-1001" ], "details": "Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 Gold through SP6 allows remote authenticated users to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29xr-pwpr-24h3/GHSA-29xr-pwpr-24h3.json b/advisories/unreviewed/2022/05/GHSA-29xr-pwpr-24h3/GHSA-29xr-pwpr-24h3.json index 041ebe181d6..5ca1c0605fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-29xr-pwpr-24h3/GHSA-29xr-pwpr-24h3.json +++ b/advisories/unreviewed/2022/05/GHSA-29xr-pwpr-24h3/GHSA-29xr-pwpr-24h3.json @@ -7,12 +7,8 @@ "CVE-2009-1255" ], "details": "The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c4q-6j77-737f/GHSA-2c4q-6j77-737f.json b/advisories/unreviewed/2022/05/GHSA-2c4q-6j77-737f/GHSA-2c4q-6j77-737f.json index 62fde8a923a..e1fa19b1a7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c4q-6j77-737f/GHSA-2c4q-6j77-737f.json +++ b/advisories/unreviewed/2022/05/GHSA-2c4q-6j77-737f/GHSA-2c4q-6j77-737f.json @@ -7,12 +7,8 @@ "CVE-2009-1148" ], "details": "Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file_path parameter ($filename variable).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c6j-6c2w-2x6q/GHSA-2c6j-6c2w-2x6q.json b/advisories/unreviewed/2022/05/GHSA-2c6j-6c2w-2x6q/GHSA-2c6j-6c2w-2x6q.json index 7e1be1a4d5a..c665fd4573f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c6j-6c2w-2x6q/GHSA-2c6j-6c2w-2x6q.json +++ b/advisories/unreviewed/2022/05/GHSA-2c6j-6c2w-2x6q/GHSA-2c6j-6c2w-2x6q.json @@ -7,12 +7,8 @@ "CVE-2009-1208" ], "details": "SQL injection vulnerability in auth2db 0.2.5, and possibly other versions before 0.2.7, uses the addslashes function instead of the mysql_real_escape_string function, which allows remote attackers to conduct SQL injection attacks using multibyte character encodings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c9q-p5rf-5vp8/GHSA-2c9q-p5rf-5vp8.json b/advisories/unreviewed/2022/05/GHSA-2c9q-p5rf-5vp8/GHSA-2c9q-p5rf-5vp8.json index 2b573ff69ad..068e31d5394 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c9q-p5rf-5vp8/GHSA-2c9q-p5rf-5vp8.json +++ b/advisories/unreviewed/2022/05/GHSA-2c9q-p5rf-5vp8/GHSA-2c9q-p5rf-5vp8.json @@ -7,12 +7,8 @@ "CVE-2009-1271" ], "details": "The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -108,9 +104,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2f3m-q67g-g8rh/GHSA-2f3m-q67g-g8rh.json b/advisories/unreviewed/2022/05/GHSA-2f3m-q67g-g8rh/GHSA-2f3m-q67g-g8rh.json index 4800b97694c..92d1ef971f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f3m-q67g-g8rh/GHSA-2f3m-q67g-g8rh.json +++ b/advisories/unreviewed/2022/05/GHSA-2f3m-q67g-g8rh/GHSA-2f3m-q67g-g8rh.json @@ -7,12 +7,8 @@ "CVE-2009-0974" ], "details": "Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0983 and CVE-2009-3407.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2gc6-52qh-cwwj/GHSA-2gc6-52qh-cwwj.json b/advisories/unreviewed/2022/05/GHSA-2gc6-52qh-cwwj/GHSA-2gc6-52qh-cwwj.json index 23b353db282..9584d109c9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gc6-52qh-cwwj/GHSA-2gc6-52qh-cwwj.json +++ b/advisories/unreviewed/2022/05/GHSA-2gc6-52qh-cwwj/GHSA-2gc6-52qh-cwwj.json @@ -7,12 +7,8 @@ "CVE-2009-1128" ], "details": "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 95 native file format, leading to memory corruption, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1129.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gx5-q2jh-jjv8/GHSA-2gx5-q2jh-jjv8.json b/advisories/unreviewed/2022/05/GHSA-2gx5-q2jh-jjv8/GHSA-2gx5-q2jh-jjv8.json index 9b93080fd97..641f0d104f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gx5-q2jh-jjv8/GHSA-2gx5-q2jh-jjv8.json +++ b/advisories/unreviewed/2022/05/GHSA-2gx5-q2jh-jjv8/GHSA-2gx5-q2jh-jjv8.json @@ -7,12 +7,8 @@ "CVE-2009-1027" ], "details": "SQL injection vulnerability in OpenCart 1.1.8 allows remote attackers to execute arbitrary SQL commands via the order parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gxq-fc5q-r9gc/GHSA-2gxq-fc5q-r9gc.json b/advisories/unreviewed/2022/05/GHSA-2gxq-fc5q-r9gc/GHSA-2gxq-fc5q-r9gc.json index 52529c22cac..ea9ab5ddb80 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gxq-fc5q-r9gc/GHSA-2gxq-fc5q-r9gc.json +++ b/advisories/unreviewed/2022/05/GHSA-2gxq-fc5q-r9gc/GHSA-2gxq-fc5q-r9gc.json @@ -7,12 +7,8 @@ "CVE-2009-1404" ], "details": "SQL injection vulnerability in admin.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user (Username) parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mr8-vqq3-7957/GHSA-2mr8-vqq3-7957.json b/advisories/unreviewed/2022/05/GHSA-2mr8-vqq3-7957/GHSA-2mr8-vqq3-7957.json index a9540042f3a..9715cd45186 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mr8-vqq3-7957/GHSA-2mr8-vqq3-7957.json +++ b/advisories/unreviewed/2022/05/GHSA-2mr8-vqq3-7957/GHSA-2mr8-vqq3-7957.json @@ -7,12 +7,8 @@ "CVE-2009-1176" ], "details": "mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mxv-g6h6-532m/GHSA-2mxv-g6h6-532m.json b/advisories/unreviewed/2022/05/GHSA-2mxv-g6h6-532m/GHSA-2mxv-g6h6-532m.json index 5eef248783b..a30d7b82d20 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mxv-g6h6-532m/GHSA-2mxv-g6h6-532m.json +++ b/advisories/unreviewed/2022/05/GHSA-2mxv-g6h6-532m/GHSA-2mxv-g6h6-532m.json @@ -7,12 +7,8 @@ "CVE-2009-1435" ], "details": "NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p3w-xr34-xpgc/GHSA-2p3w-xr34-xpgc.json b/advisories/unreviewed/2022/05/GHSA-2p3w-xr34-xpgc/GHSA-2p3w-xr34-xpgc.json index 0ff00213edd..eba28be741d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p3w-xr34-xpgc/GHSA-2p3w-xr34-xpgc.json +++ b/advisories/unreviewed/2022/05/GHSA-2p3w-xr34-xpgc/GHSA-2p3w-xr34-xpgc.json @@ -7,12 +7,8 @@ "CVE-2009-0973" ], "details": "Unspecified vulnerability in the Cluster Ready Services component in Oracle Database 10.1.0.5 allows remote attackers to affect availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2q28-m2rp-3xjj/GHSA-2q28-m2rp-3xjj.json b/advisories/unreviewed/2022/05/GHSA-2q28-m2rp-3xjj/GHSA-2q28-m2rp-3xjj.json index 64be14e387f..9f30c4a436b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q28-m2rp-3xjj/GHSA-2q28-m2rp-3xjj.json +++ b/advisories/unreviewed/2022/05/GHSA-2q28-m2rp-3xjj/GHSA-2q28-m2rp-3xjj.json @@ -7,12 +7,8 @@ "CVE-2009-1468" ], "details": "Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vw5-8crq-9vmf/GHSA-2vw5-8crq-9vmf.json b/advisories/unreviewed/2022/05/GHSA-2vw5-8crq-9vmf/GHSA-2vw5-8crq-9vmf.json index 43d21b5494e..2ac06d9bfa6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vw5-8crq-9vmf/GHSA-2vw5-8crq-9vmf.json +++ b/advisories/unreviewed/2022/05/GHSA-2vw5-8crq-9vmf/GHSA-2vw5-8crq-9vmf.json @@ -7,12 +7,8 @@ "CVE-2009-0747" ], "details": "The ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 uses the i_size_high structure member during operations on arbitrary types of files, which allows local users to cause a denial of service (CPU consumption and error-message flood) by attempting to mount a crafted ext4 filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wg6-6w9v-622w/GHSA-2wg6-6w9v-622w.json b/advisories/unreviewed/2022/05/GHSA-2wg6-6w9v-622w/GHSA-2wg6-6w9v-622w.json index a2cfefe7710..6bed12e9cbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wg6-6w9v-622w/GHSA-2wg6-6w9v-622w.json +++ b/advisories/unreviewed/2022/05/GHSA-2wg6-6w9v-622w/GHSA-2wg6-6w9v-622w.json @@ -7,12 +7,8 @@ "CVE-2009-1436" ], "details": "The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wp4-jvcq-g9p9/GHSA-2wp4-jvcq-g9p9.json b/advisories/unreviewed/2022/05/GHSA-2wp4-jvcq-g9p9/GHSA-2wp4-jvcq-g9p9.json index b81e506093c..4210718a569 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wp4-jvcq-g9p9/GHSA-2wp4-jvcq-g9p9.json +++ b/advisories/unreviewed/2022/05/GHSA-2wp4-jvcq-g9p9/GHSA-2wp4-jvcq-g9p9.json @@ -7,12 +7,8 @@ "CVE-2009-1269" ], "details": "Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted Tektronix .rf5 file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2xj8-3jr2-7qw3/GHSA-2xj8-3jr2-7qw3.json b/advisories/unreviewed/2022/05/GHSA-2xj8-3jr2-7qw3/GHSA-2xj8-3jr2-7qw3.json index 76e4692db0c..d8c9632b25b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xj8-3jr2-7qw3/GHSA-2xj8-3jr2-7qw3.json +++ b/advisories/unreviewed/2022/05/GHSA-2xj8-3jr2-7qw3/GHSA-2xj8-3jr2-7qw3.json @@ -7,12 +7,8 @@ "CVE-2009-1251" ], "details": "Heap-based buffer overflow in the cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58 on Unix platforms allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via an RX response containing more data than specified in a request, related to use of XDR arrays.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-353f-jcfv-fpmh/GHSA-353f-jcfv-fpmh.json b/advisories/unreviewed/2022/05/GHSA-353f-jcfv-fpmh/GHSA-353f-jcfv-fpmh.json index b1e057a62d4..f2687ee46d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-353f-jcfv-fpmh/GHSA-353f-jcfv-fpmh.json +++ b/advisories/unreviewed/2022/05/GHSA-353f-jcfv-fpmh/GHSA-353f-jcfv-fpmh.json @@ -7,12 +7,8 @@ "CVE-2009-1391" ], "details": "Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36gf-xprp-mg7j/GHSA-36gf-xprp-mg7j.json b/advisories/unreviewed/2022/05/GHSA-36gf-xprp-mg7j/GHSA-36gf-xprp-mg7j.json index d34258232dc..fee8f031085 100644 --- a/advisories/unreviewed/2022/05/GHSA-36gf-xprp-mg7j/GHSA-36gf-xprp-mg7j.json +++ b/advisories/unreviewed/2022/05/GHSA-36gf-xprp-mg7j/GHSA-36gf-xprp-mg7j.json @@ -7,12 +7,8 @@ "CVE-2009-1299" ], "details": "The pa_make_secure_dir function in core-util.c in PulseAudio 0.9.10 and 0.9.19 allows local users to change the ownership and permissions of arbitrary files via a symlink attack on a /tmp/.esd-##### temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38f7-2qg7-wj3f/GHSA-38f7-2qg7-wj3f.json b/advisories/unreviewed/2022/05/GHSA-38f7-2qg7-wj3f/GHSA-38f7-2qg7-wj3f.json index f0cac69f7c1..823f930cd4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-38f7-2qg7-wj3f/GHSA-38f7-2qg7-wj3f.json +++ b/advisories/unreviewed/2022/05/GHSA-38f7-2qg7-wj3f/GHSA-38f7-2qg7-wj3f.json @@ -7,12 +7,8 @@ "CVE-2009-1316" ], "details": "Multiple SQL injection vulnerabilities in AbleSpace 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to events_view.php and the (2) id parameter to events_clndr_view.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-395f-pvp5-hvp6/GHSA-395f-pvp5-hvp6.json b/advisories/unreviewed/2022/05/GHSA-395f-pvp5-hvp6/GHSA-395f-pvp5-hvp6.json index 64dc24ebb0c..2218b0a7535 100644 --- a/advisories/unreviewed/2022/05/GHSA-395f-pvp5-hvp6/GHSA-395f-pvp5-hvp6.json +++ b/advisories/unreviewed/2022/05/GHSA-395f-pvp5-hvp6/GHSA-395f-pvp5-hvp6.json @@ -7,12 +7,8 @@ "CVE-2009-1285" ], "details": "Static code injection vulnerability in the getConfigFile function in setup/lib/ConfigFile.class.php in phpMyAdmin 3.x before 3.1.3.2 allows remote attackers to inject arbitrary PHP code into configuration files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3ccf-m6m7-82wh/GHSA-3ccf-m6m7-82wh.json b/advisories/unreviewed/2022/05/GHSA-3ccf-m6m7-82wh/GHSA-3ccf-m6m7-82wh.json index f2de59295aa..8e9d5a936cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ccf-m6m7-82wh/GHSA-3ccf-m6m7-82wh.json +++ b/advisories/unreviewed/2022/05/GHSA-3ccf-m6m7-82wh/GHSA-3ccf-m6m7-82wh.json @@ -7,12 +7,8 @@ "CVE-2009-1422" ], "details": "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to gain privileges via unknown vectors, aka PR_41209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cfj-r393-3gq3/GHSA-3cfj-r393-3gq3.json b/advisories/unreviewed/2022/05/GHSA-3cfj-r393-3gq3/GHSA-3cfj-r393-3gq3.json index cf0bf6ac911..03449cba289 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cfj-r393-3gq3/GHSA-3cfj-r393-3gq3.json +++ b/advisories/unreviewed/2022/05/GHSA-3cfj-r393-3gq3/GHSA-3cfj-r393-3gq3.json @@ -7,12 +7,8 @@ "CVE-2009-1300" ], "details": "apt 0.7.20 does not check when the date command returns an \"invalid date\" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f94-qwfc-p8gc/GHSA-3f94-qwfc-p8gc.json b/advisories/unreviewed/2022/05/GHSA-3f94-qwfc-p8gc/GHSA-3f94-qwfc-p8gc.json index b0acf4a8edf..4dfc6b26f67 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f94-qwfc-p8gc/GHSA-3f94-qwfc-p8gc.json +++ b/advisories/unreviewed/2022/05/GHSA-3f94-qwfc-p8gc/GHSA-3f94-qwfc-p8gc.json @@ -7,12 +7,8 @@ "CVE-2009-1063" ], "details": "Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hc9-g94f-5g9h/GHSA-3hc9-g94f-5g9h.json b/advisories/unreviewed/2022/05/GHSA-3hc9-g94f-5g9h/GHSA-3hc9-g94f-5g9h.json index 64f582ae4de..4f5d3c601e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hc9-g94f-5g9h/GHSA-3hc9-g94f-5g9h.json +++ b/advisories/unreviewed/2022/05/GHSA-3hc9-g94f-5g9h/GHSA-3hc9-g94f-5g9h.json @@ -7,12 +7,8 @@ "CVE-2009-1261" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Web Help Desk 9.1.22 (evaluation version) allow remote attackers to inject arbitrary web script or HTML via the (1) Report Name, (2) Asset No., and (3) Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jjw-w3h4-qj5p/GHSA-3jjw-w3h4-qj5p.json b/advisories/unreviewed/2022/05/GHSA-3jjw-w3h4-qj5p/GHSA-3jjw-w3h4-qj5p.json index dcd79e46bf9..8245b075d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jjw-w3h4-qj5p/GHSA-3jjw-w3h4-qj5p.json +++ b/advisories/unreviewed/2022/05/GHSA-3jjw-w3h4-qj5p/GHSA-3jjw-w3h4-qj5p.json @@ -7,12 +7,8 @@ "CVE-2009-1069" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mmx-h8fr-v7j4/GHSA-3mmx-h8fr-v7j4.json b/advisories/unreviewed/2022/05/GHSA-3mmx-h8fr-v7j4/GHSA-3mmx-h8fr-v7j4.json index cdd062d040b..3637b467346 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mmx-h8fr-v7j4/GHSA-3mmx-h8fr-v7j4.json +++ b/advisories/unreviewed/2022/05/GHSA-3mmx-h8fr-v7j4/GHSA-3mmx-h8fr-v7j4.json @@ -7,12 +7,8 @@ "CVE-2009-1312" ], "details": "Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3ph4-q4px-cwq5/GHSA-3ph4-q4px-cwq5.json b/advisories/unreviewed/2022/05/GHSA-3ph4-q4px-cwq5/GHSA-3ph4-q4px-cwq5.json index ba1b18dba90..f631aa4a39d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ph4-q4px-cwq5/GHSA-3ph4-q4px-cwq5.json +++ b/advisories/unreviewed/2022/05/GHSA-3ph4-q4px-cwq5/GHSA-3ph4-q4px-cwq5.json @@ -7,12 +7,8 @@ "CVE-2009-1406" ], "details": "Directory traversal vulnerability in cms_detect.php in TotalCalendar 2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the include parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pp9-5q74-pq79/GHSA-3pp9-5q74-pq79.json b/advisories/unreviewed/2022/05/GHSA-3pp9-5q74-pq79/GHSA-3pp9-5q74-pq79.json index c6843de465b..7f163132e6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pp9-5q74-pq79/GHSA-3pp9-5q74-pq79.json +++ b/advisories/unreviewed/2022/05/GHSA-3pp9-5q74-pq79/GHSA-3pp9-5q74-pq79.json @@ -7,12 +7,8 @@ "CVE-2009-1244" ], "details": "Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 1.x before 1.0.9 build 156507 and 2.x before 2.0.1 build 156745; VMware Fusion before 2.0.4 build 159196; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to execute arbitrary code on the host OS via unknown vectors, a different vulnerability than CVE-2008-4916.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3qjr-xcph-fm5w/GHSA-3qjr-xcph-fm5w.json b/advisories/unreviewed/2022/05/GHSA-3qjr-xcph-fm5w/GHSA-3qjr-xcph-fm5w.json index 6858245106f..10903fc17a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qjr-xcph-fm5w/GHSA-3qjr-xcph-fm5w.json +++ b/advisories/unreviewed/2022/05/GHSA-3qjr-xcph-fm5w/GHSA-3qjr-xcph-fm5w.json @@ -7,12 +7,8 @@ "CVE-2009-0999" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rh3-x38g-8fjx/GHSA-3rh3-x38g-8fjx.json b/advisories/unreviewed/2022/05/GHSA-3rh3-x38g-8fjx/GHSA-3rh3-x38g-8fjx.json index 47579d00d25..c87628dbc0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rh3-x38g-8fjx/GHSA-3rh3-x38g-8fjx.json +++ b/advisories/unreviewed/2022/05/GHSA-3rh3-x38g-8fjx/GHSA-3rh3-x38g-8fjx.json @@ -7,12 +7,8 @@ "CVE-2009-0978" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0975.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vw3-8gqg-phx5/GHSA-3vw3-8gqg-phx5.json b/advisories/unreviewed/2022/05/GHSA-3vw3-8gqg-phx5/GHSA-3vw3-8gqg-phx5.json index a30299c22f6..b349b66e2c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vw3-8gqg-phx5/GHSA-3vw3-8gqg-phx5.json +++ b/advisories/unreviewed/2022/05/GHSA-3vw3-8gqg-phx5/GHSA-3vw3-8gqg-phx5.json @@ -7,12 +7,8 @@ "CVE-2009-1136" ], "details": "The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1 for the 2007 Microsoft Office System, Internet Security and Acceleration (ISA) Server 2004 SP3 and 2006 Gold and SP1, and Office Small Business Accounting 2006, when used in Internet Explorer, allows remote attackers to execute arbitrary code via a crafted call to the msDataSourceObject method, as exploited in the wild in July and August 2009, aka \"Office Web Components HTML Script Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wf3-2hqv-7qjg/GHSA-3wf3-2hqv-7qjg.json b/advisories/unreviewed/2022/05/GHSA-3wf3-2hqv-7qjg/GHSA-3wf3-2hqv-7qjg.json index 8e97b977580..05de77004a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wf3-2hqv-7qjg/GHSA-3wf3-2hqv-7qjg.json +++ b/advisories/unreviewed/2022/05/GHSA-3wf3-2hqv-7qjg/GHSA-3wf3-2hqv-7qjg.json @@ -7,12 +7,8 @@ "CVE-2009-0943" ], "details": "Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42hg-rvmv-77p2/GHSA-42hg-rvmv-77p2.json b/advisories/unreviewed/2022/05/GHSA-42hg-rvmv-77p2/GHSA-42hg-rvmv-77p2.json index 0c96d4ba840..fac54f6b673 100644 --- a/advisories/unreviewed/2022/05/GHSA-42hg-rvmv-77p2/GHSA-42hg-rvmv-77p2.json +++ b/advisories/unreviewed/2022/05/GHSA-42hg-rvmv-77p2/GHSA-42hg-rvmv-77p2.json @@ -7,12 +7,8 @@ "CVE-2009-0988" ], "details": "Unspecified vulnerability in the Password Policy component in Oracle Database 11.1.0.6 allows remote authenticated users to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4549-74j3-3jwv/GHSA-4549-74j3-3jwv.json b/advisories/unreviewed/2022/05/GHSA-4549-74j3-3jwv/GHSA-4549-74j3-3jwv.json index 91ef47bbbe4..42fdab0adf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4549-74j3-3jwv/GHSA-4549-74j3-3jwv.json +++ b/advisories/unreviewed/2022/05/GHSA-4549-74j3-3jwv/GHSA-4549-74j3-3jwv.json @@ -7,12 +7,8 @@ "CVE-2009-1266" ], "details": "Unspecified vulnerability in Wireshark before 1.0.7 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-466g-m7c7-p5x4/GHSA-466g-m7c7-p5x4.json b/advisories/unreviewed/2022/05/GHSA-466g-m7c7-p5x4/GHSA-466g-m7c7-p5x4.json index e63262644eb..ba6544b8dba 100644 --- a/advisories/unreviewed/2022/05/GHSA-466g-m7c7-p5x4/GHSA-466g-m7c7-p5x4.json +++ b/advisories/unreviewed/2022/05/GHSA-466g-m7c7-p5x4/GHSA-466g-m7c7-p5x4.json @@ -7,12 +7,8 @@ "CVE-2009-1462" ], "details": "The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cg8-xrm2-gjxf/GHSA-4cg8-xrm2-gjxf.json b/advisories/unreviewed/2022/05/GHSA-4cg8-xrm2-gjxf/GHSA-4cg8-xrm2-gjxf.json index 36f17b5789f..23da4f39015 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cg8-xrm2-gjxf/GHSA-4cg8-xrm2-gjxf.json +++ b/advisories/unreviewed/2022/05/GHSA-4cg8-xrm2-gjxf/GHSA-4cg8-xrm2-gjxf.json @@ -7,12 +7,8 @@ "CVE-2009-1091" ], "details": "Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fwm-f844-jr9g/GHSA-4fwm-f844-jr9g.json b/advisories/unreviewed/2022/05/GHSA-4fwm-f844-jr9g/GHSA-4fwm-f844-jr9g.json index 64391a36751..ab6916a7f40 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fwm-f844-jr9g/GHSA-4fwm-f844-jr9g.json +++ b/advisories/unreviewed/2022/05/GHSA-4fwm-f844-jr9g/GHSA-4fwm-f844-jr9g.json @@ -7,12 +7,8 @@ "CVE-2009-1287" ], "details": "Cross-site scripting (XSS) vulnerability in Cisco Subscriber Edge Services Manager (SESM) allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hfv-24jq-2qw4/GHSA-4hfv-24jq-2qw4.json b/advisories/unreviewed/2022/05/GHSA-4hfv-24jq-2qw4/GHSA-4hfv-24jq-2qw4.json index dbd4fb1e156..0899a9bff4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hfv-24jq-2qw4/GHSA-4hfv-24jq-2qw4.json +++ b/advisories/unreviewed/2022/05/GHSA-4hfv-24jq-2qw4/GHSA-4hfv-24jq-2qw4.json @@ -7,12 +7,8 @@ "CVE-2009-1441" ], "details": "Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hh3-c3j6-h827/GHSA-4hh3-c3j6-h827.json b/advisories/unreviewed/2022/05/GHSA-4hh3-c3j6-h827/GHSA-4hh3-c3j6-h827.json index b7384807edf..b07786b2a46 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hh3-c3j6-h827/GHSA-4hh3-c3j6-h827.json +++ b/advisories/unreviewed/2022/05/GHSA-4hh3-c3j6-h827/GHSA-4hh3-c3j6-h827.json @@ -7,12 +7,8 @@ "CVE-2009-1062" ], "details": "Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to trigger memory corruption and possibly execute arbitrary code via unknown attack vectors related to JBIG2, a different vulnerability than CVE-2009-0193 and CVE-2009-1061.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hqw-69p6-5rh9/GHSA-4hqw-69p6-5rh9.json b/advisories/unreviewed/2022/05/GHSA-4hqw-69p6-5rh9/GHSA-4hqw-69p6-5rh9.json index d6414ce11ab..042305b637e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hqw-69p6-5rh9/GHSA-4hqw-69p6-5rh9.json +++ b/advisories/unreviewed/2022/05/GHSA-4hqw-69p6-5rh9/GHSA-4hqw-69p6-5rh9.json @@ -7,12 +7,8 @@ "CVE-2009-1103" ], "details": "Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"deserializing applets,\" aka CR 6646860.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mcv-wp5q-9793/GHSA-4mcv-wp5q-9793.json b/advisories/unreviewed/2022/05/GHSA-4mcv-wp5q-9793/GHSA-4mcv-wp5q-9793.json index ac055f480c7..7bcdc356f35 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mcv-wp5q-9793/GHSA-4mcv-wp5q-9793.json +++ b/advisories/unreviewed/2022/05/GHSA-4mcv-wp5q-9793/GHSA-4mcv-wp5q-9793.json @@ -7,12 +7,8 @@ "CVE-2009-0966" ], "details": "PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mvv-7x66-vcqx/GHSA-4mvv-7x66-vcqx.json b/advisories/unreviewed/2022/05/GHSA-4mvv-7x66-vcqx/GHSA-4mvv-7x66-vcqx.json index e54bb37cca4..c3db9b3dc8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mvv-7x66-vcqx/GHSA-4mvv-7x66-vcqx.json +++ b/advisories/unreviewed/2022/05/GHSA-4mvv-7x66-vcqx/GHSA-4mvv-7x66-vcqx.json @@ -7,12 +7,8 @@ "CVE-2009-1215" ], "details": "Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qmv-gqgr-jxhq/GHSA-4qmv-gqgr-jxhq.json b/advisories/unreviewed/2022/05/GHSA-4qmv-gqgr-jxhq/GHSA-4qmv-gqgr-jxhq.json index 425ac9fc45e..cc91f27ab72 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qmv-gqgr-jxhq/GHSA-4qmv-gqgr-jxhq.json +++ b/advisories/unreviewed/2022/05/GHSA-4qmv-gqgr-jxhq/GHSA-4qmv-gqgr-jxhq.json @@ -7,12 +7,8 @@ "CVE-2009-1093" ], "details": "LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4rqq-8r2q-f5pj/GHSA-4rqq-8r2q-f5pj.json b/advisories/unreviewed/2022/05/GHSA-4rqq-8r2q-f5pj/GHSA-4rqq-8r2q-f5pj.json index 15704ee7854..d07301d9800 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rqq-8r2q-f5pj/GHSA-4rqq-8r2q-f5pj.json +++ b/advisories/unreviewed/2022/05/GHSA-4rqq-8r2q-f5pj/GHSA-4rqq-8r2q-f5pj.json @@ -7,12 +7,8 @@ "CVE-2009-1286" ], "details": "The IMAP task in the server in IBM Lotus Domino 8.0.2 before FP1 IF1 and 8.5 before IF3 allows remote attackers to cause a denial of service (daemon crash) via a MIME e-mail message with RFC822 attachments (aka blobs) containing malformed root entities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wcp-6gh5-j62c/GHSA-4wcp-6gh5-j62c.json b/advisories/unreviewed/2022/05/GHSA-4wcp-6gh5-j62c/GHSA-4wcp-6gh5-j62c.json index 35a44c95678..296242f4d38 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wcp-6gh5-j62c/GHSA-4wcp-6gh5-j62c.json +++ b/advisories/unreviewed/2022/05/GHSA-4wcp-6gh5-j62c/GHSA-4wcp-6gh5-j62c.json @@ -7,12 +7,8 @@ "CVE-2009-0976" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to LTADM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-526q-hx4r-93v4/GHSA-526q-hx4r-93v4.json b/advisories/unreviewed/2022/05/GHSA-526q-hx4r-93v4/GHSA-526q-hx4r-93v4.json index 53a918b7598..1a9849044a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-526q-hx4r-93v4/GHSA-526q-hx4r-93v4.json +++ b/advisories/unreviewed/2022/05/GHSA-526q-hx4r-93v4/GHSA-526q-hx4r-93v4.json @@ -7,12 +7,8 @@ "CVE-2009-1015" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticated users to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5367-pj7f-p2xr/GHSA-5367-pj7f-p2xr.json b/advisories/unreviewed/2022/05/GHSA-5367-pj7f-p2xr/GHSA-5367-pj7f-p2xr.json index 4df8b3a08c7..e635d877d6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5367-pj7f-p2xr/GHSA-5367-pj7f-p2xr.json +++ b/advisories/unreviewed/2022/05/GHSA-5367-pj7f-p2xr/GHSA-5367-pj7f-p2xr.json @@ -7,12 +7,8 @@ "CVE-2009-0977" ], "details": "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the GRANT_TYPE_ACCESS procedure in the DBMS_AQADM_SYS package.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53h4-ggf4-77wg/GHSA-53h4-ggf4-77wg.json b/advisories/unreviewed/2022/05/GHSA-53h4-ggf4-77wg/GHSA-53h4-ggf4-77wg.json index 7fdec0b50f4..c3fa04731ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-53h4-ggf4-77wg/GHSA-53h4-ggf4-77wg.json +++ b/advisories/unreviewed/2022/05/GHSA-53h4-ggf4-77wg/GHSA-53h4-ggf4-77wg.json @@ -7,12 +7,8 @@ "CVE-2009-1456" ], "details": "Directory traversal vulnerability in admin.php in Malleo 1.2.3 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the module parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53hv-rccw-5xwh/GHSA-53hv-rccw-5xwh.json b/advisories/unreviewed/2022/05/GHSA-53hv-rccw-5xwh/GHSA-53hv-rccw-5xwh.json index a6e584e19b6..aca36688bae 100644 --- a/advisories/unreviewed/2022/05/GHSA-53hv-rccw-5xwh/GHSA-53hv-rccw-5xwh.json +++ b/advisories/unreviewed/2022/05/GHSA-53hv-rccw-5xwh/GHSA-53hv-rccw-5xwh.json @@ -7,12 +7,8 @@ "CVE-2009-1324" ], "details": "Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54h3-5r8p-9v46/GHSA-54h3-5r8p-9v46.json b/advisories/unreviewed/2022/05/GHSA-54h3-5r8p-9v46/GHSA-54h3-5r8p-9v46.json index 3491a9081a0..5441b69bfa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-54h3-5r8p-9v46/GHSA-54h3-5r8p-9v46.json +++ b/advisories/unreviewed/2022/05/GHSA-54h3-5r8p-9v46/GHSA-54h3-5r8p-9v46.json @@ -7,12 +7,8 @@ "CVE-2009-0965" ], "details": "SQL injection vulnerability in functions/browse.php in Ganesha Digital Library (GDL) 4.0 and 4.2 allows remote attackers to execute arbitrary SQL commands via the node parameter in a browse action to gdl.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55j6-m45q-vmr2/GHSA-55j6-m45q-vmr2.json b/advisories/unreviewed/2022/05/GHSA-55j6-m45q-vmr2/GHSA-55j6-m45q-vmr2.json index 09ed0af8310..89eac1c2006 100644 --- a/advisories/unreviewed/2022/05/GHSA-55j6-m45q-vmr2/GHSA-55j6-m45q-vmr2.json +++ b/advisories/unreviewed/2022/05/GHSA-55j6-m45q-vmr2/GHSA-55j6-m45q-vmr2.json @@ -7,12 +7,8 @@ "CVE-2009-1092" ], "details": "Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55m7-fhr5-ph85/GHSA-55m7-fhr5-ph85.json b/advisories/unreviewed/2022/05/GHSA-55m7-fhr5-ph85/GHSA-55m7-fhr5-ph85.json index cd06d17677e..8c7dfe3e99e 100644 --- a/advisories/unreviewed/2022/05/GHSA-55m7-fhr5-ph85/GHSA-55m7-fhr5-ph85.json +++ b/advisories/unreviewed/2022/05/GHSA-55m7-fhr5-ph85/GHSA-55m7-fhr5-ph85.json @@ -7,12 +7,8 @@ "CVE-2009-1318" ], "details": "Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-578c-38fg-wf3m/GHSA-578c-38fg-wf3m.json b/advisories/unreviewed/2022/05/GHSA-578c-38fg-wf3m/GHSA-578c-38fg-wf3m.json index cc21a609bd8..2ba31fde508 100644 --- a/advisories/unreviewed/2022/05/GHSA-578c-38fg-wf3m/GHSA-578c-38fg-wf3m.json +++ b/advisories/unreviewed/2022/05/GHSA-578c-38fg-wf3m/GHSA-578c-38fg-wf3m.json @@ -7,12 +7,8 @@ "CVE-2009-1383" ], "details": "The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-57pg-rh9v-f46h/GHSA-57pg-rh9v-f46h.json b/advisories/unreviewed/2022/05/GHSA-57pg-rh9v-f46h/GHSA-57pg-rh9v-f46h.json index d1f878df5b5..6970af15e82 100644 --- a/advisories/unreviewed/2022/05/GHSA-57pg-rh9v-f46h/GHSA-57pg-rh9v-f46h.json +++ b/advisories/unreviewed/2022/05/GHSA-57pg-rh9v-f46h/GHSA-57pg-rh9v-f46h.json @@ -7,12 +7,8 @@ "CVE-2009-1011" ], "details": "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is for multiple integer overflows in a function that parses an optional data stream within a Microsoft Office file, leading to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58cm-8xxh-3q69/GHSA-58cm-8xxh-3q69.json b/advisories/unreviewed/2022/05/GHSA-58cm-8xxh-3q69/GHSA-58cm-8xxh-3q69.json index 9a4ef09da9e..f0caa43b114 100644 --- a/advisories/unreviewed/2022/05/GHSA-58cm-8xxh-3q69/GHSA-58cm-8xxh-3q69.json +++ b/advisories/unreviewed/2022/05/GHSA-58cm-8xxh-3q69/GHSA-58cm-8xxh-3q69.json @@ -7,12 +7,8 @@ "CVE-2009-1421" ], "details": "Unspecified vulnerability in NFS / ONCplus B.11.31_06 and B.11.31_07 on HP HP-UX B.11.31 allows local users to cause a denial of service via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58gh-v642-3f7v/GHSA-58gh-v642-3f7v.json b/advisories/unreviewed/2022/05/GHSA-58gh-v642-3f7v/GHSA-58gh-v642-3f7v.json index 6ca43ad96be..4d510ea8554 100644 --- a/advisories/unreviewed/2022/05/GHSA-58gh-v642-3f7v/GHSA-58gh-v642-3f7v.json +++ b/advisories/unreviewed/2022/05/GHSA-58gh-v642-3f7v/GHSA-58gh-v642-3f7v.json @@ -7,12 +7,8 @@ "CVE-2009-1267" ], "details": "Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause a denial of service (crash) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5957-cmgf-chq8/GHSA-5957-cmgf-chq8.json b/advisories/unreviewed/2022/05/GHSA-5957-cmgf-chq8/GHSA-5957-cmgf-chq8.json index 0bf52e8531a..49a833233b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5957-cmgf-chq8/GHSA-5957-cmgf-chq8.json +++ b/advisories/unreviewed/2022/05/GHSA-5957-cmgf-chq8/GHSA-5957-cmgf-chq8.json @@ -7,12 +7,8 @@ "CVE-2009-1086" ], "details": "Heap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a DNS resource record (RR) with a long (1) class field (clas variable) and possibly (2) TTL field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5984-8426-hvc3/GHSA-5984-8426-hvc3.json b/advisories/unreviewed/2022/05/GHSA-5984-8426-hvc3/GHSA-5984-8426-hvc3.json index cab3f1ecbfa..d85acf7b96a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5984-8426-hvc3/GHSA-5984-8426-hvc3.json +++ b/advisories/unreviewed/2022/05/GHSA-5984-8426-hvc3/GHSA-5984-8426-hvc3.json @@ -7,12 +7,8 @@ "CVE-2009-1295" ], "details": "Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5cmh-2qjc-74gp/GHSA-5cmh-2qjc-74gp.json b/advisories/unreviewed/2022/05/GHSA-5cmh-2qjc-74gp/GHSA-5cmh-2qjc-74gp.json index bf08d1bec58..7ce9e25d8de 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cmh-2qjc-74gp/GHSA-5cmh-2qjc-74gp.json +++ b/advisories/unreviewed/2022/05/GHSA-5cmh-2qjc-74gp/GHSA-5cmh-2qjc-74gp.json @@ -7,12 +7,8 @@ "CVE-2009-1310" ], "details": "Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cmq-2r3h-8w75/GHSA-5cmq-2r3h-8w75.json b/advisories/unreviewed/2022/05/GHSA-5cmq-2r3h-8w75/GHSA-5cmq-2r3h-8w75.json index 0f278502090..dbf2329f6f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cmq-2r3h-8w75/GHSA-5cmq-2r3h-8w75.json +++ b/advisories/unreviewed/2022/05/GHSA-5cmq-2r3h-8w75/GHSA-5cmq-2r3h-8w75.json @@ -7,12 +7,8 @@ "CVE-2009-0731" ], "details": "Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the template parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cxh-4rwm-2jh3/GHSA-5cxh-4rwm-2jh3.json b/advisories/unreviewed/2022/05/GHSA-5cxh-4rwm-2jh3/GHSA-5cxh-4rwm-2jh3.json index e1d4c571c47..3cfcc1f04fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cxh-4rwm-2jh3/GHSA-5cxh-4rwm-2jh3.json +++ b/advisories/unreviewed/2022/05/GHSA-5cxh-4rwm-2jh3/GHSA-5cxh-4rwm-2jh3.json @@ -7,12 +7,8 @@ "CVE-2009-1307" ], "details": "The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g4p-qw6r-6cfj/GHSA-5g4p-qw6r-6cfj.json b/advisories/unreviewed/2022/05/GHSA-5g4p-qw6r-6cfj/GHSA-5g4p-qw6r-6cfj.json index 20f0eb42fd8..c4f5d9e2833 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g4p-qw6r-6cfj/GHSA-5g4p-qw6r-6cfj.json +++ b/advisories/unreviewed/2022/05/GHSA-5g4p-qw6r-6cfj/GHSA-5g4p-qw6r-6cfj.json @@ -7,12 +7,8 @@ "CVE-2009-1026" ], "details": "Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g6f-xpmm-cp3m/GHSA-5g6f-xpmm-cp3m.json b/advisories/unreviewed/2022/05/GHSA-5g6f-xpmm-cp3m/GHSA-5g6f-xpmm-cp3m.json index 7f0a92a5855..2ca94fe02d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g6f-xpmm-cp3m/GHSA-5g6f-xpmm-cp3m.json +++ b/advisories/unreviewed/2022/05/GHSA-5g6f-xpmm-cp3m/GHSA-5g6f-xpmm-cp3m.json @@ -7,12 +7,8 @@ "CVE-2009-1003" ], "details": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, and 9.0 allows remote attackers to affect integrity via unknown vectors related to \"access to source code of web pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5g7v-g3rg-569j/GHSA-5g7v-g3rg-569j.json b/advisories/unreviewed/2022/05/GHSA-5g7v-g3rg-569j/GHSA-5g7v-g3rg-569j.json index 164d329450a..a54952e1c8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g7v-g3rg-569j/GHSA-5g7v-g3rg-569j.json +++ b/advisories/unreviewed/2022/05/GHSA-5g7v-g3rg-569j/GHSA-5g7v-g3rg-569j.json @@ -7,12 +7,8 @@ "CVE-2009-1322" ], "details": "ASP Product Catalog 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for database/aspProductCatalog.mdb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mq4-9gv7-3fhj/GHSA-5mq4-9gv7-3fhj.json b/advisories/unreviewed/2022/05/GHSA-5mq4-9gv7-3fhj/GHSA-5mq4-9gv7-3fhj.json index cfa5d06a42b..ee730fe8e23 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mq4-9gv7-3fhj/GHSA-5mq4-9gv7-3fhj.json +++ b/advisories/unreviewed/2022/05/GHSA-5mq4-9gv7-3fhj/GHSA-5mq4-9gv7-3fhj.json @@ -7,12 +7,8 @@ "CVE-2009-1234" ], "details": "Opera 9.64 allows remote attackers to cause a denial of service (application crash) via an XML document containing a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 9.52 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5p6v-j9j4-qvgx/GHSA-5p6v-j9j4-qvgx.json b/advisories/unreviewed/2022/05/GHSA-5p6v-j9j4-qvgx/GHSA-5p6v-j9j4-qvgx.json index 431c18ce604..8d7d506093f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p6v-j9j4-qvgx/GHSA-5p6v-j9j4-qvgx.json +++ b/advisories/unreviewed/2022/05/GHSA-5p6v-j9j4-qvgx/GHSA-5p6v-j9j4-qvgx.json @@ -7,12 +7,8 @@ "CVE-2009-1375" ], "details": "The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5px8-fm27-9xhx/GHSA-5px8-fm27-9xhx.json b/advisories/unreviewed/2022/05/GHSA-5px8-fm27-9xhx/GHSA-5px8-fm27-9xhx.json index 3d8873b3177..b8fc2edb367 100644 --- a/advisories/unreviewed/2022/05/GHSA-5px8-fm27-9xhx/GHSA-5px8-fm27-9xhx.json +++ b/advisories/unreviewed/2022/05/GHSA-5px8-fm27-9xhx/GHSA-5px8-fm27-9xhx.json @@ -7,12 +7,8 @@ "CVE-2009-1013" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1014.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qjp-39q7-2p9v/GHSA-5qjp-39q7-2p9v.json b/advisories/unreviewed/2022/05/GHSA-5qjp-39q7-2p9v/GHSA-5qjp-39q7-2p9v.json index 6c190feb2d9..26ed672ca8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qjp-39q7-2p9v/GHSA-5qjp-39q7-2p9v.json +++ b/advisories/unreviewed/2022/05/GHSA-5qjp-39q7-2p9v/GHSA-5qjp-39q7-2p9v.json @@ -7,12 +7,8 @@ "CVE-2009-1367" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in moziloCMS 1.11 allows remote attackers to inject arbitrary web script or HTML via the query parameter in search action, a different issue than CVE-2008-6127.2a.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w5h-m7x5-fq48/GHSA-5w5h-m7x5-fq48.json b/advisories/unreviewed/2022/05/GHSA-5w5h-m7x5-fq48/GHSA-5w5h-m7x5-fq48.json index 9036f2ea337..f7eb2d39857 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w5h-m7x5-fq48/GHSA-5w5h-m7x5-fq48.json +++ b/advisories/unreviewed/2022/05/GHSA-5w5h-m7x5-fq48/GHSA-5w5h-m7x5-fq48.json @@ -7,12 +7,8 @@ "CVE-2009-1094" ], "details": "Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -192,9 +188,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x9h-pvpq-r4c8/GHSA-5x9h-pvpq-r4c8.json b/advisories/unreviewed/2022/05/GHSA-5x9h-pvpq-r4c8/GHSA-5x9h-pvpq-r4c8.json index ca70a4f1392..13be94de8f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x9h-pvpq-r4c8/GHSA-5x9h-pvpq-r4c8.json +++ b/advisories/unreviewed/2022/05/GHSA-5x9h-pvpq-r4c8/GHSA-5x9h-pvpq-r4c8.json @@ -7,12 +7,8 @@ "CVE-2009-1351" ], "details": "Heap-based buffer overflow in Apollo 37zz allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xfw-28hr-882v/GHSA-5xfw-28hr-882v.json b/advisories/unreviewed/2022/05/GHSA-5xfw-28hr-882v/GHSA-5xfw-28hr-882v.json index e923323143d..2e7f230c926 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xfw-28hr-882v/GHSA-5xfw-28hr-882v.json +++ b/advisories/unreviewed/2022/05/GHSA-5xfw-28hr-882v/GHSA-5xfw-28hr-882v.json @@ -7,12 +7,8 @@ "CVE-2009-1177" ], "details": "Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62pj-m994-qpwg/GHSA-62pj-m994-qpwg.json b/advisories/unreviewed/2022/05/GHSA-62pj-m994-qpwg/GHSA-62pj-m994-qpwg.json index 7a713fb9a95..5a23fbf79cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-62pj-m994-qpwg/GHSA-62pj-m994-qpwg.json +++ b/advisories/unreviewed/2022/05/GHSA-62pj-m994-qpwg/GHSA-62pj-m994-qpwg.json @@ -7,12 +7,8 @@ "CVE-2009-1304" ], "details": "The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -128,9 +124,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63r5-mg44-92qx/GHSA-63r5-mg44-92qx.json b/advisories/unreviewed/2022/05/GHSA-63r5-mg44-92qx/GHSA-63r5-mg44-92qx.json index 455e81e7e9e..800cfa075b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-63r5-mg44-92qx/GHSA-63r5-mg44-92qx.json +++ b/advisories/unreviewed/2022/05/GHSA-63r5-mg44-92qx/GHSA-63r5-mg44-92qx.json @@ -7,12 +7,8 @@ "CVE-2009-1175" ], "details": "Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the server parameter, which is not properly handled in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6753-x4g3-wmj6/GHSA-6753-x4g3-wmj6.json b/advisories/unreviewed/2022/05/GHSA-6753-x4g3-wmj6/GHSA-6753-x4g3-wmj6.json index c04db7976eb..01a1e355bf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6753-x4g3-wmj6/GHSA-6753-x4g3-wmj6.json +++ b/advisories/unreviewed/2022/05/GHSA-6753-x4g3-wmj6/GHSA-6753-x4g3-wmj6.json @@ -7,12 +7,8 @@ "CVE-2009-1473" ], "details": "The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified \"client-side calculations.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-67c2-9w2r-cg77/GHSA-67c2-9w2r-cg77.json b/advisories/unreviewed/2022/05/GHSA-67c2-9w2r-cg77/GHSA-67c2-9w2r-cg77.json index c45fa8e1fa1..d031c60ad47 100644 --- a/advisories/unreviewed/2022/05/GHSA-67c2-9w2r-cg77/GHSA-67c2-9w2r-cg77.json +++ b/advisories/unreviewed/2022/05/GHSA-67c2-9w2r-cg77/GHSA-67c2-9w2r-cg77.json @@ -7,12 +7,8 @@ "CVE-2009-1096" ], "details": "Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fxf-c4x9-w9q6/GHSA-6fxf-c4x9-w9q6.json b/advisories/unreviewed/2022/05/GHSA-6fxf-c4x9-w9q6/GHSA-6fxf-c4x9-w9q6.json index 3a18a951af6..48199f6ebf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fxf-c4x9-w9q6/GHSA-6fxf-c4x9-w9q6.json +++ b/advisories/unreviewed/2022/05/GHSA-6fxf-c4x9-w9q6/GHSA-6fxf-c4x9-w9q6.json @@ -7,12 +7,8 @@ "CVE-2009-1163" ], "details": "Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service (memory consumption) via unspecified TCP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g46-c364-qcjc/GHSA-6g46-c364-qcjc.json b/advisories/unreviewed/2022/05/GHSA-6g46-c364-qcjc/GHSA-6g46-c364-qcjc.json index cd7610c4a23..53835cf65ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g46-c364-qcjc/GHSA-6g46-c364-qcjc.json +++ b/advisories/unreviewed/2022/05/GHSA-6g46-c364-qcjc/GHSA-6g46-c364-qcjc.json @@ -7,12 +7,8 @@ "CVE-2009-1099" ], "details": "Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -156,9 +152,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6h8h-vx9v-4g94/GHSA-6h8h-vx9v-4g94.json b/advisories/unreviewed/2022/05/GHSA-6h8h-vx9v-4g94/GHSA-6h8h-vx9v-4g94.json index 7941448cf81..39711d3ba26 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h8h-vx9v-4g94/GHSA-6h8h-vx9v-4g94.json +++ b/advisories/unreviewed/2022/05/GHSA-6h8h-vx9v-4g94/GHSA-6h8h-vx9v-4g94.json @@ -7,12 +7,8 @@ "CVE-2009-1364" ], "details": "Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6jvr-wqq8-f5hr/GHSA-6jvr-wqq8-f5hr.json b/advisories/unreviewed/2022/05/GHSA-6jvr-wqq8-f5hr/GHSA-6jvr-wqq8-f5hr.json index a73a803c538..9069b612e1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jvr-wqq8-f5hr/GHSA-6jvr-wqq8-f5hr.json +++ b/advisories/unreviewed/2022/05/GHSA-6jvr-wqq8-f5hr/GHSA-6jvr-wqq8-f5hr.json @@ -7,12 +7,8 @@ "CVE-2009-1311" ], "details": "Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m5g-4p44-6rcf/GHSA-6m5g-4p44-6rcf.json b/advisories/unreviewed/2022/05/GHSA-6m5g-4p44-6rcf/GHSA-6m5g-4p44-6rcf.json index 4883f91f6f6..e39708902ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m5g-4p44-6rcf/GHSA-6m5g-4p44-6rcf.json +++ b/advisories/unreviewed/2022/05/GHSA-6m5g-4p44-6rcf/GHSA-6m5g-4p44-6rcf.json @@ -7,12 +7,8 @@ "CVE-2009-1084" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote authenticated administrators and possibly remote attackers to have an unspecified impact by modifying this object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6m9h-wvr4-9qq6/GHSA-6m9h-wvr4-9qq6.json b/advisories/unreviewed/2022/05/GHSA-6m9h-wvr4-9qq6/GHSA-6m9h-wvr4-9qq6.json index 62fc204a23b..6c8031756cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m9h-wvr4-9qq6/GHSA-6m9h-wvr4-9qq6.json +++ b/advisories/unreviewed/2022/05/GHSA-6m9h-wvr4-9qq6/GHSA-6m9h-wvr4-9qq6.json @@ -7,12 +7,8 @@ "CVE-2009-1260" ], "details": "Multiple stack-based buffer overflows in UltraISO 9.3.3.2685 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted (1) CCD or (2) IMG file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mgc-769f-wwgg/GHSA-6mgc-769f-wwgg.json b/advisories/unreviewed/2022/05/GHSA-6mgc-769f-wwgg/GHSA-6mgc-769f-wwgg.json index 5fc9f3689fe..1512443f2ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mgc-769f-wwgg/GHSA-6mgc-769f-wwgg.json +++ b/advisories/unreviewed/2022/05/GHSA-6mgc-769f-wwgg/GHSA-6mgc-769f-wwgg.json @@ -7,12 +7,8 @@ "CVE-2009-1050" ], "details": "Bloginator 1A allows remote attackers to bypass authentication and gain administrative access by setting the identifyYourself cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qm4-24f4-g249/GHSA-6qm4-24f4-g249.json b/advisories/unreviewed/2022/05/GHSA-6qm4-24f4-g249/GHSA-6qm4-24f4-g249.json index 648b8909ab2..1e137c7178a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qm4-24f4-g249/GHSA-6qm4-24f4-g249.json +++ b/advisories/unreviewed/2022/05/GHSA-6qm4-24f4-g249/GHSA-6qm4-24f4-g249.json @@ -7,12 +7,8 @@ "CVE-2009-1154" ], "details": "Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r45-xc4h-j6mv/GHSA-6r45-xc4h-j6mv.json b/advisories/unreviewed/2022/05/GHSA-6r45-xc4h-j6mv/GHSA-6r45-xc4h-j6mv.json index 3e3c2b08d32..ba24033958c 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r45-xc4h-j6mv/GHSA-6r45-xc4h-j6mv.json +++ b/advisories/unreviewed/2022/05/GHSA-6r45-xc4h-j6mv/GHSA-6r45-xc4h-j6mv.json @@ -7,12 +7,8 @@ "CVE-2009-0730" ], "details": "Multiple SQL injection vulnerabilities in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla!, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the gigcal _venues_id parameter in a details action to index.php, which is not properly handled by venuedetails.php, and (2) the gigcal_bands_id parameter in a details action to index.php, which is not properly handled by banddetails.php, different vectors than CVE-2009-0726.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rcx-mjhp-hmpc/GHSA-6rcx-mjhp-hmpc.json b/advisories/unreviewed/2022/05/GHSA-6rcx-mjhp-hmpc/GHSA-6rcx-mjhp-hmpc.json index dfe81e97170..aa810206d90 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rcx-mjhp-hmpc/GHSA-6rcx-mjhp-hmpc.json +++ b/advisories/unreviewed/2022/05/GHSA-6rcx-mjhp-hmpc/GHSA-6rcx-mjhp-hmpc.json @@ -7,12 +7,8 @@ "CVE-2009-1134" ], "details": "Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka \"Record Pointer Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rqj-5hx6-m9vf/GHSA-6rqj-5hx6-m9vf.json b/advisories/unreviewed/2022/05/GHSA-6rqj-5hx6-m9vf/GHSA-6rqj-5hx6-m9vf.json index 563ffbcab89..fafcbb57c25 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rqj-5hx6-m9vf/GHSA-6rqj-5hx6-m9vf.json +++ b/advisories/unreviewed/2022/05/GHSA-6rqj-5hx6-m9vf/GHSA-6rqj-5hx6-m9vf.json @@ -7,12 +7,8 @@ "CVE-2009-1432" ], "details": "Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vc2-57mh-2m6r/GHSA-6vc2-57mh-2m6r.json b/advisories/unreviewed/2022/05/GHSA-6vc2-57mh-2m6r/GHSA-6vc2-57mh-2m6r.json index ec90292636d..8049742ea01 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vc2-57mh-2m6r/GHSA-6vc2-57mh-2m6r.json +++ b/advisories/unreviewed/2022/05/GHSA-6vc2-57mh-2m6r/GHSA-6vc2-57mh-2m6r.json @@ -7,12 +7,8 @@ "CVE-2009-0980" ], "details": "Unspecified vulnerability in the SQLX Functions component in Oracle Database 10.2.0.3 and 11.1.0.6 allows remote authenticated users to affect integrity and availability, related to AGGXQIMP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vr3-hr7c-mrj4/GHSA-6vr3-hr7c-mrj4.json b/advisories/unreviewed/2022/05/GHSA-6vr3-hr7c-mrj4/GHSA-6vr3-hr7c-mrj4.json index bdfb0d31f04..eda89244b76 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vr3-hr7c-mrj4/GHSA-6vr3-hr7c-mrj4.json +++ b/advisories/unreviewed/2022/05/GHSA-6vr3-hr7c-mrj4/GHSA-6vr3-hr7c-mrj4.json @@ -7,12 +7,8 @@ "CVE-2009-1036" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Plus 1 module before 6.x-2.6, a module for Drupal, allows remote attackers to cast votes for content via unspecified aspects of the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wmj-w48w-cqh5/GHSA-6wmj-w48w-cqh5.json b/advisories/unreviewed/2022/05/GHSA-6wmj-w48w-cqh5/GHSA-6wmj-w48w-cqh5.json index 7e8509faa02..cf76281432d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wmj-w48w-cqh5/GHSA-6wmj-w48w-cqh5.json +++ b/advisories/unreviewed/2022/05/GHSA-6wmj-w48w-cqh5/GHSA-6wmj-w48w-cqh5.json @@ -7,12 +7,8 @@ "CVE-2009-1201" ], "details": "Eval injection vulnerability in the csco_wrap_js function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting (XSS) attacks by setting CSCO_WebVPN['process'] to the name of a crafted function, aka Bug ID CSCsy80694.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72mq-5g76-mmq5/GHSA-72mq-5g76-mmq5.json b/advisories/unreviewed/2022/05/GHSA-72mq-5g76-mmq5/GHSA-72mq-5g76-mmq5.json index db444e05737..76236dd3ab7 100644 --- a/advisories/unreviewed/2022/05/GHSA-72mq-5g76-mmq5/GHSA-72mq-5g76-mmq5.json +++ b/advisories/unreviewed/2022/05/GHSA-72mq-5g76-mmq5/GHSA-72mq-5g76-mmq5.json @@ -7,12 +7,8 @@ "CVE-2009-1348" ], "details": "The AV engine before DAT 5600 in McAfee VirusScan, Total Protection, Internet Security, SecurityShield for Microsoft ISA Server, Security for Microsoft Sharepoint, Security for Email Servers, Email Gateway, and Active Virus Defense allows remote attackers to bypass virus detection via (1) an invalid Headflags field in a malformed RAR archive, (2) an invalid Packsize field in a malformed RAR archive, or (3) an invalid Filelength field in a malformed ZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73jc-8vc2-x644/GHSA-73jc-8vc2-x644.json b/advisories/unreviewed/2022/05/GHSA-73jc-8vc2-x644/GHSA-73jc-8vc2-x644.json index a70d7960b22..bdcaac967e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-73jc-8vc2-x644/GHSA-73jc-8vc2-x644.json +++ b/advisories/unreviewed/2022/05/GHSA-73jc-8vc2-x644/GHSA-73jc-8vc2-x644.json @@ -7,12 +7,8 @@ "CVE-2009-1342" ], "details": "Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76f5-x782-3pq8/GHSA-76f5-x782-3pq8.json b/advisories/unreviewed/2022/05/GHSA-76f5-x782-3pq8/GHSA-76f5-x782-3pq8.json index 8d68f02744f..0747f7e12e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-76f5-x782-3pq8/GHSA-76f5-x782-3pq8.json +++ b/advisories/unreviewed/2022/05/GHSA-76f5-x782-3pq8/GHSA-76f5-x782-3pq8.json @@ -7,12 +7,8 @@ "CVE-2009-1046" ], "details": "The console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly earlier versions, when the UTF-8 console is used, allows physically proximate attackers to cause a denial of service (memory corruption) by selecting a small number of 3-byte UTF-8 characters, which triggers an \"off-by-two memory error.\" NOTE: it is not clear whether this issue crosses privilege boundaries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-775m-7rhh-44pp/GHSA-775m-7rhh-44pp.json b/advisories/unreviewed/2022/05/GHSA-775m-7rhh-44pp/GHSA-775m-7rhh-44pp.json index 2593b8f5dd2..7c46bccbe05 100644 --- a/advisories/unreviewed/2022/05/GHSA-775m-7rhh-44pp/GHSA-775m-7rhh-44pp.json +++ b/advisories/unreviewed/2022/05/GHSA-775m-7rhh-44pp/GHSA-775m-7rhh-44pp.json @@ -7,12 +7,8 @@ "CVE-2009-1156" ], "details": "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-77p4-xq4m-gmp5/GHSA-77p4-xq4m-gmp5.json b/advisories/unreviewed/2022/05/GHSA-77p4-xq4m-gmp5/GHSA-77p4-xq4m-gmp5.json index 5282b0ea031..061695243f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-77p4-xq4m-gmp5/GHSA-77p4-xq4m-gmp5.json +++ b/advisories/unreviewed/2022/05/GHSA-77p4-xq4m-gmp5/GHSA-77p4-xq4m-gmp5.json @@ -7,12 +7,8 @@ "CVE-2009-1240" ], "details": "Unspecified vulnerability in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allows remote attackers to bypass detection of malware via a modified RAR archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-788j-cfxp-hg3v/GHSA-788j-cfxp-hg3v.json b/advisories/unreviewed/2022/05/GHSA-788j-cfxp-hg3v/GHSA-788j-cfxp-hg3v.json index 210028c0bbc..60edada8ea2 100644 --- a/advisories/unreviewed/2022/05/GHSA-788j-cfxp-hg3v/GHSA-788j-cfxp-hg3v.json +++ b/advisories/unreviewed/2022/05/GHSA-788j-cfxp-hg3v/GHSA-788j-cfxp-hg3v.json @@ -7,12 +7,8 @@ "CVE-2009-1018" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to SYS.LTRIC (WMSYS.LTRIC).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-78w2-qm8v-7wr9/GHSA-78w2-qm8v-7wr9.json b/advisories/unreviewed/2022/05/GHSA-78w2-qm8v-7wr9/GHSA-78w2-qm8v-7wr9.json index 7bbf48ed5b2..8c45f44d746 100644 --- a/advisories/unreviewed/2022/05/GHSA-78w2-qm8v-7wr9/GHSA-78w2-qm8v-7wr9.json +++ b/advisories/unreviewed/2022/05/GHSA-78w2-qm8v-7wr9/GHSA-78w2-qm8v-7wr9.json @@ -7,12 +7,8 @@ "CVE-2009-1331" ], "details": "Integer overflow in Microsoft Windows Media Player (WMP) 11.0.5721.5260 allows remote attackers to cause a denial of service (application crash) via a crafted .mid file, as demonstrated by crash.mid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7942-4w4p-577h/GHSA-7942-4w4p-577h.json b/advisories/unreviewed/2022/05/GHSA-7942-4w4p-577h/GHSA-7942-4w4p-577h.json index 60bd52d5603..4be4dfc4e7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7942-4w4p-577h/GHSA-7942-4w4p-577h.json +++ b/advisories/unreviewed/2022/05/GHSA-7942-4w4p-577h/GHSA-7942-4w4p-577h.json @@ -7,12 +7,8 @@ "CVE-2009-0942" ], "details": "Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-79gj-w7hg-rmmw/GHSA-79gj-w7hg-rmmw.json b/advisories/unreviewed/2022/05/GHSA-79gj-w7hg-rmmw/GHSA-79gj-w7hg-rmmw.json index c909c194cd5..ad4bf4b4e2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-79gj-w7hg-rmmw/GHSA-79gj-w7hg-rmmw.json +++ b/advisories/unreviewed/2022/05/GHSA-79gj-w7hg-rmmw/GHSA-79gj-w7hg-rmmw.json @@ -7,12 +7,8 @@ "CVE-2009-1235" ], "details": "XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cf5-5fj8-m6jf/GHSA-7cf5-5fj8-m6jf.json b/advisories/unreviewed/2022/05/GHSA-7cf5-5fj8-m6jf/GHSA-7cf5-5fj8-m6jf.json index 10007f7e375..acb6649f67e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cf5-5fj8-m6jf/GHSA-7cf5-5fj8-m6jf.json +++ b/advisories/unreviewed/2022/05/GHSA-7cf5-5fj8-m6jf/GHSA-7cf5-5fj8-m6jf.json @@ -7,12 +7,8 @@ "CVE-2009-1021" ], "details": "Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7g8r-925j-vgfh/GHSA-7g8r-925j-vgfh.json b/advisories/unreviewed/2022/05/GHSA-7g8r-925j-vgfh/GHSA-7g8r-925j-vgfh.json index 7e966c69c3c..922f0ab34da 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g8r-925j-vgfh/GHSA-7g8r-925j-vgfh.json +++ b/advisories/unreviewed/2022/05/GHSA-7g8r-925j-vgfh/GHSA-7g8r-925j-vgfh.json @@ -7,12 +7,8 @@ "CVE-2009-1012" ], "details": "Unspecified vulnerability in the plug-ins for Apache and IIS web servers in Oracle BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP3, 10.0 Gold through MP1, and 10.3 allows remote attackers to affect confidentiality, integrity, and availability. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in an unspecified plug-in that parses HTTP requests, which leads to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7g9x-mh6g-hrm2/GHSA-7g9x-mh6g-hrm2.json b/advisories/unreviewed/2022/05/GHSA-7g9x-mh6g-hrm2/GHSA-7g9x-mh6g-hrm2.json index 8766055c2c8..fe869031882 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g9x-mh6g-hrm2/GHSA-7g9x-mh6g-hrm2.json +++ b/advisories/unreviewed/2022/05/GHSA-7g9x-mh6g-hrm2/GHSA-7g9x-mh6g-hrm2.json @@ -7,12 +7,8 @@ "CVE-2009-0952" ], "details": "Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gfj-q8ww-4p73/GHSA-7gfj-q8ww-4p73.json b/advisories/unreviewed/2022/05/GHSA-7gfj-q8ww-4p73/GHSA-7gfj-q8ww-4p73.json index e684d8e6340..424fdd132ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gfj-q8ww-4p73/GHSA-7gfj-q8ww-4p73.json +++ b/advisories/unreviewed/2022/05/GHSA-7gfj-q8ww-4p73/GHSA-7gfj-q8ww-4p73.json @@ -7,12 +7,8 @@ "CVE-2009-1257" ], "details": "Heap-based buffer overflow in Magic ISO Maker 5.5 build 0274 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted CCD file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gjh-8xw7-vwcv/GHSA-7gjh-8xw7-vwcv.json b/advisories/unreviewed/2022/05/GHSA-7gjh-8xw7-vwcv/GHSA-7gjh-8xw7-vwcv.json index 9e44e66b2fa..caec6e78010 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gjh-8xw7-vwcv/GHSA-7gjh-8xw7-vwcv.json +++ b/advisories/unreviewed/2022/05/GHSA-7gjh-8xw7-vwcv/GHSA-7gjh-8xw7-vwcv.json @@ -7,12 +7,8 @@ "CVE-2009-1289" ], "details": "private/login.ssi in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allows remote attackers to discover the access roles and scopes of arbitrary user accounts via a modified WEBINDEX parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hgf-pcvc-hj4r/GHSA-7hgf-pcvc-hj4r.json b/advisories/unreviewed/2022/05/GHSA-7hgf-pcvc-hj4r/GHSA-7hgf-pcvc-hj4r.json index 5e289daed2b..6fec8bd46b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hgf-pcvc-hj4r/GHSA-7hgf-pcvc-hj4r.json +++ b/advisories/unreviewed/2022/05/GHSA-7hgf-pcvc-hj4r/GHSA-7hgf-pcvc-hj4r.json @@ -7,12 +7,8 @@ "CVE-2009-1159" ], "details": "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12, when SQL*Net inspection is enabled, allows remote attackers to cause a denial of service (traceback and device reload) via a series of SQL*Net packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hjf-rvq2-6w8w/GHSA-7hjf-rvq2-6w8w.json b/advisories/unreviewed/2022/05/GHSA-7hjf-rvq2-6w8w/GHSA-7hjf-rvq2-6w8w.json index 6063349a28b..dfa800384ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hjf-rvq2-6w8w/GHSA-7hjf-rvq2-6w8w.json +++ b/advisories/unreviewed/2022/05/GHSA-7hjf-rvq2-6w8w/GHSA-7hjf-rvq2-6w8w.json @@ -7,12 +7,8 @@ "CVE-2009-1060" ], "details": "Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Charlie Miller during a PWN2OWN competition at CanSecWest 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hqp-2x7w-jxwv/GHSA-7hqp-2x7w-jxwv.json b/advisories/unreviewed/2022/05/GHSA-7hqp-2x7w-jxwv/GHSA-7hqp-2x7w-jxwv.json index 18d7c8cee11..9b9788083b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hqp-2x7w-jxwv/GHSA-7hqp-2x7w-jxwv.json +++ b/advisories/unreviewed/2022/05/GHSA-7hqp-2x7w-jxwv/GHSA-7hqp-2x7w-jxwv.json @@ -7,12 +7,8 @@ "CVE-2009-1424" ], "details": "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39412, a different vulnerability than CVE-2009-1423 and CVE-2009-1425.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p9r-6v39-jx2q/GHSA-7p9r-6v39-jx2q.json b/advisories/unreviewed/2022/05/GHSA-7p9r-6v39-jx2q/GHSA-7p9r-6v39-jx2q.json index 6298a4a3d37..0bfada36169 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p9r-6v39-jx2q/GHSA-7p9r-6v39-jx2q.json +++ b/advisories/unreviewed/2022/05/GHSA-7p9r-6v39-jx2q/GHSA-7p9r-6v39-jx2q.json @@ -7,12 +7,8 @@ "CVE-2009-1076" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pmw-j64m-whv3/GHSA-7pmw-j64m-whv3.json b/advisories/unreviewed/2022/05/GHSA-7pmw-j64m-whv3/GHSA-7pmw-j64m-whv3.json index f3a4569f57d..38e7b6e1b64 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pmw-j64m-whv3/GHSA-7pmw-j64m-whv3.json +++ b/advisories/unreviewed/2022/05/GHSA-7pmw-j64m-whv3/GHSA-7pmw-j64m-whv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q6f-mfrg-j6x7/GHSA-7q6f-mfrg-j6x7.json b/advisories/unreviewed/2022/05/GHSA-7q6f-mfrg-j6x7/GHSA-7q6f-mfrg-j6x7.json index 7338799919e..ae067d277a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q6f-mfrg-j6x7/GHSA-7q6f-mfrg-j6x7.json +++ b/advisories/unreviewed/2022/05/GHSA-7q6f-mfrg-j6x7/GHSA-7q6f-mfrg-j6x7.json @@ -7,12 +7,8 @@ "CVE-2009-1281" ], "details": "Cross-site scripting (XSS) vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qjh-v92x-xj4g/GHSA-7qjh-v92x-xj4g.json b/advisories/unreviewed/2022/05/GHSA-7qjh-v92x-xj4g/GHSA-7qjh-v92x-xj4g.json index 0b39fa41633..8f89b3f7af6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qjh-v92x-xj4g/GHSA-7qjh-v92x-xj4g.json +++ b/advisories/unreviewed/2022/05/GHSA-7qjh-v92x-xj4g/GHSA-7qjh-v92x-xj4g.json @@ -7,12 +7,8 @@ "CVE-2009-1384" ], "details": "pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qxw-w45x-p9g9/GHSA-7qxw-w45x-p9g9.json b/advisories/unreviewed/2022/05/GHSA-7qxw-w45x-p9g9/GHSA-7qxw-w45x-p9g9.json index 6afcbaecfb5..95e54ffcb05 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qxw-w45x-p9g9/GHSA-7qxw-w45x-p9g9.json +++ b/advisories/unreviewed/2022/05/GHSA-7qxw-w45x-p9g9/GHSA-7qxw-w45x-p9g9.json @@ -7,12 +7,8 @@ "CVE-2009-1274" ], "details": "Integer overflow in the qt_error parse_trak_atom function in demuxers/demux_qt.c in xine-lib 1.1.16.2 and earlier allows remote attackers to execute arbitrary code via a Quicktime movie file with a large count value in an STTS atom, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r32-7wx6-3m6p/GHSA-7r32-7wx6-3m6p.json b/advisories/unreviewed/2022/05/GHSA-7r32-7wx6-3m6p/GHSA-7r32-7wx6-3m6p.json index 7810a727417..a90a7dd2786 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r32-7wx6-3m6p/GHSA-7r32-7wx6-3m6p.json +++ b/advisories/unreviewed/2022/05/GHSA-7r32-7wx6-3m6p/GHSA-7r32-7wx6-3m6p.json @@ -7,12 +7,8 @@ "CVE-2009-1077" ], "details": "The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the administrator's password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vfc-h53m-93j3/GHSA-7vfc-h53m-93j3.json b/advisories/unreviewed/2022/05/GHSA-7vfc-h53m-93j3/GHSA-7vfc-h53m-93j3.json index 2cfcb6f71ed..5a3f805072d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vfc-h53m-93j3/GHSA-7vfc-h53m-93j3.json +++ b/advisories/unreviewed/2022/05/GHSA-7vfc-h53m-93j3/GHSA-7vfc-h53m-93j3.json @@ -7,12 +7,8 @@ "CVE-2009-1140" ], "details": "Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka \"Cross-Domain Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7w8p-q443-ffm9/GHSA-7w8p-q443-ffm9.json b/advisories/unreviewed/2022/05/GHSA-7w8p-q443-ffm9/GHSA-7w8p-q443-ffm9.json index 832a0499970..97e15464e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w8p-q443-ffm9/GHSA-7w8p-q443-ffm9.json +++ b/advisories/unreviewed/2022/05/GHSA-7w8p-q443-ffm9/GHSA-7w8p-q443-ffm9.json @@ -7,12 +7,8 @@ "CVE-2009-1323" ], "details": "SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wpp-7c5m-rv2q/GHSA-7wpp-7c5m-rv2q.json b/advisories/unreviewed/2022/05/GHSA-7wpp-7c5m-rv2q/GHSA-7wpp-7c5m-rv2q.json index 8a425438997..200941409cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wpp-7c5m-rv2q/GHSA-7wpp-7c5m-rv2q.json +++ b/advisories/unreviewed/2022/05/GHSA-7wpp-7c5m-rv2q/GHSA-7wpp-7c5m-rv2q.json @@ -7,12 +7,8 @@ "CVE-2009-1080" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID 19033.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8252-5gjp-pfpg/GHSA-8252-5gjp-pfpg.json b/advisories/unreviewed/2022/05/GHSA-8252-5gjp-pfpg/GHSA-8252-5gjp-pfpg.json index fb0bd86e72b..958e1cc5a5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8252-5gjp-pfpg/GHSA-8252-5gjp-pfpg.json +++ b/advisories/unreviewed/2022/05/GHSA-8252-5gjp-pfpg/GHSA-8252-5gjp-pfpg.json @@ -7,12 +7,8 @@ "CVE-2009-1074" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to obtain sensitive information by sniffing the network, related to \"ssl termination devices\" and lack of support for relative URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83qg-cpr6-rrr8/GHSA-83qg-cpr6-rrr8.json b/advisories/unreviewed/2022/05/GHSA-83qg-cpr6-rrr8/GHSA-83qg-cpr6-rrr8.json index cd8c090964b..0d1b5f789ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-83qg-cpr6-rrr8/GHSA-83qg-cpr6-rrr8.json +++ b/advisories/unreviewed/2022/05/GHSA-83qg-cpr6-rrr8/GHSA-83qg-cpr6-rrr8.json @@ -7,12 +7,8 @@ "CVE-2009-1067" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84rr-q55c-9hm6/GHSA-84rr-q55c-9hm6.json b/advisories/unreviewed/2022/05/GHSA-84rr-q55c-9hm6/GHSA-84rr-q55c-9hm6.json index ff2c862a5b7..acfffb84366 100644 --- a/advisories/unreviewed/2022/05/GHSA-84rr-q55c-9hm6/GHSA-84rr-q55c-9hm6.json +++ b/advisories/unreviewed/2022/05/GHSA-84rr-q55c-9hm6/GHSA-84rr-q55c-9hm6.json @@ -7,12 +7,8 @@ "CVE-2009-1101" ], "details": "Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor \"leak.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -168,9 +164,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-857c-xvrg-r737/GHSA-857c-xvrg-r737.json b/advisories/unreviewed/2022/05/GHSA-857c-xvrg-r737/GHSA-857c-xvrg-r737.json index 91c5831af2c..22c00a05bde 100644 --- a/advisories/unreviewed/2022/05/GHSA-857c-xvrg-r737/GHSA-857c-xvrg-r737.json +++ b/advisories/unreviewed/2022/05/GHSA-857c-xvrg-r737/GHSA-857c-xvrg-r737.json @@ -7,12 +7,8 @@ "CVE-2009-1216" ], "details": "Multiple unspecified vulnerabilities in (1) unlzh.c and (2) unpack.c in the gzip libraries in Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA); as used in gunzip, gzip, pack, pcat, and unpack 7.x before 7.0.1701.48, 8.x before 8.0.1969.62, and 9.x before 9.0.3790.2076; allow remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-857g-q668-hpcf/GHSA-857g-q668-hpcf.json b/advisories/unreviewed/2022/05/GHSA-857g-q668-hpcf/GHSA-857g-q668-hpcf.json index 3f576b1c90c..77efbb9700d 100644 --- a/advisories/unreviewed/2022/05/GHSA-857g-q668-hpcf/GHSA-857g-q668-hpcf.json +++ b/advisories/unreviewed/2022/05/GHSA-857g-q668-hpcf/GHSA-857g-q668-hpcf.json @@ -7,12 +7,8 @@ "CVE-2009-0953" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86hj-mfgv-6432/GHSA-86hj-mfgv-6432.json b/advisories/unreviewed/2022/05/GHSA-86hj-mfgv-6432/GHSA-86hj-mfgv-6432.json index fa573d980bd..7d5f1597363 100644 --- a/advisories/unreviewed/2022/05/GHSA-86hj-mfgv-6432/GHSA-86hj-mfgv-6432.json +++ b/advisories/unreviewed/2022/05/GHSA-86hj-mfgv-6432/GHSA-86hj-mfgv-6432.json @@ -7,12 +7,8 @@ "CVE-2009-1095" ], "details": "Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -196,9 +192,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-86qj-rfhj-8qr4/GHSA-86qj-rfhj-8qr4.json b/advisories/unreviewed/2022/05/GHSA-86qj-rfhj-8qr4/GHSA-86qj-rfhj-8qr4.json index 5e5f0018232..677a25951f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-86qj-rfhj-8qr4/GHSA-86qj-rfhj-8qr4.json +++ b/advisories/unreviewed/2022/05/GHSA-86qj-rfhj-8qr4/GHSA-86qj-rfhj-8qr4.json @@ -7,12 +7,8 @@ "CVE-2009-1460" ], "details": "razorCMS before 0.4 uses weak permissions for (1) admin/core/admin_config.php, which allows local users to obtain the administrator's password hash and FTP user credentials; and (2) the root directory, (3) datastore/, and (4) admin/core/, which allows local users to have an unspecified impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-884r-w4rr-hvg2/GHSA-884r-w4rr-hvg2.json b/advisories/unreviewed/2022/05/GHSA-884r-w4rr-hvg2/GHSA-884r-w4rr-hvg2.json index 4653fc1edf9..0aaab9e255e 100644 --- a/advisories/unreviewed/2022/05/GHSA-884r-w4rr-hvg2/GHSA-884r-w4rr-hvg2.json +++ b/advisories/unreviewed/2022/05/GHSA-884r-w4rr-hvg2/GHSA-884r-w4rr-hvg2.json @@ -7,12 +7,8 @@ "CVE-2009-1158" ], "details": "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8c9c-m8qr-pq2x/GHSA-8c9c-m8qr-pq2x.json b/advisories/unreviewed/2022/05/GHSA-8c9c-m8qr-pq2x/GHSA-8c9c-m8qr-pq2x.json index 95bb689b695..2b9da4f5a67 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c9c-m8qr-pq2x/GHSA-8c9c-m8qr-pq2x.json +++ b/advisories/unreviewed/2022/05/GHSA-8c9c-m8qr-pq2x/GHSA-8c9c-m8qr-pq2x.json @@ -7,12 +7,8 @@ "CVE-2009-1429" ], "details": "The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fx3-5c55-w9jg/GHSA-8fx3-5c55-w9jg.json b/advisories/unreviewed/2022/05/GHSA-8fx3-5c55-w9jg/GHSA-8fx3-5c55-w9jg.json index 2300a189015..c0cc8489575 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fx3-5c55-w9jg/GHSA-8fx3-5c55-w9jg.json +++ b/advisories/unreviewed/2022/05/GHSA-8fx3-5c55-w9jg/GHSA-8fx3-5c55-w9jg.json @@ -7,12 +7,8 @@ "CVE-2009-1268" ], "details": "The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FWHA_MY_STATE packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g25-qvgj-fp7w/GHSA-8g25-qvgj-fp7w.json b/advisories/unreviewed/2022/05/GHSA-8g25-qvgj-fp7w/GHSA-8g25-qvgj-fp7w.json index d39b42de4f4..aeeb7543465 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g25-qvgj-fp7w/GHSA-8g25-qvgj-fp7w.json +++ b/advisories/unreviewed/2022/05/GHSA-8g25-qvgj-fp7w/GHSA-8g25-qvgj-fp7w.json @@ -7,12 +7,8 @@ "CVE-2009-1061" ], "details": "Unspecified vulnerability in Adobe Acrobat Reader 9 before 9.1, 8 before 8.1.4, and 7 before 7.1.1 might allow remote attackers to execute arbitrary code via unknown attack vectors related to JBIG2 and \"input validation,\" a different vulnerability than CVE-2009-0193 and CVE-2009-1062.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g6h-gj49-cm84/GHSA-8g6h-gj49-cm84.json b/advisories/unreviewed/2022/05/GHSA-8g6h-gj49-cm84/GHSA-8g6h-gj49-cm84.json index ae8267be386..82c0a7677dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g6h-gj49-cm84/GHSA-8g6h-gj49-cm84.json +++ b/advisories/unreviewed/2022/05/GHSA-8g6h-gj49-cm84/GHSA-8g6h-gj49-cm84.json @@ -7,12 +7,8 @@ "CVE-2009-1217" ], "details": "Off-by-one error in the GpFont::SetData function in gdiplus.dll in Microsoft GDI+ on Windows XP allows remote attackers to cause a denial of service (stack corruption and application termination) via a crafted EMF file that triggers an integer overflow, as demonstrated by voltage-exploit.emf, aka the \"Microsoft GdiPlus EMF GpFont.SetData integer overflow.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g9p-62w3-5vwm/GHSA-8g9p-62w3-5vwm.json b/advisories/unreviewed/2022/05/GHSA-8g9p-62w3-5vwm/GHSA-8g9p-62w3-5vwm.json index e20a27cd1f3..a273250e60c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g9p-62w3-5vwm/GHSA-8g9p-62w3-5vwm.json +++ b/advisories/unreviewed/2022/05/GHSA-8g9p-62w3-5vwm/GHSA-8g9p-62w3-5vwm.json @@ -7,12 +7,8 @@ "CVE-2009-1014" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1013.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8h23-pp7x-2pww/GHSA-8h23-pp7x-2pww.json b/advisories/unreviewed/2022/05/GHSA-8h23-pp7x-2pww/GHSA-8h23-pp7x-2pww.json index d5b52dffae8..ec6001c894b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h23-pp7x-2pww/GHSA-8h23-pp7x-2pww.json +++ b/advisories/unreviewed/2022/05/GHSA-8h23-pp7x-2pww/GHSA-8h23-pp7x-2pww.json @@ -7,12 +7,8 @@ "CVE-2009-1292" ], "details": "UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h47-c5c4-3qvr/GHSA-8h47-c5c4-3qvr.json b/advisories/unreviewed/2022/05/GHSA-8h47-c5c4-3qvr/GHSA-8h47-c5c4-3qvr.json index 2654ee49c5f..c78f01bda8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h47-c5c4-3qvr/GHSA-8h47-c5c4-3qvr.json +++ b/advisories/unreviewed/2022/05/GHSA-8h47-c5c4-3qvr/GHSA-8h47-c5c4-3qvr.json @@ -7,12 +7,8 @@ "CVE-2009-1229" ], "details": "SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h7r-j823-hw2q/GHSA-8h7r-j823-hw2q.json b/advisories/unreviewed/2022/05/GHSA-8h7r-j823-hw2q/GHSA-8h7r-j823-hw2q.json index 1cebdd55b84..9e040728422 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h7r-j823-hw2q/GHSA-8h7r-j823-hw2q.json +++ b/advisories/unreviewed/2022/05/GHSA-8h7r-j823-hw2q/GHSA-8h7r-j823-hw2q.json @@ -7,12 +7,8 @@ "CVE-2009-1047" ], "details": "Cross-site scripting (XSS) vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via vectors involving outbound HTML e-mail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j3j-q775-3jhg/GHSA-8j3j-q775-3jhg.json b/advisories/unreviewed/2022/05/GHSA-8j3j-q775-3jhg/GHSA-8j3j-q775-3jhg.json index b6069f6b852..81ca51f032d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j3j-q775-3jhg/GHSA-8j3j-q775-3jhg.json +++ b/advisories/unreviewed/2022/05/GHSA-8j3j-q775-3jhg/GHSA-8j3j-q775-3jhg.json @@ -7,12 +7,8 @@ "CVE-2009-0998" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS - eBenefits component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18 and 9.0.8 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8pr9-xh7f-37jj/GHSA-8pr9-xh7f-37jj.json b/advisories/unreviewed/2022/05/GHSA-8pr9-xh7f-37jj/GHSA-8pr9-xh7f-37jj.json index b77d13ba77d..5f68d3c8c8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pr9-xh7f-37jj/GHSA-8pr9-xh7f-37jj.json +++ b/advisories/unreviewed/2022/05/GHSA-8pr9-xh7f-37jj/GHSA-8pr9-xh7f-37jj.json @@ -7,12 +7,8 @@ "CVE-2009-1354" ], "details": "Directory traversal vulnerability in Mongoose 2.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8prf-7v67-xm6f/GHSA-8prf-7v67-xm6f.json b/advisories/unreviewed/2022/05/GHSA-8prf-7v67-xm6f/GHSA-8prf-7v67-xm6f.json index 78a4edfd880..95e88f2d912 100644 --- a/advisories/unreviewed/2022/05/GHSA-8prf-7v67-xm6f/GHSA-8prf-7v67-xm6f.json +++ b/advisories/unreviewed/2022/05/GHSA-8prf-7v67-xm6f/GHSA-8prf-7v67-xm6f.json @@ -7,12 +7,8 @@ "CVE-2009-1409" ], "details": "SQL injection vulnerability in usersettings.php in e107 0.7.15 and earlier, when \"Extended User Fields\" is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hide parameter, a different vector than CVE-2005-4224 and CVE-2008-5320.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qr4-jrr4-47ch/GHSA-8qr4-jrr4-47ch.json b/advisories/unreviewed/2022/05/GHSA-8qr4-jrr4-47ch/GHSA-8qr4-jrr4-47ch.json index 30433f87207..dfb9e041c8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qr4-jrr4-47ch/GHSA-8qr4-jrr4-47ch.json +++ b/advisories/unreviewed/2022/05/GHSA-8qr4-jrr4-47ch/GHSA-8qr4-jrr4-47ch.json @@ -7,12 +7,8 @@ "CVE-2009-1443" ], "details": "Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8qr8-24fg-gc28/GHSA-8qr8-24fg-gc28.json b/advisories/unreviewed/2022/05/GHSA-8qr8-24fg-gc28/GHSA-8qr8-24fg-gc28.json index 1f5b66b3025..73dd0b79f52 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qr8-24fg-gc28/GHSA-8qr8-24fg-gc28.json +++ b/advisories/unreviewed/2022/05/GHSA-8qr8-24fg-gc28/GHSA-8qr8-24fg-gc28.json @@ -7,12 +7,8 @@ "CVE-2009-1347" ], "details": "Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r4f-qp8x-vpqf/GHSA-8r4f-qp8x-vpqf.json b/advisories/unreviewed/2022/05/GHSA-8r4f-qp8x-vpqf/GHSA-8r4f-qp8x-vpqf.json index f62316e2fcb..31596d8d59c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r4f-qp8x-vpqf/GHSA-8r4f-qp8x-vpqf.json +++ b/advisories/unreviewed/2022/05/GHSA-8r4f-qp8x-vpqf/GHSA-8r4f-qp8x-vpqf.json @@ -7,12 +7,8 @@ "CVE-2009-1430" ], "details": "Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allow remote attackers to execute arbitrary code via (1) a crafted packet or (2) data that ostensibly arrives from the MsgSys.exe process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rhj-8gqw-pxm4/GHSA-8rhj-8gqw-pxm4.json b/advisories/unreviewed/2022/05/GHSA-8rhj-8gqw-pxm4/GHSA-8rhj-8gqw-pxm4.json index 3a12e21d20f..de0d1fe9627 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rhj-8gqw-pxm4/GHSA-8rhj-8gqw-pxm4.json +++ b/advisories/unreviewed/2022/05/GHSA-8rhj-8gqw-pxm4/GHSA-8rhj-8gqw-pxm4.json @@ -7,12 +7,8 @@ "CVE-2009-0945" ], "details": "Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rxj-jcx7-7vqh/GHSA-8rxj-jcx7-7vqh.json b/advisories/unreviewed/2022/05/GHSA-8rxj-jcx7-7vqh/GHSA-8rxj-jcx7-7vqh.json index fffb27825f0..8e7dc8c766a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rxj-jcx7-7vqh/GHSA-8rxj-jcx7-7vqh.json +++ b/advisories/unreviewed/2022/05/GHSA-8rxj-jcx7-7vqh/GHSA-8rxj-jcx7-7vqh.json @@ -7,12 +7,8 @@ "CVE-2009-1472" ], "details": "The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8vm8-v49h-xrfr/GHSA-8vm8-v49h-xrfr.json b/advisories/unreviewed/2022/05/GHSA-8vm8-v49h-xrfr/GHSA-8vm8-v49h-xrfr.json index e78f9e6450e..77596c710ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vm8-v49h-xrfr/GHSA-8vm8-v49h-xrfr.json +++ b/advisories/unreviewed/2022/05/GHSA-8vm8-v49h-xrfr/GHSA-8vm8-v49h-xrfr.json @@ -7,12 +7,8 @@ "CVE-2009-1326" ], "details": "Stack-based buffer overflow in Mini-stream RM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8whw-6c85-qg7r/GHSA-8whw-6c85-qg7r.json b/advisories/unreviewed/2022/05/GHSA-8whw-6c85-qg7r/GHSA-8whw-6c85-qg7r.json index 2d2635fb63b..200a5d1aed2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8whw-6c85-qg7r/GHSA-8whw-6c85-qg7r.json +++ b/advisories/unreviewed/2022/05/GHSA-8whw-6c85-qg7r/GHSA-8whw-6c85-qg7r.json @@ -7,12 +7,8 @@ "CVE-2009-1223" ], "details": "aspWebCalendar Free Edition stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for calendar/calendar.mdb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8xjh-fhmf-89q3/GHSA-8xjh-fhmf-89q3.json b/advisories/unreviewed/2022/05/GHSA-8xjh-fhmf-89q3/GHSA-8xjh-fhmf-89q3.json index 1d5a903ea48..1bcdc34df17 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xjh-fhmf-89q3/GHSA-8xjh-fhmf-89q3.json +++ b/advisories/unreviewed/2022/05/GHSA-8xjh-fhmf-89q3/GHSA-8xjh-fhmf-89q3.json @@ -7,12 +7,8 @@ "CVE-2009-1463" ], "details": "Static code injection vulnerability in razorCMS before 0.4 allows remote attackers to inject arbitrary PHP code into any page by saving content as a .php file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92f7-j296-jgr4/GHSA-92f7-j296-jgr4.json b/advisories/unreviewed/2022/05/GHSA-92f7-j296-jgr4/GHSA-92f7-j296-jgr4.json index f97e7755d5b..ae124f58faf 100644 --- a/advisories/unreviewed/2022/05/GHSA-92f7-j296-jgr4/GHSA-92f7-j296-jgr4.json +++ b/advisories/unreviewed/2022/05/GHSA-92f7-j296-jgr4/GHSA-92f7-j296-jgr4.json @@ -7,12 +7,8 @@ "CVE-2009-1332" ], "details": "The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files and directories, and possibly obtain partial contents of files, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93p2-5vpw-6fmw/GHSA-93p2-5vpw-6fmw.json b/advisories/unreviewed/2022/05/GHSA-93p2-5vpw-6fmw/GHSA-93p2-5vpw-6fmw.json index ad80a1c720b..c6ea0226bef 100644 --- a/advisories/unreviewed/2022/05/GHSA-93p2-5vpw-6fmw/GHSA-93p2-5vpw-6fmw.json +++ b/advisories/unreviewed/2022/05/GHSA-93p2-5vpw-6fmw/GHSA-93p2-5vpw-6fmw.json @@ -7,12 +7,8 @@ "CVE-2009-1137" ], "details": "Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allows remote attackers to execute arbitrary code via crafted sound data in a file that uses a PowerPoint 4.0 native file format, leading to memory corruption, aka \"Legacy File Format Vulnerability,\" a different vulnerability than CVE-2009-0222, CVE-2009-0223, CVE-2009-0226, and CVE-2009-0227.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93pj-83f5-xggg/GHSA-93pj-83f5-xggg.json b/advisories/unreviewed/2022/05/GHSA-93pj-83f5-xggg/GHSA-93pj-83f5-xggg.json index 71209d2fe45..1cd3168ef35 100644 --- a/advisories/unreviewed/2022/05/GHSA-93pj-83f5-xggg/GHSA-93pj-83f5-xggg.json +++ b/advisories/unreviewed/2022/05/GHSA-93pj-83f5-xggg/GHSA-93pj-83f5-xggg.json @@ -7,12 +7,8 @@ "CVE-2009-1371" ], "details": "The CLI_ISCONTAINED macro in libclamav/others.h in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) via a malformed file with UPack encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-946h-7778-w3cr/GHSA-946h-7778-w3cr.json b/advisories/unreviewed/2022/05/GHSA-946h-7778-w3cr/GHSA-946h-7778-w3cr.json index 35557ef2e7a..3a511a21ed1 100644 --- a/advisories/unreviewed/2022/05/GHSA-946h-7778-w3cr/GHSA-946h-7778-w3cr.json +++ b/advisories/unreviewed/2022/05/GHSA-946h-7778-w3cr/GHSA-946h-7778-w3cr.json @@ -7,12 +7,8 @@ "CVE-2009-1431" ], "details": "XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-94fp-6r45-7325/GHSA-94fp-6r45-7325.json b/advisories/unreviewed/2022/05/GHSA-94fp-6r45-7325/GHSA-94fp-6r45-7325.json index 7eb46241b8b..f0a07e2a006 100644 --- a/advisories/unreviewed/2022/05/GHSA-94fp-6r45-7325/GHSA-94fp-6r45-7325.json +++ b/advisories/unreviewed/2022/05/GHSA-94fp-6r45-7325/GHSA-94fp-6r45-7325.json @@ -7,12 +7,8 @@ "CVE-2009-1294" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in web/guest/home in the Liferay 4.3.0 portal in Novell Teaming 1.0 through SP3 (1.0.3) allow remote attackers to inject arbitrary web script or HTML via the (1) p_p_state or (2) p_p_mode parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9574-q3cv-v9f8/GHSA-9574-q3cv-v9f8.json b/advisories/unreviewed/2022/05/GHSA-9574-q3cv-v9f8/GHSA-9574-q3cv-v9f8.json index 8974274d562..415b2b4292e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9574-q3cv-v9f8/GHSA-9574-q3cv-v9f8.json +++ b/advisories/unreviewed/2022/05/GHSA-9574-q3cv-v9f8/GHSA-9574-q3cv-v9f8.json @@ -7,12 +7,8 @@ "CVE-2009-0751" ], "details": "Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-95cc-488v-c5wr/GHSA-95cc-488v-c5wr.json b/advisories/unreviewed/2022/05/GHSA-95cc-488v-c5wr/GHSA-95cc-488v-c5wr.json index f3828be3613..e4721ef003f 100644 --- a/advisories/unreviewed/2022/05/GHSA-95cc-488v-c5wr/GHSA-95cc-488v-c5wr.json +++ b/advisories/unreviewed/2022/05/GHSA-95cc-488v-c5wr/GHSA-95cc-488v-c5wr.json @@ -7,12 +7,8 @@ "CVE-2009-1053" ], "details": "chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9634-hx95-7px5/GHSA-9634-hx95-7px5.json b/advisories/unreviewed/2022/05/GHSA-9634-hx95-7px5/GHSA-9634-hx95-7px5.json index 2fde8fadb23..48940915bfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-9634-hx95-7px5/GHSA-9634-hx95-7px5.json +++ b/advisories/unreviewed/2022/05/GHSA-9634-hx95-7px5/GHSA-9634-hx95-7px5.json @@ -7,12 +7,8 @@ "CVE-2009-1202" ], "details": "WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 allows remote attackers to bypass certain protection mechanisms involving URL rewriting and HTML rewriting, and conduct cross-site scripting (XSS) attacks, by modifying the first hex-encoded character in a /+CSCO+ URI, aka Bug ID CSCsy80705.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9747-xg65-c4f2/GHSA-9747-xg65-c4f2.json b/advisories/unreviewed/2022/05/GHSA-9747-xg65-c4f2/GHSA-9747-xg65-c4f2.json index e2522a78ab6..049f666ee30 100644 --- a/advisories/unreviewed/2022/05/GHSA-9747-xg65-c4f2/GHSA-9747-xg65-c4f2.json +++ b/advisories/unreviewed/2022/05/GHSA-9747-xg65-c4f2/GHSA-9747-xg65-c4f2.json @@ -7,12 +7,8 @@ "CVE-2009-1068" ], "details": "Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-97w6-6433-7ccq/GHSA-97w6-6433-7ccq.json b/advisories/unreviewed/2022/05/GHSA-97w6-6433-7ccq/GHSA-97w6-6433-7ccq.json index d29da9036a5..d8e1bb0d53a 100644 --- a/advisories/unreviewed/2022/05/GHSA-97w6-6433-7ccq/GHSA-97w6-6433-7ccq.json +++ b/advisories/unreviewed/2022/05/GHSA-97w6-6433-7ccq/GHSA-97w6-6433-7ccq.json @@ -7,12 +7,8 @@ "CVE-2009-1098" ], "details": "Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99cw-4q4v-4vf9/GHSA-99cw-4q4v-4vf9.json b/advisories/unreviewed/2022/05/GHSA-99cw-4q4v-4vf9/GHSA-99cw-4q4v-4vf9.json index 01a06d2ecec..b9b36a4ee66 100644 --- a/advisories/unreviewed/2022/05/GHSA-99cw-4q4v-4vf9/GHSA-99cw-4q4v-4vf9.json +++ b/advisories/unreviewed/2022/05/GHSA-99cw-4q4v-4vf9/GHSA-99cw-4q4v-4vf9.json @@ -7,12 +7,8 @@ "CVE-2009-1259" ], "details": "SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topic_id parameter in a topic action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99vh-r3f2-2r35/GHSA-99vh-r3f2-2r35.json b/advisories/unreviewed/2022/05/GHSA-99vh-r3f2-2r35/GHSA-99vh-r3f2-2r35.json index df65f9e22cd..6064b126a8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-99vh-r3f2-2r35/GHSA-99vh-r3f2-2r35.json +++ b/advisories/unreviewed/2022/05/GHSA-99vh-r3f2-2r35/GHSA-99vh-r3f2-2r35.json @@ -7,12 +7,8 @@ "CVE-2009-0936" ], "details": "Unspecified vulnerability in Tor before 0.2.0.34 allows attackers to cause a denial of service (infinite loop) via \"corrupt votes.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fgx-9cxg-qj43/GHSA-9fgx-9cxg-qj43.json b/advisories/unreviewed/2022/05/GHSA-9fgx-9cxg-qj43/GHSA-9fgx-9cxg-qj43.json index b0f6581fe56..6b988f61319 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fgx-9cxg-qj43/GHSA-9fgx-9cxg-qj43.json +++ b/advisories/unreviewed/2022/05/GHSA-9fgx-9cxg-qj43/GHSA-9fgx-9cxg-qj43.json @@ -7,12 +7,8 @@ "CVE-2009-1288" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via (1) the username in a login action or (2) the PATH parameter to private/file_management.ssi in the File manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hmw-v25p-4898/GHSA-9hmw-v25p-4898.json b/advisories/unreviewed/2022/05/GHSA-9hmw-v25p-4898/GHSA-9hmw-v25p-4898.json index 946f5208de8..2e1c009184f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hmw-v25p-4898/GHSA-9hmw-v25p-4898.json +++ b/advisories/unreviewed/2022/05/GHSA-9hmw-v25p-4898/GHSA-9hmw-v25p-4898.json @@ -7,12 +7,8 @@ "CVE-2009-1170" ], "details": "Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hwh-3gx5-xqmh/GHSA-9hwh-3gx5-xqmh.json b/advisories/unreviewed/2022/05/GHSA-9hwh-3gx5-xqmh/GHSA-9hwh-3gx5-xqmh.json index f93d7e8432e..36c6c2d3b6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hwh-3gx5-xqmh/GHSA-9hwh-3gx5-xqmh.json +++ b/advisories/unreviewed/2022/05/GHSA-9hwh-3gx5-xqmh/GHSA-9hwh-3gx5-xqmh.json @@ -7,12 +7,8 @@ "CVE-2009-1335" ], "details": "Microsoft Internet Explorer 7 and 8 on Windows XP and Vista allows remote attackers to cause a denial of service (application hang) via a large document composed of unprintable characters, aka MSRC 9011jr.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9p2r-3443-pgvw/GHSA-9p2r-3443-pgvw.json b/advisories/unreviewed/2022/05/GHSA-9p2r-3443-pgvw/GHSA-9p2r-3443-pgvw.json index 522b06eea7b..2bb6b1cb619 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p2r-3443-pgvw/GHSA-9p2r-3443-pgvw.json +++ b/advisories/unreviewed/2022/05/GHSA-9p2r-3443-pgvw/GHSA-9p2r-3443-pgvw.json @@ -7,12 +7,8 @@ "CVE-2009-1225" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Turnkey Ebook Store 1.1 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9p6w-24v2-vpv6/GHSA-9p6w-24v2-vpv6.json b/advisories/unreviewed/2022/05/GHSA-9p6w-24v2-vpv6/GHSA-9p6w-24v2-vpv6.json index 45a83f9c195..5b31d3192e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p6w-24v2-vpv6/GHSA-9p6w-24v2-vpv6.json +++ b/advisories/unreviewed/2022/05/GHSA-9p6w-24v2-vpv6/GHSA-9p6w-24v2-vpv6.json @@ -7,12 +7,8 @@ "CVE-2009-1236" ], "details": "Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9prw-859c-gqxh/GHSA-9prw-859c-gqxh.json b/advisories/unreviewed/2022/05/GHSA-9prw-859c-gqxh/GHSA-9prw-859c-gqxh.json index e242528f1e7..21dcfd6da49 100644 --- a/advisories/unreviewed/2022/05/GHSA-9prw-859c-gqxh/GHSA-9prw-859c-gqxh.json +++ b/advisories/unreviewed/2022/05/GHSA-9prw-859c-gqxh/GHSA-9prw-859c-gqxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pvr-q5vf-qv7q/GHSA-9pvr-q5vf-qv7q.json b/advisories/unreviewed/2022/05/GHSA-9pvr-q5vf-qv7q/GHSA-9pvr-q5vf-qv7q.json index 473baff9c48..8eec73032f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pvr-q5vf-qv7q/GHSA-9pvr-q5vf-qv7q.json +++ b/advisories/unreviewed/2022/05/GHSA-9pvr-q5vf-qv7q/GHSA-9pvr-q5vf-qv7q.json @@ -7,12 +7,8 @@ "CVE-2009-1023" ], "details": "SQL injection vulnerability in index.php in phpComasy 0.9.1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wcw-c552-9c64/GHSA-9wcw-c552-9c64.json b/advisories/unreviewed/2022/05/GHSA-9wcw-c552-9c64/GHSA-9wcw-c552-9c64.json index c987d39d3cb..1351d89e3e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wcw-c552-9c64/GHSA-9wcw-c552-9c64.json +++ b/advisories/unreviewed/2022/05/GHSA-9wcw-c552-9c64/GHSA-9wcw-c552-9c64.json @@ -7,12 +7,8 @@ "CVE-2009-1442" ], "details": "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x3w-g7q4-vwcw/GHSA-9x3w-g7q4-vwcw.json b/advisories/unreviewed/2022/05/GHSA-9x3w-g7q4-vwcw/GHSA-9x3w-g7q4-vwcw.json index e0ac0ae3aee..d4a6d043923 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x3w-g7q4-vwcw/GHSA-9x3w-g7q4-vwcw.json +++ b/advisories/unreviewed/2022/05/GHSA-9x3w-g7q4-vwcw/GHSA-9x3w-g7q4-vwcw.json @@ -7,12 +7,8 @@ "CVE-2009-1479" ], "details": "Directory traversal vulnerability in client/desktop/default.htm in Boxalino before 09.05.25-0421 allows remote attackers to read arbitrary files via a .. (dot dot) in the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9xxv-fxf2-q8c5/GHSA-9xxv-fxf2-q8c5.json b/advisories/unreviewed/2022/05/GHSA-9xxv-fxf2-q8c5/GHSA-9xxv-fxf2-q8c5.json index 34d29fe4d80..5e07c56af99 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xxv-fxf2-q8c5/GHSA-9xxv-fxf2-q8c5.json +++ b/advisories/unreviewed/2022/05/GHSA-9xxv-fxf2-q8c5/GHSA-9xxv-fxf2-q8c5.json @@ -7,12 +7,8 @@ "CVE-2009-1065" ], "details": "SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2hh-3jjj-wq58/GHSA-c2hh-3jjj-wq58.json b/advisories/unreviewed/2022/05/GHSA-c2hh-3jjj-wq58/GHSA-c2hh-3jjj-wq58.json index f59727d5225..31f519ed204 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2hh-3jjj-wq58/GHSA-c2hh-3jjj-wq58.json +++ b/advisories/unreviewed/2022/05/GHSA-c2hh-3jjj-wq58/GHSA-c2hh-3jjj-wq58.json @@ -7,12 +7,8 @@ "CVE-2009-1359" ], "details": "Unspecified vulnerability in the SCTP sockets implementation in Sun OpenSolaris snv_106 through snv_107 allows local users to cause a denial of service (panic) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c33m-9jcc-g5gx/GHSA-c33m-9jcc-g5gx.json b/advisories/unreviewed/2022/05/GHSA-c33m-9jcc-g5gx/GHSA-c33m-9jcc-g5gx.json index 23fa195566e..b2eefe361c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-c33m-9jcc-g5gx/GHSA-c33m-9jcc-g5gx.json +++ b/advisories/unreviewed/2022/05/GHSA-c33m-9jcc-g5gx/GHSA-c33m-9jcc-g5gx.json @@ -7,12 +7,8 @@ "CVE-2009-1038" ], "details": "Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) image_id parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the (2) user parameter in a modif action to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c399-mchw-www5/GHSA-c399-mchw-www5.json b/advisories/unreviewed/2022/05/GHSA-c399-mchw-www5/GHSA-c399-mchw-www5.json index e0b37c34f22..e044cb583c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-c399-mchw-www5/GHSA-c399-mchw-www5.json +++ b/advisories/unreviewed/2022/05/GHSA-c399-mchw-www5/GHSA-c399-mchw-www5.json @@ -7,12 +7,8 @@ "CVE-2009-1426" ], "details": "Unspecified vulnerability on HP ProLiant DL and ML 100 Series G5, G5p, and G6 servers with ProLiant Onboard Administrator Powered by LO100i (formerly Lights Out 100) 3.07 and earlier allows remote attackers to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3hc-w4pf-h2v7/GHSA-c3hc-w4pf-h2v7.json b/advisories/unreviewed/2022/05/GHSA-c3hc-w4pf-h2v7/GHSA-c3hc-w4pf-h2v7.json index d78e971f68e..52fe6c53e72 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3hc-w4pf-h2v7/GHSA-c3hc-w4pf-h2v7.json +++ b/advisories/unreviewed/2022/05/GHSA-c3hc-w4pf-h2v7/GHSA-c3hc-w4pf-h2v7.json @@ -7,12 +7,8 @@ "CVE-2009-1209" ], "details": "Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote attackers to execute arbitrary code via a script tag with a long defer attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c76r-qxm5-v6h3/GHSA-c76r-qxm5-v6h3.json b/advisories/unreviewed/2022/05/GHSA-c76r-qxm5-v6h3/GHSA-c76r-qxm5-v6h3.json index 7af3f3e90e6..7624e9ee5d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-c76r-qxm5-v6h3/GHSA-c76r-qxm5-v6h3.json +++ b/advisories/unreviewed/2022/05/GHSA-c76r-qxm5-v6h3/GHSA-c76r-qxm5-v6h3.json @@ -7,12 +7,8 @@ "CVE-2009-1339" ], "details": "Cross-site request forgery (CSRF) vulnerability in TWiki before 4.3.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update pages, as demonstrated by a URL for a save script in the SRC attribute of an IMG element, a related issue to CVE-2009-1434.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7vw-qrg6-jjm5/GHSA-c7vw-qrg6-jjm5.json b/advisories/unreviewed/2022/05/GHSA-c7vw-qrg6-jjm5/GHSA-c7vw-qrg6-jjm5.json index e159664ac68..08babfd591e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7vw-qrg6-jjm5/GHSA-c7vw-qrg6-jjm5.json +++ b/advisories/unreviewed/2022/05/GHSA-c7vw-qrg6-jjm5/GHSA-c7vw-qrg6-jjm5.json @@ -7,12 +7,8 @@ "CVE-2009-1241" ], "details": "Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8fq-fgj2-fx4p/GHSA-c8fq-fgj2-fx4p.json b/advisories/unreviewed/2022/05/GHSA-c8fq-fgj2-fx4p/GHSA-c8fq-fgj2-fx4p.json index cd7e1f84441..30ecd66d537 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8fq-fgj2-fx4p/GHSA-c8fq-fgj2-fx4p.json +++ b/advisories/unreviewed/2022/05/GHSA-c8fq-fgj2-fx4p/GHSA-c8fq-fgj2-fx4p.json @@ -7,12 +7,8 @@ "CVE-2009-1345" ], "details": "SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the id_document parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8mj-m6cr-cmjp/GHSA-c8mj-m6cr-cmjp.json b/advisories/unreviewed/2022/05/GHSA-c8mj-m6cr-cmjp/GHSA-c8mj-m6cr-cmjp.json index 61d41d2ace5..c6481d76d90 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8mj-m6cr-cmjp/GHSA-c8mj-m6cr-cmjp.json +++ b/advisories/unreviewed/2022/05/GHSA-c8mj-m6cr-cmjp/GHSA-c8mj-m6cr-cmjp.json @@ -7,12 +7,8 @@ "CVE-2009-1458" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8pm-7v2j-xmww/GHSA-c8pm-7v2j-xmww.json b/advisories/unreviewed/2022/05/GHSA-c8pm-7v2j-xmww/GHSA-c8pm-7v2j-xmww.json index 21453184e05..8c120b41781 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8pm-7v2j-xmww/GHSA-c8pm-7v2j-xmww.json +++ b/advisories/unreviewed/2022/05/GHSA-c8pm-7v2j-xmww/GHSA-c8pm-7v2j-xmww.json @@ -7,12 +7,8 @@ "CVE-2009-1171" ], "details": "The TeX filter in Moodle 1.6 before 1.6.9+, 1.7 before 1.7.7+, 1.8 before 1.8.9, and 1.9 before 1.9.5 allows user-assisted attackers to read arbitrary files via an input command in a \"$$\" sequence, which causes LaTeX to include the contents of the file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9gf-r7p8-qf28/GHSA-c9gf-r7p8-qf28.json b/advisories/unreviewed/2022/05/GHSA-c9gf-r7p8-qf28/GHSA-c9gf-r7p8-qf28.json index aa10692cb7a..6395868fba6 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9gf-r7p8-qf28/GHSA-c9gf-r7p8-qf28.json +++ b/advisories/unreviewed/2022/05/GHSA-c9gf-r7p8-qf28/GHSA-c9gf-r7p8-qf28.json @@ -7,12 +7,8 @@ "CVE-2009-1122" ], "details": "The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfhm-pj55-pf52/GHSA-cfhm-pj55-pf52.json b/advisories/unreviewed/2022/05/GHSA-cfhm-pj55-pf52/GHSA-cfhm-pj55-pf52.json index dce4b111bde..39548343971 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfhm-pj55-pf52/GHSA-cfhm-pj55-pf52.json +++ b/advisories/unreviewed/2022/05/GHSA-cfhm-pj55-pf52/GHSA-cfhm-pj55-pf52.json @@ -7,12 +7,8 @@ "CVE-2009-0991" ], "details": "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-1970.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ch4r-pr8q-v56j/GHSA-ch4r-pr8q-v56j.json b/advisories/unreviewed/2022/05/GHSA-ch4r-pr8q-v56j/GHSA-ch4r-pr8q-v56j.json index 7ef2057e391..ce302055b33 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch4r-pr8q-v56j/GHSA-ch4r-pr8q-v56j.json +++ b/advisories/unreviewed/2022/05/GHSA-ch4r-pr8q-v56j/GHSA-ch4r-pr8q-v56j.json @@ -7,12 +7,8 @@ "CVE-2009-1089" ], "details": "Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjx6-9p2f-gmhj/GHSA-cjx6-9p2f-gmhj.json b/advisories/unreviewed/2022/05/GHSA-cjx6-9p2f-gmhj/GHSA-cjx6-9p2f-gmhj.json index dbbdc8ecc66..a4323013d47 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjx6-9p2f-gmhj/GHSA-cjx6-9p2f-gmhj.json +++ b/advisories/unreviewed/2022/05/GHSA-cjx6-9p2f-gmhj/GHSA-cjx6-9p2f-gmhj.json @@ -7,12 +7,8 @@ "CVE-2009-1224" ], "details": "SQL injection vulnerability in vsp-core/pub/themes/bismarck/gamestat.php in vsp stats processor 0.45 allows remote attackers to execute arbitrary SQL commands via the gameID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmp3-fqpg-7rmx/GHSA-cmp3-fqpg-7rmx.json b/advisories/unreviewed/2022/05/GHSA-cmp3-fqpg-7rmx/GHSA-cmp3-fqpg-7rmx.json index cdb9ab1ed2b..340a8b2a22c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmp3-fqpg-7rmx/GHSA-cmp3-fqpg-7rmx.json +++ b/advisories/unreviewed/2022/05/GHSA-cmp3-fqpg-7rmx/GHSA-cmp3-fqpg-7rmx.json @@ -7,12 +7,8 @@ "CVE-2009-1219" ], "details": "Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (daemon crash) via multiple requests to the default URI with alphabetic characters in the tzid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpqp-v482-xxhg/GHSA-cpqp-v482-xxhg.json b/advisories/unreviewed/2022/05/GHSA-cpqp-v482-xxhg/GHSA-cpqp-v482-xxhg.json index 0b959e9526a..fe741180f16 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpqp-v482-xxhg/GHSA-cpqp-v482-xxhg.json +++ b/advisories/unreviewed/2022/05/GHSA-cpqp-v482-xxhg/GHSA-cpqp-v482-xxhg.json @@ -7,12 +7,8 @@ "CVE-2009-1250" ], "details": "The cache manager in the client in OpenAFS 1.0 through 1.4.8 and 1.5.0 through 1.5.58, and IBM AFS 3.6 before Patch 19, on Linux allows remote attackers to cause a denial of service (system crash) via an RX response with a large error-code value that is interpreted as a pointer and dereferenced, related to use of the ERR_PTR macro.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cq2w-vhhm-7v5j/GHSA-cq2w-vhhm-7v5j.json b/advisories/unreviewed/2022/05/GHSA-cq2w-vhhm-7v5j/GHSA-cq2w-vhhm-7v5j.json index 868bd9a2929..e6701426b2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq2w-vhhm-7v5j/GHSA-cq2w-vhhm-7v5j.json +++ b/advisories/unreviewed/2022/05/GHSA-cq2w-vhhm-7v5j/GHSA-cq2w-vhhm-7v5j.json @@ -7,12 +7,8 @@ "CVE-2009-1465" ], "details": "Application Access Server (A-A-S) 2.0.48 has \"wildbat\" as its default password for the admin account, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cq47-jcp2-c4jc/GHSA-cq47-jcp2-c4jc.json b/advisories/unreviewed/2022/05/GHSA-cq47-jcp2-c4jc/GHSA-cq47-jcp2-c4jc.json index 8df519c8914..e93ede2d4bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq47-jcp2-c4jc/GHSA-cq47-jcp2-c4jc.json +++ b/advisories/unreviewed/2022/05/GHSA-cq47-jcp2-c4jc/GHSA-cq47-jcp2-c4jc.json @@ -7,12 +7,8 @@ "CVE-2009-0726" ], "details": "SQL injection vulnerability in the GigCalendar (com_gigcal) component 1.0 for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the gigcal_gigs_id parameter in a details action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr68-wvh8-vxw3/GHSA-cr68-wvh8-vxw3.json b/advisories/unreviewed/2022/05/GHSA-cr68-wvh8-vxw3/GHSA-cr68-wvh8-vxw3.json index 2da6998350d..38b44f34872 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr68-wvh8-vxw3/GHSA-cr68-wvh8-vxw3.json +++ b/advisories/unreviewed/2022/05/GHSA-cr68-wvh8-vxw3/GHSA-cr68-wvh8-vxw3.json @@ -7,12 +7,8 @@ "CVE-2009-1246" ], "details": "Multiple directory traversal vulnerabilities in Blogplus 1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) row_mysql_blocks_center_down[file] parameter to includes/block_center_down.php; (2) row_mysql_blocks_center_top[file] includes/parameter to block_center_top.php; (3) row_mysql_blocks_left[file] parameter to includes/block_left.php; (4) row_mysql_blocks_right[file] parameter to includes/block_right.php; and row_mysql_bloginfo[theme] parameter to (5) includes/window_down.php and (6) includes/window_top.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv97-w93j-6fh5/GHSA-cv97-w93j-6fh5.json b/advisories/unreviewed/2022/05/GHSA-cv97-w93j-6fh5/GHSA-cv97-w93j-6fh5.json index eb16a560864..b93359dd5f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv97-w93j-6fh5/GHSA-cv97-w93j-6fh5.json +++ b/advisories/unreviewed/2022/05/GHSA-cv97-w93j-6fh5/GHSA-cv97-w93j-6fh5.json @@ -7,12 +7,8 @@ "CVE-2009-1032" ], "details": "SQL injection vulnerability in gallery_list.php in YABSoft Advanced Image Hosting (AIH) Script 2.3 allows remote attackers to execute arbitrary SQL commands via the gal parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f338-5f7m-892w/GHSA-f338-5f7m-892w.json b/advisories/unreviewed/2022/05/GHSA-f338-5f7m-892w/GHSA-f338-5f7m-892w.json index 39d0d0784c0..84e875c2c42 100644 --- a/advisories/unreviewed/2022/05/GHSA-f338-5f7m-892w/GHSA-f338-5f7m-892w.json +++ b/advisories/unreviewed/2022/05/GHSA-f338-5f7m-892w/GHSA-f338-5f7m-892w.json @@ -7,12 +7,8 @@ "CVE-2009-1196" ], "details": "The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a \"pointer use-after-delete flaw.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f454-gp59-g2j5/GHSA-f454-gp59-g2j5.json b/advisories/unreviewed/2022/05/GHSA-f454-gp59-g2j5/GHSA-f454-gp59-g2j5.json index f66008e5782..e20a6d8ba80 100644 --- a/advisories/unreviewed/2022/05/GHSA-f454-gp59-g2j5/GHSA-f454-gp59-g2j5.json +++ b/advisories/unreviewed/2022/05/GHSA-f454-gp59-g2j5/GHSA-f454-gp59-g2j5.json @@ -7,12 +7,8 @@ "CVE-2009-1174" ], "details": "The Web Services Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35 and 7.0 before 7.0.0.3 has an unspecified \"security problem\" in the XML digital-signature specification, which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4qw-q2x4-xgmh/GHSA-f4qw-q2x4-xgmh.json b/advisories/unreviewed/2022/05/GHSA-f4qw-q2x4-xgmh/GHSA-f4qw-q2x4-xgmh.json index 1b0f89c681c..e3856452fa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4qw-q2x4-xgmh/GHSA-f4qw-q2x4-xgmh.json +++ b/advisories/unreviewed/2022/05/GHSA-f4qw-q2x4-xgmh/GHSA-f4qw-q2x4-xgmh.json @@ -7,12 +7,8 @@ "CVE-2009-1233" ], "details": "Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an XML document containing many nested A elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5mp-3h5g-9fgh/GHSA-f5mp-3h5g-9fgh.json b/advisories/unreviewed/2022/05/GHSA-f5mp-3h5g-9fgh/GHSA-f5mp-3h5g-9fgh.json index 6fd4204d9f2..90732c1ad4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5mp-3h5g-9fgh/GHSA-f5mp-3h5g-9fgh.json +++ b/advisories/unreviewed/2022/05/GHSA-f5mp-3h5g-9fgh/GHSA-f5mp-3h5g-9fgh.json @@ -7,12 +7,8 @@ "CVE-2009-1417" ], "details": "gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f8vp-2v87-h22x/GHSA-f8vp-2v87-h22x.json b/advisories/unreviewed/2022/05/GHSA-f8vp-2v87-h22x/GHSA-f8vp-2v87-h22x.json index 79c32839008..69b2ee0d819 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8vp-2v87-h22x/GHSA-f8vp-2v87-h22x.json +++ b/advisories/unreviewed/2022/05/GHSA-f8vp-2v87-h22x/GHSA-f8vp-2v87-h22x.json @@ -7,12 +7,8 @@ "CVE-2009-0967" ], "details": "The FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a denial of service (service hang) via a large number of SMNT commands without an argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9rq-57pv-7hrf/GHSA-f9rq-57pv-7hrf.json b/advisories/unreviewed/2022/05/GHSA-f9rq-57pv-7hrf/GHSA-f9rq-57pv-7hrf.json index 31220917c35..6fc6179799b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9rq-57pv-7hrf/GHSA-f9rq-57pv-7hrf.json +++ b/advisories/unreviewed/2022/05/GHSA-f9rq-57pv-7hrf/GHSA-f9rq-57pv-7hrf.json @@ -7,12 +7,8 @@ "CVE-2009-1168" ], "details": "Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY9, 12.2(33)SXI1, 12.2XNC before 12.2(33)XNC2, 12.2XND before 12.2(33)XND1, and 12.4(24)T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to cause a denial of service (memory corruption and device reload) by using an RFC4271 peer to send an update with a long series of AS numbers, aka Bug ID CSCsy86021.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcm9-v8mr-8ff9/GHSA-fcm9-v8mr-8ff9.json b/advisories/unreviewed/2022/05/GHSA-fcm9-v8mr-8ff9/GHSA-fcm9-v8mr-8ff9.json index d058fe2b6de..8df37c35dd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcm9-v8mr-8ff9/GHSA-fcm9-v8mr-8ff9.json +++ b/advisories/unreviewed/2022/05/GHSA-fcm9-v8mr-8ff9/GHSA-fcm9-v8mr-8ff9.json @@ -7,12 +7,8 @@ "CVE-2009-1336" ], "details": "fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a long filename, related to the encode_lookup function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcwp-hjrv-px68/GHSA-fcwp-hjrv-px68.json b/advisories/unreviewed/2022/05/GHSA-fcwp-hjrv-px68/GHSA-fcwp-hjrv-px68.json index 047398ffd03..fb86d6fc918 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcwp-hjrv-px68/GHSA-fcwp-hjrv-px68.json +++ b/advisories/unreviewed/2022/05/GHSA-fcwp-hjrv-px68/GHSA-fcwp-hjrv-px68.json @@ -7,12 +7,8 @@ "CVE-2009-1239" ], "details": "IBM DB2 9.1 before FP7 returns incorrect query results in certain situations related to the order of application of an INNER JOIN predicate and an OUTER JOIN predicate, which might allow attackers to obtain sensitive information via a crafted query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg2g-28hw-pqvr/GHSA-fg2g-28hw-pqvr.json b/advisories/unreviewed/2022/05/GHSA-fg2g-28hw-pqvr/GHSA-fg2g-28hw-pqvr.json index 8010b130f6f..dc4d8d53258 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg2g-28hw-pqvr/GHSA-fg2g-28hw-pqvr.json +++ b/advisories/unreviewed/2022/05/GHSA-fg2g-28hw-pqvr/GHSA-fg2g-28hw-pqvr.json @@ -7,12 +7,8 @@ "CVE-2009-1030" ], "details": "Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgjp-243p-6367/GHSA-fgjp-243p-6367.json b/advisories/unreviewed/2022/05/GHSA-fgjp-243p-6367/GHSA-fgjp-243p-6367.json index 64c3926752d..ee625702ae7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgjp-243p-6367/GHSA-fgjp-243p-6367.json +++ b/advisories/unreviewed/2022/05/GHSA-fgjp-243p-6367/GHSA-fgjp-243p-6367.json @@ -7,12 +7,8 @@ "CVE-2009-0748" ], "details": "The ext4_fill_super function in fs/ext4/super.c in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28 before 2.6.28.7 does not validate the superblock configuration, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) by attempting to mount a crafted ext4 filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhf8-78f6-2vv8/GHSA-fhf8-78f6-2vv8.json b/advisories/unreviewed/2022/05/GHSA-fhf8-78f6-2vv8/GHSA-fhf8-78f6-2vv8.json index e772a9b2b69..c107b7bd7b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhf8-78f6-2vv8/GHSA-fhf8-78f6-2vv8.json +++ b/advisories/unreviewed/2022/05/GHSA-fhf8-78f6-2vv8/GHSA-fhf8-78f6-2vv8.json @@ -7,12 +7,8 @@ "CVE-2009-0975" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0978.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fj5m-7qwm-v3qc/GHSA-fj5m-7qwm-v3qc.json b/advisories/unreviewed/2022/05/GHSA-fj5m-7qwm-v3qc/GHSA-fj5m-7qwm-v3qc.json index e8125b939bb..5714858d18f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj5m-7qwm-v3qc/GHSA-fj5m-7qwm-v3qc.json +++ b/advisories/unreviewed/2022/05/GHSA-fj5m-7qwm-v3qc/GHSA-fj5m-7qwm-v3qc.json @@ -7,12 +7,8 @@ "CVE-2009-0941" ], "details": "The HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders has no management password by default, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fj7x-qvgj-4pm7/GHSA-fj7x-qvgj-4pm7.json b/advisories/unreviewed/2022/05/GHSA-fj7x-qvgj-4pm7/GHSA-fj7x-qvgj-4pm7.json index b72e08dd688..0e5dc15f2c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj7x-qvgj-4pm7/GHSA-fj7x-qvgj-4pm7.json +++ b/advisories/unreviewed/2022/05/GHSA-fj7x-qvgj-4pm7/GHSA-fj7x-qvgj-4pm7.json @@ -7,12 +7,8 @@ "CVE-2009-0721" ], "details": "Unspecified vulnerability in Easy Login in the Sender module in HP Remote Graphics Software (RGS) 4.0.0 through 5.2.4 allows remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjqc-28wv-fqr3/GHSA-fjqc-28wv-fqr3.json b/advisories/unreviewed/2022/05/GHSA-fjqc-28wv-fqr3/GHSA-fjqc-28wv-fqr3.json index edf4a426ad7..d61362cad26 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjqc-28wv-fqr3/GHSA-fjqc-28wv-fqr3.json +++ b/advisories/unreviewed/2022/05/GHSA-fjqc-28wv-fqr3/GHSA-fjqc-28wv-fqr3.json @@ -7,12 +7,8 @@ "CVE-2009-1474" ], "details": "The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp59-j4v9-88wv/GHSA-fp59-j4v9-88wv.json b/advisories/unreviewed/2022/05/GHSA-fp59-j4v9-88wv/GHSA-fp59-j4v9-88wv.json index 15ef11563de..83bf7bfa531 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp59-j4v9-88wv/GHSA-fp59-j4v9-88wv.json +++ b/advisories/unreviewed/2022/05/GHSA-fp59-j4v9-88wv/GHSA-fp59-j4v9-88wv.json @@ -7,12 +7,8 @@ "CVE-2009-1051" ], "details": "FubarForum 1.6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fq52-j5vg-rwj5/GHSA-fq52-j5vg-rwj5.json b/advisories/unreviewed/2022/05/GHSA-fq52-j5vg-rwj5/GHSA-fq52-j5vg-rwj5.json index fd7355919a0..299b4173d27 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq52-j5vg-rwj5/GHSA-fq52-j5vg-rwj5.json +++ b/advisories/unreviewed/2022/05/GHSA-fq52-j5vg-rwj5/GHSA-fq52-j5vg-rwj5.json @@ -7,12 +7,8 @@ "CVE-2009-1291" ], "details": "Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via \"inbound data,\" as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr8m-x532-426p/GHSA-fr8m-x532-426p.json b/advisories/unreviewed/2022/05/GHSA-fr8m-x532-426p/GHSA-fr8m-x532-426p.json index 6ba140fc442..33bc5f68c2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr8m-x532-426p/GHSA-fr8m-x532-426p.json +++ b/advisories/unreviewed/2022/05/GHSA-fr8m-x532-426p/GHSA-fr8m-x532-426p.json @@ -7,12 +7,8 @@ "CVE-2009-1280" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the com_media component for Joomla! 1.5.x through 1.5.9 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frhv-7qjc-6v9c/GHSA-frhv-7qjc-6v9c.json b/advisories/unreviewed/2022/05/GHSA-frhv-7qjc-6v9c/GHSA-frhv-7qjc-6v9c.json index be8034c72c0..c2dcea589eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-frhv-7qjc-6v9c/GHSA-frhv-7qjc-6v9c.json +++ b/advisories/unreviewed/2022/05/GHSA-frhv-7qjc-6v9c/GHSA-frhv-7qjc-6v9c.json @@ -7,12 +7,8 @@ "CVE-2009-1226" ], "details": "core/admin/delete.php in Podcast Generator 1.1 and earlier does not properly restrict access to administrative functions, which allows remote attackers to delete arbitrary files via the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-frxh-rjh4-xf37/GHSA-frxh-rjh4-xf37.json b/advisories/unreviewed/2022/05/GHSA-frxh-rjh4-xf37/GHSA-frxh-rjh4-xf37.json index 92b2966246f..7763df9ee23 100644 --- a/advisories/unreviewed/2022/05/GHSA-frxh-rjh4-xf37/GHSA-frxh-rjh4-xf37.json +++ b/advisories/unreviewed/2022/05/GHSA-frxh-rjh4-xf37/GHSA-frxh-rjh4-xf37.json @@ -7,12 +7,8 @@ "CVE-2009-1082" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by privileges for account creation and other administrative capabilities, related to the saveNoValidate action and saveNoValidateAllowedFormsAndWorkflows IDs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fwgg-m3xg-xhjx/GHSA-fwgg-m3xg-xhjx.json b/advisories/unreviewed/2022/05/GHSA-fwgg-m3xg-xhjx/GHSA-fwgg-m3xg-xhjx.json index a1022a171a0..2976b0b00f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwgg-m3xg-xhjx/GHSA-fwgg-m3xg-xhjx.json +++ b/advisories/unreviewed/2022/05/GHSA-fwgg-m3xg-xhjx/GHSA-fwgg-m3xg-xhjx.json @@ -7,12 +7,8 @@ "CVE-2009-1042" ], "details": "Unspecified vulnerability in Apple Safari on Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g2pr-rwvh-8xx9/GHSA-g2pr-rwvh-8xx9.json b/advisories/unreviewed/2022/05/GHSA-g2pr-rwvh-8xx9/GHSA-g2pr-rwvh-8xx9.json index df26c6ecacf..5bd2d2b0d9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2pr-rwvh-8xx9/GHSA-g2pr-rwvh-8xx9.json +++ b/advisories/unreviewed/2022/05/GHSA-g2pr-rwvh-8xx9/GHSA-g2pr-rwvh-8xx9.json @@ -7,12 +7,8 @@ "CVE-2009-1052" ], "details": "FireAnt 1.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g37c-96jr-qv9c/GHSA-g37c-96jr-qv9c.json b/advisories/unreviewed/2022/05/GHSA-g37c-96jr-qv9c/GHSA-g37c-96jr-qv9c.json index 995b4dcc81e..c66c01cf2a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-g37c-96jr-qv9c/GHSA-g37c-96jr-qv9c.json +++ b/advisories/unreviewed/2022/05/GHSA-g37c-96jr-qv9c/GHSA-g37c-96jr-qv9c.json @@ -7,12 +7,8 @@ "CVE-2009-1454" ], "details": "Cross-site scripting (XSS) vulnerability in tasks.php in WebCollab before 2.50 (aka Billy Goat) allows remote attackers to inject arbitrary web script or HTML via the selection parameter in a todo action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3q8-v52r-33g4/GHSA-g3q8-v52r-33g4.json b/advisories/unreviewed/2022/05/GHSA-g3q8-v52r-33g4/GHSA-g3q8-v52r-33g4.json index 527746cfe42..21076b15a14 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3q8-v52r-33g4/GHSA-g3q8-v52r-33g4.json +++ b/advisories/unreviewed/2022/05/GHSA-g3q8-v52r-33g4/GHSA-g3q8-v52r-33g4.json @@ -7,12 +7,8 @@ "CVE-2009-1035" ], "details": "Cross-site scripting (XSS) vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via Cascading Style Sheets (CSS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3r3-3vcq-q6hc/GHSA-g3r3-3vcq-q6hc.json b/advisories/unreviewed/2022/05/GHSA-g3r3-3vcq-q6hc/GHSA-g3r3-3vcq-q6hc.json index 0f8eb9e731b..031e5a11be8 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3r3-3vcq-q6hc/GHSA-g3r3-3vcq-q6hc.json +++ b/advisories/unreviewed/2022/05/GHSA-g3r3-3vcq-q6hc/GHSA-g3r3-3vcq-q6hc.json @@ -7,12 +7,8 @@ "CVE-2009-1309" ], "details": "Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g44f-h6vv-67rm/GHSA-g44f-h6vv-67rm.json b/advisories/unreviewed/2022/05/GHSA-g44f-h6vv-67rm/GHSA-g44f-h6vv-67rm.json index 2b1f5eb52b4..d11630fccaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-g44f-h6vv-67rm/GHSA-g44f-h6vv-67rm.json +++ b/advisories/unreviewed/2022/05/GHSA-g44f-h6vv-67rm/GHSA-g44f-h6vv-67rm.json @@ -7,12 +7,8 @@ "CVE-2009-1248" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the theme_directory parameter to (1) container.php and (2) header.php in themes/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4rw-j5pq-mqc4/GHSA-g4rw-j5pq-mqc4.json b/advisories/unreviewed/2022/05/GHSA-g4rw-j5pq-mqc4/GHSA-g4rw-j5pq-mqc4.json index 295aaae38c1..bd6a4726e67 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4rw-j5pq-mqc4/GHSA-g4rw-j5pq-mqc4.json +++ b/advisories/unreviewed/2022/05/GHSA-g4rw-j5pq-mqc4/GHSA-g4rw-j5pq-mqc4.json @@ -7,12 +7,8 @@ "CVE-2009-1464" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary programs via a command job, (2) stop services via a setservice job, or (3) terminate processes via a killprocess job.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g69g-mf2j-vrwq/GHSA-g69g-mf2j-vrwq.json b/advisories/unreviewed/2022/05/GHSA-g69g-mf2j-vrwq/GHSA-g69g-mf2j-vrwq.json index be5ade4d58c..ce69db631d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-g69g-mf2j-vrwq/GHSA-g69g-mf2j-vrwq.json +++ b/advisories/unreviewed/2022/05/GHSA-g69g-mf2j-vrwq/GHSA-g69g-mf2j-vrwq.json @@ -7,12 +7,8 @@ "CVE-2009-1303" ], "details": "The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -152,9 +148,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g9h7-2jq2-cjr2/GHSA-g9h7-2jq2-cjr2.json b/advisories/unreviewed/2022/05/GHSA-g9h7-2jq2-cjr2/GHSA-g9h7-2jq2-cjr2.json index 295e54ae334..7b2b1f765a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9h7-2jq2-cjr2/GHSA-g9h7-2jq2-cjr2.json +++ b/advisories/unreviewed/2022/05/GHSA-g9h7-2jq2-cjr2/GHSA-g9h7-2jq2-cjr2.json @@ -7,12 +7,8 @@ "CVE-2009-0951" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC compression file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf4f-cr5f-q363/GHSA-gf4f-cr5f-q363.json b/advisories/unreviewed/2022/05/GHSA-gf4f-cr5f-q363/GHSA-gf4f-cr5f-q363.json index 7211f49b911..9777bb78b1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf4f-cr5f-q363/GHSA-gf4f-cr5f-q363.json +++ b/advisories/unreviewed/2022/05/GHSA-gf4f-cr5f-q363/GHSA-gf4f-cr5f-q363.json @@ -7,12 +7,8 @@ "CVE-2009-1298" ], "details": "The ip_frag_reasm function in net/ipv4/ip_fragment.c in the Linux kernel 2.6.32-rc8, and 2.6.29 and later versions before 2.6.32, calls IP_INC_STATS_BH with an incorrect argument, which allows remote attackers to cause a denial of service (NULL pointer dereference and hang) via long IP packets, possibly related to the ip_defrag function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfg2-qwmm-84qp/GHSA-gfg2-qwmm-84qp.json b/advisories/unreviewed/2022/05/GHSA-gfg2-qwmm-84qp/GHSA-gfg2-qwmm-84qp.json index 8d238419cc9..0cae3fd6569 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfg2-qwmm-84qp/GHSA-gfg2-qwmm-84qp.json +++ b/advisories/unreviewed/2022/05/GHSA-gfg2-qwmm-84qp/GHSA-gfg2-qwmm-84qp.json @@ -7,12 +7,8 @@ "CVE-2009-1157" ], "details": "Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28, and 8.1 before 8.1(2)19 allows remote attackers to cause a denial of service (memory consumption or device reload) via a crafted TCP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfmw-m62w-mjw3/GHSA-gfmw-m62w-mjw3.json b/advisories/unreviewed/2022/05/GHSA-gfmw-m62w-mjw3/GHSA-gfmw-m62w-mjw3.json index 58cc4e52304..e8331ca248f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfmw-m62w-mjw3/GHSA-gfmw-m62w-mjw3.json +++ b/advisories/unreviewed/2022/05/GHSA-gfmw-m62w-mjw3/GHSA-gfmw-m62w-mjw3.json @@ -7,12 +7,8 @@ "CVE-2009-1333" ], "details": "Cross-site scripting (XSS) vulnerability in refresh_rate.htm in the web interface on the HP Deskjet 6840 printer with firmware XF1M131A allows remote attackers to inject arbitrary web script or HTML via the POST request body.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggvq-hq84-xw7q/GHSA-ggvq-hq84-xw7q.json b/advisories/unreviewed/2022/05/GHSA-ggvq-hq84-xw7q/GHSA-ggvq-hq84-xw7q.json index e52b0d05a2d..1c62a9f1d2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggvq-hq84-xw7q/GHSA-ggvq-hq84-xw7q.json +++ b/advisories/unreviewed/2022/05/GHSA-ggvq-hq84-xw7q/GHSA-ggvq-hq84-xw7q.json @@ -7,12 +7,8 @@ "CVE-2009-1344" ], "details": "Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggxf-mg5q-59fp/GHSA-ggxf-mg5q-59fp.json b/advisories/unreviewed/2022/05/GHSA-ggxf-mg5q-59fp/GHSA-ggxf-mg5q-59fp.json index 237403a7812..8fc9a03d19a 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggxf-mg5q-59fp/GHSA-ggxf-mg5q-59fp.json +++ b/advisories/unreviewed/2022/05/GHSA-ggxf-mg5q-59fp/GHSA-ggxf-mg5q-59fp.json @@ -7,12 +7,8 @@ "CVE-2009-1358" ], "details": "apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gh2c-mj24-72g9/GHSA-gh2c-mj24-72g9.json b/advisories/unreviewed/2022/05/GHSA-gh2c-mj24-72g9/GHSA-gh2c-mj24-72g9.json index d8c4c7bf43f..313eaa606a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh2c-mj24-72g9/GHSA-gh2c-mj24-72g9.json +++ b/advisories/unreviewed/2022/05/GHSA-gh2c-mj24-72g9/GHSA-gh2c-mj24-72g9.json @@ -7,12 +7,8 @@ "CVE-2009-1419" ], "details": "Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gj4c-9w7g-7xf9/GHSA-gj4c-9w7g-7xf9.json b/advisories/unreviewed/2022/05/GHSA-gj4c-9w7g-7xf9/GHSA-gj4c-9w7g-7xf9.json index d55c645c527..efc4cfaf257 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj4c-9w7g-7xf9/GHSA-gj4c-9w7g-7xf9.json +++ b/advisories/unreviewed/2022/05/GHSA-gj4c-9w7g-7xf9/GHSA-gj4c-9w7g-7xf9.json @@ -7,12 +7,8 @@ "CVE-2009-1004" ], "details": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gj8x-qr9x-mwxx/GHSA-gj8x-qr9x-mwxx.json b/advisories/unreviewed/2022/05/GHSA-gj8x-qr9x-mwxx/GHSA-gj8x-qr9x-mwxx.json index 758007cee8a..0162c0fbf34 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj8x-qr9x-mwxx/GHSA-gj8x-qr9x-mwxx.json +++ b/advisories/unreviewed/2022/05/GHSA-gj8x-qr9x-mwxx/GHSA-gj8x-qr9x-mwxx.json @@ -7,12 +7,8 @@ "CVE-2009-1403" ], "details": "SQL injection vulnerability in product_info.php in CRE Loaded 6.2 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm32-4vhp-pm77/GHSA-gm32-4vhp-pm77.json b/advisories/unreviewed/2022/05/GHSA-gm32-4vhp-pm77/GHSA-gm32-4vhp-pm77.json index f64fa297882..31e47c55332 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm32-4vhp-pm77/GHSA-gm32-4vhp-pm77.json +++ b/advisories/unreviewed/2022/05/GHSA-gm32-4vhp-pm77/GHSA-gm32-4vhp-pm77.json @@ -7,12 +7,8 @@ "CVE-2009-1469" ], "details": "CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element of an XML document, as demonstrated by triggering an e-mail message from the server that contains a user's correct credentials, and requests that the user compose a reply that includes this message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm6x-h9cf-g8wr/GHSA-gm6x-h9cf-g8wr.json b/advisories/unreviewed/2022/05/GHSA-gm6x-h9cf-g8wr/GHSA-gm6x-h9cf-g8wr.json index 9eaeadd191c..aeb7979c7bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm6x-h9cf-g8wr/GHSA-gm6x-h9cf-g8wr.json +++ b/advisories/unreviewed/2022/05/GHSA-gm6x-h9cf-g8wr/GHSA-gm6x-h9cf-g8wr.json @@ -7,12 +7,8 @@ "CVE-2009-0983" ], "details": "Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gp26-fcr7-gj7r/GHSA-gp26-fcr7-gj7r.json b/advisories/unreviewed/2022/05/GHSA-gp26-fcr7-gj7r/GHSA-gp26-fcr7-gj7r.json index 9040b32a2a4..c8be30d5391 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp26-fcr7-gj7r/GHSA-gp26-fcr7-gj7r.json +++ b/advisories/unreviewed/2022/05/GHSA-gp26-fcr7-gj7r/GHSA-gp26-fcr7-gj7r.json @@ -7,12 +7,8 @@ "CVE-2009-1204" ], "details": "Cross-site scripting (XSS) vulnerability in TikiWiki (Tiki) CMS/Groupware 2.2 allows remote attackers to inject arbitrary web script or HTML via the PHP_SELF portion of a URI to (1) tiki-galleries.php, (2) tiki-list_file_gallery.php, (3) tiki-listpages.php, and (4) tiki-orphan_pages.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq7c-p43x-m4p5/GHSA-gq7c-p43x-m4p5.json b/advisories/unreviewed/2022/05/GHSA-gq7c-p43x-m4p5/GHSA-gq7c-p43x-m4p5.json index 2168bcb774f..5454b148b6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq7c-p43x-m4p5/GHSA-gq7c-p43x-m4p5.json +++ b/advisories/unreviewed/2022/05/GHSA-gq7c-p43x-m4p5/GHSA-gq7c-p43x-m4p5.json @@ -7,12 +7,8 @@ "CVE-2009-0937" ], "details": "Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gq7m-6x7g-3cg4/GHSA-gq7m-6x7g-3cg4.json b/advisories/unreviewed/2022/05/GHSA-gq7m-6x7g-3cg4/GHSA-gq7m-6x7g-3cg4.json index 6585f63aa8c..5cafacaab42 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq7m-6x7g-3cg4/GHSA-gq7m-6x7g-3cg4.json +++ b/advisories/unreviewed/2022/05/GHSA-gq7m-6x7g-3cg4/GHSA-gq7m-6x7g-3cg4.json @@ -7,12 +7,8 @@ "CVE-2009-1130" ], "details": "Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted structure in a Notes container in a PowerPoint file that causes PowerPoint to read more data than was allocated when creating a C++ object, leading to an overwrite of a function pointer, aka \"Heap Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqf9-gx92-58wc/GHSA-gqf9-gx92-58wc.json b/advisories/unreviewed/2022/05/GHSA-gqf9-gx92-58wc/GHSA-gqf9-gx92-58wc.json index 1848bba6336..4ed7965a6d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqf9-gx92-58wc/GHSA-gqf9-gx92-58wc.json +++ b/advisories/unreviewed/2022/05/GHSA-gqf9-gx92-58wc/GHSA-gqf9-gx92-58wc.json @@ -7,12 +7,8 @@ "CVE-2009-1343" ], "details": "Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x before 5.x-4.5 and 6.x before 6.x-1.5, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via content titles.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxc8-3g43-8358/GHSA-gxc8-3g43-8358.json b/advisories/unreviewed/2022/05/GHSA-gxc8-3g43-8358/GHSA-gxc8-3g43-8358.json index b9b0a638406..25082911458 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxc8-3g43-8358/GHSA-gxc8-3g43-8358.json +++ b/advisories/unreviewed/2022/05/GHSA-gxc8-3g43-8358/GHSA-gxc8-3g43-8358.json @@ -7,12 +7,8 @@ "CVE-2009-1321" ], "details": "Cross-site scripting (XSS) vulnerability in search.asp in ASP Product Catalog 1.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h29h-q852-5fjw/GHSA-h29h-q852-5fjw.json b/advisories/unreviewed/2022/05/GHSA-h29h-q852-5fjw/GHSA-h29h-q852-5fjw.json index f6399394620..0ac73793535 100644 --- a/advisories/unreviewed/2022/05/GHSA-h29h-q852-5fjw/GHSA-h29h-q852-5fjw.json +++ b/advisories/unreviewed/2022/05/GHSA-h29h-q852-5fjw/GHSA-h29h-q852-5fjw.json @@ -7,12 +7,8 @@ "CVE-2009-1282" ], "details": "SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glf_session cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h336-66m5-x235/GHSA-h336-66m5-x235.json b/advisories/unreviewed/2022/05/GHSA-h336-66m5-x235/GHSA-h336-66m5-x235.json index 0407af1e0cc..c18516f6b2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h336-66m5-x235/GHSA-h336-66m5-x235.json +++ b/advisories/unreviewed/2022/05/GHSA-h336-66m5-x235/GHSA-h336-66m5-x235.json @@ -7,12 +7,8 @@ "CVE-2009-1279" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when \"Gather Search Statistics\" is enabled, and (3) the category view in the com_content component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3r6-hhmp-hhmc/GHSA-h3r6-hhmp-hhmc.json b/advisories/unreviewed/2022/05/GHSA-h3r6-hhmp-hhmc/GHSA-h3r6-hhmp-hhmc.json index 328db40573a..61bd0c2ea99 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3r6-hhmp-hhmc/GHSA-h3r6-hhmp-hhmc.json +++ b/advisories/unreviewed/2022/05/GHSA-h3r6-hhmp-hhmc/GHSA-h3r6-hhmp-hhmc.json @@ -7,12 +7,8 @@ "CVE-2009-1254" ], "details": "James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3rv-m7w5-j5w5/GHSA-h3rv-m7w5-j5w5.json b/advisories/unreviewed/2022/05/GHSA-h3rv-m7w5-j5w5/GHSA-h3rv-m7w5-j5w5.json index b95edee6655..d6a3bef152f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3rv-m7w5-j5w5/GHSA-h3rv-m7w5-j5w5.json +++ b/advisories/unreviewed/2022/05/GHSA-h3rv-m7w5-j5w5/GHSA-h3rv-m7w5-j5w5.json @@ -7,12 +7,8 @@ "CVE-2009-1513" ], "details": "Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h446-mfq3-hx7g/GHSA-h446-mfq3-hx7g.json b/advisories/unreviewed/2022/05/GHSA-h446-mfq3-hx7g/GHSA-h446-mfq3-hx7g.json index e5bbd351b43..80875f8dc84 100644 --- a/advisories/unreviewed/2022/05/GHSA-h446-mfq3-hx7g/GHSA-h446-mfq3-hx7g.json +++ b/advisories/unreviewed/2022/05/GHSA-h446-mfq3-hx7g/GHSA-h446-mfq3-hx7g.json @@ -7,12 +7,8 @@ "CVE-2009-1341" ], "details": "Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h596-gpmm-rmph/GHSA-h596-gpmm-rmph.json b/advisories/unreviewed/2022/05/GHSA-h596-gpmm-rmph/GHSA-h596-gpmm-rmph.json index 90cf14400df..84a83a97f16 100644 --- a/advisories/unreviewed/2022/05/GHSA-h596-gpmm-rmph/GHSA-h596-gpmm-rmph.json +++ b/advisories/unreviewed/2022/05/GHSA-h596-gpmm-rmph/GHSA-h596-gpmm-rmph.json @@ -7,12 +7,8 @@ "CVE-2009-1277" ], "details": "SQL injection vulnerability in index.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the member_id parameter in a viewprofile action. NOTE: the board_id issue is already covered by CVE-2008-2996.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5vc-337f-mrrj/GHSA-h5vc-337f-mrrj.json b/advisories/unreviewed/2022/05/GHSA-h5vc-337f-mrrj/GHSA-h5vc-337f-mrrj.json index 48058492f17..9f1469b2684 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5vc-337f-mrrj/GHSA-h5vc-337f-mrrj.json +++ b/advisories/unreviewed/2022/05/GHSA-h5vc-337f-mrrj/GHSA-h5vc-337f-mrrj.json @@ -7,12 +7,8 @@ "CVE-2009-1213" ], "details": "Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 3.2 before 3.2.3, 3.3 before 3.3.4, and earlier versions allows remote attackers to hijack the authentication of arbitrary users for requests that use attachment editing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h825-w67x-85qx/GHSA-h825-w67x-85qx.json b/advisories/unreviewed/2022/05/GHSA-h825-w67x-85qx/GHSA-h825-w67x-85qx.json index 07f4301e76c..82b94a4a92d 100644 --- a/advisories/unreviewed/2022/05/GHSA-h825-w67x-85qx/GHSA-h825-w67x-85qx.json +++ b/advisories/unreviewed/2022/05/GHSA-h825-w67x-85qx/GHSA-h825-w67x-85qx.json @@ -7,12 +7,8 @@ "CVE-2009-1369" ], "details": "moziloCMS 1.11 allows remote attackers to obtain sensitive information via the (1) gal[] parameter to gallery.php, (2) page[] and (3) cat[] parameter to index.php, or (4) file[] parameter to download.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h827-fxpm-jf2v/GHSA-h827-fxpm-jf2v.json b/advisories/unreviewed/2022/05/GHSA-h827-fxpm-jf2v/GHSA-h827-fxpm-jf2v.json index 3d1d62d9f43..c86cb87fa5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h827-fxpm-jf2v/GHSA-h827-fxpm-jf2v.json +++ b/advisories/unreviewed/2022/05/GHSA-h827-fxpm-jf2v/GHSA-h827-fxpm-jf2v.json @@ -7,12 +7,8 @@ "CVE-2009-1141" ], "details": "Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the \"insertion, deletion and attributes of a table cell,\" which trigger memory corruption when the window is destroyed, aka \"DHTML Object Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h945-jqrw-pjhw/GHSA-h945-jqrw-pjhw.json b/advisories/unreviewed/2022/05/GHSA-h945-jqrw-pjhw/GHSA-h945-jqrw-pjhw.json index 137db513fbf..5740f7422a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h945-jqrw-pjhw/GHSA-h945-jqrw-pjhw.json +++ b/advisories/unreviewed/2022/05/GHSA-h945-jqrw-pjhw/GHSA-h945-jqrw-pjhw.json @@ -7,12 +7,8 @@ "CVE-2009-1447" ], "details": "Unrestricted file upload vulnerability in admin/editor/image.php in e-cart.biz Free Shopping Cart allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h96c-vv5w-hqpj/GHSA-h96c-vv5w-hqpj.json b/advisories/unreviewed/2022/05/GHSA-h96c-vv5w-hqpj/GHSA-h96c-vv5w-hqpj.json index f75a8cafd61..4e71faafd2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-h96c-vv5w-hqpj/GHSA-h96c-vv5w-hqpj.json +++ b/advisories/unreviewed/2022/05/GHSA-h96c-vv5w-hqpj/GHSA-h96c-vv5w-hqpj.json @@ -7,12 +7,8 @@ "CVE-2009-1276" ], "details": "XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9gq-m24m-jcv9/GHSA-h9gq-m24m-jcv9.json b/advisories/unreviewed/2022/05/GHSA-h9gq-m24m-jcv9/GHSA-h9gq-m24m-jcv9.json index cc7de88b507..8876c9f59cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9gq-m24m-jcv9/GHSA-h9gq-m24m-jcv9.json +++ b/advisories/unreviewed/2022/05/GHSA-h9gq-m24m-jcv9/GHSA-h9gq-m24m-jcv9.json @@ -7,12 +7,8 @@ "CVE-2009-0950" ], "details": "Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcfp-3j2c-3hr7/GHSA-hcfp-3j2c-3hr7.json b/advisories/unreviewed/2022/05/GHSA-hcfp-3j2c-3hr7/GHSA-hcfp-3j2c-3hr7.json index 7f80caf15d6..84c725a34b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcfp-3j2c-3hr7/GHSA-hcfp-3j2c-3hr7.json +++ b/advisories/unreviewed/2022/05/GHSA-hcfp-3j2c-3hr7/GHSA-hcfp-3j2c-3hr7.json @@ -7,12 +7,8 @@ "CVE-2009-1319" ], "details": "Directory traversal vulnerability in includes/ini.inc.php in GuestCal 2.1 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the lang parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcjw-5x4c-67px/GHSA-hcjw-5x4c-67px.json b/advisories/unreviewed/2022/05/GHSA-hcjw-5x4c-67px/GHSA-hcjw-5x4c-67px.json index 56e1e514dc7..790314da12c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcjw-5x4c-67px/GHSA-hcjw-5x4c-67px.json +++ b/advisories/unreviewed/2022/05/GHSA-hcjw-5x4c-67px/GHSA-hcjw-5x4c-67px.json @@ -7,12 +7,8 @@ "CVE-2009-1273" ], "details": "pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hg52-c72h-rv36/GHSA-hg52-c72h-rv36.json b/advisories/unreviewed/2022/05/GHSA-hg52-c72h-rv36/GHSA-hg52-c72h-rv36.json index 263cdb681e6..3af164a24f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg52-c72h-rv36/GHSA-hg52-c72h-rv36.json +++ b/advisories/unreviewed/2022/05/GHSA-hg52-c72h-rv36/GHSA-hg52-c72h-rv36.json @@ -7,12 +7,8 @@ "CVE-2009-0992" ], "details": "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_AQIN. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is SQL injection in the DEQ_EXEJOB procedure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hg8w-jwvh-65j2/GHSA-hg8w-jwvh-65j2.json b/advisories/unreviewed/2022/05/GHSA-hg8w-jwvh-65j2/GHSA-hg8w-jwvh-65j2.json index ca4c8e35f13..aad089bb6d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg8w-jwvh-65j2/GHSA-hg8w-jwvh-65j2.json +++ b/advisories/unreviewed/2022/05/GHSA-hg8w-jwvh-65j2/GHSA-hg8w-jwvh-65j2.json @@ -7,12 +7,8 @@ "CVE-2009-1452" ], "details": "Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _page_css and (2) _page_javascript parameters. NOTE: the _page_content vector is already is covered by CVE-2009-1450.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hh3w-x3wq-8jvq/GHSA-hh3w-x3wq-8jvq.json b/advisories/unreviewed/2022/05/GHSA-hh3w-x3wq-8jvq/GHSA-hh3w-x3wq-8jvq.json index 66ae608ffa6..4718c11de93 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh3w-x3wq-8jvq/GHSA-hh3w-x3wq-8jvq.json +++ b/advisories/unreviewed/2022/05/GHSA-hh3w-x3wq-8jvq/GHSA-hh3w-x3wq-8jvq.json @@ -7,12 +7,8 @@ "CVE-2009-1306" ], "details": "The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a \"Content-Disposition: attachment\" designation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hh4v-xv6r-j9cr/GHSA-hh4v-xv6r-j9cr.json b/advisories/unreviewed/2022/05/GHSA-hh4v-xv6r-j9cr/GHSA-hh4v-xv6r-j9cr.json index d9f1f126456..0f00c35ada3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh4v-xv6r-j9cr/GHSA-hh4v-xv6r-j9cr.json +++ b/advisories/unreviewed/2022/05/GHSA-hh4v-xv6r-j9cr/GHSA-hh4v-xv6r-j9cr.json @@ -7,12 +7,8 @@ "CVE-2009-1356" ], "details": "Stack-based buffer overflow in Elecard AVC HD Player allows remote attackers to execute arbitrary code via a long MP3 filename in a playlist (.xpl) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhmm-p7cx-38v6/GHSA-hhmm-p7cx-38v6.json b/advisories/unreviewed/2022/05/GHSA-hhmm-p7cx-38v6/GHSA-hhmm-p7cx-38v6.json index a32184cf0c1..4db58319c38 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhmm-p7cx-38v6/GHSA-hhmm-p7cx-38v6.json +++ b/advisories/unreviewed/2022/05/GHSA-hhmm-p7cx-38v6/GHSA-hhmm-p7cx-38v6.json @@ -7,12 +7,8 @@ "CVE-2009-1066" ], "details": "SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhx6-crjv-6r4j/GHSA-hhx6-crjv-6r4j.json b/advisories/unreviewed/2022/05/GHSA-hhx6-crjv-6r4j/GHSA-hhx6-crjv-6r4j.json index c1d96207b56..fb36d2998e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhx6-crjv-6r4j/GHSA-hhx6-crjv-6r4j.json +++ b/advisories/unreviewed/2022/05/GHSA-hhx6-crjv-6r4j/GHSA-hhx6-crjv-6r4j.json @@ -7,12 +7,8 @@ "CVE-2009-1064" ], "details": "Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj47-v9v9-c38f/GHSA-hj47-v9v9-c38f.json b/advisories/unreviewed/2022/05/GHSA-hj47-v9v9-c38f/GHSA-hj47-v9v9-c38f.json index 08a08271abc..880292f8ebe 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj47-v9v9-c38f/GHSA-hj47-v9v9-c38f.json +++ b/advisories/unreviewed/2022/05/GHSA-hj47-v9v9-c38f/GHSA-hj47-v9v9-c38f.json @@ -7,12 +7,8 @@ "CVE-2009-0985" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6 allows remote authenticated users with the IMP_FULL_DATABASE role to affect confidentiality, integrity, and availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hj4p-2c36-mfqj/GHSA-hj4p-2c36-mfqj.json b/advisories/unreviewed/2022/05/GHSA-hj4p-2c36-mfqj/GHSA-hj4p-2c36-mfqj.json index f9e0b5fad01..b2d2d9e63e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj4p-2c36-mfqj/GHSA-hj4p-2c36-mfqj.json +++ b/advisories/unreviewed/2022/05/GHSA-hj4p-2c36-mfqj/GHSA-hj4p-2c36-mfqj.json @@ -7,12 +7,8 @@ "CVE-2009-0961" ], "details": "The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger an alert.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmwr-r6j2-cxcc/GHSA-hmwr-r6j2-cxcc.json b/advisories/unreviewed/2022/05/GHSA-hmwr-r6j2-cxcc/GHSA-hmwr-r6j2-cxcc.json index d36106f6915..6532bc7125b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmwr-r6j2-cxcc/GHSA-hmwr-r6j2-cxcc.json +++ b/advisories/unreviewed/2022/05/GHSA-hmwr-r6j2-cxcc/GHSA-hmwr-r6j2-cxcc.json @@ -7,12 +7,8 @@ "CVE-2009-1212" ], "details": "Multiple insecure method vulnerabilities in PRECIS~2.DLL in the PrecisionID Datamatrix ActiveX control (DMATRIXLib.Datamatrix) allow remote attackers to overwrite arbitrary files via the (1) SaveBarCode and (2) SaveEnhWMF methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hpg8-q284-3cc6/GHSA-hpg8-q284-3cc6.json b/advisories/unreviewed/2022/05/GHSA-hpg8-q284-3cc6/GHSA-hpg8-q284-3cc6.json index 830162bffde..1ef976e0ad3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpg8-q284-3cc6/GHSA-hpg8-q284-3cc6.json +++ b/advisories/unreviewed/2022/05/GHSA-hpg8-q284-3cc6/GHSA-hpg8-q284-3cc6.json @@ -7,12 +7,8 @@ "CVE-2009-0963" ], "details": "Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to (1) UserView_list.php, (2) orders_list.php, (3) users_list.php, and (4) Administrator_list.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpxm-wv4q-7c47/GHSA-hpxm-wv4q-7c47.json b/advisories/unreviewed/2022/05/GHSA-hpxm-wv4q-7c47/GHSA-hpxm-wv4q-7c47.json index 440b1de0309..b50fe95a42a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpxm-wv4q-7c47/GHSA-hpxm-wv4q-7c47.json +++ b/advisories/unreviewed/2022/05/GHSA-hpxm-wv4q-7c47/GHSA-hpxm-wv4q-7c47.json @@ -7,12 +7,8 @@ "CVE-2009-1448" ], "details": "Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hq29-gw6h-pjq7/GHSA-hq29-gw6h-pjq7.json b/advisories/unreviewed/2022/05/GHSA-hq29-gw6h-pjq7/GHSA-hq29-gw6h-pjq7.json index 8cce14e10ee..7d1d088e92f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq29-gw6h-pjq7/GHSA-hq29-gw6h-pjq7.json +++ b/advisories/unreviewed/2022/05/GHSA-hq29-gw6h-pjq7/GHSA-hq29-gw6h-pjq7.json @@ -7,12 +7,8 @@ "CVE-2009-1247" ], "details": "SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv6f-j4gh-pcgv/GHSA-hv6f-j4gh-pcgv.json b/advisories/unreviewed/2022/05/GHSA-hv6f-j4gh-pcgv/GHSA-hv6f-j4gh-pcgv.json index 34b43bb2b35..64c647e5190 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv6f-j4gh-pcgv/GHSA-hv6f-j4gh-pcgv.json +++ b/advisories/unreviewed/2022/05/GHSA-hv6f-j4gh-pcgv/GHSA-hv6f-j4gh-pcgv.json @@ -7,12 +7,8 @@ "CVE-2009-1162" ], "details": "Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j29m-vxg5-4rp2/GHSA-j29m-vxg5-4rp2.json b/advisories/unreviewed/2022/05/GHSA-j29m-vxg5-4rp2/GHSA-j29m-vxg5-4rp2.json index 315b0a138a7..82f69050c1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j29m-vxg5-4rp2/GHSA-j29m-vxg5-4rp2.json +++ b/advisories/unreviewed/2022/05/GHSA-j29m-vxg5-4rp2/GHSA-j29m-vxg5-4rp2.json @@ -7,12 +7,8 @@ "CVE-2009-1325" ], "details": "Stack-based buffer overflow in Mini-stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j2p5-74xw-f54p/GHSA-j2p5-74xw-f54p.json b/advisories/unreviewed/2022/05/GHSA-j2p5-74xw-f54p/GHSA-j2p5-74xw-f54p.json index 008f486cca0..e552c399d90 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2p5-74xw-f54p/GHSA-j2p5-74xw-f54p.json +++ b/advisories/unreviewed/2022/05/GHSA-j2p5-74xw-f54p/GHSA-j2p5-74xw-f54p.json @@ -7,12 +7,8 @@ "CVE-2009-1390" ], "details": "Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j2w3-cjc2-gwqr/GHSA-j2w3-cjc2-gwqr.json b/advisories/unreviewed/2022/05/GHSA-j2w3-cjc2-gwqr/GHSA-j2w3-cjc2-gwqr.json index c53a855d1de..431134f364d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2w3-cjc2-gwqr/GHSA-j2w3-cjc2-gwqr.json +++ b/advisories/unreviewed/2022/05/GHSA-j2w3-cjc2-gwqr/GHSA-j2w3-cjc2-gwqr.json @@ -7,12 +7,8 @@ "CVE-2009-0990" ], "details": "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0989.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j4wv-6pq2-c7hw/GHSA-j4wv-6pq2-c7hw.json b/advisories/unreviewed/2022/05/GHSA-j4wv-6pq2-c7hw/GHSA-j4wv-6pq2-c7hw.json index b1bcfd5e708..d48875a863e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4wv-6pq2-c7hw/GHSA-j4wv-6pq2-c7hw.json +++ b/advisories/unreviewed/2022/05/GHSA-j4wv-6pq2-c7hw/GHSA-j4wv-6pq2-c7hw.json @@ -7,12 +7,8 @@ "CVE-2009-0979" ], "details": "Unspecified vulnerability in the Resource Manager component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5h5-m8w9-hc5c/GHSA-j5h5-m8w9-hc5c.json b/advisories/unreviewed/2022/05/GHSA-j5h5-m8w9-hc5c/GHSA-j5h5-m8w9-hc5c.json index 54e7c334cb8..f313134fdd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5h5-m8w9-hc5c/GHSA-j5h5-m8w9-hc5c.json +++ b/advisories/unreviewed/2022/05/GHSA-j5h5-m8w9-hc5c/GHSA-j5h5-m8w9-hc5c.json @@ -7,12 +7,8 @@ "CVE-2009-1057" ], "details": "MicroSmarts Enterprise ZipItFast! 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file that triggers memory corruption, related to a \"format string buffer overflow.\" NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j62f-893w-g6cp/GHSA-j62f-893w-g6cp.json b/advisories/unreviewed/2022/05/GHSA-j62f-893w-g6cp/GHSA-j62f-893w-g6cp.json index 4bc8fc0400f..99aa07c7bda 100644 --- a/advisories/unreviewed/2022/05/GHSA-j62f-893w-g6cp/GHSA-j62f-893w-g6cp.json +++ b/advisories/unreviewed/2022/05/GHSA-j62f-893w-g6cp/GHSA-j62f-893w-g6cp.json @@ -7,12 +7,8 @@ "CVE-2009-1173" ], "details": "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified \"interim fixes,\" which allows attackers to modify files that would not have been accessible if the intended 755 permissions were used.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j749-wjv7-4cf2/GHSA-j749-wjv7-4cf2.json b/advisories/unreviewed/2022/05/GHSA-j749-wjv7-4cf2/GHSA-j749-wjv7-4cf2.json index a86f77adc80..6e61f4c1fa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j749-wjv7-4cf2/GHSA-j749-wjv7-4cf2.json +++ b/advisories/unreviewed/2022/05/GHSA-j749-wjv7-4cf2/GHSA-j749-wjv7-4cf2.json @@ -7,12 +7,8 @@ "CVE-2009-1211" ], "details": "Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet sites, via a crafted web page that causes a client to send HTTP requests with a modified Host header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j77x-557v-p2cj/GHSA-j77x-557v-p2cj.json b/advisories/unreviewed/2022/05/GHSA-j77x-557v-p2cj/GHSA-j77x-557v-p2cj.json index 59d1b679c01..e4816bde3da 100644 --- a/advisories/unreviewed/2022/05/GHSA-j77x-557v-p2cj/GHSA-j77x-557v-p2cj.json +++ b/advisories/unreviewed/2022/05/GHSA-j77x-557v-p2cj/GHSA-j77x-557v-p2cj.json @@ -7,12 +7,8 @@ "CVE-2009-1439" ], "details": "Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8cp-q9f7-wqch/GHSA-j8cp-q9f7-wqch.json b/advisories/unreviewed/2022/05/GHSA-j8cp-q9f7-wqch/GHSA-j8cp-q9f7-wqch.json index bd31bfe0581..0a2c936cf1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8cp-q9f7-wqch/GHSA-j8cp-q9f7-wqch.json +++ b/advisories/unreviewed/2022/05/GHSA-j8cp-q9f7-wqch/GHSA-j8cp-q9f7-wqch.json @@ -7,12 +7,8 @@ "CVE-2009-1290" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration interface in the Advanced Management Module (AMM) on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to hijack the authentication of administrators, as demonstrated by a power-off request to the private/blade_power_action script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j933-cghj-hrpx/GHSA-j933-cghj-hrpx.json b/advisories/unreviewed/2022/05/GHSA-j933-cghj-hrpx/GHSA-j933-cghj-hrpx.json index c3d92a064d8..a42def5a089 100644 --- a/advisories/unreviewed/2022/05/GHSA-j933-cghj-hrpx/GHSA-j933-cghj-hrpx.json +++ b/advisories/unreviewed/2022/05/GHSA-j933-cghj-hrpx/GHSA-j933-cghj-hrpx.json @@ -7,12 +7,8 @@ "CVE-2009-0964" ], "details": "UserView_list.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jc7j-mr7h-8gh8/GHSA-jc7j-mr7h-8gh8.json b/advisories/unreviewed/2022/05/GHSA-jc7j-mr7h-8gh8/GHSA-jc7j-mr7h-8gh8.json index b8426a997f2..ef637c4e6db 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc7j-mr7h-8gh8/GHSA-jc7j-mr7h-8gh8.json +++ b/advisories/unreviewed/2022/05/GHSA-jc7j-mr7h-8gh8/GHSA-jc7j-mr7h-8gh8.json @@ -7,12 +7,8 @@ "CVE-2009-1467" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcfv-mgf6-qw9x/GHSA-jcfv-mgf6-qw9x.json b/advisories/unreviewed/2022/05/GHSA-jcfv-mgf6-qw9x/GHSA-jcfv-mgf6-qw9x.json index e1a3fd5187f..27fcf3f443f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcfv-mgf6-qw9x/GHSA-jcfv-mgf6-qw9x.json +++ b/advisories/unreviewed/2022/05/GHSA-jcfv-mgf6-qw9x/GHSA-jcfv-mgf6-qw9x.json @@ -7,12 +7,8 @@ "CVE-2009-1184" ], "details": "The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic. NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jf73-p6pf-8cfc/GHSA-jf73-p6pf-8cfc.json b/advisories/unreviewed/2022/05/GHSA-jf73-p6pf-8cfc/GHSA-jf73-p6pf-8cfc.json index e5406281220..73ee2aa3359 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf73-p6pf-8cfc/GHSA-jf73-p6pf-8cfc.json +++ b/advisories/unreviewed/2022/05/GHSA-jf73-p6pf-8cfc/GHSA-jf73-p6pf-8cfc.json @@ -7,12 +7,8 @@ "CVE-2009-1453" ], "details": "SQL injection vulnerability in class.eport.php in Tiny Blogr 1.0.0 rc4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the txtUsername parameter (aka the Username field). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfqx-vg8w-jmcj/GHSA-jfqx-vg8w-jmcj.json b/advisories/unreviewed/2022/05/GHSA-jfqx-vg8w-jmcj/GHSA-jfqx-vg8w-jmcj.json index ed05164124a..8f365297f8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfqx-vg8w-jmcj/GHSA-jfqx-vg8w-jmcj.json +++ b/advisories/unreviewed/2022/05/GHSA-jfqx-vg8w-jmcj/GHSA-jfqx-vg8w-jmcj.json @@ -7,12 +7,8 @@ "CVE-2009-1461" ], "details": "Cross-site scripting (XSS) vulnerability in the Create New Page form in razorCMS 0.3 RC2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Page Title field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgc2-582g-w379/GHSA-jgc2-582g-w379.json b/advisories/unreviewed/2022/05/GHSA-jgc2-582g-w379/GHSA-jgc2-582g-w379.json index 10f501080a9..664a1c38622 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgc2-582g-w379/GHSA-jgc2-582g-w379.json +++ b/advisories/unreviewed/2022/05/GHSA-jgc2-582g-w379/GHSA-jgc2-582g-w379.json @@ -7,12 +7,8 @@ "CVE-2009-1016" ], "details": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote authenticated users to affect confidentiality, integrity, and availability, related to IIS. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow involving an unspecified Server Plug-in and a crafted SSL certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jgmm-3x55-gg6v/GHSA-jgmm-3x55-gg6v.json b/advisories/unreviewed/2022/05/GHSA-jgmm-3x55-gg6v/GHSA-jgmm-3x55-gg6v.json index 31e3292381f..da3fd3d757a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgmm-3x55-gg6v/GHSA-jgmm-3x55-gg6v.json +++ b/advisories/unreviewed/2022/05/GHSA-jgmm-3x55-gg6v/GHSA-jgmm-3x55-gg6v.json @@ -7,12 +7,8 @@ "CVE-2009-1124" ], "details": "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Pointer Validation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgqv-93w3-r233/GHSA-jgqv-93w3-r233.json b/advisories/unreviewed/2022/05/GHSA-jgqv-93w3-r233/GHSA-jgqv-93w3-r233.json index fa93e54a9ae..393b35299e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgqv-93w3-r233/GHSA-jgqv-93w3-r233.json +++ b/advisories/unreviewed/2022/05/GHSA-jgqv-93w3-r233/GHSA-jgqv-93w3-r233.json @@ -7,12 +7,8 @@ "CVE-2009-0944" ], "details": "The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft Office files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a file that triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhh3-2xqc-ww65/GHSA-jhh3-2xqc-ww65.json b/advisories/unreviewed/2022/05/GHSA-jhh3-2xqc-ww65/GHSA-jhh3-2xqc-ww65.json index 0bca945d07c..6501d28e4e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhh3-2xqc-ww65/GHSA-jhh3-2xqc-ww65.json +++ b/advisories/unreviewed/2022/05/GHSA-jhh3-2xqc-ww65/GHSA-jhh3-2xqc-ww65.json @@ -7,12 +7,8 @@ "CVE-2009-1317" ], "details": "Multiple SQL injection vulnerabilities in Aqua CMS 1.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userSID cookie parameter to droplets/functions/base.php and the (2) username parameter to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jj7j-66w6-9293/GHSA-jj7j-66w6-9293.json b/advisories/unreviewed/2022/05/GHSA-jj7j-66w6-9293/GHSA-jj7j-66w6-9293.json index 1af1d6e14e2..e7b7441c6a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj7j-66w6-9293/GHSA-jj7j-66w6-9293.json +++ b/advisories/unreviewed/2022/05/GHSA-jj7j-66w6-9293/GHSA-jj7j-66w6-9293.json @@ -7,12 +7,8 @@ "CVE-2009-1010" ], "details": "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.2.2 and 8.3.0 allows local users to affect confidentiality, integrity, and availability, related to HTML, a different vulnerability than CVE-2009-1008.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jjhw-cf9v-3wq5/GHSA-jjhw-cf9v-3wq5.json b/advisories/unreviewed/2022/05/GHSA-jjhw-cf9v-3wq5/GHSA-jjhw-cf9v-3wq5.json index 9f89a18b113..d7346cf282c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjhw-cf9v-3wq5/GHSA-jjhw-cf9v-3wq5.json +++ b/advisories/unreviewed/2022/05/GHSA-jjhw-cf9v-3wq5/GHSA-jjhw-cf9v-3wq5.json @@ -7,12 +7,8 @@ "CVE-2009-1000" ], "details": "The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified \"FND Applications Users (not DB users),\" which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jjp4-5j58-3cr7/GHSA-jjp4-5j58-3cr7.json b/advisories/unreviewed/2022/05/GHSA-jjp4-5j58-3cr7/GHSA-jjp4-5j58-3cr7.json index 8c7a863671e..af7bb1b65eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjp4-5j58-3cr7/GHSA-jjp4-5j58-3cr7.json +++ b/advisories/unreviewed/2022/05/GHSA-jjp4-5j58-3cr7/GHSA-jjp4-5j58-3cr7.json @@ -7,12 +7,8 @@ "CVE-2009-1230" ], "details": "Static code injection vulnerability in index.php in Podcast Generator 1.1 and earlier allows remote authenticated administrators to inject arbitrary PHP code into config.php via the recent parameter in a config change action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jjp7-f4q7-42r7/GHSA-jjp7-f4q7-42r7.json b/advisories/unreviewed/2022/05/GHSA-jjp7-f4q7-42r7/GHSA-jjp7-f4q7-42r7.json index da32684a7e7..d4a4fb25377 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjp7-f4q7-42r7/GHSA-jjp7-f4q7-42r7.json +++ b/advisories/unreviewed/2022/05/GHSA-jjp7-f4q7-42r7/GHSA-jjp7-f4q7-42r7.json @@ -7,12 +7,8 @@ "CVE-2009-1075" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jjx3-6m8v-9928/GHSA-jjx3-6m8v-9928.json b/advisories/unreviewed/2022/05/GHSA-jjx3-6m8v-9928/GHSA-jjx3-6m8v-9928.json index c99f3dcef4b..83a123949e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjx3-6m8v-9928/GHSA-jjx3-6m8v-9928.json +++ b/advisories/unreviewed/2022/05/GHSA-jjx3-6m8v-9928/GHSA-jjx3-6m8v-9928.json @@ -7,12 +7,8 @@ "CVE-2009-1446" ], "details": "Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in gallery/pictures/. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmq6-gw6r-qrmf/GHSA-jmq6-gw6r-qrmf.json b/advisories/unreviewed/2022/05/GHSA-jmq6-gw6r-qrmf/GHSA-jmq6-gw6r-qrmf.json index f520d1a2cdc..708d1a6cd33 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmq6-gw6r-qrmf/GHSA-jmq6-gw6r-qrmf.json +++ b/advisories/unreviewed/2022/05/GHSA-jmq6-gw6r-qrmf/GHSA-jmq6-gw6r-qrmf.json @@ -7,12 +7,8 @@ "CVE-2009-1222" ], "details": "Directory traversal vulnerability in index.php in webEdition 6.0.0.4 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the WE_LANGUAGE parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpf7-c8gm-78c6/GHSA-jpf7-c8gm-78c6.json b/advisories/unreviewed/2022/05/GHSA-jpf7-c8gm-78c6/GHSA-jpf7-c8gm-78c6.json index 4d458cd947d..93030b222d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpf7-c8gm-78c6/GHSA-jpf7-c8gm-78c6.json +++ b/advisories/unreviewed/2022/05/GHSA-jpf7-c8gm-78c6/GHSA-jpf7-c8gm-78c6.json @@ -7,12 +7,8 @@ "CVE-2009-1334" ], "details": "Cross-site scripting (XSS) vulnerability in login/FilepathLogin.html in IBM Tivoli Continuous Data Protection (CDP) for Files 3.1.4.0 allows remote attackers to inject arbitrary web script or HTML via the reason parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpvf-fchh-626j/GHSA-jpvf-fchh-626j.json b/advisories/unreviewed/2022/05/GHSA-jpvf-fchh-626j/GHSA-jpvf-fchh-626j.json index 3d1a430a8ef..d07694ccb5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpvf-fchh-626j/GHSA-jpvf-fchh-626j.json +++ b/advisories/unreviewed/2022/05/GHSA-jpvf-fchh-626j/GHSA-jpvf-fchh-626j.json @@ -7,12 +7,8 @@ "CVE-2009-0955" ], "details": "Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted image description atoms in an Apple video file, related to a \"sign extension issue.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq3q-fh3p-mc57/GHSA-jq3q-fh3p-mc57.json b/advisories/unreviewed/2022/05/GHSA-jq3q-fh3p-mc57/GHSA-jq3q-fh3p-mc57.json index dfa75427d5d..c3e74c61e97 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq3q-fh3p-mc57/GHSA-jq3q-fh3p-mc57.json +++ b/advisories/unreviewed/2022/05/GHSA-jq3q-fh3p-mc57/GHSA-jq3q-fh3p-mc57.json @@ -7,12 +7,8 @@ "CVE-2009-1327" ], "details": "Stack-based buffer overflow in Mini-stream WM Downloader 3.0.0.9 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq6c-28wg-fw44/GHSA-jq6c-28wg-fw44.json b/advisories/unreviewed/2022/05/GHSA-jq6c-28wg-fw44/GHSA-jq6c-28wg-fw44.json index fbebd36fffe..a26a1247572 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq6c-28wg-fw44/GHSA-jq6c-28wg-fw44.json +++ b/advisories/unreviewed/2022/05/GHSA-jq6c-28wg-fw44/GHSA-jq6c-28wg-fw44.json @@ -7,12 +7,8 @@ "CVE-2009-1164" ], "details": "The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.2 before 4.2.205.0 and 5.x before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a malformed response to a (1) HTTP or (2) HTTPS authentication request, aka Bug ID CSCsx03715.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jr79-p255-xfcg/GHSA-jr79-p255-xfcg.json b/advisories/unreviewed/2022/05/GHSA-jr79-p255-xfcg/GHSA-jr79-p255-xfcg.json index d3beeda21b3..9fdd3005f59 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr79-p255-xfcg/GHSA-jr79-p255-xfcg.json +++ b/advisories/unreviewed/2022/05/GHSA-jr79-p255-xfcg/GHSA-jr79-p255-xfcg.json @@ -7,12 +7,8 @@ "CVE-2009-1024" ], "details": "Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrq5-272h-wq5m/GHSA-jrq5-272h-wq5m.json b/advisories/unreviewed/2022/05/GHSA-jrq5-272h-wq5m/GHSA-jrq5-272h-wq5m.json index 08aebdf063e..5643312b565 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrq5-272h-wq5m/GHSA-jrq5-272h-wq5m.json +++ b/advisories/unreviewed/2022/05/GHSA-jrq5-272h-wq5m/GHSA-jrq5-272h-wq5m.json @@ -7,12 +7,8 @@ "CVE-2009-1043" ], "details": "Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvgp-vh46-72jc/GHSA-jvgp-vh46-72jc.json b/advisories/unreviewed/2022/05/GHSA-jvgp-vh46-72jc/GHSA-jvgp-vh46-72jc.json index 538a767ca8c..661c69a3aa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvgp-vh46-72jc/GHSA-jvgp-vh46-72jc.json +++ b/advisories/unreviewed/2022/05/GHSA-jvgp-vh46-72jc/GHSA-jvgp-vh46-72jc.json @@ -7,12 +7,8 @@ "CVE-2009-0989" ], "details": "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, and 10.1.3.3.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-0990.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw99-c7r3-ffff/GHSA-jw99-c7r3-ffff.json b/advisories/unreviewed/2022/05/GHSA-jw99-c7r3-ffff/GHSA-jw99-c7r3-ffff.json index 6f6f31de31d..65ac3d1ac79 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw99-c7r3-ffff/GHSA-jw99-c7r3-ffff.json +++ b/advisories/unreviewed/2022/05/GHSA-jw99-c7r3-ffff/GHSA-jw99-c7r3-ffff.json @@ -7,12 +7,8 @@ "CVE-2009-1258" ], "details": "SQL injection vulnerability in the RD-Autos (com_rdautos) component 1.5.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the makeid parameter in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2p5-8fw8-jgcg/GHSA-m2p5-8fw8-jgcg.json b/advisories/unreviewed/2022/05/GHSA-m2p5-8fw8-jgcg/GHSA-m2p5-8fw8-jgcg.json index e57ccd11b54..2b753d3b64e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2p5-8fw8-jgcg/GHSA-m2p5-8fw8-jgcg.json +++ b/advisories/unreviewed/2022/05/GHSA-m2p5-8fw8-jgcg/GHSA-m2p5-8fw8-jgcg.json @@ -7,12 +7,8 @@ "CVE-2009-1301" ], "details": "Integer signedness error in the store_id3_text function in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via an ID3 tag with a negative encoding value. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m558-2r8x-cc8v/GHSA-m558-2r8x-cc8v.json b/advisories/unreviewed/2022/05/GHSA-m558-2r8x-cc8v/GHSA-m558-2r8x-cc8v.json index f5c9548dacd..f5f600b0e50 100644 --- a/advisories/unreviewed/2022/05/GHSA-m558-2r8x-cc8v/GHSA-m558-2r8x-cc8v.json +++ b/advisories/unreviewed/2022/05/GHSA-m558-2r8x-cc8v/GHSA-m558-2r8x-cc8v.json @@ -7,12 +7,8 @@ "CVE-2009-1394" ], "details": "Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m73j-rvr3-rrc4/GHSA-m73j-rvr3-rrc4.json b/advisories/unreviewed/2022/05/GHSA-m73j-rvr3-rrc4/GHSA-m73j-rvr3-rrc4.json index 58f4e6ecd4b..d4e3e84a1b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-m73j-rvr3-rrc4/GHSA-m73j-rvr3-rrc4.json +++ b/advisories/unreviewed/2022/05/GHSA-m73j-rvr3-rrc4/GHSA-m73j-rvr3-rrc4.json @@ -7,12 +7,8 @@ "CVE-2009-1256" ], "details": "SQL injection vulnerability in FlexCMS 2.5 allows remote attackers to execute arbitrary SQL commands via the ItemId parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m97j-rv38-w7hv/GHSA-m97j-rv38-w7hv.json b/advisories/unreviewed/2022/05/GHSA-m97j-rv38-w7hv/GHSA-m97j-rv38-w7hv.json index 00bbda72a14..1acdb9d1b77 100644 --- a/advisories/unreviewed/2022/05/GHSA-m97j-rv38-w7hv/GHSA-m97j-rv38-w7hv.json +++ b/advisories/unreviewed/2022/05/GHSA-m97j-rv38-w7hv/GHSA-m97j-rv38-w7hv.json @@ -7,12 +7,8 @@ "CVE-2009-1425" ], "details": "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service by triggering a stop or crash in httpd, aka PR_18770, a different vulnerability than CVE-2009-1423 and CVE-2009-1424.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9p6-cjc2-4fh5/GHSA-m9p6-cjc2-4fh5.json b/advisories/unreviewed/2022/05/GHSA-m9p6-cjc2-4fh5/GHSA-m9p6-cjc2-4fh5.json index d37de5c5800..31b8f3ebb93 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9p6-cjc2-4fh5/GHSA-m9p6-cjc2-4fh5.json +++ b/advisories/unreviewed/2022/05/GHSA-m9p6-cjc2-4fh5/GHSA-m9p6-cjc2-4fh5.json @@ -7,12 +7,8 @@ "CVE-2009-0968" ], "details": "SQL injection vulnerability in fmoblog.php in the fMoblog plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9rv-9vx3-wj7v/GHSA-m9rv-9vx3-wj7v.json b/advisories/unreviewed/2022/05/GHSA-m9rv-9vx3-wj7v/GHSA-m9rv-9vx3-wj7v.json index ad901082401..e092bbbd327 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9rv-9vx3-wj7v/GHSA-m9rv-9vx3-wj7v.json +++ b/advisories/unreviewed/2022/05/GHSA-m9rv-9vx3-wj7v/GHSA-m9rv-9vx3-wj7v.json @@ -7,12 +7,8 @@ "CVE-2009-1017" ], "details": "Unspecified vulnerability in the BI Publisher component in Oracle Application Server 5.6.2, 10.1.3.2.1, 10.1.3.3.3, and 10.1.3.4 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2009-0994.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mcf6-3fvg-qh66/GHSA-mcf6-3fvg-qh66.json b/advisories/unreviewed/2022/05/GHSA-mcf6-3fvg-qh66/GHSA-mcf6-3fvg-qh66.json index 859f282d741..71f9af8a695 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcf6-3fvg-qh66/GHSA-mcf6-3fvg-qh66.json +++ b/advisories/unreviewed/2022/05/GHSA-mcf6-3fvg-qh66/GHSA-mcf6-3fvg-qh66.json @@ -7,12 +7,8 @@ "CVE-2009-0971" ], "details": "Cross-site scripting (XSS) vulnerability in futomi's CGI Cafe Access Analyzer CGI Standard Version 3.8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcq6-hwmc-gp67/GHSA-mcq6-hwmc-gp67.json b/advisories/unreviewed/2022/05/GHSA-mcq6-hwmc-gp67/GHSA-mcq6-hwmc-gp67.json index 150a3dd0afc..4456c08a190 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcq6-hwmc-gp67/GHSA-mcq6-hwmc-gp67.json +++ b/advisories/unreviewed/2022/05/GHSA-mcq6-hwmc-gp67/GHSA-mcq6-hwmc-gp67.json @@ -7,12 +7,8 @@ "CVE-2009-1070" ], "details": "Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcwf-696r-mjpc/GHSA-mcwf-696r-mjpc.json b/advisories/unreviewed/2022/05/GHSA-mcwf-696r-mjpc/GHSA-mcwf-696r-mjpc.json index 52ee1d430b8..db882936347 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcwf-696r-mjpc/GHSA-mcwf-696r-mjpc.json +++ b/advisories/unreviewed/2022/05/GHSA-mcwf-696r-mjpc/GHSA-mcwf-696r-mjpc.json @@ -7,12 +7,8 @@ "CVE-2009-1172" ], "details": "The JAX-RPC WS-Security runtime in the Web Services Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 and 7.0 before 7.0.0.3, when APAR PK41002 is installed, does not properly validate UsernameToken objects, which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf44-r4mw-fr4f/GHSA-mf44-r4mw-fr4f.json b/advisories/unreviewed/2022/05/GHSA-mf44-r4mw-fr4f/GHSA-mf44-r4mw-fr4f.json index e18f9ee4b4f..bc991994112 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf44-r4mw-fr4f/GHSA-mf44-r4mw-fr4f.json +++ b/advisories/unreviewed/2022/05/GHSA-mf44-r4mw-fr4f/GHSA-mf44-r4mw-fr4f.json @@ -7,12 +7,8 @@ "CVE-2009-0956" ], "details": "Apple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie files, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie containing a user data atom of size zero.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mf7q-9m48-2mwq/GHSA-mf7q-9m48-2mwq.json b/advisories/unreviewed/2022/05/GHSA-mf7q-9m48-2mwq/GHSA-mf7q-9m48-2mwq.json index 5692c2474c9..5209078c98a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf7q-9m48-2mwq/GHSA-mf7q-9m48-2mwq.json +++ b/advisories/unreviewed/2022/05/GHSA-mf7q-9m48-2mwq/GHSA-mf7q-9m48-2mwq.json @@ -7,12 +7,8 @@ "CVE-2009-1088" ], "details": "Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with \"extension elements and extension functions\" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgcw-89jj-vw5f/GHSA-mgcw-89jj-vw5f.json b/advisories/unreviewed/2022/05/GHSA-mgcw-89jj-vw5f/GHSA-mgcw-89jj-vw5f.json index 2d1d79a3c6c..3f1b57bef89 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgcw-89jj-vw5f/GHSA-mgcw-89jj-vw5f.json +++ b/advisories/unreviewed/2022/05/GHSA-mgcw-89jj-vw5f/GHSA-mgcw-89jj-vw5f.json @@ -7,12 +7,8 @@ "CVE-2009-1210" ], "details": "Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh7w-frv3-83jh/GHSA-mh7w-frv3-83jh.json b/advisories/unreviewed/2022/05/GHSA-mh7w-frv3-83jh/GHSA-mh7w-frv3-83jh.json index e5ecc956fa0..3a3900234e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh7w-frv3-83jh/GHSA-mh7w-frv3-83jh.json +++ b/advisories/unreviewed/2022/05/GHSA-mh7w-frv3-83jh/GHSA-mh7w-frv3-83jh.json @@ -7,12 +7,8 @@ "CVE-2009-1100" ], "details": "Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) \"limits on Font creation,\" aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhh4-hcx3-gx5v/GHSA-mhh4-hcx3-gx5v.json b/advisories/unreviewed/2022/05/GHSA-mhh4-hcx3-gx5v/GHSA-mhh4-hcx3-gx5v.json index 641b0485843..697e1a706c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhh4-hcx3-gx5v/GHSA-mhh4-hcx3-gx5v.json +++ b/advisories/unreviewed/2022/05/GHSA-mhh4-hcx3-gx5v/GHSA-mhh4-hcx3-gx5v.json @@ -7,12 +7,8 @@ "CVE-2009-1167" ], "details": "Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to modify the configuration via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy44672.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhxm-vxgq-4ch7/GHSA-mhxm-vxgq-4ch7.json b/advisories/unreviewed/2022/05/GHSA-mhxm-vxgq-4ch7/GHSA-mhxm-vxgq-4ch7.json index f2bac272ca8..185ea212400 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhxm-vxgq-4ch7/GHSA-mhxm-vxgq-4ch7.json +++ b/advisories/unreviewed/2022/05/GHSA-mhxm-vxgq-4ch7/GHSA-mhxm-vxgq-4ch7.json @@ -7,12 +7,8 @@ "CVE-2009-1411" ], "details": "SQL injection vulnerability in events/inc/events.inc.php in the Events plugin for Seditio CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the c parameter to plug.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj44-3h2x-v4v7/GHSA-mj44-3h2x-v4v7.json b/advisories/unreviewed/2022/05/GHSA-mj44-3h2x-v4v7/GHSA-mj44-3h2x-v4v7.json index 82057db62a8..125bafb2abc 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj44-3h2x-v4v7/GHSA-mj44-3h2x-v4v7.json +++ b/advisories/unreviewed/2022/05/GHSA-mj44-3h2x-v4v7/GHSA-mj44-3h2x-v4v7.json @@ -7,12 +7,8 @@ "CVE-2009-1427" ], "details": "Unspecified vulnerability in HP-UX B.11.31 allows local users to cause a denial of service (system crash) via unknown vectors related to the ttrace system call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mjg7-qj65-r2pp/GHSA-mjg7-qj65-r2pp.json b/advisories/unreviewed/2022/05/GHSA-mjg7-qj65-r2pp/GHSA-mjg7-qj65-r2pp.json index c7f16d4704e..b358e019732 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjg7-qj65-r2pp/GHSA-mjg7-qj65-r2pp.json +++ b/advisories/unreviewed/2022/05/GHSA-mjg7-qj65-r2pp/GHSA-mjg7-qj65-r2pp.json @@ -7,12 +7,8 @@ "CVE-2009-1059" ], "details": "Stack-based buffer overflow in Trident PowerZip 7.2 might allow remote attackers to execute arbitrary code via a crafted .zip file. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjw6-hxqr-g9xf/GHSA-mjw6-hxqr-g9xf.json b/advisories/unreviewed/2022/05/GHSA-mjw6-hxqr-g9xf/GHSA-mjw6-hxqr-g9xf.json index 7baa5485931..315486b54b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjw6-hxqr-g9xf/GHSA-mjw6-hxqr-g9xf.json +++ b/advisories/unreviewed/2022/05/GHSA-mjw6-hxqr-g9xf/GHSA-mjw6-hxqr-g9xf.json @@ -7,12 +7,8 @@ "CVE-2009-1206" ], "details": "Unspecified vulnerability in futomi's CGI Cafe Access Analyzer CGI Professional Version 4.11.5 and earlier allows remote attackers to gain administrative privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mp25-5h93-26g6/GHSA-mp25-5h93-26g6.json b/advisories/unreviewed/2022/05/GHSA-mp25-5h93-26g6/GHSA-mp25-5h93-26g6.json index c52a6e1bbe0..71639aaa2f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp25-5h93-26g6/GHSA-mp25-5h93-26g6.json +++ b/advisories/unreviewed/2022/05/GHSA-mp25-5h93-26g6/GHSA-mp25-5h93-26g6.json @@ -7,12 +7,8 @@ "CVE-2009-1314" ], "details": "body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mqrr-3f4v-3g28/GHSA-mqrr-3f4v-3g28.json b/advisories/unreviewed/2022/05/GHSA-mqrr-3f4v-3g28/GHSA-mqrr-3f4v-3g28.json index 4ab0d6d64e1..4990ebebd95 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqrr-3f4v-3g28/GHSA-mqrr-3f4v-3g28.json +++ b/advisories/unreviewed/2022/05/GHSA-mqrr-3f4v-3g28/GHSA-mqrr-3f4v-3g28.json @@ -7,12 +7,8 @@ "CVE-2009-1320" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) gridPage and (2) gridSort parameters. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv3x-q5p2-7h93/GHSA-mv3x-q5p2-7h93.json b/advisories/unreviewed/2022/05/GHSA-mv3x-q5p2-7h93/GHSA-mv3x-q5p2-7h93.json index 175d9dc6829..f4579f072ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv3x-q5p2-7h93/GHSA-mv3x-q5p2-7h93.json +++ b/advisories/unreviewed/2022/05/GHSA-mv3x-q5p2-7h93/GHSA-mv3x-q5p2-7h93.json @@ -7,12 +7,8 @@ "CVE-2009-0754" ], "details": "PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwjx-9hmw-7jvc/GHSA-mwjx-9hmw-7jvc.json b/advisories/unreviewed/2022/05/GHSA-mwjx-9hmw-7jvc/GHSA-mwjx-9hmw-7jvc.json index df38c5517bb..95cf5600ad2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwjx-9hmw-7jvc/GHSA-mwjx-9hmw-7jvc.json +++ b/advisories/unreviewed/2022/05/GHSA-mwjx-9hmw-7jvc/GHSA-mwjx-9hmw-7jvc.json @@ -7,12 +7,8 @@ "CVE-2009-0972" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 11.1.0.6, 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxhx-hq56-f376/GHSA-mxhx-hq56-f376.json b/advisories/unreviewed/2022/05/GHSA-mxhx-hq56-f376/GHSA-mxhx-hq56-f376.json index e93dea0f830..a72c78b685c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxhx-hq56-f376/GHSA-mxhx-hq56-f376.json +++ b/advisories/unreviewed/2022/05/GHSA-mxhx-hq56-f376/GHSA-mxhx-hq56-f376.json @@ -7,12 +7,8 @@ "CVE-2009-1449" ], "details": "Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.1 allows remote attackers to execute arbitrary code via a skin file (skin.ini) with a large PlaylistSkin parameter. NOTE: this may overlap CVE-2008-5735.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxp4-j667-h9h6/GHSA-mxp4-j667-h9h6.json b/advisories/unreviewed/2022/05/GHSA-mxp4-j667-h9h6/GHSA-mxp4-j667-h9h6.json index 1522c07675d..dd6083c3a84 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxp4-j667-h9h6/GHSA-mxp4-j667-h9h6.json +++ b/advisories/unreviewed/2022/05/GHSA-mxp4-j667-h9h6/GHSA-mxp4-j667-h9h6.json @@ -7,12 +7,8 @@ "CVE-2009-1102" ], "details": "Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to \"code generation.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p26j-vgpm-gv3f/GHSA-p26j-vgpm-gv3f.json b/advisories/unreviewed/2022/05/GHSA-p26j-vgpm-gv3f/GHSA-p26j-vgpm-gv3f.json index 1c29502b5c0..43ef4feae3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-p26j-vgpm-gv3f/GHSA-p26j-vgpm-gv3f.json +++ b/advisories/unreviewed/2022/05/GHSA-p26j-vgpm-gv3f/GHSA-p26j-vgpm-gv3f.json @@ -7,12 +7,8 @@ "CVE-2009-0969" ], "details": "Cross-site request forgery (CSRF) vulnerability in account/settings/account/index.php in phpFoX 1.6.21 allows remote attackers to hijack the authentication of administrators for requests that change the email address via the act[update] action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3mc-whjq-822x/GHSA-p3mc-whjq-822x.json b/advisories/unreviewed/2022/05/GHSA-p3mc-whjq-822x/GHSA-p3mc-whjq-822x.json index 6783be6416c..7d28af5c4d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3mc-whjq-822x/GHSA-p3mc-whjq-822x.json +++ b/advisories/unreviewed/2022/05/GHSA-p3mc-whjq-822x/GHSA-p3mc-whjq-822x.json @@ -7,12 +7,8 @@ "CVE-2009-0938" ], "details": "Unspecified vulnerability in Tor before 0.2.0.34 allows directory mirrors to cause a denial of service (exit node crash) via \"malformed input.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p549-g2jj-vm8x/GHSA-p549-g2jj-vm8x.json b/advisories/unreviewed/2022/05/GHSA-p549-g2jj-vm8x/GHSA-p549-g2jj-vm8x.json index fba53da6a18..fd8400ff0d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-p549-g2jj-vm8x/GHSA-p549-g2jj-vm8x.json +++ b/advisories/unreviewed/2022/05/GHSA-p549-g2jj-vm8x/GHSA-p549-g2jj-vm8x.json @@ -7,12 +7,8 @@ "CVE-2009-1161" ], "details": "Directory traversal vulnerability in the TFTP service in Cisco CiscoWorks Common Services (CWCS) 3.0.x through 3.2.x on Windows, as used in Cisco Unified Service Monitor, Security Manager, TelePresence Readiness Assessment Manager, Unified Operations Manager, Unified Provisioning Manager, and other products, allows remote attackers to access arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p57h-3968-wf74/GHSA-p57h-3968-wf74.json b/advisories/unreviewed/2022/05/GHSA-p57h-3968-wf74/GHSA-p57h-3968-wf74.json index 23445e3f685..f346e0f3da2 100644 --- a/advisories/unreviewed/2022/05/GHSA-p57h-3968-wf74/GHSA-p57h-3968-wf74.json +++ b/advisories/unreviewed/2022/05/GHSA-p57h-3968-wf74/GHSA-p57h-3968-wf74.json @@ -7,12 +7,8 @@ "CVE-2009-0962" ], "details": "Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p5jq-cw39-ccgj/GHSA-p5jq-cw39-ccgj.json b/advisories/unreviewed/2022/05/GHSA-p5jq-cw39-ccgj/GHSA-p5jq-cw39-ccgj.json index bfe95885c31..8e323c6a8dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5jq-cw39-ccgj/GHSA-p5jq-cw39-ccgj.json +++ b/advisories/unreviewed/2022/05/GHSA-p5jq-cw39-ccgj/GHSA-p5jq-cw39-ccgj.json @@ -7,12 +7,8 @@ "CVE-2009-1045" ], "details": "requests/status.xml in VLC 0.9.8a allows remote attackers to cause a denial of service (stack consumption and crash) via a long input argument in an in_play action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7p5-24gv-9755/GHSA-p7p5-24gv-9755.json b/advisories/unreviewed/2022/05/GHSA-p7p5-24gv-9755/GHSA-p7p5-24gv-9755.json index 9d9383ac9b0..b941e08df24 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7p5-24gv-9755/GHSA-p7p5-24gv-9755.json +++ b/advisories/unreviewed/2022/05/GHSA-p7p5-24gv-9755/GHSA-p7p5-24gv-9755.json @@ -7,12 +7,8 @@ "CVE-2009-1346" ], "details": "SQL injection vulnerability in publico/ficha.php in NetHoteles 3.0 allows remote attackers to execute arbitrary SQL commands via the id_establecimiento parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7q7-4x88-9485/GHSA-p7q7-4x88-9485.json b/advisories/unreviewed/2022/05/GHSA-p7q7-4x88-9485/GHSA-p7q7-4x88-9485.json index b2eda853d9e..b375e931cf4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7q7-4x88-9485/GHSA-p7q7-4x88-9485.json +++ b/advisories/unreviewed/2022/05/GHSA-p7q7-4x88-9485/GHSA-p7q7-4x88-9485.json @@ -7,12 +7,8 @@ "CVE-2009-1079" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19659, 19660, and 19683.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7w4-8576-mqwx/GHSA-p7w4-8576-mqwx.json b/advisories/unreviewed/2022/05/GHSA-p7w4-8576-mqwx/GHSA-p7w4-8576-mqwx.json index 0f96f53c04c..b22c61a0343 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7w4-8576-mqwx/GHSA-p7w4-8576-mqwx.json +++ b/advisories/unreviewed/2022/05/GHSA-p7w4-8576-mqwx/GHSA-p7w4-8576-mqwx.json @@ -7,12 +7,8 @@ "CVE-2009-0957" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9pf-5c8c-756m/GHSA-p9pf-5c8c-756m.json b/advisories/unreviewed/2022/05/GHSA-p9pf-5c8c-756m/GHSA-p9pf-5c8c-756m.json index 4f8814fd01e..d85a62f94cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9pf-5c8c-756m/GHSA-p9pf-5c8c-756m.json +++ b/advisories/unreviewed/2022/05/GHSA-p9pf-5c8c-756m/GHSA-p9pf-5c8c-756m.json @@ -7,12 +7,8 @@ "CVE-2009-1262" ], "details": "Format string vulnerability in Fortinet FortiClient 3.0.614, and possibly earlier, allows local users to execute arbitrary code via format string specifiers in the VPN connection name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pffq-fw9j-q8w8/GHSA-pffq-fw9j-q8w8.json b/advisories/unreviewed/2022/05/GHSA-pffq-fw9j-q8w8/GHSA-pffq-fw9j-q8w8.json index 7fcafde5955..2f3bcb67b95 100644 --- a/advisories/unreviewed/2022/05/GHSA-pffq-fw9j-q8w8/GHSA-pffq-fw9j-q8w8.json +++ b/advisories/unreviewed/2022/05/GHSA-pffq-fw9j-q8w8/GHSA-pffq-fw9j-q8w8.json @@ -7,12 +7,8 @@ "CVE-2009-1315" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AbleSpace 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter to groups_profile.php, (2) cat_id and (3) razd_id parameters to adv_cat.php, and the (4) URL to blogs_full.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgqx-hcp9-24pq/GHSA-pgqx-hcp9-24pq.json b/advisories/unreviewed/2022/05/GHSA-pgqx-hcp9-24pq/GHSA-pgqx-hcp9-24pq.json index 2f00d7a0762..4b047afc7cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgqx-hcp9-24pq/GHSA-pgqx-hcp9-24pq.json +++ b/advisories/unreviewed/2022/05/GHSA-pgqx-hcp9-24pq/GHSA-pgqx-hcp9-24pq.json @@ -7,12 +7,8 @@ "CVE-2009-1150" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgr3-8qx7-6j82/GHSA-pgr3-8qx7-6j82.json b/advisories/unreviewed/2022/05/GHSA-pgr3-8qx7-6j82/GHSA-pgr3-8qx7-6j82.json index 59443bca9ce..655b264a086 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgr3-8qx7-6j82/GHSA-pgr3-8qx7-6j82.json +++ b/advisories/unreviewed/2022/05/GHSA-pgr3-8qx7-6j82/GHSA-pgr3-8qx7-6j82.json @@ -7,12 +7,8 @@ "CVE-2009-1466" ], "details": "Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to obtain sensitive information by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ph28-8h48-j3qp/GHSA-ph28-8h48-j3qp.json b/advisories/unreviewed/2022/05/GHSA-ph28-8h48-j3qp/GHSA-ph28-8h48-j3qp.json index 464e5eb801c..5c2471d50ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph28-8h48-j3qp/GHSA-ph28-8h48-j3qp.json +++ b/advisories/unreviewed/2022/05/GHSA-ph28-8h48-j3qp/GHSA-ph28-8h48-j3qp.json @@ -7,12 +7,8 @@ "CVE-2009-1297" ], "details": "iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj5x-m9rp-22m5/GHSA-pj5x-m9rp-22m5.json b/advisories/unreviewed/2022/05/GHSA-pj5x-m9rp-22m5/GHSA-pj5x-m9rp-22m5.json index 793d67ba7c4..ad3e79f4c1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj5x-m9rp-22m5/GHSA-pj5x-m9rp-22m5.json +++ b/advisories/unreviewed/2022/05/GHSA-pj5x-m9rp-22m5/GHSA-pj5x-m9rp-22m5.json @@ -7,12 +7,8 @@ "CVE-2009-1087" ], "details": "Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the (1) synacast, (2) Play, (3) pplsv, or (4) ppvod URI handler. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj8x-5x3r-98wr/GHSA-pj8x-5x3r-98wr.json b/advisories/unreviewed/2022/05/GHSA-pj8x-5x3r-98wr/GHSA-pj8x-5x3r-98wr.json index a00d1371b38..6d759bc3daf 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj8x-5x3r-98wr/GHSA-pj8x-5x3r-98wr.json +++ b/advisories/unreviewed/2022/05/GHSA-pj8x-5x3r-98wr/GHSA-pj8x-5x3r-98wr.json @@ -7,12 +7,8 @@ "CVE-2009-0981" ], "details": "Unspecified vulnerability in the Application Express component in Oracle Database 11.1.0.7 allows remote authenticated users to affect confidentiality, related to APEX. NOTE: the previous information was obtained from the April 2009 CPU. Oracle has not commented on reliable researcher claims that this issue allows remote authenticated users to obtain APEX password hashes from the WWV_FLOW_USERS table via a SELECT statement.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pqg9-w7ww-pq5c/GHSA-pqg9-w7ww-pq5c.json b/advisories/unreviewed/2022/05/GHSA-pqg9-w7ww-pq5c/GHSA-pqg9-w7ww-pq5c.json index 56a85f17cf0..776b29a4b5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqg9-w7ww-pq5c/GHSA-pqg9-w7ww-pq5c.json +++ b/advisories/unreviewed/2022/05/GHSA-pqg9-w7ww-pq5c/GHSA-pqg9-w7ww-pq5c.json @@ -7,12 +7,8 @@ "CVE-2009-1362" ], "details": "SQL injection vulnerability in administration/index.php in chCounter 3.1.3 allows remote attackers to execute arbitrary SQL commands via the login_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqph-446w-r3p4/GHSA-pqph-446w-r3p4.json b/advisories/unreviewed/2022/05/GHSA-pqph-446w-r3p4/GHSA-pqph-446w-r3p4.json index a7f61e3fdcc..72eb619ef56 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqph-446w-r3p4/GHSA-pqph-446w-r3p4.json +++ b/advisories/unreviewed/2022/05/GHSA-pqph-446w-r3p4/GHSA-pqph-446w-r3p4.json @@ -7,12 +7,8 @@ "CVE-2009-1104" ], "details": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pr8c-p832-89qp/GHSA-pr8c-p832-89qp.json b/advisories/unreviewed/2022/05/GHSA-pr8c-p832-89qp/GHSA-pr8c-p832-89qp.json index 88e8e93aa00..d8c93b15279 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr8c-p832-89qp/GHSA-pr8c-p832-89qp.json +++ b/advisories/unreviewed/2022/05/GHSA-pr8c-p832-89qp/GHSA-pr8c-p832-89qp.json @@ -7,12 +7,8 @@ "CVE-2009-1368" ], "details": "Directory traversal vulnerability in index.php in moziloCMS 1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter. NOTE: this might be the same issue as CVE-2008-6126.2, which may have been fixed in 1.10.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prwv-85r5-j7rp/GHSA-prwv-85r5-j7rp.json b/advisories/unreviewed/2022/05/GHSA-prwv-85r5-j7rp/GHSA-prwv-85r5-j7rp.json index 2d8c6aace0a..000b0ba2199 100644 --- a/advisories/unreviewed/2022/05/GHSA-prwv-85r5-j7rp/GHSA-prwv-85r5-j7rp.json +++ b/advisories/unreviewed/2022/05/GHSA-prwv-85r5-j7rp/GHSA-prwv-85r5-j7rp.json @@ -7,12 +7,8 @@ "CVE-2009-1361" ], "details": "dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv87-7qqc-wcqm/GHSA-pv87-7qqc-wcqm.json b/advisories/unreviewed/2022/05/GHSA-pv87-7qqc-wcqm/GHSA-pv87-7qqc-wcqm.json index 47fd06e49f0..64497446502 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv87-7qqc-wcqm/GHSA-pv87-7qqc-wcqm.json +++ b/advisories/unreviewed/2022/05/GHSA-pv87-7qqc-wcqm/GHSA-pv87-7qqc-wcqm.json @@ -7,12 +7,8 @@ "CVE-2009-1278" ], "details": "Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvph-p9mr-w4w7/GHSA-pvph-p9mr-w4w7.json b/advisories/unreviewed/2022/05/GHSA-pvph-p9mr-w4w7/GHSA-pvph-p9mr-w4w7.json index 9224e80d9ff..5c164c7c55b 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvph-p9mr-w4w7/GHSA-pvph-p9mr-w4w7.json +++ b/advisories/unreviewed/2022/05/GHSA-pvph-p9mr-w4w7/GHSA-pvph-p9mr-w4w7.json @@ -7,12 +7,8 @@ "CVE-2009-0986" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 and 11.1.0.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pw5v-pxf7-g2j2/GHSA-pw5v-pxf7-g2j2.json b/advisories/unreviewed/2022/05/GHSA-pw5v-pxf7-g2j2/GHSA-pw5v-pxf7-g2j2.json index 4b443e1aeb7..d9e468a5f97 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw5v-pxf7-g2j2/GHSA-pw5v-pxf7-g2j2.json +++ b/advisories/unreviewed/2022/05/GHSA-pw5v-pxf7-g2j2/GHSA-pw5v-pxf7-g2j2.json @@ -7,12 +7,8 @@ "CVE-2009-1413" ], "details": "Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site. NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwvr-ph6m-wcv9/GHSA-pwvr-ph6m-wcv9.json b/advisories/unreviewed/2022/05/GHSA-pwvr-ph6m-wcv9/GHSA-pwvr-ph6m-wcv9.json index 77e4c436f01..56fe14d08f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwvr-ph6m-wcv9/GHSA-pwvr-ph6m-wcv9.json +++ b/advisories/unreviewed/2022/05/GHSA-pwvr-ph6m-wcv9/GHSA-pwvr-ph6m-wcv9.json @@ -7,12 +7,8 @@ "CVE-2009-1147" ], "details": "Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 2.0.x before 2.0.1 build 156745 allows local users to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwxh-j76w-whrf/GHSA-pwxh-j76w-whrf.json b/advisories/unreviewed/2022/05/GHSA-pwxh-j76w-whrf/GHSA-pwxh-j76w-whrf.json index b148e29e819..dd6e5d94fdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwxh-j76w-whrf/GHSA-pwxh-j76w-whrf.json +++ b/advisories/unreviewed/2022/05/GHSA-pwxh-j76w-whrf/GHSA-pwxh-j76w-whrf.json @@ -7,12 +7,8 @@ "CVE-2009-1284" ], "details": "Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a long .bib bibliography file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxr6-gr2r-cc6x/GHSA-pxr6-gr2r-cc6x.json b/advisories/unreviewed/2022/05/GHSA-pxr6-gr2r-cc6x/GHSA-pxr6-gr2r-cc6x.json index d0fe2f125b4..a964c709d50 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxr6-gr2r-cc6x/GHSA-pxr6-gr2r-cc6x.json +++ b/advisories/unreviewed/2022/05/GHSA-pxr6-gr2r-cc6x/GHSA-pxr6-gr2r-cc6x.json @@ -7,12 +7,8 @@ "CVE-2009-1072" ], "details": "nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q2w4-99p5-539f/GHSA-q2w4-99p5-539f.json b/advisories/unreviewed/2022/05/GHSA-q2w4-99p5-539f/GHSA-q2w4-99p5-539f.json index 6cadde574f3..85070621515 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2w4-99p5-539f/GHSA-q2w4-99p5-539f.json +++ b/advisories/unreviewed/2022/05/GHSA-q2w4-99p5-539f/GHSA-q2w4-99p5-539f.json @@ -7,12 +7,8 @@ "CVE-2009-1056" ], "details": "IBM Rational AppScan Enterprise before 5.5 FP1 allows remote attackers to read arbitrary exported reports by \"forcefully browsing.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q2xj-xj92-4m87/GHSA-q2xj-xj92-4m87.json b/advisories/unreviewed/2022/05/GHSA-q2xj-xj92-4m87/GHSA-q2xj-xj92-4m87.json index ae3d0c66fa7..d8c040d763a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2xj-xj92-4m87/GHSA-q2xj-xj92-4m87.json +++ b/advisories/unreviewed/2022/05/GHSA-q2xj-xj92-4m87/GHSA-q2xj-xj92-4m87.json @@ -7,12 +7,8 @@ "CVE-2009-1510" ], "details": "Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q3q2-q4rg-wfpg/GHSA-q3q2-q4rg-wfpg.json b/advisories/unreviewed/2022/05/GHSA-q3q2-q4rg-wfpg/GHSA-q3q2-q4rg-wfpg.json index 0ea92175cf0..3e5f5f6c451 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3q2-q4rg-wfpg/GHSA-q3q2-q4rg-wfpg.json +++ b/advisories/unreviewed/2022/05/GHSA-q3q2-q4rg-wfpg/GHSA-q3q2-q4rg-wfpg.json @@ -7,12 +7,8 @@ "CVE-2009-1040" ], "details": "Buffer overflow in WinAsm Studio 5.1.5.0 allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q3v7-7qvh-c6hp/GHSA-q3v7-7qvh-c6hp.json b/advisories/unreviewed/2022/05/GHSA-q3v7-7qvh-c6hp/GHSA-q3v7-7qvh-c6hp.json index 7e8778b2021..ff03a4a7823 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3v7-7qvh-c6hp/GHSA-q3v7-7qvh-c6hp.json +++ b/advisories/unreviewed/2022/05/GHSA-q3v7-7qvh-c6hp/GHSA-q3v7-7qvh-c6hp.json @@ -7,12 +7,8 @@ "CVE-2009-1228" ], "details": "Cross-site scripting (XSS) vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field (user_name parameter).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q493-5m3q-745m/GHSA-q493-5m3q-745m.json b/advisories/unreviewed/2022/05/GHSA-q493-5m3q-745m/GHSA-q493-5m3q-745m.json index 2fc2445aefd..dbab66ac193 100644 --- a/advisories/unreviewed/2022/05/GHSA-q493-5m3q-745m/GHSA-q493-5m3q-745m.json +++ b/advisories/unreviewed/2022/05/GHSA-q493-5m3q-745m/GHSA-q493-5m3q-745m.json @@ -7,12 +7,8 @@ "CVE-2009-1283" ], "details": "glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glf_password cookie, aka \"User Masquerading.\" NOTE: this can be leveraged with a separate SQL injection vulnerability to steal hashes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4p2-hx8c-p7gh/GHSA-q4p2-hx8c-p7gh.json b/advisories/unreviewed/2022/05/GHSA-q4p2-hx8c-p7gh/GHSA-q4p2-hx8c-p7gh.json index ad0968e4a4a..2edb46b7783 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4p2-hx8c-p7gh/GHSA-q4p2-hx8c-p7gh.json +++ b/advisories/unreviewed/2022/05/GHSA-q4p2-hx8c-p7gh/GHSA-q4p2-hx8c-p7gh.json @@ -7,12 +7,8 @@ "CVE-2009-1131" ], "details": "Multiple stack-based buffer overflows in Microsoft Office PowerPoint 2000 SP3 allow remote attackers to execute arbitrary code via a large amount of data associated with unspecified atoms in a PowerPoint file that triggers memory corruption, aka \"Data Out of Bounds Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q529-c86m-mqjg/GHSA-q529-c86m-mqjg.json b/advisories/unreviewed/2022/05/GHSA-q529-c86m-mqjg/GHSA-q529-c86m-mqjg.json index 98b629618f0..5549925a906 100644 --- a/advisories/unreviewed/2022/05/GHSA-q529-c86m-mqjg/GHSA-q529-c86m-mqjg.json +++ b/advisories/unreviewed/2022/05/GHSA-q529-c86m-mqjg/GHSA-q529-c86m-mqjg.json @@ -7,12 +7,8 @@ "CVE-2009-1081" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager (IdM) 7.0 through 8.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs 19595 and 19661.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q538-87mq-rwpp/GHSA-q538-87mq-rwpp.json b/advisories/unreviewed/2022/05/GHSA-q538-87mq-rwpp/GHSA-q538-87mq-rwpp.json index 066076f19cd..07d4d112e3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q538-87mq-rwpp/GHSA-q538-87mq-rwpp.json +++ b/advisories/unreviewed/2022/05/GHSA-q538-87mq-rwpp/GHSA-q538-87mq-rwpp.json @@ -7,12 +7,8 @@ "CVE-2009-1105" ], "details": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q6p8-h2mg-649c/GHSA-q6p8-h2mg-649c.json b/advisories/unreviewed/2022/05/GHSA-q6p8-h2mg-649c/GHSA-q6p8-h2mg-649c.json index b34ea6f5f89..266edda45b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6p8-h2mg-649c/GHSA-q6p8-h2mg-649c.json +++ b/advisories/unreviewed/2022/05/GHSA-q6p8-h2mg-649c/GHSA-q6p8-h2mg-649c.json @@ -7,12 +7,8 @@ "CVE-2009-0984" ], "details": "Unspecified vulnerability in the Database Vault component in Oracle Database 9.2.0.8DV, 10.2.0.4, and 11.1.0.6 allows remote authenticated users to affect confidentiality and integrity, related to DBMS_SYS_SQL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7jx-m6qw-6j3q/GHSA-q7jx-m6qw-6j3q.json b/advisories/unreviewed/2022/05/GHSA-q7jx-m6qw-6j3q/GHSA-q7jx-m6qw-6j3q.json index 9d6fda3c8e9..6daf42f12dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7jx-m6qw-6j3q/GHSA-q7jx-m6qw-6j3q.json +++ b/advisories/unreviewed/2022/05/GHSA-q7jx-m6qw-6j3q/GHSA-q7jx-m6qw-6j3q.json @@ -7,12 +7,8 @@ "CVE-2009-1410" ], "details": "SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7x4-hch5-5w3x/GHSA-q7x4-hch5-5w3x.json b/advisories/unreviewed/2022/05/GHSA-q7x4-hch5-5w3x/GHSA-q7x4-hch5-5w3x.json index 5dde6dccc60..9153999be32 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7x4-hch5-5w3x/GHSA-q7x4-hch5-5w3x.json +++ b/advisories/unreviewed/2022/05/GHSA-q7x4-hch5-5w3x/GHSA-q7x4-hch5-5w3x.json @@ -7,12 +7,8 @@ "CVE-2009-1097" ], "details": "Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q987-2pr5-mxrr/GHSA-q987-2pr5-mxrr.json b/advisories/unreviewed/2022/05/GHSA-q987-2pr5-mxrr/GHSA-q987-2pr5-mxrr.json index a77ff813585..5ab83c8665f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q987-2pr5-mxrr/GHSA-q987-2pr5-mxrr.json +++ b/advisories/unreviewed/2022/05/GHSA-q987-2pr5-mxrr/GHSA-q987-2pr5-mxrr.json @@ -7,12 +7,8 @@ "CVE-2009-1055" ], "details": "Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9qw-8h23-9f94/GHSA-q9qw-8h23-9f94.json b/advisories/unreviewed/2022/05/GHSA-q9qw-8h23-9f94/GHSA-q9qw-8h23-9f94.json index 6a4473cd3f8..f8ecb710272 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9qw-8h23-9f94/GHSA-q9qw-8h23-9f94.json +++ b/advisories/unreviewed/2022/05/GHSA-q9qw-8h23-9f94/GHSA-q9qw-8h23-9f94.json @@ -7,12 +7,8 @@ "CVE-2009-1033" ], "details": "SQL injection vulnerability in misc.php in DeluxeBB 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the qorder parameter, a different vector than CVE-2005-2989 and CVE-2006-2503.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcg8-qx22-mhq8/GHSA-qcg8-qx22-mhq8.json b/advisories/unreviewed/2022/05/GHSA-qcg8-qx22-mhq8/GHSA-qcg8-qx22-mhq8.json index fbf11e95124..8179a20bf7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcg8-qx22-mhq8/GHSA-qcg8-qx22-mhq8.json +++ b/advisories/unreviewed/2022/05/GHSA-qcg8-qx22-mhq8/GHSA-qcg8-qx22-mhq8.json @@ -7,12 +7,8 @@ "CVE-2009-1414" ], "details": "Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qfc2-5h6v-29hp/GHSA-qfc2-5h6v-29hp.json b/advisories/unreviewed/2022/05/GHSA-qfc2-5h6v-29hp/GHSA-qfc2-5h6v-29hp.json index 556f66f361e..22fd53cfbaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfc2-5h6v-29hp/GHSA-qfc2-5h6v-29hp.json +++ b/advisories/unreviewed/2022/05/GHSA-qfc2-5h6v-29hp/GHSA-qfc2-5h6v-29hp.json @@ -7,12 +7,8 @@ "CVE-2009-1249" ], "details": "Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjjx-f58p-595x/GHSA-qjjx-f58p-595x.json b/advisories/unreviewed/2022/05/GHSA-qjjx-f58p-595x/GHSA-qjjx-f58p-595x.json index 4008f600f41..e356f3ec0c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjjx-f58p-595x/GHSA-qjjx-f58p-595x.json +++ b/advisories/unreviewed/2022/05/GHSA-qjjx-f58p-595x/GHSA-qjjx-f58p-595x.json @@ -7,12 +7,8 @@ "CVE-2009-1231" ], "details": "Unspecified vulnerability in the eClient in IBM DB2 Content Manager 8.4.1 before 8.4.1.1 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qjr3-v3c8-4f2v/GHSA-qjr3-v3c8-4f2v.json b/advisories/unreviewed/2022/05/GHSA-qjr3-v3c8-4f2v/GHSA-qjr3-v3c8-4f2v.json index a9b38c50a45..20f72c4ea9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjr3-v3c8-4f2v/GHSA-qjr3-v3c8-4f2v.json +++ b/advisories/unreviewed/2022/05/GHSA-qjr3-v3c8-4f2v/GHSA-qjr3-v3c8-4f2v.json @@ -7,12 +7,8 @@ "CVE-2009-1293" ], "details": "The web login functionality (c/portal/login) in Novell Teaming 1.0 through SP3 (1.0.3) generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qppm-3wfg-wfc7/GHSA-qppm-3wfg-wfc7.json b/advisories/unreviewed/2022/05/GHSA-qppm-3wfg-wfc7/GHSA-qppm-3wfg-wfc7.json index 4ec55884dc9..19b4b54aca4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qppm-3wfg-wfc7/GHSA-qppm-3wfg-wfc7.json +++ b/advisories/unreviewed/2022/05/GHSA-qppm-3wfg-wfc7/GHSA-qppm-3wfg-wfc7.json @@ -7,12 +7,8 @@ "CVE-2009-1138" ], "details": "The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary code via a request that uses hexadecimal encoding, whose associated memory is not released, related to a \"DN AttributeValue,\" aka \"Active Directory Invalid Free Vulnerability.\" NOTE: this issue is probably a memory leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qr2p-p4fr-fc2h/GHSA-qr2p-p4fr-fc2h.json b/advisories/unreviewed/2022/05/GHSA-qr2p-p4fr-fc2h/GHSA-qr2p-p4fr-fc2h.json index b8d5dda1f97..bd0811b9fb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr2p-p4fr-fc2h/GHSA-qr2p-p4fr-fc2h.json +++ b/advisories/unreviewed/2022/05/GHSA-qr2p-p4fr-fc2h/GHSA-qr2p-p4fr-fc2h.json @@ -7,12 +7,8 @@ "CVE-2009-1370" ], "details": "Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvx4-j4xw-649x/GHSA-qvx4-j4xw-649x.json b/advisories/unreviewed/2022/05/GHSA-qvx4-j4xw-649x/GHSA-qvx4-j4xw-649x.json index f5dda62728f..1082d295ab2 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvx4-j4xw-649x/GHSA-qvx4-j4xw-649x.json +++ b/advisories/unreviewed/2022/05/GHSA-qvx4-j4xw-649x/GHSA-qvx4-j4xw-649x.json @@ -7,12 +7,8 @@ "CVE-2009-1169" ], "details": "The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -148,9 +144,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qw48-cmhw-q77p/GHSA-qw48-cmhw-q77p.json b/advisories/unreviewed/2022/05/GHSA-qw48-cmhw-q77p/GHSA-qw48-cmhw-q77p.json index ec1fd85cddf..2b27942fc2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw48-cmhw-q77p/GHSA-qw48-cmhw-q77p.json +++ b/advisories/unreviewed/2022/05/GHSA-qw48-cmhw-q77p/GHSA-qw48-cmhw-q77p.json @@ -7,12 +7,8 @@ "CVE-2009-1034" ], "details": "SQL injection vulnerability in the Tasklist module 5.x-1.x before 5.x-1.3 and 5.x-2.x before 5.x-2.0-alpha1, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via values in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwf3-mcpp-79x7/GHSA-qwf3-mcpp-79x7.json b/advisories/unreviewed/2022/05/GHSA-qwf3-mcpp-79x7/GHSA-qwf3-mcpp-79x7.json index 1ac8bb204a7..34587c0346d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwf3-mcpp-79x7/GHSA-qwf3-mcpp-79x7.json +++ b/advisories/unreviewed/2022/05/GHSA-qwf3-mcpp-79x7/GHSA-qwf3-mcpp-79x7.json @@ -7,12 +7,8 @@ "CVE-2009-1002" ], "details": "Unspecified vulnerability in Oracle BEA WebLogic Server 10.3, 10.0 Gold through MP1, 9.2 Gold through MP3, 9.1, 9.0, 8.1 Gold through SP6, and 7.0 Gold through SP7 allows remote attackers to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwmr-cmwr-523q/GHSA-qwmr-cmwr-523q.json b/advisories/unreviewed/2022/05/GHSA-qwmr-cmwr-523q/GHSA-qwmr-cmwr-523q.json index 69e7ddf48b0..feb257ab54c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwmr-cmwr-523q/GHSA-qwmr-cmwr-523q.json +++ b/advisories/unreviewed/2022/05/GHSA-qwmr-cmwr-523q/GHSA-qwmr-cmwr-523q.json @@ -7,12 +7,8 @@ "CVE-2009-1338" ], "details": "The kill_something_info function in kernel/signal.c in the Linux kernel before 2.6.28 does not consider PID namespaces when processing signals directed to PID -1, which allows local users to bypass the intended namespace isolation, and send arbitrary signals to all processes in all namespaces, via a kill command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxcp-rchj-wg5r/GHSA-qxcp-rchj-wg5r.json b/advisories/unreviewed/2022/05/GHSA-qxcp-rchj-wg5r/GHSA-qxcp-rchj-wg5r.json index 6c83229a63b..7bc0f6d393c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxcp-rchj-wg5r/GHSA-qxcp-rchj-wg5r.json +++ b/advisories/unreviewed/2022/05/GHSA-qxcp-rchj-wg5r/GHSA-qxcp-rchj-wg5r.json @@ -7,12 +7,8 @@ "CVE-2009-1418" ], "details": "Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 3.0.1.73 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2qg-qmw9-cq46/GHSA-r2qg-qmw9-cq46.json b/advisories/unreviewed/2022/05/GHSA-r2qg-qmw9-cq46/GHSA-r2qg-qmw9-cq46.json index 72df72650fa..b6671317aca 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2qg-qmw9-cq46/GHSA-r2qg-qmw9-cq46.json +++ b/advisories/unreviewed/2022/05/GHSA-r2qg-qmw9-cq46/GHSA-r2qg-qmw9-cq46.json @@ -7,12 +7,8 @@ "CVE-2009-1455" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in WebCollab before 2.50 (aka Billy Goat) allow remote attackers to hijack the authentication of administrators for requests that change an arbitrary password or have other unspecified impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2v5-79gh-h392/GHSA-r2v5-79gh-h392.json b/advisories/unreviewed/2022/05/GHSA-r2v5-79gh-h392/GHSA-r2v5-79gh-h392.json index f66eecf5501..dfb9f0f3b29 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2v5-79gh-h392/GHSA-r2v5-79gh-h392.json +++ b/advisories/unreviewed/2022/05/GHSA-r2v5-79gh-h392/GHSA-r2v5-79gh-h392.json @@ -7,12 +7,8 @@ "CVE-2009-1165" ], "details": "Memory leak on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0, 5.1 before 5.1.163.0, and 5.0 and 5.2 before 5.2.178.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (memory consumption and device reload) via SSH management connections, aka Bug ID CSCsw40789.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2w4-h757-2m5g/GHSA-r2w4-h757-2m5g.json b/advisories/unreviewed/2022/05/GHSA-r2w4-h757-2m5g/GHSA-r2w4-h757-2m5g.json index a3e591484b4..aea72a91e6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2w4-h757-2m5g/GHSA-r2w4-h757-2m5g.json +++ b/advisories/unreviewed/2022/05/GHSA-r2w4-h757-2m5g/GHSA-r2w4-h757-2m5g.json @@ -7,12 +7,8 @@ "CVE-2009-1207" ], "details": "Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3mv-rfx2-rf55/GHSA-r3mv-rfx2-rf55.json b/advisories/unreviewed/2022/05/GHSA-r3mv-rfx2-rf55/GHSA-r3mv-rfx2-rf55.json index c51a94c1dd2..d68d040dd73 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3mv-rfx2-rf55/GHSA-r3mv-rfx2-rf55.json +++ b/advisories/unreviewed/2022/05/GHSA-r3mv-rfx2-rf55/GHSA-r3mv-rfx2-rf55.json @@ -7,12 +7,8 @@ "CVE-2009-1238" ], "details": "Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r46x-qr76-33f6/GHSA-r46x-qr76-33f6.json b/advisories/unreviewed/2022/05/GHSA-r46x-qr76-33f6/GHSA-r46x-qr76-33f6.json index bfdb5ba20d3..340259a93ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-r46x-qr76-33f6/GHSA-r46x-qr76-33f6.json +++ b/advisories/unreviewed/2022/05/GHSA-r46x-qr76-33f6/GHSA-r46x-qr76-33f6.json @@ -7,12 +7,8 @@ "CVE-2009-1357" ], "details": "CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the HELP_PAGE parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r563-xp2f-hp5j/GHSA-r563-xp2f-hp5j.json b/advisories/unreviewed/2022/05/GHSA-r563-xp2f-hp5j/GHSA-r563-xp2f-hp5j.json index 005a968e4de..7312ddb3774 100644 --- a/advisories/unreviewed/2022/05/GHSA-r563-xp2f-hp5j/GHSA-r563-xp2f-hp5j.json +++ b/advisories/unreviewed/2022/05/GHSA-r563-xp2f-hp5j/GHSA-r563-xp2f-hp5j.json @@ -7,12 +7,8 @@ "CVE-2009-1451" ], "details": "Cross-site scripting (XSS) vulnerability in startpage.php in SMA-DB 0.3.12 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5vm-6rgr-wr28/GHSA-r5vm-6rgr-wr28.json b/advisories/unreviewed/2022/05/GHSA-r5vm-6rgr-wr28/GHSA-r5vm-6rgr-wr28.json index 13d406ca1d8..10afd9ca1d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5vm-6rgr-wr28/GHSA-r5vm-6rgr-wr28.json +++ b/advisories/unreviewed/2022/05/GHSA-r5vm-6rgr-wr28/GHSA-r5vm-6rgr-wr28.json @@ -7,12 +7,8 @@ "CVE-2009-1025" ], "details": "PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r622-f8m7-c595/GHSA-r622-f8m7-c595.json b/advisories/unreviewed/2022/05/GHSA-r622-f8m7-c595/GHSA-r622-f8m7-c595.json index b9be7ce64ec..eb3b58f1a43 100644 --- a/advisories/unreviewed/2022/05/GHSA-r622-f8m7-c595/GHSA-r622-f8m7-c595.json +++ b/advisories/unreviewed/2022/05/GHSA-r622-f8m7-c595/GHSA-r622-f8m7-c595.json @@ -7,12 +7,8 @@ "CVE-2009-1135" ], "details": "Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka \"Radius OTP Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r63v-qxc3-qj5f/GHSA-r63v-qxc3-qj5f.json b/advisories/unreviewed/2022/05/GHSA-r63v-qxc3-qj5f/GHSA-r63v-qxc3-qj5f.json index 9ba2d594190..a75f14ee7d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r63v-qxc3-qj5f/GHSA-r63v-qxc3-qj5f.json +++ b/advisories/unreviewed/2022/05/GHSA-r63v-qxc3-qj5f/GHSA-r63v-qxc3-qj5f.json @@ -7,12 +7,8 @@ "CVE-2009-1090" ], "details": "Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6qc-jcfc-38c4/GHSA-r6qc-jcfc-38c4.json b/advisories/unreviewed/2022/05/GHSA-r6qc-jcfc-38c4/GHSA-r6qc-jcfc-38c4.json index f3cb2ad54b3..5b0d48b19ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6qc-jcfc-38c4/GHSA-r6qc-jcfc-38c4.json +++ b/advisories/unreviewed/2022/05/GHSA-r6qc-jcfc-38c4/GHSA-r6qc-jcfc-38c4.json @@ -7,12 +7,8 @@ "CVE-2009-1022" ], "details": "Heap-based buffer overflow in the Preview/ Set Segment function in Gretech GOMlab GOM Encoder 1.0.0.11 and earlier allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a long text field in a subtitle (.srt) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r78j-x55g-fj63/GHSA-r78j-x55g-fj63.json b/advisories/unreviewed/2022/05/GHSA-r78j-x55g-fj63/GHSA-r78j-x55g-fj63.json index cc69ad3f702..6075b20a524 100644 --- a/advisories/unreviewed/2022/05/GHSA-r78j-x55g-fj63/GHSA-r78j-x55g-fj63.json +++ b/advisories/unreviewed/2022/05/GHSA-r78j-x55g-fj63/GHSA-r78j-x55g-fj63.json @@ -7,12 +7,8 @@ "CVE-2009-1029" ], "details": "Stack-based buffer overflow in POP Peeper 3.4.0.0 and earlier allows remote POP3 servers to execute arbitrary code via a long Date header, related to Imap.dll.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r898-6r8q-9232/GHSA-r898-6r8q-9232.json b/advisories/unreviewed/2022/05/GHSA-r898-6r8q-9232/GHSA-r898-6r8q-9232.json index 72ff10d8f08..ea4d3ccfbe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r898-6r8q-9232/GHSA-r898-6r8q-9232.json +++ b/advisories/unreviewed/2022/05/GHSA-r898-6r8q-9232/GHSA-r898-6r8q-9232.json @@ -7,12 +7,8 @@ "CVE-2009-1152" ], "details": "Siemens Gigaset SE461 WiMAX router 1.5-BL024.9.6401, and possibly other versions, allows remote attackers to cause a denial of service (device restart and loss of configuration) by connecting to TCP port 53, then closing the connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r97x-ww76-jhf3/GHSA-r97x-ww76-jhf3.json b/advisories/unreviewed/2022/05/GHSA-r97x-ww76-jhf3/GHSA-r97x-ww76-jhf3.json index b3fa95a940a..d2f99f157f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r97x-ww76-jhf3/GHSA-r97x-ww76-jhf3.json +++ b/advisories/unreviewed/2022/05/GHSA-r97x-ww76-jhf3/GHSA-r97x-ww76-jhf3.json @@ -7,12 +7,8 @@ "CVE-2009-1155" ], "details": "Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r98g-pww2-x9wj/GHSA-r98g-pww2-x9wj.json b/advisories/unreviewed/2022/05/GHSA-r98g-pww2-x9wj/GHSA-r98g-pww2-x9wj.json index 3874dd37991..557def990d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r98g-pww2-x9wj/GHSA-r98g-pww2-x9wj.json +++ b/advisories/unreviewed/2022/05/GHSA-r98g-pww2-x9wj/GHSA-r98g-pww2-x9wj.json @@ -7,12 +7,8 @@ "CVE-2009-1302" ], "details": "The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -160,9 +156,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r9x8-3g9m-5hjm/GHSA-r9x8-3g9m-5hjm.json b/advisories/unreviewed/2022/05/GHSA-r9x8-3g9m-5hjm/GHSA-r9x8-3g9m-5hjm.json index fc32a728e66..ee654c96208 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9x8-3g9m-5hjm/GHSA-r9x8-3g9m-5hjm.json +++ b/advisories/unreviewed/2022/05/GHSA-r9x8-3g9m-5hjm/GHSA-r9x8-3g9m-5hjm.json @@ -7,12 +7,8 @@ "CVE-2009-1405" ], "details": "Directory traversal vulnerability in index.php in PastelCMS 0.8.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the set_lng parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rc72-3q8m-vx43/GHSA-rc72-3q8m-vx43.json b/advisories/unreviewed/2022/05/GHSA-rc72-3q8m-vx43/GHSA-rc72-3q8m-vx43.json index 96855cb72e9..2eb934cb80c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rc72-3q8m-vx43/GHSA-rc72-3q8m-vx43.json +++ b/advisories/unreviewed/2022/05/GHSA-rc72-3q8m-vx43/GHSA-rc72-3q8m-vx43.json @@ -7,12 +7,8 @@ "CVE-2009-1182" ], "details": "Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf22-cg75-72hc/GHSA-rf22-cg75-72hc.json b/advisories/unreviewed/2022/05/GHSA-rf22-cg75-72hc/GHSA-rf22-cg75-72hc.json index de44f711814..22d8b86f04c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf22-cg75-72hc/GHSA-rf22-cg75-72hc.json +++ b/advisories/unreviewed/2022/05/GHSA-rf22-cg75-72hc/GHSA-rf22-cg75-72hc.json @@ -7,12 +7,8 @@ "CVE-2009-0940" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rh3m-xg83-7qmw/GHSA-rh3m-xg83-7qmw.json b/advisories/unreviewed/2022/05/GHSA-rh3m-xg83-7qmw/GHSA-rh3m-xg83-7qmw.json index 574709b92ce..607d9c9f940 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh3m-xg83-7qmw/GHSA-rh3m-xg83-7qmw.json +++ b/advisories/unreviewed/2022/05/GHSA-rh3m-xg83-7qmw/GHSA-rh3m-xg83-7qmw.json @@ -7,12 +7,8 @@ "CVE-2009-1265" ], "details": "Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote attackers to obtain sensitive information via a large length value, which causes \"garbage\" memory to be sent.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rjrq-93hp-22ww/GHSA-rjrq-93hp-22ww.json b/advisories/unreviewed/2022/05/GHSA-rjrq-93hp-22ww/GHSA-rjrq-93hp-22ww.json index 8979b09e167..47d90c9cade 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjrq-93hp-22ww/GHSA-rjrq-93hp-22ww.json +++ b/advisories/unreviewed/2022/05/GHSA-rjrq-93hp-22ww/GHSA-rjrq-93hp-22ww.json @@ -7,12 +7,8 @@ "CVE-2009-1264" ], "details": "Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpg9-p2rj-cf43/GHSA-rpg9-p2rj-cf43.json b/advisories/unreviewed/2022/05/GHSA-rpg9-p2rj-cf43/GHSA-rpg9-p2rj-cf43.json index ca7a366c133..7f1b9093b12 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpg9-p2rj-cf43/GHSA-rpg9-p2rj-cf43.json +++ b/advisories/unreviewed/2022/05/GHSA-rpg9-p2rj-cf43/GHSA-rpg9-p2rj-cf43.json @@ -7,12 +7,8 @@ "CVE-2009-1071" ], "details": "Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrmp-c5xv-q7fj/GHSA-rrmp-c5xv-q7fj.json b/advisories/unreviewed/2022/05/GHSA-rrmp-c5xv-q7fj/GHSA-rrmp-c5xv-q7fj.json index ccf32dc5670..ac7e7e88bb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrmp-c5xv-q7fj/GHSA-rrmp-c5xv-q7fj.json +++ b/advisories/unreviewed/2022/05/GHSA-rrmp-c5xv-q7fj/GHSA-rrmp-c5xv-q7fj.json @@ -7,12 +7,8 @@ "CVE-2009-1037" ], "details": "Unspecified vulnerability in the Send by e-mail module in the \"Printer, e-mail and PDF versions\" module 5.x before 5.x-4.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to send unlimited spam messages via unknown vectors related to the flood control API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rrpm-xwg2-r59h/GHSA-rrpm-xwg2-r59h.json b/advisories/unreviewed/2022/05/GHSA-rrpm-xwg2-r59h/GHSA-rrpm-xwg2-r59h.json index 61aa424b3dd..730a8e9e5bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrpm-xwg2-r59h/GHSA-rrpm-xwg2-r59h.json +++ b/advisories/unreviewed/2022/05/GHSA-rrpm-xwg2-r59h/GHSA-rrpm-xwg2-r59h.json @@ -7,12 +7,8 @@ "CVE-2009-1129" ], "details": "Multiple stack-based buffer overflows in the PowerPoint 95 importer (PP7X32.DLL) in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3 allow remote attackers to execute arbitrary code via an inconsistent record length in sound data in a file that uses a PowerPoint 95 (PPT95) native file format, aka \"PP7 Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-1128.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrwf-mrcc-mrgc/GHSA-rrwf-mrcc-mrgc.json b/advisories/unreviewed/2022/05/GHSA-rrwf-mrcc-mrgc/GHSA-rrwf-mrcc-mrgc.json index 16f26ab638e..e341c6a63d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrwf-mrcc-mrgc/GHSA-rrwf-mrcc-mrgc.json +++ b/advisories/unreviewed/2022/05/GHSA-rrwf-mrcc-mrgc/GHSA-rrwf-mrcc-mrgc.json @@ -7,12 +7,8 @@ "CVE-2009-1232" ], "details": "Mozilla Firefox 3.0.8 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags. NOTE: it was later reported that 3.0.10 and earlier are also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrxx-7pc4-7jx7/GHSA-rrxx-7pc4-7jx7.json b/advisories/unreviewed/2022/05/GHSA-rrxx-7pc4-7jx7/GHSA-rrxx-7pc4-7jx7.json index fce2f110f55..f86775a562b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrxx-7pc4-7jx7/GHSA-rrxx-7pc4-7jx7.json +++ b/advisories/unreviewed/2022/05/GHSA-rrxx-7pc4-7jx7/GHSA-rrxx-7pc4-7jx7.json @@ -7,12 +7,8 @@ "CVE-2009-1160" ], "details": "Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvqr-f374-3qqw/GHSA-rvqr-f374-3qqw.json b/advisories/unreviewed/2022/05/GHSA-rvqr-f374-3qqw/GHSA-rvqr-f374-3qqw.json index cff11fad1c1..ec450c26790 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvqr-f374-3qqw/GHSA-rvqr-f374-3qqw.json +++ b/advisories/unreviewed/2022/05/GHSA-rvqr-f374-3qqw/GHSA-rvqr-f374-3qqw.json @@ -7,12 +7,8 @@ "CVE-2009-1270" ], "details": "libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvxp-pm7q-gj4f/GHSA-rvxp-pm7q-gj4f.json b/advisories/unreviewed/2022/05/GHSA-rvxp-pm7q-gj4f/GHSA-rvxp-pm7q-gj4f.json index 73c06259854..79af0cb0b79 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvxp-pm7q-gj4f/GHSA-rvxp-pm7q-gj4f.json +++ b/advisories/unreviewed/2022/05/GHSA-rvxp-pm7q-gj4f/GHSA-rvxp-pm7q-gj4f.json @@ -7,12 +7,8 @@ "CVE-2009-1203" ], "details": "WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v24q-j847-hmrp/GHSA-v24q-j847-hmrp.json b/advisories/unreviewed/2022/05/GHSA-v24q-j847-hmrp/GHSA-v24q-j847-hmrp.json index eb25b783ea0..2053e170837 100644 --- a/advisories/unreviewed/2022/05/GHSA-v24q-j847-hmrp/GHSA-v24q-j847-hmrp.json +++ b/advisories/unreviewed/2022/05/GHSA-v24q-j847-hmrp/GHSA-v24q-j847-hmrp.json @@ -7,12 +7,8 @@ "CVE-2009-0982" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.19 allows remote authenticated users to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v2jh-2f88-8jr3/GHSA-v2jh-2f88-8jr3.json b/advisories/unreviewed/2022/05/GHSA-v2jh-2f88-8jr3/GHSA-v2jh-2f88-8jr3.json index 50911d63ad6..ffa4ede67d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2jh-2f88-8jr3/GHSA-v2jh-2f88-8jr3.json +++ b/advisories/unreviewed/2022/05/GHSA-v2jh-2f88-8jr3/GHSA-v2jh-2f88-8jr3.json @@ -7,12 +7,8 @@ "CVE-2009-1166" ], "details": "The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100 Series, 4200 Series, and 4400 Series Wireless Services Modules (WiSM), WLC Modules for Integrated Services Routers, and Catalyst 3750G Integrated Wireless LAN Controllers, allows remote attackers to cause a denial of service (device reload) via a crafted (1) HTTP or (2) HTTPS request, aka Bug ID CSCsy27708.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v3f3-x57x-hfg9/GHSA-v3f3-x57x-hfg9.json b/advisories/unreviewed/2022/05/GHSA-v3f3-x57x-hfg9/GHSA-v3f3-x57x-hfg9.json index ae710a782bc..bf7ea6db782 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3f3-x57x-hfg9/GHSA-v3f3-x57x-hfg9.json +++ b/advisories/unreviewed/2022/05/GHSA-v3f3-x57x-hfg9/GHSA-v3f3-x57x-hfg9.json @@ -7,12 +7,8 @@ "CVE-2009-1220" ], "details": "Cross-site scripting (XSS) vulnerability in +webvpn+/index.html in WebVPN on the Cisco Adaptive Security Appliances (ASA) 5520 with software 7.2(4)30 and earlier 7.2 versions including 7.2(2)22, and 8.0(4)28 and earlier 8.0 versions, when clientless mode is enabled, allows remote attackers to inject arbitrary web script or HTML via the Host HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3v3-c8p6-cr4p/GHSA-v3v3-c8p6-cr4p.json b/advisories/unreviewed/2022/05/GHSA-v3v3-c8p6-cr4p/GHSA-v3v3-c8p6-cr4p.json index 48dc1a9f2dd..81a489b3167 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3v3-c8p6-cr4p/GHSA-v3v3-c8p6-cr4p.json +++ b/advisories/unreviewed/2022/05/GHSA-v3v3-c8p6-cr4p/GHSA-v3v3-c8p6-cr4p.json @@ -7,12 +7,8 @@ "CVE-2009-0995" ], "details": "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v46p-9p43-58c9/GHSA-v46p-9p43-58c9.json b/advisories/unreviewed/2022/05/GHSA-v46p-9p43-58c9/GHSA-v46p-9p43-58c9.json index 0dd0f33247b..21d077961cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-v46p-9p43-58c9/GHSA-v46p-9p43-58c9.json +++ b/advisories/unreviewed/2022/05/GHSA-v46p-9p43-58c9/GHSA-v46p-9p43-58c9.json @@ -7,12 +7,8 @@ "CVE-2009-0954" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5qf-7cqw-4vrr/GHSA-v5qf-7cqw-4vrr.json b/advisories/unreviewed/2022/05/GHSA-v5qf-7cqw-4vrr/GHSA-v5qf-7cqw-4vrr.json index e36ab866856..4f262076ed1 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5qf-7cqw-4vrr/GHSA-v5qf-7cqw-4vrr.json +++ b/advisories/unreviewed/2022/05/GHSA-v5qf-7cqw-4vrr/GHSA-v5qf-7cqw-4vrr.json @@ -7,12 +7,8 @@ "CVE-2009-1349" ], "details": "Cross-site scripting (XSS) vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5wv-mgcq-2c5w/GHSA-v5wv-mgcq-2c5w.json b/advisories/unreviewed/2022/05/GHSA-v5wv-mgcq-2c5w/GHSA-v5wv-mgcq-2c5w.json index 03d7d05ea6c..49053cfee04 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5wv-mgcq-2c5w/GHSA-v5wv-mgcq-2c5w.json +++ b/advisories/unreviewed/2022/05/GHSA-v5wv-mgcq-2c5w/GHSA-v5wv-mgcq-2c5w.json @@ -7,12 +7,8 @@ "CVE-2009-1328" ], "details": "Stack-based buffer overflow in Mini-stream RM-MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6fv-h7mf-cc44/GHSA-v6fv-h7mf-cc44.json b/advisories/unreviewed/2022/05/GHSA-v6fv-h7mf-cc44/GHSA-v6fv-h7mf-cc44.json index 58b7fea3cba..8d20c8fedac 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6fv-h7mf-cc44/GHSA-v6fv-h7mf-cc44.json +++ b/advisories/unreviewed/2022/05/GHSA-v6fv-h7mf-cc44/GHSA-v6fv-h7mf-cc44.json @@ -7,12 +7,8 @@ "CVE-2009-0959" ], "details": "The MPEG-4 video codec in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted MPEG-4 video file that triggers an \"input validation issue.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v76f-jmcj-h9cr/GHSA-v76f-jmcj-h9cr.json b/advisories/unreviewed/2022/05/GHSA-v76f-jmcj-h9cr/GHSA-v76f-jmcj-h9cr.json index 3751e8fd4bd..a8c5eb961a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-v76f-jmcj-h9cr/GHSA-v76f-jmcj-h9cr.json +++ b/advisories/unreviewed/2022/05/GHSA-v76f-jmcj-h9cr/GHSA-v76f-jmcj-h9cr.json @@ -7,12 +7,8 @@ "CVE-2009-1355" ], "details": "Stack-based buffer overflow in muxatmd in IBM AIX 5.2, 5.3, and 6.1 allows local users to gain privileges via a long filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7cc-2p5c-5943/GHSA-v7cc-2p5c-5943.json b/advisories/unreviewed/2022/05/GHSA-v7cc-2p5c-5943/GHSA-v7cc-2p5c-5943.json index a5ddc655cd4..eb6b0b2a4f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7cc-2p5c-5943/GHSA-v7cc-2p5c-5943.json +++ b/advisories/unreviewed/2022/05/GHSA-v7cc-2p5c-5943/GHSA-v7cc-2p5c-5943.json @@ -7,12 +7,8 @@ "CVE-2009-1438" ], "details": "Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code via a MED file with a crafted (1) song comment or (2) song name, which triggers a heap-based buffer overflow, as exploited in the wild in August 2008.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7w5-9782-qx92/GHSA-v7w5-9782-qx92.json b/advisories/unreviewed/2022/05/GHSA-v7w5-9782-qx92/GHSA-v7w5-9782-qx92.json index bc11c3cfee5..e0b417b6341 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7w5-9782-qx92/GHSA-v7w5-9782-qx92.json +++ b/advisories/unreviewed/2022/05/GHSA-v7w5-9782-qx92/GHSA-v7w5-9782-qx92.json @@ -7,12 +7,8 @@ "CVE-2009-1083" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits \"control characters\" in the passwords of user accounts, which allows remote attackers to execute arbitrary commands via vectors involving \"resource adapters.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7w8-xfq9-rfvg/GHSA-v7w8-xfq9-rfvg.json b/advisories/unreviewed/2022/05/GHSA-v7w8-xfq9-rfvg/GHSA-v7w8-xfq9-rfvg.json index 345db602ee6..b65869990b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7w8-xfq9-rfvg/GHSA-v7w8-xfq9-rfvg.json +++ b/advisories/unreviewed/2022/05/GHSA-v7w8-xfq9-rfvg/GHSA-v7w8-xfq9-rfvg.json @@ -7,12 +7,8 @@ "CVE-2009-1058" ], "details": "Stack-based buffer overflow in ZipGenius might allow remote attackers to execute arbitrary code via a crafted .zip file that triggers an SEH overwrite. NOTE: it is possible that this overlaps CVE-2005-3317. NOTE: CVE has not investigated whether the specified file.zip file can be used for exploitation of this product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7x8-f7hq-87j2/GHSA-v7x8-f7hq-87j2.json b/advisories/unreviewed/2022/05/GHSA-v7x8-f7hq-87j2/GHSA-v7x8-f7hq-87j2.json index 7d9e9e489b2..1b26b9b93f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7x8-f7hq-87j2/GHSA-v7x8-f7hq-87j2.json +++ b/advisories/unreviewed/2022/05/GHSA-v7x8-f7hq-87j2/GHSA-v7x8-f7hq-87j2.json @@ -7,12 +7,8 @@ "CVE-2009-1218" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allow remote attackers to inject arbitrary web script or HTML via (1) the fmt-out parameter to login.wcap or (2) the date parameter to command.shtml.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7xh-cg3m-mx2g/GHSA-v7xh-cg3m-mx2g.json b/advisories/unreviewed/2022/05/GHSA-v7xh-cg3m-mx2g/GHSA-v7xh-cg3m-mx2g.json index de4c3db91ff..abc0daaf81e 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7xh-cg3m-mx2g/GHSA-v7xh-cg3m-mx2g.json +++ b/advisories/unreviewed/2022/05/GHSA-v7xh-cg3m-mx2g/GHSA-v7xh-cg3m-mx2g.json @@ -7,12 +7,8 @@ "CVE-2009-1382" ], "details": "Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v875-4c79-h283/GHSA-v875-4c79-h283.json b/advisories/unreviewed/2022/05/GHSA-v875-4c79-h283/GHSA-v875-4c79-h283.json index fde4d4b8783..cbce5345c13 100644 --- a/advisories/unreviewed/2022/05/GHSA-v875-4c79-h283/GHSA-v875-4c79-h283.json +++ b/advisories/unreviewed/2022/05/GHSA-v875-4c79-h283/GHSA-v875-4c79-h283.json @@ -7,12 +7,8 @@ "CVE-2009-1360" ], "details": "The __inet6_check_established function in net/ipv6/inet6_hashtables.c in the Linux kernel before 2.6.29, when Network Namespace Support (aka NET_NS) is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via vectors involving IPv6 packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9fc-m4v7-vch7/GHSA-v9fc-m4v7-vch7.json b/advisories/unreviewed/2022/05/GHSA-v9fc-m4v7-vch7/GHSA-v9fc-m4v7-vch7.json index d1e95cbcdad..5839a93efed 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9fc-m4v7-vch7/GHSA-v9fc-m4v7-vch7.json +++ b/advisories/unreviewed/2022/05/GHSA-v9fc-m4v7-vch7/GHSA-v9fc-m4v7-vch7.json @@ -7,12 +7,8 @@ "CVE-2009-1245" ], "details": "Multiple SQL injection vulnerabilities in the insert_to_pastebin function in php/cccp-admin/inc/functions.php in CCCP Community Clan Portal Pastebin before 2.80 allow remote attackers to execute arbitrary SQL commands via the (1) subject, (2) language, and (3) nickname parameters to php/cccp-pages/submit.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfr3-f488-rjr4/GHSA-vfr3-f488-rjr4.json b/advisories/unreviewed/2022/05/GHSA-vfr3-f488-rjr4/GHSA-vfr3-f488-rjr4.json index 088ac418378..ce37eb1546c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfr3-f488-rjr4/GHSA-vfr3-f488-rjr4.json +++ b/advisories/unreviewed/2022/05/GHSA-vfr3-f488-rjr4/GHSA-vfr3-f488-rjr4.json @@ -7,12 +7,8 @@ "CVE-2009-1214" ], "details": "GNU screen 4.0.3 creates the /tmp/screen-exchange temporary file with world-readable permissions, which might allow local users to obtain sensitive session information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vg42-5gp5-qc65/GHSA-vg42-5gp5-qc65.json b/advisories/unreviewed/2022/05/GHSA-vg42-5gp5-qc65/GHSA-vg42-5gp5-qc65.json index af75899d6ea..22b188114e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg42-5gp5-qc65/GHSA-vg42-5gp5-qc65.json +++ b/advisories/unreviewed/2022/05/GHSA-vg42-5gp5-qc65/GHSA-vg42-5gp5-qc65.json @@ -7,12 +7,8 @@ "CVE-2009-0987" ], "details": "Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vj54-qx98-6x64/GHSA-vj54-qx98-6x64.json b/advisories/unreviewed/2022/05/GHSA-vj54-qx98-6x64/GHSA-vj54-qx98-6x64.json index 753f17ec42b..75283ed22ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj54-qx98-6x64/GHSA-vj54-qx98-6x64.json +++ b/advisories/unreviewed/2022/05/GHSA-vj54-qx98-6x64/GHSA-vj54-qx98-6x64.json @@ -7,12 +7,8 @@ "CVE-2009-1444" ], "details": "PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the lib_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjh4-x3rj-rrhp/GHSA-vjh4-x3rj-rrhp.json b/advisories/unreviewed/2022/05/GHSA-vjh4-x3rj-rrhp/GHSA-vjh4-x3rj-rrhp.json index c2055c35526..7d1cb8b7737 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjh4-x3rj-rrhp/GHSA-vjh4-x3rj-rrhp.json +++ b/advisories/unreviewed/2022/05/GHSA-vjh4-x3rj-rrhp/GHSA-vjh4-x3rj-rrhp.json @@ -7,12 +7,8 @@ "CVE-2009-0729" ], "details": "Multiple directory traversal vulnerabilities in Page Engine CMS 2.0 Basic and Pro allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the fPrefix parameter to (1) modules/recent_poll_include.php, (2) modules/login_include.php, and (3) modules/statistics_include.php and (4) configuration.inc.php in includes/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vp62-q8f3-wccv/GHSA-vp62-q8f3-wccv.json b/advisories/unreviewed/2022/05/GHSA-vp62-q8f3-wccv/GHSA-vp62-q8f3-wccv.json index e2498d51921..3e6939453d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp62-q8f3-wccv/GHSA-vp62-q8f3-wccv.json +++ b/advisories/unreviewed/2022/05/GHSA-vp62-q8f3-wccv/GHSA-vp62-q8f3-wccv.json @@ -7,12 +7,8 @@ "CVE-2009-1365" ], "details": "Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpfp-6ccr-3vx4/GHSA-vpfp-6ccr-3vx4.json b/advisories/unreviewed/2022/05/GHSA-vpfp-6ccr-3vx4/GHSA-vpfp-6ccr-3vx4.json index 550ac412b19..35e01e2b5be 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpfp-6ccr-3vx4/GHSA-vpfp-6ccr-3vx4.json +++ b/advisories/unreviewed/2022/05/GHSA-vpfp-6ccr-3vx4/GHSA-vpfp-6ccr-3vx4.json @@ -7,12 +7,8 @@ "CVE-2009-1028" ], "details": "Stack-based buffer overflow in ediSys eZip Wizard 3.0 allows remote attackers to execute arbitrary code via a crafted .zip file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpxv-7v7p-jxv8/GHSA-vpxv-7v7p-jxv8.json b/advisories/unreviewed/2022/05/GHSA-vpxv-7v7p-jxv8/GHSA-vpxv-7v7p-jxv8.json index 5624f58e363..51cdc057119 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpxv-7v7p-jxv8/GHSA-vpxv-7v7p-jxv8.json +++ b/advisories/unreviewed/2022/05/GHSA-vpxv-7v7p-jxv8/GHSA-vpxv-7v7p-jxv8.json @@ -7,12 +7,8 @@ "CVE-2009-1006" ], "details": "Unspecified vulnerability in the JRockit component in BEA Product Suite R27.6.2 and earlier, with SDK/JRE 1.4.2, JRE/JDK 5, and JRE/JDK 6, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vq25-79f6-fj7m/GHSA-vq25-79f6-fj7m.json b/advisories/unreviewed/2022/05/GHSA-vq25-79f6-fj7m/GHSA-vq25-79f6-fj7m.json index 566a9ff90b5..95b45ed2368 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq25-79f6-fj7m/GHSA-vq25-79f6-fj7m.json +++ b/advisories/unreviewed/2022/05/GHSA-vq25-79f6-fj7m/GHSA-vq25-79f6-fj7m.json @@ -7,12 +7,8 @@ "CVE-2009-1119" ], "details": "Multiple heap-based buffer overflows in EMC RepliStor 6.2 before SP5 and 6.3 before SP2 allow remote attackers to execute arbitrary code via a crafted message to (1) ctrlservice.exe or (2) rep_srv.exe, possibly related to an integer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqr9-vjpx-74p5/GHSA-vqr9-vjpx-74p5.json b/advisories/unreviewed/2022/05/GHSA-vqr9-vjpx-74p5/GHSA-vqr9-vjpx-74p5.json index 9f0f2dab874..2075dcdde85 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqr9-vjpx-74p5/GHSA-vqr9-vjpx-74p5.json +++ b/advisories/unreviewed/2022/05/GHSA-vqr9-vjpx-74p5/GHSA-vqr9-vjpx-74p5.json @@ -7,12 +7,8 @@ "CVE-2009-1054" ], "details": "Unspecified vulnerability in JustSystems Ichitaro 13, 2004 through 2008, Lite2, and Ichitaro viewer 5.1.5.0 and earlier allows remote attackers to execute arbitrary code via a crafted file, as exploited in the wild by Trojan.Tarodrop.H in March 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqrr-rq4g-vh9j/GHSA-vqrr-rq4g-vh9j.json b/advisories/unreviewed/2022/05/GHSA-vqrr-rq4g-vh9j/GHSA-vqrr-rq4g-vh9j.json index b747ff61dd0..08256428801 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqrr-rq4g-vh9j/GHSA-vqrr-rq4g-vh9j.json +++ b/advisories/unreviewed/2022/05/GHSA-vqrr-rq4g-vh9j/GHSA-vqrr-rq4g-vh9j.json @@ -7,12 +7,8 @@ "CVE-2009-1019" ], "details": "Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrm2-pjvc-7wp9/GHSA-vrm2-pjvc-7wp9.json b/advisories/unreviewed/2022/05/GHSA-vrm2-pjvc-7wp9/GHSA-vrm2-pjvc-7wp9.json index 216db70cf70..e63958f8885 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrm2-pjvc-7wp9/GHSA-vrm2-pjvc-7wp9.json +++ b/advisories/unreviewed/2022/05/GHSA-vrm2-pjvc-7wp9/GHSA-vrm2-pjvc-7wp9.json @@ -7,12 +7,8 @@ "CVE-2009-1020" ], "details": "Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vv86-8w5h-r556/GHSA-vv86-8w5h-r556.json b/advisories/unreviewed/2022/05/GHSA-vv86-8w5h-r556/GHSA-vv86-8w5h-r556.json index f70f4948d0c..37435ba3eb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv86-8w5h-r556/GHSA-vv86-8w5h-r556.json +++ b/advisories/unreviewed/2022/05/GHSA-vv86-8w5h-r556/GHSA-vv86-8w5h-r556.json @@ -7,12 +7,8 @@ "CVE-2009-1049" ], "details": "SQL injection vulnerability in articleCall.php in Bloginator 1A allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx29-vgxf-w9r9/GHSA-vx29-vgxf-w9r9.json b/advisories/unreviewed/2022/05/GHSA-vx29-vgxf-w9r9/GHSA-vx29-vgxf-w9r9.json index 0ec4a71765f..34c2801e186 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx29-vgxf-w9r9/GHSA-vx29-vgxf-w9r9.json +++ b/advisories/unreviewed/2022/05/GHSA-vx29-vgxf-w9r9/GHSA-vx29-vgxf-w9r9.json @@ -7,12 +7,8 @@ "CVE-2009-1408" ], "details": "Cross-site scripting (XSS) vulnerability in webSPELL 4.2.0c allows remote attackers to inject arbitrary web script or HTML allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover in nested BBcode tags, as demonstrated using (1) email, (2) img, and (3) url tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2f9-wjrj-jm38/GHSA-w2f9-wjrj-jm38.json b/advisories/unreviewed/2022/05/GHSA-w2f9-wjrj-jm38/GHSA-w2f9-wjrj-jm38.json index 8e7a33873fd..55715ce2a30 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2f9-wjrj-jm38/GHSA-w2f9-wjrj-jm38.json +++ b/advisories/unreviewed/2022/05/GHSA-w2f9-wjrj-jm38/GHSA-w2f9-wjrj-jm38.json @@ -7,12 +7,8 @@ "CVE-2009-1420" ], "details": "Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w3gg-x9j7-v653/GHSA-w3gg-x9j7-v653.json b/advisories/unreviewed/2022/05/GHSA-w3gg-x9j7-v653/GHSA-w3gg-x9j7-v653.json index da6ea24ac8e..3be373bccb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3gg-x9j7-v653/GHSA-w3gg-x9j7-v653.json +++ b/advisories/unreviewed/2022/05/GHSA-w3gg-x9j7-v653/GHSA-w3gg-x9j7-v653.json @@ -7,12 +7,8 @@ "CVE-2009-1337" ], "details": "The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then uses an exec system call to launch a setuid application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -216,9 +212,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w3gx-qg2g-wr49/GHSA-w3gx-qg2g-wr49.json b/advisories/unreviewed/2022/05/GHSA-w3gx-qg2g-wr49/GHSA-w3gx-qg2g-wr49.json index af8ff11a9b4..972e317df67 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3gx-qg2g-wr49/GHSA-w3gx-qg2g-wr49.json +++ b/advisories/unreviewed/2022/05/GHSA-w3gx-qg2g-wr49/GHSA-w3gx-qg2g-wr49.json @@ -7,12 +7,8 @@ "CVE-2009-0711" ], "details": "filter.php in PHPFootball 1.6 and earlier allows remote attackers to retrieve password hashes via a request with an Accounts value for the dbtable parameter, in conjunction with a Password value for the dbfield parameter. NOTE: this has been reported as a SQL injection vulnerability by some sources, but the provenance of that information is unknown.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4r3-ccjr-qxh9/GHSA-w4r3-ccjr-qxh9.json b/advisories/unreviewed/2022/05/GHSA-w4r3-ccjr-qxh9/GHSA-w4r3-ccjr-qxh9.json index 54f41202e6a..885982c76b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4r3-ccjr-qxh9/GHSA-w4r3-ccjr-qxh9.json +++ b/advisories/unreviewed/2022/05/GHSA-w4r3-ccjr-qxh9/GHSA-w4r3-ccjr-qxh9.json @@ -7,12 +7,8 @@ "CVE-2009-1031" ], "details": "Directory traversal vulnerability in the FTP server in Rhino Software Serv-U File Server 7.0.0.1 through 7.4.0.1 allows remote attackers to create arbitrary directories via a \\.. (backslash dot dot) in an MKD request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4vc-26qw-m4wv/GHSA-w4vc-26qw-m4wv.json b/advisories/unreviewed/2022/05/GHSA-w4vc-26qw-m4wv/GHSA-w4vc-26qw-m4wv.json index f5c77296894..7be88abd002 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4vc-26qw-m4wv/GHSA-w4vc-26qw-m4wv.json +++ b/advisories/unreviewed/2022/05/GHSA-w4vc-26qw-m4wv/GHSA-w4vc-26qw-m4wv.json @@ -7,12 +7,8 @@ "CVE-2009-1139" ], "details": "Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka \"Active Directory Memory Leak Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w5rc-cmv9-6h7m/GHSA-w5rc-cmv9-6h7m.json b/advisories/unreviewed/2022/05/GHSA-w5rc-cmv9-6h7m/GHSA-w5rc-cmv9-6h7m.json index 6eca2816f00..2c8167160fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5rc-cmv9-6h7m/GHSA-w5rc-cmv9-6h7m.json +++ b/advisories/unreviewed/2022/05/GHSA-w5rc-cmv9-6h7m/GHSA-w5rc-cmv9-6h7m.json @@ -7,12 +7,8 @@ "CVE-2009-1009" ], "details": "Unspecified vulnerability in the Outside In Technology component in Oracle Application Server 8.1.9 allows local users to affect confidentiality, integrity, and availability, related to HTML.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6c9-g8ph-r488/GHSA-w6c9-g8ph-r488.json b/advisories/unreviewed/2022/05/GHSA-w6c9-g8ph-r488/GHSA-w6c9-g8ph-r488.json index 6b64773913c..84bcf00af5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6c9-g8ph-r488/GHSA-w6c9-g8ph-r488.json +++ b/advisories/unreviewed/2022/05/GHSA-w6c9-g8ph-r488/GHSA-w6c9-g8ph-r488.json @@ -7,12 +7,8 @@ "CVE-2009-1392" ], "details": "The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsEventStateManager::GetContentState and nsNativeTheme::CheckBooleanAttr; (2) UnhookTextRunFromFrames and ClearAllTextRunReferences; (3) nsTextFrame::ClearTextRun; (4) IsPercentageAware; (5) PL_DHashTableFinish; (6) nsListBoxBodyFrame::GetNextItemBox; (7) AtomTableClearEntry, related to the atom table, DOM mutation events, and Unicode surrogates; (8) nsHTMLEditor::HideResizers; and (9) nsWindow::SetCursor, related to changing the cursor; and other vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w76f-frr9-98hc/GHSA-w76f-frr9-98hc.json b/advisories/unreviewed/2022/05/GHSA-w76f-frr9-98hc/GHSA-w76f-frr9-98hc.json index 00f4ae0901c..44b59771fa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-w76f-frr9-98hc/GHSA-w76f-frr9-98hc.json +++ b/advisories/unreviewed/2022/05/GHSA-w76f-frr9-98hc/GHSA-w76f-frr9-98hc.json @@ -7,12 +7,8 @@ "CVE-2009-1372" ], "details": "Stack-based buffer overflow in the cli_url_canon function in libclamav/phishcheck.c in ClamAV before 0.95.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7hq-hfr8-9jj5/GHSA-w7hq-hfr8-9jj5.json b/advisories/unreviewed/2022/05/GHSA-w7hq-hfr8-9jj5/GHSA-w7hq-hfr8-9jj5.json index e18ef077f1a..72d94c00545 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7hq-hfr8-9jj5/GHSA-w7hq-hfr8-9jj5.json +++ b/advisories/unreviewed/2022/05/GHSA-w7hq-hfr8-9jj5/GHSA-w7hq-hfr8-9jj5.json @@ -7,12 +7,8 @@ "CVE-2009-1352" ], "details": "Stack-based buffer overflow in Dawningsoft PowerCHM 5.7 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an HTML file with a link to a long URL, as demonstrated by a .rar URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcg2-85gw-gjhq/GHSA-wcg2-85gw-gjhq.json b/advisories/unreviewed/2022/05/GHSA-wcg2-85gw-gjhq/GHSA-wcg2-85gw-gjhq.json index 5c946f11f6b..3e263de4f15 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcg2-85gw-gjhq/GHSA-wcg2-85gw-gjhq.json +++ b/advisories/unreviewed/2022/05/GHSA-wcg2-85gw-gjhq/GHSA-wcg2-85gw-gjhq.json @@ -7,12 +7,8 @@ "CVE-2009-1039" ], "details": "Buffer overflow in CDex 1.70b2 allows remote attackers to execute arbitrary code via a crafted Info header in an Ogg Vorbis (.ogg) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfh7-j435-xvj4/GHSA-wfh7-j435-xvj4.json b/advisories/unreviewed/2022/05/GHSA-wfh7-j435-xvj4/GHSA-wfh7-j435-xvj4.json index 107d77fe8c4..4f868efd652 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfh7-j435-xvj4/GHSA-wfh7-j435-xvj4.json +++ b/advisories/unreviewed/2022/05/GHSA-wfh7-j435-xvj4/GHSA-wfh7-j435-xvj4.json @@ -7,12 +7,8 @@ "CVE-2009-1457" ], "details": "Cross-site scripting (XSS) vulnerability in player.php in Nuke Evolution Xtreme 2.x allows remote attackers to inject arbitrary web script or HTML via the defaultVisualExt parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfh8-668f-q6jm/GHSA-wfh8-668f-q6jm.json b/advisories/unreviewed/2022/05/GHSA-wfh8-668f-q6jm/GHSA-wfh8-668f-q6jm.json index 35dae6f69d6..860cc699dde 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfh8-668f-q6jm/GHSA-wfh8-668f-q6jm.json +++ b/advisories/unreviewed/2022/05/GHSA-wfh8-668f-q6jm/GHSA-wfh8-668f-q6jm.json @@ -7,12 +7,8 @@ "CVE-2009-1078" ], "details": "Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the expected privilege requirements for (1) deleting audit policies and (2) modifying workflows, which allows remote authenticated users to have an unspecified impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wfxj-4rq5-wv9c/GHSA-wfxj-4rq5-wv9c.json b/advisories/unreviewed/2022/05/GHSA-wfxj-4rq5-wv9c/GHSA-wfxj-4rq5-wv9c.json index 56c60bf9703..bec47445c22 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfxj-4rq5-wv9c/GHSA-wfxj-4rq5-wv9c.json +++ b/advisories/unreviewed/2022/05/GHSA-wfxj-4rq5-wv9c/GHSA-wfxj-4rq5-wv9c.json @@ -7,12 +7,8 @@ "CVE-2009-1106" ], "details": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp22-wqwx-2pc9/GHSA-wp22-wqwx-2pc9.json b/advisories/unreviewed/2022/05/GHSA-wp22-wqwx-2pc9/GHSA-wp22-wqwx-2pc9.json index 639b2f986ed..7a0b1700cc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp22-wqwx-2pc9/GHSA-wp22-wqwx-2pc9.json +++ b/advisories/unreviewed/2022/05/GHSA-wp22-wqwx-2pc9/GHSA-wp22-wqwx-2pc9.json @@ -7,12 +7,8 @@ "CVE-2009-0970" ], "details": "PHP remote file inclusion vulnerability in includes/class_image.php in PHP Pro Bid 6.05, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp7j-cfx2-2rxm/GHSA-wp7j-cfx2-2rxm.json b/advisories/unreviewed/2022/05/GHSA-wp7j-cfx2-2rxm/GHSA-wp7j-cfx2-2rxm.json index 04468fcf04d..bac69aa054c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp7j-cfx2-2rxm/GHSA-wp7j-cfx2-2rxm.json +++ b/advisories/unreviewed/2022/05/GHSA-wp7j-cfx2-2rxm/GHSA-wp7j-cfx2-2rxm.json @@ -7,12 +7,8 @@ "CVE-2009-1296" ], "details": "The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqvc-c395-66j7/GHSA-wqvc-c395-66j7.json b/advisories/unreviewed/2022/05/GHSA-wqvc-c395-66j7/GHSA-wqvc-c395-66j7.json index 0eec9ad0b06..0d16de5ac72 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqvc-c395-66j7/GHSA-wqvc-c395-66j7.json +++ b/advisories/unreviewed/2022/05/GHSA-wqvc-c395-66j7/GHSA-wqvc-c395-66j7.json @@ -7,12 +7,8 @@ "CVE-2009-1242" ], "details": "The vmx_set_msr function in arch/x86/kvm/vmx.c in the VMX implementation in the KVM subsystem in the Linux kernel before 2.6.29.1 on the i386 platform allows guest OS users to cause a denial of service (OOPS) by setting the EFER_LME (aka \"Long mode enable\") bit in the Extended Feature Enable Register (EFER) model-specific register, which is specific to the x86_64 platform.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrhj-3cw9-q99g/GHSA-wrhj-3cw9-q99g.json b/advisories/unreviewed/2022/05/GHSA-wrhj-3cw9-q99g/GHSA-wrhj-3cw9-q99g.json index 16319d18a51..ba37e2d338e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrhj-3cw9-q99g/GHSA-wrhj-3cw9-q99g.json +++ b/advisories/unreviewed/2022/05/GHSA-wrhj-3cw9-q99g/GHSA-wrhj-3cw9-q99g.json @@ -7,12 +7,8 @@ "CVE-2009-1459" ], "details": "Cross-site request forgery (CSRF) vulnerability in razorCMS before 0.4 allows remote attackers to hijack the authentication of administrators for requests that create a web page containing PHP code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wv9f-vx9v-xqxc/GHSA-wv9f-vx9v-xqxc.json b/advisories/unreviewed/2022/05/GHSA-wv9f-vx9v-xqxc/GHSA-wv9f-vx9v-xqxc.json index 27c7f2598d5..2b1f8ab40fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv9f-vx9v-xqxc/GHSA-wv9f-vx9v-xqxc.json +++ b/advisories/unreviewed/2022/05/GHSA-wv9f-vx9v-xqxc/GHSA-wv9f-vx9v-xqxc.json @@ -7,12 +7,8 @@ "CVE-2009-1353" ], "details": "Buffer overflow in the http_parse_hex function in libz/misc.c in Zervit Webserver 0.02 allows remote attackers to cause a denial of service (daemon crash) via a long URI, related to http.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvv9-q433-xx7r/GHSA-wvv9-q433-xx7r.json b/advisories/unreviewed/2022/05/GHSA-wvv9-q433-xx7r/GHSA-wvv9-q433-xx7r.json index 14be761dabb..f71d17f88fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvv9-q433-xx7r/GHSA-wvv9-q433-xx7r.json +++ b/advisories/unreviewed/2022/05/GHSA-wvv9-q433-xx7r/GHSA-wvv9-q433-xx7r.json @@ -7,12 +7,8 @@ "CVE-2009-0960" ], "details": "The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not provide an option to disable remote image loading in HTML email, which allows remote attackers to determine the device address and when an e-mail is read via an HTML email containing an image URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ww8m-pmxw-w5x5/GHSA-ww8m-pmxw-w5x5.json b/advisories/unreviewed/2022/05/GHSA-ww8m-pmxw-w5x5/GHSA-ww8m-pmxw-w5x5.json index 9c1fbcd3272..5c9d930e1e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww8m-pmxw-w5x5/GHSA-ww8m-pmxw-w5x5.json +++ b/advisories/unreviewed/2022/05/GHSA-ww8m-pmxw-w5x5/GHSA-ww8m-pmxw-w5x5.json @@ -7,12 +7,8 @@ "CVE-2009-1437" ], "details": "Stack-based buffer overflow in PortableApps CoolPlayer Portable (aka CoolPlayer+ Portable) 2.19.6 and earlier allows remote attackers to execute arbitrary code via a long string in a malformed playlist (.m3u) file. NOTE: this may overlap CVE-2008-3408.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3hv-3x95-99mr/GHSA-x3hv-3x95-99mr.json b/advisories/unreviewed/2022/05/GHSA-x3hv-3x95-99mr/GHSA-x3hv-3x95-99mr.json index 461b8b24fbd..03e473fc25f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3hv-3x95-99mr/GHSA-x3hv-3x95-99mr.json +++ b/advisories/unreviewed/2022/05/GHSA-x3hv-3x95-99mr/GHSA-x3hv-3x95-99mr.json @@ -7,12 +7,8 @@ "CVE-2009-1450" ], "details": "PHP remote file inclusion vulnerability in format.php in SMA-DB 0.3.12 allows remote attackers to execute arbitrary PHP code via a URL in the _page_content parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3r8-x2r5-jj28/GHSA-x3r8-x2r5-jj28.json b/advisories/unreviewed/2022/05/GHSA-x3r8-x2r5-jj28/GHSA-x3r8-x2r5-jj28.json index 154a0e7864d..8c762a718a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3r8-x2r5-jj28/GHSA-x3r8-x2r5-jj28.json +++ b/advisories/unreviewed/2022/05/GHSA-x3r8-x2r5-jj28/GHSA-x3r8-x2r5-jj28.json @@ -7,12 +7,8 @@ "CVE-2009-1445" ], "details": "Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to (1) read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and (2) include and execute arbitrary local files via directory traversal sequences in the error parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x47g-457g-j4mw/GHSA-x47g-457g-j4mw.json b/advisories/unreviewed/2022/05/GHSA-x47g-457g-j4mw/GHSA-x47g-457g-j4mw.json index 3e25eff0ceb..4058dc9d76d 100644 --- a/advisories/unreviewed/2022/05/GHSA-x47g-457g-j4mw/GHSA-x47g-457g-j4mw.json +++ b/advisories/unreviewed/2022/05/GHSA-x47g-457g-j4mw/GHSA-x47g-457g-j4mw.json @@ -7,12 +7,8 @@ "CVE-2009-1433" ], "details": "SQL injection vulnerability in File::find (filesystem/File.php) in SilverStripe before 2.3.1 allows remote attackers to execute arbitrary SQL commands via the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4fx-ff3q-q3hv/GHSA-x4fx-ff3q-q3hv.json b/advisories/unreviewed/2022/05/GHSA-x4fx-ff3q-q3hv/GHSA-x4fx-ff3q-q3hv.json index 1ffb5237f50..3126db22354 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4fx-ff3q-q3hv/GHSA-x4fx-ff3q-q3hv.json +++ b/advisories/unreviewed/2022/05/GHSA-x4fx-ff3q-q3hv/GHSA-x4fx-ff3q-q3hv.json @@ -7,12 +7,8 @@ "CVE-2009-1350" ], "details": "Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4rx-g92q-cjw7/GHSA-x4rx-g92q-cjw7.json b/advisories/unreviewed/2022/05/GHSA-x4rx-g92q-cjw7/GHSA-x4rx-g92q-cjw7.json index 37260ab8e91..57182a41199 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4rx-g92q-cjw7/GHSA-x4rx-g92q-cjw7.json +++ b/advisories/unreviewed/2022/05/GHSA-x4rx-g92q-cjw7/GHSA-x4rx-g92q-cjw7.json @@ -7,12 +7,8 @@ "CVE-2009-1366" ], "details": "Cross-site scripting (XSS) vulnerability in Website\\admin\\Sales\\paypalipn.aspx in DotNetNuke (DNN) before 4.9.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to \"name/value pairs\" and \"paypal IPN functionality.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5jm-2j58-gxgp/GHSA-x5jm-2j58-gxgp.json b/advisories/unreviewed/2022/05/GHSA-x5jm-2j58-gxgp/GHSA-x5jm-2j58-gxgp.json index 2203ffa5cdc..b1e8c5770fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5jm-2j58-gxgp/GHSA-x5jm-2j58-gxgp.json +++ b/advisories/unreviewed/2022/05/GHSA-x5jm-2j58-gxgp/GHSA-x5jm-2j58-gxgp.json @@ -7,12 +7,8 @@ "CVE-2009-1044" ], "details": "Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree method, which triggers garbage collection on objects that are still in use, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -164,9 +160,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x7j9-h92m-xqrg/GHSA-x7j9-h92m-xqrg.json b/advisories/unreviewed/2022/05/GHSA-x7j9-h92m-xqrg/GHSA-x7j9-h92m-xqrg.json index 0eead215213..2f5e3fd002f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7j9-h92m-xqrg/GHSA-x7j9-h92m-xqrg.json +++ b/advisories/unreviewed/2022/05/GHSA-x7j9-h92m-xqrg/GHSA-x7j9-h92m-xqrg.json @@ -7,12 +7,8 @@ "CVE-2009-1440" ], "details": "Incomplete blacklist vulnerability in DownloadListCtrl.cpp in amule 2.2.4 allows remote attackers to conduct argument injection attacks into a command for mplayer via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x874-rj3x-j4h8/GHSA-x874-rj3x-j4h8.json b/advisories/unreviewed/2022/05/GHSA-x874-rj3x-j4h8/GHSA-x874-rj3x-j4h8.json index 6a95d9af219..a29a0ceb77b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x874-rj3x-j4h8/GHSA-x874-rj3x-j4h8.json +++ b/advisories/unreviewed/2022/05/GHSA-x874-rj3x-j4h8/GHSA-x874-rj3x-j4h8.json @@ -7,12 +7,8 @@ "CVE-2009-1434" ], "details": "Cross-site request forgery (CSRF) vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a (1) save or (2) view script in the SRC attribute of an IMG element, a related issue to CVE-2009-1339.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8rp-36gf-8w48/GHSA-x8rp-36gf-8w48.json b/advisories/unreviewed/2022/05/GHSA-x8rp-36gf-8w48/GHSA-x8rp-36gf-8w48.json index 07189813aa3..54afb956aa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8rp-36gf-8w48/GHSA-x8rp-36gf-8w48.json +++ b/advisories/unreviewed/2022/05/GHSA-x8rp-36gf-8w48/GHSA-x8rp-36gf-8w48.json @@ -7,12 +7,8 @@ "CVE-2009-1253" ], "details": "James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xc6f-php3-f47w/GHSA-xc6f-php3-f47w.json b/advisories/unreviewed/2022/05/GHSA-xc6f-php3-f47w/GHSA-xc6f-php3-f47w.json index b528f2ef44d..5359d3335ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-xc6f-php3-f47w/GHSA-xc6f-php3-f47w.json +++ b/advisories/unreviewed/2022/05/GHSA-xc6f-php3-f47w/GHSA-xc6f-php3-f47w.json @@ -7,12 +7,8 @@ "CVE-2009-1412" ], "details": "Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that sets document.location to a chromehtml: value, as demonstrated by use of a (1) javascript: or (2) data: URL. NOTE: this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xcc9-w59f-794q/GHSA-xcc9-w59f-794q.json b/advisories/unreviewed/2022/05/GHSA-xcc9-w59f-794q/GHSA-xcc9-w59f-794q.json index b163851b738..06466544ea7 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcc9-w59f-794q/GHSA-xcc9-w59f-794q.json +++ b/advisories/unreviewed/2022/05/GHSA-xcc9-w59f-794q/GHSA-xcc9-w59f-794q.json @@ -7,12 +7,8 @@ "CVE-2009-1146" ], "details": "Unspecified vulnerability in an ioctl in hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745 allows local users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3761.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfqv-xv6x-g6g8/GHSA-xfqv-xv6x-g6g8.json b/advisories/unreviewed/2022/05/GHSA-xfqv-xv6x-g6g8/GHSA-xfqv-xv6x-g6g8.json index 82a13fc39f0..6e511a3c587 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfqv-xv6x-g6g8/GHSA-xfqv-xv6x-g6g8.json +++ b/advisories/unreviewed/2022/05/GHSA-xfqv-xv6x-g6g8/GHSA-xfqv-xv6x-g6g8.json @@ -7,12 +7,8 @@ "CVE-2009-1428" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to \"two parsing errors.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj2c-76v8-mh2r/GHSA-xj2c-76v8-mh2r.json b/advisories/unreviewed/2022/05/GHSA-xj2c-76v8-mh2r/GHSA-xj2c-76v8-mh2r.json index ee31055762e..f377088fdc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj2c-76v8-mh2r/GHSA-xj2c-76v8-mh2r.json +++ b/advisories/unreviewed/2022/05/GHSA-xj2c-76v8-mh2r/GHSA-xj2c-76v8-mh2r.json @@ -7,12 +7,8 @@ "CVE-2009-1144" ], "details": "Untrusted search path vulnerability in the Gentoo package of Xpdf before 3.02-r2 allows local users to gain privileges via a Trojan horse xpdfrc file in the current working directory, related to an unset SYSTEM_XPDFRC macro in a Gentoo build process that uses the poppler library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjxq-r4rh-23g9/GHSA-xjxq-r4rh-23g9.json b/advisories/unreviewed/2022/05/GHSA-xjxq-r4rh-23g9/GHSA-xjxq-r4rh-23g9.json index f60de13cb69..7ddb9d5ae3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjxq-r4rh-23g9/GHSA-xjxq-r4rh-23g9.json +++ b/advisories/unreviewed/2022/05/GHSA-xjxq-r4rh-23g9/GHSA-xjxq-r4rh-23g9.json @@ -7,12 +7,8 @@ "CVE-2009-1329" ], "details": "Stack-based buffer overflow in Mini-stream Shadow Stream Recorder 3.0.1.7 allows remote attackers to execute arbitrary code via a long URI in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm5h-4r7m-2g3m/GHSA-xm5h-4r7m-2g3m.json b/advisories/unreviewed/2022/05/GHSA-xm5h-4r7m-2g3m/GHSA-xm5h-4r7m-2g3m.json index ad21690c9a8..83f9249861b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm5h-4r7m-2g3m/GHSA-xm5h-4r7m-2g3m.json +++ b/advisories/unreviewed/2022/05/GHSA-xm5h-4r7m-2g3m/GHSA-xm5h-4r7m-2g3m.json @@ -7,12 +7,8 @@ "CVE-2009-1423" ], "details": "Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to cause a denial of service via unknown vectors, aka PR_39898, a different vulnerability than CVE-2009-1424 and CVE-2009-1425.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xph6-222g-766w/GHSA-xph6-222g-766w.json b/advisories/unreviewed/2022/05/GHSA-xph6-222g-766w/GHSA-xph6-222g-766w.json index 2266fe75313..d60a2c78130 100644 --- a/advisories/unreviewed/2022/05/GHSA-xph6-222g-766w/GHSA-xph6-222g-766w.json +++ b/advisories/unreviewed/2022/05/GHSA-xph6-222g-766w/GHSA-xph6-222g-766w.json @@ -7,12 +7,8 @@ "CVE-2009-1085" ], "details": "Piwik 0.2.32 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the API key and other sensitive information via a direct request for misc/cron/archive.sh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqc5-v83h-8w57/GHSA-xqc5-v83h-8w57.json b/advisories/unreviewed/2022/05/GHSA-xqc5-v83h-8w57/GHSA-xqc5-v83h-8w57.json index aa3f74837a8..85199fcf7d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqc5-v83h-8w57/GHSA-xqc5-v83h-8w57.json +++ b/advisories/unreviewed/2022/05/GHSA-xqc5-v83h-8w57/GHSA-xqc5-v83h-8w57.json @@ -7,12 +7,8 @@ "CVE-2009-1374" ], "details": "Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqw4-hgfp-f28v/GHSA-xqw4-hgfp-f28v.json b/advisories/unreviewed/2022/05/GHSA-xqw4-hgfp-f28v/GHSA-xqw4-hgfp-f28v.json index b8c02f1f6f3..402677617d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqw4-hgfp-f28v/GHSA-xqw4-hgfp-f28v.json +++ b/advisories/unreviewed/2022/05/GHSA-xqw4-hgfp-f28v/GHSA-xqw4-hgfp-f28v.json @@ -7,12 +7,8 @@ "CVE-2009-1237" ], "details": "Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xrrw-wm7v-5p7r/GHSA-xrrw-wm7v-5p7r.json b/advisories/unreviewed/2022/05/GHSA-xrrw-wm7v-5p7r/GHSA-xrrw-wm7v-5p7r.json index 80b4d7c3018..36fcf49aaaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrrw-wm7v-5p7r/GHSA-xrrw-wm7v-5p7r.json +++ b/advisories/unreviewed/2022/05/GHSA-xrrw-wm7v-5p7r/GHSA-xrrw-wm7v-5p7r.json @@ -7,12 +7,8 @@ "CVE-2009-0958" ], "details": "Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 stores an exception for a hostname when the user accepts an untrusted Exchange server certificate, which causes it to be accepted without prompting in future usage and allows remote Exchange servers to obtain sensitive information such as credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xv3p-f59j-cqjv/GHSA-xv3p-f59j-cqjv.json b/advisories/unreviewed/2022/05/GHSA-xv3p-f59j-cqjv/GHSA-xv3p-f59j-cqjv.json index 7b0b4ec97bb..31220ab757f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv3p-f59j-cqjv/GHSA-xv3p-f59j-cqjv.json +++ b/advisories/unreviewed/2022/05/GHSA-xv3p-f59j-cqjv/GHSA-xv3p-f59j-cqjv.json @@ -7,12 +7,8 @@ "CVE-2009-1416" ], "details": "lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xvvf-vgph-gpgv/GHSA-xvvf-vgph-gpgv.json b/advisories/unreviewed/2022/05/GHSA-xvvf-vgph-gpgv/GHSA-xvvf-vgph-gpgv.json index 46b7793d275..098cca9ab00 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvvf-vgph-gpgv/GHSA-xvvf-vgph-gpgv.json +++ b/advisories/unreviewed/2022/05/GHSA-xvvf-vgph-gpgv/GHSA-xvvf-vgph-gpgv.json @@ -7,12 +7,8 @@ "CVE-2009-1178" ], "details": "Unspecified vulnerability in the server in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the \"admin command line.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xx2p-3xq8-p2xm/GHSA-xx2p-3xq8-p2xm.json b/advisories/unreviewed/2022/05/GHSA-xx2p-3xq8-p2xm/GHSA-xx2p-3xq8-p2xm.json index e3409d79fd1..b536aa5e8cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx2p-3xq8-p2xm/GHSA-xx2p-3xq8-p2xm.json +++ b/advisories/unreviewed/2022/05/GHSA-xx2p-3xq8-p2xm/GHSA-xx2p-3xq8-p2xm.json @@ -7,12 +7,8 @@ "CVE-2009-1180" ], "details": "The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xx8v-jwch-cjrx/GHSA-xx8v-jwch-cjrx.json b/advisories/unreviewed/2022/05/GHSA-xx8v-jwch-cjrx/GHSA-xx8v-jwch-cjrx.json index 11834b63e13..a4504a84997 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx8v-jwch-cjrx/GHSA-xx8v-jwch-cjrx.json +++ b/advisories/unreviewed/2022/05/GHSA-xx8v-jwch-cjrx/GHSA-xx8v-jwch-cjrx.json @@ -7,12 +7,8 @@ "CVE-2009-1107" ], "details": "The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a \"Swing JLabel HTML parsing vulnerability,\" aka CR 6782871.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/10/GHSA-3c55-fm7j-h66h/GHSA-3c55-fm7j-h66h.json b/advisories/unreviewed/2022/10/GHSA-3c55-fm7j-h66h/GHSA-3c55-fm7j-h66h.json index eac59bd29e4..b1165d77650 100644 --- a/advisories/unreviewed/2022/10/GHSA-3c55-fm7j-h66h/GHSA-3c55-fm7j-h66h.json +++ b/advisories/unreviewed/2022/10/GHSA-3c55-fm7j-h66h/GHSA-3c55-fm7j-h66h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-732j-7w4g-8jhm/GHSA-732j-7w4g-8jhm.json b/advisories/unreviewed/2022/10/GHSA-732j-7w4g-8jhm/GHSA-732j-7w4g-8jhm.json index d1ef2e88e86..09a36e53350 100644 --- a/advisories/unreviewed/2022/10/GHSA-732j-7w4g-8jhm/GHSA-732j-7w4g-8jhm.json +++ b/advisories/unreviewed/2022/10/GHSA-732j-7w4g-8jhm/GHSA-732j-7w4g-8jhm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-9xmj-p4rv-2528/GHSA-9xmj-p4rv-2528.json b/advisories/unreviewed/2022/10/GHSA-9xmj-p4rv-2528/GHSA-9xmj-p4rv-2528.json index 89f731d6c3d..7443ee007dd 100644 --- a/advisories/unreviewed/2022/10/GHSA-9xmj-p4rv-2528/GHSA-9xmj-p4rv-2528.json +++ b/advisories/unreviewed/2022/10/GHSA-9xmj-p4rv-2528/GHSA-9xmj-p4rv-2528.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-cp2g-fw99-pprj/GHSA-cp2g-fw99-pprj.json b/advisories/unreviewed/2022/10/GHSA-cp2g-fw99-pprj/GHSA-cp2g-fw99-pprj.json index cbecbe38203..47a8fb780ef 100644 --- a/advisories/unreviewed/2022/10/GHSA-cp2g-fw99-pprj/GHSA-cp2g-fw99-pprj.json +++ b/advisories/unreviewed/2022/10/GHSA-cp2g-fw99-pprj/GHSA-cp2g-fw99-pprj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-j977-fcpw-7hqh/GHSA-j977-fcpw-7hqh.json b/advisories/unreviewed/2022/10/GHSA-j977-fcpw-7hqh/GHSA-j977-fcpw-7hqh.json index 4d376344164..db8b2ac7dbe 100644 --- a/advisories/unreviewed/2022/10/GHSA-j977-fcpw-7hqh/GHSA-j977-fcpw-7hqh.json +++ b/advisories/unreviewed/2022/10/GHSA-j977-fcpw-7hqh/GHSA-j977-fcpw-7hqh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-24j5-267c-mjxv/GHSA-24j5-267c-mjxv.json b/advisories/unreviewed/2022/11/GHSA-24j5-267c-mjxv/GHSA-24j5-267c-mjxv.json index 76298113258..6aeb9e5ff79 100644 --- a/advisories/unreviewed/2022/11/GHSA-24j5-267c-mjxv/GHSA-24j5-267c-mjxv.json +++ b/advisories/unreviewed/2022/11/GHSA-24j5-267c-mjxv/GHSA-24j5-267c-mjxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-2f8m-rcx6-7jfh/GHSA-2f8m-rcx6-7jfh.json b/advisories/unreviewed/2022/11/GHSA-2f8m-rcx6-7jfh/GHSA-2f8m-rcx6-7jfh.json index 88d5ca130f8..297cfe348de 100644 --- a/advisories/unreviewed/2022/11/GHSA-2f8m-rcx6-7jfh/GHSA-2f8m-rcx6-7jfh.json +++ b/advisories/unreviewed/2022/11/GHSA-2f8m-rcx6-7jfh/GHSA-2f8m-rcx6-7jfh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-2gcv-8ccj-f7px/GHSA-2gcv-8ccj-f7px.json b/advisories/unreviewed/2022/11/GHSA-2gcv-8ccj-f7px/GHSA-2gcv-8ccj-f7px.json index 5331bc462b5..f7b87caea1f 100644 --- a/advisories/unreviewed/2022/11/GHSA-2gcv-8ccj-f7px/GHSA-2gcv-8ccj-f7px.json +++ b/advisories/unreviewed/2022/11/GHSA-2gcv-8ccj-f7px/GHSA-2gcv-8ccj-f7px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-2hrr-4p8h-j38c/GHSA-2hrr-4p8h-j38c.json b/advisories/unreviewed/2022/11/GHSA-2hrr-4p8h-j38c/GHSA-2hrr-4p8h-j38c.json index f0e188c7017..a0c94c48efd 100644 --- a/advisories/unreviewed/2022/11/GHSA-2hrr-4p8h-j38c/GHSA-2hrr-4p8h-j38c.json +++ b/advisories/unreviewed/2022/11/GHSA-2hrr-4p8h-j38c/GHSA-2hrr-4p8h-j38c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-2qqv-j52q-3xhq/GHSA-2qqv-j52q-3xhq.json b/advisories/unreviewed/2022/11/GHSA-2qqv-j52q-3xhq/GHSA-2qqv-j52q-3xhq.json index e5db6f44579..5f22e164740 100644 --- a/advisories/unreviewed/2022/11/GHSA-2qqv-j52q-3xhq/GHSA-2qqv-j52q-3xhq.json +++ b/advisories/unreviewed/2022/11/GHSA-2qqv-j52q-3xhq/GHSA-2qqv-j52q-3xhq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3q99-27hh-rcx8/GHSA-3q99-27hh-rcx8.json b/advisories/unreviewed/2022/11/GHSA-3q99-27hh-rcx8/GHSA-3q99-27hh-rcx8.json index a82b6165d79..46fddbb583b 100644 --- a/advisories/unreviewed/2022/11/GHSA-3q99-27hh-rcx8/GHSA-3q99-27hh-rcx8.json +++ b/advisories/unreviewed/2022/11/GHSA-3q99-27hh-rcx8/GHSA-3q99-27hh-rcx8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3v2x-fxq5-6652/GHSA-3v2x-fxq5-6652.json b/advisories/unreviewed/2022/11/GHSA-3v2x-fxq5-6652/GHSA-3v2x-fxq5-6652.json index 6b103b78c64..4fcf9bab7fa 100644 --- a/advisories/unreviewed/2022/11/GHSA-3v2x-fxq5-6652/GHSA-3v2x-fxq5-6652.json +++ b/advisories/unreviewed/2022/11/GHSA-3v2x-fxq5-6652/GHSA-3v2x-fxq5-6652.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3w8w-mhj7-j5rc/GHSA-3w8w-mhj7-j5rc.json b/advisories/unreviewed/2022/11/GHSA-3w8w-mhj7-j5rc/GHSA-3w8w-mhj7-j5rc.json index 064f885d38b..f3e95836e49 100644 --- a/advisories/unreviewed/2022/11/GHSA-3w8w-mhj7-j5rc/GHSA-3w8w-mhj7-j5rc.json +++ b/advisories/unreviewed/2022/11/GHSA-3w8w-mhj7-j5rc/GHSA-3w8w-mhj7-j5rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-4277-8779-3fvr/GHSA-4277-8779-3fvr.json b/advisories/unreviewed/2022/11/GHSA-4277-8779-3fvr/GHSA-4277-8779-3fvr.json index aaf1af9e844..a148c67099f 100644 --- a/advisories/unreviewed/2022/11/GHSA-4277-8779-3fvr/GHSA-4277-8779-3fvr.json +++ b/advisories/unreviewed/2022/11/GHSA-4277-8779-3fvr/GHSA-4277-8779-3fvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-444j-cwp6-3fgg/GHSA-444j-cwp6-3fgg.json b/advisories/unreviewed/2022/11/GHSA-444j-cwp6-3fgg/GHSA-444j-cwp6-3fgg.json index 9f48b960ff7..239928f0a98 100644 --- a/advisories/unreviewed/2022/11/GHSA-444j-cwp6-3fgg/GHSA-444j-cwp6-3fgg.json +++ b/advisories/unreviewed/2022/11/GHSA-444j-cwp6-3fgg/GHSA-444j-cwp6-3fgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-45x3-7h4h-cjc5/GHSA-45x3-7h4h-cjc5.json b/advisories/unreviewed/2022/11/GHSA-45x3-7h4h-cjc5/GHSA-45x3-7h4h-cjc5.json index 14291f25050..f7980628864 100644 --- a/advisories/unreviewed/2022/11/GHSA-45x3-7h4h-cjc5/GHSA-45x3-7h4h-cjc5.json +++ b/advisories/unreviewed/2022/11/GHSA-45x3-7h4h-cjc5/GHSA-45x3-7h4h-cjc5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-4r92-2gjg-4mqw/GHSA-4r92-2gjg-4mqw.json b/advisories/unreviewed/2022/11/GHSA-4r92-2gjg-4mqw/GHSA-4r92-2gjg-4mqw.json index 11c64611457..b1179da6569 100644 --- a/advisories/unreviewed/2022/11/GHSA-4r92-2gjg-4mqw/GHSA-4r92-2gjg-4mqw.json +++ b/advisories/unreviewed/2022/11/GHSA-4r92-2gjg-4mqw/GHSA-4r92-2gjg-4mqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6hqr-4vm3-hg2q/GHSA-6hqr-4vm3-hg2q.json b/advisories/unreviewed/2022/11/GHSA-6hqr-4vm3-hg2q/GHSA-6hqr-4vm3-hg2q.json index 1f805cdcf60..c05568d62a7 100644 --- a/advisories/unreviewed/2022/11/GHSA-6hqr-4vm3-hg2q/GHSA-6hqr-4vm3-hg2q.json +++ b/advisories/unreviewed/2022/11/GHSA-6hqr-4vm3-hg2q/GHSA-6hqr-4vm3-hg2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6j6v-f6cj-wwmw/GHSA-6j6v-f6cj-wwmw.json b/advisories/unreviewed/2022/11/GHSA-6j6v-f6cj-wwmw/GHSA-6j6v-f6cj-wwmw.json index 87d4d0270fe..83621759b64 100644 --- a/advisories/unreviewed/2022/11/GHSA-6j6v-f6cj-wwmw/GHSA-6j6v-f6cj-wwmw.json +++ b/advisories/unreviewed/2022/11/GHSA-6j6v-f6cj-wwmw/GHSA-6j6v-f6cj-wwmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6rjh-228w-q2x7/GHSA-6rjh-228w-q2x7.json b/advisories/unreviewed/2022/11/GHSA-6rjh-228w-q2x7/GHSA-6rjh-228w-q2x7.json index cd7dea52664..074e42551a7 100644 --- a/advisories/unreviewed/2022/11/GHSA-6rjh-228w-q2x7/GHSA-6rjh-228w-q2x7.json +++ b/advisories/unreviewed/2022/11/GHSA-6rjh-228w-q2x7/GHSA-6rjh-228w-q2x7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6xvj-x5f6-3fg6/GHSA-6xvj-x5f6-3fg6.json b/advisories/unreviewed/2022/11/GHSA-6xvj-x5f6-3fg6/GHSA-6xvj-x5f6-3fg6.json index 946a137e456..663d7311904 100644 --- a/advisories/unreviewed/2022/11/GHSA-6xvj-x5f6-3fg6/GHSA-6xvj-x5f6-3fg6.json +++ b/advisories/unreviewed/2022/11/GHSA-6xvj-x5f6-3fg6/GHSA-6xvj-x5f6-3fg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-7257-7355-6cq2/GHSA-7257-7355-6cq2.json b/advisories/unreviewed/2022/11/GHSA-7257-7355-6cq2/GHSA-7257-7355-6cq2.json index 78d47e99166..2507c122513 100644 --- a/advisories/unreviewed/2022/11/GHSA-7257-7355-6cq2/GHSA-7257-7355-6cq2.json +++ b/advisories/unreviewed/2022/11/GHSA-7257-7355-6cq2/GHSA-7257-7355-6cq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-733v-x8pr-2mxj/GHSA-733v-x8pr-2mxj.json b/advisories/unreviewed/2022/11/GHSA-733v-x8pr-2mxj/GHSA-733v-x8pr-2mxj.json index a853747a9df..327ba0d9d15 100644 --- a/advisories/unreviewed/2022/11/GHSA-733v-x8pr-2mxj/GHSA-733v-x8pr-2mxj.json +++ b/advisories/unreviewed/2022/11/GHSA-733v-x8pr-2mxj/GHSA-733v-x8pr-2mxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-7vmm-73pm-mh7f/GHSA-7vmm-73pm-mh7f.json b/advisories/unreviewed/2022/11/GHSA-7vmm-73pm-mh7f/GHSA-7vmm-73pm-mh7f.json index de71b8dc306..c39dc9e148d 100644 --- a/advisories/unreviewed/2022/11/GHSA-7vmm-73pm-mh7f/GHSA-7vmm-73pm-mh7f.json +++ b/advisories/unreviewed/2022/11/GHSA-7vmm-73pm-mh7f/GHSA-7vmm-73pm-mh7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-86r4-6w98-w5h6/GHSA-86r4-6w98-w5h6.json b/advisories/unreviewed/2022/11/GHSA-86r4-6w98-w5h6/GHSA-86r4-6w98-w5h6.json index 56e11f1fcbe..328d5acffba 100644 --- a/advisories/unreviewed/2022/11/GHSA-86r4-6w98-w5h6/GHSA-86r4-6w98-w5h6.json +++ b/advisories/unreviewed/2022/11/GHSA-86r4-6w98-w5h6/GHSA-86r4-6w98-w5h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-8fx7-23cj-4f7r/GHSA-8fx7-23cj-4f7r.json b/advisories/unreviewed/2022/11/GHSA-8fx7-23cj-4f7r/GHSA-8fx7-23cj-4f7r.json index b27d275251e..85112e0bbe2 100644 --- a/advisories/unreviewed/2022/11/GHSA-8fx7-23cj-4f7r/GHSA-8fx7-23cj-4f7r.json +++ b/advisories/unreviewed/2022/11/GHSA-8fx7-23cj-4f7r/GHSA-8fx7-23cj-4f7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-8mc3-f8rm-5q5q/GHSA-8mc3-f8rm-5q5q.json b/advisories/unreviewed/2022/11/GHSA-8mc3-f8rm-5q5q/GHSA-8mc3-f8rm-5q5q.json index 7b5bcdbab09..3585c20bbf8 100644 --- a/advisories/unreviewed/2022/11/GHSA-8mc3-f8rm-5q5q/GHSA-8mc3-f8rm-5q5q.json +++ b/advisories/unreviewed/2022/11/GHSA-8mc3-f8rm-5q5q/GHSA-8mc3-f8rm-5q5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-8vw4-w62x-p8mx/GHSA-8vw4-w62x-p8mx.json b/advisories/unreviewed/2022/11/GHSA-8vw4-w62x-p8mx/GHSA-8vw4-w62x-p8mx.json index 4e5f3eeabe3..9828a540393 100644 --- a/advisories/unreviewed/2022/11/GHSA-8vw4-w62x-p8mx/GHSA-8vw4-w62x-p8mx.json +++ b/advisories/unreviewed/2022/11/GHSA-8vw4-w62x-p8mx/GHSA-8vw4-w62x-p8mx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-9p2r-q9p9-523v/GHSA-9p2r-q9p9-523v.json b/advisories/unreviewed/2022/11/GHSA-9p2r-q9p9-523v/GHSA-9p2r-q9p9-523v.json index b016bc8275a..973f32ae8e1 100644 --- a/advisories/unreviewed/2022/11/GHSA-9p2r-q9p9-523v/GHSA-9p2r-q9p9-523v.json +++ b/advisories/unreviewed/2022/11/GHSA-9p2r-q9p9-523v/GHSA-9p2r-q9p9-523v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-9v4w-g4mw-792q/GHSA-9v4w-g4mw-792q.json b/advisories/unreviewed/2022/11/GHSA-9v4w-g4mw-792q/GHSA-9v4w-g4mw-792q.json index 017f3ae7769..6439e4540a3 100644 --- a/advisories/unreviewed/2022/11/GHSA-9v4w-g4mw-792q/GHSA-9v4w-g4mw-792q.json +++ b/advisories/unreviewed/2022/11/GHSA-9v4w-g4mw-792q/GHSA-9v4w-g4mw-792q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-c3rc-wfgg-r544/GHSA-c3rc-wfgg-r544.json b/advisories/unreviewed/2022/11/GHSA-c3rc-wfgg-r544/GHSA-c3rc-wfgg-r544.json index 5708a353876..cfee5e69c16 100644 --- a/advisories/unreviewed/2022/11/GHSA-c3rc-wfgg-r544/GHSA-c3rc-wfgg-r544.json +++ b/advisories/unreviewed/2022/11/GHSA-c3rc-wfgg-r544/GHSA-c3rc-wfgg-r544.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-cmrv-5883-2m9p/GHSA-cmrv-5883-2m9p.json b/advisories/unreviewed/2022/11/GHSA-cmrv-5883-2m9p/GHSA-cmrv-5883-2m9p.json index 43f424114dd..5f4d5393a4a 100644 --- a/advisories/unreviewed/2022/11/GHSA-cmrv-5883-2m9p/GHSA-cmrv-5883-2m9p.json +++ b/advisories/unreviewed/2022/11/GHSA-cmrv-5883-2m9p/GHSA-cmrv-5883-2m9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-f4x6-p9rf-j627/GHSA-f4x6-p9rf-j627.json b/advisories/unreviewed/2022/11/GHSA-f4x6-p9rf-j627/GHSA-f4x6-p9rf-j627.json index f71ae421c80..f3dace9bde3 100644 --- a/advisories/unreviewed/2022/11/GHSA-f4x6-p9rf-j627/GHSA-f4x6-p9rf-j627.json +++ b/advisories/unreviewed/2022/11/GHSA-f4x6-p9rf-j627/GHSA-f4x6-p9rf-j627.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-f545-9c5v-qxgw/GHSA-f545-9c5v-qxgw.json b/advisories/unreviewed/2022/11/GHSA-f545-9c5v-qxgw/GHSA-f545-9c5v-qxgw.json index 5ddd5692c07..a847a8f32ee 100644 --- a/advisories/unreviewed/2022/11/GHSA-f545-9c5v-qxgw/GHSA-f545-9c5v-qxgw.json +++ b/advisories/unreviewed/2022/11/GHSA-f545-9c5v-qxgw/GHSA-f545-9c5v-qxgw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-fqqv-r25w-2p97/GHSA-fqqv-r25w-2p97.json b/advisories/unreviewed/2022/11/GHSA-fqqv-r25w-2p97/GHSA-fqqv-r25w-2p97.json index 792b88f33a0..ac2809ef705 100644 --- a/advisories/unreviewed/2022/11/GHSA-fqqv-r25w-2p97/GHSA-fqqv-r25w-2p97.json +++ b/advisories/unreviewed/2022/11/GHSA-fqqv-r25w-2p97/GHSA-fqqv-r25w-2p97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-fwm8-52xr-cw4w/GHSA-fwm8-52xr-cw4w.json b/advisories/unreviewed/2022/11/GHSA-fwm8-52xr-cw4w/GHSA-fwm8-52xr-cw4w.json index 7e46c412671..3eb83d7757d 100644 --- a/advisories/unreviewed/2022/11/GHSA-fwm8-52xr-cw4w/GHSA-fwm8-52xr-cw4w.json +++ b/advisories/unreviewed/2022/11/GHSA-fwm8-52xr-cw4w/GHSA-fwm8-52xr-cw4w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-g8qv-j323-hj3f/GHSA-g8qv-j323-hj3f.json b/advisories/unreviewed/2022/11/GHSA-g8qv-j323-hj3f/GHSA-g8qv-j323-hj3f.json index d604825f681..b250ba8ca2b 100644 --- a/advisories/unreviewed/2022/11/GHSA-g8qv-j323-hj3f/GHSA-g8qv-j323-hj3f.json +++ b/advisories/unreviewed/2022/11/GHSA-g8qv-j323-hj3f/GHSA-g8qv-j323-hj3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-gjhm-vx6v-42c4/GHSA-gjhm-vx6v-42c4.json b/advisories/unreviewed/2022/11/GHSA-gjhm-vx6v-42c4/GHSA-gjhm-vx6v-42c4.json index 2b6e32a95fd..d49bc3d5c2d 100644 --- a/advisories/unreviewed/2022/11/GHSA-gjhm-vx6v-42c4/GHSA-gjhm-vx6v-42c4.json +++ b/advisories/unreviewed/2022/11/GHSA-gjhm-vx6v-42c4/GHSA-gjhm-vx6v-42c4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-gmcp-v2jv-3qq3/GHSA-gmcp-v2jv-3qq3.json b/advisories/unreviewed/2022/11/GHSA-gmcp-v2jv-3qq3/GHSA-gmcp-v2jv-3qq3.json index ef2aecb6436..f6e6234017e 100644 --- a/advisories/unreviewed/2022/11/GHSA-gmcp-v2jv-3qq3/GHSA-gmcp-v2jv-3qq3.json +++ b/advisories/unreviewed/2022/11/GHSA-gmcp-v2jv-3qq3/GHSA-gmcp-v2jv-3qq3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-hxf4-pc5p-7f5c/GHSA-hxf4-pc5p-7f5c.json b/advisories/unreviewed/2022/11/GHSA-hxf4-pc5p-7f5c/GHSA-hxf4-pc5p-7f5c.json index ef214129f4c..5cb0e8a51ee 100644 --- a/advisories/unreviewed/2022/11/GHSA-hxf4-pc5p-7f5c/GHSA-hxf4-pc5p-7f5c.json +++ b/advisories/unreviewed/2022/11/GHSA-hxf4-pc5p-7f5c/GHSA-hxf4-pc5p-7f5c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-j6jg-ww3j-64rf/GHSA-j6jg-ww3j-64rf.json b/advisories/unreviewed/2022/11/GHSA-j6jg-ww3j-64rf/GHSA-j6jg-ww3j-64rf.json index 85c5b784303..4f66064e6a3 100644 --- a/advisories/unreviewed/2022/11/GHSA-j6jg-ww3j-64rf/GHSA-j6jg-ww3j-64rf.json +++ b/advisories/unreviewed/2022/11/GHSA-j6jg-ww3j-64rf/GHSA-j6jg-ww3j-64rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-j956-v3jj-36f8/GHSA-j956-v3jj-36f8.json b/advisories/unreviewed/2022/11/GHSA-j956-v3jj-36f8/GHSA-j956-v3jj-36f8.json index a9df140b93b..fa2bb6f242b 100644 --- a/advisories/unreviewed/2022/11/GHSA-j956-v3jj-36f8/GHSA-j956-v3jj-36f8.json +++ b/advisories/unreviewed/2022/11/GHSA-j956-v3jj-36f8/GHSA-j956-v3jj-36f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-jm32-qg4h-rfmh/GHSA-jm32-qg4h-rfmh.json b/advisories/unreviewed/2022/11/GHSA-jm32-qg4h-rfmh/GHSA-jm32-qg4h-rfmh.json index f8dde768a90..de4cf067778 100644 --- a/advisories/unreviewed/2022/11/GHSA-jm32-qg4h-rfmh/GHSA-jm32-qg4h-rfmh.json +++ b/advisories/unreviewed/2022/11/GHSA-jm32-qg4h-rfmh/GHSA-jm32-qg4h-rfmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-jvhv-c9pj-767g/GHSA-jvhv-c9pj-767g.json b/advisories/unreviewed/2022/11/GHSA-jvhv-c9pj-767g/GHSA-jvhv-c9pj-767g.json index b612f7c18d0..214ce8fad95 100644 --- a/advisories/unreviewed/2022/11/GHSA-jvhv-c9pj-767g/GHSA-jvhv-c9pj-767g.json +++ b/advisories/unreviewed/2022/11/GHSA-jvhv-c9pj-767g/GHSA-jvhv-c9pj-767g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-m9cp-qcw7-hq7f/GHSA-m9cp-qcw7-hq7f.json b/advisories/unreviewed/2022/11/GHSA-m9cp-qcw7-hq7f/GHSA-m9cp-qcw7-hq7f.json index 79b0aa23d5a..adaeec0af8d 100644 --- a/advisories/unreviewed/2022/11/GHSA-m9cp-qcw7-hq7f/GHSA-m9cp-qcw7-hq7f.json +++ b/advisories/unreviewed/2022/11/GHSA-m9cp-qcw7-hq7f/GHSA-m9cp-qcw7-hq7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-p2vq-m3jx-j3g2/GHSA-p2vq-m3jx-j3g2.json b/advisories/unreviewed/2022/11/GHSA-p2vq-m3jx-j3g2/GHSA-p2vq-m3jx-j3g2.json index 09d21b22127..0d4cb885ad1 100644 --- a/advisories/unreviewed/2022/11/GHSA-p2vq-m3jx-j3g2/GHSA-p2vq-m3jx-j3g2.json +++ b/advisories/unreviewed/2022/11/GHSA-p2vq-m3jx-j3g2/GHSA-p2vq-m3jx-j3g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-p7cx-5gmv-rhp8/GHSA-p7cx-5gmv-rhp8.json b/advisories/unreviewed/2022/11/GHSA-p7cx-5gmv-rhp8/GHSA-p7cx-5gmv-rhp8.json index b6e116f0107..d6e5d92fe88 100644 --- a/advisories/unreviewed/2022/11/GHSA-p7cx-5gmv-rhp8/GHSA-p7cx-5gmv-rhp8.json +++ b/advisories/unreviewed/2022/11/GHSA-p7cx-5gmv-rhp8/GHSA-p7cx-5gmv-rhp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-q3wx-xp39-27ph/GHSA-q3wx-xp39-27ph.json b/advisories/unreviewed/2022/11/GHSA-q3wx-xp39-27ph/GHSA-q3wx-xp39-27ph.json index 4686d8ad873..706c4d55d12 100644 --- a/advisories/unreviewed/2022/11/GHSA-q3wx-xp39-27ph/GHSA-q3wx-xp39-27ph.json +++ b/advisories/unreviewed/2022/11/GHSA-q3wx-xp39-27ph/GHSA-q3wx-xp39-27ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-q6vq-gmhj-jj3v/GHSA-q6vq-gmhj-jj3v.json b/advisories/unreviewed/2022/11/GHSA-q6vq-gmhj-jj3v/GHSA-q6vq-gmhj-jj3v.json index 026d89e647e..f9856ffd39d 100644 --- a/advisories/unreviewed/2022/11/GHSA-q6vq-gmhj-jj3v/GHSA-q6vq-gmhj-jj3v.json +++ b/advisories/unreviewed/2022/11/GHSA-q6vq-gmhj-jj3v/GHSA-q6vq-gmhj-jj3v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-qhxq-hhgv-j7p6/GHSA-qhxq-hhgv-j7p6.json b/advisories/unreviewed/2022/11/GHSA-qhxq-hhgv-j7p6/GHSA-qhxq-hhgv-j7p6.json index 43174c47dc1..5fe61f1f392 100644 --- a/advisories/unreviewed/2022/11/GHSA-qhxq-hhgv-j7p6/GHSA-qhxq-hhgv-j7p6.json +++ b/advisories/unreviewed/2022/11/GHSA-qhxq-hhgv-j7p6/GHSA-qhxq-hhgv-j7p6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-qm7h-4cgg-4m78/GHSA-qm7h-4cgg-4m78.json b/advisories/unreviewed/2022/11/GHSA-qm7h-4cgg-4m78/GHSA-qm7h-4cgg-4m78.json index 2b4b1eb4dd1..4f04b5f4014 100644 --- a/advisories/unreviewed/2022/11/GHSA-qm7h-4cgg-4m78/GHSA-qm7h-4cgg-4m78.json +++ b/advisories/unreviewed/2022/11/GHSA-qm7h-4cgg-4m78/GHSA-qm7h-4cgg-4m78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-qr23-9pfx-4g77/GHSA-qr23-9pfx-4g77.json b/advisories/unreviewed/2022/11/GHSA-qr23-9pfx-4g77/GHSA-qr23-9pfx-4g77.json index 8e62e0710e3..2127e361502 100644 --- a/advisories/unreviewed/2022/11/GHSA-qr23-9pfx-4g77/GHSA-qr23-9pfx-4g77.json +++ b/advisories/unreviewed/2022/11/GHSA-qr23-9pfx-4g77/GHSA-qr23-9pfx-4g77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-r576-65cc-q67j/GHSA-r576-65cc-q67j.json b/advisories/unreviewed/2022/11/GHSA-r576-65cc-q67j/GHSA-r576-65cc-q67j.json index 057ebee4306..19ac38f8cec 100644 --- a/advisories/unreviewed/2022/11/GHSA-r576-65cc-q67j/GHSA-r576-65cc-q67j.json +++ b/advisories/unreviewed/2022/11/GHSA-r576-65cc-q67j/GHSA-r576-65cc-q67j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-vf5x-8r9f-vm4f/GHSA-vf5x-8r9f-vm4f.json b/advisories/unreviewed/2022/11/GHSA-vf5x-8r9f-vm4f/GHSA-vf5x-8r9f-vm4f.json index 3cc3d47a5b3..d2111466834 100644 --- a/advisories/unreviewed/2022/11/GHSA-vf5x-8r9f-vm4f/GHSA-vf5x-8r9f-vm4f.json +++ b/advisories/unreviewed/2022/11/GHSA-vf5x-8r9f-vm4f/GHSA-vf5x-8r9f-vm4f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-vfpx-fww4-ggcq/GHSA-vfpx-fww4-ggcq.json b/advisories/unreviewed/2022/11/GHSA-vfpx-fww4-ggcq/GHSA-vfpx-fww4-ggcq.json index 8e05caa1f5f..9992708c478 100644 --- a/advisories/unreviewed/2022/11/GHSA-vfpx-fww4-ggcq/GHSA-vfpx-fww4-ggcq.json +++ b/advisories/unreviewed/2022/11/GHSA-vfpx-fww4-ggcq/GHSA-vfpx-fww4-ggcq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-vghr-3cp4-r28v/GHSA-vghr-3cp4-r28v.json b/advisories/unreviewed/2022/11/GHSA-vghr-3cp4-r28v/GHSA-vghr-3cp4-r28v.json index 07b6c789148..d4679a708c3 100644 --- a/advisories/unreviewed/2022/11/GHSA-vghr-3cp4-r28v/GHSA-vghr-3cp4-r28v.json +++ b/advisories/unreviewed/2022/11/GHSA-vghr-3cp4-r28v/GHSA-vghr-3cp4-r28v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-vpvc-m5r4-77f2/GHSA-vpvc-m5r4-77f2.json b/advisories/unreviewed/2022/11/GHSA-vpvc-m5r4-77f2/GHSA-vpvc-m5r4-77f2.json index c09d5e79294..ed951ffefd1 100644 --- a/advisories/unreviewed/2022/11/GHSA-vpvc-m5r4-77f2/GHSA-vpvc-m5r4-77f2.json +++ b/advisories/unreviewed/2022/11/GHSA-vpvc-m5r4-77f2/GHSA-vpvc-m5r4-77f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-vwc4-4qvh-4xqq/GHSA-vwc4-4qvh-4xqq.json b/advisories/unreviewed/2022/11/GHSA-vwc4-4qvh-4xqq/GHSA-vwc4-4qvh-4xqq.json index 9a4b65dc84d..6b1f69bf0a9 100644 --- a/advisories/unreviewed/2022/11/GHSA-vwc4-4qvh-4xqq/GHSA-vwc4-4qvh-4xqq.json +++ b/advisories/unreviewed/2022/11/GHSA-vwc4-4qvh-4xqq/GHSA-vwc4-4qvh-4xqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-w86f-xj88-2xxm/GHSA-w86f-xj88-2xxm.json b/advisories/unreviewed/2022/11/GHSA-w86f-xj88-2xxm/GHSA-w86f-xj88-2xxm.json index 60f82b07e87..ba9f2c5b214 100644 --- a/advisories/unreviewed/2022/11/GHSA-w86f-xj88-2xxm/GHSA-w86f-xj88-2xxm.json +++ b/advisories/unreviewed/2022/11/GHSA-w86f-xj88-2xxm/GHSA-w86f-xj88-2xxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-wf28-v36r-wc9q/GHSA-wf28-v36r-wc9q.json b/advisories/unreviewed/2022/11/GHSA-wf28-v36r-wc9q/GHSA-wf28-v36r-wc9q.json index e42811d30bb..7ac689d40d8 100644 --- a/advisories/unreviewed/2022/11/GHSA-wf28-v36r-wc9q/GHSA-wf28-v36r-wc9q.json +++ b/advisories/unreviewed/2022/11/GHSA-wf28-v36r-wc9q/GHSA-wf28-v36r-wc9q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wjv9-hqx9-p9x7/GHSA-wjv9-hqx9-p9x7.json b/advisories/unreviewed/2022/11/GHSA-wjv9-hqx9-p9x7/GHSA-wjv9-hqx9-p9x7.json index fbfe6bc7d89..4343ec1e4a8 100644 --- a/advisories/unreviewed/2022/11/GHSA-wjv9-hqx9-p9x7/GHSA-wjv9-hqx9-p9x7.json +++ b/advisories/unreviewed/2022/11/GHSA-wjv9-hqx9-p9x7/GHSA-wjv9-hqx9-p9x7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wwfc-jq43-mrhg/GHSA-wwfc-jq43-mrhg.json b/advisories/unreviewed/2022/11/GHSA-wwfc-jq43-mrhg/GHSA-wwfc-jq43-mrhg.json index cff275b00e1..7a574ce77f5 100644 --- a/advisories/unreviewed/2022/11/GHSA-wwfc-jq43-mrhg/GHSA-wwfc-jq43-mrhg.json +++ b/advisories/unreviewed/2022/11/GHSA-wwfc-jq43-mrhg/GHSA-wwfc-jq43-mrhg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xcqq-8632-69xx/GHSA-xcqq-8632-69xx.json b/advisories/unreviewed/2022/11/GHSA-xcqq-8632-69xx/GHSA-xcqq-8632-69xx.json index 0dd8804eb87..68ed35a0ccd 100644 --- a/advisories/unreviewed/2022/11/GHSA-xcqq-8632-69xx/GHSA-xcqq-8632-69xx.json +++ b/advisories/unreviewed/2022/11/GHSA-xcqq-8632-69xx/GHSA-xcqq-8632-69xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xg29-9vrx-m2qc/GHSA-xg29-9vrx-m2qc.json b/advisories/unreviewed/2022/11/GHSA-xg29-9vrx-m2qc/GHSA-xg29-9vrx-m2qc.json index 000fea03634..d774096e464 100644 --- a/advisories/unreviewed/2022/11/GHSA-xg29-9vrx-m2qc/GHSA-xg29-9vrx-m2qc.json +++ b/advisories/unreviewed/2022/11/GHSA-xg29-9vrx-m2qc/GHSA-xg29-9vrx-m2qc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xj28-8c9f-6cgg/GHSA-xj28-8c9f-6cgg.json b/advisories/unreviewed/2022/11/GHSA-xj28-8c9f-6cgg/GHSA-xj28-8c9f-6cgg.json index 61cd9b39160..a763fdffd9b 100644 --- a/advisories/unreviewed/2022/11/GHSA-xj28-8c9f-6cgg/GHSA-xj28-8c9f-6cgg.json +++ b/advisories/unreviewed/2022/11/GHSA-xj28-8c9f-6cgg/GHSA-xj28-8c9f-6cgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xpr7-cmp4-v4v3/GHSA-xpr7-cmp4-v4v3.json b/advisories/unreviewed/2022/11/GHSA-xpr7-cmp4-v4v3/GHSA-xpr7-cmp4-v4v3.json index 52125371fee..8e69c91a0a0 100644 --- a/advisories/unreviewed/2022/11/GHSA-xpr7-cmp4-v4v3/GHSA-xpr7-cmp4-v4v3.json +++ b/advisories/unreviewed/2022/11/GHSA-xpr7-cmp4-v4v3/GHSA-xpr7-cmp4-v4v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-2357-j4pr-qg27/GHSA-2357-j4pr-qg27.json b/advisories/unreviewed/2022/12/GHSA-2357-j4pr-qg27/GHSA-2357-j4pr-qg27.json index 661b76e423b..f409b1ff935 100644 --- a/advisories/unreviewed/2022/12/GHSA-2357-j4pr-qg27/GHSA-2357-j4pr-qg27.json +++ b/advisories/unreviewed/2022/12/GHSA-2357-j4pr-qg27/GHSA-2357-j4pr-qg27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-23qm-j98q-xr7j/GHSA-23qm-j98q-xr7j.json b/advisories/unreviewed/2022/12/GHSA-23qm-j98q-xr7j/GHSA-23qm-j98q-xr7j.json index abcb04b20aa..33df9b7bcc7 100644 --- a/advisories/unreviewed/2022/12/GHSA-23qm-j98q-xr7j/GHSA-23qm-j98q-xr7j.json +++ b/advisories/unreviewed/2022/12/GHSA-23qm-j98q-xr7j/GHSA-23qm-j98q-xr7j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-2776-fr3j-r98m/GHSA-2776-fr3j-r98m.json b/advisories/unreviewed/2022/12/GHSA-2776-fr3j-r98m/GHSA-2776-fr3j-r98m.json index 1caad1aaf24..a00325ef7c2 100644 --- a/advisories/unreviewed/2022/12/GHSA-2776-fr3j-r98m/GHSA-2776-fr3j-r98m.json +++ b/advisories/unreviewed/2022/12/GHSA-2776-fr3j-r98m/GHSA-2776-fr3j-r98m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-294j-79hr-f57f/GHSA-294j-79hr-f57f.json b/advisories/unreviewed/2022/12/GHSA-294j-79hr-f57f/GHSA-294j-79hr-f57f.json index 6736cbf47f6..bb34a31ef20 100644 --- a/advisories/unreviewed/2022/12/GHSA-294j-79hr-f57f/GHSA-294j-79hr-f57f.json +++ b/advisories/unreviewed/2022/12/GHSA-294j-79hr-f57f/GHSA-294j-79hr-f57f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-2rfc-g399-fff5/GHSA-2rfc-g399-fff5.json b/advisories/unreviewed/2022/12/GHSA-2rfc-g399-fff5/GHSA-2rfc-g399-fff5.json index 464992f82ae..84a60ccd100 100644 --- a/advisories/unreviewed/2022/12/GHSA-2rfc-g399-fff5/GHSA-2rfc-g399-fff5.json +++ b/advisories/unreviewed/2022/12/GHSA-2rfc-g399-fff5/GHSA-2rfc-g399-fff5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3c8c-vcmc-g2h3/GHSA-3c8c-vcmc-g2h3.json b/advisories/unreviewed/2022/12/GHSA-3c8c-vcmc-g2h3/GHSA-3c8c-vcmc-g2h3.json index 796a9f423e2..2321ab7476f 100644 --- a/advisories/unreviewed/2022/12/GHSA-3c8c-vcmc-g2h3/GHSA-3c8c-vcmc-g2h3.json +++ b/advisories/unreviewed/2022/12/GHSA-3c8c-vcmc-g2h3/GHSA-3c8c-vcmc-g2h3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3fr2-34qf-c3pm/GHSA-3fr2-34qf-c3pm.json b/advisories/unreviewed/2022/12/GHSA-3fr2-34qf-c3pm/GHSA-3fr2-34qf-c3pm.json index 0a5347dd5f8..621d00b103d 100644 --- a/advisories/unreviewed/2022/12/GHSA-3fr2-34qf-c3pm/GHSA-3fr2-34qf-c3pm.json +++ b/advisories/unreviewed/2022/12/GHSA-3fr2-34qf-c3pm/GHSA-3fr2-34qf-c3pm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-3gfr-938g-v48x/GHSA-3gfr-938g-v48x.json b/advisories/unreviewed/2022/12/GHSA-3gfr-938g-v48x/GHSA-3gfr-938g-v48x.json index c8c2c7db8d1..982e595eb34 100644 --- a/advisories/unreviewed/2022/12/GHSA-3gfr-938g-v48x/GHSA-3gfr-938g-v48x.json +++ b/advisories/unreviewed/2022/12/GHSA-3gfr-938g-v48x/GHSA-3gfr-938g-v48x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-3gq8-8fwh-fc7q/GHSA-3gq8-8fwh-fc7q.json b/advisories/unreviewed/2022/12/GHSA-3gq8-8fwh-fc7q/GHSA-3gq8-8fwh-fc7q.json index 409d8f423c6..7f890d8f644 100644 --- a/advisories/unreviewed/2022/12/GHSA-3gq8-8fwh-fc7q/GHSA-3gq8-8fwh-fc7q.json +++ b/advisories/unreviewed/2022/12/GHSA-3gq8-8fwh-fc7q/GHSA-3gq8-8fwh-fc7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3x8r-xvj6-wr9x/GHSA-3x8r-xvj6-wr9x.json b/advisories/unreviewed/2022/12/GHSA-3x8r-xvj6-wr9x/GHSA-3x8r-xvj6-wr9x.json index beb75e92560..d6af80de54f 100644 --- a/advisories/unreviewed/2022/12/GHSA-3x8r-xvj6-wr9x/GHSA-3x8r-xvj6-wr9x.json +++ b/advisories/unreviewed/2022/12/GHSA-3x8r-xvj6-wr9x/GHSA-3x8r-xvj6-wr9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-443j-8jp8-4xch/GHSA-443j-8jp8-4xch.json b/advisories/unreviewed/2022/12/GHSA-443j-8jp8-4xch/GHSA-443j-8jp8-4xch.json index 4db4939a701..03cd6dd4237 100644 --- a/advisories/unreviewed/2022/12/GHSA-443j-8jp8-4xch/GHSA-443j-8jp8-4xch.json +++ b/advisories/unreviewed/2022/12/GHSA-443j-8jp8-4xch/GHSA-443j-8jp8-4xch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-4jcr-vf56-7rjc/GHSA-4jcr-vf56-7rjc.json b/advisories/unreviewed/2022/12/GHSA-4jcr-vf56-7rjc/GHSA-4jcr-vf56-7rjc.json index 105a43a9549..de0b917cd77 100644 --- a/advisories/unreviewed/2022/12/GHSA-4jcr-vf56-7rjc/GHSA-4jcr-vf56-7rjc.json +++ b/advisories/unreviewed/2022/12/GHSA-4jcr-vf56-7rjc/GHSA-4jcr-vf56-7rjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-4vmw-g457-xcj2/GHSA-4vmw-g457-xcj2.json b/advisories/unreviewed/2022/12/GHSA-4vmw-g457-xcj2/GHSA-4vmw-g457-xcj2.json index 9bb447c2ecf..7fd88fa8b87 100644 --- a/advisories/unreviewed/2022/12/GHSA-4vmw-g457-xcj2/GHSA-4vmw-g457-xcj2.json +++ b/advisories/unreviewed/2022/12/GHSA-4vmw-g457-xcj2/GHSA-4vmw-g457-xcj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-557q-69q9-3wvh/GHSA-557q-69q9-3wvh.json b/advisories/unreviewed/2022/12/GHSA-557q-69q9-3wvh/GHSA-557q-69q9-3wvh.json index 884b1bb73c4..c0659111bc4 100644 --- a/advisories/unreviewed/2022/12/GHSA-557q-69q9-3wvh/GHSA-557q-69q9-3wvh.json +++ b/advisories/unreviewed/2022/12/GHSA-557q-69q9-3wvh/GHSA-557q-69q9-3wvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-55vh-8q94-g3p9/GHSA-55vh-8q94-g3p9.json b/advisories/unreviewed/2022/12/GHSA-55vh-8q94-g3p9/GHSA-55vh-8q94-g3p9.json index 7666416dfe6..aadcad90fca 100644 --- a/advisories/unreviewed/2022/12/GHSA-55vh-8q94-g3p9/GHSA-55vh-8q94-g3p9.json +++ b/advisories/unreviewed/2022/12/GHSA-55vh-8q94-g3p9/GHSA-55vh-8q94-g3p9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-5cxp-p2q9-w7hr/GHSA-5cxp-p2q9-w7hr.json b/advisories/unreviewed/2022/12/GHSA-5cxp-p2q9-w7hr/GHSA-5cxp-p2q9-w7hr.json index 3e8f3706afa..48f00bd29be 100644 --- a/advisories/unreviewed/2022/12/GHSA-5cxp-p2q9-w7hr/GHSA-5cxp-p2q9-w7hr.json +++ b/advisories/unreviewed/2022/12/GHSA-5cxp-p2q9-w7hr/GHSA-5cxp-p2q9-w7hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-5g34-x2rf-m7v6/GHSA-5g34-x2rf-m7v6.json b/advisories/unreviewed/2022/12/GHSA-5g34-x2rf-m7v6/GHSA-5g34-x2rf-m7v6.json index ee5f7cde8d5..8625ef35130 100644 --- a/advisories/unreviewed/2022/12/GHSA-5g34-x2rf-m7v6/GHSA-5g34-x2rf-m7v6.json +++ b/advisories/unreviewed/2022/12/GHSA-5g34-x2rf-m7v6/GHSA-5g34-x2rf-m7v6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-62xc-g7hf-p457/GHSA-62xc-g7hf-p457.json b/advisories/unreviewed/2022/12/GHSA-62xc-g7hf-p457/GHSA-62xc-g7hf-p457.json index ceda6e0ffca..0821d1fd128 100644 --- a/advisories/unreviewed/2022/12/GHSA-62xc-g7hf-p457/GHSA-62xc-g7hf-p457.json +++ b/advisories/unreviewed/2022/12/GHSA-62xc-g7hf-p457/GHSA-62xc-g7hf-p457.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-6gfq-p2cr-3q5j/GHSA-6gfq-p2cr-3q5j.json b/advisories/unreviewed/2022/12/GHSA-6gfq-p2cr-3q5j/GHSA-6gfq-p2cr-3q5j.json index 2f9c5615c8c..b25524e099a 100644 --- a/advisories/unreviewed/2022/12/GHSA-6gfq-p2cr-3q5j/GHSA-6gfq-p2cr-3q5j.json +++ b/advisories/unreviewed/2022/12/GHSA-6gfq-p2cr-3q5j/GHSA-6gfq-p2cr-3q5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-6mq6-fpvp-rmfg/GHSA-6mq6-fpvp-rmfg.json b/advisories/unreviewed/2022/12/GHSA-6mq6-fpvp-rmfg/GHSA-6mq6-fpvp-rmfg.json index 5378c795afe..1e23efa3c25 100644 --- a/advisories/unreviewed/2022/12/GHSA-6mq6-fpvp-rmfg/GHSA-6mq6-fpvp-rmfg.json +++ b/advisories/unreviewed/2022/12/GHSA-6mq6-fpvp-rmfg/GHSA-6mq6-fpvp-rmfg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-6vfm-c4q2-cjcr/GHSA-6vfm-c4q2-cjcr.json b/advisories/unreviewed/2022/12/GHSA-6vfm-c4q2-cjcr/GHSA-6vfm-c4q2-cjcr.json index 6cafa9f62cb..9f163969e68 100644 --- a/advisories/unreviewed/2022/12/GHSA-6vfm-c4q2-cjcr/GHSA-6vfm-c4q2-cjcr.json +++ b/advisories/unreviewed/2022/12/GHSA-6vfm-c4q2-cjcr/GHSA-6vfm-c4q2-cjcr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-74v3-gjvq-vv7f/GHSA-74v3-gjvq-vv7f.json b/advisories/unreviewed/2022/12/GHSA-74v3-gjvq-vv7f/GHSA-74v3-gjvq-vv7f.json index 41c0f688767..c30a4be12f4 100644 --- a/advisories/unreviewed/2022/12/GHSA-74v3-gjvq-vv7f/GHSA-74v3-gjvq-vv7f.json +++ b/advisories/unreviewed/2022/12/GHSA-74v3-gjvq-vv7f/GHSA-74v3-gjvq-vv7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-76x6-fwvj-q76m/GHSA-76x6-fwvj-q76m.json b/advisories/unreviewed/2022/12/GHSA-76x6-fwvj-q76m/GHSA-76x6-fwvj-q76m.json index b3beda18417..0eb4cee7ad3 100644 --- a/advisories/unreviewed/2022/12/GHSA-76x6-fwvj-q76m/GHSA-76x6-fwvj-q76m.json +++ b/advisories/unreviewed/2022/12/GHSA-76x6-fwvj-q76m/GHSA-76x6-fwvj-q76m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-7g3f-6r3q-3qmq/GHSA-7g3f-6r3q-3qmq.json b/advisories/unreviewed/2022/12/GHSA-7g3f-6r3q-3qmq/GHSA-7g3f-6r3q-3qmq.json index 7ff83100c7a..b887d7ce567 100644 --- a/advisories/unreviewed/2022/12/GHSA-7g3f-6r3q-3qmq/GHSA-7g3f-6r3q-3qmq.json +++ b/advisories/unreviewed/2022/12/GHSA-7g3f-6r3q-3qmq/GHSA-7g3f-6r3q-3qmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-7mvx-m8hq-f37g/GHSA-7mvx-m8hq-f37g.json b/advisories/unreviewed/2022/12/GHSA-7mvx-m8hq-f37g/GHSA-7mvx-m8hq-f37g.json index 4c9446d7545..5e5638dbf9b 100644 --- a/advisories/unreviewed/2022/12/GHSA-7mvx-m8hq-f37g/GHSA-7mvx-m8hq-f37g.json +++ b/advisories/unreviewed/2022/12/GHSA-7mvx-m8hq-f37g/GHSA-7mvx-m8hq-f37g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-7p9m-p78c-278w/GHSA-7p9m-p78c-278w.json b/advisories/unreviewed/2022/12/GHSA-7p9m-p78c-278w/GHSA-7p9m-p78c-278w.json index ba2e868649e..dce25018dcb 100644 --- a/advisories/unreviewed/2022/12/GHSA-7p9m-p78c-278w/GHSA-7p9m-p78c-278w.json +++ b/advisories/unreviewed/2022/12/GHSA-7p9m-p78c-278w/GHSA-7p9m-p78c-278w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-7q73-76jf-54wg/GHSA-7q73-76jf-54wg.json b/advisories/unreviewed/2022/12/GHSA-7q73-76jf-54wg/GHSA-7q73-76jf-54wg.json index f140ec230a0..748300876eb 100644 --- a/advisories/unreviewed/2022/12/GHSA-7q73-76jf-54wg/GHSA-7q73-76jf-54wg.json +++ b/advisories/unreviewed/2022/12/GHSA-7q73-76jf-54wg/GHSA-7q73-76jf-54wg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-7rf2-x8gr-rv3r/GHSA-7rf2-x8gr-rv3r.json b/advisories/unreviewed/2022/12/GHSA-7rf2-x8gr-rv3r/GHSA-7rf2-x8gr-rv3r.json index a902ced235f..3a97d87b6cf 100644 --- a/advisories/unreviewed/2022/12/GHSA-7rf2-x8gr-rv3r/GHSA-7rf2-x8gr-rv3r.json +++ b/advisories/unreviewed/2022/12/GHSA-7rf2-x8gr-rv3r/GHSA-7rf2-x8gr-rv3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-7v4v-c3pr-fgrq/GHSA-7v4v-c3pr-fgrq.json b/advisories/unreviewed/2022/12/GHSA-7v4v-c3pr-fgrq/GHSA-7v4v-c3pr-fgrq.json index 723b44947de..afd79dfb0e7 100644 --- a/advisories/unreviewed/2022/12/GHSA-7v4v-c3pr-fgrq/GHSA-7v4v-c3pr-fgrq.json +++ b/advisories/unreviewed/2022/12/GHSA-7v4v-c3pr-fgrq/GHSA-7v4v-c3pr-fgrq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-7vcp-35cw-vjp4/GHSA-7vcp-35cw-vjp4.json b/advisories/unreviewed/2022/12/GHSA-7vcp-35cw-vjp4/GHSA-7vcp-35cw-vjp4.json index 81a76f9951b..573a905d0cb 100644 --- a/advisories/unreviewed/2022/12/GHSA-7vcp-35cw-vjp4/GHSA-7vcp-35cw-vjp4.json +++ b/advisories/unreviewed/2022/12/GHSA-7vcp-35cw-vjp4/GHSA-7vcp-35cw-vjp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-865c-pxq5-2fp2/GHSA-865c-pxq5-2fp2.json b/advisories/unreviewed/2022/12/GHSA-865c-pxq5-2fp2/GHSA-865c-pxq5-2fp2.json index c77e4fca559..331d2867e1f 100644 --- a/advisories/unreviewed/2022/12/GHSA-865c-pxq5-2fp2/GHSA-865c-pxq5-2fp2.json +++ b/advisories/unreviewed/2022/12/GHSA-865c-pxq5-2fp2/GHSA-865c-pxq5-2fp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-87v5-p656-xr8x/GHSA-87v5-p656-xr8x.json b/advisories/unreviewed/2022/12/GHSA-87v5-p656-xr8x/GHSA-87v5-p656-xr8x.json index 5b4b547d3d4..7abf8c13307 100644 --- a/advisories/unreviewed/2022/12/GHSA-87v5-p656-xr8x/GHSA-87v5-p656-xr8x.json +++ b/advisories/unreviewed/2022/12/GHSA-87v5-p656-xr8x/GHSA-87v5-p656-xr8x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-8r9h-cvvp-3jq4/GHSA-8r9h-cvvp-3jq4.json b/advisories/unreviewed/2022/12/GHSA-8r9h-cvvp-3jq4/GHSA-8r9h-cvvp-3jq4.json index 15785d75e0f..7edc39b7710 100644 --- a/advisories/unreviewed/2022/12/GHSA-8r9h-cvvp-3jq4/GHSA-8r9h-cvvp-3jq4.json +++ b/advisories/unreviewed/2022/12/GHSA-8r9h-cvvp-3jq4/GHSA-8r9h-cvvp-3jq4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-8xcq-8jhf-w82h/GHSA-8xcq-8jhf-w82h.json b/advisories/unreviewed/2022/12/GHSA-8xcq-8jhf-w82h/GHSA-8xcq-8jhf-w82h.json index cf3dd7e6164..3b36784f14c 100644 --- a/advisories/unreviewed/2022/12/GHSA-8xcq-8jhf-w82h/GHSA-8xcq-8jhf-w82h.json +++ b/advisories/unreviewed/2022/12/GHSA-8xcq-8jhf-w82h/GHSA-8xcq-8jhf-w82h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-973q-fqp7-q49m/GHSA-973q-fqp7-q49m.json b/advisories/unreviewed/2022/12/GHSA-973q-fqp7-q49m/GHSA-973q-fqp7-q49m.json index 18535eaf3b6..e2435597150 100644 --- a/advisories/unreviewed/2022/12/GHSA-973q-fqp7-q49m/GHSA-973q-fqp7-q49m.json +++ b/advisories/unreviewed/2022/12/GHSA-973q-fqp7-q49m/GHSA-973q-fqp7-q49m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-9f66-rrvp-2m2v/GHSA-9f66-rrvp-2m2v.json b/advisories/unreviewed/2022/12/GHSA-9f66-rrvp-2m2v/GHSA-9f66-rrvp-2m2v.json index f183450f27c..789e9422fb9 100644 --- a/advisories/unreviewed/2022/12/GHSA-9f66-rrvp-2m2v/GHSA-9f66-rrvp-2m2v.json +++ b/advisories/unreviewed/2022/12/GHSA-9f66-rrvp-2m2v/GHSA-9f66-rrvp-2m2v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-9mwr-4v4g-8w4c/GHSA-9mwr-4v4g-8w4c.json b/advisories/unreviewed/2022/12/GHSA-9mwr-4v4g-8w4c/GHSA-9mwr-4v4g-8w4c.json index e032c2a14c1..0756522402a 100644 --- a/advisories/unreviewed/2022/12/GHSA-9mwr-4v4g-8w4c/GHSA-9mwr-4v4g-8w4c.json +++ b/advisories/unreviewed/2022/12/GHSA-9mwr-4v4g-8w4c/GHSA-9mwr-4v4g-8w4c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-c8rg-fhg7-c5p9/GHSA-c8rg-fhg7-c5p9.json b/advisories/unreviewed/2022/12/GHSA-c8rg-fhg7-c5p9/GHSA-c8rg-fhg7-c5p9.json index 5834706ff93..e103d28ddee 100644 --- a/advisories/unreviewed/2022/12/GHSA-c8rg-fhg7-c5p9/GHSA-c8rg-fhg7-c5p9.json +++ b/advisories/unreviewed/2022/12/GHSA-c8rg-fhg7-c5p9/GHSA-c8rg-fhg7-c5p9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cchx-3mjj-hjj4/GHSA-cchx-3mjj-hjj4.json b/advisories/unreviewed/2022/12/GHSA-cchx-3mjj-hjj4/GHSA-cchx-3mjj-hjj4.json index 0f09b2f9904..aac324d7afe 100644 --- a/advisories/unreviewed/2022/12/GHSA-cchx-3mjj-hjj4/GHSA-cchx-3mjj-hjj4.json +++ b/advisories/unreviewed/2022/12/GHSA-cchx-3mjj-hjj4/GHSA-cchx-3mjj-hjj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-ccvr-7m85-7g88/GHSA-ccvr-7m85-7g88.json b/advisories/unreviewed/2022/12/GHSA-ccvr-7m85-7g88/GHSA-ccvr-7m85-7g88.json index 95f890c42cf..428c459a0c7 100644 --- a/advisories/unreviewed/2022/12/GHSA-ccvr-7m85-7g88/GHSA-ccvr-7m85-7g88.json +++ b/advisories/unreviewed/2022/12/GHSA-ccvr-7m85-7g88/GHSA-ccvr-7m85-7g88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cm69-gc59-36qm/GHSA-cm69-gc59-36qm.json b/advisories/unreviewed/2022/12/GHSA-cm69-gc59-36qm/GHSA-cm69-gc59-36qm.json index 9c502a22406..7aab38c5e30 100644 --- a/advisories/unreviewed/2022/12/GHSA-cm69-gc59-36qm/GHSA-cm69-gc59-36qm.json +++ b/advisories/unreviewed/2022/12/GHSA-cm69-gc59-36qm/GHSA-cm69-gc59-36qm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cwm9-q742-vjcx/GHSA-cwm9-q742-vjcx.json b/advisories/unreviewed/2022/12/GHSA-cwm9-q742-vjcx/GHSA-cwm9-q742-vjcx.json index 5abca1b5d92..e1e21b5f0e2 100644 --- a/advisories/unreviewed/2022/12/GHSA-cwm9-q742-vjcx/GHSA-cwm9-q742-vjcx.json +++ b/advisories/unreviewed/2022/12/GHSA-cwm9-q742-vjcx/GHSA-cwm9-q742-vjcx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-f2f3-9xw6-r52m/GHSA-f2f3-9xw6-r52m.json b/advisories/unreviewed/2022/12/GHSA-f2f3-9xw6-r52m/GHSA-f2f3-9xw6-r52m.json index 631f89467c2..3281073ede5 100644 --- a/advisories/unreviewed/2022/12/GHSA-f2f3-9xw6-r52m/GHSA-f2f3-9xw6-r52m.json +++ b/advisories/unreviewed/2022/12/GHSA-f2f3-9xw6-r52m/GHSA-f2f3-9xw6-r52m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-f7vm-6g4j-64q8/GHSA-f7vm-6g4j-64q8.json b/advisories/unreviewed/2022/12/GHSA-f7vm-6g4j-64q8/GHSA-f7vm-6g4j-64q8.json index 412fccfe4a6..134dae6f036 100644 --- a/advisories/unreviewed/2022/12/GHSA-f7vm-6g4j-64q8/GHSA-f7vm-6g4j-64q8.json +++ b/advisories/unreviewed/2022/12/GHSA-f7vm-6g4j-64q8/GHSA-f7vm-6g4j-64q8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-f82m-4qrp-29gx/GHSA-f82m-4qrp-29gx.json b/advisories/unreviewed/2022/12/GHSA-f82m-4qrp-29gx/GHSA-f82m-4qrp-29gx.json index 4db90b0b4ac..ce6b59c1943 100644 --- a/advisories/unreviewed/2022/12/GHSA-f82m-4qrp-29gx/GHSA-f82m-4qrp-29gx.json +++ b/advisories/unreviewed/2022/12/GHSA-f82m-4qrp-29gx/GHSA-f82m-4qrp-29gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-ff4v-crmx-qh7v/GHSA-ff4v-crmx-qh7v.json b/advisories/unreviewed/2022/12/GHSA-ff4v-crmx-qh7v/GHSA-ff4v-crmx-qh7v.json index 4f24f414f59..2059fd73977 100644 --- a/advisories/unreviewed/2022/12/GHSA-ff4v-crmx-qh7v/GHSA-ff4v-crmx-qh7v.json +++ b/advisories/unreviewed/2022/12/GHSA-ff4v-crmx-qh7v/GHSA-ff4v-crmx-qh7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-ffp5-h78m-wj7q/GHSA-ffp5-h78m-wj7q.json b/advisories/unreviewed/2022/12/GHSA-ffp5-h78m-wj7q/GHSA-ffp5-h78m-wj7q.json index 8999dc5d206..4c3f47fb343 100644 --- a/advisories/unreviewed/2022/12/GHSA-ffp5-h78m-wj7q/GHSA-ffp5-h78m-wj7q.json +++ b/advisories/unreviewed/2022/12/GHSA-ffp5-h78m-wj7q/GHSA-ffp5-h78m-wj7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-fr8c-wj8r-x73f/GHSA-fr8c-wj8r-x73f.json b/advisories/unreviewed/2022/12/GHSA-fr8c-wj8r-x73f/GHSA-fr8c-wj8r-x73f.json index c1ee18cfc77..00ed3e2836c 100644 --- a/advisories/unreviewed/2022/12/GHSA-fr8c-wj8r-x73f/GHSA-fr8c-wj8r-x73f.json +++ b/advisories/unreviewed/2022/12/GHSA-fr8c-wj8r-x73f/GHSA-fr8c-wj8r-x73f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-frm5-37j3-v45h/GHSA-frm5-37j3-v45h.json b/advisories/unreviewed/2022/12/GHSA-frm5-37j3-v45h/GHSA-frm5-37j3-v45h.json index ae8c0289c38..1e8a28358d4 100644 --- a/advisories/unreviewed/2022/12/GHSA-frm5-37j3-v45h/GHSA-frm5-37j3-v45h.json +++ b/advisories/unreviewed/2022/12/GHSA-frm5-37j3-v45h/GHSA-frm5-37j3-v45h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-fv4x-hrpq-wqgp/GHSA-fv4x-hrpq-wqgp.json b/advisories/unreviewed/2022/12/GHSA-fv4x-hrpq-wqgp/GHSA-fv4x-hrpq-wqgp.json index 7e5a99a5da0..5837f1f55a7 100644 --- a/advisories/unreviewed/2022/12/GHSA-fv4x-hrpq-wqgp/GHSA-fv4x-hrpq-wqgp.json +++ b/advisories/unreviewed/2022/12/GHSA-fv4x-hrpq-wqgp/GHSA-fv4x-hrpq-wqgp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-g34x-fm45-8xww/GHSA-g34x-fm45-8xww.json b/advisories/unreviewed/2022/12/GHSA-g34x-fm45-8xww/GHSA-g34x-fm45-8xww.json index be519e65f23..d6efbc0e64b 100644 --- a/advisories/unreviewed/2022/12/GHSA-g34x-fm45-8xww/GHSA-g34x-fm45-8xww.json +++ b/advisories/unreviewed/2022/12/GHSA-g34x-fm45-8xww/GHSA-g34x-fm45-8xww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-g8mf-8j4g-35gm/GHSA-g8mf-8j4g-35gm.json b/advisories/unreviewed/2022/12/GHSA-g8mf-8j4g-35gm/GHSA-g8mf-8j4g-35gm.json index 91a59bd2797..74baad35248 100644 --- a/advisories/unreviewed/2022/12/GHSA-g8mf-8j4g-35gm/GHSA-g8mf-8j4g-35gm.json +++ b/advisories/unreviewed/2022/12/GHSA-g8mf-8j4g-35gm/GHSA-g8mf-8j4g-35gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gjm9-6xp8-g72w/GHSA-gjm9-6xp8-g72w.json b/advisories/unreviewed/2022/12/GHSA-gjm9-6xp8-g72w/GHSA-gjm9-6xp8-g72w.json index 6c5c390ed91..6bc93859a04 100644 --- a/advisories/unreviewed/2022/12/GHSA-gjm9-6xp8-g72w/GHSA-gjm9-6xp8-g72w.json +++ b/advisories/unreviewed/2022/12/GHSA-gjm9-6xp8-g72w/GHSA-gjm9-6xp8-g72w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gjqr-jhwx-6m86/GHSA-gjqr-jhwx-6m86.json b/advisories/unreviewed/2022/12/GHSA-gjqr-jhwx-6m86/GHSA-gjqr-jhwx-6m86.json index 1cee4aab4c3..9d9490717a9 100644 --- a/advisories/unreviewed/2022/12/GHSA-gjqr-jhwx-6m86/GHSA-gjqr-jhwx-6m86.json +++ b/advisories/unreviewed/2022/12/GHSA-gjqr-jhwx-6m86/GHSA-gjqr-jhwx-6m86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-gp75-j23f-w8j9/GHSA-gp75-j23f-w8j9.json b/advisories/unreviewed/2022/12/GHSA-gp75-j23f-w8j9/GHSA-gp75-j23f-w8j9.json index 1fa4e22f1fa..57a138c08e8 100644 --- a/advisories/unreviewed/2022/12/GHSA-gp75-j23f-w8j9/GHSA-gp75-j23f-w8j9.json +++ b/advisories/unreviewed/2022/12/GHSA-gp75-j23f-w8j9/GHSA-gp75-j23f-w8j9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gph8-h9xc-35r4/GHSA-gph8-h9xc-35r4.json b/advisories/unreviewed/2022/12/GHSA-gph8-h9xc-35r4/GHSA-gph8-h9xc-35r4.json index 561621d2e80..4e0691ee835 100644 --- a/advisories/unreviewed/2022/12/GHSA-gph8-h9xc-35r4/GHSA-gph8-h9xc-35r4.json +++ b/advisories/unreviewed/2022/12/GHSA-gph8-h9xc-35r4/GHSA-gph8-h9xc-35r4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gvfx-jhx9-4mvq/GHSA-gvfx-jhx9-4mvq.json b/advisories/unreviewed/2022/12/GHSA-gvfx-jhx9-4mvq/GHSA-gvfx-jhx9-4mvq.json index 563da6fb837..3193a7b4475 100644 --- a/advisories/unreviewed/2022/12/GHSA-gvfx-jhx9-4mvq/GHSA-gvfx-jhx9-4mvq.json +++ b/advisories/unreviewed/2022/12/GHSA-gvfx-jhx9-4mvq/GHSA-gvfx-jhx9-4mvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gx5q-2vpf-g2w4/GHSA-gx5q-2vpf-g2w4.json b/advisories/unreviewed/2022/12/GHSA-gx5q-2vpf-g2w4/GHSA-gx5q-2vpf-g2w4.json index 96bbcabef67..76fadc5d0d8 100644 --- a/advisories/unreviewed/2022/12/GHSA-gx5q-2vpf-g2w4/GHSA-gx5q-2vpf-g2w4.json +++ b/advisories/unreviewed/2022/12/GHSA-gx5q-2vpf-g2w4/GHSA-gx5q-2vpf-g2w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-gx64-jm35-rwvr/GHSA-gx64-jm35-rwvr.json b/advisories/unreviewed/2022/12/GHSA-gx64-jm35-rwvr/GHSA-gx64-jm35-rwvr.json index 72c29438bbf..52842d24596 100644 --- a/advisories/unreviewed/2022/12/GHSA-gx64-jm35-rwvr/GHSA-gx64-jm35-rwvr.json +++ b/advisories/unreviewed/2022/12/GHSA-gx64-jm35-rwvr/GHSA-gx64-jm35-rwvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h295-679q-mhm8/GHSA-h295-679q-mhm8.json b/advisories/unreviewed/2022/12/GHSA-h295-679q-mhm8/GHSA-h295-679q-mhm8.json index 896bdb7d289..f3045f9f55f 100644 --- a/advisories/unreviewed/2022/12/GHSA-h295-679q-mhm8/GHSA-h295-679q-mhm8.json +++ b/advisories/unreviewed/2022/12/GHSA-h295-679q-mhm8/GHSA-h295-679q-mhm8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h3rc-wrmf-3v4p/GHSA-h3rc-wrmf-3v4p.json b/advisories/unreviewed/2022/12/GHSA-h3rc-wrmf-3v4p/GHSA-h3rc-wrmf-3v4p.json index 183ec30aafa..5368b67766e 100644 --- a/advisories/unreviewed/2022/12/GHSA-h3rc-wrmf-3v4p/GHSA-h3rc-wrmf-3v4p.json +++ b/advisories/unreviewed/2022/12/GHSA-h3rc-wrmf-3v4p/GHSA-h3rc-wrmf-3v4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h4wj-cg8v-jxq5/GHSA-h4wj-cg8v-jxq5.json b/advisories/unreviewed/2022/12/GHSA-h4wj-cg8v-jxq5/GHSA-h4wj-cg8v-jxq5.json index 73e5a4a24ef..b6025787485 100644 --- a/advisories/unreviewed/2022/12/GHSA-h4wj-cg8v-jxq5/GHSA-h4wj-cg8v-jxq5.json +++ b/advisories/unreviewed/2022/12/GHSA-h4wj-cg8v-jxq5/GHSA-h4wj-cg8v-jxq5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h78h-f6r8-7qx8/GHSA-h78h-f6r8-7qx8.json b/advisories/unreviewed/2022/12/GHSA-h78h-f6r8-7qx8/GHSA-h78h-f6r8-7qx8.json index 61a2b1dcdfb..0d99eefa269 100644 --- a/advisories/unreviewed/2022/12/GHSA-h78h-f6r8-7qx8/GHSA-h78h-f6r8-7qx8.json +++ b/advisories/unreviewed/2022/12/GHSA-h78h-f6r8-7qx8/GHSA-h78h-f6r8-7qx8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h9r3-7w4w-w64j/GHSA-h9r3-7w4w-w64j.json b/advisories/unreviewed/2022/12/GHSA-h9r3-7w4w-w64j/GHSA-h9r3-7w4w-w64j.json index 6c4e718f19f..12568b44a6d 100644 --- a/advisories/unreviewed/2022/12/GHSA-h9r3-7w4w-w64j/GHSA-h9r3-7w4w-w64j.json +++ b/advisories/unreviewed/2022/12/GHSA-h9r3-7w4w-w64j/GHSA-h9r3-7w4w-w64j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-h9vh-vxg7-xmhh/GHSA-h9vh-vxg7-xmhh.json b/advisories/unreviewed/2022/12/GHSA-h9vh-vxg7-xmhh/GHSA-h9vh-vxg7-xmhh.json index 560dd91fae8..ee92fa4bee7 100644 --- a/advisories/unreviewed/2022/12/GHSA-h9vh-vxg7-xmhh/GHSA-h9vh-vxg7-xmhh.json +++ b/advisories/unreviewed/2022/12/GHSA-h9vh-vxg7-xmhh/GHSA-h9vh-vxg7-xmhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-hjxh-7qjw-cvcf/GHSA-hjxh-7qjw-cvcf.json b/advisories/unreviewed/2022/12/GHSA-hjxh-7qjw-cvcf/GHSA-hjxh-7qjw-cvcf.json index 34a25489437..4df7abdede6 100644 --- a/advisories/unreviewed/2022/12/GHSA-hjxh-7qjw-cvcf/GHSA-hjxh-7qjw-cvcf.json +++ b/advisories/unreviewed/2022/12/GHSA-hjxh-7qjw-cvcf/GHSA-hjxh-7qjw-cvcf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-hvf8-35gm-22pj/GHSA-hvf8-35gm-22pj.json b/advisories/unreviewed/2022/12/GHSA-hvf8-35gm-22pj/GHSA-hvf8-35gm-22pj.json index dceb7ddc1ff..2c29f9aa199 100644 --- a/advisories/unreviewed/2022/12/GHSA-hvf8-35gm-22pj/GHSA-hvf8-35gm-22pj.json +++ b/advisories/unreviewed/2022/12/GHSA-hvf8-35gm-22pj/GHSA-hvf8-35gm-22pj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-j26m-pwx8-x5jf/GHSA-j26m-pwx8-x5jf.json b/advisories/unreviewed/2022/12/GHSA-j26m-pwx8-x5jf/GHSA-j26m-pwx8-x5jf.json index b381a595b97..1eb595852bf 100644 --- a/advisories/unreviewed/2022/12/GHSA-j26m-pwx8-x5jf/GHSA-j26m-pwx8-x5jf.json +++ b/advisories/unreviewed/2022/12/GHSA-j26m-pwx8-x5jf/GHSA-j26m-pwx8-x5jf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-j883-m3xr-7482/GHSA-j883-m3xr-7482.json b/advisories/unreviewed/2022/12/GHSA-j883-m3xr-7482/GHSA-j883-m3xr-7482.json index 390494dd226..5e59aabdd48 100644 --- a/advisories/unreviewed/2022/12/GHSA-j883-m3xr-7482/GHSA-j883-m3xr-7482.json +++ b/advisories/unreviewed/2022/12/GHSA-j883-m3xr-7482/GHSA-j883-m3xr-7482.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-jqx9-j9f6-5vqg/GHSA-jqx9-j9f6-5vqg.json b/advisories/unreviewed/2022/12/GHSA-jqx9-j9f6-5vqg/GHSA-jqx9-j9f6-5vqg.json index a9ee8c22ab8..a36b77d7a8c 100644 --- a/advisories/unreviewed/2022/12/GHSA-jqx9-j9f6-5vqg/GHSA-jqx9-j9f6-5vqg.json +++ b/advisories/unreviewed/2022/12/GHSA-jqx9-j9f6-5vqg/GHSA-jqx9-j9f6-5vqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-jx2q-hvww-224r/GHSA-jx2q-hvww-224r.json b/advisories/unreviewed/2022/12/GHSA-jx2q-hvww-224r/GHSA-jx2q-hvww-224r.json index e836bec5555..34143e9d8e2 100644 --- a/advisories/unreviewed/2022/12/GHSA-jx2q-hvww-224r/GHSA-jx2q-hvww-224r.json +++ b/advisories/unreviewed/2022/12/GHSA-jx2q-hvww-224r/GHSA-jx2q-hvww-224r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-jx44-295p-cxpr/GHSA-jx44-295p-cxpr.json b/advisories/unreviewed/2022/12/GHSA-jx44-295p-cxpr/GHSA-jx44-295p-cxpr.json index d3e4ebf7347..04b13994fbe 100644 --- a/advisories/unreviewed/2022/12/GHSA-jx44-295p-cxpr/GHSA-jx44-295p-cxpr.json +++ b/advisories/unreviewed/2022/12/GHSA-jx44-295p-cxpr/GHSA-jx44-295p-cxpr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-m3h7-qq8m-r923/GHSA-m3h7-qq8m-r923.json b/advisories/unreviewed/2022/12/GHSA-m3h7-qq8m-r923/GHSA-m3h7-qq8m-r923.json index 64905abb864..8c5b1017728 100644 --- a/advisories/unreviewed/2022/12/GHSA-m3h7-qq8m-r923/GHSA-m3h7-qq8m-r923.json +++ b/advisories/unreviewed/2022/12/GHSA-m3h7-qq8m-r923/GHSA-m3h7-qq8m-r923.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-mg8g-v5cr-wqjx/GHSA-mg8g-v5cr-wqjx.json b/advisories/unreviewed/2022/12/GHSA-mg8g-v5cr-wqjx/GHSA-mg8g-v5cr-wqjx.json index 550e372777e..63d0104c807 100644 --- a/advisories/unreviewed/2022/12/GHSA-mg8g-v5cr-wqjx/GHSA-mg8g-v5cr-wqjx.json +++ b/advisories/unreviewed/2022/12/GHSA-mg8g-v5cr-wqjx/GHSA-mg8g-v5cr-wqjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-mp96-4frc-r2pg/GHSA-mp96-4frc-r2pg.json b/advisories/unreviewed/2022/12/GHSA-mp96-4frc-r2pg/GHSA-mp96-4frc-r2pg.json index 760f9b58787..e5101c19f4a 100644 --- a/advisories/unreviewed/2022/12/GHSA-mp96-4frc-r2pg/GHSA-mp96-4frc-r2pg.json +++ b/advisories/unreviewed/2022/12/GHSA-mp96-4frc-r2pg/GHSA-mp96-4frc-r2pg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-mpq8-m953-pwhf/GHSA-mpq8-m953-pwhf.json b/advisories/unreviewed/2022/12/GHSA-mpq8-m953-pwhf/GHSA-mpq8-m953-pwhf.json index abc49426a3b..02ff8d12cb6 100644 --- a/advisories/unreviewed/2022/12/GHSA-mpq8-m953-pwhf/GHSA-mpq8-m953-pwhf.json +++ b/advisories/unreviewed/2022/12/GHSA-mpq8-m953-pwhf/GHSA-mpq8-m953-pwhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-mvvf-9255-8c4p/GHSA-mvvf-9255-8c4p.json b/advisories/unreviewed/2022/12/GHSA-mvvf-9255-8c4p/GHSA-mvvf-9255-8c4p.json index b7891244637..d95e79de6fd 100644 --- a/advisories/unreviewed/2022/12/GHSA-mvvf-9255-8c4p/GHSA-mvvf-9255-8c4p.json +++ b/advisories/unreviewed/2022/12/GHSA-mvvf-9255-8c4p/GHSA-mvvf-9255-8c4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-p2g9-fj77-vp3r/GHSA-p2g9-fj77-vp3r.json b/advisories/unreviewed/2022/12/GHSA-p2g9-fj77-vp3r/GHSA-p2g9-fj77-vp3r.json index 4a7abc02b92..e59435d0031 100644 --- a/advisories/unreviewed/2022/12/GHSA-p2g9-fj77-vp3r/GHSA-p2g9-fj77-vp3r.json +++ b/advisories/unreviewed/2022/12/GHSA-p2g9-fj77-vp3r/GHSA-p2g9-fj77-vp3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-pf3w-64p8-hrfr/GHSA-pf3w-64p8-hrfr.json b/advisories/unreviewed/2022/12/GHSA-pf3w-64p8-hrfr/GHSA-pf3w-64p8-hrfr.json index 2c7bf142431..cf2482b1dbe 100644 --- a/advisories/unreviewed/2022/12/GHSA-pf3w-64p8-hrfr/GHSA-pf3w-64p8-hrfr.json +++ b/advisories/unreviewed/2022/12/GHSA-pf3w-64p8-hrfr/GHSA-pf3w-64p8-hrfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-pgf6-c8hm-r5j6/GHSA-pgf6-c8hm-r5j6.json b/advisories/unreviewed/2022/12/GHSA-pgf6-c8hm-r5j6/GHSA-pgf6-c8hm-r5j6.json index b685c0a647d..e7f69fd5fcd 100644 --- a/advisories/unreviewed/2022/12/GHSA-pgf6-c8hm-r5j6/GHSA-pgf6-c8hm-r5j6.json +++ b/advisories/unreviewed/2022/12/GHSA-pgf6-c8hm-r5j6/GHSA-pgf6-c8hm-r5j6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-pp7m-q233-vq86/GHSA-pp7m-q233-vq86.json b/advisories/unreviewed/2022/12/GHSA-pp7m-q233-vq86/GHSA-pp7m-q233-vq86.json index 916d0604a13..f34fd28b6cc 100644 --- a/advisories/unreviewed/2022/12/GHSA-pp7m-q233-vq86/GHSA-pp7m-q233-vq86.json +++ b/advisories/unreviewed/2022/12/GHSA-pp7m-q233-vq86/GHSA-pp7m-q233-vq86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-pvrf-2wf8-jrqv/GHSA-pvrf-2wf8-jrqv.json b/advisories/unreviewed/2022/12/GHSA-pvrf-2wf8-jrqv/GHSA-pvrf-2wf8-jrqv.json index 411e45e359d..105b14def21 100644 --- a/advisories/unreviewed/2022/12/GHSA-pvrf-2wf8-jrqv/GHSA-pvrf-2wf8-jrqv.json +++ b/advisories/unreviewed/2022/12/GHSA-pvrf-2wf8-jrqv/GHSA-pvrf-2wf8-jrqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-q28p-82xj-hwh7/GHSA-q28p-82xj-hwh7.json b/advisories/unreviewed/2022/12/GHSA-q28p-82xj-hwh7/GHSA-q28p-82xj-hwh7.json index 983de348fbc..8aeb2a659df 100644 --- a/advisories/unreviewed/2022/12/GHSA-q28p-82xj-hwh7/GHSA-q28p-82xj-hwh7.json +++ b/advisories/unreviewed/2022/12/GHSA-q28p-82xj-hwh7/GHSA-q28p-82xj-hwh7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-q3hj-8gmm-3pv5/GHSA-q3hj-8gmm-3pv5.json b/advisories/unreviewed/2022/12/GHSA-q3hj-8gmm-3pv5/GHSA-q3hj-8gmm-3pv5.json index 108bfceb65b..41f800c28fc 100644 --- a/advisories/unreviewed/2022/12/GHSA-q3hj-8gmm-3pv5/GHSA-q3hj-8gmm-3pv5.json +++ b/advisories/unreviewed/2022/12/GHSA-q3hj-8gmm-3pv5/GHSA-q3hj-8gmm-3pv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-q57v-m3mv-29f2/GHSA-q57v-m3mv-29f2.json b/advisories/unreviewed/2022/12/GHSA-q57v-m3mv-29f2/GHSA-q57v-m3mv-29f2.json index f57defa25e2..ae0fc8ac40d 100644 --- a/advisories/unreviewed/2022/12/GHSA-q57v-m3mv-29f2/GHSA-q57v-m3mv-29f2.json +++ b/advisories/unreviewed/2022/12/GHSA-q57v-m3mv-29f2/GHSA-q57v-m3mv-29f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-q8mg-4pqp-mqr6/GHSA-q8mg-4pqp-mqr6.json b/advisories/unreviewed/2022/12/GHSA-q8mg-4pqp-mqr6/GHSA-q8mg-4pqp-mqr6.json index ed18a6de5e3..0ff30120ca6 100644 --- a/advisories/unreviewed/2022/12/GHSA-q8mg-4pqp-mqr6/GHSA-q8mg-4pqp-mqr6.json +++ b/advisories/unreviewed/2022/12/GHSA-q8mg-4pqp-mqr6/GHSA-q8mg-4pqp-mqr6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-qffr-cvph-655f/GHSA-qffr-cvph-655f.json b/advisories/unreviewed/2022/12/GHSA-qffr-cvph-655f/GHSA-qffr-cvph-655f.json index 694b7f8f456..6c5aa78b12d 100644 --- a/advisories/unreviewed/2022/12/GHSA-qffr-cvph-655f/GHSA-qffr-cvph-655f.json +++ b/advisories/unreviewed/2022/12/GHSA-qffr-cvph-655f/GHSA-qffr-cvph-655f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-qh3h-3m3c-wrh8/GHSA-qh3h-3m3c-wrh8.json b/advisories/unreviewed/2022/12/GHSA-qh3h-3m3c-wrh8/GHSA-qh3h-3m3c-wrh8.json index ac09c927851..cb5f42a1bcf 100644 --- a/advisories/unreviewed/2022/12/GHSA-qh3h-3m3c-wrh8/GHSA-qh3h-3m3c-wrh8.json +++ b/advisories/unreviewed/2022/12/GHSA-qh3h-3m3c-wrh8/GHSA-qh3h-3m3c-wrh8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-qjmp-r857-4762/GHSA-qjmp-r857-4762.json b/advisories/unreviewed/2022/12/GHSA-qjmp-r857-4762/GHSA-qjmp-r857-4762.json index 15fc4e86ab8..1d1f3413501 100644 --- a/advisories/unreviewed/2022/12/GHSA-qjmp-r857-4762/GHSA-qjmp-r857-4762.json +++ b/advisories/unreviewed/2022/12/GHSA-qjmp-r857-4762/GHSA-qjmp-r857-4762.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-qm5f-gm4h-wq94/GHSA-qm5f-gm4h-wq94.json b/advisories/unreviewed/2022/12/GHSA-qm5f-gm4h-wq94/GHSA-qm5f-gm4h-wq94.json index d537f283d69..a99ed2bc021 100644 --- a/advisories/unreviewed/2022/12/GHSA-qm5f-gm4h-wq94/GHSA-qm5f-gm4h-wq94.json +++ b/advisories/unreviewed/2022/12/GHSA-qm5f-gm4h-wq94/GHSA-qm5f-gm4h-wq94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-r7xp-c243-63mm/GHSA-r7xp-c243-63mm.json b/advisories/unreviewed/2022/12/GHSA-r7xp-c243-63mm/GHSA-r7xp-c243-63mm.json index 9467e1efc57..89bc2b1b08d 100644 --- a/advisories/unreviewed/2022/12/GHSA-r7xp-c243-63mm/GHSA-r7xp-c243-63mm.json +++ b/advisories/unreviewed/2022/12/GHSA-r7xp-c243-63mm/GHSA-r7xp-c243-63mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-rc2m-q589-vpqx/GHSA-rc2m-q589-vpqx.json b/advisories/unreviewed/2022/12/GHSA-rc2m-q589-vpqx/GHSA-rc2m-q589-vpqx.json index fbad498fe05..6a35730066f 100644 --- a/advisories/unreviewed/2022/12/GHSA-rc2m-q589-vpqx/GHSA-rc2m-q589-vpqx.json +++ b/advisories/unreviewed/2022/12/GHSA-rc2m-q589-vpqx/GHSA-rc2m-q589-vpqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-rgc4-35vf-wqw6/GHSA-rgc4-35vf-wqw6.json b/advisories/unreviewed/2022/12/GHSA-rgc4-35vf-wqw6/GHSA-rgc4-35vf-wqw6.json index 71abc8f3823..bdb18434aeb 100644 --- a/advisories/unreviewed/2022/12/GHSA-rgc4-35vf-wqw6/GHSA-rgc4-35vf-wqw6.json +++ b/advisories/unreviewed/2022/12/GHSA-rgc4-35vf-wqw6/GHSA-rgc4-35vf-wqw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-rj77-m66j-h24w/GHSA-rj77-m66j-h24w.json b/advisories/unreviewed/2022/12/GHSA-rj77-m66j-h24w/GHSA-rj77-m66j-h24w.json index d4a9a3a3dae..4a056221a7c 100644 --- a/advisories/unreviewed/2022/12/GHSA-rj77-m66j-h24w/GHSA-rj77-m66j-h24w.json +++ b/advisories/unreviewed/2022/12/GHSA-rj77-m66j-h24w/GHSA-rj77-m66j-h24w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-vcmf-vf48-7jqp/GHSA-vcmf-vf48-7jqp.json b/advisories/unreviewed/2022/12/GHSA-vcmf-vf48-7jqp/GHSA-vcmf-vf48-7jqp.json index 2af921a4945..d56238c4c0a 100644 --- a/advisories/unreviewed/2022/12/GHSA-vcmf-vf48-7jqp/GHSA-vcmf-vf48-7jqp.json +++ b/advisories/unreviewed/2022/12/GHSA-vcmf-vf48-7jqp/GHSA-vcmf-vf48-7jqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-vq96-hjjp-w987/GHSA-vq96-hjjp-w987.json b/advisories/unreviewed/2022/12/GHSA-vq96-hjjp-w987/GHSA-vq96-hjjp-w987.json index 4e9e141e5d9..aa3bd1ef570 100644 --- a/advisories/unreviewed/2022/12/GHSA-vq96-hjjp-w987/GHSA-vq96-hjjp-w987.json +++ b/advisories/unreviewed/2022/12/GHSA-vq96-hjjp-w987/GHSA-vq96-hjjp-w987.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-vr8w-grw2-mv66/GHSA-vr8w-grw2-mv66.json b/advisories/unreviewed/2022/12/GHSA-vr8w-grw2-mv66/GHSA-vr8w-grw2-mv66.json index c683c7f7ef4..ee4c302d9d2 100644 --- a/advisories/unreviewed/2022/12/GHSA-vr8w-grw2-mv66/GHSA-vr8w-grw2-mv66.json +++ b/advisories/unreviewed/2022/12/GHSA-vr8w-grw2-mv66/GHSA-vr8w-grw2-mv66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-vv55-64q4-h5fj/GHSA-vv55-64q4-h5fj.json b/advisories/unreviewed/2022/12/GHSA-vv55-64q4-h5fj/GHSA-vv55-64q4-h5fj.json index 98c1bbd6f75..e7f760e4afe 100644 --- a/advisories/unreviewed/2022/12/GHSA-vv55-64q4-h5fj/GHSA-vv55-64q4-h5fj.json +++ b/advisories/unreviewed/2022/12/GHSA-vv55-64q4-h5fj/GHSA-vv55-64q4-h5fj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-w333-9jrf-6g2w/GHSA-w333-9jrf-6g2w.json b/advisories/unreviewed/2022/12/GHSA-w333-9jrf-6g2w/GHSA-w333-9jrf-6g2w.json index 591eb3edfcd..66cd14525eb 100644 --- a/advisories/unreviewed/2022/12/GHSA-w333-9jrf-6g2w/GHSA-w333-9jrf-6g2w.json +++ b/advisories/unreviewed/2022/12/GHSA-w333-9jrf-6g2w/GHSA-w333-9jrf-6g2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-w37q-2fxc-mhhr/GHSA-w37q-2fxc-mhhr.json b/advisories/unreviewed/2022/12/GHSA-w37q-2fxc-mhhr/GHSA-w37q-2fxc-mhhr.json index fece900939b..f5adbde8cde 100644 --- a/advisories/unreviewed/2022/12/GHSA-w37q-2fxc-mhhr/GHSA-w37q-2fxc-mhhr.json +++ b/advisories/unreviewed/2022/12/GHSA-w37q-2fxc-mhhr/GHSA-w37q-2fxc-mhhr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-w44g-v7w6-xpcv/GHSA-w44g-v7w6-xpcv.json b/advisories/unreviewed/2022/12/GHSA-w44g-v7w6-xpcv/GHSA-w44g-v7w6-xpcv.json index d076bea93df..b79a2e158fb 100644 --- a/advisories/unreviewed/2022/12/GHSA-w44g-v7w6-xpcv/GHSA-w44g-v7w6-xpcv.json +++ b/advisories/unreviewed/2022/12/GHSA-w44g-v7w6-xpcv/GHSA-w44g-v7w6-xpcv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-w47p-6xf6-x3pf/GHSA-w47p-6xf6-x3pf.json b/advisories/unreviewed/2022/12/GHSA-w47p-6xf6-x3pf/GHSA-w47p-6xf6-x3pf.json index 4f1d7b6bcde..9724810d7e4 100644 --- a/advisories/unreviewed/2022/12/GHSA-w47p-6xf6-x3pf/GHSA-w47p-6xf6-x3pf.json +++ b/advisories/unreviewed/2022/12/GHSA-w47p-6xf6-x3pf/GHSA-w47p-6xf6-x3pf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-w63f-86wf-7jwc/GHSA-w63f-86wf-7jwc.json b/advisories/unreviewed/2022/12/GHSA-w63f-86wf-7jwc/GHSA-w63f-86wf-7jwc.json index c23b2d85b6b..11815126f96 100644 --- a/advisories/unreviewed/2022/12/GHSA-w63f-86wf-7jwc/GHSA-w63f-86wf-7jwc.json +++ b/advisories/unreviewed/2022/12/GHSA-w63f-86wf-7jwc/GHSA-w63f-86wf-7jwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-wcq6-r5g5-crr8/GHSA-wcq6-r5g5-crr8.json b/advisories/unreviewed/2022/12/GHSA-wcq6-r5g5-crr8/GHSA-wcq6-r5g5-crr8.json index 7292c9de2df..4621a354886 100644 --- a/advisories/unreviewed/2022/12/GHSA-wcq6-r5g5-crr8/GHSA-wcq6-r5g5-crr8.json +++ b/advisories/unreviewed/2022/12/GHSA-wcq6-r5g5-crr8/GHSA-wcq6-r5g5-crr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-wr67-67pq-fp4r/GHSA-wr67-67pq-fp4r.json b/advisories/unreviewed/2022/12/GHSA-wr67-67pq-fp4r/GHSA-wr67-67pq-fp4r.json index 46a874c9961..db17a9d24a5 100644 --- a/advisories/unreviewed/2022/12/GHSA-wr67-67pq-fp4r/GHSA-wr67-67pq-fp4r.json +++ b/advisories/unreviewed/2022/12/GHSA-wr67-67pq-fp4r/GHSA-wr67-67pq-fp4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-wrfx-qxxc-92rj/GHSA-wrfx-qxxc-92rj.json b/advisories/unreviewed/2022/12/GHSA-wrfx-qxxc-92rj/GHSA-wrfx-qxxc-92rj.json index a2f4db57af4..19a0a32963f 100644 --- a/advisories/unreviewed/2022/12/GHSA-wrfx-qxxc-92rj/GHSA-wrfx-qxxc-92rj.json +++ b/advisories/unreviewed/2022/12/GHSA-wrfx-qxxc-92rj/GHSA-wrfx-qxxc-92rj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xc7c-j6xx-gfqj/GHSA-xc7c-j6xx-gfqj.json b/advisories/unreviewed/2022/12/GHSA-xc7c-j6xx-gfqj/GHSA-xc7c-j6xx-gfqj.json index cdcbb637e8b..fb03e9de7d5 100644 --- a/advisories/unreviewed/2022/12/GHSA-xc7c-j6xx-gfqj/GHSA-xc7c-j6xx-gfqj.json +++ b/advisories/unreviewed/2022/12/GHSA-xc7c-j6xx-gfqj/GHSA-xc7c-j6xx-gfqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-xfm5-pq6w-fhvh/GHSA-xfm5-pq6w-fhvh.json b/advisories/unreviewed/2022/12/GHSA-xfm5-pq6w-fhvh/GHSA-xfm5-pq6w-fhvh.json index 77ceb53c1bf..aba4ebaf7e5 100644 --- a/advisories/unreviewed/2022/12/GHSA-xfm5-pq6w-fhvh/GHSA-xfm5-pq6w-fhvh.json +++ b/advisories/unreviewed/2022/12/GHSA-xfm5-pq6w-fhvh/GHSA-xfm5-pq6w-fhvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xfwv-95wj-h3jj/GHSA-xfwv-95wj-h3jj.json b/advisories/unreviewed/2022/12/GHSA-xfwv-95wj-h3jj/GHSA-xfwv-95wj-h3jj.json index 47c81644cc4..6db072287b1 100644 --- a/advisories/unreviewed/2022/12/GHSA-xfwv-95wj-h3jj/GHSA-xfwv-95wj-h3jj.json +++ b/advisories/unreviewed/2022/12/GHSA-xfwv-95wj-h3jj/GHSA-xfwv-95wj-h3jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -59,9 +57,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-xjrp-9qff-8prg/GHSA-xjrp-9qff-8prg.json b/advisories/unreviewed/2022/12/GHSA-xjrp-9qff-8prg/GHSA-xjrp-9qff-8prg.json index dde24e7b108..fa5c96fb8bc 100644 --- a/advisories/unreviewed/2022/12/GHSA-xjrp-9qff-8prg/GHSA-xjrp-9qff-8prg.json +++ b/advisories/unreviewed/2022/12/GHSA-xjrp-9qff-8prg/GHSA-xjrp-9qff-8prg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xrrq-xrcm-893x/GHSA-xrrq-xrcm-893x.json b/advisories/unreviewed/2022/12/GHSA-xrrq-xrcm-893x/GHSA-xrrq-xrcm-893x.json index de79791bcdb..29e1b0f9506 100644 --- a/advisories/unreviewed/2022/12/GHSA-xrrq-xrcm-893x/GHSA-xrrq-xrcm-893x.json +++ b/advisories/unreviewed/2022/12/GHSA-xrrq-xrcm-893x/GHSA-xrrq-xrcm-893x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-xv2w-x5xm-9j74/GHSA-xv2w-x5xm-9j74.json b/advisories/unreviewed/2022/12/GHSA-xv2w-x5xm-9j74/GHSA-xv2w-x5xm-9j74.json index d15eadd2776..beb5dbba881 100644 --- a/advisories/unreviewed/2022/12/GHSA-xv2w-x5xm-9j74/GHSA-xv2w-x5xm-9j74.json +++ b/advisories/unreviewed/2022/12/GHSA-xv2w-x5xm-9j74/GHSA-xv2w-x5xm-9j74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xw27-78pr-xvhr/GHSA-xw27-78pr-xvhr.json b/advisories/unreviewed/2022/12/GHSA-xw27-78pr-xvhr/GHSA-xw27-78pr-xvhr.json index 5354e29be88..756d762b9c2 100644 --- a/advisories/unreviewed/2022/12/GHSA-xw27-78pr-xvhr/GHSA-xw27-78pr-xvhr.json +++ b/advisories/unreviewed/2022/12/GHSA-xw27-78pr-xvhr/GHSA-xw27-78pr-xvhr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-56x3-c65v-wgm6/GHSA-56x3-c65v-wgm6.json b/advisories/unreviewed/2023/01/GHSA-56x3-c65v-wgm6/GHSA-56x3-c65v-wgm6.json index f27d30fd317..24863f871ec 100644 --- a/advisories/unreviewed/2023/01/GHSA-56x3-c65v-wgm6/GHSA-56x3-c65v-wgm6.json +++ b/advisories/unreviewed/2023/01/GHSA-56x3-c65v-wgm6/GHSA-56x3-c65v-wgm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-8vjx-3vgx-66mx/GHSA-8vjx-3vgx-66mx.json b/advisories/unreviewed/2023/01/GHSA-8vjx-3vgx-66mx/GHSA-8vjx-3vgx-66mx.json index 2508ea816f6..99bc80fb883 100644 --- a/advisories/unreviewed/2023/01/GHSA-8vjx-3vgx-66mx/GHSA-8vjx-3vgx-66mx.json +++ b/advisories/unreviewed/2023/01/GHSA-8vjx-3vgx-66mx/GHSA-8vjx-3vgx-66mx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-9vv4-3cf7-mqqr/GHSA-9vv4-3cf7-mqqr.json b/advisories/unreviewed/2023/01/GHSA-9vv4-3cf7-mqqr/GHSA-9vv4-3cf7-mqqr.json index b31d1df8f47..0896858aeac 100644 --- a/advisories/unreviewed/2023/01/GHSA-9vv4-3cf7-mqqr/GHSA-9vv4-3cf7-mqqr.json +++ b/advisories/unreviewed/2023/01/GHSA-9vv4-3cf7-mqqr/GHSA-9vv4-3cf7-mqqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-chp6-wqp3-f3gg/GHSA-chp6-wqp3-f3gg.json b/advisories/unreviewed/2023/01/GHSA-chp6-wqp3-f3gg/GHSA-chp6-wqp3-f3gg.json index bf914c82180..748d2999ba2 100644 --- a/advisories/unreviewed/2023/01/GHSA-chp6-wqp3-f3gg/GHSA-chp6-wqp3-f3gg.json +++ b/advisories/unreviewed/2023/01/GHSA-chp6-wqp3-f3gg/GHSA-chp6-wqp3-f3gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-f8pg-xh9p-5mpv/GHSA-f8pg-xh9p-5mpv.json b/advisories/unreviewed/2023/01/GHSA-f8pg-xh9p-5mpv/GHSA-f8pg-xh9p-5mpv.json index fe3770745a6..28be381c442 100644 --- a/advisories/unreviewed/2023/01/GHSA-f8pg-xh9p-5mpv/GHSA-f8pg-xh9p-5mpv.json +++ b/advisories/unreviewed/2023/01/GHSA-f8pg-xh9p-5mpv/GHSA-f8pg-xh9p-5mpv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-q25v-3p3w-wxwr/GHSA-q25v-3p3w-wxwr.json b/advisories/unreviewed/2023/01/GHSA-q25v-3p3w-wxwr/GHSA-q25v-3p3w-wxwr.json index b8eb57e6295..00a2afa08c1 100644 --- a/advisories/unreviewed/2023/01/GHSA-q25v-3p3w-wxwr/GHSA-q25v-3p3w-wxwr.json +++ b/advisories/unreviewed/2023/01/GHSA-q25v-3p3w-wxwr/GHSA-q25v-3p3w-wxwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-q9fx-28x4-vj3r/GHSA-q9fx-28x4-vj3r.json b/advisories/unreviewed/2023/01/GHSA-q9fx-28x4-vj3r/GHSA-q9fx-28x4-vj3r.json index 220adc31403..06c616d8292 100644 --- a/advisories/unreviewed/2023/01/GHSA-q9fx-28x4-vj3r/GHSA-q9fx-28x4-vj3r.json +++ b/advisories/unreviewed/2023/01/GHSA-q9fx-28x4-vj3r/GHSA-q9fx-28x4-vj3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-qfcc-2wxx-3qm9/GHSA-qfcc-2wxx-3qm9.json b/advisories/unreviewed/2023/01/GHSA-qfcc-2wxx-3qm9/GHSA-qfcc-2wxx-3qm9.json index 8eba4cc1f06..fc782bb0986 100644 --- a/advisories/unreviewed/2023/01/GHSA-qfcc-2wxx-3qm9/GHSA-qfcc-2wxx-3qm9.json +++ b/advisories/unreviewed/2023/01/GHSA-qfcc-2wxx-3qm9/GHSA-qfcc-2wxx-3qm9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-v24x-rp9v-pm6r/GHSA-v24x-rp9v-pm6r.json b/advisories/unreviewed/2023/01/GHSA-v24x-rp9v-pm6r/GHSA-v24x-rp9v-pm6r.json index c790df2d169..7e2b4408d43 100644 --- a/advisories/unreviewed/2023/01/GHSA-v24x-rp9v-pm6r/GHSA-v24x-rp9v-pm6r.json +++ b/advisories/unreviewed/2023/01/GHSA-v24x-rp9v-pm6r/GHSA-v24x-rp9v-pm6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-249j-wgjq-35gx/GHSA-249j-wgjq-35gx.json b/advisories/unreviewed/2023/02/GHSA-249j-wgjq-35gx/GHSA-249j-wgjq-35gx.json index 7d403a1cb15..01fe61f5089 100644 --- a/advisories/unreviewed/2023/02/GHSA-249j-wgjq-35gx/GHSA-249j-wgjq-35gx.json +++ b/advisories/unreviewed/2023/02/GHSA-249j-wgjq-35gx/GHSA-249j-wgjq-35gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2ffj-9mcf-rmj4/GHSA-2ffj-9mcf-rmj4.json b/advisories/unreviewed/2023/02/GHSA-2ffj-9mcf-rmj4/GHSA-2ffj-9mcf-rmj4.json index d542acc300e..91d3f83f7b9 100644 --- a/advisories/unreviewed/2023/02/GHSA-2ffj-9mcf-rmj4/GHSA-2ffj-9mcf-rmj4.json +++ b/advisories/unreviewed/2023/02/GHSA-2ffj-9mcf-rmj4/GHSA-2ffj-9mcf-rmj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2g67-jw5m-244m/GHSA-2g67-jw5m-244m.json b/advisories/unreviewed/2023/02/GHSA-2g67-jw5m-244m/GHSA-2g67-jw5m-244m.json index 78f623023be..3bf4be51e7b 100644 --- a/advisories/unreviewed/2023/02/GHSA-2g67-jw5m-244m/GHSA-2g67-jw5m-244m.json +++ b/advisories/unreviewed/2023/02/GHSA-2g67-jw5m-244m/GHSA-2g67-jw5m-244m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2vqp-59qv-pmrc/GHSA-2vqp-59qv-pmrc.json b/advisories/unreviewed/2023/02/GHSA-2vqp-59qv-pmrc/GHSA-2vqp-59qv-pmrc.json index d10fd5d69ce..d9613e62c63 100644 --- a/advisories/unreviewed/2023/02/GHSA-2vqp-59qv-pmrc/GHSA-2vqp-59qv-pmrc.json +++ b/advisories/unreviewed/2023/02/GHSA-2vqp-59qv-pmrc/GHSA-2vqp-59qv-pmrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-38h3-jcwf-hx88/GHSA-38h3-jcwf-hx88.json b/advisories/unreviewed/2023/02/GHSA-38h3-jcwf-hx88/GHSA-38h3-jcwf-hx88.json index 02d2c76ae71..a261639dd8e 100644 --- a/advisories/unreviewed/2023/02/GHSA-38h3-jcwf-hx88/GHSA-38h3-jcwf-hx88.json +++ b/advisories/unreviewed/2023/02/GHSA-38h3-jcwf-hx88/GHSA-38h3-jcwf-hx88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-38wr-pjxc-vgf7/GHSA-38wr-pjxc-vgf7.json b/advisories/unreviewed/2023/02/GHSA-38wr-pjxc-vgf7/GHSA-38wr-pjxc-vgf7.json index b90697b2030..3deab4032a7 100644 --- a/advisories/unreviewed/2023/02/GHSA-38wr-pjxc-vgf7/GHSA-38wr-pjxc-vgf7.json +++ b/advisories/unreviewed/2023/02/GHSA-38wr-pjxc-vgf7/GHSA-38wr-pjxc-vgf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-3x3j-cw3j-2xvc/GHSA-3x3j-cw3j-2xvc.json b/advisories/unreviewed/2023/02/GHSA-3x3j-cw3j-2xvc/GHSA-3x3j-cw3j-2xvc.json index a6a25194093..33ceab79887 100644 --- a/advisories/unreviewed/2023/02/GHSA-3x3j-cw3j-2xvc/GHSA-3x3j-cw3j-2xvc.json +++ b/advisories/unreviewed/2023/02/GHSA-3x3j-cw3j-2xvc/GHSA-3x3j-cw3j-2xvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-44gw-qhmf-cxr6/GHSA-44gw-qhmf-cxr6.json b/advisories/unreviewed/2023/02/GHSA-44gw-qhmf-cxr6/GHSA-44gw-qhmf-cxr6.json index 1a9e008a3a9..151cb24280d 100644 --- a/advisories/unreviewed/2023/02/GHSA-44gw-qhmf-cxr6/GHSA-44gw-qhmf-cxr6.json +++ b/advisories/unreviewed/2023/02/GHSA-44gw-qhmf-cxr6/GHSA-44gw-qhmf-cxr6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-48x7-56r4-ghvr/GHSA-48x7-56r4-ghvr.json b/advisories/unreviewed/2023/02/GHSA-48x7-56r4-ghvr/GHSA-48x7-56r4-ghvr.json index 52a68d30488..21d6f860918 100644 --- a/advisories/unreviewed/2023/02/GHSA-48x7-56r4-ghvr/GHSA-48x7-56r4-ghvr.json +++ b/advisories/unreviewed/2023/02/GHSA-48x7-56r4-ghvr/GHSA-48x7-56r4-ghvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4g9q-c75g-jq7q/GHSA-4g9q-c75g-jq7q.json b/advisories/unreviewed/2023/02/GHSA-4g9q-c75g-jq7q/GHSA-4g9q-c75g-jq7q.json index 45d0cdd0690..02523c57936 100644 --- a/advisories/unreviewed/2023/02/GHSA-4g9q-c75g-jq7q/GHSA-4g9q-c75g-jq7q.json +++ b/advisories/unreviewed/2023/02/GHSA-4g9q-c75g-jq7q/GHSA-4g9q-c75g-jq7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-54c3-8q97-jg7f/GHSA-54c3-8q97-jg7f.json b/advisories/unreviewed/2023/02/GHSA-54c3-8q97-jg7f/GHSA-54c3-8q97-jg7f.json index 1de14d38723..03d240aaccc 100644 --- a/advisories/unreviewed/2023/02/GHSA-54c3-8q97-jg7f/GHSA-54c3-8q97-jg7f.json +++ b/advisories/unreviewed/2023/02/GHSA-54c3-8q97-jg7f/GHSA-54c3-8q97-jg7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5mjw-jcv9-j39q/GHSA-5mjw-jcv9-j39q.json b/advisories/unreviewed/2023/02/GHSA-5mjw-jcv9-j39q/GHSA-5mjw-jcv9-j39q.json index 3bb50b7c020..3957a037fdc 100644 --- a/advisories/unreviewed/2023/02/GHSA-5mjw-jcv9-j39q/GHSA-5mjw-jcv9-j39q.json +++ b/advisories/unreviewed/2023/02/GHSA-5mjw-jcv9-j39q/GHSA-5mjw-jcv9-j39q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5mv2-w7gr-rp48/GHSA-5mv2-w7gr-rp48.json b/advisories/unreviewed/2023/02/GHSA-5mv2-w7gr-rp48/GHSA-5mv2-w7gr-rp48.json index e4d0854c5e5..589f4cadfaa 100644 --- a/advisories/unreviewed/2023/02/GHSA-5mv2-w7gr-rp48/GHSA-5mv2-w7gr-rp48.json +++ b/advisories/unreviewed/2023/02/GHSA-5mv2-w7gr-rp48/GHSA-5mv2-w7gr-rp48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5rfp-9wcc-x567/GHSA-5rfp-9wcc-x567.json b/advisories/unreviewed/2023/02/GHSA-5rfp-9wcc-x567/GHSA-5rfp-9wcc-x567.json index 4565778b63b..d6df1fc7fa5 100644 --- a/advisories/unreviewed/2023/02/GHSA-5rfp-9wcc-x567/GHSA-5rfp-9wcc-x567.json +++ b/advisories/unreviewed/2023/02/GHSA-5rfp-9wcc-x567/GHSA-5rfp-9wcc-x567.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-62wp-583h-jvfj/GHSA-62wp-583h-jvfj.json b/advisories/unreviewed/2023/02/GHSA-62wp-583h-jvfj/GHSA-62wp-583h-jvfj.json index 1cbd75e545c..bcae31fcae3 100644 --- a/advisories/unreviewed/2023/02/GHSA-62wp-583h-jvfj/GHSA-62wp-583h-jvfj.json +++ b/advisories/unreviewed/2023/02/GHSA-62wp-583h-jvfj/GHSA-62wp-583h-jvfj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-63hw-pp24-qp9g/GHSA-63hw-pp24-qp9g.json b/advisories/unreviewed/2023/02/GHSA-63hw-pp24-qp9g/GHSA-63hw-pp24-qp9g.json index bc8780f2f6e..f6b7ac4432b 100644 --- a/advisories/unreviewed/2023/02/GHSA-63hw-pp24-qp9g/GHSA-63hw-pp24-qp9g.json +++ b/advisories/unreviewed/2023/02/GHSA-63hw-pp24-qp9g/GHSA-63hw-pp24-qp9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6456-w9r7-rrr3/GHSA-6456-w9r7-rrr3.json b/advisories/unreviewed/2023/02/GHSA-6456-w9r7-rrr3/GHSA-6456-w9r7-rrr3.json index 3bda950bd5f..56e0b06bb15 100644 --- a/advisories/unreviewed/2023/02/GHSA-6456-w9r7-rrr3/GHSA-6456-w9r7-rrr3.json +++ b/advisories/unreviewed/2023/02/GHSA-6456-w9r7-rrr3/GHSA-6456-w9r7-rrr3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6m3c-9c9q-f5w3/GHSA-6m3c-9c9q-f5w3.json b/advisories/unreviewed/2023/02/GHSA-6m3c-9c9q-f5w3/GHSA-6m3c-9c9q-f5w3.json index 9725556df6c..2ca956a9f96 100644 --- a/advisories/unreviewed/2023/02/GHSA-6m3c-9c9q-f5w3/GHSA-6m3c-9c9q-f5w3.json +++ b/advisories/unreviewed/2023/02/GHSA-6m3c-9c9q-f5w3/GHSA-6m3c-9c9q-f5w3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6pp9-jxr4-jhff/GHSA-6pp9-jxr4-jhff.json b/advisories/unreviewed/2023/02/GHSA-6pp9-jxr4-jhff/GHSA-6pp9-jxr4-jhff.json index 193579c4c46..1abe49b65d9 100644 --- a/advisories/unreviewed/2023/02/GHSA-6pp9-jxr4-jhff/GHSA-6pp9-jxr4-jhff.json +++ b/advisories/unreviewed/2023/02/GHSA-6pp9-jxr4-jhff/GHSA-6pp9-jxr4-jhff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6rp7-j84j-5hw3/GHSA-6rp7-j84j-5hw3.json b/advisories/unreviewed/2023/02/GHSA-6rp7-j84j-5hw3/GHSA-6rp7-j84j-5hw3.json index d79960430ae..2b262bb8929 100644 --- a/advisories/unreviewed/2023/02/GHSA-6rp7-j84j-5hw3/GHSA-6rp7-j84j-5hw3.json +++ b/advisories/unreviewed/2023/02/GHSA-6rp7-j84j-5hw3/GHSA-6rp7-j84j-5hw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6vj8-jgwx-4v5m/GHSA-6vj8-jgwx-4v5m.json b/advisories/unreviewed/2023/02/GHSA-6vj8-jgwx-4v5m/GHSA-6vj8-jgwx-4v5m.json index 6fb770f75f3..3f6ed8ee003 100644 --- a/advisories/unreviewed/2023/02/GHSA-6vj8-jgwx-4v5m/GHSA-6vj8-jgwx-4v5m.json +++ b/advisories/unreviewed/2023/02/GHSA-6vj8-jgwx-4v5m/GHSA-6vj8-jgwx-4v5m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6xhf-mqx5-rvvc/GHSA-6xhf-mqx5-rvvc.json b/advisories/unreviewed/2023/02/GHSA-6xhf-mqx5-rvvc/GHSA-6xhf-mqx5-rvvc.json index 1b00e3f9fb4..ed1d1ec4860 100644 --- a/advisories/unreviewed/2023/02/GHSA-6xhf-mqx5-rvvc/GHSA-6xhf-mqx5-rvvc.json +++ b/advisories/unreviewed/2023/02/GHSA-6xhf-mqx5-rvvc/GHSA-6xhf-mqx5-rvvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-76mf-j946-5j78/GHSA-76mf-j946-5j78.json b/advisories/unreviewed/2023/02/GHSA-76mf-j946-5j78/GHSA-76mf-j946-5j78.json index b8148845e10..f597f738c8d 100644 --- a/advisories/unreviewed/2023/02/GHSA-76mf-j946-5j78/GHSA-76mf-j946-5j78.json +++ b/advisories/unreviewed/2023/02/GHSA-76mf-j946-5j78/GHSA-76mf-j946-5j78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-779r-j7j2-phgg/GHSA-779r-j7j2-phgg.json b/advisories/unreviewed/2023/02/GHSA-779r-j7j2-phgg/GHSA-779r-j7j2-phgg.json index fb8413bda20..5a495b28102 100644 --- a/advisories/unreviewed/2023/02/GHSA-779r-j7j2-phgg/GHSA-779r-j7j2-phgg.json +++ b/advisories/unreviewed/2023/02/GHSA-779r-j7j2-phgg/GHSA-779r-j7j2-phgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-79mx-rhh3-5q48/GHSA-79mx-rhh3-5q48.json b/advisories/unreviewed/2023/02/GHSA-79mx-rhh3-5q48/GHSA-79mx-rhh3-5q48.json index 897cbbc1c1c..8395e364d69 100644 --- a/advisories/unreviewed/2023/02/GHSA-79mx-rhh3-5q48/GHSA-79mx-rhh3-5q48.json +++ b/advisories/unreviewed/2023/02/GHSA-79mx-rhh3-5q48/GHSA-79mx-rhh3-5q48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7h5p-8574-8649/GHSA-7h5p-8574-8649.json b/advisories/unreviewed/2023/02/GHSA-7h5p-8574-8649/GHSA-7h5p-8574-8649.json index 16bd1281799..e7e5bf5260d 100644 --- a/advisories/unreviewed/2023/02/GHSA-7h5p-8574-8649/GHSA-7h5p-8574-8649.json +++ b/advisories/unreviewed/2023/02/GHSA-7h5p-8574-8649/GHSA-7h5p-8574-8649.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7pfv-9vwr-6hpx/GHSA-7pfv-9vwr-6hpx.json b/advisories/unreviewed/2023/02/GHSA-7pfv-9vwr-6hpx/GHSA-7pfv-9vwr-6hpx.json index eddcd8f12d2..a65d15d076e 100644 --- a/advisories/unreviewed/2023/02/GHSA-7pfv-9vwr-6hpx/GHSA-7pfv-9vwr-6hpx.json +++ b/advisories/unreviewed/2023/02/GHSA-7pfv-9vwr-6hpx/GHSA-7pfv-9vwr-6hpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7ww4-cv6m-hr7c/GHSA-7ww4-cv6m-hr7c.json b/advisories/unreviewed/2023/02/GHSA-7ww4-cv6m-hr7c/GHSA-7ww4-cv6m-hr7c.json index 96fae54b2f7..e2c8359cd27 100644 --- a/advisories/unreviewed/2023/02/GHSA-7ww4-cv6m-hr7c/GHSA-7ww4-cv6m-hr7c.json +++ b/advisories/unreviewed/2023/02/GHSA-7ww4-cv6m-hr7c/GHSA-7ww4-cv6m-hr7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-83vx-xm77-c4mm/GHSA-83vx-xm77-c4mm.json b/advisories/unreviewed/2023/02/GHSA-83vx-xm77-c4mm/GHSA-83vx-xm77-c4mm.json index a308fc7d2dc..6c3e3711835 100644 --- a/advisories/unreviewed/2023/02/GHSA-83vx-xm77-c4mm/GHSA-83vx-xm77-c4mm.json +++ b/advisories/unreviewed/2023/02/GHSA-83vx-xm77-c4mm/GHSA-83vx-xm77-c4mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-845f-mm4h-2239/GHSA-845f-mm4h-2239.json b/advisories/unreviewed/2023/02/GHSA-845f-mm4h-2239/GHSA-845f-mm4h-2239.json index 68dee51c173..e36a1879016 100644 --- a/advisories/unreviewed/2023/02/GHSA-845f-mm4h-2239/GHSA-845f-mm4h-2239.json +++ b/advisories/unreviewed/2023/02/GHSA-845f-mm4h-2239/GHSA-845f-mm4h-2239.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-849q-f682-346f/GHSA-849q-f682-346f.json b/advisories/unreviewed/2023/02/GHSA-849q-f682-346f/GHSA-849q-f682-346f.json index f28a2c385d0..c9afe0849f4 100644 --- a/advisories/unreviewed/2023/02/GHSA-849q-f682-346f/GHSA-849q-f682-346f.json +++ b/advisories/unreviewed/2023/02/GHSA-849q-f682-346f/GHSA-849q-f682-346f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-86qj-8pw7-hp85/GHSA-86qj-8pw7-hp85.json b/advisories/unreviewed/2023/02/GHSA-86qj-8pw7-hp85/GHSA-86qj-8pw7-hp85.json index a6a7d36f9c8..78be02ed034 100644 --- a/advisories/unreviewed/2023/02/GHSA-86qj-8pw7-hp85/GHSA-86qj-8pw7-hp85.json +++ b/advisories/unreviewed/2023/02/GHSA-86qj-8pw7-hp85/GHSA-86qj-8pw7-hp85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-8f5j-cv86-q574/GHSA-8f5j-cv86-q574.json b/advisories/unreviewed/2023/02/GHSA-8f5j-cv86-q574/GHSA-8f5j-cv86-q574.json index 0d375167de5..d3da3650131 100644 --- a/advisories/unreviewed/2023/02/GHSA-8f5j-cv86-q574/GHSA-8f5j-cv86-q574.json +++ b/advisories/unreviewed/2023/02/GHSA-8f5j-cv86-q574/GHSA-8f5j-cv86-q574.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-8fxh-v75c-xfp4/GHSA-8fxh-v75c-xfp4.json b/advisories/unreviewed/2023/02/GHSA-8fxh-v75c-xfp4/GHSA-8fxh-v75c-xfp4.json index bdcb24c58ad..8a436b8f2f6 100644 --- a/advisories/unreviewed/2023/02/GHSA-8fxh-v75c-xfp4/GHSA-8fxh-v75c-xfp4.json +++ b/advisories/unreviewed/2023/02/GHSA-8fxh-v75c-xfp4/GHSA-8fxh-v75c-xfp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-94vc-8wh3-x5gr/GHSA-94vc-8wh3-x5gr.json b/advisories/unreviewed/2023/02/GHSA-94vc-8wh3-x5gr/GHSA-94vc-8wh3-x5gr.json index 97e8239f1d1..754d3ef59a4 100644 --- a/advisories/unreviewed/2023/02/GHSA-94vc-8wh3-x5gr/GHSA-94vc-8wh3-x5gr.json +++ b/advisories/unreviewed/2023/02/GHSA-94vc-8wh3-x5gr/GHSA-94vc-8wh3-x5gr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c56p-rh7r-f3v9/GHSA-c56p-rh7r-f3v9.json b/advisories/unreviewed/2023/02/GHSA-c56p-rh7r-f3v9/GHSA-c56p-rh7r-f3v9.json index 68a6f778a41..871af2e2a0e 100644 --- a/advisories/unreviewed/2023/02/GHSA-c56p-rh7r-f3v9/GHSA-c56p-rh7r-f3v9.json +++ b/advisories/unreviewed/2023/02/GHSA-c56p-rh7r-f3v9/GHSA-c56p-rh7r-f3v9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c727-vp9q-xfmm/GHSA-c727-vp9q-xfmm.json b/advisories/unreviewed/2023/02/GHSA-c727-vp9q-xfmm/GHSA-c727-vp9q-xfmm.json index 40032405b22..5039975d39b 100644 --- a/advisories/unreviewed/2023/02/GHSA-c727-vp9q-xfmm/GHSA-c727-vp9q-xfmm.json +++ b/advisories/unreviewed/2023/02/GHSA-c727-vp9q-xfmm/GHSA-c727-vp9q-xfmm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c79j-hwqj-4w5h/GHSA-c79j-hwqj-4w5h.json b/advisories/unreviewed/2023/02/GHSA-c79j-hwqj-4w5h/GHSA-c79j-hwqj-4w5h.json index d20522bf1dc..b008ffe1907 100644 --- a/advisories/unreviewed/2023/02/GHSA-c79j-hwqj-4w5h/GHSA-c79j-hwqj-4w5h.json +++ b/advisories/unreviewed/2023/02/GHSA-c79j-hwqj-4w5h/GHSA-c79j-hwqj-4w5h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-ccr7-m2xp-492w/GHSA-ccr7-m2xp-492w.json b/advisories/unreviewed/2023/02/GHSA-ccr7-m2xp-492w/GHSA-ccr7-m2xp-492w.json index d89e0aa6620..1c72bc725c4 100644 --- a/advisories/unreviewed/2023/02/GHSA-ccr7-m2xp-492w/GHSA-ccr7-m2xp-492w.json +++ b/advisories/unreviewed/2023/02/GHSA-ccr7-m2xp-492w/GHSA-ccr7-m2xp-492w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-cr87-3776-x62w/GHSA-cr87-3776-x62w.json b/advisories/unreviewed/2023/02/GHSA-cr87-3776-x62w/GHSA-cr87-3776-x62w.json index 8d1f3ef1739..bbe26f4d6ba 100644 --- a/advisories/unreviewed/2023/02/GHSA-cr87-3776-x62w/GHSA-cr87-3776-x62w.json +++ b/advisories/unreviewed/2023/02/GHSA-cr87-3776-x62w/GHSA-cr87-3776-x62w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-f9jv-w5v2-f33c/GHSA-f9jv-w5v2-f33c.json b/advisories/unreviewed/2023/02/GHSA-f9jv-w5v2-f33c/GHSA-f9jv-w5v2-f33c.json index c6236ccda83..56855afa876 100644 --- a/advisories/unreviewed/2023/02/GHSA-f9jv-w5v2-f33c/GHSA-f9jv-w5v2-f33c.json +++ b/advisories/unreviewed/2023/02/GHSA-f9jv-w5v2-f33c/GHSA-f9jv-w5v2-f33c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-frcg-g67q-7w43/GHSA-frcg-g67q-7w43.json b/advisories/unreviewed/2023/02/GHSA-frcg-g67q-7w43/GHSA-frcg-g67q-7w43.json index 43908627530..a0c2feeff15 100644 --- a/advisories/unreviewed/2023/02/GHSA-frcg-g67q-7w43/GHSA-frcg-g67q-7w43.json +++ b/advisories/unreviewed/2023/02/GHSA-frcg-g67q-7w43/GHSA-frcg-g67q-7w43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-frq3-2crv-2672/GHSA-frq3-2crv-2672.json b/advisories/unreviewed/2023/02/GHSA-frq3-2crv-2672/GHSA-frq3-2crv-2672.json index 877cb41134b..1ae45a1adfa 100644 --- a/advisories/unreviewed/2023/02/GHSA-frq3-2crv-2672/GHSA-frq3-2crv-2672.json +++ b/advisories/unreviewed/2023/02/GHSA-frq3-2crv-2672/GHSA-frq3-2crv-2672.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-g2hh-f779-27g3/GHSA-g2hh-f779-27g3.json b/advisories/unreviewed/2023/02/GHSA-g2hh-f779-27g3/GHSA-g2hh-f779-27g3.json index 9022ea87150..4e1fded9ca9 100644 --- a/advisories/unreviewed/2023/02/GHSA-g2hh-f779-27g3/GHSA-g2hh-f779-27g3.json +++ b/advisories/unreviewed/2023/02/GHSA-g2hh-f779-27g3/GHSA-g2hh-f779-27g3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-gpv7-6398-4j8w/GHSA-gpv7-6398-4j8w.json b/advisories/unreviewed/2023/02/GHSA-gpv7-6398-4j8w/GHSA-gpv7-6398-4j8w.json index 032e3fa7cf0..08670d9a720 100644 --- a/advisories/unreviewed/2023/02/GHSA-gpv7-6398-4j8w/GHSA-gpv7-6398-4j8w.json +++ b/advisories/unreviewed/2023/02/GHSA-gpv7-6398-4j8w/GHSA-gpv7-6398-4j8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-gx2w-4q6v-9jmw/GHSA-gx2w-4q6v-9jmw.json b/advisories/unreviewed/2023/02/GHSA-gx2w-4q6v-9jmw/GHSA-gx2w-4q6v-9jmw.json index f4bee69c108..233598a5b07 100644 --- a/advisories/unreviewed/2023/02/GHSA-gx2w-4q6v-9jmw/GHSA-gx2w-4q6v-9jmw.json +++ b/advisories/unreviewed/2023/02/GHSA-gx2w-4q6v-9jmw/GHSA-gx2w-4q6v-9jmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h22v-xv8r-cg6p/GHSA-h22v-xv8r-cg6p.json b/advisories/unreviewed/2023/02/GHSA-h22v-xv8r-cg6p/GHSA-h22v-xv8r-cg6p.json index d15c8a074b1..60b0b748ed0 100644 --- a/advisories/unreviewed/2023/02/GHSA-h22v-xv8r-cg6p/GHSA-h22v-xv8r-cg6p.json +++ b/advisories/unreviewed/2023/02/GHSA-h22v-xv8r-cg6p/GHSA-h22v-xv8r-cg6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h54v-5w45-6g96/GHSA-h54v-5w45-6g96.json b/advisories/unreviewed/2023/02/GHSA-h54v-5w45-6g96/GHSA-h54v-5w45-6g96.json index 4d63d8513e1..bf5e8dadaa3 100644 --- a/advisories/unreviewed/2023/02/GHSA-h54v-5w45-6g96/GHSA-h54v-5w45-6g96.json +++ b/advisories/unreviewed/2023/02/GHSA-h54v-5w45-6g96/GHSA-h54v-5w45-6g96.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h6jp-c7w6-m434/GHSA-h6jp-c7w6-m434.json b/advisories/unreviewed/2023/02/GHSA-h6jp-c7w6-m434/GHSA-h6jp-c7w6-m434.json index 4d7e2332043..928b441dfc5 100644 --- a/advisories/unreviewed/2023/02/GHSA-h6jp-c7w6-m434/GHSA-h6jp-c7w6-m434.json +++ b/advisories/unreviewed/2023/02/GHSA-h6jp-c7w6-m434/GHSA-h6jp-c7w6-m434.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h97q-jgch-rmg8/GHSA-h97q-jgch-rmg8.json b/advisories/unreviewed/2023/02/GHSA-h97q-jgch-rmg8/GHSA-h97q-jgch-rmg8.json index 9fbe4fc0f8c..8afdd9675fc 100644 --- a/advisories/unreviewed/2023/02/GHSA-h97q-jgch-rmg8/GHSA-h97q-jgch-rmg8.json +++ b/advisories/unreviewed/2023/02/GHSA-h97q-jgch-rmg8/GHSA-h97q-jgch-rmg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hhv2-mgcf-2j9h/GHSA-hhv2-mgcf-2j9h.json b/advisories/unreviewed/2023/02/GHSA-hhv2-mgcf-2j9h/GHSA-hhv2-mgcf-2j9h.json index 37376f949d1..ad2109c3e6f 100644 --- a/advisories/unreviewed/2023/02/GHSA-hhv2-mgcf-2j9h/GHSA-hhv2-mgcf-2j9h.json +++ b/advisories/unreviewed/2023/02/GHSA-hhv2-mgcf-2j9h/GHSA-hhv2-mgcf-2j9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-j36r-7x95-563x/GHSA-j36r-7x95-563x.json b/advisories/unreviewed/2023/02/GHSA-j36r-7x95-563x/GHSA-j36r-7x95-563x.json index fffbd86c922..fc5051d49f9 100644 --- a/advisories/unreviewed/2023/02/GHSA-j36r-7x95-563x/GHSA-j36r-7x95-563x.json +++ b/advisories/unreviewed/2023/02/GHSA-j36r-7x95-563x/GHSA-j36r-7x95-563x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jw7g-f665-c8vw/GHSA-jw7g-f665-c8vw.json b/advisories/unreviewed/2023/02/GHSA-jw7g-f665-c8vw/GHSA-jw7g-f665-c8vw.json index 32c0748ff41..66f2fd28f15 100644 --- a/advisories/unreviewed/2023/02/GHSA-jw7g-f665-c8vw/GHSA-jw7g-f665-c8vw.json +++ b/advisories/unreviewed/2023/02/GHSA-jw7g-f665-c8vw/GHSA-jw7g-f665-c8vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jwxr-mm9c-284w/GHSA-jwxr-mm9c-284w.json b/advisories/unreviewed/2023/02/GHSA-jwxr-mm9c-284w/GHSA-jwxr-mm9c-284w.json index 8ca6dc1c0f2..c12f8d8fe13 100644 --- a/advisories/unreviewed/2023/02/GHSA-jwxr-mm9c-284w/GHSA-jwxr-mm9c-284w.json +++ b/advisories/unreviewed/2023/02/GHSA-jwxr-mm9c-284w/GHSA-jwxr-mm9c-284w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-m9gc-329h-37gp/GHSA-m9gc-329h-37gp.json b/advisories/unreviewed/2023/02/GHSA-m9gc-329h-37gp/GHSA-m9gc-329h-37gp.json index 185e612f3ea..63f5469a4e9 100644 --- a/advisories/unreviewed/2023/02/GHSA-m9gc-329h-37gp/GHSA-m9gc-329h-37gp.json +++ b/advisories/unreviewed/2023/02/GHSA-m9gc-329h-37gp/GHSA-m9gc-329h-37gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mjgf-fjmw-jf84/GHSA-mjgf-fjmw-jf84.json b/advisories/unreviewed/2023/02/GHSA-mjgf-fjmw-jf84/GHSA-mjgf-fjmw-jf84.json index cae0cc1549b..5afa45ecbef 100644 --- a/advisories/unreviewed/2023/02/GHSA-mjgf-fjmw-jf84/GHSA-mjgf-fjmw-jf84.json +++ b/advisories/unreviewed/2023/02/GHSA-mjgf-fjmw-jf84/GHSA-mjgf-fjmw-jf84.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mjqc-x8q3-gphp/GHSA-mjqc-x8q3-gphp.json b/advisories/unreviewed/2023/02/GHSA-mjqc-x8q3-gphp/GHSA-mjqc-x8q3-gphp.json index 017c40794fc..cba91073de2 100644 --- a/advisories/unreviewed/2023/02/GHSA-mjqc-x8q3-gphp/GHSA-mjqc-x8q3-gphp.json +++ b/advisories/unreviewed/2023/02/GHSA-mjqc-x8q3-gphp/GHSA-mjqc-x8q3-gphp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mrx4-mfj9-56xc/GHSA-mrx4-mfj9-56xc.json b/advisories/unreviewed/2023/02/GHSA-mrx4-mfj9-56xc/GHSA-mrx4-mfj9-56xc.json index fedb7f90e44..3fde90ed3b5 100644 --- a/advisories/unreviewed/2023/02/GHSA-mrx4-mfj9-56xc/GHSA-mrx4-mfj9-56xc.json +++ b/advisories/unreviewed/2023/02/GHSA-mrx4-mfj9-56xc/GHSA-mrx4-mfj9-56xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pc48-9j3j-4v3w/GHSA-pc48-9j3j-4v3w.json b/advisories/unreviewed/2023/02/GHSA-pc48-9j3j-4v3w/GHSA-pc48-9j3j-4v3w.json index 67aec70f8e4..9300445c0cc 100644 --- a/advisories/unreviewed/2023/02/GHSA-pc48-9j3j-4v3w/GHSA-pc48-9j3j-4v3w.json +++ b/advisories/unreviewed/2023/02/GHSA-pc48-9j3j-4v3w/GHSA-pc48-9j3j-4v3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pc8p-68gv-cv22/GHSA-pc8p-68gv-cv22.json b/advisories/unreviewed/2023/02/GHSA-pc8p-68gv-cv22/GHSA-pc8p-68gv-cv22.json index c76a7bd17d9..1e70f9d4547 100644 --- a/advisories/unreviewed/2023/02/GHSA-pc8p-68gv-cv22/GHSA-pc8p-68gv-cv22.json +++ b/advisories/unreviewed/2023/02/GHSA-pc8p-68gv-cv22/GHSA-pc8p-68gv-cv22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pmvq-4gg6-p4px/GHSA-pmvq-4gg6-p4px.json b/advisories/unreviewed/2023/02/GHSA-pmvq-4gg6-p4px/GHSA-pmvq-4gg6-p4px.json index c58918fb18c..d0bc0b72d9e 100644 --- a/advisories/unreviewed/2023/02/GHSA-pmvq-4gg6-p4px/GHSA-pmvq-4gg6-p4px.json +++ b/advisories/unreviewed/2023/02/GHSA-pmvq-4gg6-p4px/GHSA-pmvq-4gg6-p4px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pvq4-73cw-rg9h/GHSA-pvq4-73cw-rg9h.json b/advisories/unreviewed/2023/02/GHSA-pvq4-73cw-rg9h/GHSA-pvq4-73cw-rg9h.json index cb00b28ff86..612b17e97f4 100644 --- a/advisories/unreviewed/2023/02/GHSA-pvq4-73cw-rg9h/GHSA-pvq4-73cw-rg9h.json +++ b/advisories/unreviewed/2023/02/GHSA-pvq4-73cw-rg9h/GHSA-pvq4-73cw-rg9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-q9wm-mphh-pw22/GHSA-q9wm-mphh-pw22.json b/advisories/unreviewed/2023/02/GHSA-q9wm-mphh-pw22/GHSA-q9wm-mphh-pw22.json index 479db1badb6..b9553b31e94 100644 --- a/advisories/unreviewed/2023/02/GHSA-q9wm-mphh-pw22/GHSA-q9wm-mphh-pw22.json +++ b/advisories/unreviewed/2023/02/GHSA-q9wm-mphh-pw22/GHSA-q9wm-mphh-pw22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-qf6x-7g55-4wgc/GHSA-qf6x-7g55-4wgc.json b/advisories/unreviewed/2023/02/GHSA-qf6x-7g55-4wgc/GHSA-qf6x-7g55-4wgc.json index 3d0a90d3543..b1852cbaef0 100644 --- a/advisories/unreviewed/2023/02/GHSA-qf6x-7g55-4wgc/GHSA-qf6x-7g55-4wgc.json +++ b/advisories/unreviewed/2023/02/GHSA-qf6x-7g55-4wgc/GHSA-qf6x-7g55-4wgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-qwq7-63pm-p4wv/GHSA-qwq7-63pm-p4wv.json b/advisories/unreviewed/2023/02/GHSA-qwq7-63pm-p4wv/GHSA-qwq7-63pm-p4wv.json index c072db2f9d0..555dd92c30f 100644 --- a/advisories/unreviewed/2023/02/GHSA-qwq7-63pm-p4wv/GHSA-qwq7-63pm-p4wv.json +++ b/advisories/unreviewed/2023/02/GHSA-qwq7-63pm-p4wv/GHSA-qwq7-63pm-p4wv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-r8f3-7jxf-3847/GHSA-r8f3-7jxf-3847.json b/advisories/unreviewed/2023/02/GHSA-r8f3-7jxf-3847/GHSA-r8f3-7jxf-3847.json index 4ee03c04735..efe723b83aa 100644 --- a/advisories/unreviewed/2023/02/GHSA-r8f3-7jxf-3847/GHSA-r8f3-7jxf-3847.json +++ b/advisories/unreviewed/2023/02/GHSA-r8f3-7jxf-3847/GHSA-r8f3-7jxf-3847.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rj4v-5cv9-wmrx/GHSA-rj4v-5cv9-wmrx.json b/advisories/unreviewed/2023/02/GHSA-rj4v-5cv9-wmrx/GHSA-rj4v-5cv9-wmrx.json index bc45966a9b5..8b0ecb5dbcc 100644 --- a/advisories/unreviewed/2023/02/GHSA-rj4v-5cv9-wmrx/GHSA-rj4v-5cv9-wmrx.json +++ b/advisories/unreviewed/2023/02/GHSA-rj4v-5cv9-wmrx/GHSA-rj4v-5cv9-wmrx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-v873-hw3x-47fh/GHSA-v873-hw3x-47fh.json b/advisories/unreviewed/2023/02/GHSA-v873-hw3x-47fh/GHSA-v873-hw3x-47fh.json index 035cbe37e49..efdcca0b1e2 100644 --- a/advisories/unreviewed/2023/02/GHSA-v873-hw3x-47fh/GHSA-v873-hw3x-47fh.json +++ b/advisories/unreviewed/2023/02/GHSA-v873-hw3x-47fh/GHSA-v873-hw3x-47fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-vvr6-2w5f-52qh/GHSA-vvr6-2w5f-52qh.json b/advisories/unreviewed/2023/02/GHSA-vvr6-2w5f-52qh/GHSA-vvr6-2w5f-52qh.json index 560843c4316..45c86a6425d 100644 --- a/advisories/unreviewed/2023/02/GHSA-vvr6-2w5f-52qh/GHSA-vvr6-2w5f-52qh.json +++ b/advisories/unreviewed/2023/02/GHSA-vvr6-2w5f-52qh/GHSA-vvr6-2w5f-52qh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-w3v6-4gf2-mrx7/GHSA-w3v6-4gf2-mrx7.json b/advisories/unreviewed/2023/02/GHSA-w3v6-4gf2-mrx7/GHSA-w3v6-4gf2-mrx7.json index f670a27122b..002a06f6610 100644 --- a/advisories/unreviewed/2023/02/GHSA-w3v6-4gf2-mrx7/GHSA-w3v6-4gf2-mrx7.json +++ b/advisories/unreviewed/2023/02/GHSA-w3v6-4gf2-mrx7/GHSA-w3v6-4gf2-mrx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wc8f-2g9x-rr52/GHSA-wc8f-2g9x-rr52.json b/advisories/unreviewed/2023/02/GHSA-wc8f-2g9x-rr52/GHSA-wc8f-2g9x-rr52.json index dc239a989d1..e2c16e335ba 100644 --- a/advisories/unreviewed/2023/02/GHSA-wc8f-2g9x-rr52/GHSA-wc8f-2g9x-rr52.json +++ b/advisories/unreviewed/2023/02/GHSA-wc8f-2g9x-rr52/GHSA-wc8f-2g9x-rr52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-whfj-p5r5-33pr/GHSA-whfj-p5r5-33pr.json b/advisories/unreviewed/2023/02/GHSA-whfj-p5r5-33pr/GHSA-whfj-p5r5-33pr.json index c730b321f72..bf17c0a9290 100644 --- a/advisories/unreviewed/2023/02/GHSA-whfj-p5r5-33pr/GHSA-whfj-p5r5-33pr.json +++ b/advisories/unreviewed/2023/02/GHSA-whfj-p5r5-33pr/GHSA-whfj-p5r5-33pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-wp35-336h-g4rc/GHSA-wp35-336h-g4rc.json b/advisories/unreviewed/2023/02/GHSA-wp35-336h-g4rc/GHSA-wp35-336h-g4rc.json index 29def34b350..d783fb85a5a 100644 --- a/advisories/unreviewed/2023/02/GHSA-wp35-336h-g4rc/GHSA-wp35-336h-g4rc.json +++ b/advisories/unreviewed/2023/02/GHSA-wp35-336h-g4rc/GHSA-wp35-336h-g4rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wpp3-4hgh-2h7m/GHSA-wpp3-4hgh-2h7m.json b/advisories/unreviewed/2023/02/GHSA-wpp3-4hgh-2h7m/GHSA-wpp3-4hgh-2h7m.json index 360726ef686..b5b857e1daf 100644 --- a/advisories/unreviewed/2023/02/GHSA-wpp3-4hgh-2h7m/GHSA-wpp3-4hgh-2h7m.json +++ b/advisories/unreviewed/2023/02/GHSA-wpp3-4hgh-2h7m/GHSA-wpp3-4hgh-2h7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-x8f4-mm5h-f849/GHSA-x8f4-mm5h-f849.json b/advisories/unreviewed/2023/02/GHSA-x8f4-mm5h-f849/GHSA-x8f4-mm5h-f849.json index 4b86844b8c4..f465ed1df98 100644 --- a/advisories/unreviewed/2023/02/GHSA-x8f4-mm5h-f849/GHSA-x8f4-mm5h-f849.json +++ b/advisories/unreviewed/2023/02/GHSA-x8f4-mm5h-f849/GHSA-x8f4-mm5h-f849.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-xh2r-vr89-qm22/GHSA-xh2r-vr89-qm22.json b/advisories/unreviewed/2023/02/GHSA-xh2r-vr89-qm22/GHSA-xh2r-vr89-qm22.json index e9d24ac4d85..85b6e8dcfd4 100644 --- a/advisories/unreviewed/2023/02/GHSA-xh2r-vr89-qm22/GHSA-xh2r-vr89-qm22.json +++ b/advisories/unreviewed/2023/02/GHSA-xh2r-vr89-qm22/GHSA-xh2r-vr89-qm22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-5qfh-qxwg-gpxg/GHSA-5qfh-qxwg-gpxg.json b/advisories/unreviewed/2023/03/GHSA-5qfh-qxwg-gpxg/GHSA-5qfh-qxwg-gpxg.json index 13a397b0407..3e7a12d5ac6 100644 --- a/advisories/unreviewed/2023/03/GHSA-5qfh-qxwg-gpxg/GHSA-5qfh-qxwg-gpxg.json +++ b/advisories/unreviewed/2023/03/GHSA-5qfh-qxwg-gpxg/GHSA-5qfh-qxwg-gpxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-89wc-cwr5-9cgv/GHSA-89wc-cwr5-9cgv.json b/advisories/unreviewed/2023/03/GHSA-89wc-cwr5-9cgv/GHSA-89wc-cwr5-9cgv.json index 61b24e7cdc9..2c553d2989a 100644 --- a/advisories/unreviewed/2023/03/GHSA-89wc-cwr5-9cgv/GHSA-89wc-cwr5-9cgv.json +++ b/advisories/unreviewed/2023/03/GHSA-89wc-cwr5-9cgv/GHSA-89wc-cwr5-9cgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-rpjc-6j27-m3gp/GHSA-rpjc-6j27-m3gp.json b/advisories/unreviewed/2023/03/GHSA-rpjc-6j27-m3gp/GHSA-rpjc-6j27-m3gp.json index e074331099d..cd52716b712 100644 --- a/advisories/unreviewed/2023/03/GHSA-rpjc-6j27-m3gp/GHSA-rpjc-6j27-m3gp.json +++ b/advisories/unreviewed/2023/03/GHSA-rpjc-6j27-m3gp/GHSA-rpjc-6j27-m3gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/05/GHSA-xcr3-gpqj-cfwr/GHSA-xcr3-gpqj-cfwr.json b/advisories/unreviewed/2023/05/GHSA-xcr3-gpqj-cfwr/GHSA-xcr3-gpqj-cfwr.json index b4a69bbdcf5..f6648bc3001 100644 --- a/advisories/unreviewed/2023/05/GHSA-xcr3-gpqj-cfwr/GHSA-xcr3-gpqj-cfwr.json +++ b/advisories/unreviewed/2023/05/GHSA-xcr3-gpqj-cfwr/GHSA-xcr3-gpqj-cfwr.json @@ -7,12 +7,8 @@ "CVE-2023-34255" ], "details": "An issue was discovered in the Linux kernel through 6.3.5. There is a use-after-free in xfs_btree_lookup_get_block in fs/xfs/libxfs/xfs_btree.c because fs/xfs/xfs_buf_item_recover.c does not perform buffer content verification when log replay is skipped.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/06/GHSA-qj29-8vrc-6m34/GHSA-qj29-8vrc-6m34.json b/advisories/unreviewed/2023/06/GHSA-qj29-8vrc-6m34/GHSA-qj29-8vrc-6m34.json index 547066c8917..bf55d441e03 100644 --- a/advisories/unreviewed/2023/06/GHSA-qj29-8vrc-6m34/GHSA-qj29-8vrc-6m34.json +++ b/advisories/unreviewed/2023/06/GHSA-qj29-8vrc-6m34/GHSA-qj29-8vrc-6m34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/06/GHSA-v85g-h95p-h44c/GHSA-v85g-h95p-h44c.json b/advisories/unreviewed/2023/06/GHSA-v85g-h95p-h44c/GHSA-v85g-h95p-h44c.json index f002d75c016..f24675db8ed 100644 --- a/advisories/unreviewed/2023/06/GHSA-v85g-h95p-h44c/GHSA-v85g-h95p-h44c.json +++ b/advisories/unreviewed/2023/06/GHSA-v85g-h95p-h44c/GHSA-v85g-h95p-h44c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-5852-j2m5-mf5f/GHSA-5852-j2m5-mf5f.json b/advisories/unreviewed/2023/07/GHSA-5852-j2m5-mf5f/GHSA-5852-j2m5-mf5f.json index 92285d59844..64defe05960 100644 --- a/advisories/unreviewed/2023/07/GHSA-5852-j2m5-mf5f/GHSA-5852-j2m5-mf5f.json +++ b/advisories/unreviewed/2023/07/GHSA-5852-j2m5-mf5f/GHSA-5852-j2m5-mf5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-xjm8-9w9g-9h2f/GHSA-xjm8-9w9g-9h2f.json b/advisories/unreviewed/2023/07/GHSA-xjm8-9w9g-9h2f/GHSA-xjm8-9w9g-9h2f.json index a55d0dcbadf..aa3b1142e97 100644 --- a/advisories/unreviewed/2023/07/GHSA-xjm8-9w9g-9h2f/GHSA-xjm8-9w9g-9h2f.json +++ b/advisories/unreviewed/2023/07/GHSA-xjm8-9w9g-9h2f/GHSA-xjm8-9w9g-9h2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-25m9-7chx-gp49/GHSA-25m9-7chx-gp49.json b/advisories/unreviewed/2023/11/GHSA-25m9-7chx-gp49/GHSA-25m9-7chx-gp49.json index 5b3e58e4da4..46df4e273ab 100644 --- a/advisories/unreviewed/2023/11/GHSA-25m9-7chx-gp49/GHSA-25m9-7chx-gp49.json +++ b/advisories/unreviewed/2023/11/GHSA-25m9-7chx-gp49/GHSA-25m9-7chx-gp49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-3r69-fx9p-7pjc/GHSA-3r69-fx9p-7pjc.json b/advisories/unreviewed/2023/11/GHSA-3r69-fx9p-7pjc/GHSA-3r69-fx9p-7pjc.json index 0b8748dd63e..c6a39b12f3f 100644 --- a/advisories/unreviewed/2023/11/GHSA-3r69-fx9p-7pjc/GHSA-3r69-fx9p-7pjc.json +++ b/advisories/unreviewed/2023/11/GHSA-3r69-fx9p-7pjc/GHSA-3r69-fx9p-7pjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-5grf-qfvv-5x6v/GHSA-5grf-qfvv-5x6v.json b/advisories/unreviewed/2023/11/GHSA-5grf-qfvv-5x6v/GHSA-5grf-qfvv-5x6v.json index d9a65f8f41f..7fa1d0a67de 100644 --- a/advisories/unreviewed/2023/11/GHSA-5grf-qfvv-5x6v/GHSA-5grf-qfvv-5x6v.json +++ b/advisories/unreviewed/2023/11/GHSA-5grf-qfvv-5x6v/GHSA-5grf-qfvv-5x6v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-2vv4-6qfr-v4vp/GHSA-2vv4-6qfr-v4vp.json b/advisories/unreviewed/2023/12/GHSA-2vv4-6qfr-v4vp/GHSA-2vv4-6qfr-v4vp.json index c6e64a16807..a1cf1bf7241 100644 --- a/advisories/unreviewed/2023/12/GHSA-2vv4-6qfr-v4vp/GHSA-2vv4-6qfr-v4vp.json +++ b/advisories/unreviewed/2023/12/GHSA-2vv4-6qfr-v4vp/GHSA-2vv4-6qfr-v4vp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-395p-v3qv-q9fr/GHSA-395p-v3qv-q9fr.json b/advisories/unreviewed/2023/12/GHSA-395p-v3qv-q9fr/GHSA-395p-v3qv-q9fr.json index 6262673bfb8..2c84f81364c 100644 --- a/advisories/unreviewed/2023/12/GHSA-395p-v3qv-q9fr/GHSA-395p-v3qv-q9fr.json +++ b/advisories/unreviewed/2023/12/GHSA-395p-v3qv-q9fr/GHSA-395p-v3qv-q9fr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-3wwc-jjmg-r6gq/GHSA-3wwc-jjmg-r6gq.json b/advisories/unreviewed/2023/12/GHSA-3wwc-jjmg-r6gq/GHSA-3wwc-jjmg-r6gq.json index caa531738fb..7b81196a8d7 100644 --- a/advisories/unreviewed/2023/12/GHSA-3wwc-jjmg-r6gq/GHSA-3wwc-jjmg-r6gq.json +++ b/advisories/unreviewed/2023/12/GHSA-3wwc-jjmg-r6gq/GHSA-3wwc-jjmg-r6gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-3x3c-pjw5-pjr2/GHSA-3x3c-pjw5-pjr2.json b/advisories/unreviewed/2023/12/GHSA-3x3c-pjw5-pjr2/GHSA-3x3c-pjw5-pjr2.json index f0e9ab22a2d..495d2ceea83 100644 --- a/advisories/unreviewed/2023/12/GHSA-3x3c-pjw5-pjr2/GHSA-3x3c-pjw5-pjr2.json +++ b/advisories/unreviewed/2023/12/GHSA-3x3c-pjw5-pjr2/GHSA-3x3c-pjw5-pjr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-5795-893f-fhqm/GHSA-5795-893f-fhqm.json b/advisories/unreviewed/2023/12/GHSA-5795-893f-fhqm/GHSA-5795-893f-fhqm.json index a2166eafa3a..83eeb721cb1 100644 --- a/advisories/unreviewed/2023/12/GHSA-5795-893f-fhqm/GHSA-5795-893f-fhqm.json +++ b/advisories/unreviewed/2023/12/GHSA-5795-893f-fhqm/GHSA-5795-893f-fhqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-6wgj-fxqf-wxj2/GHSA-6wgj-fxqf-wxj2.json b/advisories/unreviewed/2023/12/GHSA-6wgj-fxqf-wxj2/GHSA-6wgj-fxqf-wxj2.json index 8e7d687fa6f..25f1295aec8 100644 --- a/advisories/unreviewed/2023/12/GHSA-6wgj-fxqf-wxj2/GHSA-6wgj-fxqf-wxj2.json +++ b/advisories/unreviewed/2023/12/GHSA-6wgj-fxqf-wxj2/GHSA-6wgj-fxqf-wxj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-84gg-pfmr-wx79/GHSA-84gg-pfmr-wx79.json b/advisories/unreviewed/2023/12/GHSA-84gg-pfmr-wx79/GHSA-84gg-pfmr-wx79.json index b5eeaee4cea..74a82b116b0 100644 --- a/advisories/unreviewed/2023/12/GHSA-84gg-pfmr-wx79/GHSA-84gg-pfmr-wx79.json +++ b/advisories/unreviewed/2023/12/GHSA-84gg-pfmr-wx79/GHSA-84gg-pfmr-wx79.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-g2v5-2pcr-q98p/GHSA-g2v5-2pcr-q98p.json b/advisories/unreviewed/2023/12/GHSA-g2v5-2pcr-q98p/GHSA-g2v5-2pcr-q98p.json index 0c910b4da0a..2bdf9bd77b9 100644 --- a/advisories/unreviewed/2023/12/GHSA-g2v5-2pcr-q98p/GHSA-g2v5-2pcr-q98p.json +++ b/advisories/unreviewed/2023/12/GHSA-g2v5-2pcr-q98p/GHSA-g2v5-2pcr-q98p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-gh7w-q9rm-c8w9/GHSA-gh7w-q9rm-c8w9.json b/advisories/unreviewed/2023/12/GHSA-gh7w-q9rm-c8w9/GHSA-gh7w-q9rm-c8w9.json index de940a4a156..476fe88a4fb 100644 --- a/advisories/unreviewed/2023/12/GHSA-gh7w-q9rm-c8w9/GHSA-gh7w-q9rm-c8w9.json +++ b/advisories/unreviewed/2023/12/GHSA-gh7w-q9rm-c8w9/GHSA-gh7w-q9rm-c8w9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-m73r-2fp3-47jw/GHSA-m73r-2fp3-47jw.json b/advisories/unreviewed/2023/12/GHSA-m73r-2fp3-47jw/GHSA-m73r-2fp3-47jw.json index 877fdde0d95..918b8202ba5 100644 --- a/advisories/unreviewed/2023/12/GHSA-m73r-2fp3-47jw/GHSA-m73r-2fp3-47jw.json +++ b/advisories/unreviewed/2023/12/GHSA-m73r-2fp3-47jw/GHSA-m73r-2fp3-47jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-p4c2-74w6-prrq/GHSA-p4c2-74w6-prrq.json b/advisories/unreviewed/2023/12/GHSA-p4c2-74w6-prrq/GHSA-p4c2-74w6-prrq.json index 2e6b88d6c1a..3e3e8e3ccf0 100644 --- a/advisories/unreviewed/2023/12/GHSA-p4c2-74w6-prrq/GHSA-p4c2-74w6-prrq.json +++ b/advisories/unreviewed/2023/12/GHSA-p4c2-74w6-prrq/GHSA-p4c2-74w6-prrq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-pfc5-vgx2-jqhh/GHSA-pfc5-vgx2-jqhh.json b/advisories/unreviewed/2023/12/GHSA-pfc5-vgx2-jqhh/GHSA-pfc5-vgx2-jqhh.json index 68abd1f3474..759b19b8f99 100644 --- a/advisories/unreviewed/2023/12/GHSA-pfc5-vgx2-jqhh/GHSA-pfc5-vgx2-jqhh.json +++ b/advisories/unreviewed/2023/12/GHSA-pfc5-vgx2-jqhh/GHSA-pfc5-vgx2-jqhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-rw69-wr48-w7px/GHSA-rw69-wr48-w7px.json b/advisories/unreviewed/2023/12/GHSA-rw69-wr48-w7px/GHSA-rw69-wr48-w7px.json index 9d69ec37ee6..730078dda6e 100644 --- a/advisories/unreviewed/2023/12/GHSA-rw69-wr48-w7px/GHSA-rw69-wr48-w7px.json +++ b/advisories/unreviewed/2023/12/GHSA-rw69-wr48-w7px/GHSA-rw69-wr48-w7px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vvx8-mpx4-rjqm/GHSA-vvx8-mpx4-rjqm.json b/advisories/unreviewed/2023/12/GHSA-vvx8-mpx4-rjqm/GHSA-vvx8-mpx4-rjqm.json index 139759a868d..592f98d31a9 100644 --- a/advisories/unreviewed/2023/12/GHSA-vvx8-mpx4-rjqm/GHSA-vvx8-mpx4-rjqm.json +++ b/advisories/unreviewed/2023/12/GHSA-vvx8-mpx4-rjqm/GHSA-vvx8-mpx4-rjqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vwqh-rcfq-pqf7/GHSA-vwqh-rcfq-pqf7.json b/advisories/unreviewed/2023/12/GHSA-vwqh-rcfq-pqf7/GHSA-vwqh-rcfq-pqf7.json index aab0fbf44e9..1911602ae6c 100644 --- a/advisories/unreviewed/2023/12/GHSA-vwqh-rcfq-pqf7/GHSA-vwqh-rcfq-pqf7.json +++ b/advisories/unreviewed/2023/12/GHSA-vwqh-rcfq-pqf7/GHSA-vwqh-rcfq-pqf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-2566-fq23-672g/GHSA-2566-fq23-672g.json b/advisories/unreviewed/2024/01/GHSA-2566-fq23-672g/GHSA-2566-fq23-672g.json index 6065a0a3f3b..60ed0fef1bd 100644 --- a/advisories/unreviewed/2024/01/GHSA-2566-fq23-672g/GHSA-2566-fq23-672g.json +++ b/advisories/unreviewed/2024/01/GHSA-2566-fq23-672g/GHSA-2566-fq23-672g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-2x9g-7p85-5wvx/GHSA-2x9g-7p85-5wvx.json b/advisories/unreviewed/2024/01/GHSA-2x9g-7p85-5wvx/GHSA-2x9g-7p85-5wvx.json index f2261963873..4589c3d3bda 100644 --- a/advisories/unreviewed/2024/01/GHSA-2x9g-7p85-5wvx/GHSA-2x9g-7p85-5wvx.json +++ b/advisories/unreviewed/2024/01/GHSA-2x9g-7p85-5wvx/GHSA-2x9g-7p85-5wvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3qj9-29x6-pfxc/GHSA-3qj9-29x6-pfxc.json b/advisories/unreviewed/2024/01/GHSA-3qj9-29x6-pfxc/GHSA-3qj9-29x6-pfxc.json index 230b7b9a04d..3ab84c7e9fc 100644 --- a/advisories/unreviewed/2024/01/GHSA-3qj9-29x6-pfxc/GHSA-3qj9-29x6-pfxc.json +++ b/advisories/unreviewed/2024/01/GHSA-3qj9-29x6-pfxc/GHSA-3qj9-29x6-pfxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-46jq-f6pc-3rhw/GHSA-46jq-f6pc-3rhw.json b/advisories/unreviewed/2024/01/GHSA-46jq-f6pc-3rhw/GHSA-46jq-f6pc-3rhw.json index 4b0ca69df94..68bae9aea5d 100644 --- a/advisories/unreviewed/2024/01/GHSA-46jq-f6pc-3rhw/GHSA-46jq-f6pc-3rhw.json +++ b/advisories/unreviewed/2024/01/GHSA-46jq-f6pc-3rhw/GHSA-46jq-f6pc-3rhw.json @@ -7,12 +7,8 @@ "CVE-2023-51195" ], "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-4v35-68f6-rfpq/GHSA-4v35-68f6-rfpq.json b/advisories/unreviewed/2024/01/GHSA-4v35-68f6-rfpq/GHSA-4v35-68f6-rfpq.json index bffc93fffbe..3c9ab6a5ffa 100644 --- a/advisories/unreviewed/2024/01/GHSA-4v35-68f6-rfpq/GHSA-4v35-68f6-rfpq.json +++ b/advisories/unreviewed/2024/01/GHSA-4v35-68f6-rfpq/GHSA-4v35-68f6-rfpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5cpg-h4r2-65fc/GHSA-5cpg-h4r2-65fc.json b/advisories/unreviewed/2024/01/GHSA-5cpg-h4r2-65fc/GHSA-5cpg-h4r2-65fc.json index d64f2131e4c..56675883b19 100644 --- a/advisories/unreviewed/2024/01/GHSA-5cpg-h4r2-65fc/GHSA-5cpg-h4r2-65fc.json +++ b/advisories/unreviewed/2024/01/GHSA-5cpg-h4r2-65fc/GHSA-5cpg-h4r2-65fc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-6m9q-9m44-9hvq/GHSA-6m9q-9m44-9hvq.json b/advisories/unreviewed/2024/01/GHSA-6m9q-9m44-9hvq/GHSA-6m9q-9m44-9hvq.json index 46cfd4889d8..891f3005a29 100644 --- a/advisories/unreviewed/2024/01/GHSA-6m9q-9m44-9hvq/GHSA-6m9q-9m44-9hvq.json +++ b/advisories/unreviewed/2024/01/GHSA-6m9q-9m44-9hvq/GHSA-6m9q-9m44-9hvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-g78g-7qh3-cvvv/GHSA-g78g-7qh3-cvvv.json b/advisories/unreviewed/2024/01/GHSA-g78g-7qh3-cvvv/GHSA-g78g-7qh3-cvvv.json index 5d9e37780f9..07a2e2ed11a 100644 --- a/advisories/unreviewed/2024/01/GHSA-g78g-7qh3-cvvv/GHSA-g78g-7qh3-cvvv.json +++ b/advisories/unreviewed/2024/01/GHSA-g78g-7qh3-cvvv/GHSA-g78g-7qh3-cvvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jxch-62jx-98vm/GHSA-jxch-62jx-98vm.json b/advisories/unreviewed/2024/01/GHSA-jxch-62jx-98vm/GHSA-jxch-62jx-98vm.json index ba938c645d5..3dadefe3e74 100644 --- a/advisories/unreviewed/2024/01/GHSA-jxch-62jx-98vm/GHSA-jxch-62jx-98vm.json +++ b/advisories/unreviewed/2024/01/GHSA-jxch-62jx-98vm/GHSA-jxch-62jx-98vm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pr66-q9h8-2vj7/GHSA-pr66-q9h8-2vj7.json b/advisories/unreviewed/2024/01/GHSA-pr66-q9h8-2vj7/GHSA-pr66-q9h8-2vj7.json index bfdc68e3abe..c206db10789 100644 --- a/advisories/unreviewed/2024/01/GHSA-pr66-q9h8-2vj7/GHSA-pr66-q9h8-2vj7.json +++ b/advisories/unreviewed/2024/01/GHSA-pr66-q9h8-2vj7/GHSA-pr66-q9h8-2vj7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vcg2-xp5m-jf8w/GHSA-vcg2-xp5m-jf8w.json b/advisories/unreviewed/2024/01/GHSA-vcg2-xp5m-jf8w/GHSA-vcg2-xp5m-jf8w.json index cee7b6696a1..228daceeab6 100644 --- a/advisories/unreviewed/2024/01/GHSA-vcg2-xp5m-jf8w/GHSA-vcg2-xp5m-jf8w.json +++ b/advisories/unreviewed/2024/01/GHSA-vcg2-xp5m-jf8w/GHSA-vcg2-xp5m-jf8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vqxw-xvvw-r4g2/GHSA-vqxw-xvvw-r4g2.json b/advisories/unreviewed/2024/01/GHSA-vqxw-xvvw-r4g2/GHSA-vqxw-xvvw-r4g2.json index 772e7d76b30..6a8aba7b388 100644 --- a/advisories/unreviewed/2024/01/GHSA-vqxw-xvvw-r4g2/GHSA-vqxw-xvvw-r4g2.json +++ b/advisories/unreviewed/2024/01/GHSA-vqxw-xvvw-r4g2/GHSA-vqxw-xvvw-r4g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-w7f5-hqxf-hc7m/GHSA-w7f5-hqxf-hc7m.json b/advisories/unreviewed/2024/01/GHSA-w7f5-hqxf-hc7m/GHSA-w7f5-hqxf-hc7m.json index 23cbaab576f..ef2633d4e7f 100644 --- a/advisories/unreviewed/2024/01/GHSA-w7f5-hqxf-hc7m/GHSA-w7f5-hqxf-hc7m.json +++ b/advisories/unreviewed/2024/01/GHSA-w7f5-hqxf-hc7m/GHSA-w7f5-hqxf-hc7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",